course/edit.php is using sesskey.
Merged from MOODLE_14_STABLE
This commit is contained in:
@@ -260,4 +260,5 @@
|
||||
<td><input type="submit" value="<?php print_string("savechanges") ?>" /></td>
|
||||
</table>
|
||||
<input type="hidden" name="id" value="<?php echo $form->id ?>" />
|
||||
<input type="hidden" name="sesskey" value="<?php echo $form->sesskey ?>" />
|
||||
</form>
|
||||
|
||||
+3
-1
@@ -36,7 +36,7 @@
|
||||
|
||||
/// If data submitted, then process and store.
|
||||
|
||||
if ($form = data_submitted()) {
|
||||
if ($form = data_submitted() and confirm_sesskey()) {
|
||||
|
||||
if (empty($course)) {
|
||||
check_for_restricted_user($USER->username, "$CFG->wwwroot");
|
||||
@@ -182,6 +182,8 @@
|
||||
"<a href=\"index.php\">$strcategories</a> -> $straddnewcourse", $focus);
|
||||
}
|
||||
|
||||
$form->sesskey = !empty($USER->id) ? $USER->sesskey : '';
|
||||
|
||||
print_heading($streditcoursesettings);
|
||||
print_simple_box_start("center", "", "$THEME->cellheading");
|
||||
include("edit.html");
|
||||
|
||||
Reference in New Issue
Block a user