diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2014-02-18 17:12:49 +0400 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2014-02-20 14:26:55 +0400 |
| commit | ebb1a70abcddcb402a4bda24c1e6a4ddc2ab0665 (patch) | |
| tree | 7198cb70333410388b263a1c374b4fcda0486981 | |
| parent | b9d013e3ce8f64e1ae94b7d4358c8b9d930f44d0 (diff) | |
Check whether the app is set
| -rw-r--r-- | core/ajax/appconfig.php | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/core/ajax/appconfig.php b/core/ajax/appconfig.php index 1d066d9169a..05b7572c6d7 100644 --- a/core/ajax/appconfig.php +++ b/core/ajax/appconfig.php @@ -9,7 +9,10 @@ OC_Util::checkAdminUser(); OCP\JSON::callCheck(); $action=isset($_POST['action'])?$_POST['action']:$_GET['action']; -$app=OC_App::cleanAppId(isset($_POST['app'])?$_POST['app']:$_GET['app']); + +if(isset($_POST['app']) || isset($_GET['app'])) { + $app=OC_App::cleanAppId(isset($_POST['app'])?$_POST['app']:$_GET['app']); +} // An admin should not be able to add remote and public services // on its own. This should only be possible programmatically. |