Tasks: Use POST for ajax calls that change data

diff --git a/apps/tasks/ajax/addtask.php b/apps/tasks/ajax/addtask.php
index d6e313bd089e44f691c032b2e003a66cd62f24ee..9f35e7f21ec464165ba40d5518259c0692a60ce0 100644 (file)
--- a/apps/tasks/ajax/addtask.php
+++ b/apps/tasks/ajax/addtask.php
@@ -8,7 +8,7 @@ $calendars = OC_Calendar_Calendar::allCalendars(OCP\User::getUser(), true);
 $first_calendar = reset($calendars);
 $cid = $first_calendar['id'];
 
-$input = $_GET['text'];
+$input = $_POST['text'];
 $request = array();
 $request['summary'] = $input;
 $request["categories"] = null;

diff --git a/apps/tasks/ajax/delete.php b/apps/tasks/ajax/delete.php
index 6d2868748d1fb01bed675e6e8f320b1bee79ba74..e29add9b556ff4f43a08acfc19bf09d9101220d0 100644 (file)
--- a/apps/tasks/ajax/delete.php
+++ b/apps/tasks/ajax/delete.php
@@ -24,7 +24,7 @@
 OCP\JSON::checkLoggedIn();
 OCP\JSON::checkAppEnabled('tasks');
 
-$id = $_GET['id'];
+$id = $_POST['id'];
 $task = OC_Calendar_App::getEventObject( $id );
 
 OC_Calendar_Object::delete($id);

diff --git a/apps/tasks/js/tasks.js b/apps/tasks/js/tasks.js
index 60d2a523be133e2200b1bd16a5b1b310697a1f40..d1e3a9969b4a5fa5b68ff3357871df221cb7a371 100644 (file)
--- a/apps/tasks/js/tasks.js
+++ b/apps/tasks/js/tasks.js
@@ -440,7 +440,7 @@ $(document).ready(function(){
 
        $('#tasks_delete').live('click',function(){
                var id = $('#task_details').data('id');
-               $.getJSON('ajax/delete.php',{'id':id},function(jsondata){
+               $.post('ajax/delete.php',{'id':id},function(jsondata){
                        if(jsondata.status == 'success'){
                                $('#tasks [data-id="'+jsondata.data.id+'"]').remove();
                                $('#task_details').data('id','');
@@ -455,7 +455,7 @@ $(document).ready(function(){
 
        $('#tasks_addtask').click(function(){
                var input = $('#tasks_newtask').val();
-               $.getJSON(OC.filePath('tasks', 'ajax', 'addtask.php'),{text:input},function(jsondata){
+               $.post(OC.filePath('tasks', 'ajax', 'addtask.php'),{text:input},function(jsondata){
                        if(jsondata.status == 'success'){
                                $('#tasks_list').append(OC.Tasks.create_task_div(jsondata.task));
                        }