diff options
author | Lukas Reschke <lukas@statuscode.ch> | 2013-02-03 22:49:12 +0100 |
---|---|---|
committer | Lukas Reschke <lukas@statuscode.ch> | 2013-02-03 22:49:12 +0100 |
commit | 018c5f69c0e349f4b2d31e6257e1413cf8fc1e1f (patch) | |
tree | d6e6095e1df720d7bba77173269a7b6cdfb56599 /apps/files_trashbin/ajax | |
parent | b8e6b8692b0c306de6ebfe0a82bfe7bab304cd0a (diff) | |
download | nextcloud-server-018c5f69c0e349f4b2d31e6257e1413cf8fc1e1f.tar.gz nextcloud-server-018c5f69c0e349f4b2d31e6257e1413cf8fc1e1f.zip |
[files_trashbin] Add CSRF token
Diffstat (limited to 'apps/files_trashbin/ajax')
-rw-r--r-- | apps/files_trashbin/ajax/undelete.php | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/apps/files_trashbin/ajax/undelete.php b/apps/files_trashbin/ajax/undelete.php index a7bb5b9de2d..4b23e618a1d 100644 --- a/apps/files_trashbin/ajax/undelete.php +++ b/apps/files_trashbin/ajax/undelete.php @@ -1,8 +1,7 @@ <?php -if(!OCP\User::isLoggedIn()) {
- exit;
-} +OCP\User::checkLoggedIn(); +OCP\JSON::callCheck(); $files = $_REQUEST['files']; $dirlisting = $_REQUEST['dirlisting']; |