Don't use "GET" for a form with a password in the obvious case where

we have no other bookmarkable data that we'll want to put in the URL.

1 files changed, 1 insertions, 1 deletions

diff --git a/CGI.pl b/CGI.pl
index 4555ea856..abf46a9d5 100644
--- a/CGI.pl
+++ b/CGI.pl
@@ -436,7 +436,7 @@ sub confirm_login {
 	    $nexturl = $&;
         }
         my $method = "POST";
-        if (defined $ENV{"REQUEST_METHOD"}) {
+        if (defined $ENV{"REQUEST_METHOD"} && length($::buffer) > 1) {
             $method = $ENV{"REQUEST_METHOD"};
         }
         print "