fix

diff --git a/TODO b/TODO
index b39dff53969e2b7813a434ff85e9ceb21c324e7f..d9fb334778d4c2b3816361fa6b0803757eda6a19 100644 (file)
--- a/TODO
+++ b/TODO
@@ -3,8 +3,6 @@ REQUEST_METHOD=post CAHTEST_HOME=`pwd` ./test.cgi ; echo
 
 sort out debugging
 
-missing hidden parameter
-
 form entry has wrong action url
 
 update last in db when we return undef from check_divert

diff --git a/cgi-auth-flexible.pm b/cgi-auth-flexible.pm
index 1a2da282a969909b7ca819e20d0f6ca1cc6fa8f6..e5b89244476da131f03615daf19a367b6c12c0ac 100644 (file)
--- a/cgi-auth-flexible.pm
+++ b/cgi-auth-flexible.pm
@@ -705,6 +705,10 @@ sub check_ok ($) {
     my $params = $divert->{Params};
     my $cookie = $r->construct_cookie($cookiesecret);
 
+    if (defined $cookiesecret) {
+        $params->{$r->{S}{assoc_param_name}} = $r->hash($cookiesecret);
+    }
+
     if ($kind =~ m/^REDIRECT-/) {
        # for redirects, we honour stored NextParams and SetCookie,
        # as we would for non-divert