diff --git a/src/ajax.php b/src/ajax.php index 309b374..2eb28f7 100644 --- a/src/ajax.php +++ b/src/ajax.php @@ -173,7 +173,7 @@ elseif(isset($_GET['fullNewTask'])) } elseif(isset($_GET['deleteTask'])) { - $id = (int)$_GET['deleteTask']; + $id = (int)_post('id'); $deleted = deleteTask($id); $t = array(); $t['total'] = $deleted; @@ -184,14 +184,14 @@ elseif(isset($_GET['deleteTask'])) elseif(isset($_GET['completeTask'])) { check_write_access(); - $id = (int)$_GET['completeTask']; - $compl = _get('compl') ? 1 : 0; + $id = (int)_post('id'); + $compl = _post('compl') ? 1 : 0; $listId = (int)$db->sq("SELECT list_id FROM {$db->prefix}todolist WHERE id=$id"); if($compl) $ow = 1 + (int)$db->sq("SELECT MAX(ow) FROM {$db->prefix}todolist WHERE list_id=$listId AND compl=1"); else $ow = 1 + (int)$db->sq("SELECT MAX(ow) FROM {$db->prefix}todolist WHERE list_id=$listId AND compl=0"); $dateCompleted = $compl ? time() : 0; $db->dq("UPDATE {$db->prefix}todolist SET compl=$compl,ow=$ow,d_completed=? WHERE id=$id", array($dateCompleted)); - $tz = (int)_get('tz'); + $tz = (int)_post('tz'); if(Config::get('autotz')==0 || $tz<-720 || $tz>720 || $tz%30!=0) $tz = round(date('Z')/60); $t = array(); $t['total'] = 1; @@ -202,7 +202,7 @@ elseif(isset($_GET['completeTask'])) elseif(isset($_GET['editNote'])) { check_write_access(); - $id = (int)$_GET['editNote']; + $id = (int)_post('id'); stop_gpc($_POST); $note = str_replace("\r\n", "\n", trim(_post('note'))); $db->dq("UPDATE {$db->prefix}todolist SET note=? WHERE id=$id", $note); @@ -215,7 +215,7 @@ elseif(isset($_GET['editNote'])) elseif(isset($_GET['editTask'])) { check_write_access(); - $id = (int)$_GET['editTask']; + $id = (int)_post('id'); stop_gpc($_POST); $listId = (int)_post('list'); $title = trim(_post('title')); @@ -369,7 +369,7 @@ elseif(isset($_GET['tagCloud'])) echo json_encode($t); exit; } -elseif(isset($_POST['addList'])) +elseif(isset($_GET['addList'])) { check_write_access(); stop_gpc($_POST); @@ -385,13 +385,13 @@ elseif(isset($_POST['addList'])) echo json_encode($t); exit; } -elseif(isset($_POST['renameList'])) +elseif(isset($_GET['renameList'])) { check_write_access(); stop_gpc($_POST); $t = array(); $t['total'] = 0; - $id = (int)_post('id'); + $id = (int)_post('list'); $name = str_replace(array('"',"'",'<','>','&'),array('','','','',''),trim(_post('name'))); $db->dq("UPDATE {$db->prefix}lists SET name=? WHERE id=$id", array($name)); $t['total'] = $db->affected(); @@ -400,13 +400,13 @@ elseif(isset($_POST['renameList'])) echo json_encode($t); exit; } -elseif(isset($_POST['deleteList'])) +elseif(isset($_GET['deleteList'])) { check_write_access(); stop_gpc($_POST); $t = array(); $t['total'] = 0; - $id = (int)_post('id'); + $id = (int)_post('list'); $db->ex("BEGIN"); $db->ex("DELETE FROM {$db->prefix}lists WHERE id=$id"); $t['total'] = $db->affected(); diff --git a/src/mytinytodo.js b/src/mytinytodo.js index 24bf006..61e9c69 100644 --- a/src/mytinytodo.js +++ b/src/mytinytodo.js @@ -1764,7 +1764,7 @@ function showAuth(el) function doAuth(form) { - $.post(mytinytodo.mttUrl+'ajax.php?rnd='+Math.random(), { login:1, password: form.password.value }, function(json){ + $.post(mytinytodo.mttUrl+'ajax.php?login', { login:1, password: form.password.value }, function(json){ form.password.value = ''; if(json.logged) { @@ -1781,7 +1781,7 @@ function doAuth(form) function logout() { - $.post(mytinytodo.mttUrl+'ajax.php?rnd='+Math.random(), { logout:1 }, function(json){ + $.post(mytinytodo.mttUrl+'ajax.php?logout', { logout:1 }, function(json){ flag.isLogged = false; _mtt.loadLists(1); }, 'json'); diff --git a/src/mytinytodo_ajax_storage.js b/src/mytinytodo_ajax_storage.js index 5aa9ef6..594d78f 100644 --- a/src/mytinytodo_ajax_storage.js +++ b/src/mytinytodo_ajax_storage.js @@ -56,14 +56,14 @@ mytinytodoStorageAjax.prototype = newTask: function(params, callback) { - $.post(this.mtt.mttUrl+'ajax.php?newTask'+'&rnd='+Math.random(), + $.post(this.mtt.mttUrl+'ajax.php?newTask', { list:params.list, title: params.title, tz:params.tz, tag:params.tag }, callback, 'json'); }, fullNewTask: function(params, callback) { - $.post(this.mtt.mttUrl+'ajax.php?fullNewTask'+'&rnd='+Math.random(), + $.post(this.mtt.mttUrl+'ajax.php?fullNewTask', { list:params.list, tz:params.tz, title:params.title, note:params.note, prio:params.prio, tags:params.tags, duedate:params.duedate }, callback, 'json'); }, @@ -71,27 +71,27 @@ mytinytodoStorageAjax.prototype = editTask: function(params, callback) { - $.post(this.mtt.mttUrl+'ajax.php?editTask='+params.id+'&rnd='+Math.random(), - { list:params.list, tz:params.tz, title:params.title, note:params.note, prio:params.prio, tags:params.tags, duedate:params.duedate }, + $.post(this.mtt.mttUrl+'ajax.php?editTask='+params.id, + { id:params.id, list:params.list, tz:params.tz, title:params.title, note:params.note, prio:params.prio, tags:params.tags, duedate:params.duedate }, callback, 'json'); }, editNote: function(params, callback) { - $.post(this.mtt.mttUrl+'ajax.php?editNote='+params.id+'&rnd='+Math.random(), {note: params.note}, callback, 'json'); + $.post(this.mtt.mttUrl+'ajax.php?editNote='+params.id, {id:params.id, note: params.note}, callback, 'json'); }, completeTask: function(params, callback) { - $.getJSON(this.mtt.mttUrl+'ajax.php?completeTask='+params.id+'&compl='+params.compl+'&tz='+params.tz+'&rnd='+Math.random(), callback); + $.post(this.mtt.mttUrl+'ajax.php?completeTask='+params.id, { id:params.id, compl:params.compl, tz:params.tz }, callback, 'json'); }, deleteTask: function(params, callback) { - $.getJSON(this.mtt.mttUrl+'ajax.php?deleteTask='+params.id+'&rnd='+Math.random(), callback); + $.post(this.mtt.mttUrl+'ajax.php?deleteTask='+params.id, { id:params.id }, callback, 'json'); }, @@ -103,7 +103,7 @@ mytinytodoStorageAjax.prototype = setSort: function(params, callback) { - $.post(this.mtt.mttUrl+'ajax.php?setSort'+'&rnd='+Math.random(), { list:params.list, sort:params.sort }, callback, 'json'); + $.post(this.mtt.mttUrl+'ajax.php?setSort', { list:params.list, sort:params.sort }, callback, 'json'); }, changeOrder: function(params, callback) @@ -129,18 +129,18 @@ mytinytodoStorageAjax.prototype = // Lists addList: function(params, callback) { - $.post(this.mtt.mttUrl+'ajax.php', { addList:1, name:params.name }, callback, 'json'); + $.post(this.mtt.mttUrl+'ajax.php?addList', { name:params.name }, callback, 'json'); }, renameList: function(params, callback) { - $.post(this.mtt.mttUrl+'ajax.php', { renameList:1, id:params.list, name:params.name }, callback, 'json'); + $.post(this.mtt.mttUrl+'ajax.php?renameList', { list:params.list, name:params.name }, callback, 'json'); }, deleteList: function(params, callback) { - $.post(this.mtt.mttUrl+'ajax.php', { deleteList:1, id:params.list }, callback, 'json'); + $.post(this.mtt.mttUrl+'ajax.php?deleteList', { list:params.list }, callback, 'json'); }, publishList: function(params, callback)