System: update deletion actions to POST from GET (#1883)

GibbonEdu · Feb 6, 2025 · 31c32c4 · 31c32c4
1 parent 75328d8
commit 31c32c4
Show file tree

Hide file tree

Showing 175 changed files with 377 additions and 227 deletions.
diff --git a/modules/Activities/activities_manage_delete.php b/modules/Activities/activities_manage_delete.php
@@ -43,7 +43,8 @@
             if ($result->rowCount() != 1) {
                 $page->addError( __('The selected record does not exist, or you do not have access to it.'));
             } else {
-                $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/activities_manage_deleteProcess.php?gibbonActivityID=$gibbonActivityID&search=".$_GET['search']."&gibbonSchoolYearTermID=".$_GET['gibbonSchoolYearTermID']);
+                $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/activities_manage_deleteProcess.php?search=".$_GET['search']."&gibbonSchoolYearTermID=".$_GET['gibbonSchoolYearTermID']);
+                $form->addHiddenValue('gibbonActivityID', $gibbonActivityID);
                 echo $form->getOutput();
             }
         }

diff --git a/modules/Activities/activities_manage_enrolment_delete.php b/modules/Activities/activities_manage_enrolment_delete.php
@@ -62,7 +62,9 @@
             //Let's go!
             $row = $result->fetch();
 
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/activities_manage_enrolment_deleteProcess.php?gibbonActivityID=$gibbonActivityID&gibbonPersonID=$gibbonPersonID&search=".$_GET['search']."&gibbonSchoolYearTermID=".$_GET['gibbonSchoolYearTermID']);
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/activities_manage_enrolment_deleteProcess.php?search=".$_GET['search']."&gibbonSchoolYearTermID=".$_GET['gibbonSchoolYearTermID']);
+            $form->addHiddenValue('gibbonActivityID', $gibbonActivityID);
+            $form->addHiddenValue('gibbonPersonID', $gibbonPersonID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Activities/activities_manage_enrolment_deleteProcess.php b/modules/Activities/activities_manage_enrolment_deleteProcess.php
@@ -33,8 +33,8 @@
 require_once __DIR__ . '/moduleFunctions.php';
 
 $logGateway = $container->get(LogGateway::class);
-$gibbonActivityID = $_GET['gibbonActivityID'] ?? '';
-$gibbonPersonID = $_GET['gibbonPersonID'] ?? '';
+$gibbonActivityID = $_POST['gibbonActivityID'] ?? '';
+$gibbonPersonID = $_POST['gibbonPersonID'] ?? '';
 
 $URL = $session->get('absoluteURL').'/index.php?q=/modules/'.getModuleName($_POST['address'])."/activities_manage_enrolment_delete.php&gibbonPersonID=$gibbonPersonID&gibbonActivityID=$gibbonActivityID&search=".$_GET['search']."&gibbonSchoolYearTermID=".($_GET['gibbonSchoolYearTermID'] ?? '');
 $URLDelete = $session->get('absoluteURL').'/index.php?q=/modules/'.getModuleName($_POST['address'])."/activities_manage_enrolment.php&gibbonActivityID=$gibbonActivityID&search=".$_GET['search']."&gibbonSchoolYearTermID=".($_GET['gibbonSchoolYearTermID'] ?? '');

diff --git a/modules/Admissions/admissions_manage_delete.php b/modules/Admissions/admissions_manage_delete.php
@@ -41,6 +41,8 @@
         return;
     }
 
-    $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/Admissions/admissions_manage_deleteProcess.php?gibbonAdmissionsAccountID='.$gibbonAdmissionsAccountID, true);
+    $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/Admissions/admissions_manage_deleteProcess.php', true);
+    $form->addHiddenValue('gibbonAdmissionsAccountID', $gibbonAdmissionsAccountID);
+
     echo $form->getOutput();
 }
diff --git a/modules/Admissions/admissions_manage_deleteProcess.php b/modules/Admissions/admissions_manage_deleteProcess.php
@@ -23,7 +23,7 @@
 
 require_once '../../gibbon.php';
 
