mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-01-17 13:38:32 +01:00
Code Issues Projects Releases Wiki Activity

MDL-81247 calendar: Extra validation for webservices

Browse Source
This commit is contained in:
Huong Nguyen 2024-03-26 16:15:26 +07:00 committed by Jenkins
parent 607716f206
commit adc1de569d
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
calendar/externallib.php
View File

@ -898,7 +898,17 @@ class core_calendar_external extends external_api {
$courseid = (!empty($data[$coursekey])) ? $data[$coursekey] : null;
$editoroptions = \core_calendar\local\event\forms\create::build_editor_options($context);
$formoptions = ['editoroptions' => $editoroptions, 'courseid' => $courseid];
$formoptions['eventtypes'] = calendar_get_allowed_event_types($courseid);
$allowedeeventtypes = calendar_get_allowed_event_types($courseid);
// Event type validation.
if (in_array(true, $allowedeeventtypes, true) === false) {
throw new \moodle_exception('nopermissiontoupdatecalendar');
}
if (empty($eventtype) || !isset($allowedeeventtypes[$eventtype]) || $allowedeeventtypes[$eventtype] == false) {
return ['validationerror' => true];
}
$formoptions['eventtypes'] = $allowedeeventtypes;
if ($courseid) {
require_once($CFG->libdir . '/grouplib.php');
$groupcoursedata = groups_get_course_data($courseid);