MDL-20353 adding missing data types of hidden form fields

diff --git a/admin/generator.php b/admin/generator.php
index b48b76015b7bddbe8520595b4de946df210e75a1..333848b6999f6c843dc9850727d5baf7f65f8c19 100755 (executable)
--- a/admin/generator.php
+++ b/admin/generator.php
@@ -1283,6 +1283,7 @@ class generator_form extends moodleform {
 
         $mform =& $this->_form;
         $mform->addElement('hidden', 'do_generation', 1);
+        $mform->setType('do_generation', PARAM_INT);
 
         foreach ($generator->settings as $setting) {
             $type = 'advcheckbox';

diff --git a/course/delete_category_form.php b/course/delete_category_form.php
index 372773beeba173044b6e46a245eb458d70bb6da8..9c3fb34a8af8d4495fd1815956f41de9de2a4988 100644 (file)
--- a/course/delete_category_form.php
+++ b/course/delete_category_form.php
@@ -110,11 +110,14 @@ class delete_category_form extends moodleform {
             }
         } else {
             $mform->addElement('hidden', 'fulldelete', 1);
+            $mform->setType('fulldelete', PARAM_INT);
             $mform->addElement('static', 'emptymessage', '', get_string('deletecategoryempty'));
         }
 
         $mform->addElement('hidden', 'delete');
+        $mform->setType('delete', PARAM_ALPHANUM);
         $mform->addElement('hidden', 'sure');
+        $mform->setType('sure', PARAM_ALPHANUM);
         $mform->setDefault('sure', md5(serialize($category)));
 
 //--------------------------------------------------------------------------------

diff --git a/course/edit_form.php b/course/edit_form.php
index abcd88c6bb71f62a39682968f77d3f2a088efc9d..d5ff0e68232031fe523b414f117c14364e0b3e5d 100644 (file)
--- a/course/edit_form.php
+++ b/course/edit_form.php
@@ -65,6 +65,7 @@ class course_edit_form extends moodleform {
             $mform->addElement('select', 'category', get_string('category'), $displaylist);
         } else {
             $mform->addElement('hidden', 'category', null);
+            $mform->setType('category', PARAM_INT);
         }
         $mform->setHelpButton('category', array('coursecategory', get_string('category')));
         $mform->setDefault('category', $category->id);
@@ -369,6 +370,7 @@ class course_edit_form extends moodleform {
             $mform->setDefault('enablecompletion', $courseconfig->enablecompletion);
         } else {
             $mform->addElement('hidden', 'enablecompletion');
+            $mform->setType('enablecompletion', PARAM_INT);
             $mform->setDefault('enablecompletion',0);
         }
 
@@ -389,6 +391,7 @@ class course_edit_form extends moodleform {
             $mform->disabledIf('allowedmods', 'restrictmodules', 'eq', 0);
         } else {
             $mform->addElement('hidden', 'restrictmodules', null);
+            $mform->setType('restrictmodules', PARAM_INT);
         }
         if ($CFG->restrictmodulesfor == 'all') {
             $mform->setDefault('allowedmods', explode(',',$CFG->defaultallowedmodules));

diff --git a/course/moodleform_mod.php b/course/moodleform_mod.php
index fc476a8f3df8ea96ceba785b9d6d4e30e90c297a..a2dae5d15610b2a4749d7baeba7ba7d1c5974229 100644 (file)
--- a/course/moodleform_mod.php
+++ b/course/moodleform_mod.php
@@ -475,6 +475,7 @@ abstract class moodleform_mod extends moodleform {
             $mform->addElement('submit', 'unlockcompletion', get_string('unlockcompletion', 'completion'));
             $mform->registerNoSubmitButton('unlockcompletion');
             $mform->addElement('hidden', 'completionunlocked', 0);
+            $mform->setType('completionunlocked', PARAM_INT);
 
             $mform->addElement('select', 'completion', get_string('completion', 'completion'), 
                 array(COMPLETION_TRACKING_NONE=>get_string('completion_none', 'completion'), 

diff --git a/course/recent_form.php b/course/recent_form.php
index c3cf6f42911c438118af106fedb05ccaf32664f1..12723ebca7d1d470962b6c9c706b877e7581e11b 100644 (file)
--- a/course/recent_form.php
+++ b/course/recent_form.php
@@ -122,6 +122,7 @@ class recent_form extends moodleform {
             }
         } else {
             $mform->addElement('hidden','group');
+            $mform->setType('group', PARAM_INT);
             $mform->setConstants(array('group'=>0));
         }
 
@@ -134,6 +135,7 @@ class recent_form extends moodleform {
         $mform->addElement('date_time_selector', 'date', get_string('since'), array('optional'=>true));
 
         $mform->addElement('hidden','id');
+        $mform->setType('id', PARAM_INT);
         $mform->setType('courseid', PARAM_INT);
 
         $this->add_action_buttons(false, get_string('showrecent'));

diff --git a/course/request_form.php b/course/request_form.php
index d0de92b6c055d5cbd26ea44de43fcca5ca4584dd..d084fffd02c4e95ba4893bf1d6419a291831522c 100644 (file)
--- a/course/request_form.php
+++ b/course/request_form.php
@@ -130,6 +130,7 @@ class reject_request_form extends moodleform {
         $mform =& $this->_form;
 
         $mform->addElement('hidden', 'reject', 0);
+        $mform->setType('reject', PARAM_INT);
 
         $mform->addElement('header','coursedetails', get_string('coursereasonforrejecting'));
 

diff --git a/course/reset_form.php b/course/reset_form.php
index 8acebf9f93dd02e7d2e88be3a24d22e08a998d56..10da1c9890f51de990e6a53ee9e19bdb25c23b42 100644 (file)
--- a/course/reset_form.php
+++ b/course/reset_form.php
@@ -80,6 +80,7 @@ class course_reset_form extends moodleform {
         }
 
         $mform->addElement('hidden', 'id', $COURSE->id);
+        $mform->setType('id', PARAM_INT);
 
