From bce7001fd1f1c2f105e7ebe9d1b533cf553bb3c5 Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Wed, 25 Apr 2007 15:42:31 +0100 Subject: make subscribe-to-feed dialog use POST --- functions.js | 9 +++++++-- modules/pref-feeds.php | 6 +++--- 2 files changed, 10 insertions(+), 5 deletions(-) diff --git a/functions.js b/functions.js index e7e211edd..7fe79c9a8 100644 --- a/functions.js +++ b/functions.js @@ -1437,9 +1437,14 @@ function qaddFeed() { var query = Form.serialize("feed_add_form"); - xmlhttp.open("GET", "backend.php?" + query, true); +/* xmlhttp.open("GET", "backend.php?" + query, true); xmlhttp.onreadystatechange=dlg_frefresh_callback; - xmlhttp.send(null); + xmlhttp.send(null); */ + + xmlhttp.open("POST", "backend.php", true); + xmlhttp.onreadystatechange=dlg_frefresh_callback; + xmlhttp.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded'); + xmlhttp.send(query); return false; } diff --git a/modules/pref-feeds.php b/modules/pref-feeds.php index ffdbcf25b..61fc2167c 100644 --- a/modules/pref-feeds.php +++ b/modules/pref-feeds.php @@ -425,9 +425,9 @@ if (!WEB_DEMO_MODE) { - $feed_url = db_escape_string(trim($_GET["feed_url"])); - $cat_id = db_escape_string($_GET["cat_id"]); - $p_from = db_escape_string($_GET["from"]); + $feed_url = db_escape_string(trim($_POST["feed_url"])); + $cat_id = db_escape_string($_POST["cat_id"]); + $p_from = db_escape_string($_POST["from"]); if ($p_from != 'tt-rss') { print " -- cgit v1.2.3