lesson: MDL-20705 Fix XSRF issues.
Uses new require_sesskey funciton from MDL-20702.
This commit is contained in:
@@ -5,7 +5,7 @@
|
||||
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
||||
* @package lesson
|
||||
**/
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
// first get the preceeding page
|
||||
// if $pageid = 0, then we are inserting a new page at the beginning of the lesson
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
||||
* @package lesson
|
||||
**/
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
// first get the preceeding page
|
||||
$pageid = required_param('pageid', PARAM_INT);
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
||||
* @package lesson
|
||||
**/
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
// first get the preceeding page
|
||||
$pageid = required_param('pageid', PARAM_INT);
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
||||
* @package lesson
|
||||
**/
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
$pageid = required_param('pageid', PARAM_INT);
|
||||
if (!$thispage = $DB->get_record("lesson_pages", array ("id" => $pageid))) {
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
||||
* @package lesson
|
||||
**/
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
// left menu code
|
||||
// check to see if the user can see the left menu
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
||||
* @package lesson
|
||||
**/
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
$pageid = required_param('pageid', PARAM_INT);
|
||||
if (!$thispage = $DB->get_record("lesson_pages", array("id" => $pageid))) {
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
||||
* @package lesson
|
||||
**/
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
// check to see if the cancel button was pushed
|
||||
if (optional_param('cancel', '', PARAM_ALPHA)) {
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
||||
* @package lesson
|
||||
**/
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
$pageid = required_param('pageid', PARAM_INT); // page to move
|
||||
if (!$page = $DB->get_record("lesson_pages", array("id" => $pageid))) {
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
||||
* @package lesson
|
||||
**/
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
$redirect = optional_param('redirect', '', PARAM_ALPHA);
|
||||
|
||||
|
||||
@@ -70,7 +70,7 @@
|
||||
}
|
||||
break;
|
||||
case 'grade': // Grading form - get the necessary data
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
$attemptid = required_param('attemptid', PARAM_INT);
|
||||
|
||||
@@ -142,7 +142,7 @@
|
||||
}
|
||||
break;
|
||||
case 'email': // Sending an email(s) to a single user or all
|
||||
confirm_sesskey();
|
||||
require_sesskey();
|
||||
|
||||
// Get our users (could be singular)
|
||||
if ($userid = optional_param('userid', 0, PARAM_INT)) {
|
||||
|
||||
Reference in New Issue
Block a user