admin/block.php is now using sesskey.

Merged from MOODLE_14_STABLE

diff --git a/blocks/course_list/block_course_list.php b/blocks/course_list/block_course_list.php
index 6f3e8a907d25d22db431f8a5e30eff5098512938..f93c8e58e8dde31b18938fb8c36366d385f3abb8 100644 (file)
--- a/blocks/course_list/block_course_list.php
+++ b/blocks/course_list/block_course_list.php
@@ -13,7 +13,7 @@ class CourseBlock_course_list extends MoodleBlock {
     }
 
     function print_config() {
-        global $CFG, $THEME;
+        global $CFG, $USER, $THEME;
         print_simple_box_start('center', '', $THEME->cellheading);
         include($CFG->dirroot.'/blocks/'.$this->name().'/config.html');
         print_simple_box_end();

diff --git a/blocks/course_list/config.html b/blocks/course_list/config.html
index d6f1a3e5c56b77775e65b50ffc680420ecef0d03..2be347a3291c5386d603d2081d0ff733ed7691d5 100644 (file)
--- a/blocks/course_list/config.html
+++ b/blocks/course_list/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="block.php">
+<?php echo "<input type=\"hidden\" name=\"sesskey\" value=\"".$USER->sesskey."\">"; ?>
 
 <table cellpadding="9" cellspacing="0">
 <tr valign="top">

diff --git a/blocks/online_users/block_online_users.php b/blocks/online_users/block_online_users.php
index a24a1ea75c523b243187c43ffe2abf131d39b095..1c3e31a541609d3f28ec58c12dee38bee8dfb8c5 100644 (file)
--- a/blocks/online_users/block_online_users.php
+++ b/blocks/online_users/block_online_users.php
@@ -11,7 +11,7 @@ class CourseBlock_online_users extends MoodleBlock {
     function has_config() {return true;}
 
     function print_config() {
-        global $CFG, $THEME;
+        global $CFG, $USER, $THEME;
         print_simple_box_start('center', '', $THEME->cellheading);
         include($CFG->dirroot.'/blocks/'.$this->name().'/config.html');
         print_simple_box_end();

diff --git a/blocks/online_users/config.html b/blocks/online_users/config.html
index 85fa3872f20b3d6dee4b6afeb65eee9b88052c45..1ae50c8d5a915ae8244e85f6e695b4894d8b4f35 100644 (file)
--- a/blocks/online_users/config.html
+++ b/blocks/online_users/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="block.php">
+<?php echo "<input type=\"hidden\" name=\"sesskey\" value=\"".$USER->sesskey."\">"; ?>
 
 <table cellpadding="9" cellspacing="0">
 <tr valign="top">