Send encrypted emails and IPs over POST to avoid large request URLs

sections/delete/delete_email.php

@@ -1,7 +1,7 @@
 <?
 
-if (!isset($_GET['emails']) || !is_array($_GET['emails'])) {
-  error("Stop that.");
+if (!isset($_POST['emails']) || !is_array($_POST['emails'])) {
+  error("No email requested");
 }
 
 if (!apcu_exists('DBKEY')) {
@@ -17,14 +17,14 @@ View::show_header('Email Expunge Request');
 </div>
 <form class="create_form box pad" name="emaildelete" action="delete.php" method="post">
   <input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
-  <? foreach($_GET['emails'] as $email) { ?>
+  <? foreach($_POST['emails'] as $email) { ?>
   <input type="hidden" name="emails[]" value="<?=$email?>" />
   <? } ?>
   <input type="hidden" name="action" value="takeemail" />
   <table cellspacing="1" cellpadding="3" border="0" class="layout" width="100%">
     <tr>
       <td class="label">Email:</td>
-      <td><input type="text" size="30" value="<?=Crypto::decrypt($_GET['emails'][0])?>" disabled /></td>
+      <td><input type="text" size="30" value="<?=Crypto::decrypt($_POST['emails'][0])?>" disabled /></td>
     </tr>
     <tr>
       <td class="label">Reason (Optional):</td>

sections/delete/delete_ip.php

@@ -1,7 +1,7 @@
 <?
 
-if (!isset($_GET['ips']) || !is_array($_GET['ips'])) {
-  error("Stop that.");
+if (!isset($_POST['ips']) || !is_array($_POST['ips'])) {
+  error("No IP requested");
 }
 
 if (!apcu_exists('DBKEY')) {
@@ -17,14 +17,14 @@ View::show_header('IP Address Expunge Request');
 </div>
 <form class="create_form box pad" name="ipdelete" action="delete.php" method="post">
   <input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
-  <? foreach($_GET['ips'] as $ip) { ?>
+  <? foreach($_POST['ips'] as $ip) { ?>
   <input type="hidden" name="ips[]" value="<?=$ip?>" />
   <? } ?>
   <input type="hidden" name="action" value="takeip" />
   <table cellspacing="1" cellpadding="3" border="0" class="layout" width="100%">
     <tr>
       <td class="label">IP:</td>
-      <td><input type="text" size="30" value="<?=Crypto::decrypt($_GET['ips'][0])?>" disabled /></td>
+      <td><input type="text" size="30" value="<?=Crypto::decrypt($_POST['ips'][0])?>" disabled /></td>
     </tr>
     <tr>
       <td class="label">Reason (Optional):</td>

sections/userhistory/email_history_userview.php

@@ -65,7 +65,13 @@ if (!$Self) {
     <td><?=display_str($Email)?></td>
     <td>
     <? if ($Email != $Curr) { ?>
-      <a href="delete.php?action=email&emails[]=<?=implode('&emails[]=', array_map('urlencode', $Encs))?>" class="brackets">X</a>
+      <form action="delete.php" method="post">
+        <input type="hidden" name="action" value="email">
+        <? foreach ($Encs as $Enc) { ?>
+        <input type="hidden" name="emails[]" value="<?=$Enc?>">
+        <? } ?>
+        <input type="submit" value="X">
+      </form>
     <? } ?>
     </td>
   </tr>

sections/userhistory/ip_history_userview.php

@@ -65,7 +65,13 @@ if (!$Self) {
     <td><?=display_str($IP)?></td>
     <td>
     <? if ($IP != $Curr) { ?>
-      <a href="delete.php?action=ip&ips[]=<?=implode('&ips[]=', array_map('urlencode', $Encs))?>" class="brackets">X</a>
+      <form action="delete.php" method="post">
+        <input type="hidden" name="action" value="ip">
+        <? foreach ($Encs as $Enc) { ?>
+        <input type="hidden" name="ips[]" value="<?=$Enc?>">
+        <? } ?>
+        <input type="submit" value="X">
+      </form>
     <? } ?>
     </td>
   </tr>