From: stronk7 <stronk7>
Date: Fri, 8 Oct 2004 17:58:38 +0000 (+0000)
Subject: course/delete.php is using sesskey
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=56fcb59a517efec6724e5c5b233fd32488ba19ca;p=moodle.git

course/delete.php is using sesskey

Merged from MOODLE_14_STABLE
---

diff --git a/course/delete.php b/course/delete.php
index bbe67b8b8d..9070983c96 100644
--- a/course/delete.php
+++ b/course/delete.php
@@ -38,7 +38,7 @@
                      "$strdeletecheck");
 
         notice_yesno("$strdeletecoursecheck<br /><br />$course->fullname ($course->shortname)", 
-                     "delete.php?id=$course->id&amp;delete=".md5($course->timemodified), 
+                     "delete.php?id=$course->id&amp;delete=".md5($course->timemodified)."&amp;sesskey=$USER->sesskey", 
                      "category.php?id=$course->category");
         exit;
     }
@@ -47,6 +47,10 @@
         error("The check variable was wrong - try again");
     }
 
+    if (!confirm_sesskey()) {
+        error(get_string('confirmsesskeybad', 'error'));
+    }
+
     // OK checks done, delete the course now.
     $strdeletingcourse = get_string("deletingcourse", "", $course->shortname);