MDL-20830 workshop requires sesskey when clearing the late submission…

… flag
mudrd8mz · Nov 12, 2009 · 8e3264e · 8e3264e
1 parent a102b48
commit 8e3264e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/mod/workshop/submissions.php b/mod/workshop/submissions.php
@@ -99,6 +99,7 @@
     elseif ($action == 'adminclearlate' ) {
 
         require_capability('mod/workshop:manage', $context);
+        require_sesskey();
         if (empty($sid)) {
             error("Admin clear late flag: submission id missing");
         }
@@ -178,7 +179,7 @@
         }
 
         notice_yesno(get_string("clearlateflag","workshop")."?",
-             "submissions.php?action=adminclearlate&amp;id=$cm->id&amp;sid=$sid",
+             "submissions.php?sesskey=" . sesskey() . "&amp;action=adminclearlate&amp;id=$cm->id&amp;sid={$submission->id}",
              "view.php?id=$cm->id");
     }