From: Michiel@unhosted <michiel@unhosted.org>
Date: Mon, 12 Sep 2011 12:22:48 +0000 (+0200)
Subject: improve uninstalled-protection
X-Git-Tag: v3.0~214
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=5685965fdb6462dc81755556c3baf0b03026970f;p=nextcloud-server.git

improve uninstalled-protection
---

diff --git a/apps/user_webfinger/host-meta.php b/apps/user_webfinger/host-meta.php
index c37b7dd7769..ceb15f22da4 100644
--- a/apps/user_webfinger/host-meta.php
+++ b/apps/user_webfinger/host-meta.php
@@ -2,7 +2,7 @@
 if($_SERVER['SCRIPT_NAME'] == '/.well-known/host-meta.php') {
 	header("Access-Control-Allow-Origin: *");
 } else {
-	header('Please visit /apps/user_webfinger/activate.php first');
+	header('Please-first: activate');
 }
 header("Content-Type: application/xml+xrd");
 echo "<";
diff --git a/apps/user_webfinger/webfinger.php b/apps/user_webfinger/webfinger.php
index fdec9e8e563..4f94cc3c4fa 100644
--- a/apps/user_webfinger/webfinger.php
+++ b/apps/user_webfinger/webfinger.php
@@ -1,5 +1,9 @@
 <?php
-header("Access-Control-Allow-Origin: *");
+if($_SERVER['SCRIPT_NAME'] == '/.well-known/host-meta.php') {
+	header("Access-Control-Allow-Origin: *");
+} else {
+	header('Please-first: activate');
+}
 header("Content-Type: application/xml+xrd");
 
 if($_GET['q']) {