From 5486cc980c0a96800df21fd32470536087f395f3 Mon Sep 17 00:00:00 2001 From: Marina Glancy Date: Wed, 18 Nov 2015 15:26:18 +0800 Subject: [PATCH] MDL-52194 flowplayer: do not check request $_REQUEST variable may contain cookies in some php configurations. See also MDL-48085 --- lib/flowplayer/lib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/flowplayer/lib.php b/lib/flowplayer/lib.php index fa15b381dda..f9206c46447 100644 --- a/lib/flowplayer/lib.php +++ b/lib/flowplayer/lib.php @@ -36,7 +36,7 @@ function flowplayer_send_flash_content($filename) { // Note: Do not use any fancy APIs here, this must work in all supported versions. // No url params. - if (!empty($_GET) or !empty($_POST) or !empty($_REQUEST)) { + if (!empty($_GET) or !empty($_POST)) { header("HTTP/1.1 404 Not Found"); die; }