From 018c5f69c0e349f4b2d31e6257e1413cf8fc1e1f Mon Sep 17 00:00:00 2001
From: Lukas Reschke <lukas@statuscode.ch>
Date: Sun, 3 Feb 2013 22:49:12 +0100
Subject: [PATCH 1/2] [files_trashbin] Add CSRF token

---
 apps/files_trashbin/ajax/undelete.php | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/apps/files_trashbin/ajax/undelete.php b/apps/files_trashbin/ajax/undelete.php
index a7bb5b9de2d..4b23e618a1d 100644
--- a/apps/files_trashbin/ajax/undelete.php
+++ b/apps/files_trashbin/ajax/undelete.php
@@ -1,8 +1,7 @@
 <?php 
 
-if(!OCP\User::isLoggedIn()) {
-	exit;
-}
+OCP\User::checkLoggedIn();
+OCP\JSON::callCheck();
 
 $files = $_REQUEST['files'];
 $dirlisting = $_REQUEST['dirlisting'];

From 8add89ced1c7f745b0b6d3a66c1415415a5eb980 Mon Sep 17 00:00:00 2001
From: Lukas Reschke <lukas@statuscode.ch>
Date: Mon, 4 Feb 2013 09:15:11 +0100
Subject: [PATCH 2/2] OCP\JSON instead of OCP\User

---
 apps/files_trashbin/ajax/undelete.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/files_trashbin/ajax/undelete.php b/apps/files_trashbin/ajax/undelete.php
index 4b23e618a1d..ee1c64aaaf2 100644
--- a/apps/files_trashbin/ajax/undelete.php
+++ b/apps/files_trashbin/ajax/undelete.php
@@ -1,6 +1,6 @@
 <?php 
 
-OCP\User::checkLoggedIn();
+OCP\JSON::checkLoggedIn();
 OCP\JSON::callCheck();
 
 $files = $_REQUEST['files'];