diff options
| author | Frank Karlitschek <frank@owncloud.org> | 2013-02-12 02:43:43 -0800 |
|---|---|---|
| committer | Frank Karlitschek <frank@owncloud.org> | 2013-02-12 02:43:43 -0800 |
| commit | 06c268833f0c329ce4d6dd26926a0dce5d6b8f48 (patch) | |
| tree | a6459de3601fe5856d089f666fae67e454f1aa9a | |
| parent | 2507e0da1d61af5d9a9506a29aa6df4c31ac068e (diff) | |
| parent | a9c77ebaf80288d210c8ad3ba28a6d2a4eaac1c8 (diff) | |
| download | nextcloud-server-06c268833f0c329ce4d6dd26926a0dce5d6b8f48.tar.gz nextcloud-server-06c268833f0c329ce4d6dd26926a0dce5d6b8f48.zip | |
Merge pull request #1648 from owncloud/checkRequesttoken
Check requesttoken
| -rw-r--r-- | apps/files_external/ajax/addRootCertificate.php | 1 | ||||
| -rw-r--r-- | apps/files_external/ajax/dropbox.php | 2 | ||||
| -rw-r--r-- | apps/files_external/ajax/google.php | 2 |
3 files changed, 5 insertions, 0 deletions
diff --git a/apps/files_external/ajax/addRootCertificate.php b/apps/files_external/ajax/addRootCertificate.php index 2f67e801b2c..ba8a14d2ea1 100644 --- a/apps/files_external/ajax/addRootCertificate.php +++ b/apps/files_external/ajax/addRootCertificate.php @@ -1,6 +1,7 @@ <?php OCP\JSON::checkAppEnabled('files_external'); +OCP\JSON::callCheck(); if ( ! ($filename = $_FILES['rootcert_import']['name']) ) { header("Location: settings/personal.php"); diff --git a/apps/files_external/ajax/dropbox.php b/apps/files_external/ajax/dropbox.php index 58c41d69062..bc9821c62ec 100644 --- a/apps/files_external/ajax/dropbox.php +++ b/apps/files_external/ajax/dropbox.php @@ -4,6 +4,8 @@ require_once 'Dropbox/autoload.php'; OCP\JSON::checkAppEnabled('files_external'); OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); + if (isset($_POST['app_key']) && isset($_POST['app_secret'])) { $oauth = new Dropbox_OAuth_Curl($_POST['app_key'], $_POST['app_secret']); if (isset($_POST['step'])) { diff --git a/apps/files_external/ajax/google.php b/apps/files_external/ajax/google.php index c76c7618e4d..70adcb2c2ad 100644 --- a/apps/files_external/ajax/google.php +++ b/apps/files_external/ajax/google.php @@ -4,6 +4,8 @@ require_once 'Google/common.inc.php'; OCP\JSON::checkAppEnabled('files_external'); OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); + $consumer = new OAuthConsumer('anonymous', 'anonymous'); $sigMethod = new OAuthSignatureMethod_HMAC_SHA1(); if (isset($_POST['step'])) { |