Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

MDL-20901 fixed input validation

  • Loading branch information...
commit 2b98208b2caff14f2e63508ae0e19065c6a2b043 1 parent bb4cf8d
@skodak skodak authored
View
2  grade/edit/outcome/course.php
@@ -96,7 +96,7 @@
/// form processing
-if ($data = data_submitted()) {
+if ($data = data_submitted() and confirm_sesskey()) {
require_capability('moodle/grade:manageoutcomes', $context);
if (!empty($data->add) && !empty($data->addoutcomes)) {
/// add all selected to course list
View
1  grade/edit/outcome/course_form.html
@@ -60,5 +60,6 @@
</table>
<input name="id" type="hidden" value="<?php echo $courseid?>"/>
+<input type="hidden" name="sesskey" value="<?php echo sesskey() ?>" />
</div>
</form>
Please sign in to comment.
Something went wrong with that request. Please try again.