fix for old email confirmation - spotted by Dirk Grunwald; merged from MOODLE_16_STABLE

diff --git a/login/confirm.php b/login/confirm.php
index f991343154563ec5be39aa54c317004632ae050a..233b7dfddcb41a52e5bda8c43493fe672d699033 100644 (file)
--- a/login/confirm.php
+++ b/login/confirm.php
@@ -5,8 +5,8 @@
 
     $data = optional_param('data', '', PARAM_CLEAN);  // Formatted as:  secret/username
 
-    $p = optional_param('p', '', PARAM_ALPHA);        // Old parameter:  secret
-    $s = optional_param('s', '', PARAM_CLEAN);                     // Old parameter:  username
+    $p = optional_param('p', '', PARAM_ALPHANUM);     // Old parameter:  secret
+    $s = optional_param('s', '', PARAM_CLEAN);        // Old parameter:  username
 
     if (!empty($data) || (!empty($p) && !empty($s))) {