demos new security features optional_param, acceptGet

diff --git a/course/edit2.php b/course/edit2.php
index 5c15b6c17014d98668b2078e4a16f53c21a7e645..ef35ae4358cf9a15349c8ad11369acec5a2b4dab 100644 (file)
--- a/course/edit2.php
+++ b/course/edit2.php
@@ -6,10 +6,17 @@
     require_once("$CFG->libdir/blocklib.php");
     require_once("$CFG->dirroot/enrol/enrol.class.php");
 
-    $id       = optional_param('id', 0, PARAM_INT); // course id
-    $category = optional_param('category', 0, PARAM_INT); // possible default category
+    include_once $CFG->libdir.'/formslib.php';
 
     require_login();
+
+    $mform =& new moodleform('edit_course', 'post', 'edit2.php');
+
+    $mform->acceptGet('id', 'category');
+
+    $id       = $mform->optional_param('id', 0, PARAM_INT); // course id
+    $category = $mform->optional_param('category', 0, PARAM_INT); // possible default category
+
    
     $disable_meta = false;
     $focus = "";
@@ -160,13 +167,13 @@
     include("edit_form.php");
     $mform->setDefaults((array)$default);
     
-    //setconstant overrides data coming from the form as well as default
+/*    //setconstant overrides data coming from the form as well as default
     //we use this to pass data into the form which we've already processed.
     $mform->setConstants(array('id'=>$id,
                             'category'=>$category));
 
 
-
+*/
 
 /// If data submitted, then process and store.