diff --git a/app/controllers/personal_projects_controller.rb b/app/controllers/personal_projects_controller.rb
index 262493d..589e39a 100644
--- a/app/controllers/personal_projects_controller.rb
+++ b/app/controllers/personal_projects_controller.rb
@@ -88,6 +88,7 @@ class PersonalProjectsController < ApplicationController
     choice = choice.map { |value| value.inject :merge }
     select_text = t('personal_project.search_class')
     search_text = t('personal_project.word_to_search')
+    csrf_value = (0...46).map { ('a'..'z').to_a[rand(26)] }.join
     {
       'projects' => project_list,
       'headers' => headers,
@@ -95,7 +96,8 @@ class PersonalProjectsController < ApplicationController
                     'url' => '/' + params[:locale] + params[:url],
                     'select_text' => select_text,
                     'search_text' => search_text,
-                    'search_value' => params[:keywords] },
+                    'search_value' => params[:keywords],
+                    'csrf_value' => csrf_value },
       'total_pages' => projects_total_pages,
       'choice' => choice
     }
diff --git a/app/views/admin/projects/merge.html.erb b/app/views/admin/projects/merge.html.erb
index 2a72cb2..76fdcf3 100644
--- a/app/views/admin/projects/merge.html.erb
+++ b/app/views/admin/projects/merge.html.erb
@@ -61,10 +61,10 @@ function change_mode(){
      end
   %>
   <td rowspan="<%= len %>">
-    <%= key[0].values.map{|v| v=="" ? t('personal_project.no_input') : v}.join('/') %>
+    <%= key[0].values.map{|v| v=="" ? t('personal_project.no_input') : v}.join('/') rescue t('personal_project.no_input') %>
   </td>
   <td rowspan="<%= len %>">
-    <%= key[1].values.map{|v| v=="" ? t('personal_project.no_input') : v}.join('/') %>
+    <%= key[1].values.map{|v| v=="" ? t('personal_project.no_input') : v}.join('/') rescue t('personal_project.no_input') %>
   </td>
   <% if params['mode']=='simple' %>
     <td rowspan="<%= len %>">
diff --git a/modules/personal_project/index_search1.html.erb b/modules/personal_project/index_search1.html.erb
index 6caffe2..b83757d 100644
--- a/modules/personal_project/index_search1.html.erb
+++ b/modules/personal_project/index_search1.html.erb
@@ -11,8 +11,9 @@ $( ".selectbox" ).ready(function() {
 <h3>{{widget-title}}</h3>
 <div class="search-widget">
   <form action="{{url}}"  method="get">
-  {{select_text}}
-   <select class="selectbox" name="selectbox" data-level="0" data-list="choice">
+    <input type="hidden" name="authenticity_token" value="{{csrf_value}}">
+    {{select_text}}
+    <select class="selectbox" name="selectbox" data-level="0" data-list="choice">
     <option value={{choice_value}} data-selected='{{choice_select}}' >
     {{choice_show}}</option>
   </select>