post_only for ws admin write methods without token (avoid XSRF)

git-svn-id: http://piwigo.org/svn/trunk@25382 68402e56-0260-453c-a942-63ccdbb3a9ee

1 files changed, 2 insertions, 2 deletions

diff --git a/ws.php b/ws.php
index 73fcc0bce..434091687 100644
--- a/ws.php
+++ b/ws.php
@@ -787,7 +787,7 @@ function ws_addDefaultMethods( $arr )
         ),
       '<b>Admin only.</b> Adds one or more users to a group.',
       $ws_functions_root . 'pwg.groups.php',
-      array('admin_only'=>true)
+      array('admin_only'=>true, 'post_only'=>true)
     );
 
   $service->addMethod(
@@ -930,7 +930,7 @@ function ws_addDefaultMethods( $arr )
         ),
       '<b>Admin only.</b> Adds permissions to an album.',
       $ws_functions_root . 'pwg.permissions.php',
-      array('admin_only'=>true)
+      array('admin_only'=>true, 'post_only'=>true)
     );
     
   $service->addMethod(