diff --git a/src/application/views/appointments/book.php b/src/application/views/appointments/book.php
index c47f3427..ca719f58 100644
--- a/src/application/views/appointments/book.php
+++ b/src/application/views/appointments/book.php
@@ -374,6 +374,7 @@
                                             : $this->lang->line('update');
                                 ?>
                             </button>
+                            <input type="hidden" name="csrfToken" />
                             <input type="hidden" name="post_data" />
                         </form>
                     </div>
diff --git a/src/assets/js/frontend_book.js b/src/assets/js/frontend_book.js
index d8d6c0a5..ded2011a 100644
--- a/src/assets/js/frontend_book.js
+++ b/src/assets/js/frontend_book.js
@@ -481,7 +481,7 @@ var FrontendBook = {
             postData['appointment']['id'] = GlobalVariables.appointmentData['id'];
             postData['customer']['id'] = GlobalVariables.customerData['id'];
         }
-        
+        $('input[name="csrfToken"]').val(GlobalVariables.csrfToken);
         $('input[name="post_data"]').val(JSON.stringify(postData));
     },