This repository has been archived by the owner. It is now read-only.
Permalink
Browse files

Move CSRF check

jPlayer doesn't send our CSRF request token.
  • Loading branch information...
LukasReschke committed Mar 14, 2013
1 parent 73bda2a commit 64ce426e073fff7118a5b0f5490f6887ef08ef2f
Showing with 1 addition and 1 deletion.
  1. +1 −1 media/ajax/api.php
@@ -10,7 +10,6 @@
\OCP\JSON::checkAppEnabled('media');
\OCP\JSON::checkLoggedIn();
\OCP\JSON::callCheck();
error_reporting(E_ALL); //no script error reporting because of getID3
@@ -43,6 +42,7 @@
if ($arguments['action']) {
switch ($arguments['action']) {
case 'delete':
\OCP\JSON::callCheck();
$path = $arguments['path'];
$collection->deleteSongByPath($path);
$paths = explode(PATH_SEPARATOR, \OCP\Config::getUserValue(\OCP\USER::getUser(), 'media', 'paths', ''));

6 comments on commit 64ce426

@zeugmatis

This comment has been minimized.

zeugmatis replied Mar 16, 2013

This fixed my broken mediaplayer too after upgrading yesterday - hopefully this gets into mainline soon.
(still not indexing my music anymore though but that is a separate bug)

@mr00t

This comment has been minimized.

mr00t replied Mar 22, 2013

Did not work for me in 5.0.
I use the player from 4.5.7 with the #rightcontent -part from the 5.0 music.css now >:-D

@greg0r

This comment has been minimized.

greg0r replied Mar 22, 2013

This fix worked for me as well.
OC 5.0.0
ubuntu 12.04
php 5.3.10

Thanks

@dukejohn

This comment has been minimized.

dukejohn replied Mar 22, 2013

Fixed it for me as well, thanks
OC 5.0.0
Ubuntu 12.10

@HLFH

This comment has been minimized.

HLFH replied Mar 25, 2013

@LukasReschke
Doesn't work on Safari, works on Firefox & Chrome !
Server : HackBerry A 10
Debian Wheezy Headless ARM
Owncloud 5
PHP 5.4.14
Nginx

Browser client : Safari 6.0.3
OS client : OS X 10.8.3

@patschi

This comment has been minimized.

patschi replied Mar 26, 2013

Works for me perfectly on:
Google Chrome
Debian Squeeze 6.0.7
OwnCloud 5
PHP 5.4.13
nginx

Please sign in to comment.