From 39f342d595136ae6edace17870d14e32c7466cbd Mon Sep 17 00:00:00 2001 From: Bart Visscher Date: Sun, 12 Feb 2012 15:58:55 +0100 Subject: [PATCH] Contacts: Move debug logging of $_POST to after access checks --- apps/contacts/ajax/addcontact.php | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/apps/contacts/ajax/addcontact.php b/apps/contacts/ajax/addcontact.php index 9b4e68ac272..80034327011 100644 --- a/apps/contacts/ajax/addcontact.php +++ b/apps/contacts/ajax/addcontact.php @@ -30,15 +30,16 @@ function bailOut($msg) { function debug($msg) { OC_Log::write('contacts','ajax/addcontact.php: '.$msg, OC_Log::DEBUG); } -foreach ($_POST as $key=>$element) { - debug('_POST: '.$key.'=>'.$element); -} // Check if we are a user OC_JSON::checkLoggedIn(); OC_JSON::checkAppEnabled('contacts'); $l=new OC_L10N('contacts'); +foreach ($_POST as $key=>$element) { + debug('_POST: '.$key.'=>'.$element); +} + $aid = $_POST['aid']; OC_Contacts_App::getAddressbook( $aid ); // is owner access check