From 8eac8132e31106c4220c496229f68496e0d8bc08 Mon Sep 17 00:00:00 2001 From: zotlabs Date: Sun, 9 Oct 2016 21:28:24 -0700 Subject: snap dav module is currently read-only. error out on any request methods which can alter data. --- Zotlabs/Module/Snap.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Zotlabs/Module/Snap.php b/Zotlabs/Module/Snap.php index 742d88617..8e52d85ac 100644 --- a/Zotlabs/Module/Snap.php +++ b/Zotlabs/Module/Snap.php @@ -58,6 +58,9 @@ class Snap extends \Zotlabs\Web\Controller { else killme(); + if(! in_array(strtolower($_SERVER['REQUEST_METHOD']),['propfind','get','head'])) + killme(); + $auth = new \Zotlabs\Storage\BasicAuth(); $auth->setRealm(ucfirst(\Zotlabs\Lib\System::get_platform_name()) . 'WebDAV'); -- cgit v1.2.3