From 007caff1514297151567632c786d01f645d08238 Mon Sep 17 00:00:00 2001
From: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Date: Thu, 9 Nov 2017 12:50:00 -0300
Subject: [PATCH] Bug 7317: Do not use GET for deletion requests

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
---
 .../prog/en/modules/ill/ill-requests.tt              | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt
index b0bbdcb412..7739bd8c9d 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt
@@ -481,13 +481,15 @@
 
                     <div class="dialog alert">
                         <h3>Are you sure you wish to delete this request?</h3>
-                        <p>
-                            <a class="btn btn-default btn-sm approve" href="?method=delete&amp;illrequest_id=[% request.id %]&amp;confirmed=1"><i class="fa fa-fw fa-check"></i>Yes</a>
-                            <a class="btn btn-default btn-sm deny" href="?method=illview&amp;illrequest_id=[% request.id %]"><i class="fa fa-fw fa-remove"></i>No</a>
-                        </p>
+                        <form action="/cgi-bin/koha/ill/ill-requests.pl" method="post">
+                            <input type="hidden" name="method" value="delete" />
+                            <input type="hidden" name="confirmed" value="1" />
+                            <input type="hidden" name="illrequest_id" value="[% request.id %]" />
+                            <button type="submit" class="btn btn-default btn-sm approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
+                        </form>
+                        <a class="btn btn-default btn-sm deny" href="/cgi-bin/koha/ill/ill-requests.pl?method=illview&amp;illrequest_id=[% request.id %]"><i class="fa fa-fw fa-remove"></i>No, do not delete</a>
                     </div>
 
-
                 [% ELSIF query_type == 'illview' %]
                     [% actions = request.available_actions %]
                     [% capabilities = request.capabilities %]
-- 
2.39.5