$groupid = $this->check_group_entry($course->id, $form->password);
- if (($form->password == $course->password) or ($groupid !== false) ) {
+ if ((stripslashes($form->password) == $course->password) or ($groupid !== false) ) {
if (isguestuser()) { // only real user guest, do not use this for users with guest role
$USER->enrolkey[$course->id] = true;
$ingroup = false;
if (($groups = groups_get_all_groups($courseid))) {
foreach ($groups as $group) {
- if ( !empty($group->enrolmentkey) and ($password == $group->enrolmentkey) ) {
+ if ( !empty($group->enrolmentkey) and (stripslashes($password) == $group->enrolmentkey) ) {
$ingroup = $group->id;
}
}