Skip to content

Commit

Permalink
MDL-44606 Assign: Some grading functions are missing sesskey protection
Browse files Browse the repository at this point in the history
  • Loading branch information
Damyon Wiese authored and danpoltawski committed May 7, 2014
1 parent 8ec057c commit a57eacc
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions mod/assign/locallib.php
Original file line number Diff line number Diff line change
Expand Up @@ -3728,6 +3728,7 @@ private function process_save_extension(& $mform) {

// Include extension form.
require_once($CFG->dirroot . '/mod/assign/extensionform.php');
require_sesskey();

// Need submit permission to submit an assignment.
require_capability('mod/assign:grantextension', $this->context);
Expand Down Expand Up @@ -3774,6 +3775,7 @@ private function process_save_quick_grades() {

// Need grade permission
require_capability('mod/assign:grade', $this->context);
require_sesskey();

// make sure advanced grading is disabled
$gradingmanager = get_grading_manager($this->get_context(), 'mod_assign', 'submissions');
Expand Down Expand Up @@ -3977,6 +3979,7 @@ private function process_save_grading_options() {

// Need submit permission to submit an assignment
require_capability('mod/assign:grade', $this->context);
require_sesskey();

$mform = new mod_assign_grading_options_form(null, array('cm'=>$this->get_course_module()->id,
'contextid'=>$this->context->id,
Expand Down

0 comments on commit a57eacc

Please sign in to comment.