Permalink
Browse files

MDL-20901 fixed input validation

  • Loading branch information...
1 parent bb4cf8d commit 2b98208b2caff14f2e63508ae0e19065c6a2b043 @skodak skodak committed Nov 19, 2009
Showing with 2 additions and 1 deletion.
  1. +1 −1 grade/edit/outcome/course.php
  2. +1 −0 grade/edit/outcome/course_form.html
@@ -96,7 +96,7 @@
/// form processing
-if ($data = data_submitted()) {
+if ($data = data_submitted() and confirm_sesskey()) {
require_capability('moodle/grade:manageoutcomes', $context);
if (!empty($data->add) && !empty($data->addoutcomes)) {
/// add all selected to course list
@@ -60,5 +60,6 @@
</table>
<input name="id" type="hidden" value="<?php echo $courseid?>"/>
+<input type="hidden" name="sesskey" value="<?php echo sesskey() ?>" />
</div>
</form>

0 comments on commit 2b98208

Please sign in to comment.