course/delete.php is using sesskey

Merged from MOODLE_14_STABLE
2004-10-08 17:58:38 +00:00
parent 6b22eb8785
commit 56fcb59a51
1 changed files with 5 additions and 1 deletions
@@ -38,7 +38,7 @@
                     "$strdeletecheck");

        notice_yesno("$strdeletecoursecheck<br /><br />$course->fullname ($course->shortname)", 
-                     "delete.php?id=$course->id&amp;delete=".md5($course->timemodified), 
+                     "delete.php?id=$course->id&amp;delete=".md5($course->timemodified)."&amp;sesskey=$USER->sesskey", 
                     "category.php?id=$course->category");
        exit;
    }
@@ -47,6 +47,10 @@
        error("The check variable was wrong - try again");
    }

+    if (!confirm_sesskey()) {
+        error(get_string('confirmsesskeybad', 'error'));
+    }
+
    // OK checks done, delete the course now.
    $strdeletingcourse = get_string("deletingcourse", "", $course->shortname);