From a1d59a92ab1764cd19f3816f999af85ae9158a11 Mon Sep 17 00:00:00 2001 From: Björn Schießle Date: Wed, 9 Dec 2015 12:00:00 +0100 Subject: don't allow to create a federated share if source and target server are the same --- apps/files_sharing/ajax/external.php | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'apps') diff --git a/apps/files_sharing/ajax/external.php b/apps/files_sharing/ajax/external.php index 7bef0c3197a..a0649e74f99 100644 --- a/apps/files_sharing/ajax/external.php +++ b/apps/files_sharing/ajax/external.php @@ -47,6 +47,14 @@ if(!\OCP\Util::isValidFileName($name)) { exit(); } +$currentUser = \OC::$server->getUserSession()->getUser()->getUID(); +$currentServer = \OC::$server->getURLGenerator()->getAbsoluteURL('/'); +if (\OC\Share\Helper::isSameUserOnSameServer($owner, $remote, $currentUser, $currentServer )) { + \OCP\JSON::error(array('data' => array('message' => $l->t('Not allowed to create a federated share with the same user server')))); + exit(); +} + + $externalManager = new \OCA\Files_Sharing\External\Manager( \OC::$server->getDatabaseConnection(), \OC\Files\Filesystem::getMountManager(), -- cgit v1.2.3