Permalink
Browse files

MDL-20830 workshop requires sesskey when amending the submission title

  • Loading branch information...
1 parent 8dba124 commit a102b48b2f82483879631484ec0b0cb5db032c0a @mudrd8mz mudrd8mz committed Nov 12, 2009
Showing with 2 additions and 0 deletions.
  1. +2 −0 mod/workshop/submissions.php
@@ -75,6 +75,7 @@
<form id="amendtitleform" action="submissions.php" method="post">
<fieldset class="invisiblefieldset">
<input type="hidden" name="action" value="adminupdatetitle" />
+ <input type="hidden" name="sesskey" value="<?php echo sesskey(); ?>" />
<input type="hidden" name="id" value="<?php echo $cm->id ?>" />
<input type="hidden" name="sid" value="<?php echo $sid ?>" />
<div class="boxaligncenter">
@@ -197,6 +198,7 @@
elseif ($action == 'adminupdatetitle' ) {
require_capability('mod/workshop:manage', $context);
+ require_sesskey();
if (empty($sid)) {
error("Admin Update Title: submission id missing");
}

0 comments on commit a102b48

Please sign in to comment.