From 9450cd6a176ec8df824b29089e05eb274457bb68 Mon Sep 17 00:00:00 2001
From: Aaron Parecki <aaron@parecki.com>
Date: Tue, 7 Mar 2017 12:43:37 -0800
Subject: don't send access token in JSON post body
---
lib/helpers.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
(limited to 'lib/helpers.php')
diff --git a/lib/helpers.php b/lib/helpers.php
index 9a862d1..198534f 100644
--- a/lib/helpers.php
+++ b/lib/helpers.php
@@ -137,7 +137,7 @@ function micropub_post($endpoint, $params, $access_token, $file_path = NULL, $js
if(!$file_path) {
if($json) {
- $params['access_token'] = $access_token;
+ // $params['access_token'] = $access_token;
$httpheaders[] = 'Content-type: application/json';
$post = json_encode($params);
} else {
--
cgit v1.2.3