diff options
| author | Lukas Reschke <lukas@owncloud.com> | 2015-01-10 00:30:14 +0100 |
|---|---|---|
| committer | Lukas Reschke <lukas@owncloud.com> | 2015-01-10 00:30:14 +0100 |
| commit | 8ae1478288ec68a046c01828ad428a40645ce37b (patch) | |
| tree | 9a3fbe0ed0b59863a36de3c96dfb380eca999ede | |
| parent | 59a1d16d0fd3d67833bfb728ce03cebc7fec4043 (diff) | |
| download | nextcloud-server-8ae1478288ec68a046c01828ad428a40645ce37b.tar.gz nextcloud-server-8ae1478288ec68a046c01828ad428a40645ce37b.zip | |
Add CSRF check to search
Doesn't hurt to have a check on this one as well.
| -rw-r--r-- | search/ajax/search.php | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/search/ajax/search.php b/search/ajax/search.php index 5bd810aacfd..2bafe65302b 100644 --- a/search/ajax/search.php +++ b/search/ajax/search.php @@ -22,7 +22,8 @@ */ // Check if we are a user -\OC_JSON::checkLoggedIn(); +\OCP\JSON::checkLoggedIn(); +\OCP\JSON::callCheck(); \OC::$server->getSession()->close(); if (isset($_GET['query'])) { |