fixed incorrect password cleaning

This commit is contained in:
Petr Skoda 2010-07-25 09:32:06 +00:00
parent b3daa92632
commit bfc638bb16

View File

@ -31,7 +31,7 @@ require_once($CFG->libdir . '/completionlib.php');
$id = required_param('id', PARAM_INT); // Course Module ID
$pageid = optional_param('pageid', NULL, PARAM_INT); // Lesson Page ID
$edit = optional_param('edit', -1, PARAM_BOOL);
$userpassword = optional_param('userpassword','',PARAM_CLEAN);
$userpassword = optional_param('userpassword','',PARAM_RAW);
$cm = get_coursemodule_from_id('lesson', $id, 0, false, MUST_EXIST);;
$course = $DB->get_record('course', array('id' => $cm->course), '*', MUST_EXIST);
@ -76,7 +76,7 @@ if (!$canmanage) {
}
} else {
echo $lessonoutput->header($lesson, $cm);
echo $lessonoutput->login_prompt($lesson, optional_param('userpassword', 0, PARAM_CLEAN));
echo $lessonoutput->login_prompt($lesson, $userpassword !== '');
echo $lessonoutput->footer();
exit();
}