MDL-20830 workshop requires sesskey when removing attachment

2009-11-12 21:30:01 +00:00
parent 726b471179
commit e06d7b43a0
1 changed files with 2 additions and 1 deletions
@@ -223,7 +223,7 @@
        }

        notice_yesno(get_string("confirmremoveattachments","workshop"),
-             "submissions.php?action=removeattachments&amp;id=$cm->id&amp;sid=$sid",
+             "submissions.php?sesskey=" . sesskey() . "&amp;action=removeattachments&amp;id=$cm->id&amp;sid=$sid",
             "view.php?id=$cm->id");
    }

@@ -340,6 +340,7 @@
    /******************* remove (all) attachments ************************************/
    elseif ($action == 'removeattachments' ) {

+        require_sesskey();
        $form = data_submitted();

        if (empty($form->sid)) {