From 398ef378dc11f1172cbe6e138563bdafc4dcbdeb Mon Sep 17 00:00:00 2001
From: stronk7 <stronk7>
Date: Sat, 2 Oct 2004 23:13:37 +0000
Subject: [PATCH] admin/block.php is now using sesskey.

Merged from MOODLE_14_STABLE
---
 blocks/course_list/block_course_list.php   | 2 +-
 blocks/course_list/config.html             | 1 +
 blocks/online_users/block_online_users.php | 2 +-
 blocks/online_users/config.html            | 1 +
 4 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/blocks/course_list/block_course_list.php b/blocks/course_list/block_course_list.php
index 6f3e8a907d2..f93c8e58e8d 100644
--- a/blocks/course_list/block_course_list.php
+++ b/blocks/course_list/block_course_list.php
@@ -13,7 +13,7 @@ class CourseBlock_course_list extends MoodleBlock {
     }
 
     function print_config() {
-        global $CFG, $THEME;
+        global $CFG, $USER, $THEME;
         print_simple_box_start('center', '', $THEME->cellheading);
         include($CFG->dirroot.'/blocks/'.$this->name().'/config.html');
         print_simple_box_end();
diff --git a/blocks/course_list/config.html b/blocks/course_list/config.html
index d6f1a3e5c56..2be347a3291 100644
--- a/blocks/course_list/config.html
+++ b/blocks/course_list/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="block.php">
+<?php echo "<input type=\"hidden\" name=\"sesskey\" value=\"".$USER->sesskey."\">"; ?>
 
 <table cellpadding="9" cellspacing="0">
 <tr valign="top">
diff --git a/blocks/online_users/block_online_users.php b/blocks/online_users/block_online_users.php
index a24a1ea75c5..1c3e31a5416 100644
--- a/blocks/online_users/block_online_users.php
+++ b/blocks/online_users/block_online_users.php
@@ -11,7 +11,7 @@ class CourseBlock_online_users extends MoodleBlock {
     function has_config() {return true;}
 
     function print_config() {
-        global $CFG, $THEME;
+        global $CFG, $USER, $THEME;
         print_simple_box_start('center', '', $THEME->cellheading);
         include($CFG->dirroot.'/blocks/'.$this->name().'/config.html');
         print_simple_box_end();
diff --git a/blocks/online_users/config.html b/blocks/online_users/config.html
index 85fa3872f20..1ae50c8d5a9 100644
--- a/blocks/online_users/config.html
+++ b/blocks/online_users/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="block.php">
+<?php echo "<input type=\"hidden\" name=\"sesskey\" value=\"".$USER->sesskey."\">"; ?>
 
 <table cellpadding="9" cellspacing="0">
 <tr valign="top">