From cf0581283d7be73cc82775064207ff43b714bb00 Mon Sep 17 00:00:00 2001
From: Owen Leonard <oleonard@myacpl.org>
Date: Fri, 16 Feb 2024 13:21:38 +0000
Subject: [PATCH] Bug 34478: Convert item search field delete to POST form

This patch converts the delete link on the item search field page to a
form with a POST operation.

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
---
 .../prog/en/modules/admin/items_search_fields.tt           | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/items_search_fields.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/admin/items_search_fields.tt
index 56117f9f27..249dea26dc 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/items_search_fields.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/admin/items_search_fields.tt
@@ -91,7 +91,12 @@
                                                 <td>[% field.authorised_values_category | html %]</td>
                                                 <td>
                                                     <a class="btn btn-default btn-xs" href="/cgi-bin/koha/admin/items_search_field.pl?name=[% field.name | html %]"><i class="fa-solid fa-pencil" aria-hidden="true"></i> Edit</a>
-                                                    <a class="field-delete btn btn-default btn-xs" href="/cgi-bin/koha/admin/items_search_fields.pl?op=del&name=[% field.name | html %]"><i class="fa fa-trash-can"></i> Delete</a>
+                                                    <form action="/cgi-bin/koha/admin/items_search_fields.pl" method="post">
+                                                        [% INCLUDE 'csrf-token.inc' %]
+                                                        <input type="hidden" name="op" value="cud-del" />
+                                                        <input type="hidden" name="name" value="[% field.name | html %]" />
+                                                        <button class="field-delete btn btn-default btn-xs"><i class="fa fa-trash-can"></i> Delete</a>
+                                                    </form>
                                                 </td>
                                             </tr>
                                         [% END %]
-- 
2.39.5