From e06d7b43a0beb7c8c9db5f9af5a790ff0395308d Mon Sep 17 00:00:00 2001
From: David Mudrak <david.mudrak@gmail.com>
Date: Thu, 12 Nov 2009 21:30:01 +0000
Subject: [PATCH] MDL-20830 workshop requires sesskey when removing attachment

---
 mod/workshop/submissions.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/mod/workshop/submissions.php b/mod/workshop/submissions.php
index 0f760b68ccf..9fd77a4315f 100644
--- a/mod/workshop/submissions.php
+++ b/mod/workshop/submissions.php
@@ -223,7 +223,7 @@
         }
 
         notice_yesno(get_string("confirmremoveattachments","workshop"),
-             "submissions.php?action=removeattachments&amp;id=$cm->id&amp;sid=$sid",
+             "submissions.php?sesskey=" . sesskey() . "&amp;action=removeattachments&amp;id=$cm->id&amp;sid=$sid",
              "view.php?id=$cm->id");
     }
 
@@ -340,6 +340,7 @@
     /******************* remove (all) attachments ************************************/
     elseif ($action == 'removeattachments' ) {
 
+        require_sesskey();
         $form = data_submitted();
 
         if (empty($form->sid)) {