From 642a20002ef1386c7691acdde68d2e958cfc5191 Mon Sep 17 00:00:00 2001
From: Dominik George <dominik.george@teckids.org>
Date: Fri, 23 Aug 2019 17:15:58 +0200
Subject: [PATCH] =?UTF-8?q?Use=20forms=20prefic=C4=93s=20for=20safety=20re?=
 =?UTF-8?q?asons.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 biscuit/apps/alsijil/views.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/biscuit/apps/alsijil/views.py b/biscuit/apps/alsijil/views.py
index c81d0c2b8..4c6870ba2 100644
--- a/biscuit/apps/alsijil/views.py
+++ b/biscuit/apps/alsijil/views.py
@@ -32,7 +32,7 @@ def lesson(request: HttpRequest, week: Optional[int] = None, period_id: Optional
     if lesson_period:
         # Create or get lesson documentation object; can be empty when first opening lesson
         lesson_documentation, created = LessonDocumentation.objects.get_or_create(lesson_period=lesson_period, week=wanted_week)
-        lesson_documentation_form = LessonDocumentationForm(request.POST or None, instance=lesson_documentation)
+        lesson_documentation_form = LessonDocumentationForm(request.POST or None, instance=lesson_documentation, prefix='leson_documentation')
 
         # Create all missing personal notes about members of all groups in lesson
         for group in lesson_period.lesson.groups.all():
@@ -42,7 +42,7 @@ def lesson(request: HttpRequest, week: Optional[int] = None, period_id: Optional
 
         # Create a formset that holds all personal notes for all persons in this lesson
         persons_qs = PersonalNote.objects.filter(lesson_period=lesson_period, week=wanted_week)
-        personal_note_formset = PersonalNoteFormSet(request.POST or None, queryset=persons_qs)
+        personal_note_formset = PersonalNoteFormSet(request.POST or None, queryset=persons_qs, prefix='personal_notes')
 
         if request.method == 'POST':
             if request.POST.get('action', None) == 'lesson_documentation':
-- 
GitLab