pfSense

if (isset($_POST['act'])) {

	$act = $_POST['act'];

} else {

	$act = $_GET['act'];

}

if ($_POST['act'] == "deluser") {

	if (!isset($_POST['username']) || !isset($a_user[$id]) || ($_POST['username'] != $a_user[$id]['name'])) {

	if ($_POST['username'] == $_SESSION['Username']) {

		$delete_errors[] = sprintf(gettext("Cannot delete user %s because you are currently logged in as that user."), $_POST['username']);

							<a class="fa fa-pencil" title="<?=gettext("Edit user"); ?>" href="?act=edit&amp;userid=<?=$i?>" usepost></a>

							<a class="fa fa-trash"	title="<?=gettext("Delete user")?>" href="?act=deluser&amp;userid=<?=$i?>&amp;username=<?=$userent['name']?>" usepost></a>

	<a href="?act=new" class="btn btn-sm btn-success" usepost>

// The scripts that follow are an EXPERIMENT in using jQuery/Javascript to automatically convert

// GET calls to POST calls

// Any anchor with the attribute "usepost" usses these functions. In this file "Edit user", "Delete user" and "Add"

// have that attribute

// These function can be moved to an included file

?></div>

<script type="text/javascript">

//<![CDATA[

events.push(function() {

	// Any time an anchor is clicked and the "usepost" attibute is present, convert the href attribute

	// to POST format, make a POST form and submit it

	$('a').click(function(e) {

		// Does the clicker anchor have the "usepost" attribute?

		var attr = $(this).attr('usepost');

		if (typeof attr !== typeof undefined && attr !== false) {

			var href = $(this).attr("href");

			postSubmit(get2post(href));

			return false;

		}

	});

	// Convert a GET argument list such as ?name=fred&action=delete into an array of POST

	// parameters such as [[name, fred],[action, delete]]

	function get2post(getargs) {

		var arglist = new Array();

		getargs = getargs.substring(getargs.indexOf("?") + 1);

		var argarray = getargs.split('&');

		for (var i=0;i<argarray.length;i++) {

			var thisarg = argarray[i].split('=');

			var arg = new Array(thisarg[0], thisarg[1]);

			arglist[i] = arg;

		}

		return arglist;

	}

	// Create a form, add, the POST data and submit it

	function postSubmit(data) {

	    var form = $(document.createElement('form'));

	    $(form).attr("method", "POST");

	    for (var i=0;i<data.length;i++) {

			var input = $("<input>").attr("type", "hidden").attr("name", data[i][0]).val(data[i][1]);

			$(form).append($(input));

	    }

		// The CSRF magic is required because we will be viewing the results of the POST

		var input = $("<input>").attr("type", "hidden").attr("name", "__csrf_magic").val($('[name=__csrf_magic]').val());

		$(form).append($(input));

        $(form).appendTo('body').submit();

	}

});

//]]>

</script>

<?php