(legacy) www: strip action attribute from forms where not needed, closes...

(legacy) www: strip action attribute from forms where not needed, closes https://github.com/opnsense/core/issues/929

(legacy) www: strip action attribute from forms where not needed, closes...
(legacy) www: strip action attribute from forms where not needed, closes https://github.com/opnsense/core/issues/929
7ab0b346 · Ad Schellevis · 71655d55 · 7ab0b346 · 7ab0b346 · 7ab0b346
Commit 7ab0b346 authored May 12, 2016 by Ad Schellevis
59 changed files
--- a/src/www/crash_reporter.php
+++ b/src/www/crash_reporter.php
@@ -187,7 +187,7 @@ if (isset($_POST['Submit'])) {
    <div class="row">
      <section class="col-xs-12">
        <div class="content-box">
-          <form action="/crash_reporter.php" method="post">
+          <form method="post">
            <div class="col-xs-12">
 <?php
            if ($has_crashed):?>

--- a/src/www/diag_backup.php
+++ b/src/www/diag_backup.php
@@ -503,7 +503,7 @@ $( document ).ready(function() {
      <?php endif; ?>
      <?php if ($input_messages) print_info_box($input_messages); ?>
      <?php if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
-      <form action="diag_backup.php" method="post" enctype="multipart/form-data">
+      <form method="post" enctype="multipart/form-data">
        <section class="col-xs-12">
          <div class="content-box tab-content table-responsive __mb">
            <table class="table table-striped ">

--- a/src/www/diag_logs_filter.php
+++ b/src/www/diag_logs_filter.php
@@ -623,7 +623,7 @@ include("head.inc");
        <?php if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
          <section class="col-xs-12">
          <div class="tab-content content-box col-xs-12">
-            <form id="filterlogentries" name="filterlogentries" action="diag_logs_filter.php" method="post">
+            <form id="filterlogentries" name="filterlogentries" method="post">
 <?php
              $Include_Act = explode(",", str_replace(" ", ",", $filterfieldsarray['act']));
              if ($filterfieldsarray['interface'] == "All") $interface = "";

--- a/src/www/diag_logs_settings.php
+++ b/src/www/diag_logs_settings.php
@@ -316,7 +316,7 @@ $(document).ready(function() {
      }
 ?>
        <section class="col-xs-12">
-          <form action="diag_logs_settings.php" method="post" name="iform" id="iform">
+          <form method="post" name="iform" id="iform">
            <input type="hidden" id="action" name="action" value="" />
            <div class="tab-content content-box col-xs-12 __mb">
              <div class="table-responsive">

--- a/src/www/firewall_aliases.php
+++ b/src/www/firewall_aliases.php
@@ -223,7 +223,7 @@ $( document ).ready(function() {
 <?php endif; ?>
        <section class="col-xs-12">
          <div class="content-box">
-            <form action="firewall_aliases.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <input type="hidden" name="tab" value="<?=$selected_tab;?>" />
              <input type="hidden" name="id" value="" id="delId"/>
              <input type="hidden" name="act" value="del"/>

--- a/src/www/firewall_aliases_edit.php
+++ b/src/www/firewall_aliases_edit.php
@@ -413,7 +413,7 @@ endforeach;
 <?php  if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
        <section class="col-xs-12">
          <div class="content-box tab-content">
-            <form action="firewall_aliases_edit.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <table class="table table-striped">
                <tr>
                  <td width="22%"><strong><?=gettext("Alias Edit");?></strong></td>

--- a/src/www/firewall_aliases_import.php
+++ b/src/www/firewall_aliases_import.php
@@ -166,7 +166,7 @@ include("head.inc");
        <?php if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
        <section class="col-xs-12">
          <div class="content-box tab-content">
-            <form action="firewall_aliases_import.php" method="post" name="iform">
+            <form method="post" name="iform">
              <table class="table table-striped">
                <tr>
                  <td width="22%"><strong><?=gettext("Alias Import");?></strong></td>

