Replaced get and post with ajax to prevent XSRF.

Replaced some usages of Console.Writeline with proper logging.

.gitignore

@@ -43,4 +43,5 @@ NzbDrone.zip
 NzbDrone.sln.DotSettings.user*
 config.xml
 UpdateLogs/
-NzbDrone.Web/MediaCover
+NzbDrone.Web/MediaCover
+NzbDrone.fpr

NzbDrone.Core/Providers/AutoConfigureProvider.cs

@@ -5,12 +5,14 @@ using System.Linq;
 using System.Net;
 using System.Net.NetworkInformation;
 using System.Text.RegularExpressions;
+using NLog;
 using NzbDrone.Core.Model;
 
 namespace NzbDrone.Core.Providers
 {
     public class AutoConfigureProvider
     {
+        private static readonly Logger Logger = LogManager.GetCurrentClassLogger();
 
         public SabnzbdInfoModel AutoConfigureSab()
         {
@@ -88,8 +90,8 @@ namespace NzbDrone.Core.Providers
             }
             catch (Exception ex)
             {
-                Console.WriteLine("Failed to get response from: {0}", url);
+                Logger.Trace("Failed to get response from: {0}", url);
-                Console.WriteLine(ex.Message, ex);
+                Logger.Trace(ex.Message, ex);
             }
 
             return String.Empty;

NzbDrone.Core/Providers/Core/UdpProvider.cs

@@ -3,12 +3,15 @@ using System.Collections.Generic;
 using System.Net;
 using System.Net.Sockets;
 using System.Text;
+using NLog;
 using Ninject;
 
 namespace NzbDrone.Core.Providers.Core
 {
     public class UdpProvider
     {
+        private static readonly Logger Logger = LogManager.GetCurrentClassLogger();
+
         [Inject]
         public UdpProvider()
         {
@@ -168,7 +171,7 @@ namespace NzbDrone.Core.Providers.Core
 
             catch (Exception exc)
             {
-                Console.WriteLine(exc);
+                Logger.TraceException(exc.Message, exc);
                 return null;
             }
         }

NzbDrone.Web/Scripts/NzbDrone/Notification.js

@@ -64,9 +64,14 @@ $(window).load(function () {
         refreshNotifications();
     }
 
-
     function refreshNotifications() {
-        $.get('/notification/Comet', { message: currentMessage }, notificationCallback);
+        $.ajax({
+            url: '/notification/Comet',
+            data: { message: currentMessage },
+            success: function (data) {
+                notificationCallback(data);
+            }
+        });
     }
 
     function notificationCallback(data) {
@@ -83,10 +88,6 @@ $(window).load(function () {
     }
 
     //SetupNotifications();
-    //DisplayMsg("Scanning Series Folder.");
-
-
-
     function displayMsg(sMsg) {
         //set the message text
         $("#msgText").showHtml(sMsg, 150);

NzbDrone.Web/Scripts/NzbDrone/addSeries.js

@@ -20,9 +20,7 @@ $(".masterQualitySelector").live('change', function () {
 });
 
 $(".addExistingButton").live('click', function () {
-
     var root = $(this).parents(".existingSeries");
-
     var title = $(this).siblings(".seriesLookup").val();
     var seriesId = $(this).siblings(".seriesId").val();
     var qualityId = $(this).siblings(".qualitySelector").val();
@@ -44,16 +42,27 @@ $(".addExistingButton").live('click', function () {
 });
 
 function reloadExistingSeries() {
-    $.get(existingSeriesUrl, function (data) {
+    $.ajax({
+      url: existingSeriesUrl,
+      success: function( data ) {
         $('#existingSeries').html(data);
+      }
     });
 }
 
 //RootDir
+//Delete RootDir
 $('#rootDirs .actionButton img').live('click', function (image) {
     var path = $(image.target).attr('id');
-    $.post(deleteRootDirUrl, { Path: path }, function () {
+
-        refreshRoot();
+    $.ajax({
+        type: "POST",
+        url: deleteRootDirUrl,
+        data: { Path: path },
+        success: function () {
+            refreshRoot();
+            $("#rootDirInput").val('');
+        }
     });
 });
 
@@ -61,20 +70,29 @@ $('#saveDir').live('click', saveRootDir);
 
 function saveRootDir() {
     var path = $("#rootDirInput").val();
+
     if (path) {
-        $.post(saveRootDirUrl, { Path: path }, function () {
+        $.ajax({
-            refreshRoot();
+            type: "POST",
-            $("#rootDirInput").val('');
+            url: saveRootDirUrl,
+            data: { Path: path },
+            success: function () {
+                refreshRoot();
+                $("#rootDirInput").val('');
+            }
         });
     }
 }
 
 function refreshRoot() {
-    $.get(rootListUrl, function (data) {
+    $.ajax({
-        $('#rootDirs').html(data);
+        url: rootListUrl,
+        success: function (data) {
+            $('#rootDirs').html(data);
+            reloadAddNew();
+            reloadExistingSeries();
+        }
     });
-    reloadAddNew();
-    reloadExistingSeries();
 }
 
 
@@ -94,14 +112,16 @@ $('#saveNewSeries').live('click', function () {
         },
         success: function () {
             $("#newSeriesLookup").val("");
-            //$('#newSeriesPath').val("");
         }
     });
 });
 
 function reloadAddNew() {
-    $.get(addNewUrl, function (data) {
+    $.ajax({
-        $('#addNewSeries').html(data);
+        url: addNewUrl,
+        success: function (data) {
+            $('#addNewSeries').html(data);
+        }
     });
 }
 
@@ -121,7 +141,7 @@ $('#quickAddNew').live('click', function () {
         },
         success: function () {
             $("#newSeriesLookup").val("");
-            //$('#newSeriesPath').val("");
+            $('#newSeriesPath').val("");
         }
     });
 });

NzbDrone.Web/Views/Settings/Sabnzbd.cshtml

@@ -69,7 +69,6 @@
             $.ajax({
                 type: "GET",
                 url: autoConfigureSabUrl,
-                //data: jQuery.param({ username: $('#SabUsername').val(), password: $('#SabPassword').val() }),
                 error: function (req, status, error) {
                     alert("Sorry! We could not autoconfigure SABnzbd for you");
                 },