From b4e75b2a25d0a30d77b2160c8195835c9816cfe0 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <fox@bah.org.ru>
Date: Tue, 29 Dec 2009 18:49:27 +0300
Subject: use POST parameters for frontend requests

---
 modules/pref-prefs.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'modules/pref-prefs.php')

diff --git a/modules/pref-prefs.php b/modules/pref-prefs.php
index 3cd557d97..8159f0f01 100644
--- a/modules/pref-prefs.php
+++ b/modules/pref-prefs.php
@@ -120,7 +120,7 @@
 
 		} else if ($subop == "getHelp") {
 
-			$pref_name = db_escape_string($_GET["pn"]);
+			$pref_name = db_escape_string($_REQUEST["pn"]);
 
 			$result = db_query($link, "SELECT help_text FROM ttrss_prefs
 				WHERE pref_name = '$pref_name'");
-- 
cgit v1.2.3