         $buttonarray = array();
         $buttonarray[] = &$mform->createElement('submit', 'submitbutton', get_string('resetcourse'));

diff --git a/enrol/authorize/enrol_form.php b/enrol/authorize/enrol_form.php
index 9aca6ba574aebd44514bec8c9a66870d08e85e16..e60d5bc4249c11d3d7577ff693ec426bd65617a1 100755 (executable)
--- a/enrol/authorize/enrol_form.php
+++ b/enrol/authorize/enrol_form.php
@@ -131,9 +131,14 @@ class enrol_authorize_form extends moodleform
             }
             else {
                 $mform->addElement('hidden', 'ccstate', '');
+                $mform->setType('ccstate', PARAM_ALPHANUM);
                 $mform->addElement('hidden', 'ccaddress', $USER->address);
+                $mform->setType('ccaddress', PARAM_ALPHANUM);
                 $mform->addElement('hidden', 'cccity', $USER->city);
+                $mform->setType('cccity', PARAM_ALPHANUM);
                 $mform->addElement('hidden', 'cccountry', $USER->country);
+                $mform->setType('ccountry', PARAM_ALPHA);
+                $mform->setDefault('cccountry', $USER->country);
             }
         }
         elseif (AN_METHOD_ECHECK == $paymentmethod)

diff --git a/grade/edit/outcome/import_outcomes_form.php b/grade/edit/outcome/import_outcomes_form.php
index d22c5266a547ab969d4e33d4a7d5664cd2e8a2ea..92a3766855897f1f9de7e4fe1ff55b14138bf528 100644 (file)
--- a/grade/edit/outcome/import_outcomes_form.php
+++ b/grade/edit/outcome/import_outcomes_form.php
@@ -26,7 +26,9 @@ class import_outcomes_form extends moodleform {
         //$this->set_upload_manager(new upload_manager('importfile', false, false, null, false, 0, true, true, false));
 
         $mform->addElement('hidden', 'action', 'upload');
+        $mform->setType('action', PARAM_ACTION);
         $mform->addElement('hidden', 'id', $COURSE->id);
+        $mform->setType('id', PARAM_INT);
 
         $scope = array();
         if (($COURSE->id > 1) && has_capability('moodle/grade:manage', get_context_instance(CONTEXT_SYSTEM))) {

diff --git a/grade/edit/tree/grade_form.php b/grade/edit/tree/grade_form.php
index ef8c1c690dd32e02941622721a7c06ca11339f7f..59c803b51470a399e9c5fe922c4cd1ab1e335856 100755 (executable)
--- a/grade/edit/tree/grade_form.php
+++ b/grade/edit/tree/grade_form.php
@@ -106,7 +106,9 @@ class edit_grade_form extends moodleform {
 
         // hidden params
         $mform->addElement('hidden', 'oldgrade');
+        $mform->setType('oldgrade', PARAM_RAW);
         $mform->addElement('hidden', 'oldfeedback');
+        $mform->setType('oldfeedback', PARAM_RAW);
 
         $mform->addElement('hidden', 'id', 0);
         $mform->setType('id', PARAM_INT);

diff --git a/grade/export/grade_export_form.php b/grade/export/grade_export_form.php
index f12fca056ca4fae9199bb1c9ca846e5c6910f145..7ea178d777b46b75cba77240339193a98eaed26c 100755 (executable)
--- a/grade/export/grade_export_form.php
+++ b/grade/export/grade_export_form.php
@@ -128,6 +128,7 @@ class grade_export_form extends moodleform {
         }
 
         $mform->addElement('hidden', 'id', $COURSE->id);
+        $mform->setType('id', PARAM_INT);
         $this->add_action_buttons(false, get_string('submit'));
 
     }

diff --git a/grade/import/xml/grade_import_form.php b/grade/import/xml/grade_import_form.php
index 26a44a7062d3df9adb20f152a7426ef2aeef7caf..52b2e3dd8ff475ed9d2fba316b3f2d0cfdcd7241 100644 (file)
--- a/grade/import/xml/grade_import_form.php
+++ b/grade/import/xml/grade_import_form.php
@@ -28,6 +28,7 @@ class grade_import_form extends moodleform {
         // course id needs to be passed for auth purposes
         $mform->addElement('hidden', 'id', optional_param('id', 0, PARAM_INT));
         $mform->setType('id', PARAM_INT);
+
         $mform->addElement('header', 'general', get_string('importfile', 'grades'));
         $mform->disabledIf('url', 'userfile', 'noteq', '');
 

diff --git a/lib/formslib.php b/lib/formslib.php
index 907cb7c1ed303769d42c1974082f9b67e222bc3f..42aa86ca58874fb653f8a73b50ce536fc91cb6e5 100644 (file)
--- a/lib/formslib.php
+++ b/lib/formslib.php
@@ -149,8 +149,10 @@ abstract class moodleform {
         $this->definition();
 
         $this->_form->addElement('hidden', 'sesskey', null); // automatic sesskey protection
+        $this->_form->setType('sesskey', PARAM_RAW);
         $this->_form->setDefault('sesskey', sesskey());
         $this->_form->addElement('hidden', '_qf__'.$this->_formname, null);   // form submission marker
+        $this->_form->setType('_qf__'.$this->_formname, PARAM_RAW);
         $this->_form->setDefault('_qf__'.$this->_formname, 1);
         $this->_form->_setDefaultRuleMessages();
 
@@ -814,6 +816,7 @@ abstract class moodleform {
         $mform =& $this->_form;
         $mform->registerNoSubmitButton($addfieldsname);
         $mform->addElement('hidden', $repeathiddenname, $repeats);
+        $mform->setType($repeathiddenname, PARAM_INT);
         //value not to be overridden by submitted value
         $mform->setConstants(array($repeathiddenname=>$repeats));
         $namecloned = array();
@@ -912,6 +915,7 @@ abstract class moodleform {
         }
 
         $mform->addElement('hidden', "checkbox_controller$groupid");
+        $mform->setType("checkbox_controller$groupid", PARAM_INT);
         $mform->setConstants(array("checkbox_controller$groupid" => $new_select_value));
 
         // Locate all checkboxes for this group and set their value, IF the optional param was given
@@ -1113,6 +1117,7 @@ class MoodleQuickForm extends HTML_QuickForm_DHTMLRulesTableless {
             $this->registerNoSubmitButton('mform_showadvanced');
 
             $this->addElement('hidden', 'mform_showadvanced_last');
+            $this->setType('mform_showadvanced_last', PARAM_INT);
         }
     }
     /**

diff --git a/lib/portfolio/forms.php b/lib/portfolio/forms.php
index ab963297a777582e87a5350fbbcb7586ad09f56c..0892d2cab6a7617614f97c33032c4a307527308b 100644 (file)
--- a/lib/portfolio/forms.php
+++ b/lib/portfolio/forms.php
@@ -45,7 +45,9 @@ final class portfolio_export_form extends moodleform {
 
         $mform =& $this->_form;
         $mform->addElement('hidden', 'stage', PORTFOLIO_STAGE_CONFIG);
+        $mform->setType('stage', PARAM_INT);
         $mform->addElement('hidden', 'instance', $this->_customdata['instance']->get('id'));
+        $mform->setType('instance', PARAM_INT);
 
         if (array_key_exists('formats', $this->_customdata) && is_array($this->_customdata['formats'])) {
             if (count($this->_customdata['formats']) > 1) {
@@ -57,6 +59,7 @@ final class portfolio_export_form extends moodleform {
             } else {
                 $f = array_shift($this->_customdata['formats']);
                 $mform->addElement('hidden', 'format', $f);
+                $mform->setType('format', PARAM_RAW);
             }
         }
 
