Mark many as read must be a POST action

See https://github.com/marienfressinaud/FreshRSS/issues/599
This commit is contained in:
Marien Fressinaud
2014-09-16 14:23:04 +02:00
parent 497d3564c8
commit 1e5efc9299

View File

@@ -45,6 +45,10 @@ class FreshRSS_entry_Controller extends Minz_ActionController {
$entryDAO = FreshRSS_Factory::createEntryDao();
if ($id == false) {
if (!Minz_Request::isPost()) {
return;
}
if (!$get) {
$entryDAO->markReadEntries ($idMax);
} else {