--- a/src/www/firewall_nat.php
+++ b/src/www/firewall_nat.php
@@ -235,7 +235,7 @@ $( document ).ready(function() {
 <?php   endif; ?>
        <section class="col-xs-12">
          <div class="content-box">
-            <form action="firewall_nat.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <input type="hidden" id="id" name="id" value="" />
              <input type="hidden" id="action" name="act" value="" />
              <div class="table-responsive">

--- a/src/www/firewall_nat_1to1.php
+++ b/src/www/firewall_nat_1to1.php
@@ -191,7 +191,7 @@ $main_buttons = array(
 ?>
          <section class="col-xs-12">
          <div class="content-box">
-            <form action="firewall_nat_1to1.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <input type="hidden" id="id" name="id" value="" />
              <input type="hidden" id="action" name="action" value="" />
              <table class="table table-striped">

--- a/src/www/firewall_nat_1to1_edit.php
+++ b/src/www/firewall_nat_1to1_edit.php
@@ -280,7 +280,7 @@ include("head.inc");
 ?>
        <section class="col-xs-12">
          <div class="content-box">
-            <form action="firewall_nat_1to1_edit.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <div class="table-responsive">
                <table class="table table-striped">
                  <tr>

--- a/src/www/firewall_nat_edit.php
+++ b/src/www/firewall_nat_edit.php
@@ -523,7 +523,7 @@ $( document ).ready(function() {
 <?php if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
        <section class="col-xs-12">
          <div class="content-box">
-            <form action="firewall_nat_edit.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <table class="table table-striped">
                <tr>
                  <td width="22%"><?=gettext("Edit Redirect entry"); ?></td>

--- a/src/www/firewall_nat_npt.php
+++ b/src/www/firewall_nat_npt.php
@@ -187,7 +187,7 @@ $main_buttons = array(
        <?php endif; ?>
        <section class="col-xs-12">
          <div class="content-box">
-            <form action="firewall_nat_npt.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <input type="hidden" id="id" name="id" value="" />
              <input type="hidden" id="action" name="act" value="" />
              <div class="table-responsive">

--- a/src/www/firewall_nat_npt_edit.php
+++ b/src/www/firewall_nat_npt_edit.php
@@ -173,7 +173,7 @@ include("head.inc");
        <?php if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
          <section class="col-xs-12">
            <div class="content-box">
-              <form action="firewall_nat_npt_edit.php" method="post" name="iform" id="iform">
+              <form method="post" name="iform" id="iform">
                <table class="table table-striped">
                  <tr>
                    <td><?=gettext("Edit NAT NPT entry"); ?></td>

--- a/src/www/firewall_nat_out.php
+++ b/src/www/firewall_nat_out.php
@@ -255,7 +255,7 @@ include("head.inc");
        if (is_subsystem_dirty('natconf'))
            print_info_box_apply(gettext("The NAT configuration has been changed.")."<br />".gettext("You must apply the changes in order for them to take effect."));
 ?>
-        <form action="firewall_nat_out.php" method="post" name="iform" id="iform">
+        <form method="post" name="iform" id="iform">
          <input type="hidden" id="id" name="id" value="" />
          <input type="hidden" id="action" name="act" value="" />
          <section class="col-xs-12">

--- a/src/www/firewall_nat_out_edit.php
+++ b/src/www/firewall_nat_out_edit.php
@@ -385,7 +385,7 @@ include("head.inc");
        <?php if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
        <section class="col-xs-12">
          <div class="content-box">
-            <form action="firewall_nat_out_edit.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <table class="table table-striped">
                <tr>
                  <td colspan="2">

--- a/src/www/firewall_rules_edit.php
+++ b/src/www/firewall_rules_edit.php
@@ -682,7 +682,7 @@ include("head.inc");
        <?php if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
          <section class="col-xs-12">
            <div class="content-box">
-              <form action="firewall_rules_edit.php" method="post" name="iform" id="iform">
+              <form method="post" name="iform" id="iform">
                <input type='hidden' name="id" value="<?=isset($id) ? $id:''?>" />
                <input name="after" type="hidden" value="<?=isset($after) ? $after :'';?>" />
                <input type="hidden" name="floating" value="<?=$pconfig['floating'];?>" />