@@ -75,6 +78,7 @@ final class portfolio_export_form extends moodleform {
             } else {
                 $mform->addElement('hidden', 'wait', 0);
             }
+            $mform->setType('wait', PARAM_INT);
         }
 
         if (array_key_exists('plugin', $this->_customdata) && is_object($this->_customdata['plugin'])) {
@@ -131,8 +135,11 @@ final class portfolio_admin_form extends moodleform {
         $strrequired = get_string('required');
 
         $mform->addElement('hidden', 'edit',  ($this->instance) ? $this->instance->get('id') : 0);
+        $mform->setType('edit', PARAM_INT);
         $mform->addElement('hidden', 'new',   $this->plugin);
+        $mform->setType('new', PARAM_INT);
         $mform->addElement('hidden', 'plugin', $this->plugin);
+        $mform->setType('plugin', PARAM_SAFEDIR);
 
         if (!$this->instance) {
             $insane = portfolio_instance_sanity_check($this->instance);
@@ -213,6 +220,7 @@ final class portfolio_user_form extends moodleform {
         $this->userid = $this->_customdata['userid'];
 
         $this->_form->addElement('hidden', 'config', $this->instance->get('id'));
+        $mform->setType('config', PARAM_INT);
 
         $this->instance->user_config_form($this->_form, $this->userid);
 

diff --git a/mod/assignment/mod_form.php b/mod/assignment/mod_form.php
index 8ed8b2db43c9fd25a847dffe0209f7b147daf6b4..6aca75cdba5e66fc05fcdce30c77eda21923a979 100644 (file)
--- a/mod/assignment/mod_form.php
+++ b/mod/assignment/mod_form.php
@@ -18,8 +18,10 @@ class mod_assignment_mod_form extends moodleform_mod {
             $type = required_param('type', PARAM_ALPHA);
         }
         $mform->addElement('hidden', 'assignmenttype', $type);
+        $mform->setType('assignmenttype', PARAM_ALPHA);
         $mform->setDefault('assignmenttype', $type);
         $mform->addElement('hidden', 'type', $type);
+        $mform->setType('type', PARAM_ALPHA);
         $mform->setDefault('type', $type);
 
         require($CFG->dirroot.'/mod/assignment/type/'.$type.'/assignment.class.php');

diff --git a/mod/feedback/choose_group_form.php b/mod/feedback/choose_group_form.php
index c4a64823569ee0be0f9dce3fdf7f00f89cb4f3d5..1d2c082ba686e99e89f7c4e6172b36fbe84f192c 100644 (file)
--- a/mod/feedback/choose_group_form.php
+++ b/mod/feedback/choose_group_form.php
@@ -41,7 +41,9 @@ class feedback_choose_group_form extends moodleform {
         // $mform->addElement('header', 'general', get_string('choose_group', 'feedback'));
         // hidden elements
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'do_show');
+        $mform->setType('do-show', PARAM_INT);
         
         // visible elements
         $groups_options = array();

diff --git a/mod/feedback/delete_completed_form.php b/mod/feedback/delete_completed_form.php
index c79397e425331560ad08f55369374f1141620438..38bf5277fd4691bc63cc7eca2a92ad9c242a0ad7 100644 (file)
--- a/mod/feedback/delete_completed_form.php
+++ b/mod/feedback/delete_completed_form.php
@@ -19,9 +19,13 @@ class mod_feedback_delete_completed_form extends moodleform {
         
         // hidden elements
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'completedid');
+        $mform->setType('completeid', PARAM_INT);
         $mform->addElement('hidden', 'do_show');
+        $mform->setType('do_show', PARAM_INT);
         $mform->addElement('hidden', 'confirmdelete');
+        $mform->setType('confirmdelete', PARAM_INT);
 
         //-------------------------------------------------------------------------------
         // buttons

diff --git a/mod/feedback/delete_item_form.php b/mod/feedback/delete_item_form.php
index b4eaab5f092e04d5c1607b93a8208992e473619b..7d48508fb751ff10adfffe27006414f4600a2ba2 100644 (file)
--- a/mod/feedback/delete_item_form.php
+++ b/mod/feedback/delete_item_form.php
@@ -19,8 +19,11 @@ class mod_feedback_delete_item_form extends moodleform {
         
         // hidden elements
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'deleteitem');
+        $mform->setType('deleteitem', PARAM_INT);
         $mform->addElement('hidden', 'confirmdelete');
+        $mform->setType('confirmdelete', PARAM_INT);
 
         //-------------------------------------------------------------------------------
         // buttons

diff --git a/mod/feedback/delete_template_form.php b/mod/feedback/delete_template_form.php
index f37fe84e56f0e6e7c8b2b9e4e10aab84b65a978c..75e85a181eaead0e2d7e5169bcf9f6833e60e591 100644 (file)
--- a/mod/feedback/delete_template_form.php
+++ b/mod/feedback/delete_template_form.php
@@ -19,8 +19,11 @@ class mod_feedback_delete_template_form extends moodleform {
         
         // hidden elements
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'deletetempl');
+        $mform->setType('deletetempl', PARAM_INT);
         $mform->addElement('hidden', 'confirmdelete');
+        $mform->setType('confirmdelete', PARAM_INT);
 
         //-------------------------------------------------------------------------------
         // buttons

diff --git a/mod/feedback/edit_form.php b/mod/feedback/edit_form.php
index 1521534bb71febb1c27e226a3491e2bf8b66edeb..8f740d5d8206bc53c745ee4f5333f7c402d1570d 100644 (file)
--- a/mod/feedback/edit_form.php
+++ b/mod/feedback/edit_form.php
@@ -30,7 +30,9 @@ class feedback_edit_add_question_form extends moodleform {
 
         // hidden elements
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'position');
+        $mform->setType('position', PARAM_INT);
 //-------------------------------------------------------------------------------
         // buttons
         $mform->addElement('submit', 'add_item', get_string('add_item', 'feedback'));
@@ -68,6 +70,7 @@ class feedback_edit_use_template_form extends moodleform {
         $mform->addElement('header', '', get_string('using_templates', 'feedback'));
         // hidden elements
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         
         // visible elements
         $templates_options = array();
@@ -113,8 +116,11 @@ class feedback_edit_create_template_form extends moodleform {
 
         // hidden elements
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'do_show');
+        $mform->setType('do_show', PARAM_INT);
         $mform->addElement('hidden', 'savetemplate', 1);
+        $mform->setType('savetemplate', PARAM_INT);
 
