From a8b50ee01eb5d0ef99f9cd2fc0c71ca25f448731 Mon Sep 17 00:00:00 2001
From: stronk7 <stronk7>
Date: Sat, 2 Oct 2004 23:09:36 +0000
Subject: [PATCH] admin/block.php is now using sesskey.

---
 blocks/course_list/block_course_list.php   | 2 +-
 blocks/course_list/config.html             | 1 +
 blocks/online_users/block_online_users.php | 2 +-
 blocks/online_users/config.html            | 1 +
 4 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/blocks/course_list/block_course_list.php b/blocks/course_list/block_course_list.php
index f25b7f8a564..c4f27ce2e79 100644
--- a/blocks/course_list/block_course_list.php
+++ b/blocks/course_list/block_course_list.php
@@ -13,7 +13,7 @@ class CourseBlock_course_list extends MoodleBlock {
     }
 
     function print_config() {
-        global $CFG, $THEME;
+        global $CFG, $USER, $THEME;
         print_simple_box_start('center', '', $THEME->cellheading);
         include($CFG->dirroot.'/blocks/'.$this->name().'/config.html');
         print_simple_box_end();
diff --git a/blocks/course_list/config.html b/blocks/course_list/config.html
index a9aa62babef..58aa75589b9 100644
--- a/blocks/course_list/config.html
+++ b/blocks/course_list/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="block.php">
+<?php echo "<input type=\"hidden\" name=\"sesskey\" value=\"".$USER->sesskey."\">"; ?>
 
 <table cellpadding="9" cellspacing="0">
 <tr valign="top">
diff --git a/blocks/online_users/block_online_users.php b/blocks/online_users/block_online_users.php
index 2d71dd9cb02..2acd5e64453 100644
--- a/blocks/online_users/block_online_users.php
+++ b/blocks/online_users/block_online_users.php
@@ -11,7 +11,7 @@ class CourseBlock_online_users extends MoodleBlock {
     function has_config() {return true;}
 
     function print_config() {
-        global $CFG, $THEME;
+        global $CFG, $USER, $THEME;
         print_simple_box_start('center', '', $THEME->cellheading);
         include($CFG->dirroot.'/blocks/'.$this->name().'/config.html');
         print_simple_box_end();
diff --git a/blocks/online_users/config.html b/blocks/online_users/config.html
index 3ba2c952a1a..ad2dcac12ec 100644
--- a/blocks/online_users/config.html
+++ b/blocks/online_users/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="block.php">
+<?php echo "<input type=\"hidden\" name=\"sesskey\" value=\"".$USER->sesskey."\">"; ?>
 
 <table cellpadding="9" cellspacing="0">
 <tr valign="top">