From: stronk7 <stronk7>
Date: Sun, 16 Nov 2008 22:46:23 +0000 (+0000)
Subject: MDL-17227 forum: seekey-ize forum prune (split). Merged from 19_STABLE
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=d44d02a28c9b8764d76533e7157b6d91dfc288ad;p=moodle.git

MDL-17227 forum: seekey-ize forum prune (split). Merged from 19_STABLE
---

diff --git a/mod/forum/post.php b/mod/forum/post.php
index ec84a584bf..69fccd5c67 100644
--- a/mod/forum/post.php
+++ b/mod/forum/post.php
@@ -368,7 +368,7 @@
             error("You can't split discussions!");
         }
 
-        if (!empty($name)) {    // User has confirmed the prune
+        if (!empty($name) && confirm_sesskey()) {    // User has confirmed the prune
 
             $newdiscussion = new object();
             $newdiscussion->course       = $discussion->course;
diff --git a/mod/forum/prune.html b/mod/forum/prune.html
index 383b3a9b73..1a4f4b78a5 100644
--- a/mod/forum/prune.html
+++ b/mod/forum/prune.html
@@ -11,6 +11,7 @@
     <td align="center" colspan="2">
     <input type="hidden" name="prune"   value="<?php p($prune) ?>" />
     <input type="hidden" name="confirm" value="<?php p($prune) ?>" />
+    <input type="hidden" name="sesskey" value="<?php echo sesskey() ?>" />
     <input type="submit" value="<?php print_string('prune', 'forum'); ?>" />
     </td>
 </tr>