From 944c29b96429ec95ac1371cb33cc43704a60c7b1 Mon Sep 17 00:00:00 2001 From: Igor Scheller Date: Tue, 20 Nov 2018 16:02:03 +0100 Subject: Require POST for sending forms * Ensure that the form is submitted with a post request * Replaced several links with forms Closes #494 (Security Vulnerability) --- includes/controller/user_driver_licenses_controller.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'includes/controller/user_driver_licenses_controller.php') diff --git a/includes/controller/user_driver_licenses_controller.php b/includes/controller/user_driver_licenses_controller.php index dd12db2a..69179b35 100644 --- a/includes/controller/user_driver_licenses_controller.php +++ b/includes/controller/user_driver_licenses_controller.php @@ -114,7 +114,7 @@ function user_driver_license_edit_controller() $wants_to_drive = true; } - if ($request->has('submit')) { + if ($request->hasPostData('submit')) { $wants_to_drive = $request->has('wants_to_drive'); if ($wants_to_drive) { $user_driver_license['has_car'] = $request->has('has_car'); -- cgit v1.3.1