diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2012-07-07 15:54:52 +0200 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2012-07-07 15:54:52 +0200 |
| commit | c63db28eafbe4745faf44a4774cc857e830939c9 (patch) | |
| tree | 4198ac6738622a2bc1375a5a779e79360022d1c3 /apps/bookmarks | |
| parent | b46d3019ca4ebc346811eb52a7607702d69975a4 (diff) | |
| download | nextcloud-server-c63db28eafbe4745faf44a4774cc857e830939c9.tar.gz nextcloud-server-c63db28eafbe4745faf44a4774cc857e830939c9.zip | |
CSRF check
Diffstat (limited to 'apps/bookmarks')
| -rw-r--r-- | apps/bookmarks/ajax/addBookmark.php | 2 | ||||
| -rw-r--r-- | apps/bookmarks/ajax/delBookmark.php | 2 | ||||
| -rw-r--r-- | apps/bookmarks/ajax/editBookmark.php | 2 |
3 files changed, 6 insertions, 0 deletions
diff --git a/apps/bookmarks/ajax/addBookmark.php b/apps/bookmarks/ajax/addBookmark.php index 6b5a0f71d4e..483716405a1 100644 --- a/apps/bookmarks/ajax/addBookmark.php +++ b/apps/bookmarks/ajax/addBookmark.php @@ -28,6 +28,8 @@ $RUNTIME_NOSETUPFS=true; // Check if we are a user OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); + OCP\JSON::checkAppEnabled('bookmarks'); require_once(OC_App::getAppPath('bookmarks').'/bookmarksHelper.php'); diff --git a/apps/bookmarks/ajax/delBookmark.php b/apps/bookmarks/ajax/delBookmark.php index 5a067701c9f..f40f02ebab7 100644 --- a/apps/bookmarks/ajax/delBookmark.php +++ b/apps/bookmarks/ajax/delBookmark.php @@ -28,6 +28,8 @@ $RUNTIME_NOSETUPFS=true; // Check if we are a user OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); + OCP\JSON::checkAppEnabled('bookmarks'); $id = $_POST['id']; diff --git a/apps/bookmarks/ajax/editBookmark.php b/apps/bookmarks/ajax/editBookmark.php index 439b680dc20..0b37d161af1 100644 --- a/apps/bookmarks/ajax/editBookmark.php +++ b/apps/bookmarks/ajax/editBookmark.php @@ -28,6 +28,8 @@ $RUNTIME_NOSETUPFS=true; // Check if we are a user OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); + OCP\JSON::checkAppEnabled('bookmarks'); $CONFIG_DBTYPE = OCP\Config::getSystemValue( "dbtype", "sqlite" ); |