CSRF minor fixes (#1726)

* CSRF minor fixes

lhc_web/design/defaulttheme/js/lh.js

@@ -3394,11 +3394,11 @@ function lh(){
         }
 
     	if (inst.text() == 'volume_off'){
-    		$.get(this.wwwDir+  'user/setsettingajax/chat_message/1');
+    		$.post(this.wwwDir + 'user/setsettingajax/chat_message/1');
     		confLH.new_message_sound_admin_enabled = 1;
     		inst.text('volume_up');
     	} else {
-    		$.get(this.wwwDir+  'user/setsettingajax/chat_message/0');
+    		$.post(this.wwwDir + 'user/setsettingajax/chat_message/0');
     		confLH.new_message_sound_admin_enabled = 0;
     		inst.text('volume_off');
     	}
@@ -3412,23 +3412,23 @@ function lh(){
         }
 
     	if (inst.text() == 'volume_off'){
-    		$.get(this.wwwDir+  'user/setsettingajax/new_chat_sound/1');
+    		$.post(this.wwwDir+  'user/setsettingajax/new_chat_sound/1');
     		confLH.new_chat_sound_enabled = 1;
     		inst.text('volume_up');
     	} else {
-    		$.get(this.wwwDir+  'user/setsettingajax/new_chat_sound/0');
+    		$.post(this.wwwDir+  'user/setsettingajax/new_chat_sound/0');
     		confLH.new_chat_sound_enabled = 0;
     		inst.text('volume_off');
     	}
     	return false;
     };
 
     this.changeUserSettings = function(attr,value){
-    	$.get(this.wwwDir+  'user/setsettingajax/'+attr+'/'+value);
+    	$.post(this.wwwDir+  'user/setsettingajax/'+attr+'/'+value);
     };
 
-    this.changeUserSettingsIndifferent = function(attr,value){
-    	$.get(this.wwwDir+  'user/setsettingajax/'+attr+'/'+encodeURIComponent(value)+'/(indifferent)/true');
+    this.changeUserSettingsIndifferent = function(attr,value) {
+    	$.post(this.wwwDir+  'user/setsettingajax/'+attr+'/'+encodeURIComponent(value)+'/(indifferent)/true');
     };
 
 	this.switchToOfflineForm = function(){
@@ -3468,11 +3468,11 @@ function lh(){
     this.disableChatSoundUser = function(inst)
     {
     	if (inst.find('> i').text() == 'volume_off') {
-    		$.get(this.wwwDir+  'user/setsettingajax/chat_message/1');
+    		$.post(this.wwwDir+  'user/setsettingajax/chat_message/1');
     		confLH.new_message_sound_user_enabled = 1;
     		inst.find('> i').text('volume_up');
     	} else {
-    		$.get(this.wwwDir+  'user/setsettingajax/chat_message/0');
+    		$.post(this.wwwDir+  'user/setsettingajax/chat_message/0');
     		confLH.new_message_sound_user_enabled = 0;
     		inst.find('> i').text('volume_off');
     	};
@@ -4561,6 +4561,10 @@ window.onfocus = window.onblur = function(e) {
 
 window.lhcSelector = null;
 
+$( document ).ready(function() {
+    lhinst.protectCSFR();
+})
+
 /*Helper functions*/
 function chatsyncuser()
 {