Project

General

Profile

Actions
Copy link

Todo #12431

closed
JP JP

GUI pages should use ``POST`` for AJAX calls, not ``GET``

Todo #12431: GUI pages should use ``POST`` for AJAX calls, not ``GET``

Added by Jim Pingle almost 5 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Jim Pingle
Category:
Web Interface
Target version:
2.7.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
23.09
Release Notes:
Default

Description

The AJAX buttons on the OpenVPN status page submit values using GET when they should use POST. The variables used in the backend portion of the call use $_REQUEST when they should only use $_POST.

Files

Download all files
429.diff (7.51 KB) 429.diff Jim Pingle, 06/06/2023 04:39 PM
429-working.diff (7.34 KB) 429-working.diff Jim Pingle, 06/06/2023 05:40 PM

VG Updated by Viktor Gurov almost 5 years ago Actions
Copy link
 #1

also:

pkg.php
services_captiveportal_vouchers.php
vendorstatus_graph.php
vpn_ipsec_phase1.php
status_graph.php
widgets/gmirror_status.widget.php
widgets/interface_statistics.widget.php
widgets/openvpn.widget.php

JP Updated by Jim Pingle almost 5 years ago Actions
Copy link
 #2

  • Subject changed from OpenVPN status page should use ``POST`` for AJAX calls, not ``GET`` to GUI pages should use ``POST`` for AJAX calls, not ``GET``
  • Category changed from OpenVPN to Web Interface

True. May as well fix them all. Updated subject/category.

JP Updated by Jim Pingle almost 5 years ago Actions
Copy link
 #4

  • Status changed from New to Pull Request Review
  • Assignee set to Viktor Gurov

JP Updated by Jim Pingle over 4 years ago Actions
Copy link
 #5

  • Target version changed from 2.6.0 to CE-Next
  • Plus Target Version changed from 22.01 to 22.05

Need more comprehensive testing.

JP Updated by Jim Pingle over 4 years ago Actions
Copy link
 #6

  • Plus Target Version changed from 22.05 to 22.09

JP Updated by Jim Pingle about 4 years ago Actions
Copy link
 #7

  • Plus Target Version changed from 22.09 to 22.11

JP Updated by Jim Pingle almost 4 years ago Actions
Copy link
 #8

  • Plus Target Version changed from 22.11 to 23.01

JP Updated by Jim Pingle almost 4 years ago Actions
Copy link
 #9

  • Assignee deleted (Viktor Gurov)
  • Target version changed from CE-Next to 2.7.0
  • Plus Target Version changed from 23.01 to 23.05

JP Updated by Jim Pingle over 3 years ago Actions
Copy link
 #10

  • Plus Target Version changed from 23.05 to 23.09

JP Updated by Jim Pingle about 3 years ago Actions
Copy link
 #11

  • Assignee set to Jim Pingle

JP Updated by Jim Pingle about 3 years ago Actions
Copy link
 #12

  • File 429.diff 429.diff added
  • Status changed from Pull Request Review to In Progress

Previous MR had conflicts, but I reworked it so it applies against current code for wider testing. See attached.

JP Updated by Jim Pingle about 3 years ago Actions
Copy link
 #13

I tested each of the changes in the diff and found some problems, and also fixed them. Fixed diff attached, passes all my tests at least. Will be committing shortly.

JP Updated by Jim Pingle about 3 years ago Actions
Copy link
 #14

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100

Implemented these changes in commit:0de394c9e501fc73154f37e62407ec22304a9658

JP Updated by Jim Pingle about 3 years ago Actions
Copy link
 #15

  • Status changed from Feedback to Resolved

These all appear to be working well with POST on current builds.

Actions
Copy link

Also available in: Atom