From 55e6d86a319e5189ba3ffeaf28c610b13ec69de1 Mon Sep 17 00:00:00 2001
From: Petr Skoda <skodak@moodle.org>
Date: Sun, 22 Nov 2009 21:02:23 +0000
Subject: [PATCH] MDL-20931 fixed input validation

---
 course/import/groups/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/course/import/groups/index.php b/course/import/groups/index.php
index 9ef9b1c4eb1..72c9f1cf846 100755
--- a/course/import/groups/index.php
+++ b/course/import/groups/index.php
@@ -56,7 +56,7 @@
 
     require_once($CFG->dirroot.'/lib/uploadlib.php');
     $um = new upload_manager('userfile',false,false,null,false,0);
-    if ($um->preprocess_files()) {
+    if ($um->preprocess_files() and confirm_sesskey()) {
         $filename = $um->files['userfile']['tmp_name'];
 
         //Fix mac/dos newlines