blocks: MDL-20710 prevent XSRF.
Uses new require_sesskey function from MDL-20702.
This commit is contained in:
+1
-1
@@ -600,7 +600,7 @@ function file_get_draft_area_files($draftitemid, $filepath = '/') {
|
||||
function file_get_submitted_draft_itemid($elname) {
|
||||
$param = optional_param($elname, 0, PARAM_INT);
|
||||
if ($param) {
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
}
|
||||
if (is_array($param)) {
|
||||
if (!empty($param['itemid'])) {
|
||||
|
||||
Reference in New Issue
Block a user