3 files changed, 16 insertions, 7 deletions
diff --git a/public/assets/css/bucky.css b/public/assets/css/bucky.css
index a5dcd55..ce55bfa 100644
--- a/public/assets/css/bucky.css
+++ b/public/assets/css/bucky.css
@@ -250,7 +250,7 @@ table, tr {
   display: block;
   padding: 4px 5px;
   text-decoration: none;
-  color: #444;
+  color: #222;
 }
 #threads td:nth-child(6) {
   text-align: center;
@@ -800,7 +800,8 @@ pre br {
 #message {
   text-align: left;
   max-width: 500px;
-  margin-top: 10px;
+  margin-top: 20px;
+  margin-left: 40px;
 }
 #message .av {
   float: left;
@@ -808,6 +809,7 @@ pre br {
   width: 40px;
   height: 40px;
   background: #fff;
+  background-size: cover;
 }
 #message > span {
   display: inline-block;
diff --git a/public/assets/js/lib/views/mail/mailbox.js b/public/assets/js/lib/views/mail/mailbox.js
index 860d200..b7877f2 100644
--- a/public/assets/js/lib/views/mail/mailbox.js
+++ b/public/assets/js/lib/views/mail/mailbox.js
@@ -54,20 +54,23 @@ var MailboxView = View.extend({
                 .replace(/{{size_class}}/g, size[0] )
     var $t = $(t)
     if (is_sender) {
-      $t.find('reply_link').remove()
+      $t.find('.reply_link').remove()
     }
     return $t
   },
 
   discard: function(e){
     var id = $(e.target).data('id')
+    var ok = confirm("Really delete this message?")
+    if (! ok) return
     $.ajax({
       method: 'delete',
       url: '/api/message/' + id,
+      headers: { "csrf-token": csrf() },
+      data: { _csrf: csrf() },
       success: function(){ window.location.reload() },
       error: function(){ window.location.reload() },
     })
   },
 
-
 })
diff --git a/public/assets/js/lib/views/mail/message.js b/public/assets/js/lib/views/mail/message.js
index 400c11e..c765b0a 100644
--- a/public/assets/js/lib/views/mail/message.js
+++ b/public/assets/js/lib/views/mail/message.js
@@ -45,18 +45,22 @@ var MessageView = View.extend({
                 .replace(/{{body}}/g, tidy_urls(message.body) )
     var $t = $(t)
     if (is_sender) {
-      $t.find('reply_link').remove()
+      $t.find('.reply_link').remove()
     }
     this.$el.empty().append($t)
   },
   
   discard: function(e){
     var id = $(e.target).data('id')
+    var ok = confirm("Really delete this message?")
+    if (! ok) return
     $.ajax({
       method: 'delete',
       url: '/api/message/' + id,
-      success: function(){ window.location.reload() },
-      error: function(){ window.location.reload() },
+      headers: { "csrf-token": csrf() },
+      data: { _csrf: csrf() },
+      success: function(){ window.location.href = "/mail" },
+      error: function(){ window.location.href = "/mail" },
     })
   },