don't send access token in JSON post body

8 years ago · 9450cd6a17
1 changed files with 1 additions and 1 deletions
--- a/lib/helpers.php
+++ b/lib/helpers.php
@ -137,7 +137,7 @@ function micropub_post($endpoint, $params, $access_token, $file_path = NULL, $js

  if(!$file_path) {
    if($json) {
-      $params['access_token'] = $access_token;
+      // $params['access_token'] = $access_token;
      $httpheaders[] = 'Content-type: application/json';
      $post = json_encode($params);
    } else {