KumiSystems/moodle-mod-customcert
1
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases Packages Wiki Activity

Added missing confirm_sesskey() checks

Browse source
This commit is contained in:
Mark Nelson 2017-09-02 14:01:13 +08:00
parent 2b2c16d3df
commit 2d1bc8a70c
4 changed files with 111 additions and 82 deletions
Download patch file Download diff file Expand all files Collapse all files

13
classes/edit_form.php
View file

@ -81,7 +81,14 @@ class edit_form extends \moodleform {
}
// Link to add another page.
$addpagelink = new \moodle_url('/mod/customcert/edit.php', array('tid' => $this->tid, 'aid' => 1, 'action' => 'addpage'));
$addpagelink = new \moodle_url('/mod/customcert/edit.php',
array(
'tid' => $this->tid,
'aid' => 1,
'action' => 'addpage',
'sesskey' => sesskey()
)
);
$icon = $OUTPUT->pix_icon('t/switch_plus', get_string('addcertpage', 'customcert'));
$addpagehtml = \html_writer::link($addpagelink, $icon . get_string('addcertpage', 'customcert'));
$mform->addElement('html', \html_writer::tag('div', $addpagehtml, array('class' => 'addpage')));
@ -193,9 +200,9 @@ class edit_form extends \moodleform {
}
$editlink = '/mod/customcert/edit.php';
$editlinkparams = array('tid' => $this->tid);
$editlinkparams = array('tid' => $this->tid, 'sesskey' => sesskey());
$editelementlink = '/mod/customcert/edit_element.php';
$editelementlinkparams = array('tid' => $this->tid);
$editelementlinkparams = array('tid' => $this->tid, 'sesskey' => sesskey());
// Place the ordering arrows.
// Only display the move up arrow if it is not the first.