mirror of
https://github.com/moodle/moodle.git
synced 2025-04-21 00:12:56 +02:00
moodleform->validation() receives slashed $data now to make it similar to data_submitted() and prevent potential SQL injections
This commit is contained in:
parent
10b7946ff3
commit
e7dcb0fccc
@ -80,7 +80,7 @@ class moodleform {
|
||||
|
||||
if ($validated === null) {
|
||||
$internal_val = $this->_form->validate();
|
||||
$moodle_val = $this->validation($this->_form->exportValues(null, false));
|
||||
$moodle_val = $this->validation($this->_form->exportValues(null, true));
|
||||
if ($moodle_val !== true) {
|
||||
if (!empty($moodle_val)) {
|
||||
foreach ($moodle_val as $element=>$msg) {
|
||||
|
Loading…
x
Reference in New Issue
Block a user