L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-48020 mod_forum: Add missing sesskey check in AJAX subscription

Browse Source
This commit is contained in:
Andrew Nicols
2014-11-03 11:02:41 +00:00
committed by Dan Poltawski
parent 8bd6b270b2
commit a6d7a81271
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mod/forum/subscribe_ajax.php
+1 -1
View File
@@ -28,7 +28,6 @@ require_once($CFG->dirroot . '/mod/forum/lib.php');
$forumid = required_param('forumid', PARAM_INT); // The forum to subscribe or unsubscribe.
$discussionid = optional_param('discussionid', null, PARAM_INT); // The discussionid to subscribe.
$sesskey = optional_param('sesskey', null, PARAM_RAW);
$includetext = optional_param('includetext', false, PARAM_BOOL);
$forum = $DB->get_record('forum', array('id' => $forumid), '*', MUST_EXIST);
@@ -37,6 +36,7 @@ $discussion = $DB->get_record('forum_discussions', array('id' => $discussion
$cm = get_coursemodule_from_instance('forum', $forum->id, $course->id, false, MUST_EXIST);
$context = context_module::instance($cm->id);
require_sesskey();
require_login($course, false, $cm);
require_capability('mod/forum:viewdiscussion', $context);