isMethod(Request::METHOD_POST)) { if (!$this->isCsrfTokenValid('delete_booking_edit_draft_'.$draft->getId(), $request->request->getString('_token'))) { throw $this->createAccessDeniedException('Invalid CSRF token.'); } $this->entityManager->remove($draft); $this->entityManager->flush(); $this->adminLogger->info('Delete booking edit draft', [ 'booking_number' => $draft->getBookingNumber(), ]); $this->addFlash('success', 'Der Buchungsentwurf wurde gelöscht'); $returnUrl = $this->getReturnUrl($request, 'app_admin_bookingeditdraft'); return new HxRedirectResponse($returnUrl); } return $this->render('admin/booking_edit_draft/modal_delete.html.twig', [ 'draft' => $draft, 'csrf_token_id' => 'delete_booking_edit_draft_'.$draft->getId(), ]); } }