Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

lesson: MDL-20705 Fix XSRF issues.

Uses new require_sesskey funciton from MDL-20702.
  • Loading branch information...
commit 066e898965e75ffbe1b6ad37babd3d522abceae4 1 parent 9568417
@timhunt timhunt authored
View
2  mod/lesson/action/addcluster.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
// first get the preceeding page
// if $pageid = 0, then we are inserting a new page at the beginning of the lesson
View
2  mod/lesson/action/addendofbranch.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
// first get the preceeding page
$pageid = required_param('pageid', PARAM_INT);
View
2  mod/lesson/action/addendofcluster.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
// first get the preceeding page
$pageid = required_param('pageid', PARAM_INT);
View
2  mod/lesson/action/confirmdelete.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
$pageid = required_param('pageid', PARAM_INT);
if (!$thispage = get_record("lesson_pages", "id", $pageid)) {
View
2  mod/lesson/action/continue.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
require_once($CFG->dirroot.'/mod/lesson/pagelib.php');
require_once($CFG->libdir.'/blocklib.php');
View
2  mod/lesson/action/delete.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
$pageid = required_param('pageid', PARAM_INT);
if (!$thispage = get_record("lesson_pages", "id", $pageid)) {
View
2  mod/lesson/action/insertpage.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
// check to see if the cancel button was pushed
if (optional_param('cancel', '', PARAM_ALPHA)) {
View
2  mod/lesson/action/moveit.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
$pageid = required_param('pageid', PARAM_INT); // page to move
if (!$page = get_record("lesson_pages", "id", $pageid)) {
View
2  mod/lesson/action/updatepage.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
$redirect = optional_param('redirect', '', PARAM_ALPHA);
View
4 mod/lesson/essay.php
@@ -60,7 +60,7 @@
}
break;
case 'grade': // Grading form - get the necessary data
- confirm_sesskey();
+ require_sesskey();
$attemptid = required_param('attemptid', PARAM_INT);
@@ -136,7 +136,7 @@
}
break;
case 'email': // Sending an email(s) to a single user or all
- confirm_sesskey();
+ require_sesskey();
// Get our users (could be singular)
if ($userid = optional_param('userid', 0, PARAM_INT)) {
Please sign in to comment.
Something went wrong with that request. Please try again.