From cc27b189b165c4ac305e57d0c03fe830469f8cec Mon Sep 17 00:00:00 2001
From: Clement Desmidt <clement@desmidt.fr>
Date: Tue, 21 Nov 2017 07:20:06 +0100
Subject: [PATCH] =?UTF-8?q?:lock:=20S=C3=A9curise=20la=20suppression?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 resources/views/list.blade.php | 9 +++++++--
 routes/web.php                 | 2 +-
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/resources/views/list.blade.php b/resources/views/list.blade.php
index e9bdd0b..19b4f8e 100755
--- a/resources/views/list.blade.php
+++ b/resources/views/list.blade.php
@@ -5,7 +5,7 @@
     <div class="row">
         <div class="col-md-8 col-md-offset-2">
             <div class="panel panel-default">
-                <div class="panel-heading">Dashboard</div>
+                <div class="panel-heading">Dashboard @if($type !== 'all') − <a href="<?php echo route('home'); ?>">Revenir à la liste</a>@endif</div>
 
                 <div class="panel-body">
                     @if (session('status'))
@@ -36,7 +36,12 @@
                                 </td>
                                 <td>
                                     <a href="<?php echo route('deals.view', ['type' => $type, 'id' => $deal->getId()]); ?>">Voir</a>
-                                    <a href="<?php echo route('deals.delete', ['type' => $type, 'id' => $deal->getId()]); ?>">Supprimer</a>
+                                    @if( $type === 'backup')
+                                    <form method="POST" action="<?php echo route('deals.delete', ['type' => $type, 'id' => $deal->getId()]); ?>">
+                                        {{ csrf_field() }}
+                                        <button type="submit">Supprimer</button>
+                                    </form>
+                                    @endif
                                 </td>
                             </tr>
                         @endforeach</tbody>
diff --git a/routes/web.php b/routes/web.php
index 3c5cd08..39c95a3 100755
--- a/routes/web.php
+++ b/routes/web.php
@@ -21,6 +21,6 @@ Route::get('/deals/list/{type}', 'HomeController@list')->name('deals.list');
 
 Route::get('/deals/view/{type}/{id}', 'HomeController@view')->name('deals.view');
 
-Route::get('/deals/delete/{type}/{id}', 'HomeController@delete')->name('deals.delete');
+Route::post('/deals/delete/{type}/{id}', 'HomeController@delete')->name('deals.delete');
 
 Route::match(['GET', 'POST'], '/deals/update/{type}/{id}', 'HomeController@update')->name('deals.update');