Fix phpmyadmin-security#240 Multiple CSRF vulnerabilities

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>

1 files changed, 2 insertions, 2 deletions

diff --git a/sql.php b/sql.php
index 13eb168e03..056497fd3b 100644
--- a/sql.php
+++ b/sql.php
@@ -69,8 +69,8 @@ if (! isset($err_url)) {
 // Coming from a bookmark dialog
 if (isset($_POST['bkm_fields']['bkm_sql_query'])) {
     $sql_query = $_POST['bkm_fields']['bkm_sql_query'];
-} elseif (isset($_GET['sql_query'])) {
-    $sql_query = $_GET['sql_query'];
+} elseif (isset($_POST['sql_query'])) {
+    $sql_query = $_POST['sql_query'];
 }
 
 // This one is just to fill $db