MDL-17203 prevent disclosing of sensitive information
This commit is contained in:
@@ -15,12 +15,12 @@ if (empty($CFG->enablecalendarexport)) {
|
||||
//Fetch user information
|
||||
if (!$user = get_complete_user_data('username', $username)) {
|
||||
//No such user
|
||||
die("No such user '$username'");
|
||||
die('Invalid authentication');
|
||||
}
|
||||
|
||||
//Check authentication token
|
||||
if ($authtoken != sha1($username . $user->password . $CFG->calendar_exportsalt)) {
|
||||
die('Invalid authentication token');
|
||||
die('Invalid authentication');
|
||||
}
|
||||
|
||||
$what = optional_param('preset_what', 'all', PARAM_ALPHA);
|
||||
|
||||
Reference in New Issue
Block a user