admin/xxx is now using sesskey.

Merged from MOODLE_14_STABLE

diff --git a/backup/config.html b/backup/config.html
index a824f4eff2cfa78dce8d3da9b57946e5af758bcf..5bf164a91e48a1bb1ba09ee4fe73745fc6b1803c 100644 (file)
--- a/backup/config.html
+++ b/backup/config.html
@@ -82,6 +82,7 @@
     $keep_array[500] = "500";
 ?>
 <form method="post" action="backup.php" name="form">
+<?php echo "<input type=\"hidden\" name=\"sesskey\" value=\"".$USER->sesskey."\">"; ?>
 
 <table cellpadding="9" cellspacing="0" >
 <tr valign="top">

diff --git a/backup/log.php b/backup/log.php
index 9676a52f1f241937e06662fd0d282b364d3562fb..41e9df5404f74210e9c43114a787c60a4ecd5391 100644 (file)
--- a/backup/log.php
+++ b/backup/log.php
@@ -40,7 +40,7 @@
         print_header("$site->shortname: $strconfiguration: $strbackup", $site->fullname,
                       "<a href=\"../$CFG->admin/index.php\">$stradmin</a> -> ".
                       "<a href=\"../$CFG->admin/configure.php\">$strconfiguration</a> -> ".
-                      "<a href=\"../$CFG->admin/backup.php\">$strbackup</a> -> ".
+                      "<a href=\"../$CFG->admin/backup.php?sesskey=$USER->sesskey\">$strbackup</a> -> ".
                       $strlogs);
 
         print_heading($backuploglaststatus);
@@ -86,7 +86,7 @@
         print_header("$site->shortname: $strconfiguration: $strbackup", $site->fullname,
                       "<a href=\"../$CFG->admin/index.php\">$stradmin</a> -> ".
                       "<a href=\"../$CFG->admin/configure.php\">$strconfiguration</a> -> ".
-                      "<a href=\"../$CFG->admin/backup.php\">$strbackup</a> -> ".
+                      "<a href=\"../$CFG->admin/backup.php?sesskey=$USER->sesskey\">$strbackup</a> -> ".
                       "<a href=\"log.php\">$strlogs</a> -> ".
                       $strbackupdetails);