From bc19e46d91126a1a10194c2127634faedbf85a33 Mon Sep 17 00:00:00 2001
From: versx <versx@ver.sx>
Date: Mon, 17 Aug 2020 03:05:22 -0700
Subject: [PATCH] Use post search requests

---
 src/routes/api.js           | 4 ++--
 src/views/index-js.mustache | 7 ++++---
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/src/routes/api.js b/src/routes/api.js
index e4c53238..887bdc1c 100644
--- a/src/routes/api.js
+++ b/src/routes/api.js
@@ -21,8 +21,8 @@ router.post('/get_data', async (req, res) => {
     res.json({ data: data });
 });
 
-router.get('/search', async (req, res) => {
-    const data = await getSearch(req.query);
+router.post('/search', async (req, res) => {
+    const data = await getSearch(req.body);
     res.json({ data: data });
 });
 
diff --git a/src/views/index-js.mustache b/src/views/index-js.mustache
index 7739d760..19b1f010 100644
--- a/src/views/index-js.mustache
+++ b/src/views/index-js.mustache
@@ -1791,12 +1791,13 @@ function loadSearchData (id, value) {
     }
     $.ajax({
         url: '/api/search',
-        type: 'GET',
+        type: 'POST',
         data: {
             id: id,
             value: value,
             lat: center.lat,
-            lon: center.lng
+            lon: center.lng,
+            _csrf: '{{csrf}}'
         },
         timeout: 30000,
         dataType: 'json',
@@ -2055,7 +2056,7 @@ function loadData () {
     loadRequest = $.ajax({
         url: '/api/get_data',
         data: data,
-        type: 'post',
+        type: 'POST',
         async: true,
         success: function (data) {
             const gyms = data.data.gyms;