From eee61675f042a9ec89f8f6d219b4ded010198fe4 Mon Sep 17 00:00:00 2001 From: Dan Poltawski Date: Tue, 28 Jan 2014 15:20:02 +0800 Subject: [PATCH] MDL-43146 enrol_imsenterprise: missing sesskey protection --- enrol/imsenterprise/importnow.php | 1 + enrol/imsenterprise/settings.php | 4 +++- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/enrol/imsenterprise/importnow.php b/enrol/imsenterprise/importnow.php index 102d038ea93..078e899b09d 100644 --- a/enrol/imsenterprise/importnow.php +++ b/enrol/imsenterprise/importnow.php @@ -2,6 +2,7 @@ require_once(dirname(dirname(dirname(__FILE__))) . '/config.php'); require_login(0, false); require_capability('moodle/site:config', context_system::instance()); +require_sesskey(); $site = get_site(); diff --git a/enrol/imsenterprise/settings.php b/enrol/imsenterprise/settings.php index 1c7f205308e..97a0336d6dd 100644 --- a/enrol/imsenterprise/settings.php +++ b/enrol/imsenterprise/settings.php @@ -83,6 +83,8 @@ if ($ADMIN->fulltree) { $settings->add(new admin_setting_configcheckbox('enrol_imsenterprise/imscapitafix', get_string('usecapitafix', 'enrol_imsenterprise'), get_string('usecapitafix_desc', 'enrol_imsenterprise'), 0)); - $importnowstring = get_string('aftersaving...', 'enrol_imsenterprise').' '.get_string('doitnow', 'enrol_imsenterprise').''; + $importurl = new moodle_url('/enrol/imsenterprise/importnow.php', array('sesskey' => sesskey())); + $importnowstring = get_string('aftersaving...', 'enrol_imsenterprise').' '. + html_writer::link($importurl, get_string('doitnow', 'enrol_imsenterprise')); $settings->add(new admin_setting_heading('enrol_imsenterprise_doitnowmessage', '', $importnowstring)); }