From ba58c9f08e127873a2f4b474d80f0b8963afe0e9 Mon Sep 17 00:00:00 2001 From: skodak Date: Tue, 27 Jan 2009 17:38:40 +0000 Subject: [PATCH] MDL-18057 fixed XSS test --- admin/report/security/lib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin/report/security/lib.php b/admin/report/security/lib.php index e7d93d67e4f..fc5a62c4104 100644 --- a/admin/report/security/lib.php +++ b/admin/report/security/lib.php @@ -485,7 +485,7 @@ function report_security_check_riskxss($detailed=false) { $sqlfrom = "FROM {$CFG->prefix}role_capabilities rc JOIN {$CFG->prefix}capabilities cap ON cap.name = rc.capability JOIN {$CFG->prefix}context c ON c.id = rc.contextid - JOIN {$CFG->prefix}context sc ON (sc.path = c.path OR sc.path LIKE ".sql_concat('c.path', "'/%'").") + JOIN {$CFG->prefix}context sc ON (sc.path = c.path OR sc.path LIKE ".sql_concat('c.path', "'/%'")." OR c.path LIKE ".sql_concat('sc.path', "'/%'").") JOIN {$CFG->prefix}role_assignments ra ON (ra.contextid = sc.id AND ra.roleid = rc.roleid) JOIN {$CFG->prefix}user u ON u.id = ra.userid WHERE ".sql_bitand('cap.riskbitmask', RISK_XSS)." <> 0