         //headline
         $mform->addElement('header', '', get_string('creating_templates', 'feedback'));

diff --git a/mod/feedback/edit_item.php b/mod/feedback/edit_item.php
index 243ea48b24b77735634e9f0d70c45547b160f7ef..a4e8a43bb15997dd5e216e0a204b344e41517c51 100644 (file)
--- a/mod/feedback/edit_item.php
+++ b/mod/feedback/edit_item.php
@@ -157,9 +157,13 @@ $item_form = &$itemobj->show_edit($item);
 $i_form = &$item_form->get_item_form();
 // $i_form->addElement('header', 'general', 'Titel');
 $i_form->addElement('hidden', 'id', $id);
+$mform->setType('id', PARAM_INT);
 $i_form->addElement('hidden', 'itemid', isset($item->id)?$item->id:'');
+$mform->setType('itemid', PARAM_INT);
 $i_form->addElement('hidden', 'typ', $typ);
+$mform->setType('typ', PARAM_ALPHA);
 $i_form->addElement('hidden', 'feedbackid', $feedback->id);
+$mform->setType('feedbackid', PARAM_INT);
 
 
 $lastposition = $DB->count_records('feedback_item', array('feedback'=>$feedback->id));
@@ -179,10 +183,12 @@ $i_formselect->setValue($i_formselect_value);
 $buttonarray = array();
 if(!empty($item->id)){
     $i_form->addElement('hidden', 'updateitem', '1');
+    $mform->setType('updateitem', PARAM_INT);
     // $i_form->addElement('submit', 'update_item', get_string('update_item', 'feedback'));
     $buttonarray[] = &$i_form->createElement('submit', 'update_item', get_string('update_item', 'feedback'));
 }else{
     $i_form->addElement('hidden', 'saveitem', '1');
+    $mform->setType('saveitem', PARAM_INT);
     // $i_form->addElement('submit', 'save_item', get_string('save_item', 'feedback'));
     $buttonarray[] = &$i_form->createElement('submit', 'save_item', get_string('save_item', 'feedback'));
 }

diff --git a/mod/feedback/item/info/info_form.php b/mod/feedback/item/info/info_form.php
index d792d4fdda17fb8bba385544e1178edb224d0b9a..a7ead8cf2f1dd1ae3b5143ee0b2b88b87777a7aa 100644 (file)
--- a/mod/feedback/item/info/info_form.php
+++ b/mod/feedback/item/info/info_form.php
@@ -14,6 +14,7 @@ class feedback_info_form extends feedback_item_form {
         
         $mform->addElement('header', 'general', get_string($this->type, 'feedback'));
         $this->requiredcheck = &$mform->addElement('hidden', 'required');
+        $mform->setType('required', PARAM_INT);
         
         $this->itemname = &$mform->addElement('text', 'itemname', get_string('item_name', 'feedback'), array('size="'.FEEDBACK_ITEM_NAME_TEXTBOX_SIZE.'"','maxlength="255"'));
         $this->itemlabel = $mform->addElement('text', 'itemlabel', get_string('item_label', 'feedback'), array('size="'.FEEDBACK_ITEM_LABEL_TEXTBOX_SIZE.'"','maxlength="255"'));

diff --git a/mod/feedback/item/label/label_form.php b/mod/feedback/item/label/label_form.php
index b79d5d78406a8e2b85c7ec175a32c72e9904f37f..0719c98aa78ec12737679160688d78e0f72734a4 100644 (file)
--- a/mod/feedback/item/label/label_form.php
+++ b/mod/feedback/item/label/label_form.php
@@ -12,6 +12,7 @@ class feedback_label_form extends feedback_item_form {
         $mform->addElement('header', 'general', get_string($this->type, 'feedback'));
         
         $mform->addElement('hidden', 'itemname', $this->type);
+        $mform->setType('itemname', PARAM_INT);
         $this->area = $mform->addElement('htmleditor', 'presentation', '', array('rows'=>20));
     }
 }

diff --git a/mod/feedback/mod_form.php b/mod/feedback/mod_form.php
index d40e082cac1354736edffd97b06e0daa570f3105..1eedc587e3d946ff5a75245c0b96bcc370efbe2b 100644 (file)
--- a/mod/feedback/mod_form.php
+++ b/mod/feedback/mod_form.php
@@ -66,6 +66,7 @@ class mod_feedback_mod_form extends moodleform_mod {
             $multiple_submit_value = $feedback->multiple_submit ? get_string('yes') : get_string('no');
             $mform->addElement('text', 'multiple_submit_static', get_string('multiple_submit', 'feedback'), array('size'=>'4','disabled'=>'disabled', 'value'=>$multiple_submit_value));
             $mform->addElement('hidden', 'multiple_submit', '');
+            $mform->setType('', PARAM_INT);
             $mform->setHelpButton('multiple_submit_static', array('multiplesubmit', get_string('multiple_submit', 'feedback'), 'feedback'));
         }else {
             $mform->addElement('selectyesno', 'multiple_submit', get_string('multiple_submit', 'feedback'));

diff --git a/mod/feedback/use_templ_form.php b/mod/feedback/use_templ_form.php
index 81a83a449c2b58346f067ae8fa641a2e52785bab..dca0b9ca876610463849ea29ec7cc1987a5af894 100644 (file)
--- a/mod/feedback/use_templ_form.php
+++ b/mod/feedback/use_templ_form.php
@@ -24,9 +24,13 @@ class mod_feedback_use_templ_form extends moodleform {
 
         // hidden elements
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'templateid');
+        $mform->setType('templateid', PARAM_INT);
         $mform->addElement('hidden', 'do_show');
+        $mform->setType('do_show', PARAM_INT);
         $mform->addElement('hidden', 'confirmadd');
+        $mform->setType('confirmadd', PARAM_INT);
 
         //-------------------------------------------------------------------------------
         // buttons

diff --git a/mod/forum/post_form.php b/mod/forum/post_form.php
index 227b82050155425f0b210e684f706959827d9150..e77b14333a841ce7b6f74323146364a7849ee699 100644 (file)
--- a/mod/forum/post_form.php
+++ b/mod/forum/post_form.php
@@ -34,6 +34,7 @@ class mod_forum_post_form extends moodleform {
 
             $mform->addElement('static', 'subscribemessage', get_string('subscription', 'forum'), get_string('everyoneissubscribed', 'forum'));
             $mform->addElement('hidden', 'subscribe');
+            $mform->setType('subscribe', PARAM_INT);
             $mform->setHelpButton('subscribemessage', array('subscription', get_string('subscription', 'forum'), 'forum'));
 
