Webmods: Only accept POST requests with a secret parameter
This is a first step against CSRF. Thanks to flakes for the idea. git-svn-id: https://znc.svn.sourceforge.net/svnroot/znc/trunk@1932 726aef4b-f618-498e-8847-2d620e286838
This commit is contained in:
1 parent
eaaddf01bb
commit
b0d140e2ed
4 files changed
+21
No files matched your search
@@ -361,6 +361,10 @@ const map<CString, VCString>& CHTTPSock::GetParams() const {
|
||||
return m_msvsParams;
|
||||
}
|
||||
|
||||
bool CHTTPSock::IsPost() const {
|
||||
return m_bPost;
|
||||
}
|
||||
|
||||
bool CHTTPSock::PrintNotFound() {
|
||||
return PrintErrorPage(404, "Not Found", "The requested URL was not found on this server.");
|
||||
}
|
||||
|
||||
Reference in new issue
Block a user