diff --git a/custom/templates/DefaultRevamp/forum/view_topic.tpl b/custom/templates/DefaultRevamp/forum/view_topic.tpl
index a6fe7fa208..19ee969809 100755
--- a/custom/templates/DefaultRevamp/forum/view_topic.tpl
+++ b/custom/templates/DefaultRevamp/forum/view_topic.tpl
@@ -61,7 +61,10 @@
     <a class="ui small primary button" href="{$FOLLOW_URL}">{$FOLLOW}</a>
   {/if}
   {if isset($CAN_MODERATE)}
-    <form action="{$LOCK_URL}" method="post" id="lockPost" style="display: none">
+    <form action="{$LOCK_URL}" method="post" id="lockTopic" style="display: none">
+      <input type="hidden" value="{$TOKEN}" name="token" />
+    </form>
+    <form action="{$STICK_URL}" method="post" id="stickTopic" style="display: none">
       <input type="hidden" value="{$TOKEN}" name="token" />
     </form>
     <div class="ui top right pointing dropdown small primary button">
@@ -69,11 +72,11 @@
       <i class="dropdown icon"></i>
       <div class="menu">
         <div class="header">{$MOD_ACTIONS}</div>
-        <a type="submit" class="item" onclick="document.getElementById('lockPost').submit()">{$LOCK}</a>
+        <a type="submit" class="item" onclick="document.getElementById('lockTopic').submit()">{$LOCK}</a>
         <a class="item" href="{$MERGE_URL}">{$MERGE}</a>
         <a class="item" data-toggle="modal" data-target="#modal-delete">{$DELETE}</a>
         <a class="item" href="{$MOVE_URL}">{$MOVE}</a>
-        <a class="item" href="{$STICK_URL}">{$STICK}</a>
+        <a type="submit" class="item" onclick="document.getElementById('stickTopic').submit()">{$STICK}</a>
       </div>
     </div>
   {/if}
diff --git a/modules/Forum/pages/forum/stick.php b/modules/Forum/pages/forum/stick.php
index 980f00429f..1759a7f29f 100644
--- a/modules/Forum/pages/forum/stick.php
+++ b/modules/Forum/pages/forum/stick.php
@@ -2,7 +2,7 @@
 /*
  *	Made by Samerton
  *  https://github.com/NamelessMC/Nameless/
- *  NamelessMC version 2.0.0-pr8
+ *  NamelessMC version 2.0.0-pr12
  *
  *  License: MIT
  *
@@ -39,6 +39,12 @@
     die();
 }
 
+if (!isset($_POST['token']) || !Token::check($_POST['token'])) {
+    Session::flash('failure_post', $language->get('general', 'invalid_token'));
+    Redirect::to(URL::build('/forum/topic/' . $topic_id));
+    die();
+}
+
 $forum_id = $topic[0]->forum_id;
 
 if ($forum->canModerateForum($forum_id, $user->getAllGroupIds())) {