diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php index 0fb030fc..b9e2115c 100644 --- a/web/inc/secure_login.php +++ b/web/inc/secure_login.php @@ -85,6 +85,7 @@ function prevent_get_csrf () { if ($_SERVER['REQUEST_METHOD'] == "GET") { if (isset($_GET[$login_url])) return; if ($_SERVER['REQUEST_URI']=="" || $_SERVER['REQUEST_URI']=="/" || $_SERVER['REQUEST_URI']=="/login/" || $_SERVER['REQUEST_URI']=="/list/user/" || $_SERVER['REQUEST_URI']=="/list/web/") return; + if ($_SERVER['DOCUMENT_URI']=="/reset/index.php") return; } if (isset($_SERVER['HTTP_HOST']) == false) return; if (isset($_SERVER['SERVER_PORT']) == false) return;