-$gibbonAdmissionsAccountID = $_GET['gibbonAdmissionsAccountID'] ?? '';
+$gibbonAdmissionsAccountID = $_POST['gibbonAdmissionsAccountID'] ?? '';
 $search = $_REQUEST['search'] ?? '';
 
 $URL = $session->get('absoluteURL')."/index.php?q=/modules/Admissions/admissions_manage.php&search=$search";

diff --git a/modules/Admissions/applications_manage_delete.php b/modules/Admissions/applications_manage_delete.php
@@ -41,6 +41,7 @@
         return;
     }
 
-    $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/Admissions/applications_manage_deleteProcess.php?gibbonAdmissionsApplicationID='.$gibbonAdmissionsApplicationID, true);
+    $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/Admissions/applications_manage_deleteProcess.php', true);
+    $form->addHiddenValue('gibbonAdmissionsApplicationID', $gibbonAdmissionsApplicationID);
     echo $form->getOutput();
 }
diff --git a/modules/Admissions/applications_manage_deleteProcess.php b/modules/Admissions/applications_manage_deleteProcess.php
@@ -23,7 +23,7 @@
 
 require_once '../../gibbon.php';
 
-$gibbonAdmissionsApplicationID = $_GET['gibbonAdmissionsApplicationID'] ?? '';
+$gibbonAdmissionsApplicationID = $_POST['gibbonAdmissionsApplicationID'] ?? '';
 $gibbonSchoolYearID = $_REQUEST['gibbonSchoolYearID'] ?? $session->get('gibbonSchoolYearID');
 $search = $_REQUEST['search'] ?? '';
 

diff --git a/modules/Admissions/studentEnrolment_manage_delete.php b/modules/Admissions/studentEnrolment_manage_delete.php
@@ -43,7 +43,8 @@
         if ($result->rowCount() != 1) {
             $page->addError(__('The specified record cannot be found.'));
         } else {
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/studentEnrolment_manage_deleteProcess.php?gibbonSchoolYearID=$gibbonSchoolYearID&search=$search", true);
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/studentEnrolment_manage_deleteProcess.php?search=$search", true);
+            $form->addHiddenValue('gibbonSchoolYearID', $gibbonSchoolYearID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Admissions/studentEnrolment_manage_deleteProcess.php b/modules/Admissions/studentEnrolment_manage_deleteProcess.php
@@ -21,7 +21,7 @@
 
 include '../../gibbon.php';
 
-$gibbonSchoolYearID = $_GET['gibbonSchoolYearID'] ?? '';
+$gibbonSchoolYearID = $_POST['gibbonSchoolYearID'] ?? '';
 $gibbonStudentEnrolmentID = $_POST['gibbonStudentEnrolmentID'] ?? '';
 $search = $_GET['search'] ?? '';
 

diff --git a/modules/Attendance/attendance_take_byPerson_delete.php b/modules/Attendance/attendance_take_byPerson_delete.php
@@ -46,7 +46,11 @@
 	    if ($resultPerson->rowCount() != 1) {
 	    	$page->addError(__('The specified record does not exist.'));
 	    } else {
-			$form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module'). '/attendance_take_byPerson_deleteProcess.php?gibbonAttendanceLogPersonID='.$gibbonAttendanceLogPersonID.'&gibbonPersonID='.$gibbonPersonID.'&currentDate='.$currentDate);
+			$form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module'). '/attendance_take_byPerson_deleteProcess.php');
+			$form->addHiddenValue('gibbonAttendanceLogPersonID', $gibbonAttendanceLogPersonID);
+			$form->addHiddenValue('gibbonPersonID', $gibbonPersonID);
+			$form->addHiddenValue('currentDate', $currentDate);
+
 			echo $form->getOutput();
 	    }
 	}

diff --git a/modules/Attendance/attendance_take_byPerson_deleteProcess.php b/modules/Attendance/attendance_take_byPerson_deleteProcess.php
@@ -25,9 +25,9 @@
 //Module includes
 include './moduleFunctions.php';
 
