Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

MDL-20830 workshop requires sesskey when amending the submission title

  • Loading branch information...
commit a102b48b2f82483879631484ec0b0cb5db032c0a 1 parent 8dba124
@mudrd8mz mudrd8mz authored
Showing with 2 additions and 0 deletions.
  1. +2 −0  mod/workshop/submissions.php
View
2  mod/workshop/submissions.php
@@ -75,6 +75,7 @@
<form id="amendtitleform" action="submissions.php" method="post">
<fieldset class="invisiblefieldset">
<input type="hidden" name="action" value="adminupdatetitle" />
+ <input type="hidden" name="sesskey" value="<?php echo sesskey(); ?>" />
<input type="hidden" name="id" value="<?php echo $cm->id ?>" />
<input type="hidden" name="sid" value="<?php echo $sid ?>" />
<div class="boxaligncenter">
@@ -197,6 +198,7 @@
elseif ($action == 'adminupdatetitle' ) {
require_capability('mod/workshop:manage', $context);
+ require_sesskey();
if (empty($sid)) {
error("Admin Update Title: submission id missing");
}
Please sign in to comment.
Something went wrong with that request. Please try again.