From e7dd3aac30246bd43c283b095186b063d1e3b558 Mon Sep 17 00:00:00 2001
From: skodak <skodak>
Date: Sun, 15 Feb 2009 09:55:48 +0000
Subject: [PATCH] MDL-18155 no warning if allowed email domains set; merged
 from MOODLE_19_STABLE

---
 admin/report/security/lib.php    | 9 +++++++--
 lang/en_utf8/report_security.php | 1 +
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/admin/report/security/lib.php b/admin/report/security/lib.php
index a819d0b785..2909fe4319 100644
--- a/admin/report/security/lib.php
+++ b/admin/report/security/lib.php
@@ -398,8 +398,13 @@ function report_security_check_emailchangeconfirmation($detailed=false) {
     $result->link    = "<a href=\"$CFG->wwwroot/$CFG->admin/settings.php?section=sitepolicies\">".get_string('sitepolicies', 'admin').'</a>';
 
     if (empty($CFG->emailchangeconfirmation)) {
-        $result->status = REPORT_SECURITY_WARNING;
-        $result->info   = get_string('check_emailchangeconfirmation_error', 'report_security');
+        if (empty($CFG->allowemailaddresses)) {
+            $result->status = REPORT_SECURITY_WARNING;
+            $result->info   = get_string('check_emailchangeconfirmation_error', 'report_security');
+        } else {
+            $result->status = REPORT_SECURITY_INFO;
+            $result->info   = get_string('check_emailchangeconfirmation_info', 'report_security');
+        }
     } else {
         $result->status = REPORT_SECURITY_OK;
         $result->info   = get_string('check_emailchangeconfirmation_ok', 'report_security');
diff --git a/lang/en_utf8/report_security.php b/lang/en_utf8/report_security.php
index 7345121899..378def49dc 100644
--- a/lang/en_utf8/report_security.php
+++ b/lang/en_utf8/report_security.php
@@ -62,6 +62,7 @@ $string['check_displayerrors_ok'] = 'Displaying of PHP errors disabled.';
 
 $string['check_emailchangeconfirmation_details'] = '<p>It is recommended that an email confirmation step is required when users change their email address in their profile. If disabled, spammers may try to exploit the server to send spam.</p>';
 $string['check_emailchangeconfirmation_error'] = 'Users may enter any email address.';
+$string['check_emailchangeconfirmation_info'] = 'Users may enter email addresses from allowed domains only.';
 $string['check_emailchangeconfirmation_name'] = 'Email change confirmation';
 $string['check_emailchangeconfirmation_ok'] = 'Confirmation of change of email address in user profile.';
 
-- 
2.39.5