From d44d02a28c9b8764d76533e7157b6d91dfc288ad Mon Sep 17 00:00:00 2001
From: stronk7 <stronk7>
Date: Sun, 16 Nov 2008 22:46:23 +0000
Subject: [PATCH] MDL-17227 forum: seekey-ize forum prune (split). Merged from
 19_STABLE

---
 mod/forum/post.php   | 2 +-
 mod/forum/prune.html | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/mod/forum/post.php b/mod/forum/post.php
index ec84a584bf..69fccd5c67 100644
--- a/mod/forum/post.php
+++ b/mod/forum/post.php
@@ -368,7 +368,7 @@
             error("You can't split discussions!");
         }
 
-        if (!empty($name)) {    // User has confirmed the prune
+        if (!empty($name) && confirm_sesskey()) {    // User has confirmed the prune
 
             $newdiscussion = new object();
             $newdiscussion->course       = $discussion->course;
diff --git a/mod/forum/prune.html b/mod/forum/prune.html
index 383b3a9b73..1a4f4b78a5 100644
--- a/mod/forum/prune.html
+++ b/mod/forum/prune.html
@@ -11,6 +11,7 @@
     <td align="center" colspan="2">
     <input type="hidden" name="prune"   value="<?php p($prune) ?>" />
     <input type="hidden" name="confirm" value="<?php p($prune) ?>" />
+    <input type="hidden" name="sesskey" value="<?php echo sesskey() ?>" />
     <input type="submit" value="<?php print_string('prune', 'forum'); ?>" />
     </td>
 </tr>
-- 
2.39.5