# HG changeset patch
# User Matti Hamalainen <ccr@tnsp.org>
# Date 1386076700 -7200
# Node ID a3caded43f6d28d2361acc304c17ce44ea78a5b5
# Parent  cbe2693a3cd1e37a81a2119eb7f88eac0049b9de
Add possibility of always using GET requests when debug mode is enabled.

diff -r cbe2693a3cd1 -r a3caded43f6d msession.inc.php
--- a/msession.inc.php	Tue Dec 03 14:07:47 2013 +0200
+++ b/msession.inc.php	Tue Dec 03 15:18:20 2013 +0200
@@ -135,6 +135,9 @@
 
 function stCSRFCheck()
 {
+  if (stGetSetting("debug"))
+    return TRUE;
+
   $csrfID = stGetRequestItem("csrfID", FALSE);
   return ($csrfID !== FALSE && stGetSessionItem("csrfID", FALSE) == $csrfID);
 }
diff -r cbe2693a3cd1 -r a3caded43f6d msitegen.inc.php
--- a/msitegen.inc.php	Tue Dec 03 14:07:47 2013 +0200
+++ b/msitegen.inc.php	Tue Dec 03 15:18:20 2013 +0200
@@ -324,10 +324,21 @@
 
 function stChkRequestItem($name, &$sdata)
 {
-  if (!isset($_POST[$name]))
-    return stErrorStrF("Required data item '".$name."' not set.", $name);
+  if (stGetSetting("debug"))
+  {
+    if (!isset($_REQUEST[$name]))
+      return stErrorStrF("Required data item '".$name."' not set.", $name);
 
-  $data = trim($_POST[$name]);
+    $data = trim($_REQUEST[$name]);
+  }
+  else
+  {
+    if (!isset($_POST[$name]))
+      return stErrorStrF("Required data item '".$name."' not set.", $name);
+
+    $data = trim($_POST[$name]);
+  }
+  
   $slen = strlen($data);
 
   if ($sdata !== FALSE)
@@ -396,7 +407,7 @@
 
 function stGetRequestItem($name, $default = "", $allowGet = FALSE)
 {
-  if ($allowGet)
+  if ($allowGet || stGetSetting("debug"))
     return isset($_REQUEST[$name]) ? trim($_REQUEST[$name]) : $default;
   else
     return isset($_POST[$name]) ? trim($_POST[$name]) : $default;