From a1be4e8e66590aba628d607c3ddef72867dff14f Mon Sep 17 00:00:00 2001
From: Markus Koch <markus@notsyncing.net>
Date: Sun, 3 Jun 2018 18:46:24 +0200
Subject: [PATCH] Use POST for optin-once

---
 index.php  | 4 ++--
 shared.php | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/index.php b/index.php
index 24bd391..62a4bd2 100644
--- a/index.php
+++ b/index.php
@@ -21,8 +21,8 @@
 	}
 
 	$optin = "";
-	if (isset($_GET['optin-once'])) {
-		$_COOKIE['opt-in'] = $_GET['optin-once'];
+	if (isset($_POST['optin-once'])) {
+		$_COOKIE['opt-in'] = $_POST['optin-once'];
 	}
 	if (isset($_COOKIE['opt-in'])) {
 		$opt = $_COOKIE['opt-in'];
diff --git a/shared.php b/shared.php
index 4ea386f..e95483a 100644
--- a/shared.php
+++ b/shared.php
@@ -132,7 +132,7 @@
 			if (opted_in('y')) {
 				echo '<iframe width="100%" height="100%" src="' . $url . '" frameborder="0" allowfullscreen></iframe>';
 			} else {
-				echo "<table border=0 style='height:100%;width:100%'><tr><td style='text-align:center;'>Embedded content has been disabled to protect your privacy.<br><br><br><strong><a href='" . append_param("optin-once=y") . "'>Click here to load the videos on this site once,</a></strong><br><br><strong><a href='/?p=privacy-controls'>or click here to allow them permanently,</a><br><br><a href=\"" . $youtube['link'] . "\">" . "or click here to watch the video on YouTube:<br>" . $youtube['link'] . "</a></strong><br><br><br>Please note that by enabling this video, data is transferred <br>to YouTube LLC, and is subject to their privacy policy.</td></tr></table>";
+				echo "<table border=0 style='height:100%;width:100%'><tr><td style='text-align:center;'>Embedded content has been disabled to protect your privacy.<br><br><br><strong><form action='' method='post'><input type='hidden' name='optin-once' value='y' /><input type='submit' value='Click here to load the videos on this site once,'/></form></strong><br><br><strong><a href='/?p=privacy-controls'>or click here to allow them permanently,</a><br><br><a href=\"" . $youtube['link'] . "\">" . "or click here to watch the video on YouTube:<br>" . $youtube['link'] . "</a></strong><br><br><br>Please note that by enabling this video, data is transferred <br>to YouTube LLC, and is subject to their privacy policy.</td></tr></table>";
 			}
 		} else {
 			// TODO: HTML5 video