CSRF checks

2012-07-07 16:12:21 +07:00 · 2012-07-07 16:12:21 +07:00 · ea70ca3ce3
parent 2c318f45f4
commit ea70ca3ce3
2 changed files with 4 additions and 0 deletions
--- a/apps/files_external/ajax/addMountPoint.php
+++ b/apps/files_external/ajax/addMountPoint.php
@ -1,6 +1,8 @@
 <?php

 OCP\JSON::checkAppEnabled('files_external');
+OCP\JSON::callCheck();
+
 if ($_POST['isPersonal'] == 'true') {
 	OCP\JSON::checkLoggedIn();
 	$isPersonal = true;
--- a/apps/files_external/ajax/removeMountPoint.php
+++ b/apps/files_external/ajax/removeMountPoint.php
@ -1,6 +1,8 @@
 <?php

 OCP\JSON::checkAppEnabled('files_external');
+OCP\JSON::callCheck();
+
 if ($_POST['isPersonal'] == 'true') {
 	OCP\JSON::checkLoggedIn();
 	$isPersonal = true;