hide ids from delete button

server/brmbar-server

@@ -99,13 +99,14 @@ def items():
 @app.route('/items/', methods = ['POST'])
 def items_post():
     f = request.form
-    if f['action'] == 'add':
+    for (k, v) in f.iteritems():
+        if k == 'add' and v == 'add':
             if f['code'] and f['name'] and f['price']:
                 g.db.execute('INSERT INTO items (code, name, price) VALUES (?, ?, ?)', (f['code'], f['name'], f['price']))
                 g.db.commit()
             return redirect('/items/')
-    if f['action'].startswith('delete:'):
+        if k.startswith('delete:') and v == 'delete':
-        code = int(f['action'][7:])
+            code = k[7:]
             g.db.execute('DELETE FROM items WHERE code = ?', (code, ))
             g.db.commit()
             return redirect('/items/')

server/templates/items.html

@@ -5,9 +5,9 @@
 <form action="" method="post">
 <table>
 <tr><th>image</th><th>code</th><th>item</th><th>price</th><th>action</th></tr>
-<tr><td></td><td><input name="code" size="14"/></td><td><input name="name" size="30"/></td><td><input name="price" size="2"/></td><td><input type="submit" name="action" value="add"/></tr>
+<tr><td></td><td><input name="code" size="14"/></td><td><input name="name" size="30"/></td><td><input name="price" size="2"/></td><td><input type="submit" name="add" value="add"/></tr>
 {% for item in items %}
-<tr><td><img src="/static/items/{{ item.code|safe }}.jpg" width="64" height="64"/></td><td>{{ item.code|safe }}</td><td>{{ item.name|safe }}</td><td>{{ item.price }}</td><td><input type="submit" name="action" value="delete:{{ item.code }}"/></tr>
+<tr><td><img src="/static/items/{{ item.code|safe }}.jpg" width="64" height="64"/></td><td>{{ item.code|safe }}</td><td>{{ item.name|safe }}</td><td>{{ item.price }}</td><td><input type="submit" name="delete:{{ item.code }}" value="delete"/></tr>
 {% endfor %}
 </table>
 </form>