         } else if (isset($forum->forcesubscribe)&& $forum->forcesubscribe != FORUM_DISALLOWSUBSCRIBE ||
@@ -48,6 +49,7 @@ class mod_forum_post_form extends moodleform {
         } else if ($forum->forcesubscribe == FORUM_DISALLOWSUBSCRIBE) {
             $mform->addElement('static', 'subscribemessage', get_string('subscription', 'forum'), get_string('disallowsubscribe', 'forum'));
             $mform->addElement('hidden', 'subscribe');
+            $mform->setType('subscribe', PARAM_INT);
             $mform->setHelpButton('subscribemessage', array('subscription', get_string('subscription', 'forum'), 'forum'));
         }
 

diff --git a/mod/glossary/edit_form.php b/mod/glossary/edit_form.php
index d0767f7d28ae473acca14fa19483f61d27141833..f301c8cc2280d9d81c4ec1d67c36521d3ba5d773 100644 (file)
--- a/mod/glossary/edit_form.php
+++ b/mod/glossary/edit_form.php
@@ -41,8 +41,11 @@ class mod_glossary_entry_form extends moodleform {
 
         if (!$glossary->usedynalink) {
             $mform->addElement('hidden', 'usedynalink',   $CFG->glossary_linkentries);
+            $mform->setType('usedynalink', PARAM_INT);
             $mform->addElement('hidden', 'casesensitive', $CFG->glossary_casesensitive);
+            $mform->setType('casesensitive', PARAM_INT);
             $mform->addElement('hidden', 'fullmatch',     $CFG->glossary_fullmatch);
+            $mform->setType('fullmatch', PARAM_INT);
 
         } else {
 //-------------------------------------------------------------------------------
@@ -64,7 +67,9 @@ class mod_glossary_entry_form extends moodleform {
         }
 
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'cmid');
+        $mform->setType('cmid', PARAM_INT);
 
 //-------------------------------------------------------------------------------
         $this->add_action_buttons();

diff --git a/mod/glossary/mod_form.php b/mod/glossary/mod_form.php
index da243a6eb1741218f66fd9f956a3df801489b54e..ee265f2542577e3d3c47dd1287a56fa05481c1cd 100644 (file)
--- a/mod/glossary/mod_form.php
+++ b/mod/glossary/mod_form.php
@@ -32,6 +32,7 @@ class mod_glossary_mod_form extends moodleform_mod {
 
         }else{
             $mform->addElement('hidden', 'globalglossary');
+            $mform->setType('globalglossary', PARAM_INT);
         }
 
         $options = array(1=>get_string('mainglossary', 'glossary'), 0=>get_string('secondaryglossary', 'glossary'));

diff --git a/mod/hotpot/mod_form.php b/mod/hotpot/mod_form.php
index de15a8061ca2076fa8a60bee00cf9305d8e09c0f..ce62d010c7bf7c7d3f61404fe15249af61091340 100644 (file)
--- a/mod/hotpot/mod_form.php
+++ b/mod/hotpot/mod_form.php
@@ -55,6 +55,7 @@ class mod_hotpot_mod_form extends moodleform_mod {
         } else {
             // existing HotPot
             $mform->addElement('hidden', 'namesource', HOTPOT_TEXTSOURCE_SPECIFIC);
+            $mform->setType('namesource', PARAM_RAW);
             $mform->addElement('text', 'name', get_string('name'), array('size' => '40'));
         }
         $mform->setType('namesource', PARAM_INT);
@@ -81,6 +82,7 @@ class mod_hotpot_mod_form extends moodleform_mod {
         }
         if (array_key_exists($location, $HOTPOT_LOCATION)) {
             $mform->addElement('hidden', 'location', $location);
+            $mform->setType('location', PARAM_RAW);
         } else { // admin can select from "site" or "course" files
            $mform->addElement('select', 'location', get_string('location', 'hotpot'), $HOTPOT_LOCATION);
         }
@@ -120,6 +122,7 @@ class mod_hotpot_mod_form extends moodleform_mod {
         } else {
             // existing HotPot
             $mform->addElement('hidden', 'summarysource', HOTPOT_TEXTSOURCE_SPECIFIC);
+            $mform->setType('summarysource', PARAM_RAW);
             $mform->addElement('htmleditor', 'summary', get_string('summary'));
             $mform->setType('summary', PARAM_RAW);
             $mform->setHelpButton('summary', array('writing', 'questions', 'richtext2'), false, 'editorhelpbutton');

diff --git a/mod/page/mod_form.php b/mod/page/mod_form.php
index b7dd2b359ac2b7017c8412f608f5a6689b63a765..1e816e77b1126f3bc8cc4782e45b94178d7b734c 100644 (file)
--- a/mod/page/mod_form.php
+++ b/mod/page/mod_form.php
@@ -60,6 +60,7 @@ class mod_page_mod_form extends moodleform_mod {
         }
         if (count($options) == 1) {
             $mform->addElement('hidden', 'display');
+            $mform->setType('display', PARAM_INT);
             reset($options);
             $mform->setDefault('display', key($options));
         } else {

diff --git a/mod/quiz/mod_form.php b/mod/quiz/mod_form.php
index 99206340f4794f3782e1b1d8c168dd719903f43a..8468b05aa54a82792abdc268112ee803c284d3d2 100644 (file)
--- a/mod/quiz/mod_form.php
+++ b/mod/quiz/mod_form.php
@@ -271,6 +271,7 @@ class mod_quiz_mod_form extends moodleform_mod {
         $mform->setHelpButton('overallfeedbackhdr', array('overallfeedback', get_string('overallfeedback', 'quiz'), 'quiz'));
 
         $mform->addElement('hidden', 'grade', $quizconfig->maximumgrade);
+        $mform->setType('grade', PARAM_RAW);
         if (empty($this->_cm)) {
             $needwarning = $quizconfig->maximumgrade == 0;
         } else {

diff --git a/mod/resource/mod_form.php b/mod/resource/mod_form.php
index 4976370d34ee495ad6a16c992f22c458e0f629d1..0589df50b5c17def093093c3176af9fa654f2088 100644 (file)
--- a/mod/resource/mod_form.php
+++ b/mod/resource/mod_form.php
@@ -60,7 +60,8 @@ class mod_resource_mod_form extends moodleform_mod {
 
         $options = array('mainfile'=>$mainfile, 'subdirs'=>0, 'maxbytes'=>0, 'maxfiles'=>-1, 'filetypes'=>'*', 'returnvalue'=>'ref_id');
 
-        $mform->addElement('hidden', $mainfile, '', array('id'=>$mainfile.'-id'));
+        $mform->addElement('hidden', $mainfile, '', array('id'=>$mainfile.'-id')); // TODO: what is this?
+        $mform->setType('mainfile', PARAM_PATH);
         $mform->addElement('filemanager', 'files', get_string('selectfiles'), null, $options);
         $mform->addElement('static', '', get_string('selectedfile'), '<div id="'.$mainfile.'-label"></div>');
 
