MDL-17203 prevent disclosing of sensitive information

This commit is contained in:
skodak
2008-12-31 15:53:31 +00:00
parent b20c631896
commit 804656ff9b
+2 -2
View File
@@ -15,12 +15,12 @@ if (empty($CFG->enablecalendarexport)) {
//Fetch user information
if (!$user = get_complete_user_data('username', $username)) {
//No such user
die("No such user '$username'");
die('Invalid authentication');
}
//Check authentication token
if ($authtoken != sha1($username . $user->password . $CFG->calendar_exportsalt)) {
die('Invalid authentication token');
die('Invalid authentication');
}
$what = optional_param('preset_what', 'all', PARAM_ALPHA);