diff --git a/includes/functions.php b/includes/functions.php
index 316665d3..31790d5b 100755
--- a/includes/functions.php
+++ b/includes/functions.php
@@ -67,6 +67,15 @@ function CSRFToken()
 <?php
 }
 
+/**
+* Retuns a CSRF meta tag (for use with xhr, for example)
+*/
+function CSRFMetaTag()
+{
+    $token = htmlspecialchars($_SESSION['csrf_token']);
+    return '<meta name="csrf_token" content="' . $token . '">';
+}
+
 /**
 *
 * Validate CSRF Token
diff --git a/index.php b/index.php
index e8af838a..f204ea12 100755
--- a/index.php
+++ b/index.php
@@ -64,6 +64,7 @@ $theme_url = 'dist/css/'.htmlspecialchars($theme, ENT_QUOTES);
 <html lang="en">
   <head>
     <meta charset="utf-8">
+    <?php echo CSRFMetaTag() ?>
     <meta http-equiv="X-UA-Compatible" content="IE=edge">
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <meta name="description" content="">
