Mikhail Korobov avatar Mikhail Korobov committed 9c5450e

Data for accept/reject pages is sent via GET, not via POST

Comments (0)

Files changed (2)

     insecure and must be avoided. That's why django-netcash just renders a
     template and doesn't provide a hook for order processing here.
     """
-    reference = request.POST.get('Reference', False)
+    reference = request.REQUEST.get('Reference', False)
     order = get_object_or_404(NetcashOrder, pk=reference)
     context = {'order': order}
     context.update(extra_context or {})
 
 setup(
     name='django-netcash',
-    version='0.1.1',
+    version='0.1.2',
     author='Mikhail Korobov',
     author_email='kmike84@gmail.com',
 
Tip: Filter by directory path e.g. /media app.js to search for public/media/app.js.
Tip: Use camelCasing e.g. ProjME to search for ProjectModifiedEvent.java.
Tip: Filter by extension type e.g. /repo .js to search for all .js files in the /repo directory.
Tip: Separate your search with spaces e.g. /ssh pom.xml to search for src/ssh/pom.xml.
Tip: Use ↑ and ↓ arrow keys to navigate and return to view the file.
Tip: You can also navigate files with Ctrl+j (next) and Ctrl+k (previous) and view the file with Ctrl+o.
Tip: You can also navigate files with Alt+j (next) and Alt+k (previous) and view the file with Alt+o.