diff --git a/classes/controller.php b/classes/controller.php index cbb83607..1df85340 100644 --- a/classes/controller.php +++ b/classes/controller.php @@ -86,9 +86,11 @@ class AdminController */ public function execute() { - if (!isset($this->post['admin-nonce']) || !Utils::verifyNonce($this->post['admin-nonce'], 'admin-form')) { - $this->admin->setMessage('Unauthorized', 'error'); - return false; + if (strtolower($_SERVER['REQUEST_METHOD']) == 'post') { + if (!isset($this->post['admin-nonce']) || !Utils::verifyNonce($this->post['admin-nonce'], 'admin-form')) { + $this->admin->setMessage('Unauthorized', 'error'); + return false; + } } $success = false;