--- a/src/www/firewall_schedule.php
+++ b/src/www/firewall_schedule.php
@@ -115,7 +115,7 @@ $main_buttons = array(
        <?php if (isset($savemsg)) print_info_box($savemsg); ?>
        <section class="col-xs-12">
          <div class="content-box tab-content">
-            <form action="firewall_schedule.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <input type="hidden" id="id" name="id" value="" />
              <input type="hidden" id="action" name="act" value="" />
              <table class="table table-striped">

--- a/src/www/firewall_schedule_edit.php
+++ b/src/www/firewall_schedule_edit.php
@@ -781,7 +781,7 @@ function removeRow(el) {
        <?php if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
          <section class="col-xs-12">
            <div class="content-box tab-content">
-              <form action="firewall_schedule_edit.php" method="post" name="iform" id="iform">
+              <form method="post" name="iform" id="iform">
                <input type="hidden" name="schedlabel" value="<?=$pconfig['schedlabel'];?>"/>
                  <table class="table table-striped">
                    <tbody>

--- a/src/www/firewall_virtual_ip.php
+++ b/src/www/firewall_virtual_ip.php
@@ -274,7 +274,7 @@ $main_buttons = array(
        ?>
        <section class="col-xs-12">
          <div class="content-box tab-content">
-            <form action="firewall_virtual_ip.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <input type="hidden" id="id" name="id" value="" />
              <input type="hidden" id="action" name="act" value="" />
              <table class="table table-striped">

--- a/src/www/firewall_virtual_ip_edit.php
+++ b/src/www/firewall_virtual_ip_edit.php
@@ -309,7 +309,7 @@ $( document ).ready(function() {
        <?php if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
        <section class="col-xs-12">
          <div class="content-box tab-content">
-            <form action="firewall_virtual_ip_edit.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <table class="table table-striped">
                <thead></thead>
                <tbody>

--- a/src/www/interfaces_ppps_edit.php
+++ b/src/www/interfaces_ppps_edit.php
@@ -445,7 +445,7 @@ include("head.inc");
        <div class="row">
          <?php if (isset($input_errors) && count($input_errors) > 0) print_input_errors($input_errors); ?>
          <section class="col-xs-12">
-            <form action="interfaces_ppps_edit.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <div class="tab-content content-box col-xs-12 __mb">
                <div class="table-responsive">
                  <table class="table table-striped">

--- a/src/www/services_dhcp.php
+++ b/src/www/services_dhcp.php
@@ -692,7 +692,7 @@ include("head.inc");
            <?php else: ?>
              <?php display_top_tabs($tab_array); ?>
            <div class="tab-content content-box col-xs-12">
-              <form action="services_dhcp.php" method="post" name="iform" id="iform">
+              <form method="post" name="iform" id="iform">
                <div class="table-responsive">
                  <table class="table table-striped">
                    <tr>

--- a/src/www/status_dhcp_leases.php
+++ b/src/www/status_dhcp_leases.php
@@ -455,7 +455,7 @@ include("head.inc");?>
        </div>
      </section>
      <section class="col-xs-12">
-        <form action="status_dhcp_leases.php" method="get">
+        <form method="get">
        <input type="hidden" name="order" value="<?=htmlspecialchars($_GET['order']);?>" />
 <?php
        if (!empty($_GET['all'])): ?>

--- a/src/www/status_dhcpv6_leases.php
+++ b/src/www/status_dhcpv6_leases.php
@@ -540,7 +540,7 @@ endif;?>
      </section>

      <section class="col-xs-12">
-          <form action="status_dhcpv6_leases.php" method="get">
+          <form method="get">
          <input type="hidden" name="order" value="<?=htmlspecialchars($_GET['order']);?>" />
          <?php if ($_GET['all']): ?>
          <input type="hidden" name="all" value="0" />

