Don't use "GET" for a form with a password in the obvious case where

we have no other bookmarkable data that we'll want to put in the URL.

diff --git a/CGI.pl b/CGI.pl
index 4555ea85631fa95407e2e4b021c5ef08663869df..abf46a9d5a66020214b73bd5262f2e21ff706764 100644 (file)
--- a/CGI.pl
+++ b/CGI.pl
@@ -436,7 +436,7 @@ sub confirm_login {
            $nexturl = $&;
         }
         my $method = "POST";
-        if (defined $ENV{"REQUEST_METHOD"}) {
+        if (defined $ENV{"REQUEST_METHOD"} && length($::buffer) > 1) {
             $method = $ENV{"REQUEST_METHOD"};
         }
         print "