From 41ed267b71aac4f3ef1f87e6f2eb4ff5a63f8ddd Mon Sep 17 00:00:00 2001
From: Isaac Connor <isaac@zoneminder.com>
Date: Tue, 20 Oct 2020 12:31:38 -0400
Subject: [PATCH] move view to the form action so that it is part of get
 request instead of post

---
 web/ajax/modals/logout.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/ajax/modals/logout.php b/web/ajax/modals/logout.php
index e1c1053c3..a0648a70c 100644
--- a/web/ajax/modals/logout.php
+++ b/web/ajax/modals/logout.php
@@ -56,6 +56,7 @@ while ( $row = $result->fetch(PDO::FETCH_ASSOC) ) {
     ZM\Warning('Failed to decode ' . $row['data']);
     continue;
   }
+  ZM\Debug(print_r($_SESSION, true));
   if ( isset($_SESSION['last_time']) )  {
     # This is a dead session
     continue;
@@ -91,12 +92,11 @@ $_SESSION = $current_session;
 <?php } # end if canView(System) ?>
       </div>
       <div class="modal-footer">
-        <form name="logoutForm" id="logoutForm" method="post" action="?">
+        <form name="logoutForm" id="logoutForm" method="post" action="?view=logout">
           <?php
           // We have to manually insert the csrf key into the form when using a modal generated via ajax call
           echo getCSRFinputHTML();
           ?>
-          <input type="hidden" name="view" value="logout"/>
           <button type="submit" name="action" value="logout"><?php echo translate('Logout') ?></button>
           <?php if ( ZM_USER_SELF_EDIT ) echo '<button type="submit" name="action" value="config">'.translate('Config').'</button>'.PHP_EOL; ?>
           <button type="button" data-dismiss="modal"><?php echo translate('Cancel') ?></button>