diff --git a/htdocs/artefact/blog/index.php b/htdocs/artefact/blog/index.php
index 5c2b7e9..60d053d 100644
--- a/htdocs/artefact/blog/index.php
+++ b/htdocs/artefact/blog/index.php
@@ -37,6 +37,7 @@ safe_require('artefact', 'blog');
 define('TITLE', get_string('myblogs','artefact.blog'));
 
 if ($delete = param_integer('delete', 0)) {
+    form_validate(param_alphanum('sesskey', null));
     $blog = artefact_instance_from_id($delete);
     if ($blog instanceof ArtefactTypeBlog) {
         $blog->check_permission();
diff --git a/htdocs/artefact/blog/theme/raw/bloglist.tpl b/htdocs/artefact/blog/theme/raw/bloglist.tpl
index a096798..6fe3b1a 100644
--- a/htdocs/artefact/blog/theme/raw/bloglist.tpl
+++ b/htdocs/artefact/blog/theme/raw/bloglist.tpl
@@ -1,7 +1,7 @@
 <script type="text/javascript">
     function confirmdelete(id) {
         if(confirm("{str tag=deleteblog? section=artefact.blog}")) {
-            window.location = "{$WWWROOT}artefact/blog/index.php?delete=" + id;
+            window.location = "{$WWWROOT}artefact/blog/index.php?delete=" + id + '&sesskey=' + config.sesskey;
         }
     }
 </script>