mirror of
https://github.com/slawkens/myaac.git
synced 2025-10-14 09:44:55 +02:00
Fixes to csrf protection
This commit is contained in:
@@ -28,7 +28,7 @@ const CL_LIMIT = 600; // maximum changelog body length
|
||||
|
||||
$id = $_GET['id'] ?? 0;
|
||||
|
||||
if(!empty($action))
|
||||
if(!empty($action) && isRequestMethod('post'))
|
||||
{
|
||||
$id = $_POST['id'] ?? null;
|
||||
$body = isset($_POST['body']) ? stripslashes($_POST['body']) : null;
|
||||
|
Reference in New Issue
Block a user