From 90d189a8b3e054a2d85337f06dc0f3339b12c2f1 Mon Sep 17 00:00:00 2001
From: Bart Visscher <bartv@thisnet.nl>
Date: Sat, 11 Feb 2012 22:00:42 +0100
Subject: [PATCH] Access check fix in contacts/ajax/activation.php
plus small cleanup
---
apps/contacts/ajax/activation.php | 8 +++-----
1 file changed, 3 insertions(+), 5 deletions(-)
diff --git a/apps/contacts/ajax/activation.php b/apps/contacts/ajax/activation.php
index fda63a528a..d69e3dba3f 100644
--- a/apps/contacts/ajax/activation.php
+++ b/apps/contacts/ajax/activation.php
@@ -10,18 +10,16 @@
require_once ("../../../lib/base.php");
OC_JSON::checkLoggedIn();
OC_JSON::checkAppEnabled('contacts');
-$l=new OC_L10N('contacts');
$bookid = $_POST['bookid'];
+$book = OC_Contacts_App::getAddressbook($bookid);// is owner access check
+
if(!OC_Contacts_Addressbook::setActive($bookid, $_POST['active'])) {
- OC_JSON::error(array('data' => array('message' => $l->t('Error (de)activating addressbook.'))));
OC_Log::write('contacts','ajax/activation.php: Error activating addressbook: '.$bookid, OC_Log::ERROR);
+ OC_JSON::error(array('data' => array('message' => OC_Contacts_App::$l10n->t('Error (de)activating addressbook.'))));
exit();
}
-$book = OC_Contacts_App::getAddressbook($bookid);
-
-/* is there an OC_JSON::error() ? */
OC_JSON::success(array(
'active' => OC_Contacts_Addressbook::isActive($bookid),
'bookid' => $bookid,
--
GitLab