diff --git a/code/plugins/authorizenet/authorizenet/tmpl/default.php b/code/plugins/authorizenet/authorizenet/tmpl/default.php
index 58d643f..c5b7ad5 100755
--- a/code/plugins/authorizenet/authorizenet/tmpl/default.php
+++ b/code/plugins/authorizenet/authorizenet/tmpl/default.php
@@ -23,21 +23,18 @@
 
 <script type="text/javascript">
 	function myValidate(f)
-	{
-		if (document.formvalidator.isValid(f))
-		{
-			f.check.value='<?php echo JSession::getFormToken(); ?>';
-			return true;
-		}
-		else
-		{
-			var msg = 'Some values are not acceptable.  Please retry.';
-			alert(msg);
-			plg_auth_showHide();
-		}
+   {
+	if (!document.formvalidator.isValid(f)) {
+		var msg = "<?php echo JText::_('PLG_BYORDER_VALIDATION_MSG'); ?>";
+		alert(msg);
+		plg_auth_showHide();
+
 		return false;
 	}
 
+	return true;
+   }
+
 	function plg_auth_showHide()
 	{
 		// Get the DOM reference
@@ -251,6 +248,7 @@ function plg_auth_showHide()
 				<input type="hidden" name="order_id" size="10" value="<?php echo $vars->order_id; ?>" />
 				<input type="hidden" name="plugin_payment_method" value="onsite" />
 				<input type="submit" name="submit" class="btn btn-success btn-large" value="<?php echo JText::_('SUBMIT');?>" />
+				<?php echo JHtml::_('form.token'); ?>
 			</div>
 		</div>
 	</form>
diff --git a/code/plugins/authorizenet/authorizenet/tmpl/default_bs3.php b/code/plugins/authorizenet/authorizenet/tmpl/default_bs3.php
index 5f505d2..ad3904e 100755
--- a/code/plugins/authorizenet/authorizenet/tmpl/default_bs3.php
+++ b/code/plugins/authorizenet/authorizenet/tmpl/default_bs3.php
@@ -23,16 +23,15 @@
 <script type="text/javascript">
    function myValidate(f)
    {
-	if (document.formvalidator.isValid(f)) {
-		f.check.value='<?php echo JSession::getFormToken(); ?>';
-		return true;
-	}
-	else {
-		var msg = 'Some values are not acceptable.  Please retry.';
+	if (!document.formvalidator.isValid(f)) {
+		var msg = "<?php echo JText::_('PLG_BYORDER_VALIDATION_MSG'); ?>";
 		alert(msg);
 		plg_auth_showHide();
+
+		return false;
 	}
-	return false;
+
+	return true;
    }
 
    function plg_auth_showHide()
@@ -173,6 +172,7 @@ function plg_auth_showHide()
 			<input type="hidden" name="order_id" size="10" value="<?php echo $vars->order_id;?>" />
 			<input type="hidden" name="plugin_payment_method" value="onsite" />
 			<input type="submit" name="submit" class="btn btn-success btn-large" value="<?php echo JText::_('SUBMIT');?>" />
+			<?php echo JHtml::_('form.token'); ?>
 		 </div>
 	  </div>
    </form>
diff --git a/code/plugins/bycheck/bycheck/tmpl/default.php b/code/plugins/bycheck/bycheck/tmpl/default.php
index 267fcb8..97b069b 100755
--- a/code/plugins/bycheck/bycheck/tmpl/default.php
+++ b/code/plugins/bycheck/bycheck/tmpl/default.php
@@ -21,18 +21,14 @@
 <script type="text/javascript">
 	function myValidate(f)
 	{
-		if (document.formvalidator.isValid(f))
+		if (!document.formvalidator.isValid(f))
 		{
-			f.check.value = '<?php echo JSession::getFormToken(); ?>';
-
-			return true;
-		}
-		else
-		{
-			alert("<?php echo JText::_('PLG_PAYMENT_BYCHECK_ALERT_MSG'); ?>");
+			var msg = "<?php echo JText::_('PLG_BYORDER_VALIDATION_MSG'); ?>";
+			alert(msg);
+			return false;
 		}
 
