Permalink
Browse files

MDL-20830 workshop requires sesskey when removing attachment

  • Loading branch information...
1 parent 726b471 commit e06d7b43a0beb7c8c9db5f9af5a790ff0395308d @mudrd8mz mudrd8mz committed Nov 12, 2009
Showing with 2 additions and 1 deletion.
  1. +2 −1 mod/workshop/submissions.php
View
3 mod/workshop/submissions.php
@@ -223,7 +223,7 @@
}
notice_yesno(get_string("confirmremoveattachments","workshop"),
- "submissions.php?action=removeattachments&id=$cm->id&sid=$sid",
+ "submissions.php?sesskey=" . sesskey() . "&action=removeattachments&id=$cm->id&sid=$sid",
"view.php?id=$cm->id");
}
@@ -340,6 +340,7 @@ class=\"icon\" alt=\"".get_string('file')."\" />".
/******************* remove (all) attachments ************************************/
elseif ($action == 'removeattachments' ) {
+ require_sesskey();
$form = data_submitted();
if (empty($form->sid)) {

0 comments on commit e06d7b4

Please sign in to comment.