@@ -75,6 +76,7 @@ class mod_resource_mod_form extends moodleform_mod {
 
         if (count($options) == 1) {
             $mform->addElement('hidden', 'display');
+            $mform->setType('display', PARAM_INT);
             reset($options);
             $mform->setDefault('display', key($options));
         } else {

diff --git a/mod/scorm/mod_form.php b/mod/scorm/mod_form.php
index 243c532eb775641022fadbe305b0e7c52996f8fb..108a78c2484a83c838352f74c3b55700a3deba91 100644 (file)
--- a/mod/scorm/mod_form.php
+++ b/mod/scorm/mod_form.php
@@ -221,10 +221,15 @@ class mod_scorm_mod_form extends moodleform_mod {
 //-------------------------------------------------------------------------------
 // Hidden Settings
         $mform->addElement('hidden', 'datadir', null);
+        $mform->setType('datadir', PARAM_RAW);
         $mform->addElement('hidden', 'pkgtype', null);
+        $mform->setType('pkgtype', PARAM_RAW);
         $mform->addElement('hidden', 'launch', null);
+        $mform->setType('launch', PARAM_RAW);
         $mform->addElement('hidden', 'redirect', null);
+        $mform->setType('redirect', PARAM_RAW);
         $mform->addElement('hidden', 'redirecturl', null);
+        $mform->setType('redirecturl', PARAM_RAW);
 
 
 //-------------------------------------------------------------------------------

diff --git a/mod/url/mod_form.php b/mod/url/mod_form.php
index b5fe33275dbafce39cd076276cf6954450208620..489a3852b6dfffe32afd84bbc79d4e3ab53c7936 100644 (file)
--- a/mod/url/mod_form.php
+++ b/mod/url/mod_form.php
@@ -59,6 +59,7 @@ class mod_url_mod_form extends moodleform_mod {
         }
         if (count($options) == 1) {
             $mform->addElement('hidden', 'display');
+            $mform->setType('display', PARAM_INT);
             reset($options);
             $mform->setDefault('display', key($options));
         } else {

diff --git a/question/move_form.php b/question/move_form.php
index 72fdc3e916517ac75454b5d96100d83e8ef4b1bb..f779342234d6adb141b4a8c51f6e2bf3211822ff 100644 (file)
--- a/question/move_form.php
+++ b/question/move_form.php
@@ -18,6 +18,7 @@ class question_move_form extends moodleform {
         $this->add_action_buttons(true, get_string('categorymoveto', 'quiz'));
 //--------------------------------------------------------------------------------
         $mform->addElement('hidden', 'delete', $currentcat);
+        $mform->setType('delete', PARAM_INT);
     }
 }
 ?>

diff --git a/question/type/calculated/datasetitems_form.php b/question/type/calculated/datasetitems_form.php
index 47a0a6b80bba51c8faf355a3094a9d2e6482cca6..575650f77d64392442e951267c93b96de5e20f24 100644 (file)
--- a/question/type/calculated/datasetitems_form.php
+++ b/question/type/calculated/datasetitems_form.php
@@ -86,8 +86,11 @@ class question_dataset_dependent_items_form extends moodleform {
             $this->qtypeobj->custom_generator_tools_part($mform, $idx, $j);
             $idx++;
             $mform->addElement('hidden', "definition[$j]");
+            $mform->setType("definition[$j]", PARAM_RAW);
             $mform->addElement('hidden', "itemid[$j]");
+            $mform->setType("itemid[$j]", PARAM_RAW);
             $mform->addElement('static', "divider[$j]", '', '<hr />');
+            $mform->setType("divider[$j]", PARAM_RAW);
             $j++;
         }
         $mform->addElement('header', 'updateanswershdr', get_string('answerstoleranceparam', 'qtype_datasetdependent'));
@@ -102,12 +105,16 @@ class question_dataset_dependent_items_form extends moodleform {
             }else if ('*' === $answer->answer){
                 $mform->addElement('static', 'answercomment['.($this->noofitems+$key1).']', $answer->answer);
                 $mform->addElement('hidden', 'tolerance['.$key.']', '');
+                $mform->setType('tolerance['.$key.']', PARAM_RAW);
                 $mform->setAdvanced('tolerance['.$key.']',true);
                 $mform->addElement('hidden', 'tolerancetype['.$key.']', '');
+                $mform->setType('tolerancetype['.$key.']', PARAM_RAW);
                 $mform->setAdvanced('tolerancetype['.$key.']',true);
                 $mform->addElement('hidden', 'correctanswerlength['.$key.']', '');
+                $mform->setType('correctanswerlength['.$key.']', PARAM_RAW);
                 $mform->setAdvanced('correctanswerlength['.$key.']',true);
                 $mform->addElement('hidden', 'correctanswerformat['.$key.']', '');
+                $mform->setType('correctanswerformat['.$key.']', PARAM_RAW);
                 $mform->setAdvanced('correctanswerformat['.$key.']',true);
             }else {
                 $mform->addElement('static', 'answercomment['.($this->noofitems+$key1).']', $answer->answer);

diff --git a/question/type/calculated/edit_calculated_form.php b/question/type/calculated/edit_calculated_form.php
index 09e6b0ec5c962eccec03848fd1afeab4a5db86f1..8286f4130d4dc31ddd253a0d28cf67687a7b38a0 100644 (file)
--- a/question/type/calculated/edit_calculated_form.php
+++ b/question/type/calculated/edit_calculated_form.php
@@ -95,6 +95,7 @@ class question_edit_calculated_form extends question_edit_form {
       //  echo "<p>question ".optional_param('multichoice', '', PARAM_RAW)." optional<pre>";print_r($this->question);echo "</pre></p>";
         $label = get_string("sharedwildcards", "qtype_datasetdependent");
         $mform->addElement('hidden', 'initialcategory', 1);
+        $mform->setType('initialcategory', PARAM_INT);
         $html2 = $this->qtypeobj->print_dataset_definitions_category($this->question);
         $mform->insertElementBefore($mform->createElement('static','listcategory',$label,$html2),'name');
         $addfieldsname='updatecategory';
@@ -139,6 +140,7 @@ class question_edit_calculated_form extends question_edit_form {
             $mform->addGroup($addgrp1, 'addgrp1', '', '   ', false);
         }else {
             $mform->addElement('hidden', 'multichoice',$this->editasmultichoice);
+            $mform->setType('multichoice', PARAM_INT);
         }
 
         if ($this->editasmultichoice == 1){
@@ -161,8 +163,12 @@ class question_edit_calculated_form extends question_edit_form {
         }else { //editing as regular
             $mform->addElement('header', 'choicehdr', get_string('regularcalculatedquestion', 'qtype_calculated'));
             $mform->addElement('hidden','single', '1');
+            $mform->setType('single', PARAM_INT);
+            
             $mform->addElement('hidden','shuffleanswers', '1');
-            $mform->addElement('hidden','answernumbering', 'abc');            
+            $mform->setType('shuffleanswers', PARAM_INT);
+            $mform->addElement('hidden','answernumbering', 'abc');
+            $mform->setType('answernumbering', PARAM_SAFEDIR);
         }
 
