Permalink
Browse files

MDL-43146 enrol_imsenterprise: missing sesskey protection

  • Loading branch information...
1 parent 4bc5dd3 commit eee61675f042a9ec89f8f6d219b4ded010198fe4 @danpoltawski danpoltawski committed with damyon Jan 28, 2014
Showing with 4 additions and 1 deletion.
  1. +1 −0 enrol/imsenterprise/importnow.php
  2. +3 −1 enrol/imsenterprise/settings.php
View
1 enrol/imsenterprise/importnow.php
@@ -2,6 +2,7 @@
require_once(dirname(dirname(dirname(__FILE__))) . '/config.php');
require_login(0, false);
require_capability('moodle/site:config', context_system::instance());
+require_sesskey();
$site = get_site();
View
4 enrol/imsenterprise/settings.php
@@ -83,6 +83,8 @@
$settings->add(new admin_setting_configcheckbox('enrol_imsenterprise/imscapitafix', get_string('usecapitafix', 'enrol_imsenterprise'), get_string('usecapitafix_desc', 'enrol_imsenterprise'), 0));
- $importnowstring = get_string('aftersaving...', 'enrol_imsenterprise').' <a href="../enrol/imsenterprise/importnow.php">'.get_string('doitnow', 'enrol_imsenterprise').'</a>';
+ $importurl = new moodle_url('/enrol/imsenterprise/importnow.php', array('sesskey' => sesskey()));
+ $importnowstring = get_string('aftersaving...', 'enrol_imsenterprise').' '.
+ html_writer::link($importurl, get_string('doitnow', 'enrol_imsenterprise'));
$settings->add(new admin_setting_heading('enrol_imsenterprise_doitnowmessage', '', $importnowstring));
}

0 comments on commit eee6167

Please sign in to comment.