(bug 45017) Check whether this request is a POST before allowing a query module to...

Change-Id: Ie08fd3a887390e2ead6f6d6fe1e16fa8f8617a2c

diff --git a/includes/api/ApiQuery.php b/includes/api/ApiQuery.php
index 619d1ca..c1a0407 100644 (file)
--- a/includes/api/ApiQuery.php
+++ b/includes/api/ApiQuery.php
@@ -276,6 +276,10 @@ class ApiQuery extends ApiBase {
                // object by adding extra fields from the page table.
                // This function will gather all the extra request fields from the modules.
                foreach ( $modules as $module ) {
+                       if ( !$this->getRequest()->wasPosted() && $module->mustBePosted() ) {
+                               $this->dieUsageMsgOrDebug( array( 'mustbeposted', $module->getModuleName() ) );
+                       }
+
                        $module->requestExtraData( $this->mPageSet );
                }