From 9eed2dc7da449e4db8b1e7b4c0456a15e817dab1 Mon Sep 17 00:00:00 2001
From: Petr Skoda <skodak@moodle.org>
Date: Sun, 22 Nov 2009 21:03:22 +0000
Subject: [PATCH] MDL-20931 fixed input validation

---
 course/import/groups/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/course/import/groups/index.php b/course/import/groups/index.php
index 70e06f1baa7..fbcdcc6c523 100755
--- a/course/import/groups/index.php
+++ b/course/import/groups/index.php
@@ -50,7 +50,7 @@
 
     require_once($CFG->dirroot.'/lib/uploadlib.php');
     $um = new upload_manager('userfile',false,false,null,false,0);
-    if ($um->preprocess_files()) {
+    if ($um->preprocess_files() and confirm_sesskey()) {
         $filename = $um->files['userfile']['tmp_name'];
 
         //Fix mac/dos newlines