moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-09 19:06:41 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

MDL-28126 webservices : should not able to create token if user is deleted,unconfirmed,suspended or guest.

Browse source
This commit is contained in:
Jerome Mouneyrac 2011-11-14 12:09:40 +08:00 • committed by Aparup Banerjee
parent f89a83b87b
commit 94b9dad79d
3 changed files with 11 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
admin/webservice/tokens.php
View file

@ -71,6 +71,12 @@ switch ($action) {
}
}
//check if the user is deleted. unconfirmed, suspended or guest
$user = $DB->get_record('user', array('id' => $data->user));
if ($user->id == $CFG->siteguest or $user->deleted or !$user->confirmed or $user->suspended) {
throw new moodle_exception('forbiddenwsuser', 'webservice');
}
//process the creation
if (empty($errormsg)) {
//TODO improvement: either move this function from externallib.php to webservice/lib.php