--- a/src/www/status_filter_reload.php
+++ b/src/www/status_filter_reload.php
@@ -82,7 +82,7 @@ include("head.inc");
          <section class="col-xs-12">
            <div class="content-box ">
              <div class="col-xs-12">
-                <p><form action="status_filter_reload.php" method="post" name="filter">
+                <p><form method="post" name="filter">
                <input type="submit" value="<?= gettext('Reload Filter') ?>" class="btn btn-primary" name="reloadfilter" id="reloadfilter" />
                <?php if (!empty($config['hasync']['synchronizetoip'])): ?>
                <input type="submit" value="<?= gettext('Force Config Sync') ?>" class="btn btn-primary" name="syncfilter" id="syncfilter" />

--- a/src/www/status_openvpn.php
+++ b/src/www/status_openvpn.php
@@ -129,7 +129,7 @@ $( document ).ready(function() {
        <header class="content-box-head container-fluid"> <h3><?=gettext("OpenVPN Status");?></h3>
        </header>
        <div class="content-box-main col-xs-12">
-          <form action="status_openvpn.php" method="get" name="iform">
+          <form method="get" name="iform">
            <div class="table-responsive">
              <table class="table table-striped">
 <?php

--- a/src/www/system_advanced_admin.php
+++ b/src/www/system_advanced_admin.php
@@ -311,7 +311,7 @@ include("head.inc");
 ?>
      <section class="col-xs-12">
        <div class="content-box tab-content table-responsive">
-          <form action="system_advanced_admin.php" method="post" name="iform" id="iform">
+          <form method="post" name="iform" id="iform">
            <table class="table table-striped">
              <tr>
                <td width="22%"><strong><?=gettext("webConfigurator");?></strong></td>

--- a/src/www/system_advanced_firewall.php
+++ b/src/www/system_advanced_firewall.php
@@ -270,7 +270,7 @@ include("head.inc");
 ?>
      <section class="col-xs-12">
          <div class="content-box tab-content  table-responsive">
-            <form action="system_advanced_firewall.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <table class="table table-striped ">
                <tr>
                  <td width="22%"><strong><?=gettext("IPv6 Options");?></strong></td>

--- a/src/www/system_advanced_misc.php
+++ b/src/www/system_advanced_misc.php
@@ -244,7 +244,7 @@ include("head.inc");
 ?>
      <section class="col-xs-12">
        <div class="content-box tab-content table-responsive">
-          <form action="system_advanced_misc.php" method="post" name="iform" id="iform">
+          <form method="post" name="iform" id="iform">
            <table class="table table-striped">
              <tr>
                <td width="22%"><strong><?= gettext('Load Balancing') ?></strong></td>

--- a/src/www/system_advanced_network.php
+++ b/src/www/system_advanced_network.php
@@ -103,7 +103,7 @@ include("head.inc");
 ?>
    <section class="col-xs-12">
      <div class="content-box tab-content table-responsive">
-        <form action="system_advanced_network.php" method="post" name="iform" id="iform">
+        <form method="post" name="iform" id="iform">
          <table class="table table-striped">
              <tr>
                <th colspan="2" valign="top" class="listtopic"><?=gettext("Network Interfaces"); ?></th>

--- a/src/www/system_advanced_notifications.php
+++ b/src/www/system_advanced_notifications.php
@@ -143,7 +143,7 @@ include("head.inc");
 <section class="page-content-main">
  <div class="container-fluid">
    <div class="row">
-      <form action="system_advanced_notifications.php" method="post">
+      <form method="post">
 <?php
      if (isset($savemsg)) {
          print_info_box($savemsg);
@@ -152,7 +152,7 @@ include("head.inc");
      </form>
        <section class="col-xs-12">
          <div class="content-box tab-content table-responsive">
-            <form action="system_advanced_notifications.php" method="post" name="iform">
+            <form method="post" name="iform">
            <table class="table table-striped">
              <tr>
                <td width="22%"><strong><?=gettext("Growl");?></strong></td>

