MDL-20663 (Correctly) added sesskey confirmation
This commit is contained in:
@@ -35,10 +35,12 @@ if (!$course = $DB->get_record('course', array('id' => $courseid))) {
|
||||
}
|
||||
$context = get_context_instance(CONTEXT_COURSE, $course->id);
|
||||
require_login($course);
|
||||
confirm_sesskey();
|
||||
|
||||
switch ($action) {
|
||||
case 'update':
|
||||
if (!confirm_sesskey()) {
|
||||
break;
|
||||
}
|
||||
require_capability('moodle/grade:edit', $context);
|
||||
|
||||
if (!empty($userid) && !empty($itemid) && $newvalue !== false && !empty($type)) {
|
||||
|
||||
Reference in New Issue
Block a user