From bb207404e815b7cfbb766d60024a0e3905a88fd3 Mon Sep 17 00:00:00 2001
From: stronk7 <stronk7>
Date: Sat, 9 Oct 2004 11:37:48 +0000
Subject: [PATCH] course/grades.php is using sesskey.

Merged from MOODLE_14_STABLE
---
 course/grades.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/course/grades.php b/course/grades.php
index 9775df6e8d..487cad9040 100644
--- a/course/grades.php
+++ b/course/grades.php
@@ -141,7 +141,7 @@
 
 
 /// OK, we have all the data, now present it to the user
-    if ($download == "xls") {
+    if ($download == "xls" and confirm_sesskey()) {
         require_once("../lib/excel/Worksheet.php");
         require_once("../lib/excel/Workbook.php");
 
@@ -199,7 +199,7 @@
     
         exit;
 
-    } else if ($download == "txt") {
+    } else if ($download == "txt" and confirm_sesskey()) {
 
 /// Print header to force download
 
@@ -254,9 +254,11 @@
         echo "<td>";
         $options["id"] = "$course->id";
         $options["download"] = "xls";
+        $options["sesskey"] = $USER->sesskey;
         print_single_button("grades.php", $options, get_string("downloadexcel"));
         echo "<td>";
         $options["download"] = "txt";
+        $options["sesskey"] = $USER->sesskey;
         print_single_button("grades.php", $options, get_string("downloadtext"));
         echo "</table>";
     
-- 
2.39.5