From: stronk7 <stronk7>
Date: Sat, 9 Oct 2004 11:47:36 +0000 (+0000)
Subject: course/group.php is using sesskey.
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=740c44428e6c227ec3eceb5979b978a5a5c6b5a8;p=moodle.git

course/group.php is using sesskey.

Merged from MOODLE_14_STABLE
---

diff --git a/course/group-edit.html b/course/group-edit.html
index fe3e336da7..a3090cece3 100644
--- a/course/group-edit.html
+++ b/course/group-edit.html
@@ -50,4 +50,5 @@
 
 <input type="hidden" name="group" value="<?php p($group->id) ?>" /> 
 <input type="hidden" name="id" value="<?php p($course->id) ?>" /> 
+<input type="hidden" name="sesskey" value="<?php p($sesskey) ?>" /> 
 </form>
diff --git a/course/group.php b/course/group.php
index afd049253a..c204541096 100644
--- a/course/group.php
+++ b/course/group.php
@@ -58,7 +58,7 @@
 
 /// If data submitted, then process and store.
 
-    if ($form = data_submitted()) { 
+    if ($form = data_submitted() and confirm_sesskey()) { 
 
         if (empty($form->name)) {
             $edit = true;
@@ -93,6 +93,8 @@
             $defaultformat = FORMAT_MOODLE;
         }
 
+        $sesskey = !empty($USER->id) ? $USER->sesskey : '';
+
         include('group-edit.html');
 
         if ($usehtmleditor) {