From: vyshane <vyshane>
Date: Thu, 13 Apr 2006 08:48:51 +0000 (+0000)
Subject: Bug #5163 - user/action_redir.php should print properly formatted error
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=33e727b7a479094b22c2c24d81f93d67e0a6a80c;p=moodle.git

Bug #5163 - user/action_redir.php should print properly formatted error
messages
---

diff --git a/user/action_redir.php b/user/action_redir.php
index 635843d03a..157ff1b096 100644
--- a/user/action_redir.php
+++ b/user/action_redir.php
@@ -1,26 +1,26 @@
 <?php
-/*
- * Wrapper script redirecting user operations to correct destination
- */
+/**
+* Wrapper script redirecting user operations to correct destination.
+*/
+
 require_once("../config.php");
 
-if (empty($_POST) || empty($_POST['formaction']) || empty($_POST['id'])) {
-    die();
-}
+$formaction = required_param('formaction', PARAM_FILE);
+$id = required_param('id', PARAM_INT);
 
 // Add every page will be redirected by this script
 $actions = array(
         'messageselect.php',
         'extendenrol.php'
-    );
+        );
 
-if (array_search($_POST['formaction'], $actions) === false) {
-    die();
+if (array_search($formaction, $actions) === false) {
+    print_error('unknownuseraction');
 }
 
 if (!confirm_sesskey()) {
-    die();
+    print_error('confirmsesskeybad');
 }
 
-require_once($_POST['formaction']);
+require_once($formaction);
 ?>
\ No newline at end of file