Use HTTP-POST requests for actions that change application state

thomascube

2007-05-18 8d07583f3920f27186ccc16ea1ecb49104f1e32d

 program/steps/addressbook/delete.inc

@@ -19,7 +19,7 @@

*/

if (($cid = get_input_value('_cid', RCUBE_INPUT_GPC)) && preg_match('/^[0-9]+(,[0-9]+)*$/', $cid))
if (($cid = get_input_value('_cid', RCUBE_INPUT_POST)) && preg_match('/^[0-9]+(,[0-9]+)*$/', $cid))
  {
  $deleted = $CONTACTS->delete($cid);
  if (!$deleted)