summaryrefslogtreecommitdiffstats
path: root/apps/files/ajax/upload.php
diff options
context:
space:
mode:
authorMorris Jobke <hey@morrisjobke.de>2015-02-19 17:19:54 +0100
committerMorris Jobke <hey@morrisjobke.de>2015-02-19 17:19:54 +0100
commit75a7bcb10cf441e4e07a7ade76c91d88574da336 (patch)
treef057e6f59e33033896b6d1ef9c99df0fc75894b6 /apps/files/ajax/upload.php
parentdf58eea93fb969a60b6cf4e9fca0fd2173b406a0 (diff)
parentcbe31fbf5775382d7de6f22b25e4ab798b895d0f (diff)
downloadnextcloud-server-75a7bcb10cf441e4e07a7ade76c91d88574da336.tar.gz
nextcloud-server-75a7bcb10cf441e4e07a7ade76c91d88574da336.zip
Merge pull request #14199 from owncloud/cast-type-manually
Manually type-cast all AJAX files
Diffstat (limited to 'apps/files/ajax/upload.php')
-rw-r--r--apps/files/ajax/upload.php6
1 files changed, 3 insertions, 3 deletions
diff --git a/apps/files/ajax/upload.php b/apps/files/ajax/upload.php
index 88375f82acb..321a14e70fc 100644
--- a/apps/files/ajax/upload.php
+++ b/apps/files/ajax/upload.php
@@ -16,7 +16,7 @@ $l = \OC::$server->getL10N('files');
if (empty($_POST['dirToken'])) {
// The standard case, files are uploaded through logged in users :)
OCP\JSON::checkLoggedIn();
- $dir = isset($_POST['dir']) ? $_POST['dir'] : "";
+ $dir = isset($_POST['dir']) ? (string)$_POST['dir'] : '';
if (!$dir || empty($dir) || $dir === false) {
OCP\JSON::error(array('data' => array_merge(array('message' => $l->t('Unable to set upload directory.')))));
die();
@@ -30,9 +30,9 @@ if (empty($_POST['dirToken'])) {
// return only read permissions for public upload
$allowedPermissions = \OCP\Constants::PERMISSION_READ;
- $publicDirectory = !empty($_POST['subdir']) ? $_POST['subdir'] : '/';
+ $publicDirectory = !empty($_POST['subdir']) ? (string)$_POST['subdir'] : '/';
- $linkItem = OCP\Share::getShareByToken($_POST['dirToken']);
+ $linkItem = OCP\Share::getShareByToken((string)$_POST['dirToken']);
if ($linkItem === false) {
OCP\JSON::error(array('data' => array_merge(array('message' => $l->t('Invalid Token')))));
die();