From e716d6e8f738b3158f7282f2ab6f3fb2ef3a7ec4 Mon Sep 17 00:00:00 2001
From: SSRF <SSRF@users.noreply.github.com>
Date: Wed, 5 Oct 2016 17:14:09 +0100
Subject: [PATCH] MDL-53677 tool_spamcleaner: CSRF Fix

Resolves minor CSRF within Moodle spamcleaner.
---
 admin/tool/spamcleaner/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/admin/tool/spamcleaner/index.php b/admin/tool/spamcleaner/index.php
index ec4b1177c85..0f6757e5de2 100644
--- a/admin/tool/spamcleaner/index.php
+++ b/admin/tool/spamcleaner/index.php
@@ -75,7 +75,7 @@ if (!empty($delall) && confirm_sesskey()) {
     exit;
 }
 
-if (!empty($ignore)) {
+if (!empty($ignore) && confirm_sesskey()) {
     unset($SESSION->users_result[$id]);
     echo json_encode(true);
     exit;