diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php index 15adb406a..511ec4b3e 100755 --- a/web/upload/UploadHandler.php +++ b/web/upload/UploadHandler.php @@ -2,13 +2,8 @@ //session_start(); -$host_arr=explode(":", $_SERVER['HTTP_HOST']); -$hostname=$host_arr[0]; -$port = $_SERVER['SERVER_PORT']; -$expected_http_origin="https://".$hostname.":".$port; -if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) { - die ("Nope."); -} +// Preventing CSRF +prevent_post_csrf(true); include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");