If $CFG->forcetimezone is not empty, don't allow users to change the timezone from

their profiles, and instead show a disabled menu with the forced timezone selected.

Also, fixed a get_string (reading from wrong lang file).
This commit is contained in:
defacer
2005-04-09 09:36:47 +00:00
parent 7b9e355e43
commit 02a5309439
2 changed files with 16 additions and 5 deletions
+9 -3
View File
@@ -99,9 +99,15 @@
$usernew->htmleditor = clean_param($usernew->htmleditor, PARAM_INT);
$usernew->emailstop = clean_param($usernew->emailstop, PARAM_INT);
// Some replaces to prevent SQL injections
$usernew->timezone = str_replace(';', '', $usernew->timezone);
$usernew->timezone = str_replace('\'', '', $usernew->timezone);
if(!empty($CFG->forcetimezone) && isset($usernew->timezone)) {
// Don't allow changing this in any way if a timezone is forced
unset($usernew->timezone);
}
else {
// Some replaces to prevent SQL injections
$usernew->timezone = str_replace(';', '', $usernew->timezone);
$usernew->timezone = str_replace('\'', '', $usernew->timezone);
}
foreach ($usernew as $key => $data) {
$usernew->$key = addslashes(clean_text(stripslashes(trim($usernew->$key)), FORMAT_MOODLE));