diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2012-07-07 16:03:21 +0200 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2012-07-07 16:03:21 +0200 |
| commit | 04a0755fd364b16bfb461382b1409fbb6336a359 (patch) | |
| tree | b0cd8559ab0bfc58079c6e7ef951788468d6a8e9 /apps/files_sharing/ajax | |
| parent | b7c510a61a5eaeba76284628fe76fc60b7035aed (diff) | |
| download | nextcloud-server-04a0755fd364b16bfb461382b1409fbb6336a359.tar.gz nextcloud-server-04a0755fd364b16bfb461382b1409fbb6336a359.zip | |
CSRF checks
Diffstat (limited to 'apps/files_sharing/ajax')
| -rw-r--r-- | apps/files_sharing/ajax/email.php | 2 | ||||
| -rw-r--r-- | apps/files_sharing/ajax/setpermissions.php | 1 | ||||
| -rw-r--r-- | apps/files_sharing/ajax/share.php | 1 | ||||
| -rw-r--r-- | apps/files_sharing/ajax/unshare.php | 1 |
4 files changed, 5 insertions, 0 deletions
diff --git a/apps/files_sharing/ajax/email.php b/apps/files_sharing/ajax/email.php index 523c3d2078b..e1dccb7d0fa 100644 --- a/apps/files_sharing/ajax/email.php +++ b/apps/files_sharing/ajax/email.php @@ -1,6 +1,8 @@ <?php OCP\JSON::checkLoggedIn(); OCP\JSON::checkAppEnabled('files_sharing'); +OCP\JSON::callCheck(); + $user = OCP\USER::getUser(); // TODO translations $type = (strpos($_POST['file'], '.') === false) ? 'folder' : 'file'; diff --git a/apps/files_sharing/ajax/setpermissions.php b/apps/files_sharing/ajax/setpermissions.php index 4d19cd40f2d..31b7a3878ef 100644 --- a/apps/files_sharing/ajax/setpermissions.php +++ b/apps/files_sharing/ajax/setpermissions.php @@ -2,6 +2,7 @@ OCP\JSON::checkAppEnabled('files_sharing'); OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); $source = '/'.OCP\USER::getUser().'/files'.$_POST['source']; $uid_shared_with = $_POST['uid_shared_with']; diff --git a/apps/files_sharing/ajax/share.php b/apps/files_sharing/ajax/share.php index 1ee8c3f791a..f4f2172d251 100644 --- a/apps/files_sharing/ajax/share.php +++ b/apps/files_sharing/ajax/share.php @@ -2,6 +2,7 @@ OCP\JSON::checkAppEnabled('files_sharing'); OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); $userDirectory = '/'.OCP\USER::getUser().'/files'; $sources = explode(';', $_POST['sources']); diff --git a/apps/files_sharing/ajax/unshare.php b/apps/files_sharing/ajax/unshare.php index d50e7963a05..44ffdb1a5bc 100644 --- a/apps/files_sharing/ajax/unshare.php +++ b/apps/files_sharing/ajax/unshare.php @@ -2,6 +2,7 @@ OCP\JSON::checkAppEnabled('files_sharing'); OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); $source = '/'.OCP\USER::getUser().'/files'.$_POST['source']; $uid_shared_with = $_POST['uid_shared_with']; |