MDL-52216 mod_lesson: prevent invalid view modes

2016-11-11 09:26:29 +13:00
parent 84f1341162
commit c29df134e7
1 changed files with 4 additions and 0 deletions
@@ -38,6 +38,10 @@ $context = context_module::instance($cm->id);
 require_capability('mod/lesson:manage', $context);

 $mode    = optional_param('mode', get_user_preferences('lesson_view', 'collapsed'), PARAM_ALPHA);
+// Ensure a valid mode is set.
+if (!in_array($mode, array('single', 'full', 'collapsed'))) {
+    $mode = 'collapsed';
+}
 $PAGE->set_url('/mod/lesson/edit.php', array('id'=>$cm->id,'mode'=>$mode));

 if ($mode != get_user_preferences('lesson_view', 'collapsed') && $mode !== 'single') {