1 files changed, 3 insertions, 0 deletions
diff --git a/upload.php b/upload.php
index 3c0c3a7..34c7668 100644
--- a/upload.php
+++ b/upload.php
@@ -6,6 +6,9 @@ if (isset($_GET['df'])) {
 	system("df -h --output=avail / | tail -1");
 	exit;
 }
+if ($_SERVER['REQUEST_METHOD'] != 'POST') {
+	exit;
+}
 
 $c_t = strtolower($_SERVER['HTTP_CONTENT_TYPE'] ?? '');
 if ($c_t == 'multipart/form-data' || 0 === strpos($c_t, 'multipart/form-data;')) {