MDL-20901 fixed input validation

2009-11-21 15:35:05 +00:00
parent 35c18394a0
commit d7befb3835
2 changed files with 2 additions and 1 deletions
@@ -3765,6 +3765,7 @@ function forum_print_discussion($course, $forum, $discussion, $post, $mode, $can
                echo '<div class="ratingform">';
                echo '<input type="hidden" name="id" value="'.$course->id.'" />';
                echo '<input type="hidden" name="forumid" value="'.$forum->id.'" />';
+                echo '<input type="hidden" name="sesskey" value="'.sesskey().'" />';
                $ratingsformused = true;
            }
        }
@@ -39,7 +39,7 @@
        }
    }

-    if ($data) {
+    if ($data and confirm_sesskey()) {

        $lastpostid = 0;