Todo #12431: GUI pages should use ``POST`` for AJAX calls, not ``GET`` - pfSense - pfSense bugtracker

Actions

Copy link

Todo #12431

open

GUI pages should use ``POST`` for AJAX calls, not ``GET``

Added by Jim Pingle over 1 year ago. Updated 4 months ago.

Status:

Pull Request Review

Priority:

Normal

Assignee:

Category:

Web Interface

Target version:

2.7.0

Start date:

Due date:

% Done:

Estimated time:

Plus Target Version:

23.05

Release Notes:

Default

Description

The AJAX buttons on the OpenVPN status page submit values using GET when they should use POST. The variables used in the backend portion of the call use $_REQUEST when they should only use $_POST.

Actions

Copy link

Updated by Viktor Gurov over 1 year ago

also:

pkg.php
services_captiveportal_vouchers.php
vendorstatus_graph.php
vpn_ipsec_phase1.php
status_graph.php
widgets/gmirror_status.widget.php
widgets/interface_statistics.widget.php
widgets/openvpn.widget.php

Actions

Copy link

Updated by Jim Pingle over 1 year ago

Subject changed from OpenVPN status page should use ``POST`` for AJAX calls, not ``GET`` to GUI pages should use ``POST`` for AJAX calls, not ``GET``
Category changed from OpenVPN to Web Interface

True. May as well fix them all. Updated subject/category.

Actions

Copy link