mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-01-18 22:08:20 +01:00
Code Issues Projects Releases Wiki Activity

enrol/mnet: fixes around fetch_remote_courses() and available_courses

Browse Source 
- ensure addslashes() affects data that goes to the database, not HTML
 - ensure we return defaultrolename from avaiable_courses
 - clear some leftover debug statements
This commit is contained in:
martinlanghoff 2007-01-19 02:43:11 +00:00
parent 0855c4cab3
commit e395caaa84
1 changed files with 24 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

45
enrol/mnet/enrol.php
View File

@ -89,10 +89,10 @@ class enrolment_plugin_mnet {
$query =
"SELECT
co.id as remoteid,
ca.id as cat_id,
ca.name as cat_name,
ca.description as cat_description,
co.id AS remoteid,
ca.id AS cat_id,
ca.name AS cat_name,
ca.description AS cat_description,
co.sortorder,
co.fullname,
co.shortname,
@ -101,8 +101,8 @@ class enrolment_plugin_mnet {
co.startdate,
co.cost,
co.currency,
co.defaultrole as defaultroleid,
r.name
co.defaultrole AS defaultroleid,
r.name AS defaultrolename
FROM
{$CFG->prefix}course_categories ca
JOIN
@ -142,8 +142,6 @@ class enrolment_plugin_mnet {
";
unset($cats);
error_log($query);
$rs = get_records_sql($query);
if (!empty($rs)) {
@ -189,8 +187,6 @@ class enrolment_plugin_mnet {
sortorder ASC
";
error_log($query);
return get_records_sql($query);
} elseif (!empty($CFG->enrol_mnet_allowed_courses)) {
@ -446,31 +442,38 @@ class enrolment_plugin_mnet {
$course = &$courses[$n];
// add/update cached data in mnet_enrol_courses
// sanitise data
$course = (object)$course;
$course->remoteid = (int)$course->remoteid;
$course->hostid = $mnethostid;
$course->categoryid = (int)$course->categoryid;
$course->categoryname = addslashes($course->categoryname);
$course->description = addslashes($course->description);
$course->cat_id = (int)$course->cat_id;
$course->sortorder = (int)$course->sortorder ;
$course->fullname = addslashes($course->fullname);
$course->shortname = addslashes($course->shortname);
$course->idnumber = addslashes($course->idnumber);
$course->summary = addslashes($course->summary);
$course->startdate = (int)$course->startdate;
$course->cost = (int)$course->cost;
$course->currency = addslashes($course->currency);
$course->defaultroleid = (int)$course->defaultroleid;
$course->defaultrolename = addslashes($course->defaultrolename);
// sanitise strings for DB NOTE - these are not sane
// for printing, so we'll use a different object
$dbcourse = clone($course);
$dbcourse->cat_name = addslashes($dbcourse->cat_name);
$dbcourse->cat_description = addslashes($dbcourse->cat_description);
$dbcourse->fullname = addslashes($dbcourse->fullname);
$dbcourse->shortname = addslashes($dbcourse->shortname);
$dbcourse->idnumber = addslashes($dbcourse->idnumber);
$dbcourse->summary = addslashes($dbcourse->summary);
$dbcourse->currency = addslashes($dbcourse->currency);
$dbcourse->defaultrolename = addslashes($dbcourse->defaultrolename);
// insert or update
if (empty($cachedcourses[$course->remoteid])) {
$course->id = insert_record('mnet_enrol_course', $course);
$course->id = insert_record('mnet_enrol_course', $dbcourse);
} else {
$course->id = $cachedcourses[$course->remoteid]->id;
$cachedcourses[$course->remoteid]->seen=true;
update_record('mnet_enrol_course', $course);
update_record('mnet_enrol_course', $dbcourse);
}
// free tmp obj
unset($dbcourse);
}
// prune stale data from cache