MDL-20901 fixed input validation

This commit is contained in:
Petr Skoda
2009-11-21 22:23:03 +00:00
parent 92145339d6
commit 64da683140
2 changed files with 4 additions and 3 deletions
+3 -2
View File
@@ -15,7 +15,7 @@
}
$form = data_submitted();
if ( $mode == 'visible' ) {
if ( $mode == 'visible' and confirm_sesskey()) {
if ( $displayformat ) {
if ( $displayformat->visible ) {
$displayformat->visible = 0;
@@ -26,7 +26,7 @@
}
redirect("$CFG->wwwroot/$CFG->admin/settings.php?section=modsettingglossary#glossary_formats_header");
die;
} elseif ( $mode == 'edit' and $form) {
} elseif ( $mode == 'edit' and $form and confirm_sesskey()) {
$displayformat->popupformatname = $form->popupformatname;
$displayformat->showgroup = $form->showgroup;
@@ -246,6 +246,7 @@
<input type="submit" value="<?php print_string("savechanges") ?>" /></td>
</tr>
<input type="hidden" name="id" value="<?php p($id) ?>" />
<input type="hidden" name="sesskey" value="<?php echo sesskey() ?>" />
<input type="hidden" name="mode" value="edit" />
<?php
+1 -1
View File
@@ -67,7 +67,7 @@ foreach ($formats as $formatid=>$formatname) {
$vtitle = get_string("show");
$vicon = "show.gif";
}
$vicon = "<a title=\"".$vtitle."\" href=\"$CFG->wwwroot/mod/glossary/formats.php?id=$formatid&amp;mode=visible\"><img class=\"iconsmall\" src=\"$CFG->pixpath/t/".$vicon."\" alt=\"$vtitle\" /></a>";
$vicon = "<a title=\"".$vtitle."\" href=\"$CFG->wwwroot/mod/glossary/formats.php?id=$formatid&amp;mode=visible&amp;sesskey=".sesskey()."\"><img class=\"iconsmall\" src=\"$CFG->pixpath/t/".$vicon."\" alt=\"$vtitle\" /></a>";
$str .= '<td align="center">'.$eicon.'&nbsp;&nbsp;'.$vicon.'</td>';
$str .= '</tr>';