Use confirm_form() to delete Flickr access token [#1535378]

It is a bad practice to delete content through a get request. Hence confirm_form() is a good candidate to offer the user a confirmation page and allow this action to be done only when the button is clicked (and not when the URL is opened).

Patch coming up in next comment.

Comment	File	Size	Author
#1	use-confirm-form-to-delete-credentials-1535378-1.patch	1.74 KB	juampynr

Comments

Comment #1

juampynr commented 16 April 2012 at 11:53

Status:

Active

» Needs review

Status	File	Size
new	use-confirm-form-to-delete-credentials-1535378-1.patch	1.74 KB

Attached is a patch that substitutes admin/config/media/flickrapi/clear for a confirmation form.

Warning, this patch was built after creating the patch suggested at #1515450: Use of undefined constant OAUTH_COMMON_TOKEN_TYPE_REQUEST in cache.inc, so you will have to apply the latter before applying this one or it will fail to do so.