course/unenrol.php is using sesskey.

Merged from MOODLE_14_STABLE
This commit is contained in:
stronk7 2004-10-09 19:08:01 +00:00
parent 5bcfaece3d
commit 967cd1164b

View File

@ -28,7 +28,7 @@
error("You are not allowed to unenroll");
}
if (isset($confirm)) {
if (isset($confirm) and confirm_sesskey()) {
if (! unenrol_student($user->id, $course->id)) {
error("An error occurred while trying to unenrol you.");
@ -56,7 +56,7 @@
$strunenrolsure = get_string("unenrolsure", "", fullname($user, true));
}
notice_yesno ($strunenrolsure, "unenrol.php?id=$id&user=$user->id&confirm=yes", "$HTTP_REFERER");
notice_yesno ($strunenrolsure, "unenrol.php?id=$id&user=$user->id&confirm=yes&sesskey=$USER->sesskey", "$HTTP_REFERER");
print_footer();