blocks: MDL-20710 prevent XSRF.

Uses new require_sesskey function from MDL-20702.

diff --git a/lib/filelib.php b/lib/filelib.php
index b9cc2ed3d223f12cf09551bf3c06208f2925f508..1330b6fb0ef1ed59a969ea33e7b5b5ff912200ed 100644 (file)
--- a/lib/filelib.php
+++ b/lib/filelib.php
@@ -600,7 +600,7 @@ function file_get_draft_area_files($draftitemid, $filepath = '/') {
 function file_get_submitted_draft_itemid($elname) {
     $param = optional_param($elname, 0, PARAM_INT);
     if ($param) {
-        confirm_sesskey();
+        require_sesskey();
     }
     if (is_array($param)) {
         if (!empty($param['itemid'])) {