Changeset 13025

Timestamp:

12/07/2023 03:14:09 PM (14 months ago)

Author:

ashfame

Message:

[matrix] tracbot - check for secret in POST

File:

• sites/trunk/api.wordpress.org/public_html/dotorg/matrix/trac-bot.php (modified) (1 diff)

sites/trunk/api.wordpress.org/public_html/dotorg/matrix/trac-bot.php

@@ -27 +27 @@
 
     // Verify it came from Maubot tracbot plugin.
-    if ( ! isset( $_GET['secret'] ) || $_GET['secret'] !== URL_SECRET__TRAC_BOT ) {
+    if ( ! isset( $_POST['secret'] ) || $_POST['secret'] !== URL_SECRET__TRAC_BOT ) {
         http_response_code( 403 );
         return;