MDL-20901 fixed input validation

moodle · Nov 19, 2009 · f5c2028 · f5c2028
1 parent 6735f4a
commit f5c2028
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/blog/preferences.html b/blog/preferences.html
@@ -8,6 +8,7 @@
 <tr>
     <td colspan="2" align="center">
     <input type="hidden" name="courseid" value="<?php echo $courseid; ?>" />
+    <input type="hidden" name="sesskey" value="<?php echo sesskey(); ?>" />
     <input type="submit" value="<?php print_string("savechanges"); ?>" />
     <input type="button" value="<?php print_string('cancel'); ?>" onclick="javascript:history.go(-1)" /></td>
 </tr>

diff --git a/blog/preferences.php b/blog/preferences.php
@@ -22,7 +22,7 @@
 
 /// If data submitted, then process and store.
 
-    if (data_submitted()) {
+    if (data_submitted() and confirm_sesskey()) {
         $pagesize = required_param('pagesize', PARAM_INT);
 
         if ($pagesize < 1) {