X-Git-Url: https://code.citadel.org/?a=blobdiff_plain;f=webcit%2Fwebcit.c;h=0368e6429cc27bfde7db3f3c00b6a7425906ad39;hb=792482b497dff678728237e66bf333ad29cb088e;hp=c6677b285e1d0f8d24ac59ca7238fb56dae1fc22;hpb=68647358e1bb8ba0bb129ab2a571ccf78685405e;p=citadel.git diff --git a/webcit/webcit.c b/webcit/webcit.c index c6677b285..0368e6429 100644 --- a/webcit/webcit.c +++ b/webcit/webcit.c @@ -1209,7 +1209,7 @@ void session_loop(struct httprequest *req) } /* If the client sent a nonce that is incorrect, kill the request. */ - if (!strcasecmp(request_method, "POST")) { + if (strlen(bstr("nonce")) > 0) { lprintf(9, "Comparing supplied nonce %s to session nonce %ld\n", bstr("nonce"), WC->nonce); if (atoi(bstr("nonce")) != WC->nonce) {