From: Ian Jackson <ian.jackson@eu.citrix.com>
Date: Thu, 10 Jan 2013 19:15:31 +0000 (+0000)
Subject: fix
X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?p=cgi-auth-flexible.git;a=commitdiff_plain;h=031ab04359164ef2e3d311e61637491479e6098d;ds=sidebyside

fix
---

diff --git a/TODO b/TODO
index b39dff5..d9fb334 100644
--- a/TODO
+++ b/TODO
@@ -3,8 +3,6 @@ REQUEST_METHOD=post CAHTEST_HOME=`pwd` ./test.cgi ; echo
 
 sort out debugging
 
-missing hidden parameter
-
 form entry has wrong action url
 
 update last in db when we return undef from check_divert
diff --git a/cgi-auth-flexible.pm b/cgi-auth-flexible.pm
index 1a2da28..e5b8924 100644
--- a/cgi-auth-flexible.pm
+++ b/cgi-auth-flexible.pm
@@ -705,6 +705,10 @@ sub check_ok ($) {
     my $params = $divert->{Params};
     my $cookie = $r->construct_cookie($cookiesecret);
 
+    if (defined $cookiesecret) {
+        $params->{$r->{S}{assoc_param_name}} = $r->hash($cookiesecret);
+    }
+
     if ($kind =~ m/^REDIRECT-/) {
 	# for redirects, we honour stored NextParams and SetCookie,
 	# as we would for non-divert