admin/uploaduser.php is now using sesskey.

Merged from MOODLE_14_STABLE

admin/uploaduser.php

@@ -1,4 +1,4 @@
-<?PHP // $Id$
+<?php // $Id$
 
 /// Bulk user registration script from a comma separated file
 /// Returns list of users with their user ids
@@ -17,6 +17,10 @@
         error("Could not find site-level course");
     }
 
+    if (!confirm_sesskey()) {
+        error(get_string('confirmsesskeybad', 'error'));
+    }
+
     if (!$adminuser = get_admin()) {
         error("Could not find site admin");
     }
@@ -109,7 +113,7 @@
         foreach ($header as $i => $h) {
             $h = trim($h); $header[$i] = $h; // remove whitespace
             if (!($required[$h] or $optionalDefaults[$h] or $optional[$h])) {
-                error(get_string('invalidfieldname', 'error', $h), 'uploaduser.php');
+                error(get_string('invalidfieldname', 'error', $h), 'uploaduser.php?sesskey='.$USER->sesskey);
             }
             if ($required[$h]) {
                 $required[$h] = 2;
@@ -118,7 +122,7 @@
         // check for required fields
         foreach ($required as $key => $value) {
             if ($value < 2) {
-                error(get_string('fieldrequired', 'error', $key), 'uploaduser.php');
+                error(get_string('fieldrequired', 'error', $key), 'uploaduser.php?sesskey='.$USER->sesskey);
             }
         }
         $linenum = 2; // since header is line 1
@@ -144,7 +148,7 @@
                     if ($required[$name] and !$value) {
                         error(get_string('missingfield', 'error', $name). " ".
                               get_string('erroronline', 'error', $linenum), 
-                              'uploaduser.php');
+                              'uploaduser.php?sesskey='.$USER->sesskey);
                     }
                     // password needs to be encrypted
                     else if ($name == "password") {
@@ -262,6 +266,7 @@
     echo '<center>';
     echo '<form method="post" enctype="multipart/form-data" action="uploaduser.php">'.
          $strchoose.':<input type="hidden" name="MAX_FILE_SIZE" value="'.$maxuploadsize.'">'.
+         '<input type="hidden" name="sesskey" value="'.$USER->sesskey.'">'.
          '<input type="file" name="userfile" size="30">'.
          '<input type="submit" value="'.$struploadusers.'">'.
          '</form></br>';