-$gibbonAttendanceLogPersonID = $_GET['gibbonAttendanceLogPersonID'] ?? '';
-$gibbonPersonID = $_GET['gibbonPersonID'] ?? '';
-$currentDate = $_GET['currentDate'] ?? '';
+$gibbonAttendanceLogPersonID = $_POST['gibbonAttendanceLogPersonID'] ?? '';
+$gibbonPersonID = $_POST['gibbonPersonID'] ?? '';
+$currentDate = $_POST['currentDate'] ?? '';
 
 $URL = $session->get('absoluteURL')."/index.php?q=/modules/Attendance/attendance_take_byPerson.php&gibbonPersonID=$gibbonPersonID&currentDate=$currentDate";
 

diff --git a/modules/Behaviour/behaviour_manage_delete.php b/modules/Behaviour/behaviour_manage_delete.php
@@ -48,7 +48,13 @@
             if ($result->rowCount() != 1) {
                 $page->addError(__('The selected record does not exist, or you do not have access to it.'));
             } else {
-                $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/behaviour_manage_deleteProcess.php?gibbonBehaviourID=$gibbonBehaviourID&gibbonPersonID=".$_GET['gibbonPersonID'].'&gibbonFormGroupID='.$_GET['gibbonFormGroupID'].'&gibbonYearGroupID='.$_GET['gibbonYearGroupID'].'&type='.$_GET['type']);
+                $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/behaviour_manage_deleteProcess.php?type=".$_GET['type']);
+
+                $form->addHiddenValue('gibbonBehaviourID', $gibbonBehaviourID);
+                $form->addHiddenValue('gibbonPersonID', $_GET['gibbonPersonID']);
+                $form->addHiddenValue('gibbonFormGroupID', $_GET['gibbonFormGroupID']);
+                $form->addHiddenValue('gibbonYearGroupID', $_GET['gibbonYearGroupID']);          
+
 	            echo $form->getOutput();
             }
         }

diff --git a/modules/Behaviour/behaviour_manage_deleteProcess.php b/modules/Behaviour/behaviour_manage_deleteProcess.php
@@ -23,9 +23,9 @@
 
 $gibbonBehaviourID = $_POST['gibbonBehaviourID'] ?? '';
 $address = $_POST['address'] ?? '';
-$gibbonPersonID = $_GET['gibbonPersonID'] ?? '';
-$gibbonFormGroupID = $_GET['gibbonFormGroupID'] ?? '';
-$gibbonYearGroupID = $_GET['gibbonYearGroupID'] ?? '';
+$gibbonPersonID = $_POST['gibbonPersonID'] ?? '';
+$gibbonFormGroupID = $_POST['gibbonFormGroupID'] ?? '';
+$gibbonYearGroupID = $_POST['gibbonYearGroupID'] ?? '';
 $type = $_GET['type'] ?? '';
 $URL = $session->get('absoluteURL').'/index.php?q=/modules/'.getModuleName($address)."/behaviour_manage_delete.php&gibbonBehaviourID=$gibbonBehaviourID&gibbonPersonID=$gibbonPersonID&gibbonFormGroupID=$gibbonFormGroupID&gibbonYearGroupID=$gibbonYearGroupID&type=$type";
 $URLDelete = $session->get('absoluteURL').'/index.php?q=/modules/'.getModuleName($address)."/behaviour_manage.php&gibbonPersonID=$gibbonPersonID&gibbonFormGroupID=$gibbonFormGroupID&gibbonYearGroupID=$gibbonYearGroupID&type=$type";

diff --git a/modules/Data Updater/data_family_manage_delete.php b/modules/Data Updater/data_family_manage_delete.php
@@ -45,7 +45,8 @@
         } else {
             //Let's go!
 
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/data_family_manage_deleteProcess.php?gibbonFamilyUpdateID=".$gibbonFamilyUpdateID);
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/data_family_manage_deleteProcess.php");
+            $form->addHiddenValue('gibbonFamilyUpdateID', $gibbonFamilyUpdateID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Data Updater/data_finance_manage_delete.php b/modules/Data Updater/data_finance_manage_delete.php
@@ -45,7 +45,8 @@
         } else {
             //Let's go!
 
