}
/* If the client sent a nonce that is incorrect, kill the request. */
- if (!strcasecmp(request_method, "POST")) {
+ if (strlen(bstr("nonce")) > 0) {
lprintf(9, "Comparing supplied nonce %s to session nonce %ld\n",
bstr("nonce"), WC->nonce);
if (atoi(bstr("nonce")) != WC->nonce) {