ifl
/
iflrandevu
forked from mirrors/easyappointments
1
1
Fork 0
Code Issues 6 Pull Requests Releases 3 Activity

Added POST constraint to backend_api controller.

This commit is contained in:
Alex Tselegidis 2015-05-28 00:12:44 +02:00
parent 4eb19df799
commit fb1a0d6d25
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/application/controllers/backend_api.php
View File

@ -9,6 +9,11 @@ class Backend_api extends CI_Controller {
public function __construct() {
parent::__construct();
// All the methods in this class must be accessible through a POST request.
if (strtoupper($_SERVER['REQUEST_METHOD']) !== 'POST') {
$this->security->csrf_show_error();
}
$this->load->library('session');
$this->load->model('roles_model');
$this->privileges = $this->roles_model->get_privileges($this->session->userdata('role_slug'));