MDL-20830 workshop requires sesskey when editing submission

2009-11-12 21:30:49 +00:00
parent e06d7b43a0
commit 514cda9cd7
1 changed files with 2 additions and 0 deletions
@@ -248,6 +248,7 @@
        <form id="editform" enctype="multipart/form-data" action="submissions.php" method="post">
        <fieldset class="invisiblefieldset">
        <input type="hidden" name="action" value="updatesubmission" />
+        <input type="hidden" name="sesskey" value="<?php echo sesskey(); ?>" />
        <input type="hidden" name="id" value="<?php echo $cm->id ?>" />
        <input type="hidden" name="sid" value="<?php echo $sid ?>" />
        <div class="boxaligncenter">
@@ -413,6 +414,7 @@
    /*************** update submission ***************************/
    elseif ($action == 'updatesubmission') {

+        require_sesskey();
        if (empty($sid)) {
            error("Update submission: submission id missing");
        }