mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-13 12:32:08 +02:00
Code Issues Projects Releases Wiki Activity

MDL-11053 Course object not escaped before insert - patch by Aaron C Spike

Browse Source
This commit is contained in:
skodak 2007-08-29 13:53:11 +00:00
parent d93d67b7ac
commit 53ed410ad3
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
enrol/imsenterprise/enrol.php
View File

@ -486,6 +486,7 @@ function process_group_tag($tagcontents){
$this->log_line("Course $coursecode not found in Moodle's course idnumbers.");
} else {
// Create the (hidden) course(s) if not found
$course = new object();
$course->fullname = $group->description;
$course->shortname = $coursecode;
$course->idnumber = $coursecode;
@ -543,13 +544,13 @@ function process_group_tag($tagcontents){
}else{
$course->sortorder = 1000;
}
if($course->id = insert_record('course', $course)){
if($course->id = insert_record('course', addslashes_object($course))){
// Setup the blocks
$page = page_create_object(PAGE_COURSE_VIEW, $course->id);
blocks_repopulate_page($page); // Return value not checked because you can always edit later
$section = NULL;
$section = new object();
$section->course = $course->id; // Create a default section.
$section->section = 0;
$section->id = insert_record("course_sections", $section);