Fix CSRF vulnerabilities

[sql-web.git] / contact.php

diff --git a/contact.php b/contact.php
index 3e99683d70b988e4b1cec0b3a00caba8e3ce5e0f..d0e68af8c3ceb44ebc6548c886818b324381f7b2 100644 (file)
--- a/contact.php
+++ b/contact.php
@@ -1,11 +1,14 @@
 <?php
+/*
+       (c) 2005 Joe Presbrey
+*/
 
 require_once('mitsql.cfg.php');
 require_once('mitsql.lib.php');
 
-$User = new User($Login->getUserID());
-
-//redirect('main');
+if (isOnline()) {
+       $User = new User($Login->getUserID());
+}
 
 include 'tpl/contact.php';