--- a/src/www/system_advanced_sysctl.php
+++ b/src/www/system_advanced_sysctl.php
@@ -150,7 +150,7 @@ $( document ).ready(function() {
            print_info_box_apply(gettext("The firewall tunables have changed.  You must apply the configuration to take affect."));
        }
 ?>
-      <form action="system_advanced_sysctl.php" method="post" id="iform">
+      <form method="post" id="iform">
        <input type="hidden" id="id" name="id" value="" />
        <input type="hidden" id="action" name="act" value="" />
      </form>
@@ -193,7 +193,7 @@ $( document ).ready(function() {
            </table>
 <?php
            else : ?>
-            <form action="system_advanced_sysctl.php" method="post">
+            <form method="post">
              <table class="table table-striped">
                <thead>
                  <tr>

--- a/src/www/system_authservers.php
+++ b/src/www/system_authservers.php
@@ -433,7 +433,7 @@ $( document ).ready(function() {
          <div class="tab-content content-box col-xs-12 table-responsive">
            <?php if ($act == "new" || $act == "edit") :
 ?>
-            <form id="iform" name="iform" action="system_authservers.php" method="post">
+            <form id="iform" name="iform" method="post">
              <table class="table table-striped">
                <tr>
                  <td width="22%"></td>

--- a/src/www/system_camanager.php
+++ b/src/www/system_camanager.php
@@ -482,7 +482,7 @@ $main_buttons = array(
        <?php if ($act == "new" || $act == "edit") :
 ?>

-        <form action="system_camanager.php" method="post" name="iform" id="iform">
+        <form method="post" name="iform" id="iform">
          <input type="hidden" name="id" id="id" value="<?=isset($id) ? $id :"";?>"/>
          <input type="hidden" name="act" id="action" value="<?=$act;?>"/>
          <table class="table table-striped">
@@ -699,7 +699,7 @@ $main_buttons = array(

 <?php
        else :?>
-        <form action="system_camanager.php" method="post" name="iform" id="iform">
+        <form method="post" name="iform" id="iform">
          <input type="hidden" name="id" id="id" value="<?=isset($id) ? $id :"";?>"/>
          <input type="hidden" name="act" id="action" value="<?=$act;?>"/>
        </form>

--- a/src/www/system_certmanager.php
+++ b/src/www/system_certmanager.php
@@ -685,7 +685,7 @@ $( document ).ready(function() {

 <?php
        if ($act == "new") :?>
-          <form action="system_certmanager.php" method="post" name="iform" id="iform" >
+          <form method="post" name="iform" id="iform" >
            <input type="hidden" name="act" value="<?=$act;?>"/>
 <?php
            if (isset($userid)) :?>
@@ -1131,7 +1131,7 @@ $( document ).ready(function() {
          elseif ($act == "csr") :
 ?>

-          <form action="system_certmanager.php" method="post" name="iform" id="iform">
+          <form method="post" name="iform" id="iform">
            <input name="act" type="hidden" value="csr" />
 <?php
            if (isset($id)) :?>
@@ -1177,7 +1177,7 @@ $( document ).ready(function() {
          </form>
 <?php
          else :?>
-          <form action="system_certmanager.php" method="post" name="iform" id="iform">
+          <form method="post" name="iform" id="iform">
            <input type="hidden" name="id" id="id" value="<?=isset($id) ? $id :"";?>"/>
            <input type="hidden" name="act" id="action" value="<?=$act;?>"/>
          </form>

--- a/src/www/system_gateway_groups.php
+++ b/src/www/system_gateway_groups.php
@@ -161,7 +161,7 @@ $( document ).ready(function() {
      <section class="col-xs-12">
        <div class="container-fluid">
          <div class="tab-content content-box">
-            <form action="system_gateway_groups.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <input type="hidden" id="act" name="act" value="" />
              <input type="hidden" id="id" name="id" value="" />
              <div class="table-responsive">

--- a/src/www/system_gateway_groups_edit.php
+++ b/src/www/system_gateway_groups_edit.php
@@ -175,7 +175,7 @@ $( document ).ready(function() {
        <section class="col-xs-12">
          <div class="tab-content content-box col-xs-12">
            <div class="table-responsive">
-              <form action="system_gateway_groups_edit.php" method="post" name="iform" id="iform">
+              <form method="post" name="iform" id="iform">
                <table class="table table-striped" summary="system groups edit">
                  <tr>
                    <td width="22%"></td>

