Merge pull request #1648 from owncloud/checkRequesttoken

Check requesttoken
12 years ago · 06c268833f
parent 2507e0da1d a9c77ebaf8
commit 06c268833f
3 changed files with 5 additions and 0 deletions
--- a/apps/files_external/ajax/addRootCertificate.php
+++ b/apps/files_external/ajax/addRootCertificate.php
@ -1,6 +1,7 @@
 <?php

 OCP\JSON::checkAppEnabled('files_external');
+OCP\JSON::callCheck();

 if ( ! ($filename = $_FILES['rootcert_import']['name']) ) {
 	header("Location: settings/personal.php");
--- a/apps/files_external/ajax/dropbox.php
+++ b/apps/files_external/ajax/dropbox.php
@ -4,6 +4,8 @@ require_once 'Dropbox/autoload.php';

 OCP\JSON::checkAppEnabled('files_external');
 OCP\JSON::checkLoggedIn();
+OCP\JSON::callCheck();
+
 if (isset($_POST['app_key']) && isset($_POST['app_secret'])) {
 	$oauth = new Dropbox_OAuth_Curl($_POST['app_key'], $_POST['app_secret']);
 	if (isset($_POST['step'])) {
--- a/apps/files_external/ajax/google.php
+++ b/apps/files_external/ajax/google.php
@ -4,6 +4,8 @@ require_once 'Google/common.inc.php';

 OCP\JSON::checkAppEnabled('files_external');
 OCP\JSON::checkLoggedIn();
+OCP\JSON::callCheck();
+
 $consumer = new OAuthConsumer('anonymous', 'anonymous');
 $sigMethod = new OAuthSignatureMethod_HMAC_SHA1();
 if (isset($_POST['step'])) {