From 518e627b46ac6ee7eb8bf095abbb82fa57ef8c5e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 14:37:53 +0200
Subject: [PATCH] Update index.php

---
 web/edit/file/index.php | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/web/edit/file/index.php b/web/edit/file/index.php
index 9addd23e..9071af3a 100644
--- a/web/edit/file/index.php
+++ b/web/edit/file/index.php
@@ -1,12 +1,14 @@
 <?php
 
 // Preventing CSRF
-$host_arr=explode(":", $_SERVER['HTTP_HOST']);
-$hostname=$host_arr[0];
-$port = $_SERVER['SERVER_PORT'];
-$expected_http_origin="https://".$hostname.":".$port;
-if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-    die ("Nope.");
+if ($_SERVER['REQUEST_METHOD']=='POST') {
+    $host_arr=explode(":", $_SERVER['HTTP_HOST']);
+    $hostname=$host_arr[0];
+    $port = $_SERVER['SERVER_PORT'];
+    $expected_http_origin="https://".$hostname.":".$port;
+    if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
+        die ("Nope.");
+    }
 }
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");