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/data_finance_manage_deleteProcess.php?gibbonFinanceInvoiceeUpdateID=".$gibbonFinanceInvoiceeUpdateID);
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/data_finance_manage_deleteProcess.php");
+            $form->addHiddenValue('gibbonFinanceInvoiceeUpdateID', $gibbonFinanceInvoiceeUpdateID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Data Updater/data_medical_manage_delete.php b/modules/Data Updater/data_medical_manage_delete.php
@@ -43,7 +43,8 @@
         if ($result->rowCount() != 1) {
             $page->addError(__('The selected record does not exist, or you do not have access to it.'));
         } else {
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/data_medical_manage_deleteProcess.php?gibbonPersonMedicalUpdateID=$gibbonPersonMedicalUpdateID");
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/data_medical_manage_deleteProcess.php");
+            $form->addHiddenValue('gibbonPersonMedicalUpdateID', $gibbonPersonMedicalUpdateID);
 	        echo $form->getOutput();
         }
     }

diff --git a/modules/Data Updater/data_personal_manage_delete.php b/modules/Data Updater/data_personal_manage_delete.php
@@ -45,7 +45,8 @@
         } else {
             //Let's go!
 
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/data_personal_manage_deleteProcess.php?gibbonPersonUpdateID=".$gibbonPersonUpdateID);
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/data_personal_manage_deleteProcess.php");
+            $form->addHiddenValue('gibbonPersonUpdateID', $gibbonPersonUpdateID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Data Updater/data_staff_manage_delete.php b/modules/Data Updater/data_staff_manage_delete.php
@@ -46,6 +46,7 @@
         return;
     }
 
-    $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/data_staff_manage_deleteProcess.php?gibbonStaffUpdateID=".$gibbonStaffUpdateID);
+    $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/data_staff_manage_deleteProcess.php");
+    $form->addHiddenValue('gibbonStaffUpdateID', $gibbonStaffUpdateID);
     echo $form->getOutput();
 }
diff --git a/modules/Finance/budgetCycles_manage_delete.php b/modules/Finance/budgetCycles_manage_delete.php
@@ -42,7 +42,8 @@
         } else {
             //Let's go!
             $row = $result->fetch();
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/budgetCycles_manage_deleteProcess.php?gibbonFinanceBudgetCycleID=$gibbonFinanceBudgetCycleID");
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/budgetCycles_manage_deleteProcess.php");
+            $form->addHiddenValue('gibbonFinanceBudgetCycleID', $gibbonFinanceBudgetCycleID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Finance/budgetCycles_manage_deleteProcess.php b/modules/Finance/budgetCycles_manage_deleteProcess.php
@@ -21,7 +21,7 @@
 
 include '../../gibbon.php';
 
-$gibbonFinanceBudgetCycleID = $_GET['gibbonFinanceBudgetCycleID'] ?? '';
+$gibbonFinanceBudgetCycleID = $_POST['gibbonFinanceBudgetCycleID'] ?? '';
 $address = $_POST['address'] ?? '';
 $URL = $session->get('absoluteURL').'/index.php?q=/modules/'.getModuleName($address).'/budgetCycles_manage_delete.php&gibbonFinanceBudgetCycleID='.$gibbonFinanceBudgetCycleID;
 $URLDelete = $session->get('absoluteURL').'/index.php?q=/modules/'.getModuleName($address).'/budgetCycles_manage.php';

