mirror of
https://github.com/moodle/moodle.git
synced 2025-01-17 21:49:15 +01:00
aae028d9e3
This patch uses local URLs in parameters because it is more compatible with various security hacks. Session key is not added automatically to return url for safety reasons - we do not want to execute some random action again. POST pages are now returned to course page too.
76 lines
2.5 KiB
PHP
76 lines
2.5 KiB
PHP
<?php
|
|
// This file is part of Moodle - http://moodle.org/
|
|
//
|
|
// Moodle is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// Moodle is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with Moodle. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
/**
|
|
* The purpose of this file is to allow the user to switch roles and be redirected
|
|
* back to the page that they were on.
|
|
*
|
|
* This functionality is also supported in {@link /course/view.php} in order to comply
|
|
* with backwards compatibility.
|
|
* The reason that we created this file was so that user didn't get redirected back
|
|
* to the course view page only to be redirected again.
|
|
*
|
|
* @since 2.0
|
|
* @package course
|
|
* @copyright 2009 Sam Hemelryk
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
|
|
*/
|
|
|
|
require_once('../config.php');
|
|
require_once($CFG->dirroot.'/course/lib.php');
|
|
|
|
$id = required_param('id', PARAM_INT);
|
|
$switchrole = optional_param('switchrole', -1, PARAM_INT);
|
|
$returnurl = optional_param('returnurl', '', PARAM_RAW);
|
|
|
|
if (strpos($returnurl, '?') === false) {
|
|
// Looks like somebody did not set proper page url, better go to course page.
|
|
$returnurl = new moodle_url('/course/view.php', array('id' => $id));
|
|
} else {
|
|
if (strpos($returnurl, $CFG->wwwroot) !== 0) {
|
|
$returnurl = $CFG->wwwroot.$returnurl;
|
|
}
|
|
$returnurl = clean_param($returnurl, PARAM_URL);
|
|
}
|
|
|
|
$PAGE->set_url('/course/switchrole.php', array('id'=>$id));
|
|
|
|
require_sesskey();
|
|
|
|
if (!$course = $DB->get_record('course', array('id'=>$id))) {
|
|
redirect(new moodle_url('/'));
|
|
}
|
|
|
|
$context = context_course::instance($course->id);
|
|
|
|
// Remove any switched roles before checking login.
|
|
if ($switchrole == 0) {
|
|
role_switch(0, $context);
|
|
}
|
|
require_login($course);
|
|
|
|
// Switchrole - sanity check in cost-order...
|
|
if ($switchrole > 0 && has_capability('moodle/role:switchroles', $context)) {
|
|
// Is this role assignable in this context?
|
|
// inquiring minds want to know...
|
|
$aroles = get_switchable_roles($context);
|
|
if (is_array($aroles) && isset($aroles[$switchrole])) {
|
|
role_switch($switchrole, $context);
|
|
}
|
|
}
|
|
|
|
redirect($returnurl);
|