Skip to content
Browse files

MDL-20901 fixed input validation

  • Loading branch information...
1 parent 73f67f3 commit 622ba79b5399b7ae1e43b0680932e47957dc5aae @skodak skodak committed Nov 21, 2009
Showing with 5 additions and 0 deletions.
  1. +5 −0 tag/manage.php
View
5 tag/manage.php
@@ -112,6 +112,10 @@
}
break;
case 'addofficialtag':
+ if (!data_submitted() or !confirm_sesskey()) {
+ break;
+ }
+
$new_otags = explode(',', optional_param('otagsadd', '', PARAM_TAG));
$notice = '';
foreach ( $new_otags as $new_otag ) {
@@ -140,6 +144,7 @@
print('<input type="hidden" name="action" value="addofficialtag">');
print('<div class="tag-management-form generalbox"><label class="accesshide" for="id_otagsadd">'. get_string('addotags', 'tag') .'</label>'.
'<input name="otagsadd" id="id_otagsadd" type="text">'.
+ '<input type="hidden" name="sesskey" value="'.sesskey().'">'.
'<input name="addotags" value="'. get_string('addotags', 'tag') .'" onclick="skipClientValidation = true;" id="id_addotags" type="submit">'.
'</div>');
print('</form>');

0 comments on commit 622ba79

Please sign in to comment.
Something went wrong with that request. Please try again.