read state from POST (copy&paste error)

[indieauth-openid.git] / www / index.php

diff --git a/www/index.php b/www/index.php
index 52571a2d753d4e28ce4432da334bff62728f20d1..496d7d3bbede3e1bd271971a036ce511e03ca419 100644 (file)
--- a/www/index.php
+++ b/www/index.php
@@ -205,8 +205,8 @@ if ($_SERVER['REQUEST_METHOD'] == 'GET') {
     $redirect_uri = verifyUrlParameter($_POST, 'redirect_uri');
     $client_id    = verifyUrlParameter($_POST, 'client_id');
     $state        = null;
-    if (isset($_GET['state'])) {
-        $state = $_GET['state'];
+    if (isset($_POST['state'])) {
+        $state = $_POST['state'];
     }
     if (!isset($_POST['code'])) {
         error('"code" parameter missing');