mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-03-14 12:40:01 +01:00
Code Issues Projects Releases Wiki Activity

MDL-20901 fixed input validation

Browse Source
This commit is contained in:
Petr Skoda 2009-11-20 08:50:12 +00:00
parent c2dcbfe3a6
commit dba386b573
4 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
mod/glossary/import.html
View File

@ -46,6 +46,7 @@
</table>
<div>
<input type="hidden" name="id" value="<?php p($id) ?>" />
<input type="hidden" name="sesskey" value="<?php echo sesskey() ?>" />
<input type="hidden" name="step" value="1" />
</div>
</form>

1
mod/glossary/import.php
View File

@ -82,6 +82,7 @@ if ( !$step ) {
exit;
}
require_sesskey();
$form = data_submitted();
$file = $_FILES["file"];

2
mod/glossary/rate.php
View File

@ -46,7 +46,7 @@
$returnurl = $CFG->wwwroot.'/mod/glossary/view.php?id='.$cm->id;
}
if ($data = data_submitted()) { // form submitted
if ($data = data_submitted() and confirm_sesskey()) { // form submitted
/// Calculate scale values
$scale_values = make_grades_menu($glossary->scale);

1
mod/glossary/view.php
View File

@ -417,6 +417,7 @@ if ($allentries) {
echo "<form method=\"post\" action=\"rate.php\">";
echo "<div>";
echo "<input type=\"hidden\" name=\"glossaryid\" value=\"$glossary->id\" />";
echo "<input type=\"hidden\" name=\"sesskey\" value=\"".sesskey()."\" />";
}
foreach ($allentries as $entry) {