diff options
| -rw-r--r-- | core/controllers/rest.php | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/core/controllers/rest.php b/core/controllers/rest.php index ceca321e..b91bb0d0 100644 --- a/core/controllers/rest.php +++ b/core/controllers/rest.php @@ -86,6 +86,10 @@ class REST_Controller extends Controller { return Kohana::show_404(); } + if ($request_method != "get") { + access::verify_csrf(); + } + switch ($request_method) { case "get": return $this->_show($resource); |