-		return false;
+		return true;
 	}
 </script>
 <div class="tjcpg-wrapper">
@@ -82,6 +78,7 @@ function myValidate(f)
 				<input type="hidden" name="plugin_payment_method" value="onsite" />
 				<input type='submit' name='btn_check' id='btn_check' class="btn btn-success btn-large"
 				value="<?php echo JText::_('SUBMIT'); ?>">
+				<?php echo JHtml::_('form.token'); ?>
 			</div>
 	</form>
 </div>
diff --git a/code/plugins/bycheck/bycheck/tmpl/default_bs3.php b/code/plugins/bycheck/bycheck/tmpl/default_bs3.php
index 9d10fb3..93edac7 100755
--- a/code/plugins/bycheck/bycheck/tmpl/default_bs3.php
+++ b/code/plugins/bycheck/bycheck/tmpl/default_bs3.php
@@ -21,18 +21,15 @@
 <script type="text/javascript">
 	function myValidate(f)
 	{
-		if (document.formvalidator.isValid(f))
+		if (!document.formvalidator.isValid(f))
 		{
-			f.check.value = '<?php echo JSession::getFormToken(); ?>';
-			return true;
-		}
-		else
-		{
-			alert("<?php echo JText::_('PLG_PAYMENT_BYCHECK_ALERT_MSG'); ?>");
+			var msg = "<?php echo JText::_('PLG_BYORDER_VALIDATION_MSG'); ?>";
+			alert(msg);
+			return false;
 		}
 
-		return false;
-}
+		return true;
+	}
 </script>
 <div class="tjcpg-wrapper">
 <form action="<?php echo $vars->url; ?>" name="adminForm" id="adminForm" onSubmit="return myValidate(this);" class="form-validate form-horizontal"  method="post">
@@ -80,6 +77,7 @@ function myValidate(f)
 				<input type='hidden' name='return' value="<?php echo $vars->return;?>" >
 				<input type="hidden" name="plugin_payment_method" value="onsite" />
 				<input type='submit' name='btn_check' id='btn_check' class="btn btn-success"  value="<?php echo JText::_('SUBMIT'); ?>">
+				<?php echo JHtml::_('form.token'); ?>
 			</div>
 		</div>
 	</form>
diff --git a/code/plugins/byorder/byorder/tmpl/default.php b/code/plugins/byorder/byorder/tmpl/default.php
index 4825c6d..6cf54b7 100755
--- a/code/plugins/byorder/byorder/tmpl/default.php
+++ b/code/plugins/byorder/byorder/tmpl/default.php
@@ -24,19 +24,14 @@
 <script type="text/javascript">
 function myValidate(f)
 {
-if (document.formvalidator.isValid(f)) {
-		f.check.value='<?php echo JSession::getFormToken(); ?>';
-		return true;
-	}
-	else {
+if (!document.formvalidator.isValid(f)) {
 		var msg = "<?php echo JText::_('PLG_BYORDER_VALIDATION_MSG'); ?>";
 		alert(msg);
+
+		return false;
 	}
-	return false;
+	return true;
 }
-
-
-
 </script>
 <div class="tjcpg-wrapper">
 <form action="<?php echo $vars->url; ?>" name="adminForm" id="adminForm" onSubmit="return myValidate(this);" class="form-validate form-horizontal"  method="post">
@@ -64,6 +59,7 @@ function myValidate(f)
 					<input type='hidden' name='return' value="<?php echo $vars->return;?>" >
 					<input type="hidden" name="plugin_payment_method" value="onsite" />
 					<input type='submit' name='btn_check' id='btn_check' class="btn btn-success btn-large"  value="<?php echo JText::_('SUBMIT'); ?>">
+					<?php echo JHtml::_('form.token'); ?>
 				</div>
 
 	</div>
diff --git a/code/plugins/byorder/byorder/tmpl/default_bs3.php b/code/plugins/byorder/byorder/tmpl/default_bs3.php
index be8da12..abef63e 100755
--- a/code/plugins/byorder/byorder/tmpl/default_bs3.php
+++ b/code/plugins/byorder/byorder/tmpl/default_bs3.php
@@ -24,19 +24,14 @@
 <script type="text/javascript">
 function myValidate(f)
 {
-if (document.formvalidator.isValid(f)) {
-		f.check.value='<?php echo JSession::getFormToken(); ?>';
-		return true;
-	}
-	else {
+if (!document.formvalidator.isValid(f)) {
 		var msg = "<?php echo JText::_('PLG_BYORDER_VALIDATION_MSG'); ?>";
 		alert(msg);
+
+		return false;
 	}
-	return false;
+	return true;
 }
-
-
-
 </script>
 <div class="tjcpg-wrapper">
 <form action="<?php echo $vars->url; ?>" name="adminForm" id="adminForm" onSubmit="return myValidate(this);" class="form-validate form-horizontal"  method="post">
@@ -64,6 +59,7 @@ function myValidate(f)
 					<input type='hidden' name='return' value="<?php echo $vars->return;?>" >
 					<input type="hidden" name="plugin_payment_method" value="onsite" />
 					<input type='submit' name='btn_check' id='btn_check' class="btn btn-success btn-large"  value="<?php echo JText::_('SUBMIT'); ?>">
+					<?php echo JHtml::_('form.token'); ?>
 				</div>
 
 	</div>