mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add CSRF checks

This commit is contained in:
Lukas Reschke 2012-07-20 15:45:17 +02:00
parent bd91ee4d22
commit c04aa8d6a9
3 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apps/calendar/ajax/share/changepermission.php
View File

@ -6,6 +6,8 @@
* See the COPYING-README file. * See the COPYING-README file.
*/ */
OCP\JSON::callCheck();
$id = strip_tags($_POST['id']); $id = strip_tags($_POST['id']);
$idtype = strip_tags($_POST['idtype']); $idtype = strip_tags($_POST['idtype']);
$permission = (int) strip_tags($_POST['permission']); $permission = (int) strip_tags($_POST['permission']);

2
apps/calendar/ajax/share/share.php
View File

@ -6,6 +6,8 @@
* See the COPYING-README file. * See the COPYING-README file.
*/ */
OCP\JSON::callCheck();
$id = strip_tags($_POST['id']); $id = strip_tags($_POST['id']);
$idtype = strip_tags($_POST['idtype']); $idtype = strip_tags($_POST['idtype']);
switch($idtype){ switch($idtype){

2
apps/calendar/ajax/share/unshare.php
View File

@ -6,6 +6,8 @@
* See the COPYING-README file. * See the COPYING-README file.
*/ */
OCP\JSON::callCheck();
$id = strip_tags($_POST['id']); $id = strip_tags($_POST['id']);
$idtype = strip_tags($_POST['idtype']); $idtype = strip_tags($_POST['idtype']);
switch($idtype){ switch($idtype){