Permalink
Browse files

MDL-20830 workshop requires sesskey when editing submission

  • Loading branch information...
1 parent e06d7b4 commit 514cda9cd7ed5b65908f8570e8ecc999074799a2 @mudrd8mz mudrd8mz committed Nov 12, 2009
Showing with 2 additions and 0 deletions.
  1. +2 −0 mod/workshop/submissions.php
@@ -248,6 +248,7 @@
<form id="editform" enctype="multipart/form-data" action="submissions.php" method="post">
<fieldset class="invisiblefieldset">
<input type="hidden" name="action" value="updatesubmission" />
+ <input type="hidden" name="sesskey" value="<?php echo sesskey(); ?>" />
<input type="hidden" name="id" value="<?php echo $cm->id ?>" />
<input type="hidden" name="sid" value="<?php echo $sid ?>" />
<div class="boxaligncenter">
@@ -413,6 +414,7 @@ class=\"icon\" alt=\"".get_string('file')."\" />".
/*************** update submission ***************************/
elseif ($action == 'updatesubmission') {
+ require_sesskey();
if (empty($sid)) {
error("Update submission: submission id missing");
}

0 comments on commit 514cda9

Please sign in to comment.