Make sure site security is added when logging in via change password

diff --git a/login/change_password.php b/login/change_password.php
index ccd5a9b9da7a42496d59ba5860f067f6f4cae326..7f36266e6f55450547113c4810f35deb563cfdd2 100644 (file)
--- a/login/change_password.php
+++ b/login/change_password.php
@@ -29,6 +29,7 @@
 
                        $USER = $user;
                        $USER->loggedin = true;
+            $USER->site = $CFG->wwwroot;   // for added security
             save_session("USER");
 
                        set_moodle_cookie($USER->username);