From 686232d32387a8187660fb1d7c72c34faeb5cca3 Mon Sep 17 00:00:00 2001
From: Awilum <awilum@msn.com>
Date: Fri, 24 May 2019 15:26:26 +0300
Subject: [PATCH] Flextype Box Plugin: Admin #125 #117 - Fieldsets
 Controller/Views implementation

---
 .../views/templates/extends/fieldsets/index.html | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/site/plugins/admin/views/templates/extends/fieldsets/index.html b/site/plugins/admin/views/templates/extends/fieldsets/index.html
index 970d3893..c583b273 100644
--- a/site/plugins/admin/views/templates/extends/fieldsets/index.html
+++ b/site/plugins/admin/views/templates/extends/fieldsets/index.html
@@ -23,10 +23,22 @@
                   </button>
                   <div class="dropdown-menu">
                     <a class="dropdown-item" href="{{ path_for('admin.fieldsets.rename') }}?id={{ id }}">{{ tr('admin_rename') }}</a>
-                    <a class="dropdown-item" href="{{ path_for('admin.fieldsets.duplicateProcess') }}?id={{ id }}">{{ tr('admin_duplicate') }}</a>
+                    <a class="dropdown-item" href="javascript:;"
+                       onclick="event.preventDefault();
+                                document.getElementById('duplicate-fieldset-id-{{ id }}').submit();">{{ tr('admin_duplicate') }}</a>
                   </div>
                 </div>
-                <a class="btn btn-default" href="{{ path_for('admin.fieldsets.deleteProcess') }}?id={{ id }}">{{ tr('admin_delete') }}</a>
+                <form id="duplicate-fieldset-id-{{ id }}" action="{{ path_for('admin.fieldsets.duplicateProcess') }}" method="POST" style="display: none;">
+                    {{ csrf() }}
+                    <input type="hidden" id="fieldset-id-{{ id }}" name="fieldset-id" value="{{ id }}">
+                </form>
+                <form id="delete-fieldset-id-{{ id }}" action="{{ path_for('admin.fieldsets.deleteProcess') }}" method="POST" style="display: none;">
+                    {{ csrf() }}
+                    <input type="hidden" id="fieldset-id-{{ id }}" name="fieldset-id" value="{{ id }}">
+                </form>
+                <a class="btn btn-default" href="javascript:;"
+                   onclick="event.preventDefault();
+                            document.getElementById('delete-fieldset-id-{{ id }}').submit();">{{ tr('admin_delete') }}</a>
             </td>
         </tr>
         {% endfor %}