diff options
author | Joey Hess <joey@kitenet.net> | 2012-04-08 14:12:02 -0400 |
---|---|---|
committer | Joey Hess <joey@kitenet.net> | 2012-04-08 14:14:33 -0400 |
commit | 4e1806ef7c002a4a333c5822c13d7ceca303bf70 (patch) | |
tree | b434ab335fc3ce72a64d30fe8ddd147602743cf7 | |
parent | bcc2809b960d459966e563ed78e7e0793307b8ec (diff) | |
download | ikiwiki-4e1806ef7c002a4a333c5822c13d7ceca303bf70.tar ikiwiki-4e1806ef7c002a4a333c5822c13d7ceca303bf70.tar.gz |
save whole form state, not just QUERY_STRING, for postsignin
Normally, needsignin is called when there is a QUERY_STRING, not when a
form is posted. However, it's certianly possible, and should be supported,
to make a form that invokes an ikiwiki action that checks needsignin.
I encountered this when posting ?do=rename&page=foo. The form is displayed
without checking needsignin, for complicated reasons. Posting the form
is when the true authentication happens.
-rw-r--r-- | IkiWiki/CGI.pm | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/IkiWiki/CGI.pm b/IkiWiki/CGI.pm index 62383b6fd..5baa6c179 100644 --- a/IkiWiki/CGI.pm +++ b/IkiWiki/CGI.pm @@ -131,7 +131,7 @@ sub needsignin ($$) { if (! defined $session->param("name") || ! userinfo_get($session->param("name"), "regdate")) { - $session->param(postsignin => $ENV{QUERY_STRING}); + $session->param(postsignin => $q->query_string); cgi_signin($q, $session); cgi_savesession($session); exit; |