rss MDLSITE-1007 now running clean_param() over the user token

This commit is contained in:
Andrew Davis 2010-10-04 06:56:51 +00:00
parent b276cf9ed1
commit 83b912e0ed

View File

@ -58,7 +58,7 @@ if (count($args) < 5) {
}
$contextid = (int)$args[0];
$token = $args[1];
$token = clean_param($args[1], PARAM_ALPHANUM);
$componentname = clean_param($args[2], PARAM_FILE);