comparison MoinMoin/userprefs/oid.py @ 5517:2c992293ece4

merged moin/1.8
author Thomas Waldmann <tw AT waldmann-edv DOT de>
date Mon, 08 Feb 2010 00:18:20 +0100
parents 2eaf4b42b400 5359bfdf91ba
children f7f9d35f9d23
comparison
equal deleted inserted replaced
5511:ab0f9e5996ef 5517:2c992293ece4
140 return 140 return
141 141
142 if self.request.method != 'POST': 142 if self.request.method != 'POST':
143 return 143 return
144 144
145 if not wikiutil.checkTicket(self.request, form.get('ticket', '')):
146 return
147
145 if form.has_key('remove'): 148 if form.has_key('remove'):
146 return self._handle_remove() 149 return self._handle_remove()
147 150
148 if form.has_key('add'): 151 if form.has_key('add'):
149 return self._handle_add() 152 return self._handle_add()
150
151 return
152 153
153 def _make_form(self): 154 def _make_form(self):
154 action = "%s%s" % (self.request.script_root, self.request.path) 155 action = "%s%s" % (self.request.script_root, self.request.path)
155 _form = html.FORM(action=action) 156 _form = html.FORM(action=action)
156 _form.append(html.INPUT(type="hidden", name="action", value="userprefs")) 157 _form.append(html.INPUT(type="hidden", name="action", value="userprefs"))
157 _form.append(html.INPUT(type="hidden", name="handler", value="oid")) 158 _form.append(html.INPUT(type="hidden", name="handler", value="oid"))
159 ticket = wikiutil.createTicket(self.request)
160 _form.append(html.INPUT(type="hidden", name="ticket", value=ticket))
158 return _form 161 return _form
159 162
160 def _make_row(self, label, cell, **kw): 163 def _make_row(self, label, cell, **kw):
161 """ Create a row in the form table. 164 """ Create a row in the form table.
162 """ 165 """