Browse files

lesson: MDL-20705 Fix XSRF issues.

Uses new require_sesskey funciton from MDL-20702.
  • Loading branch information...
1 parent 2fb0138 commit 9e63957428c1fa4cf57fcb05e9a85f44667db59a @timhunt timhunt committed Nov 2, 2009
View
2 mod/lesson/action/addcluster.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
// first get the preceeding page
// if $pageid = 0, then we are inserting a new page at the beginning of the lesson
View
2 mod/lesson/action/addendofbranch.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
// first get the preceeding page
$pageid = required_param('pageid', PARAM_INT);
View
2 mod/lesson/action/addendofcluster.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
// first get the preceeding page
$pageid = required_param('pageid', PARAM_INT);
View
2 mod/lesson/action/confirmdelete.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
$pageid = required_param('pageid', PARAM_INT);
if (!$thispage = get_record("lesson_pages", "id", $pageid)) {
View
2 mod/lesson/action/continue.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
// left menu code
// check to see if the user can see the left menu
View
2 mod/lesson/action/delete.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
$pageid = required_param('pageid', PARAM_INT);
if (!$thispage = get_record("lesson_pages", "id", $pageid)) {
View
2 mod/lesson/action/insertpage.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
// check to see if the cancel button was pushed
if (optional_param('cancel', '', PARAM_ALPHA)) {
View
2 mod/lesson/action/moveit.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
$pageid = required_param('pageid', PARAM_INT); // page to move
if (!$page = get_record("lesson_pages", "id", $pageid)) {
View
2 mod/lesson/action/updatepage.php
@@ -6,7 +6,7 @@
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
* @package lesson
**/
- confirm_sesskey();
+ require_sesskey();
$redirect = optional_param('redirect', '', PARAM_ALPHA);
View
4 mod/lesson/essay.php
@@ -48,7 +48,7 @@
}
break;
case 'grade': // Grading form - get the necessary data
- confirm_sesskey();
+ require_sesskey();
$attemptid = required_param('attemptid', PARAM_INT);
@@ -120,7 +120,7 @@
}
break;
case 'email': // Sending an email(s) to a single user or all
- confirm_sesskey();
+ require_sesskey();
// Get our users (could be singular)
if ($userid = optional_param('userid', 0, PARAM_INT)) {

0 comments on commit 9e63957

Please sign in to comment.