Fix buyNow: direct product page links instead of CSRF-blocked POST

script.js

@@ -627,24 +627,13 @@ var si = 0,
                 });
             })();
 
-            /* Buy Now — POST product to Odoo shop basket via form to avoid CORS, open cart in new window */
+            /* Buy Now — open Odoo shop product page in new tab */
+            var productUrls = {
+                54: 'https://ODOO4projects.com/shop/product/side-hustle-54',
+                55: 'https://ODOO4projects.com/shop/product/on-the-rise-55',
+                56: 'https://ODOO4projects.com/shop/product/powerhouse-56'
+            };
             window.buyNow = function (productId) {
-                var form = document.createElement('form');
-                form.method = 'POST';
-                form.action = 'https://ODOO4projects.com/shop/cart';
-                form.target = '_blank';
-                form.style.display = 'none';
-                var pid = document.createElement('input');
-                pid.type = 'hidden';
-                pid.name = 'product_id';
-                pid.value = productId;
-                form.appendChild(pid);
-                var qty = document.createElement('input');
-                qty.type = 'hidden';
-                qty.name = 'add_qty';
-                qty.value = '1';
-                form.appendChild(qty);
-                document.body.appendChild(form);
-                form.submit();
-                document.body.removeChild(form);
+                var url = productUrls[productId] || 'https://ODOO4projects.com/shop';
+                window.open(url, '_blank');
             };