From a469efb1f1a727255731b8fe8e1d0354e245695f Mon Sep 17 00:00:00 2001 From: Robin Appelman Date: Mon, 16 Jun 2014 12:42:28 +0200 Subject: [PATCH] Add some safety checks --- apps/files_sharing/ajax/external.php | 1 + apps/files_sharing/ajax/shareinfo.php | 4 +--- apps/files_sharing/ajax/testremote.php | 6 +++++- 3 files changed, 7 insertions(+), 4 deletions(-) diff --git a/apps/files_sharing/ajax/external.php b/apps/files_sharing/ajax/external.php index da73310c8d..52c84b7bab 100644 --- a/apps/files_sharing/ajax/external.php +++ b/apps/files_sharing/ajax/external.php @@ -8,6 +8,7 @@ OCP\JSON::callCheck(); OCP\JSON::checkLoggedIn(); +OCP\JSON::checkAppEnabled('files_sharing'); $l = OC_L10N::get('files_sharing'); diff --git a/apps/files_sharing/ajax/shareinfo.php b/apps/files_sharing/ajax/shareinfo.php index be26c35797..e87b0779e8 100644 --- a/apps/files_sharing/ajax/shareinfo.php +++ b/apps/files_sharing/ajax/shareinfo.php @@ -6,9 +6,7 @@ * See the COPYING-README file. */ -if (!\OC_App::isEnabled('files_sharing')) { - exit; -} +OCP\JSON::checkAppEnabled('files_sharing'); if (!isset($_GET['t'])) { \OC_Response::setStatus(400); //400 Bad Request diff --git a/apps/files_sharing/ajax/testremote.php b/apps/files_sharing/ajax/testremote.php index 10ea3075ed..5a07300883 100644 --- a/apps/files_sharing/ajax/testremote.php +++ b/apps/files_sharing/ajax/testremote.php @@ -6,12 +6,16 @@ * See the COPYING-README file. */ +OCP\JSON::checkAppEnabled('files_sharing'); +OCP\JSON::checkLoggedIn(); +OCP\JSON::callCheck(); + $remote = $_GET['remote']; if (file_get_contents('https://' . $remote . '/status.php')) { echo 'https'; } elseif (file_get_contents('http://' . $remote . '/status.php')) { echo 'http'; -}else{ +} else { echo 'false'; }