forking only possible with POST requests now

diff --git a/data/templates/display.htm b/data/templates/display.htm
index 0b95912dee2e66e831a8464f6eceeb540603f931..ca52775eb4d2aea32164792f315e7566771aecbb 100644 (file)
--- a/data/templates/display.htm
+++ b/data/templates/display.htm
@@ -17,7 +17,9 @@
   <h3>Paste #{{repo.id}}</h3>
  </div>
  <div class="span4" style="text-align: right">
   <h3>Paste #{{repo.id}}</h3>
  </div>
  <div class="span4" style="text-align: right">

-  <a class="btn" href="{{repo.getLink('fork')}}"><i class="icon-share"></i> fork</a>
+  <form method="post" action="{{repo.getLink('fork')}}">
+    <button type="submit" class="btn"><i class="icon-share"></i> fork</button>
+  </form>

  </div>
 </div>
 
  </div>
 </div>
 

diff --git a/www/fork.php b/www/fork.php
index 6bec5f03bd0cba3f5cf76ee0416a666519fa2761..f6ec95a5ac1549b6732e3cd482a555a5ddc816ba 100644 (file)
--- a/www/fork.php
+++ b/www/fork.php
@@ -4,6 +4,11 @@
  */
 namespace Phorkie;
 require_once 'www-header.php';
  */
 namespace Phorkie;
 require_once 'www-header.php';

+
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+    throw new Exception_Input('Forking only possible via POST');
+}
+

 $repo = new Repository();
 $repo->loadFromRequest();
 
 $repo = new Repository();
 $repo->loadFromRequest();