From fc9cd2a089a4bb72806538fe6cdc27e9c916434b Mon Sep 17 00:00:00 2001
From: Jesse Rushlow <jr@rushlow.dev>
Date: Wed, 24 Feb 2021 03:14:59 -0500
Subject: [PATCH] [make:crud] use post method for deletes

---
 src/Resources/skeleton/crud/controller/Controller.tpl.php  | 4 ++--
 src/Resources/skeleton/crud/templates/_delete_form.tpl.php | 1 -
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/src/Resources/skeleton/crud/controller/Controller.tpl.php b/src/Resources/skeleton/crud/controller/Controller.tpl.php
index d17a3e867..9da6d9622 100644
--- a/src/Resources/skeleton/crud/controller/Controller.tpl.php
+++ b/src/Resources/skeleton/crud/controller/Controller.tpl.php
@@ -114,10 +114,10 @@ public function edit(Request $request, <?= $entity_class_name ?> $<?= $entity_va
     }
 
 <?php if ($use_attributes) { ?>
-    #[Route('/{<?= $entity_identifier ?>}', name: '<?= $route_name ?>_delete', methods: ['DELETE'])]
+    #[Route('/{<?= $entity_identifier ?>}', name: '<?= $route_name ?>_delete', methods: ['POST'])]
 <?php } else { ?>
     /**
-     * @Route("/{<?= $entity_identifier ?>}", name="<?= $route_name ?>_delete", methods={"DELETE"})
+     * @Route("/{<?= $entity_identifier ?>}", name="<?= $route_name ?>_delete", methods={"POST"})
      */
 <?php } ?>
     public function delete(Request $request, <?= $entity_class_name ?> $<?= $entity_var_singular ?>): Response
diff --git a/src/Resources/skeleton/crud/templates/_delete_form.tpl.php b/src/Resources/skeleton/crud/templates/_delete_form.tpl.php
index e322ec79b..e5eef50ec 100644
--- a/src/Resources/skeleton/crud/templates/_delete_form.tpl.php
+++ b/src/Resources/skeleton/crud/templates/_delete_form.tpl.php
@@ -1,5 +1,4 @@
 <form method="post" action="{{ path('<?= $route_name ?>_delete', {'<?= $entity_identifier ?>': <?= $entity_twig_var_singular ?>.<?= $entity_identifier ?>}) }}" onsubmit="return confirm('Are you sure you want to delete this item?');">
-    <input type="hidden" name="_method" value="DELETE">
     <input type="hidden" name="_token" value="{{ csrf_token('delete' ~ <?= $entity_twig_var_singular ?>.<?= $entity_identifier ?>) }}">
     <button class="btn">Delete</button>
 </form>