mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-14 04:52:36 +02:00
Code Issues Projects Releases Wiki Activity

MDL-72367 badges: require sesskey to remove badge alignment.

Browse Source
This commit is contained in:
Paul Holden 2021-11-10 10:32:31 +00:00 committed by Jenkins
parent c7a62a8c82
commit d40cc61eba
2 changed files with 12 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
badges/alignment_action.php
View File

@ -25,9 +25,9 @@
require_once(__DIR__ . '/../config.php');
require_once($CFG->libdir . '/badgeslib.php');
$alignmentid = required_param('alignmentid', PARAM_INT); // Related badge ID.
$alignmentid = required_param('alignmentid', PARAM_INT); // Alignment ID.
$badgeid = required_param('id', PARAM_INT); // Badge ID.
$action = optional_param('action', 'remove', PARAM_TEXT); // Remove.
$action = optional_param('action', 'remove', PARAM_TEXT); // Action to perform.
require_login();
$return = new moodle_url('/badges/alignment.php', array('id' => $badgeid));
@ -36,6 +36,8 @@ $context = $badge->get_context();
require_capability('moodle/badges:configuredetails', $context);
if ($action == 'remove') {
require_sesskey();
$badge->delete_alignment($alignmentid);
}
redirect($return);

15
badges/renderer.php
View File

@ -1062,13 +1062,14 @@ class core_badges_renderer extends plugin_renderer_base {
);
if (!$currentbadge->is_active() && !$currentbadge->is_locked()) {
$delete = $this->output->action_icon(
new moodle_url('alignment_action.php',
array(
'id' => $currentbadge->id,
'alignmentid' => $item->id,
'action' => 'remove'
)
), new pix_icon('t/delete', get_string('delete')));
new moodle_url('/badges/alignment_action.php', [
'id' => $currentbadge->id,
'alignmentid' => $item->id,
'sesskey' => sesskey(),
'action' => 'remove'
]),
new pix_icon('t/delete', get_string('delete'))
);
$edit = $this->output->action_icon(
new moodle_url('alignment.php',
array(