X-Git-Url: https://git.mdrn.pl/wolnelektury.git/blobdiff_plain/6d7b11e4a01b2314c0527d94d91f3159c0bd34ce..aae232dcf008ab39db553bc1b20573fa00e3b191:/apps/social/views.py

diff --git a/apps/social/views.py b/apps/social/views.py
index 27769d740..8af17da4f 100644
--- a/apps/social/views.py
+++ b/apps/social/views.py
@@ -61,7 +61,10 @@ class ObjectSetsFormView(AjaxableFormView):
         return (obj, request.user), {}
 
 
+@require_POST
 def unlike_book(request, slug):
+    if not request.user.is_authenticated():
+        return HttpResponseForbidden('Login required.')
     book = get_object_or_404(Book, slug=slug)
     if likes(request.user, book):
         set_sets(request.user, book, [])