diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2012-07-20 20:12:36 +0200 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2012-07-20 20:12:36 +0200 |
| commit | 38271ded753bc9ea9943cef3c2706f8d71f3a58f (patch) | |
| tree | 4a2bb2cd3ffe196721c448ef891d692171a925df /apps/files | |
| parent | e52ab59b404d6d35ed8619da35b1f70404359212 (diff) | |
| download | nextcloud-server-38271ded753bc9ea9943cef3c2706f8d71f3a58f.tar.gz nextcloud-server-38271ded753bc9ea9943cef3c2706f8d71f3a58f.zip | |
Added CSRF checks
Diffstat (limited to 'apps/files')
| -rw-r--r-- | apps/files/ajax/delete.php | 1 | ||||
| -rw-r--r-- | apps/files/ajax/move.php | 1 | ||||
| -rw-r--r-- | apps/files/ajax/newfile.php | 1 | ||||
| -rw-r--r-- | apps/files/ajax/newfolder.php | 1 | ||||
| -rw-r--r-- | apps/files/ajax/rename.php | 1 |
5 files changed, 5 insertions, 0 deletions
diff --git a/apps/files/ajax/delete.php b/apps/files/ajax/delete.php index ed155de0dc7..161d820f735 100644 --- a/apps/files/ajax/delete.php +++ b/apps/files/ajax/delete.php @@ -4,6 +4,7 @@ OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); // Get data $dir = stripslashes($_GET["dir"]); diff --git a/apps/files/ajax/move.php b/apps/files/ajax/move.php index 945fe4e7b82..56171dd0ed3 100644 --- a/apps/files/ajax/move.php +++ b/apps/files/ajax/move.php @@ -4,6 +4,7 @@ OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); // Get data $dir = stripslashes($_GET["dir"]); diff --git a/apps/files/ajax/newfile.php b/apps/files/ajax/newfile.php index edb78414872..7236deb65c9 100644 --- a/apps/files/ajax/newfile.php +++ b/apps/files/ajax/newfile.php @@ -4,6 +4,7 @@ OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); // Get the params $dir = isset( $_POST['dir'] ) ? stripslashes($_POST['dir']) : ''; diff --git a/apps/files/ajax/newfolder.php b/apps/files/ajax/newfolder.php index c5c37914c6a..ae92bcf09bb 100644 --- a/apps/files/ajax/newfolder.php +++ b/apps/files/ajax/newfolder.php @@ -4,6 +4,7 @@ OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); // Get the params $dir = isset( $_POST['dir'] ) ? stripslashes($_POST['dir']) : ''; diff --git a/apps/files/ajax/rename.php b/apps/files/ajax/rename.php index e2fa3d54a61..8e98308eb5c 100644 --- a/apps/files/ajax/rename.php +++ b/apps/files/ajax/rename.php @@ -4,6 +4,7 @@ OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); // Get data $dir = stripslashes($_GET["dir"]); |