admin/creators.php is now using sesskey.

Merged from MOODLE_14_STABLE

diff --git a/admin/creators.html b/admin/creators.html
index e88c7e54338fe7a48409671d3f9784da8327ceb5..c551fd5b642e7d418ec6f880e39709e2b767145f 100644 (file)
--- a/admin/creators.html
+++ b/admin/creators.html
@@ -1,6 +1,7 @@
 
 <form name="creatorsform" id="creatorsform" method="post" action="creators.php">
 <input type="hidden" name="previoussearch" value="<?php echo $previoussearch ?>">
+<input type="hidden" name="sesskey" value="<?php echo $USER->sesskey ?>">
   <table align="center" border="0" cellpadding="5" cellspacing="0">
     <tr>
       <td valign="top">

diff --git a/admin/creators.php b/admin/creators.php
index a1a5da445535407886c0cb466da666ce2c8503f2..8f0d183f5edd43425198034bfce9451d06eb669f 100755 (executable)
--- a/admin/creators.php
+++ b/admin/creators.php
@@ -19,6 +19,10 @@
         error("You must be an administrator to use this page.");
     }
 
+    if (!confirm_sesskey()) {
+        error(get_string('confirmsesskeybad', 'error'));
+    }
+
     $primaryadmin = get_admin();
 
 /// assign all of the configurable language strings

diff --git a/admin/index.php b/admin/index.php
index 5e062fb8e210172c76700247c4f66828e43a1f48..b4951f3f3cc551016677dcbe1339d416c07a7a1b 100644 (file)
--- a/admin/index.php
+++ b/admin/index.php
@@ -329,7 +329,7 @@
     $userdata .= "<font size=+1>&nbsp;</font><a href=\"../course/index.php?edit=on\">".get_string("assignteachers")."</a> - <font size=\"1\">".
                  get_string("adminhelpassignteachers").
                  " <img src=\"../pix/t/user.gif\" height=\"11\" width=\"11\" alt=\"\"></font><br />";
-    $userdata .= "<font size=+1>&nbsp;</font><a href=\"creators.php\">".get_string("assigncreators")."</a> - <font size=\"1\">".
+    $userdata .= "<font size=+1>&nbsp;</font><a href=\"creators.php?sesskey=$USER->sesskey\">".get_string("assigncreators")."</a> - <font size=\"1\">".
                  get_string("adminhelpassigncreators")."</font><br />";
     $userdata .= "<font size=+1>&nbsp;</font><a href=\"admin.php?sesskey=$USER->sesskey\">".get_string("assignadmins")."</a> - <font size=\"1\">".
                  get_string("adminhelpassignadmins")."</font><br />";

diff --git a/admin/users.php b/admin/users.php
index e9f72fb8a73e3999aeb5f1f60a04b4f4bfeb606c..30b99117b13aac38d25413503fc21d8fb9e7ebac 100644 (file)
--- a/admin/users.php
+++ b/admin/users.php
@@ -40,7 +40,7 @@
                            get_string("adminhelpassignstudents"));
     $table->data[] = array("<b><a href=\"../course/index.php?edit=on\">".get_string("assignteachers")."</a></b>",
                            get_string("adminhelpassignteachers")." <img src=\"../pix/t/user.gif\" height=\"11\" width=\"11\" alt=\"\" />");
-    $table->data[] = array("<b><a href=\"creators.php\">".get_string("assigncreators")."</a></b>",
+    $table->data[] = array("<b><a href=\"creators.php?sesskey=$USER->sesskey\">".get_string("assigncreators")."</a></b>",
                            get_string("adminhelpassigncreators"));
     $table->data[] = array("<b><a href=\"admin.php?sesskey=$USER->sesskey\">".get_string("assignadmins")."</a></b>",
                            get_string("adminhelpassignadmins"));