From c615c8b9b5f8d6a2951fd41d9d0ad42582539b0c Mon Sep 17 00:00:00 2001
From: poltawski <poltawski>
Date: Thu, 22 Jan 2009 10:11:09 +0000
Subject: [PATCH] calendar:export MDL-17203 prevent disclosing of sensitive
 information

For more robust solution, please upgrade to 19_STABLE or later
---
 calendar/export_execute.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/calendar/export_execute.php b/calendar/export_execute.php
index e6937fd802f..b6e8d2e5f7f 100644
--- a/calendar/export_execute.php
+++ b/calendar/export_execute.php
@@ -11,12 +11,12 @@ $authtoken = required_param('authtoken', PARAM_ALPHANUM);
 //Fetch user information
 if (!$user = get_complete_user_data('username', $username)) {
    //No such user
-   die("No such user '$username'");
+    die('Invalid authentication');
 }
 
 //Check authentication token
 if ($authtoken != sha1($username . $user->password)) {
-    die('Invalid authentication token');
+    die('Invalid authentication');
 }
 
 $what = optional_param('preset_what', 'all', PARAM_ALPHA);