From 9450cd6a176ec8df824b29089e05eb274457bb68 Mon Sep 17 00:00:00 2001
From: Aaron Parecki <aaron@parecki.com>
Date: Tue, 7 Mar 2017 12:43:37 -0800
Subject: [PATCH] don't send access token in JSON post body

---
 lib/helpers.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/helpers.php b/lib/helpers.php
index 9a862d1..198534f 100644
--- a/lib/helpers.php
+++ b/lib/helpers.php
@@ -137,7 +137,7 @@ function micropub_post($endpoint, $params, $access_token, $file_path = NULL, $js
 
   if(!$file_path) {
     if($json) {
-      $params['access_token'] = $access_token;
+      // $params['access_token'] = $access_token;
       $httpheaders[] = 'Content-type: application/json';
       $post = json_encode($params);
     } else {