From 90ef9d08660cd9b6d923521b5bd951da4fd865a3 Mon Sep 17 00:00:00 2001
From: Sebastian Henschel <sebastian@tesobe.com>
Date: Mon, 21 Nov 2016 09:39:44 +0100
Subject: [PATCH] Changed consumers list to use proper POST form to
 enable/disable them

---
 apimanager/consumers/templates/consumers/index.html | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/apimanager/consumers/templates/consumers/index.html b/apimanager/consumers/templates/consumers/index.html
index 861e131..3d9bc01 100644
--- a/apimanager/consumers/templates/consumers/index.html
+++ b/apimanager/consumers/templates/consumers/index.html
@@ -51,10 +51,11 @@
 					<td class="select">{{ consumer.developerEmail }}</td>
 					<td class="select">{{ consumer.created|naturaltime }}</td>
 					<td>
-						<div class="btn-group" role="group" aria-label="actions">
-							{% if consumer.enabled %}<a class="btn btn-primary btn-red" href="{% url 'consumers-disable' consumer.id %}?{{ request.GET.urlencode }}" role="button">Disable</a>{% else %}<a class="btn btn-primary btn-green" href="{% url 'consumers-enable' consumer.id %}?{{ request.GET.urlencode }}" role="button">Enable</a>{% endif %}
-							<a href="{{ url_detail }}" class="btn btn-primary">View</a>
-						</div>
+						<form action="{% if consumer.enabled %}{% url 'consumers-disable' consumer.id %}{% else %}{% url 'consumers-enable' consumer.id %}{% endif %}?{{ request.GET.urlencode }}" method="post">
+							{% csrf_token %}
+							{% if consumer.enabled %}<button class="btn btn-primary btn-red">Disable</button>{% else %}<button class="btn btn-primary btn-green">Enable</button>{% endif %}
+							<a href="{{ url_detail }}" class="btn btn-primary" role="button">View</a>
+						</form>
 					</td>
 				</tr>
 			{% endfor %}