diff options
| author | Björn Schießle <bjoern@schiessle.org> | 2013-02-04 02:14:52 -0800 |
|---|---|---|
| committer | Björn Schießle <bjoern@schiessle.org> | 2013-02-04 02:14:52 -0800 |
| commit | fee3f805014f3753e11705ff825dd543a2c5e480 (patch) | |
| tree | cc9c4e59fa8d0a458b0c60b68ce1a562b45946a7 /apps | |
| parent | 04b97a1906c40451880ef3534fc7fd87fcbdc438 (diff) | |
| parent | 8add89ced1c7f745b0b6d3a66c1415415a5eb980 (diff) | |
| download | nextcloud-server-fee3f805014f3753e11705ff825dd543a2c5e480.tar.gz nextcloud-server-fee3f805014f3753e11705ff825dd543a2c5e480.zip | |
Merge pull request #1434 from owncloud/trashbin_CSRF
[files_trashbin] Add CSRF token
Diffstat (limited to 'apps')
| -rw-r--r-- | apps/files_trashbin/ajax/undelete.php | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/apps/files_trashbin/ajax/undelete.php b/apps/files_trashbin/ajax/undelete.php index a7bb5b9de2d..ee1c64aaaf2 100644 --- a/apps/files_trashbin/ajax/undelete.php +++ b/apps/files_trashbin/ajax/undelete.php @@ -1,8 +1,7 @@ <?php -if(!OCP\User::isLoggedIn()) {
- exit;
-} +OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); $files = $_REQUEST['files']; $dirlisting = $_REQUEST['dirlisting']; |