adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-08-11 03:03:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

post_only for ws admin write methods without token (avoid XSRF)

Browse Source 
git-svn-id: http://piwigo.org/svn/trunk@25382 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
rvelices
2013-11-07 21:02:52 +00:00
parent 401c088364
commit 6caa1e5825
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ws.php
+2 -2
View File
@@ -787,7 +787,7 @@ function ws_addDefaultMethods( $arr )
),
'<b>Admin only.</b> Adds one or more users to a group.',
$ws_functions_root . 'pwg.groups.php',
array('admin_only'=>true)
array('admin_only'=>true, 'post_only'=>true)
);
$service->addMethod(
@@ -930,7 +930,7 @@ function ws_addDefaultMethods( $arr )
),
'<b>Admin only.</b> Adds permissions to an album.',
$ws_functions_root . 'pwg.permissions.php',
array('admin_only'=>true)
array('admin_only'=>true, 'post_only'=>true)
);
$service->addMethod(