From cc905b0dcaa50b490b4b1eda154acd85a9b0b5ac Mon Sep 17 00:00:00 2001
From: Richard Mansfield <richard@dragonfly.co.nz>
Date: Wed, 6 Aug 2014 13:34:15 +1200
Subject: [PATCH] Handle incorrect question toggle via post

---
 quiz/templates/quiz/sitting_detail.html | 4 ++--
 quiz/views.py                           | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/quiz/templates/quiz/sitting_detail.html b/quiz/templates/quiz/sitting_detail.html
index 1812dcf..eed6bb6 100644
--- a/quiz/templates/quiz/sitting_detail.html
+++ b/quiz/templates/quiz/sitting_detail.html
@@ -36,8 +36,8 @@ Result of {{ sitting.quiz.title }} for {{ sitting.user }}
 		{% endif %}
 	  </td>
 	  <td>
-		<form action="" method="get">
-		  <input type=hidden name="id" value="{{ question.id }}">
+		<form action="" method="POST">{% csrf_token %}
+		  <input type=hidden name="qid" value="{{ question.id }}">
 		  <button type="submit">Toggle whether correct</button>
 		</form>
 	  </td>
diff --git a/quiz/views.py b/quiz/views.py
index 2608f48..290da4c 100644
--- a/quiz/views.py
+++ b/quiz/views.py
@@ -98,10 +98,10 @@ class QuizMarkingList(QuizMarkerMixin, SittingFilterTitleMixin, ListView):
 class QuizMarkingDetail(QuizMarkerMixin, DetailView):
     model = Sitting
 
-    def get_object(self, queryset=None):
-        sitting = super(QuizMarkingDetail, self).get_object()
+    def post(self, request, *args, **kwargs):
+        sitting = self.get_object()
 
-        q_to_toggle = self.request.GET.get('id')
+        q_to_toggle = request.POST.get('qid', None)
         if q_to_toggle:
             q = Question.objects.get_subclass(id=int(q_to_toggle))
             if int(q_to_toggle) in sitting.get_incorrect_questions:
@@ -109,7 +109,7 @@ class QuizMarkingDetail(QuizMarkerMixin, DetailView):
             else:
                 sitting.add_incorrect_question(q)
 
-        return sitting
+        return self.get(request)
 
 
 class QuizTake(FormView):
-- 
2.39.5