         $creategrades = get_grade_options();
@@ -179,10 +185,13 @@ class question_edit_calculated_form extends question_edit_form {
         if ($this->editasmultichoice == 1){
             $nounits = optional_param('nounits', 1, PARAM_INT);
             $mform->addElement('hidden', 'nounits', $nounits);
+            $mform->setType('nounits', PARAM_INT);
             $mform->setConstants(array('nounits'=>$nounits));
             for ($i=0; $i< $nounits; $i++) {
-                $mform->addElement('hidden','unit'."[$i]", optional_param('unit'."[$i]", '', PARAM_NOTAGS));  
-                $mform->addElement('hidden', 'multiplier'."[$i]", optional_param('multiplier'."[$i]", '', PARAM_NUMBER)); 
+                $mform->addElement('hidden','unit'."[$i]", optional_param('unit'."[$i]", '', PARAM_NOTAGS));
+                $mform->setType('unit'."[$i]", PARAM_NOTAGS); 
+                $mform->addElement('hidden', 'multiplier'."[$i]", optional_param('multiplier'."[$i]", '', PARAM_NUMBER));
+                $mform->setType('multiplier'."[$i]", PARAM_NUMBER);
             }  
 
         }else {
@@ -230,6 +239,7 @@ class question_edit_calculated_form extends question_edit_form {
         }
         //hidden elements
         $mform->addElement('hidden', 'synchronize', '');
+        $mform->setType('synchronize', PARAM_INT);
         if (isset($this->question->options)&& isset($this->question->options->synchronize) ){
             $mform->setDefault("synchronize", $this->question->options->synchronize);
         } else {

diff --git a/question/type/calculatedsimple/edit_calculatedsimple_form.php b/question/type/calculatedsimple/edit_calculatedsimple_form.php
index 33e75d73550c406f048501c94774efef649931d0..2ce33499e798f301156d4c17e586f84b8ac5c647 100644 (file)
--- a/question/type/calculatedsimple/edit_calculatedsimple_form.php
+++ b/question/type/calculatedsimple/edit_calculatedsimple_form.php
@@ -284,7 +284,9 @@ class question_edit_calculatedsimple_form extends question_edit_form {
         $strquestionlabel = $this->qtypeobj->comment_header($this->nonemptyanswer);
         $label = get_string("sharedwildcards", "qtype_datasetdependent");
         $mform->addElement('hidden', 'initialcategory', 1);
+        $mform->setType('initialcategory', PARAM_INT);
         $mform->addElement('hidden', 'reload', 1);
+        $mform->setType('reload', PARAM_INT);
         $addfieldsname='updatequestion value';
         $addstring=get_string("updatecategory", "qtype_calculated");
         $mform->registerNoSubmitButton($addfieldsname);

diff --git a/question/type/calculatedsimple/questiontype.php b/question/type/calculatedsimple/questiontype.php
index ae001db7d97c8e9f0677f2a2638f76e6464bb3f0..787dba5fdc12cf5271914b53d40bae8b1fa30a21 100644 (file)
--- a/question/type/calculatedsimple/questiontype.php
+++ b/question/type/calculatedsimple/questiontype.php
@@ -237,6 +237,7 @@ class question_calculatedsimple_qtype extends question_calculated_qtype {
 
         $distriboptions = array('uniform' => get_string('uniform', 'qtype_datasetdependent'), 'loguniform' => get_string('loguniform', 'qtype_datasetdependent'));
         $mform->addElement('hidden', "calcdistribution[$idx]", 'uniform');
+        $mform->setType("calcdistribution[$idx]", PARAM_INT);
 
 
     }

diff --git a/question/type/description/edit_description_form.php b/question/type/description/edit_description_form.php
index 6771eb5a9648b34abd74e7f5fd47c5797524b95e..184ff5cb287fed06f919a5df517f35e0b29c5b7c 100644 (file)
--- a/question/type/description/edit_description_form.php
+++ b/question/type/description/edit_description_form.php
@@ -24,6 +24,7 @@ class question_edit_description_form extends question_edit_form {
         $mform->removeElement('penalty');
 
         $mform->addElement('hidden', 'defaultgrade', 0);
+        $mform->setType('defaultgrade', PARAM_RAW);
     }
 
     function qtype() {

diff --git a/question/type/essay/edit_essay_form.php b/question/type/essay/edit_essay_form.php
index b207c2e10078139d8bb2ec73d2f27c71f1740bdc..9efd100cc325d860cfc1750d151c3d522deea6a1 100644 (file)
--- a/question/type/essay/edit_essay_form.php
+++ b/question/type/essay/edit_essay_form.php
@@ -24,10 +24,12 @@ class question_edit_essay_form extends question_edit_form {
         $mform->setType('feedback', PARAM_RAW);
 
         $mform->addElement('hidden', 'fraction', 0);
+        $mform->setType('fraction', PARAM_RAW);
 
         //don't need this default element.
         $mform->removeElement('penalty');
         $mform->addElement('hidden', 'penalty', 0);
+        $mform->setType('penalty', PARAM_RAW);
     }
 
     function set_data($question) {

diff --git a/question/type/randomsamatch/edit_randomsamatch_form.php b/question/type/randomsamatch/edit_randomsamatch_form.php
index 7e6ee472208f021f2d6052126c7d7839d076ef2c..f6adcd72ddbcbe80155d4a2435cbab3c317142c4 100644 (file)
--- a/question/type/randomsamatch/edit_randomsamatch_form.php
+++ b/question/type/randomsamatch/edit_randomsamatch_form.php
@@ -30,6 +30,7 @@ class question_edit_randomsamatch_form extends question_edit_form {
         $mform->setType('feedback', PARAM_RAW);
 
         $mform->addElement('hidden', 'fraction', 0);
+        $mform->setType('fraction', PARAM_RAW);
     }
 
     function set_data($question) {

diff --git a/repository/lib.php b/repository/lib.php
index 083bb40f547781d8b72f325e039e434c88d82fae..89b823a568e66695b03ff66d2bf0c32c66aa6dfc 100644 (file)
--- a/repository/lib.php
+++ b/repository/lib.php
@@ -1592,10 +1592,15 @@ final class repository_instance_form extends moodleform {
         $strrequired = get_string('required');
 
