versione pre-stable

front/server_test.ajax.php

@@ -13,6 +13,10 @@ Html::header_nocache();
 
 Session::checkLoginUser();
 
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    Session::checkCSRF();
+}
+
 if (!Session::haveRight('plugin_urbackup', READ)) {
     echo json_encode(['success' => false, 'message' => __('No permission', 'urbackup')]);
     exit;