From 43acaa2f2797e34d014c93f2abdab635debf1c65 Mon Sep 17 00:00:00 2001
From: Stephen Beaver <sbeaver@netgate.com>
Date: Wed, 16 Sep 2015 08:47:59 -0400
Subject: Fixed 5139 Resolver GET/POST error

---
 src/usr/local/www/system_usermanager.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'src/usr/local/www/system_usermanager.php')

diff --git a/src/usr/local/www/system_usermanager.php b/src/usr/local/www/system_usermanager.php
index 8e8213e..2cd524b 100644
--- a/src/usr/local/www/system_usermanager.php
+++ b/src/usr/local/www/system_usermanager.php
@@ -109,9 +109,9 @@ if (isset($id) && $a_user[$id]) {
 	$pconfig['disabled'] = isset($a_user[$id]['disabled']);
 }
 
-if ($_POST['act'] == "deluser") {
+if ($_GET['act'] == "deluser") {
 
-	if (!isset($_POST['username']) || !isset($a_user[$id]) || ($_POST['username'] != $a_user[$id]['name'])) {
+	if (!isset($_GET['username']) || !isset($a_user[$id]) || ($_GET['username'] != $a_user[$id]['name'])) {
 		pfSenseHeader("system_usermanager.php");
 		exit;
 	}
@@ -503,7 +503,7 @@ foreach($a_user as $i => $userent):
 				<td>
 					<a href="?act=edit&amp;userid=<?=$i?>" class="btn btn-xs btn-primary">edit</a>
 <?php if($userent['scope'] != "system"): ?>
-					<a href="?act=del&amp;userid=<?=$i?>" class="btn btn-xs btn-danger">delete</a>
+					<a href="?act=deluser&amp;userid=<?=$i?>&amp;username=<?=$userent['name']?>" class="btn btn-xs btn-danger">delete</a>
 <?php endif; ?>
 				</td>
 			</tr>
-- 
cgit v1.1