From 81cf686843634f2e2ff70db6553ef712c531ced0 Mon Sep 17 00:00:00 2001 From: olavmrk Date: Wed, 6 Mar 2013 12:53:38 +0000 Subject: Disable replay of POST request by default. Since we are going to disable autocreation of the POST data directory, we will need to disable POST replay by default. This patch adds the MellonPostReplay option, which can be used to enable and disable the POST replay functionality on a per-location basis. git-svn-id: https://modmellon.googlecode.com/svn/trunk@177 a716ebb1-153a-0410-b759-cfb97c6a1b53 --- auth_mellon_handler.c | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) (limited to 'auth_mellon_handler.c') diff --git a/auth_mellon_handler.c b/auth_mellon_handler.c index 9e9fbc3..cdc4c28 100644 --- a/auth_mellon_handler.c +++ b/auth_mellon_handler.c @@ -3063,8 +3063,14 @@ static int am_start_auth(request_rec *r) /* If this is a POST request, attempt to save it */ if (r->method_number == M_POST) { - if (am_save_post(r, &return_to) != OK) - return HTTP_INTERNAL_SERVER_ERROR; + if (CFG_VALUE(cfg, post_replay)) { + if (am_save_post(r, &return_to) != OK) + return HTTP_INTERNAL_SERVER_ERROR; + } else { + ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, + "POST data dropped because we do not have a" + " MellonPostReplay is not enabled."); + } } /* Check if IdP discovery is in use. */ -- cgit