diff options
| author | zach <zach@controlyourself.ca> | 2008-09-30 22:09:59 -0400 |
|---|---|---|
| committer | zach <zach@controlyourself.ca> | 2008-09-30 22:09:59 -0400 |
| commit | dec2f29c6a77dd97383ebdbabdc0bff8e524bfa4 (patch) | |
| tree | bc14f25539cfdf85adf746bb9813f2bf0b5c3370 /actions/twitapiaccount.php | |
| parent | c08a67094cb848e8bcd8f631aa44adf57a33b7ab (diff) | |
Twitter-compatible API - Added content-type checks to several methods. Calling an API
method with a bad content type used to return a blank page.
darcs-hash:20081001020959-462f3-83b0241ba7dc99c4e3a52148a46deb8182e005b0.gz
Diffstat (limited to 'actions/twitapiaccount.php')
| -rw-r--r-- | actions/twitapiaccount.php | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/actions/twitapiaccount.php b/actions/twitapiaccount.php index 3a9b8ba3e..5baf0e3e3 100644 --- a/actions/twitapiaccount.php +++ b/actions/twitapiaccount.php @@ -61,6 +61,11 @@ class TwitapiaccountAction extends TwitterapiAction { function update_location($args, $apidata) { parent::handle($args); + if (!in_array($apidata['content-type'], array('xml', 'json'))) { + common_user_error(_('API method not found!'), $code = 404); + exit; + } + if ($_SERVER['REQUEST_METHOD'] != 'POST') { $this->client_error(_('This method requires a POST.'), 400, $apidata['content-type']); exit(); |