--- a/src/www/system_gateways.php
+++ b/src/www/system_gateways.php
@@ -294,7 +294,7 @@ $( document ).ready(function() {
      <section class="col-xs-12">
        <div class="content-box">
          <div class="table-responsive">
-            <form action="system_gateways.php" method="post"  name="iform" id="iform">
+            <form method="post"  name="iform" id="iform">
              <input type="hidden" id="id" name="id" value="" />
              <input type="hidden" id="action" name="act" value="" />
              <table class="table table-striped">

--- a/src/www/system_gateways_edit.php
+++ b/src/www/system_gateways_edit.php
@@ -555,7 +555,7 @@ $( document ).ready(function() {
 } ?>
      <section class="col-xs-12">
        <div class="content-box  table-responsive">
-            <form action="system_gateways_edit.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
 <?php
            if ($pconfig['attribute'] == "system" || is_numeric($pconfig['attribute'])):?>
              <input type='hidden' name='attribute' id='attribute' value="<?=$pconfig['attribute'];?>"/>

--- a/src/www/system_general.php
+++ b/src/www/system_general.php
@@ -307,7 +307,7 @@ include("head.inc");
 ?>
    <section class="col-xs-12">
      <div class="content-box tab-content">
-        <form action="system_general.php" method="post">
+        <form method="post">
          <table class="table table-striped">
            <tr>
              <td width="22%"><strong><?=gettext("System");?></strong></td>

--- a/src/www/system_groupmanager.php
+++ b/src/www/system_groupmanager.php
@@ -311,7 +311,7 @@ $( document ).ready(function() {
        <div class="tab-content content-box col-xs-12 table-responsive">
 <?php
        if ($act == "new" || $act == "edit") :?>
-          <form action="system_groupmanager.php" method="post" name="iform" id="iform" onsubmit="presubmit()">
+          <form method="post" name="iform" id="iform" onsubmit="presubmit()">
            <input type="hidden" id="act" name="act" value="" />
            <input type="hidden" id="groupid" name="groupid" value="<?=(isset($id) ? $id : '');?>" />
            <input type="hidden" id="privid" name="privid" value="" />
@@ -458,7 +458,7 @@ $( document ).ready(function() {
          </form>
 <?php
          else :?>
-          <form action="system_groupmanager.php" method="post" name="iform2" id="iform2">
+          <form method="post" name="iform2" id="iform2">
            <input type="hidden" id="act" name="act" value="" />
            <input type="hidden" id="groupid" name="groupid" value="<?=(isset($id) ? $id : "");?>" />
            <input type="hidden" id="groupname" name="groupname" value="" />

--- a/src/www/system_hasync.php
+++ b/src/www/system_hasync.php
@@ -92,7 +92,7 @@ include("head.inc");
      <section class="col-xs-12">
        <div class="content-box">
          <div class="table-responsive">
-            <form action="system_hasync.php" method="post">
+            <form method="post">
              <table class="table table-striped">
                <tr>
                  <td width="22%"><strong><?=gettext('State Synchronization') ?></strong></td>

--- a/src/www/system_routes.php
+++ b/src/www/system_routes.php
@@ -230,7 +230,7 @@ $( document ).ready(function() {
 endif; ?>
        <section class="col-xs-12">
          <div class="tab-content content-box col-xs-12">
-            <form action="system_routes.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <input type="hidden" id="act" name="act" value="" />
              <input type="hidden" id="id" name="id" value="" />
              <div class="table-responsive">

--- a/src/www/system_routes_edit.php
+++ b/src/www/system_routes_edit.php
@@ -242,7 +242,7 @@ include("head.inc");
 } ?>
        <section class="col-xs-12">
          <div class="content-box">
-            <form action="system_routes_edit.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <div class="table-responsive">
                <table class="table table-striped">
                  <tr>

