From 967cd1164b27c8a45bfa1a4efe7c8c917179c5e1 Mon Sep 17 00:00:00 2001
From: stronk7 <stronk7>
Date: Sat, 9 Oct 2004 19:08:01 +0000
Subject: [PATCH] course/unenrol.php is using sesskey.

Merged from MOODLE_14_STABLE
---
 course/unenrol.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/course/unenrol.php b/course/unenrol.php
index 8dac96525b..3450588cc5 100644
--- a/course/unenrol.php
+++ b/course/unenrol.php
@@ -28,7 +28,7 @@
         error("You are not allowed to unenroll");
     }
 
-    if (isset($confirm)) {
+    if (isset($confirm) and confirm_sesskey()) {
 
         if (! unenrol_student($user->id, $course->id)) {
             error("An error occurred while trying to unenrol you.");
@@ -56,7 +56,7 @@
         $strunenrolsure = get_string("unenrolsure", "", fullname($user, true));
     }
 
-    notice_yesno ($strunenrolsure, "unenrol.php?id=$id&amp;user=$user->id&amp;confirm=yes", "$HTTP_REFERER");
+    notice_yesno ($strunenrolsure, "unenrol.php?id=$id&amp;user=$user->id&amp;confirm=yes&amp;sesskey=$USER->sesskey", "$HTTP_REFERER");
 
     print_footer();
 
-- 
2.39.5