From bfc638bb16d1c52f0a523dd8be76ae5c9190944a Mon Sep 17 00:00:00 2001 From: Petr Skoda Date: Sun, 25 Jul 2010 09:32:06 +0000 Subject: [PATCH] fixed incorrect password cleaning --- mod/lesson/view.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mod/lesson/view.php b/mod/lesson/view.php index 90f256dcd15..5407b054b40 100644 --- a/mod/lesson/view.php +++ b/mod/lesson/view.php @@ -31,7 +31,7 @@ require_once($CFG->libdir . '/completionlib.php'); $id = required_param('id', PARAM_INT); // Course Module ID $pageid = optional_param('pageid', NULL, PARAM_INT); // Lesson Page ID $edit = optional_param('edit', -1, PARAM_BOOL); -$userpassword = optional_param('userpassword','',PARAM_CLEAN); +$userpassword = optional_param('userpassword','',PARAM_RAW); $cm = get_coursemodule_from_id('lesson', $id, 0, false, MUST_EXIST);; $course = $DB->get_record('course', array('id' => $cm->course), '*', MUST_EXIST); @@ -76,7 +76,7 @@ if (!$canmanage) { } } else { echo $lessonoutput->header($lesson, $cm); - echo $lessonoutput->login_prompt($lesson, optional_param('userpassword', 0, PARAM_CLEAN)); + echo $lessonoutput->login_prompt($lesson, $userpassword !== ''); echo $lessonoutput->footer(); exit(); }