We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 52b191d commit 8a5d008Copy full SHA for 8a5d008
web/index.php
@@ -200,7 +200,7 @@
200
if (isset($_POST['action'])) {
201
# Actions can only be performed on POST because we don't check csrf on GETs.
202
$action = detaintPath($_POST['action']);
203
-} else if (isset($_REQUEST['action']) and $_REQUEST['action']) {
+} else if (isset($_REQUEST['action']) and $_REQUEST['action'] and empty($_REQUEST['request'])) {
204
ZM\Error('actions can no longer be performed without POST. Requested: '.$_REQUEST['action']. ' for ' .$view);
205
}
206
0 commit comments