silverstripe / silverstripe-asset-admin

        // CSRF check

        $token = SecurityToken::inst();

        if (empty($vars[$token->getName()]) || !$token->check($vars[$token->getName()])) {

            return new HTTPResponse(null, 400);

        }

        if (!isset($vars['ids']) || !$vars['ids']) {

            return (new HTTPResponse(json_encode(['status' => 'error']), 400))

        // CSRF check

        $token = SecurityToken::inst();

        if (empty($data[$token->getName()]) || !$token->check($data[$token->getName()])) {

            return new HTTPResponse(null, 400);

        }

        // Check parent record

        /** @var Folder $parentRecord */

        // CSRF check

        $token = SecurityToken::inst();

        if (empty($data[$token->getName()]) || !$token->check($data[$token->getName()])) {

            return new HTTPResponse(null, 400);

        }

        // check addchildren permissions

        /** @var Folder $parentRecord */