From: stronk7 <stronk7>
Date: Sat, 2 Oct 2004 23:13:37 +0000 (+0000)
Subject: admin/block.php is now using sesskey.
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=398ef378dc11f1172cbe6e138563bdafc4dcbdeb;p=moodle.git

admin/block.php is now using sesskey.

Merged from MOODLE_14_STABLE
---

diff --git a/blocks/course_list/block_course_list.php b/blocks/course_list/block_course_list.php
index 6f3e8a907d..f93c8e58e8 100644
--- a/blocks/course_list/block_course_list.php
+++ b/blocks/course_list/block_course_list.php
@@ -13,7 +13,7 @@ class CourseBlock_course_list extends MoodleBlock {
     }
 
     function print_config() {
-        global $CFG, $THEME;
+        global $CFG, $USER, $THEME;
         print_simple_box_start('center', '', $THEME->cellheading);
         include($CFG->dirroot.'/blocks/'.$this->name().'/config.html');
         print_simple_box_end();
diff --git a/blocks/course_list/config.html b/blocks/course_list/config.html
index d6f1a3e5c5..2be347a329 100644
--- a/blocks/course_list/config.html
+++ b/blocks/course_list/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="block.php">
+<?php echo "<input type=\"hidden\" name=\"sesskey\" value=\"".$USER->sesskey."\">"; ?>
 
 <table cellpadding="9" cellspacing="0">
 <tr valign="top">
diff --git a/blocks/online_users/block_online_users.php b/blocks/online_users/block_online_users.php
index a24a1ea75c..1c3e31a541 100644
--- a/blocks/online_users/block_online_users.php
+++ b/blocks/online_users/block_online_users.php
@@ -11,7 +11,7 @@ class CourseBlock_online_users extends MoodleBlock {
     function has_config() {return true;}
 
     function print_config() {
-        global $CFG, $THEME;
+        global $CFG, $USER, $THEME;
         print_simple_box_start('center', '', $THEME->cellheading);
         include($CFG->dirroot.'/blocks/'.$this->name().'/config.html');
         print_simple_box_end();
diff --git a/blocks/online_users/config.html b/blocks/online_users/config.html
index 85fa3872f2..1ae50c8d5a 100644
--- a/blocks/online_users/config.html
+++ b/blocks/online_users/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="block.php">
+<?php echo "<input type=\"hidden\" name=\"sesskey\" value=\"".$USER->sesskey."\">"; ?>
 
 <table cellpadding="9" cellspacing="0">
 <tr valign="top">