diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2014-02-18 14:12:49 +0100 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2014-02-18 14:12:49 +0100 |
| commit | c19cacb29f263558f052ccd8d78033d63326589e (patch) | |
| tree | c5dc3c0986fdf48da02cda1c91bf114205fc9136 /core/ajax | |
| parent | 1352c63dca25b04594cbdfeb8c832351997a1d14 (diff) | |
| download | nextcloud-server-c19cacb29f263558f052ccd8d78033d63326589e.tar.gz nextcloud-server-c19cacb29f263558f052ccd8d78033d63326589e.zip | |
Check whether the app is set
Diffstat (limited to 'core/ajax')
| -rw-r--r-- | core/ajax/appconfig.php | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/core/ajax/appconfig.php b/core/ajax/appconfig.php index 1d066d9169a..05b7572c6d7 100644 --- a/core/ajax/appconfig.php +++ b/core/ajax/appconfig.php @@ -9,7 +9,10 @@ OC_Util::checkAdminUser(); OCP\JSON::callCheck(); $action=isset($_POST['action'])?$_POST['action']:$_GET['action']; -$app=OC_App::cleanAppId(isset($_POST['app'])?$_POST['app']:$_GET['app']); + +if(isset($_POST['app']) || isset($_GET['app'])) { + $app=OC_App::cleanAppId(isset($_POST['app'])?$_POST['app']:$_GET['app']); +} // An admin should not be able to add remote and public services // on its own. This should only be possible programmatically. |