diff --git a/views/admin/reports.erb b/views/admin/reports.erb
index 3b6c0801..4fc8ceff 100644
--- a/views/admin/reports.erb
+++ b/views/admin/reports.erb
@@ -6,6 +6,7 @@
 
 <div class="content" style="background: white">
   <form method="POST" action="/admin/report">
+    <%== csrf_token_input_html %>
     <table class="table">
       <tr>
         <th>Site</th>