set"reportusers" to PARAM_ALPHANUM, so that it can accept userids and group names

diff --git a/mod/hotpot/report.php b/mod/hotpot/report.php
index aa602b0ecc97e4b591a0ac1c6b780a62fb8a31da..7c54e3467c0611b1c0932b2c2a0c2d556db02de0 100644 (file)
--- a/mod/hotpot/report.php
+++ b/mod/hotpot/report.php
@@ -51,7 +51,7 @@
     // assemble array of form data
     $formdata = array(
         'mode' => $mode,
-        'reportusers'      => has_capability('mod/hotpot:viewreport',$modulecontext) ? optional_param('reportusers', get_user_preferences('hotpot_reportusers', 'allusers'), PARAM_ALPHA) : 'this',
+        'reportusers'      => has_capability('mod/hotpot:viewreport',$modulecontext) ? optional_param('reportusers', get_user_preferences('hotpot_reportusers', 'allusers'), PARAM_ALPHANUM) : 'this',
         'reportattempts'   => optional_param('reportattempts', get_user_preferences('hotpot_reportattempts', 'all'), PARAM_ALPHA),
         'reportformat'     => optional_param('reportformat', 'htm', PARAM_ALPHA),
         'reportshowlegend' => optional_param('reportshowlegend', get_user_preferences('hotpot_reportshowlegend', '0'), PARAM_INT),