Mercurial > public > sg101
view gpp/templates/messages/outbox.html @ 257:6e7e84707e7d
Fix #106: CSRF verification failures on the deleting of checked PMs.
author | Brian Neal <bgneal@gmail.com> |
---|---|
date | Tue, 21 Sep 2010 01:16:02 +0000 |
parents | d51743322bb2 |
children | daa2916f5b34 |
line wrap: on
line source
{% extends 'messages/base.html' %} {% block title %}Messages: Outbox{% endblock %} {% block custom_js %} <script type="text/javascript" src="{{ MEDIA_URL }}js/messages/box.js"></script> {% endblock %} {% block outbox-class %}class="active"{% endblock %} {% block messages_content %} <h3>Outbox</h3> {% if messages %} <ul class="user-messages"> {% for msg in messages %} <li{% if msg.tags %} class="{{ msg.tags }}"{% endif %}>{{ msg }}</li> {% endfor %} </ul> {% endif %} {% if msgs %} <form action="{% url messages-delete_bulk %}" method="post" name="messages_box_form" onsubmit="return messages_confirm_delete();">{% csrf_token %} <table class="messages"> <tr> <th>To</th> <th>Subject</th> <th>Sent</th> <th>Received</th> <th><input type="checkbox" id="master_select" onclick="messages_master_click();" /></th> </tr> {% for msg in msgs %} <tr> <td><a href="{% url bio.views.view_profile msg.receiver.username %}"> {{ msg.receiver.username }}</a></td> <td> {% if msg.unread %}<strong>{% endif %} {% if msg.replied_to %}<em>{% endif %} <a href="{{ msg.get_absolute_url }}?box=outbox">{{ msg.subject }}</a> {% if msg.replied_to %}</em>{% endif %} {% if msg.unread %}</strong>{% endif %} </td> <td>{{ msg.send_date|date:"M j, Y g:i A" }}</td> <td>{% if msg.unread %}<em>Unread</em>{% else %}{{ msg.read_date|date:"M j, Y g:i A" }}{% endif %}</td> <td><input type="checkbox" name="delete_ids" value="{{ msg.id }}" onclick="messages_set_master();" /></td> </tr> {% endfor %} <tr><td colspan="5" align="center"><input type="submit" value="Delete Checked Messages" /></td></tr> </table> <input type="hidden" name="box" value="outbox" /> </form> {% else %} <p><em>Your Outbox is empty.</em></p> {% endif %} {% endblock %}