diff --git a/modules/Finance/budgets_manage_delete.php b/modules/Finance/budgets_manage_delete.php
@@ -43,7 +43,8 @@
         if ($result->rowCount() != 1) {
             $page->addError(__('The selected record does not exist, or you do not have access to it.'));
         } else {
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/budgets_manage_deleteProcess.php?gibbonFinanceBudgetID=$gibbonFinanceBudgetID");
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/budgets_manage_deleteProcess.php");
+            $form->addHiddenValue('gibbonFinanceBudgetID', $gibbonFinanceBudgetID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Finance/expenseApprovers_manage_delete.php b/modules/Finance/expenseApprovers_manage_delete.php
@@ -40,7 +40,8 @@
         if ($result->rowCount() != 1) {
             $page->addError(__('The specified record cannot be found.'));
         } else {
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/expenseApprovers_manage_deleteProcess.php?gibbonFinanceExpenseApproverID=$gibbonFinanceExpenseApproverID");
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/expenseApprovers_manage_deleteProcess.php");
+            $form->addHiddenValue('gibbonFinanceExpenseApproverID', $gibbonFinanceExpenseApproverID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Finance/expenseApprovers_manage_deleteProcess.php b/modules/Finance/expenseApprovers_manage_deleteProcess.php
@@ -21,7 +21,7 @@
 
 include '../../gibbon.php';
 
-$gibbonFinanceExpenseApproverID = $_GET['gibbonFinanceExpenseApproverID'] ?? '';
+$gibbonFinanceExpenseApproverID = $_POST['gibbonFinanceExpenseApproverID'] ?? '';
 $address = $_POST['address'] ?? '';
 $URL = $session->get('absoluteURL').'/index.php?q=/modules/'.getModuleName($address).'/expenseApprovers_manage_delete.php&gibbonFinanceExpenseApproverID='.$gibbonFinanceExpenseApproverID;
 $URLDelete = $session->get('absoluteURL').'/index.php?q=/modules/'.getModuleName($address).'/expenseApprovers_manage.php';

diff --git a/modules/Finance/feeCategories_manage_delete.php b/modules/Finance/feeCategories_manage_delete.php
@@ -43,7 +43,8 @@
         if ($result->rowCount() != 1) {
             $page->addError(__('The selected record does not exist, or you do not have access to it.'));
         } else {
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/feeCategories_manage_deleteProcess.php?gibbonFinanceFeeCategoryID=$gibbonFinanceFeeCategoryID");
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/feeCategories_manage_deleteProcess.php");
+            $form->addHiddenValue('gibbonFinanceFeeCategoryID', $gibbonFinanceFeeCategoryID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Finance/invoices_manage_delete.php b/modules/Finance/invoices_manage_delete.php
@@ -50,7 +50,12 @@
         if ($result->rowCount() != 1) {
             $page->addError(__('The selected record does not exist, or you do not have access to it.'));
         } else {
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/invoices_manage_deleteProcess.php?gibbonFinanceInvoiceID=$gibbonFinanceInvoiceID&gibbonSchoolYearID=$gibbonSchoolYearID&status=$status&gibbonFinanceInvoiceeID=$gibbonFinanceInvoiceeID&monthOfIssue=$monthOfIssue&gibbonFinanceBillingScheduleID=$gibbonFinanceBillingScheduleID&gibbonFinanceFeeCategoryID=$gibbonFinanceFeeCategoryID");
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/invoices_manage_deleteProcess.php?status=$status&monthOfIssue=$monthOfIssue");
+            $form->addHiddenValue('gibbonFinanceInvoiceID', $gibbonFinanceInvoiceID);
+            $form->addHiddenValue('gibbonSchoolYearID', $gibbonSchoolYearID);
+            $form->addHiddenValue('gibbonFinanceInvoiceeID', $gibbonFinanceInvoiceeID);
+            $form->addHiddenValue('gibbonFinanceBillingScheduleID', $gibbonFinanceBillingScheduleID);
+            $form->addHiddenValue('gibbonFinanceFeeCategoryID', $gibbonFinanceFeeCategoryID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Finance/invoices_manage_deleteProcess.php b/modules/Finance/invoices_manage_deleteProcess.php
@@ -23,13 +23,13 @@
 
 include './moduleFunctions.php';
 
