From 1a8b65541c3a3185792f41ed293aaf763a4caf01 Mon Sep 17 00:00:00 2001
From: Steve Beaver <sbeaver@netgate.com>
Date: Mon, 13 Feb 2017 16:23:03 -0500
Subject: GET/POST conversion for status*

---
 src/usr/local/www/status_dhcpv6_leases.php | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

(limited to 'src/usr/local/www/status_dhcpv6_leases.php')

diff --git a/src/usr/local/www/status_dhcpv6_leases.php b/src/usr/local/www/status_dhcpv6_leases.php
index 1357b9f..72740a9 100644
--- a/src/usr/local/www/status_dhcpv6_leases.php
+++ b/src/usr/local/www/status_dhcpv6_leases.php
@@ -39,7 +39,7 @@ $shortcut_section = "dhcp6";
 
 $leasesfile = "{$g['dhcpd_chroot_path']}/var/db/dhcpd6.leases";
 
-if (($_GET['deleteip']) && (is_ipaddr($_GET['deleteip']))) {
+if (($_POST['deleteip']) && (is_ipaddr($_POST['deleteip']))) {
 	/* Stop DHCPD */
 	killbyname("dhcpd");
 
@@ -49,7 +49,7 @@ if (($_GET['deleteip']) && (is_ipaddr($_GET['deleteip']))) {
 	$i = 0;
 	while ($i < count($leases_contents)) {
 		/* Find the lease(s) we want to delete */
-		if ($leases_contents[$i] == "  iaaddr {$_GET['deleteip']} {") {
+		if ($leases_contents[$i] == "  iaaddr {$_POST['deleteip']} {") {
 			/* The iaaddr line is two lines down from the start of the lease, so remove those two lines. */
 			array_pop($newleases_contents);
 			array_pop($newleases_contents);
@@ -71,7 +71,7 @@ if (($_GET['deleteip']) && (is_ipaddr($_GET['deleteip']))) {
 
 	/* Restart DHCP Service */
 	services_dhcpd_configure();
-	header("Location: status_dhcpv6_leases.php?all={$_GET['all']}");
+	header("Location: status_dhcpv6_leases.php?all={$_REQUEST['all']}");
 }
 
 // Load MAC-Manufacturer table
@@ -80,7 +80,7 @@ $mac_man = load_mac_manufacturer_table();
 include("head.inc");
 
 function leasecmp($a, $b) {
-	return strcmp($a[$_GET['order']], $b[$_GET['order']]);
+	return strcmp($a[$_REQUEST['order']], $b[$_REQUEST['order']]);
 }
 
 function adjust_gmt($dt) {
@@ -384,7 +384,7 @@ foreach ($config['interfaces'] as $ifname => $ifarr) {
 	}
 }
 
-if ($_GET['order']) {
+if ($_REQUEST['order']) {
 	usort($leases, "leasecmp");
 }
 
@@ -449,7 +449,7 @@ if (!$leasesfile_found) {
 		<tbody>
 <?php
 foreach ($leases as $data):
-	if ($data['act'] != $active_string && $data['act'] != $static_string && $_GET['all'] != 1) {
+	if ($data['act'] != $active_string && $data['act'] != $static_string && $_REQUEST['all'] != 1) {
 		continue;
 	}
 
@@ -514,7 +514,7 @@ foreach ($leases as $data):
 <?php endif; ?>
 					<a class="fa fa-plus-square" title="<?=gettext("Add WOL mapping")?>" href="services_wol_edit.php?if=<?=$data['if']?>&amp;mac=<?=$data['mac']?>&amp;descr=<?=htmlentities($data['hostname'])?>"></a>
 <?php if ($data['type'] == $dynamic_string && $data['online'] != $online_string):?>
-					<a class="fa fa-trash" title="<?=gettext('Delete lease')?>"	href="status_dhcpv6_leases.php?deleteip=<?=$data['ip']?>&amp;all=<?=intval($_GET['all'])?>"></a>
+					<a class="fa fa-trash" title="<?=gettext('Delete lease')?>"	href="status_dhcpv6_leases.php?deleteip=<?=$data['ip']?>&amp;all=<?=intval($_REQUEST['all'])?>" usepost></a>
 <?php endif; ?>
 				</td>
 			</tr>
@@ -542,7 +542,7 @@ foreach ($leases as $data):
 		<tbody>
 <?php
 foreach ($prefixes as $data):
-	if ($data['act'] != $active_string && $data['act'] != $static_string && $_GET['all'] != 1) {
+	if ($data['act'] != $active_string && $data['act'] != $static_string && $_REQUEST['all'] != 1) {
 		continue;
 	}
 
@@ -603,7 +603,7 @@ foreach ($prefixes as $data):
 	</div>
 </div>
 
-<?php if ($_GET['all']): ?>
+<?php if ($_REQUEST['all']): ?>
 	<a class="btn btn-info" href="status_dhcpv6_leases.php?all=0"><i class="fa fa-minus-circle icon-embed-btn"></i><?=gettext("Show active and static leases only")?></a>
 <?php else: ?>
 	<a class="btn btn-info" href="status_dhcpv6_leases.php?all=1"><i class="fa fa-plus-circle icon-embed-btn"></i><?=gettext("Show all configured leases")?></a>
-- 
cgit v1.1