From e97e13b7ec41b5980d70d9cc15e28a8955357e19 Mon Sep 17 00:00:00 2001
From: Paul Holden <paulh@moodle.com>
Date: Thu, 20 Jun 2024 23:39:09 +0100
Subject: [PATCH] MDL-82262 mod_feedback: fix broken bulk message sesskey
 checks.

---
 mod/feedback/show_nonrespondents.php | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/mod/feedback/show_nonrespondents.php b/mod/feedback/show_nonrespondents.php
index 3d3088cabe1..706da746fff 100644
--- a/mod/feedback/show_nonrespondents.php
+++ b/mod/feedback/show_nonrespondents.php
@@ -72,14 +72,12 @@ require_login($course, true, $cm);
 
 $actionbar = new \mod_feedback\output\responses_action_bar($cm->id, $url);
 
-if (($formdata = data_submitted()) AND !confirm_sesskey()) {
-    throw new \moodle_exception('invalidsesskey');
-}
-
 require_capability('mod/feedback:viewreports', $context);
 
 $canbulkmessaging = has_capability('moodle/course:bulkmessaging', $coursecontext);
-if ($action == 'sendmessage' AND $canbulkmessaging) {
+if ($action == 'sendmessage' && $canbulkmessaging) {
+    require_sesskey();
+
     $shortname = format_string($course->shortname,
                             true,
                             array('context' => $coursecontext));