-$gibbonSchoolYearID = $_GET['gibbonSchoolYearID'] ?? '';
+$gibbonSchoolYearID = $_POST['gibbonSchoolYearID'] ?? '';
 $gibbonFinanceInvoiceID = $_POST['gibbonFinanceInvoiceID'] ?? '';
 $status = $_GET['status'] ?? null;
-$gibbonFinanceInvoiceeID = $_GET['gibbonFinanceInvoiceeID'] ?? null;
+$gibbonFinanceInvoiceeID = $_POST['gibbonFinanceInvoiceeID'] ?? null;
 $monthOfIssue = $_GET['monthOfIssue'] ?? null;
-$gibbonFinanceBillingScheduleID = $_GET['gibbonFinanceBillingScheduleID'] ?? null;
-$gibbonFinanceFeeCategoryID = $_GET['gibbonFinanceFeeCategoryID'] ?? null;
+$gibbonFinanceBillingScheduleID = $_POST['gibbonFinanceBillingScheduleID'] ?? null;
+$gibbonFinanceFeeCategoryID = $_POST['gibbonFinanceFeeCategoryID'] ?? null;
 
 if ($gibbonFinanceInvoiceID == '' or $gibbonSchoolYearID == '') { echo 'Fatal error loading this page!';
 } else {

diff --git a/modules/Formal Assessment/externalAssessment_manage_details_delete.php b/modules/Formal Assessment/externalAssessment_manage_details_delete.php
@@ -46,7 +46,9 @@
             //Let's go!
             $row = $result->fetch();
 
-            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/externalAssessment_manage_details_deleteProcess.php?gibbonExternalAssessmentStudentID=$gibbonExternalAssessmentStudentID&gibbonPersonID=$gibbonPersonID&search=$search&allStudents=$allStudents");
+            $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/externalAssessment_manage_details_deleteProcess.php?search=$search&allStudents=$allStudents");
+            $form->addHiddenValue('gibbonExternalAssessmentStudentID', $gibbonExternalAssessmentStudentID);
+            $form->addHiddenValue('gibbonPersonID', $gibbonPersonID);
             echo $form->getOutput();
         }
     }

diff --git a/modules/Formal Assessment/externalAssessment_manage_details_deleteProcess.php b/modules/Formal Assessment/externalAssessment_manage_details_deleteProcess.php
@@ -21,12 +21,11 @@
 
 include '../../gibbon.php';
 
-$gibbonExternalAssessmentStudentID = $_GET['gibbonExternalAssessmentStudentID'] ?? '';
-$gibbonPersonID = $_GET['gibbonPersonID'] ?? '';
+$gibbonExternalAssessmentStudentID = $_POST['gibbonExternalAssessmentStudentID'] ?? '';
+$gibbonPersonID = $_POST['gibbonPersonID'] ?? '';
 $search = $_GET['search'] ?? '';
 $allStudents = $_GET['allStudents'] ?? '';
 
-
 if ($gibbonPersonID == '' or $gibbonExternalAssessmentStudentID == '') { echo 'Fatal error loading this page!';
 } else {
     $URL = $session->get('absoluteURL').'/index.php?q=/modules/'.getModuleName($_POST['address'])."/externalAssessment_manage_details_delete.php&gibbonPersonID=$gibbonPersonID&gibbonExternalAssessmentStudentID=$gibbonExternalAssessmentStudentID&search=$search&allStudents=$allStudents";

diff --git a/modules/Formal Assessment/internalAssessment_manage_delete.php b/modules/Formal Assessment/internalAssessment_manage_delete.php
@@ -56,7 +56,9 @@
                 $values = $result->fetch();
                 $values2 = $result2->fetch();
 
-                $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/internalAssessment_manage_deleteProcess.php?gibbonInternalAssessmentColumnID=$gibbonInternalAssessmentColumnID");
+                $form = DeleteForm::createForm($session->get('absoluteURL').'/modules/'.$session->get('module')."/internalAssessment_manage_deleteProcess.php");
+
+                $form->addHiddenValue('gibbonInternalAssessmentColumnID', $gibbonInternalAssessmentColumnID);
                 echo $form->getOutput();
             }
         }