         $mform->addElement('hidden', 'edit',  ($this->instance) ? $this->instance->id : 0);
+        $mform->setType('edit', PARAM_INT);
         $mform->addElement('hidden', 'new',   $this->plugin);
+        $mform->setType('new', PARAM_FORMAT);
         $mform->addElement('hidden', 'plugin', $this->plugin);
+        $mform->setType('plugin', PARAM_SAFEDIR);
         $mform->addElement('hidden', 'typeid', $this->typeid);
+        $mform->setType('typeid', PARAM_INT);
         $mform->addElement('hidden', 'contextid', $this->contextid);
+        $mform->setType('contextid', PARAM_INT);
 
         $mform->addElement('text', 'name', get_string('name'), 'maxlength="100" size="30"');
         $mform->addRule('name', $strrequired, 'required', null, 'client');
@@ -1668,8 +1673,11 @@ final class repository_type_form extends moodleform {
         $strrequired = get_string('required');
 
         $mform->addElement('hidden', 'edit',  ($this->instance) ? $this->instance->get_typename() : 0);
+        $mform->setType('edit', PARAM_INT);
         $mform->addElement('hidden', 'new',   $this->plugin);
+        $mform->setType('new', PARAM_FORMAT);
         $mform->addElement('hidden', 'plugin', $this->plugin);
+        $mform->setType('plugin', PARAM_SAFEDIR);
 
         // let the plugin add its specific fields
         if (!$this->instance) {

diff --git a/tag/edit_form.php b/tag/edit_form.php
index fbfdf067b895cd79661f22f961e919050ca91902..5aaec36198e7dc44bb987063ccd71c3bc2a522a9 100644 (file)
--- a/tag/edit_form.php
+++ b/tag/edit_form.php
@@ -11,6 +11,7 @@ class tag_edit_form extends moodleform {
         $mform->addElement('header', 'tag', get_string('description','tag'));
 
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
 
         $systemcontext   = get_context_instance(CONTEXT_SYSTEM);
 

diff --git a/user/edit_form.php b/user/edit_form.php
index 4326c3065b59b9bea04498ede06586c29475d49f..5e9d9c370ddc49633c518a04ff1a095fafe64fda 100644 (file)
--- a/user/edit_form.php
+++ b/user/edit_form.php
@@ -15,7 +15,9 @@ class user_edit_form extends moodleform {
 
         /// Add some extra hidden fields
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'course', $COURSE->id);
+        $mform->setType('course', PARAM_INT);
 
         /// Print the required moodle fields first
         $mform->addElement('header', 'moodle', $strgeneral);

diff --git a/user/editadvanced_form.php b/user/editadvanced_form.php
index 0a82c749485a0cee3207d47ad08c9911844a135a..69e39549ffb7a330939b28a45b7bedbc8dd75cf7 100644 (file)
--- a/user/editadvanced_form.php
+++ b/user/editadvanced_form.php
@@ -15,7 +15,9 @@ class user_editadvanced_form extends moodleform {
 
         /// Add some extra hidden fields
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'course', $COURSE->id);
+        $mform->setType('course', PARAM_INT);
 
         /// Print the required moodle fields first
         $mform->addElement('header', 'moodle', $strgeneral);

diff --git a/user/filters/user_filter_forms.php b/user/filters/user_filter_forms.php
index d1bbccdc17fa2aa95560c8b2bf93aefaa44d57b2..9cd507970e81f3b8e7458d55e22150d5ef882566 100644 (file)
--- a/user/filters/user_filter_forms.php
+++ b/user/filters/user_filter_forms.php
@@ -19,6 +19,7 @@ class user_add_filter_form extends moodleform {
         if ($extraparams) {
             foreach ($extraparams as $key=>$value) {
                 $mform->addElement('hidden', $key, $value);
+                $mform->setType($key, PARAM_RAW);
             }
         }
 
@@ -57,6 +58,7 @@ class user_active_filter_form extends moodleform {
             if ($extraparams) {
                 foreach ($extraparams as $key=>$value) {
                     $mform->addElement('hidden', $key, $value);
+                    $mform->setType($key, PARAM_RAW);
                 }
             }
 

diff --git a/user/profile/index_category_form.php b/user/profile/index_category_form.php
index 44af21cad6f7ca4909d2443493e8afb2c6ed97a3..4424892b44b92b21f047a0577dfbe932f1310835 100644 (file)
--- a/user/profile/index_category_form.php
+++ b/user/profile/index_category_form.php
@@ -14,7 +14,9 @@ class category_form extends moodleform {
 
         /// Add some extra hidden fields
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'action', 'editcategory');
+        $mform->setType('iction', PARAM_ACTION);
 
         $mform->addElement('text', 'name', get_string('profilecategoryname', 'admin'), 'maxlength="255" size="30"');
         $mform->setType('name', PARAM_MULTILANG);

diff --git a/user/profile/index_field_form.php b/user/profile/index_field_form.php
index 781c7afaa452bd0ec12214059a584d5aff5b1f65..e61848a09e622db3dae94bb64ab9337cf52cb5f1 100644 (file)
--- a/user/profile/index_field_form.php
+++ b/user/profile/index_field_form.php
@@ -22,8 +22,11 @@ class field_form extends moodleform {
 
         /// Add some extra hidden fields
         $mform->addElement('hidden', 'id');
+        $mform->setType('id', PARAM_INT);
         $mform->addElement('hidden', 'action', 'editfield');
+        $mform->setType('action', PARAM_ACTION);
         $mform->addElement('hidden', 'datatype', $datatype);
+        $mform->setType('datatype', PARAM_ALPHA);
 
         $this->field->define_form($mform);
 

diff --git a/webservice/lib.php b/webservice/lib.php
index b5ed7301277cd2fbfc0273d9d0b03222c6ade81d..0c40069928c349c04a1452c62a49cbad22c01d38 100644 (file)
--- a/webservice/lib.php
+++ b/webservice/lib.php
@@ -415,6 +415,7 @@ final class wsuser_form extends moodleform {
         $mform =& $this->_form;
 
         $mform->addElement('hidden', 'username', $this->username);
+        $mform->setType('username', PARAM_RAW);
         $param = new stdClass();
         $param->username = $this->username;
         $wsuser = $DB->get_record("user", array("username" => $this->username));
@@ -441,6 +442,7 @@ final class wssettings_form extends moodleform {
         $mform =& $this->_form;
 
         $mform->addElement('hidden', 'settings', $settings);
+        $mform->setType('settings', PARAM_RAW);
         $param = new stdClass();
 
         require_once($CFG->dirroot . '/webservice/'. $settings . '/lib.php');
@@ -476,6 +478,7 @@ final class wsservicesettings_form extends moodleform {
         $mform =& $this->_form;
 
         $mform->addElement('hidden', 'serviceid', $serviceid);
+        $mform->setType('serviceid', PARAM_INT);
         $param = new stdClass();
 
      //   require_once($CFG->dirroot . '/webservice/'. $settings . '/lib.php');