course/delete.php is using sesskey

Merged from MOODLE_14_STABLE

diff --git a/course/delete.php b/course/delete.php
index bbe67b8b8d09fa16b4c97075cafc937b34ad22d7..9070983c965101ed3afaf76fe7bba642cff30b66 100644 (file)
--- a/course/delete.php
+++ b/course/delete.php
@@ -38,7 +38,7 @@
                      "$strdeletecheck");
 
         notice_yesno("$strdeletecoursecheck<br /><br />$course->fullname ($course->shortname)", 
-                     "delete.php?id=$course->id&amp;delete=".md5($course->timemodified), 
+                     "delete.php?id=$course->id&amp;delete=".md5($course->timemodified)."&amp;sesskey=$USER->sesskey", 
                      "category.php?id=$course->category");
         exit;
     }
@@ -47,6 +47,10 @@
         error("The check variable was wrong - try again");
     }
 
+    if (!confirm_sesskey()) {
+        error(get_string('confirmsesskeybad', 'error'));
+    }
+
     // OK checks done, delete the course now.
     $strdeletingcourse = get_string("deletingcourse", "", $course->shortname);