Added a missing CSRF check

This commit is contained in:
Lukas Reschke 2012-09-22 11:02:03 +02:00
parent 80aa44565b
commit ac79fe649c

View File

@ -21,6 +21,8 @@
require_once '../../lib/base.php'; require_once '../../lib/base.php';
OC_JSON::checkLoggedIn(); OC_JSON::checkLoggedIn();
OCP\JSON::callCheck();
if (isset($_POST['action']) && isset($_POST['itemType']) && isset($_POST['itemSource'])) { if (isset($_POST['action']) && isset($_POST['itemType']) && isset($_POST['itemSource'])) {
switch ($_POST['action']) { switch ($_POST['action']) {
case 'share': case 'share':