Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

Fixed a SQL injection from $scoid

  • Loading branch information...
commit 06abe84fde8c30681bc99f770875c28f40800359 1 parent d1266f9
bobopinna authored
Showing with 1 addition and 1 deletion.
  1. +1 −1  mod/scorm/loadSCO.php
2  mod/scorm/loadSCO.php
View
@@ -42,7 +42,7 @@
if ($sco = get_record("scorm_scoes","id",$scoid)) {
if ($sco->launch == '') {
// Search for the next launchable sco
- if ($scoes = get_records_select("scorm_scoes","scorm=".$scorm->id." AND launch<>'' AND id>".$scoid,"id ASC")) {
+ if ($scoes = get_records_select("scorm_scoes","scorm=".$scorm->id." AND launch<>'' AND id>".$sco->id,"id ASC")) {
$sco = current($scoes);
}
}
Please sign in to comment.
Something went wrong with that request. Please try again.