Require POST request for all actions that change server
Review Request #21 - Created Oct. 24, 2008 and submitted - Latest diff uploaded
Information | |
---|---|
Bogdan-Cristian Tătăroiu | |
infoarena | |
Reviewers | |
hackers | |
Changed logout, textblock_delete, attachment_delete and attachment_rename controllers to require POST. Implemented a format_post_link function which makes a form with margin and padding 0 and with a javascript activated link inside it. It looks good (and works) in Firefox 3, IE 5, 5.5, 6, Konqueror 4, Google Chrome (so it should look good in Safari too).