mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-01-18 22:08:20 +01:00
Code Issues Projects Releases Wiki Activity

Close wide-open hacking hole! This script wasn't checking for admin

Browse Source 
user in the case where the site has been defined already.  Oops. Fixed now.
This commit is contained in:
martin 2002-08-06 12:17:40 +00:00
parent 9c055aa5d2
commit ce15d1784c
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
admin/site.php
View File

@ -2,7 +2,11 @@
require("../config.php");
$course = get_site();
if ($course = get_site()) {
if (!isadmin()) {
error("You need to be admin to edit this page");
}
}
$course->format = "social"; // override
/// If data submitted, then process and store.