MDL-13805 core_message: fixed the admin's ability to read another users messages

2013-01-28 10:19:42 +08:00
parent df93b156a7
commit 799be0ba8c
3 changed files with 131 additions and 115 deletions
@@ -2150,8 +2150,8 @@ class global_navigation extends navigation_node {

        if (!empty($CFG->messaging)) {
            $messageargs = null;
-            if ($USER->id!=$user->id) {
-                $messageargs = array('id'=>$user->id);
+            if ($USER->id != $user->id) {
+                $messageargs = array('user1' => $user->id);
            }
            $url = new moodle_url('/message/index.php',$messageargs);
            $usernode->add(get_string('messages', 'message'), $url, self::TYPE_SETTING, null, 'messages');