moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-03 08:09:47 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

MDL-75326 h5p: require sesskey to toggle library enabled state.

Browse source
This commit is contained in:
Paul Holden 2022-07-27 21:47:15 +01:00 • committed by Jenkins
parent 896e126a66
commit b40ab6987d
2 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
h5p/classes/output/libraries.php
View file

@ -92,11 +92,13 @@ class libraries implements renderable, templatable {
$version->toggleenabledurl = new moodle_url('/h5p/libraries.php', [ $version->toggleenabledurl = new moodle_url('/h5p/libraries.php', [
'id' => $version->id, 'id' => $version->id,
'action' => 'disable', 'action' => 'disable',
'sesskey' => sesskey(),
]); ]);
} else { } else {
$version->toggleenabledurl = new moodle_url('/h5p/libraries.php', [ $version->toggleenabledurl = new moodle_url('/h5p/libraries.php', [
'id' => $version->id, 'id' => $version->id,
'action' => 'enable', 'action' => 'enable',
'sesskey' => sesskey(),
]); ]);
} }
$installed[] = $version; $installed[] = $version;

2
h5p/libraries.php
View file

@ -66,6 +66,8 @@ if ($deletelibrary) {
} }
if (!is_null($action)) { if (!is_null($action)) {
require_sesskey();
if ($action == 'enable' || $action == 'disable') { if ($action == 'enable' || $action == 'disable') {
// If action is enable or disable, library id is required too. // If action is enable or disable, library id is required too.
$libraryid = required_param('id', PARAM_INT); $libraryid = required_param('id', PARAM_INT);