diff options
| author | Robin Appelman <icewind@owncloud.com> | 2014-06-16 12:42:28 +0200 |
|---|---|---|
| committer | Robin Appelman <icewind@owncloud.com> | 2014-06-16 12:42:28 +0200 |
| commit | a469efb1f1a727255731b8fe8e1d0354e245695f (patch) | |
| tree | f9886019cc8600f6bcfc2837e645fd96e10578b3 /apps/files_sharing | |
| parent | 9670d3e98b2fdfb8a3865dcaf954b1fef5f1e574 (diff) | |
| download | nextcloud-server-a469efb1f1a727255731b8fe8e1d0354e245695f.tar.gz nextcloud-server-a469efb1f1a727255731b8fe8e1d0354e245695f.zip | |
Add some safety checks
Diffstat (limited to 'apps/files_sharing')
| -rw-r--r-- | apps/files_sharing/ajax/external.php | 1 | ||||
| -rw-r--r-- | apps/files_sharing/ajax/shareinfo.php | 4 | ||||
| -rw-r--r-- | apps/files_sharing/ajax/testremote.php | 6 |
3 files changed, 7 insertions, 4 deletions
diff --git a/apps/files_sharing/ajax/external.php b/apps/files_sharing/ajax/external.php index da73310c8df..52c84b7babb 100644 --- a/apps/files_sharing/ajax/external.php +++ b/apps/files_sharing/ajax/external.php @@ -8,6 +8,7 @@ OCP\JSON::callCheck(); OCP\JSON::checkLoggedIn(); +OCP\JSON::checkAppEnabled('files_sharing'); $l = OC_L10N::get('files_sharing'); diff --git a/apps/files_sharing/ajax/shareinfo.php b/apps/files_sharing/ajax/shareinfo.php index be26c357978..e87b0779e8d 100644 --- a/apps/files_sharing/ajax/shareinfo.php +++ b/apps/files_sharing/ajax/shareinfo.php @@ -6,9 +6,7 @@ * See the COPYING-README file. */ -if (!\OC_App::isEnabled('files_sharing')) { - exit; -} +OCP\JSON::checkAppEnabled('files_sharing'); if (!isset($_GET['t'])) { \OC_Response::setStatus(400); //400 Bad Request diff --git a/apps/files_sharing/ajax/testremote.php b/apps/files_sharing/ajax/testremote.php index 10ea3075ed3..5a073008832 100644 --- a/apps/files_sharing/ajax/testremote.php +++ b/apps/files_sharing/ajax/testremote.php @@ -6,12 +6,16 @@ * See the COPYING-README file. */ +OCP\JSON::checkAppEnabled('files_sharing'); +OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); + $remote = $_GET['remote']; if (file_get_contents('https://' . $remote . '/status.php')) { echo 'https'; } elseif (file_get_contents('http://' . $remote . '/status.php')) { echo 'http'; -}else{ +} else { echo 'false'; } |