MDL-20901 fixed input validation

This commit is contained in:
Petr Skoda 2009-11-21 15:26:54 +00:00
parent adef30995b
commit 441bef0f7a
2 changed files with 2 additions and 1 deletions

View File

@ -1,6 +1,7 @@
<form id="subscriberform" method="post" action="subscribers.php">
<input type="hidden" name="id" value="<?php echo $id?>" />
<input type="hidden" name="sesskey" value="<?php echo sesskey() ?>" />
<table align="center" border="0" cellpadding="5" cellspacing="0">
<tr>
<td valign="top">

View File

@ -102,7 +102,7 @@ $strsubscribers = get_string("subscribers", "forum");
$strforums = get_string("forums", "forum");
$searchtext = optional_param('searchtext', '', PARAM_RAW);
if ($frm = data_submitted()) {
if ($frm = data_submitted() and confirm_sesskey()) {
/// A form was submitted so process the input
if (!empty($frm->add) and !empty($frm->addselect)) {