--- a/src/www/system_usermanager.php
+++ b/src/www/system_usermanager.php
@@ -599,7 +599,7 @@ $( document ).ready(function() {
            <div class="tab-content content-box col-xs-12 table-responsive">
 <?php
            if ($act == "new" || $act == "edit" ) :?>
-              <form action="system_usermanager.php" method="post" name="iform" id="iform" onsubmit="presubmit()">
+              <form method="post" name="iform" id="iform" onsubmit="presubmit()">
                <input type="hidden" id="act" name="act" value="<?=$act;?>" />
                <input type="hidden" id="userid" name="userid" value="<?=(isset($id) ? $id : '');?>" />
                <input type="hidden" id="priv_delete" name="priv_delete" value="" /> <!-- delete priv action -->
@@ -927,7 +927,7 @@ $( document ).ready(function() {
              </form>
 <?php
              else :?>
-              <form action="system_usermanager.php" method="post" name="iform2" id="iform2">
+              <form method="post" name="iform2" id="iform2">
                <input type="hidden" id="act2" name="act" value="" />
                <input type="hidden" id="userid" name="userid" value="<?=(isset($id) ? $id : '');?>" />
                <input type="hidden" id="username" name="username" value="" />

--- a/src/www/system_usermanager_addprivs.php
+++ b/src/www/system_usermanager_addprivs.php
@@ -117,7 +117,7 @@ include("head.inc");
 ?>
      <section class="col-xs-12">
        <div class="tab-content content-box col-xs-12">
-          <form action="system_usermanager_addprivs.php" method="post" name="iform">
+          <form method="post" name="iform">
            <table class="table table-striped">
              <tr>
                <td width="22%"><?=gettext("System Privileges");?></td>

--- a/src/www/system_usermanager_passwordmg.php
+++ b/src/www/system_usermanager_passwordmg.php
@@ -85,7 +85,7 @@ include("head.inc");
 ?>
        <section class="col-xs-12">
          <div class="content-box">
-            <form action="system_usermanager_passwordmg.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <div class="table-responsive">
                <table class="table table-striped">
                  <tr>

--- a/src/www/system_usermanager_settings.php
+++ b/src/www/system_usermanager_settings.php
@@ -97,7 +97,7 @@ endif;?>
 ?>
        <section class="col-xs-12">
          <div class="tab-content content-box col-xs-12 table-responsive">
-            <form action="system_usermanager_settings.php" method="post">
+            <form method="post">
              <table class="table table-striped table-sort">
                <tr>
                  <td width="22%"><a id="help_for_session_timeout" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("Session Timeout"); ?></td>

--- a/src/www/system_usermanager_settings_ldapacpicker.php
+++ b/src/www/system_usermanager_settings_ldapacpicker.php
@@ -72,7 +72,7 @@ if (isset($_GET['basedn']) && isset($_GET['host'])) {
        window.close();
      }
  </script>
- <form method="post" action="system_usermanager_settings_ldapacpicker.php">
+ <form method="post">
 <?php
  if (empty($ous)) :?>
  <p><?=gettext("Could not connect to the LDAP server. Please check your LDAP configuration.");?></p>

--- a/src/www/vpn_ipsec_keys.php
+++ b/src/www/vpn_ipsec_keys.php
@@ -117,7 +117,7 @@ if (is_subsystem_dirty('ipsec')) {
 ?>
      <section class="col-xs-12">
        <div class="tab-content content-box col-xs-12">
-          <form action="vpn_ipsec_keys.php" method="post">
+          <form method="post">
            <div class="table-responsive">
              <table class="table table-striped">
                <tr>

--- a/src/www/vpn_ipsec_keys_edit.php
+++ b/src/www/vpn_ipsec_keys_edit.php
@@ -135,7 +135,7 @@ include("head.inc");
        ?>
        <section class="col-xs-12">
          <div class="content-box">
-            <form action="vpn_ipsec_keys_edit.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <div class="table-responsive">
                <table class="table table-striped">
                  <tr>

