From 5efae52e3028850bd88ed03945f5d912420a36d3 Mon Sep 17 00:00:00 2001
From: Jerome Jutteau <mojo@couak.net>
Date: Tue, 5 Sep 2017 00:02:51 +0200
Subject: [PATCH] [BUGFIX] Delete links using POST

closes #136

Signed-off-by: Jerome Jutteau <mojo@couak.net>
---
 f.php                     | 28 +++++++++++++++++++++++++---
 lib/locales/template.json |  3 +++
 2 files changed, 28 insertions(+), 3 deletions(-)

diff --git a/f.php b/f.php
index bcf0848..4289eae 100644
--- a/f.php
+++ b/f.php
@@ -84,10 +84,32 @@ if (!file_exists(VAR_FILES . $p . $link['md5'])) {
 }
 
 if (!empty($delete_code) && $delete_code == $link['link_code']) {
-    jirafeau_delete_link($link_name);
     require(JIRAFEAU_ROOT.'lib/template/header.php');
-    echo '<div class="message"><p>'.t('File has been deleted.').
-     '</p></div>';
+    if (isset($_POST['do_delete'])) {
+        jirafeau_delete_link($link_name);
+        echo '<div class="message"><p>'.t('File has been deleted.').
+            '</p></div>';
+    } else { ?>
+        <div>
+        <form action="f.php" method="post" id="submit_delete_post" class="form login">
+        <input type="hidden" name="do_delete" value=1/>
+        <fieldset>
+             <legend> <?php echo t('Confirm deletion') ?> </legend>
+             <table>
+             <tr><td>
+             <?php echo t('You are about to delete') . ' "' . htmlspecialchars($link['file_name']) . '" (' . jirafeau_human_size($link['file_size']) . ').' ?>
+             </td></tr>
+             <tr><td>
+                <?php echo t('By using our services, you accept our'). ' <a href="tos.php">' . t('Terms of Service') . '</a>.' ?>
+             </td></tr>
+             <tr><td>
+                <input type="submit" id="submit_delete"  value="<?php echo t('Delete'); ?>"
+                onclick="document.getElementById('submit_delete_post').action='<?php echo 'f.php?h=' . $link_name . '&amp;d=' . $delete_code . "';"; ?>
+                document.getElementById('submit_delete').submit ();"/>
+             </td></tr>
+             </table>
+         </fieldset></form></div><?php
+    }
     require(JIRAFEAU_ROOT.'lib/template/footer.php');
     exit;
 }
diff --git a/lib/locales/template.json b/lib/locales/template.json
index 9ac9141..88ec179 100644
--- a/lib/locales/template.json
+++ b/lib/locales/template.json
@@ -37,6 +37,9 @@
     "Preview": "",
     "Sorry, the requested file is not found": "",
     "File not available.": "",
+    "Confirm deletion": "",
+    "You are about to delete": "",
+    "Delete": "",
     "File has been deleted.": "",
     "The time limit of this file has expired.": "",
     "Password protection": "",
-- 
2.34.1