From 655784fada185ab4df78bc364dd91f2f619899ae Mon Sep 17 00:00:00 2001 From: Jonathan Druart <jonathan.druart@bugs.koha-community.org> Date: Thu, 9 Nov 2017 12:50:00 -0300 Subject: [PATCH] Bug 7317: Do not use GET for deletion requests --- koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt index b0bbdcb412..7739bd8c9d 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt @@ -481,13 +481,15 @@ <div class="dialog alert"> <h3>Are you sure you wish to delete this request?</h3> - <p> - <a class="btn btn-default btn-sm approve" href="?method=delete&illrequest_id=[% request.id %]&confirmed=1"><i class="fa fa-fw fa-check"></i>Yes</a> - <a class="btn btn-default btn-sm deny" href="?method=illview&illrequest_id=[% request.id %]"><i class="fa fa-fw fa-remove"></i>No</a> - </p> + <form action="/cgi-bin/koha/ill/ill-requests.pl" method="post"> + <input type="hidden" name="method" value="delete" /> + <input type="hidden" name="confirmed" value="1" /> + <input type="hidden" name="illrequest_id" value="[% request.id %]" /> + <button type="submit" class="btn btn-default btn-sm approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button> + </form> + <a class="btn btn-default btn-sm deny" href="/cgi-bin/koha/ill/ill-requests.pl?method=illview&illrequest_id=[% request.id %]"><i class="fa fa-fw fa-remove"></i>No, do not delete</a> </div> - [% ELSIF query_type == 'illview' %] [% actions = request.available_actions %] [% capabilities = request.capabilities %] -- 2.11.0