From 4297e8647df45bf39cb8116c43c809d728e5f281 Mon Sep 17 00:00:00 2001
From: Mouse Reeve <mousereeve@riseup.net>
Date: Tue, 10 Nov 2020 21:39:24 -0800
Subject: [PATCH] put status id in path for delete-status

---
 bookwyrm/templates/snippets/status_body.html | 3 +--
 bookwyrm/view_actions.py                     | 3 +--
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/bookwyrm/templates/snippets/status_body.html b/bookwyrm/templates/snippets/status_body.html
index 05e890b9..ca8200f1 100644
--- a/bookwyrm/templates/snippets/status_body.html
+++ b/bookwyrm/templates/snippets/status_body.html
@@ -82,9 +82,8 @@
             <div class="toggle-content hidden card-footer">
                 {% if status.user == request.user %}
                 <div class="card-footer-item">
-                    <form name="delete-{{status.id}}" action="/delete-status" method="post">
+                    <form name="delete-{{status.id}}" action="/delete-status/{{ status.id }}" method="post">
                         {% csrf_token %}
-                        <input type="hidden" name="status" value="{{ status.id }}">
                         <button class="button is-danger is-light" type="submit">
                             Delete post
                         </button>
diff --git a/bookwyrm/view_actions.py b/bookwyrm/view_actions.py
index 49ea263e..69c9649b 100644
--- a/bookwyrm/view_actions.py
+++ b/bookwyrm/view_actions.py
@@ -549,9 +549,8 @@ def unboost(request, status_id):
 
 
 @login_required
-def delete_status(request):
+def delete_status(request, status_id):
     ''' delete and tombstone a status '''
-    status_id = request.POST.get('status')
     if not status_id:
         return HttpResponseBadRequest()
     status = get_object_or_404(models.Status, id=status_id)