From 622ba79b5399b7ae1e43b0680932e47957dc5aae Mon Sep 17 00:00:00 2001
From: Petr Skoda <skodak@moodle.org>
Date: Sat, 21 Nov 2009 20:41:08 +0000
Subject: [PATCH] MDL-20901 fixed input validation

---
 tag/manage.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/tag/manage.php b/tag/manage.php
index 3fe1fd4a37654..4c1e3ea097e65 100644
--- a/tag/manage.php
+++ b/tag/manage.php
@@ -112,6 +112,10 @@
         }
         break;
     case 'addofficialtag':
+        if (!data_submitted() or !confirm_sesskey()) {
+            break;
+        }
+
         $new_otags = explode(',', optional_param('otagsadd', '', PARAM_TAG));
         $notice = '';
         foreach ( $new_otags as $new_otag ) {
@@ -140,6 +144,7 @@
 print('<input type="hidden" name="action" value="addofficialtag">');
 print('<div class="tag-management-form generalbox"><label class="accesshide" for="id_otagsadd">'. get_string('addotags', 'tag') .'</label>'.
     '<input name="otagsadd" id="id_otagsadd" type="text">'.
+    '<input type="hidden" name="sesskey" value="'.sesskey().'">'.
     '<input name="addotags" value="'. get_string('addotags', 'tag') .'" onclick="skipClientValidation = true;" id="id_addotags" type="submit">'.
     '</div>');
 print('</form>');