From a59465c9a5fa18be31f5698e07800387d0a8c4ff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20Sureau?= <frederic.sureau@gmail.com>
Date: Sat, 28 Jan 2012 01:35:04 +0100
Subject: Changed delete feature to only support POST method. Fix #21.

---
 budget/templates/list_bills.html | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

(limited to 'budget/templates')

diff --git a/budget/templates/list_bills.html b/budget/templates/list_bills.html
index b698da6..7d3ff11 100644
--- a/budget/templates/list_bills.html
+++ b/budget/templates/list_bills.html
@@ -27,7 +27,7 @@
     // ask for confirmation before removing an user
     $('.action').each(function(){
         $(this).hide();
-        var link = $(this).find('a');
+        var link = $(this).find('button');
         link.click(function(){
             if ($(this).hasClass("confirm")){
                 return true;
@@ -83,9 +83,13 @@
             {% if balance[member.id] > 0 %}+{% endif %}{{ balance[member.id] }}
         </td>
         {% if member.activated %}
-        <td class="action delete"> <a href="{{ url_for(".remove_member", member_id=member.id) }}">{{ _("delete") }}</a></td>
+        <td class="action delete">
+            <form action="{{ url_for(".remove_member", member_id=member.id) }}" method="POST">
+                <button type="submit">{{ _("delete") }}</button></form></td>
         {% else %}
-        <td class="action reactivate"> <a href="{{ url_for(".reactivate", member_id=member.id) }}">{{ _("reactivate") }}</a></td>
+        <td class="action reactivate">
+            <form action="{{ url_for(".reactivate", member_id=member.id) }}" method="POST">
+                <button type="submit">{{ _("reactivate") }}</button></form></td>
         {% endif %}
     </tr>
     {% endfor %}
-- 
cgit v1.1