MDL-20931 fixed input validation

diff --git a/course/import/groups/index.php b/course/import/groups/index.php
index cd79671cb05d0f71d1107c4feadc05866e79c016..93eed4ab4e340aa0c1b8d47507685e38b4360c60 100755 (executable)
--- a/course/import/groups/index.php
+++ b/course/import/groups/index.php
@@ -75,7 +75,7 @@ echo $OUTPUT->header();
 
 require_once($CFG->dirroot.'/lib/uploadlib.php');
 $um = new upload_manager('userfile',false,false,null,false,0);
-if ($um->preprocess_files()) {
+if ($um->preprocess_files() and confirm_sesskey()) {
     $filename = $um->files['userfile']['tmp_name'];
 
     //Fix mac/dos newlines