sascha
/
nextcloud-server
mirror of https://github.com/nextcloud/server.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

CSRF check

remotes/origin/stable5
Lukas Reschke 2012-07-07 15:54:52 +07:00
parent b46d3019ca
commit c63db28eaf
3 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apps/bookmarks/ajax/addBookmark.php
Unescape Escape View File

@ -28,6 +28,8 @@ $RUNTIME_NOSETUPFS=true;
// Check if we are a user // Check if we are a user
OCP\JSON::checkLoggedIn(); OCP\JSON::checkLoggedIn();
OCP\JSON::callCheck();
OCP\JSON::checkAppEnabled('bookmarks'); OCP\JSON::checkAppEnabled('bookmarks');
require_once(OC_App::getAppPath('bookmarks').'/bookmarksHelper.php'); require_once(OC_App::getAppPath('bookmarks').'/bookmarksHelper.php');

2
apps/bookmarks/ajax/delBookmark.php
Unescape Escape View File

@ -28,6 +28,8 @@ $RUNTIME_NOSETUPFS=true;
// Check if we are a user // Check if we are a user
OCP\JSON::checkLoggedIn(); OCP\JSON::checkLoggedIn();
OCP\JSON::callCheck();
OCP\JSON::checkAppEnabled('bookmarks'); OCP\JSON::checkAppEnabled('bookmarks');
$id = $_POST['id']; $id = $_POST['id'];

2
apps/bookmarks/ajax/editBookmark.php
Unescape Escape View File

@ -28,6 +28,8 @@ $RUNTIME_NOSETUPFS=true;
// Check if we are a user // Check if we are a user
OCP\JSON::checkLoggedIn(); OCP\JSON::checkLoggedIn();
OCP\JSON::callCheck();
OCP\JSON::checkAppEnabled('bookmarks'); OCP\JSON::checkAppEnabled('bookmarks');
$CONFIG_DBTYPE = OCP\Config::getSystemValue( "dbtype", "sqlite" ); $CONFIG_DBTYPE = OCP\Config::getSystemValue( "dbtype", "sqlite" );