--- a/src/www/vpn_ipsec_mobile.php
+++ b/src/www/vpn_ipsec_mobile.php
@@ -357,7 +357,7 @@ if (isset($input_errors) && count($input_errors) > 0) {
 ?>
          <section class="col-xs-12">
           <div class="tab-content content-box col-xs-12">
-               <form action="vpn_ipsec_mobile.php" method="post" name="iform" id="iform">
+               <form method="post" name="iform" id="iform">
               <div class="table-responsive">
                <table class="table table-striped table-sort">
                    <tr>

--- a/src/www/vpn_ipsec_phase1.php
+++ b/src/www/vpn_ipsec_phase1.php
@@ -581,7 +581,7 @@ function dpdchkbox_change() {

      <section class="col-xs-12">
        <div class="tab-content content-box col-xs-12">
-          <form action="vpn_ipsec_phase1.php" method="post" name="iform" id="iform">
+          <form method="post" name="iform" id="iform">
            <div class="table-responsive">
              <table class="table table-striped">
                  <tr>

--- a/src/www/vpn_ipsec_phase2.php
+++ b/src/www/vpn_ipsec_phase2.php
@@ -645,7 +645,7 @@ if (isset($input_errors) && count($input_errors) > 0) {
    <div class="row">
        <section class="col-xs-12">
        <div class="tab-content content-box col-xs-12">
-          <form action="vpn_ipsec_phase2.php" method="post" name="iform" id="iform">
+          <form method="post" name="iform" id="iform">
            <div class="table-responsive">
              <table class="table table-striped">
                <tr>

--- a/src/www/vpn_ipsec_settings.php
+++ b/src/www/vpn_ipsec_settings.php
@@ -147,7 +147,7 @@ if (isset($input_errors) && count($input_errors) > 0) {
 ?>
        <section class="col-xs-12">
          <div class="tab-content content-box col-xs-12">
-              <form action="vpn_ipsec_settings.php" method="post" name="iform" id="iform">
+              <form method="post" name="iform" id="iform">
                <div class="table-responsive">
                  <table class="table table-striped">
                    <tr>

--- a/src/www/vpn_l2tp.php
+++ b/src/www/vpn_l2tp.php
@@ -177,7 +177,7 @@ include("head.inc");
        ?>
        <section class="col-xs-12">
          <div class="tab-content content-box col-xs-12">
-            <form action="vpn_l2tp.php" method="post" name="iform" id="iform">
+            <form method="post" name="iform" id="iform">
              <div class="table-responsive">
                <table class="table table-striped">
                  <tr>

--- a/src/www/vpn_openvpn_client.php
+++ b/src/www/vpn_openvpn_client.php
@@ -530,7 +530,7 @@ endif; ?>
        <div class="tab-content content-box col-xs-12">
 <?php
        if ($act=="new" || $act=="edit") :?>
-        <form action="vpn_openvpn_client.php" method="post" name="iform" id="iform">
+        <form method="post" name="iform" id="iform">
          <div class="table-responsive">
          <table class="table table-striped">
            <tr>

--- a/src/www/vpn_openvpn_server.php
+++ b/src/www/vpn_openvpn_server.php
@@ -731,7 +731,7 @@ function tuntap_change() {
          <div class="tab-content content-box col-xs-12">
 <?php
          if ($act=="new" || $act=="edit") :?>
-              <form action="vpn_openvpn_server.php" method="post" name="iform" id="iform">
+              <form method="post" name="iform" id="iform">
                <div class="table-responsive">
                  <table class="table table-striped">
                    <tr>

--- a/src/www/wizard.php
+++ b/src/www/wizard.php
@@ -376,7 +376,7 @@ function showchange() {
 		    <section class="col-xs-12">
 			     <div class="content-box">

-					 <form action="wizard.php" method="post" name="iform" id="iform">
+					 <form method="post" name="iform" id="iform">
 						<input type="hidden" name="xml" value="<?= htmlspecialchars($xml) ?>" />
 						<input type="hidden" name="stepid" value="<?= htmlspecialchars($stepid) ?>" />