course/teacher.php is using sesskey.

(POST form too)

Merged from MOODLE_14_STABLE

diff --git a/course/teacher.php b/course/teacher.php
index 0007f26a68d817dc8455dec0be48f49c98e622d4..ced977338f7e5593dbca254a73f3eeebaef4f860 100644 (file)
--- a/course/teacher.php
+++ b/course/teacher.php
@@ -67,7 +67,8 @@
 
 /// If data submitted, then process and store.
 
-    if ($form = data_submitted()) {
+    if ($form = data_submitted() and confirm_sesskey()) {
+        unset ($form->sesskey);
         $rank = array();
 
         // Peel out all the data from variable names.
@@ -165,6 +166,7 @@
 
         print_table($table);
         echo "<input type=\"hidden\" name=\"id\" value=\"$course->id\" />";
+        echo "<input type=\"hidden\" name=\"sesskey\" value=\"$USER->sesskey\" />";
         echo "<center><input type=\"submit\" value=\"".get_string("savechanges")."\" /> ";
         echo "</center>";
         echo "</form>";