mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-02-08 00:52:33 +01:00
Code Issues Projects Releases Wiki Activity

MDL-32774: Require sesskey for all actions in the assignment upgrade tool

Browse Source
This commit is contained in:
Damyon Wiese 2012-05-04 14:36:06 +08:00
parent e16e2300c5
commit ee225061dc
5 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
admin/tool/assignmentupgrade/batchupgrade.php
View File

@ -28,6 +28,8 @@ require_once(dirname(__FILE__) . '/upgradableassignmentstable.php');
require_once(dirname(__FILE__) . '/upgradableassignmentsbatchform.php');
require_once($CFG->libdir . '/adminlib.php');
require_sesskey();
// admin_externalpage_setup calls require_login and checks moodle/site:config
admin_externalpage_setup('assignmentupgrade', '', array(), tool_assignmentupgrade_url('batchupgrade'));
$PAGE->navbar->add(get_string('batchupgrade', 'tool_assignmentupgrade'));

1
admin/tool/assignmentupgrade/listnotupgraded.php
View File

@ -40,6 +40,7 @@ $assignments = new tool_assignmentupgrade_assignments_table($perpage);
$batchform = new tool_assignmentupgrade_batchoperations_form();
$data = $batchform->get_data();
if ($data && $data->selectedassignments != '' || $data && isset($data->upgradeall)) {
require_sesskey();
echo $renderer->confirm_batch_operation_page($data);
} else {
echo $renderer->assignment_list_page($assignments, $batchform);

2
admin/tool/assignmentupgrade/upgradableassignmentstable.php
View File

@ -132,7 +132,7 @@ class tool_assignmentupgrade_assignments_table extends table_sql implements rend
function col_upgradable(stdClass $row) {
if ($row->upgradable) {
return html_writer::link(new moodle_url('/admin/tool/assignmentupgrade/upgradesingleconfirm.php',
array('id' => $row->id)), get_string('supported', 'tool_assignmentupgrade'));
array('id' => $row->id, 'sesskey' => sesskey())), get_string('supported', 'tool_assignmentupgrade'));
} else {
return get_string('notsupported', 'tool_assignmentupgrade');
}

2
admin/tool/assignmentupgrade/upgradesingle.php
View File

@ -26,6 +26,8 @@ require_once(dirname(__FILE__) . '/../../../config.php');
require_once(dirname(__FILE__) . '/locallib.php');
require_once($CFG->libdir . '/adminlib.php');
require_sesskey();
$assignmentid = required_param('id', PARAM_INT);
// admin_externalpage_setup calls require_login and checks moodle/site:config

2
admin/tool/assignmentupgrade/upgradesingleconfirm.php
View File

@ -26,6 +26,8 @@ require_once(dirname(__FILE__) . '/../../../config.php');
require_once(dirname(__FILE__) . '/locallib.php');
require_once($CFG->libdir . '/adminlib.php');
require_sesskey();
$assignmentid = required_param('id', PARAM_INT);
// admin_externalpage_setup calls require_login and checks moodle/site:config