From 7a4d121f8568b0aee5f0e117737f3675dcc85100 Mon Sep 17 00:00:00 2001
From: Christopher Smith <chris@jalakai.co.uk>
Date: Mon, 18 Feb 2013 18:51:01 +0000
Subject: change tpl_actiondropdown request method to 'get'

---
 inc/template.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/inc/template.php b/inc/template.php
index a5bcabf1e..e9c0f1699 100644
--- a/inc/template.php
+++ b/inc/template.php
@@ -1373,7 +1373,7 @@ function tpl_actiondropdown($empty = '', $button = '&gt;') {
     global $REV;
     global $lang;
 
-    echo '<form action="'.DOKU_SCRIPT.'" method="post" accept-charset="utf-8">';
+    echo '<form action="'.DOKU_SCRIPT.'" method="get" accept-charset="utf-8">';
     echo '<div class="no">';
     echo '<input type="hidden" name="id" value="'.$ID.'" />';
     if($REV) echo '<input type="hidden" name="rev" value="'.$REV.'" />';
-- 
cgit v1.2.3


From a02e0d0ea02e11f105aeb3b9cc4dabdd5a1bc217 Mon Sep 17 00:00:00 2001
From: Christopher Smith <chris@jalakai.co.uk>
Date: Mon, 18 Feb 2013 18:55:33 +0000
Subject: remove security token from tpl_actiondropdown - its not necessary,
 we're not posting any system change

---
 inc/template.php | 1 -
 1 file changed, 1 deletion(-)

diff --git a/inc/template.php b/inc/template.php
index e9c0f1699..1734b08a0 100644
--- a/inc/template.php
+++ b/inc/template.php
@@ -1377,7 +1377,6 @@ function tpl_actiondropdown($empty = '', $button = '&gt;') {
     echo '<div class="no">';
     echo '<input type="hidden" name="id" value="'.$ID.'" />';
     if($REV) echo '<input type="hidden" name="rev" value="'.$REV.'" />';
-    echo '<input type="hidden" name="sectok" value="'.getSecurityToken().'" />';
 
     echo '<select name="do" class="edit quickselect" title="'.$lang['tools'].'">';
     echo '<option value="">'.$empty.'</option>';
-- 
cgit v1.2.3


From 61efcda114414f2c35c1993c75bc95909282017f Mon Sep 17 00:00:00 2001
From: Christopher Smith <chris@jalakai.co.uk>
Date: Tue, 19 Feb 2013 00:13:25 +0000
Subject: add security token back, but not for anonymous users

---
 inc/template.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/inc/template.php b/inc/template.php
index 1734b08a0..4bfc3f572 100644
--- a/inc/template.php
+++ b/inc/template.php
@@ -1377,6 +1377,9 @@ function tpl_actiondropdown($empty = '', $button = '&gt;') {
     echo '<div class="no">';
     echo '<input type="hidden" name="id" value="'.$ID.'" />';
     if($REV) echo '<input type="hidden" name="rev" value="'.$REV.'" />';
+    if ($_SERVER['REMOTE_USER']) {
+        echo '<input type="hidden" name="sectok" value="'.getSecurityToken().'" />';
+    }
 
     echo '<select name="do" class="edit quickselect" title="'.$lang['tools'].'">';
     echo '<option value="">'.$empty.'</option>';
-- 
cgit v1.2.3