mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-21 00:12:56 +02:00
Code Issues Projects Releases Wiki Activity

Make sure require_login is being called from reports MDL-10833

Browse Source
This commit is contained in:
moodler 2007-08-13 13:45:14 +00:00
parent 665f8762ae
commit a0501fc36a
4 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
course/report.php
View File

@ -9,7 +9,9 @@
error("That's an invalid course id");
}
require_capability('moodle/site:viewreports', get_context_instance(CONTEXT_COURSE, $id));
require_login($course->id);
require_capability('moodle/site:viewreports', get_context_instance(CONTEXT_COURSE, $course->id));
$strreports = get_string('reports');

4
course/report/log/index.php
View File

@ -33,8 +33,6 @@
$chooselog = optional_param('chooselog', 0, PARAM_INT);
$logformat = optional_param('logformat', 'showashtml', PARAM_ALPHA);
require_login();
if ($hostid == $CFG->mnet_localhost_id) {
if (!$course = get_record('course', 'id', $id) ) {
error('That\'s an invalid course id'.$id);
@ -46,6 +44,8 @@
$course->fullname = $course_stub->coursename;
}
require_login($course->id);
$context = get_context_instance(CONTEXT_COURSE, $course->id);
require_capability('moodle/site:viewreports', $context);

6
course/report/outline/index.php
View File

@ -11,12 +11,12 @@
$page = optional_param('page', 0, PARAM_INT);
$perpage = optional_param('perpage', 100, PARAM_INT);
require_login();
if (! $course = get_record("course", "id", $id)) {
error("Course id is incorrect.");
}
require_login($course->id);
require_capability('moodle/site:viewreports', get_context_instance(CONTEXT_COURSE, $course->id));
add_to_log($course->id, "course", "report outline", "report/outline/index.php?id=$course->id", $course->id);
@ -119,4 +119,4 @@ function print_outline_row($mod, $instance, $result) {
echo "</tr>";
}
?>
?>

2
course/report/stats/index.php
View File

@ -38,7 +38,7 @@
}
}
require_login();
require_login($course->id);
$context = get_context_instance(CONTEXT_COURSE, $course->id);
if (!has_capability('moodle/site:viewreports', $context)) {