mirrors/easyappointments
1
0
Fork 1
mirror of https://github.com/alextselegidis/easyappointments.git synced 2024-11-29 19:32:46 +03:00
Code Issues Projects Releases Packages Wiki Activity

Added POST constraint to backend_api controller.

Browse source
This commit is contained in:
Alex Tselegidis 2015-05-28 00:12:44 +02:00
parent 4eb19df799
commit fb1a0d6d25
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/application/controllers/backend_api.php
View file

@ -9,6 +9,11 @@ class Backend_api extends CI_Controller {
public function __construct() { public function __construct() {
parent::__construct(); parent::__construct();
// All the methods in this class must be accessible through a POST request.
if (strtoupper($_SERVER['REQUEST_METHOD']) !== 'POST') {
$this->security->csrf_show_error();
}
$this->load->library('session'); $this->load->library('session');
$this->load->model('roles_model'); $this->load->model('roles_model');
$this->privileges = $this->roles_model->get_privileges($this->session->userdata('role_slug')); $this->privileges = $this->roles_model->get_privileges($this->session->userdata('role_slug'));