changing param type for returnurl to PARAM_LOCALURL

diff --git a/question/question.php b/question/question.php
index ea21642b5ecb7dc4c1184e9b832a360adfb2c7f4..a7949d23c1cd16b38fc82b3a1e020c4c6df356c0 100644 (file)
--- a/question/question.php
+++ b/question/question.php
@@ -13,7 +13,7 @@ require_once(dirname(__FILE__) . '/editlib.php');
 require_once($CFG->libdir . '/filelib.php');
 require_once($CFG->libdir . '/formslib.php');
 
-$returnurl = optional_param('returnurl', 0, PARAM_URL);
+$returnurl = optional_param('returnurl', 0, PARAM_LOCALURL);
 
 // Read URL parameters telling us which question to edit.
 $id = optional_param('id', 0, PARAM_INT); // question id

diff --git a/question/type/edit_question_form.php b/question/type/edit_question_form.php
index 0203818a31a4e713b3f88713c161c0589d154d8b..3a08e8bb92f7831f7afaa36b327a6a9324da18b3 100644 (file)
--- a/question/type/edit_question_form.php
+++ b/question/type/edit_question_form.php
@@ -116,6 +116,10 @@ class question_edit_form extends moodleform {
         $mform->setType('cmid', PARAM_INT);
         $mform->setDefault('cmid', 0);
 
+        $mform->addElement('hidden', 'returnurl');
+        $mform->setType('returnurl', PARAM_LOCALURL);
+        $mform->setDefault('returnurl', '');
+
         $buttonarray = array();
         $buttonarray[] = &$mform->createElement('submit', 'submitbutton', get_string('savechanges'));
         if (!empty($this->question->id)) {