From 960beea394efa569317fc22620359428c358723f Mon Sep 17 00:00:00 2001
From: moodler <moodler>
Date: Wed, 5 Apr 2006 03:19:36 +0000
Subject: [PATCH] Merging fixes from stable

---
 mod/exercise/assessments.php | 22 +++++++++++-----------
 mod/exercise/index.php       |  8 ++++----
 mod/exercise/submissions.php | 12 ++++++------
 mod/exercise/upload.php      |  8 ++++----
 mod/exercise/view.php        |  6 +++---
 5 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/mod/exercise/assessments.php b/mod/exercise/assessments.php
index 3c26c19728..52490efb81 100644
--- a/mod/exercise/assessments.php
+++ b/mod/exercise/assessments.php
@@ -28,11 +28,11 @@
 
 ************************************************/
 
-    require("../../config.php");
-    require("lib.php");
-    require("locallib.php");
+    require_once("../../config.php");
+    require_once("lib.php");
+    require_once("locallib.php");
 
-    require_variable($id);    // Course Module ID
+    $id = required_param('id', PARAM_INT);    // Course Module ID
 
     // get some esential stuff...
     if (! $cm = get_record("course_modules", "id", $id)) {
@@ -62,7 +62,7 @@
                   "", "", true);
 
     //...get the action
-    require_variable($action);
+    $action = required_param('action');
 
 
     /******************* admin amend Grading Grade ************************************/
@@ -174,7 +174,7 @@
     /****************** Assess resubmission (by teacher) ***************************/
     elseif ($action == 'assessresubmission') {
 
-        require_variable($sid);
+        $sid = required_param('sid');
 
         if (! $submission = get_record("exercise_submissions", "id", $sid)) {
             error("Assess submission is misconfigured - no submission record!");
@@ -212,7 +212,7 @@
     /****************** Assess submission (by teacher or student) ***************************/
     elseif ($action == 'assesssubmission') {
 
-        require_variable($sid);
+        $sid = required_param('sid');
 
         if (! $submission = get_record("exercise_submissions", "id", $sid)) {
             error("Assess submission is misconfigured - no submission record!");
@@ -633,8 +633,8 @@
             error("Only teachers can look at this page");
         }
 
-        require_variable($aid);
-        require_variable($sid);
+        $aid = required_param('aid', PARAM_INT);
+        $sid = required_param('sid', PARAM_INT);
         if (!$assessment = get_record("exercise_assessments", "id", $aid)) {
             error("Teacher assessment: User's assessment record not found");
         }
@@ -663,7 +663,7 @@
         $timenow = time();
         $form = data_submitted();
 
-        require_variable($aid);
+        $aid = required_param('aid', PARAM_INT);
         if (! $assessment = get_record("exercise_assessments", "id", $aid)) {
             error("exercise assessment is misconfigured");
         }
@@ -1089,7 +1089,7 @@
             error("Only teachers can look at this page");
             }
 
-        require_variable($aid);
+        $aid = required_param('aid', PARAM_INT);        
         // normalise gradinggrade
         $gradinggrade = $_POST['gradinggrade'] * 100 / $exercise->gradinggrade;
         if (!set_field("exercise_assessments", "gradinggrade", $gradinggrade, "id",
diff --git a/mod/exercise/index.php b/mod/exercise/index.php
index 9c6bea6569..28e55acdf8 100644
--- a/mod/exercise/index.php
+++ b/mod/exercise/index.php
@@ -1,10 +1,10 @@
 <?php // $Id$
 
-    require("../../config.php");
-    require("lib.php");
-    require("locallib.php");
+    require_once("../../config.php");
+    require_once("lib.php");
+    require_once("locallib.php");
 
-    require_variable($id);   // course
+    $id = required_param('id', PARAM_INT); // course
 
     if (! $course = get_record("course", "id", $id)) {
         error("Course ID is incorrect");
diff --git a/mod/exercise/submissions.php b/mod/exercise/submissions.php
index aa1fd8c11a..2e5d536fef 100644
--- a/mod/exercise/submissions.php
+++ b/mod/exercise/submissions.php
@@ -19,12 +19,12 @@
 
 ************************************************/
 
-    require("../../config.php");
-    require("lib.php");
-    require("locallib.php");
-    require("version.php");
+    require_once("../../config.php");
+    require_once("lib.php");
+    require_once("locallib.php");
+    require_once("version.php");
 
-    require_variable($id);    // Course Module ID
+    $id = required_param('id', PARAM_INT); // Course Module ID
 
     // get some essential stuff...
     if (! $cm = get_record("course_modules", "id", $id)) {
@@ -52,7 +52,7 @@
                   "", "", true);
 
     //...get the action!
-    require_variable($action);
+    $action = required_param('action');
 
 
     /******************* admin amend title ************************************/
diff --git a/mod/exercise/upload.php b/mod/exercise/upload.php
index 09a2a50edc..9dacfa8ea0 100644
--- a/mod/exercise/upload.php
+++ b/mod/exercise/upload.php
@@ -1,10 +1,10 @@
 <?php  // $Id: upload.php, v1.0 30th April 2003
 
-    require("../../config.php");
-    require("lib.php");
-    require("locallib.php");
+    require_once("../../config.php");
+    require_once("lib.php");
+    require_once("locallib.php");
 
-    require_variable($id);          // course module ID
+    $id = required_param('id', PARAM_INT);           // course module ID
     $timenow = time();
 
     // get some esential stuff...
diff --git a/mod/exercise/view.php b/mod/exercise/view.php
index 6242b21820..9359112c94 100644
--- a/mod/exercise/view.php
+++ b/mod/exercise/view.php
@@ -15,9 +15,9 @@
 
 ************************************************/
 
-    require("../../config.php");
-    require("lib.php");
-    require("locallib.php");
+    require_once("../../config.php");
+    require_once("lib.php");
+    require_once("locallib.php");
 
     $id = required_param('id', PARAM_INT);    // Course Module ID
 
-- 
2.39.5