fix

diff --git a/TODO b/TODO
index d9fb334778d4c2b3816361fa6b0803757eda6a19..b434df998f91c4963d3bb06374c75efde982370a 100644 (file)
--- a/TODO
+++ b/TODO
@@ -1,8 +1,9 @@
 REQUEST_METHOD=post CAHTEST_HOME=`pwd` ./test.cgi ; echo
 
 
-sort out debugging
+trying to log in always gives stale session
+
 
-form entry has wrong action url
+sort out debugging
 
 update last in db when we return undef from check_divert

diff --git a/cgi-auth-flexible.pm b/cgi-auth-flexible.pm
index e5b89244476da131f03615daf19a367b6c12c0ac..c3df875d1bbd266ea545c7d961c96e00d7d82a67 100644 (file)
--- a/cgi-auth-flexible.pm
+++ b/cgi-auth-flexible.pm
@@ -884,12 +884,17 @@ sub _assert_checked ($) {
     die "unchecked" unless exists $r->{Divert};
 }
 
+sub _must_be_post ($) {
+    my ($r) = @_;
+    my $meth = $r->_ch('get_method');
+    die "mutating non-POST" if $meth ne 'POST';
+}
+
 sub check_mutate ($) {
     my ($r) = @_;
     $r->_assert_checked();
     die if $r->{Divert};
-    my $meth = $r->_ch('get_method');
-    die "mutating non-POST" if $meth ne 'POST';
+    $r->_must_be_post();
 }
 
 #---------- output ----------