cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Require POST for make_friend and remove_friend

Browse source 
Note that this breaks the make_friend link in friend notfication
emails, but it will do as a temporary measure.
This commit is contained in:
Tom Hughes 2012-08-14 22:49:07 +01:00
parent 250fbf556a
commit 740ba0dd38
4 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

4
config/routes.rb
View file

@ -174,8 +174,8 @@ OpenStreetMap::Application.routes.draw do
# user pages
match '/user/:display_name' => 'user#view', :via => :get, :as => "user"
match '/user/:display_name/make_friend' => 'user#make_friend', :via => :get
match '/user/:display_name/remove_friend' => 'user#remove_friend', :via => :get
match '/user/:display_name/make_friend' => 'user#make_friend', :via => :post
match '/user/:display_name/remove_friend' => 'user#remove_friend', :via => :post
match '/user/:display_name/account' => 'user#account', :via => [:get, :post]
match '/user/:display_name/set_status' => 'user#set_status', :via => :get, :as => :set_status_user
match '/user/:display_name/delete' => 'user#delete', :via => :get, :as => :delete_user