moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-06 01:16:44 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fixed a SQL injection from $scoid

Browse source
This commit is contained in:
bobopinna 2005-05-16 15:05:53 +00:00
parent d1266f9db5
commit 06abe84fde
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
mod/scorm/loadSCO.php
View file

@ -42,7 +42,7 @@
if ($sco = get_record("scorm_scoes","id",$scoid)) { if ($sco = get_record("scorm_scoes","id",$scoid)) {
if ($sco->launch == '') { if ($sco->launch == '') {
// Search for the next launchable sco // Search for the next launchable sco
if ($scoes = get_records_select("scorm_scoes","scorm=".$scorm->id." AND launch<>'' AND id>".$scoid,"id ASC")) { if ($scoes = get_records_select("scorm_scoes","scorm=".$scorm->id." AND launch<>'' AND id>".$sco->id,"id ASC")) {
$sco = current($scoes); $sco = current($scoes);
} }
} }