diff --git a/htdocs/main.inc.php b/htdocs/main.inc.php index 9b93ae4da5f..a746d7922f9 100644 --- a/htdocs/main.inc.php +++ b/htdocs/main.inc.php @@ -111,10 +111,7 @@ analyse_sql_injection($_POST); // The test to do is to check if referrer ($_SERVER['HTTP_REFERER']) is same web site than Dolibarr ($_SERVER['HTTP_HOST']). if (! defined('NOCSRFCHECK') && ! empty($_SERVER['HTTP_HOST']) && ! empty($_SERVER['HTTP_REFERER']) && ! eregi($_SERVER['HTTP_HOST'], $_SERVER['HTTP_REFERER'])) { - // exit; Why not using simply an exit ? - unset($_GET); - unset($_POST); - unset($_REQUEST); + exit; //Why not using simply an exit ? Yes we can... } // This is to make Dolibarr working with Plesk