Fix for data exposure MDL-9052

This commit is contained in:
moodler 2007-03-27 05:13:09 +00:00
parent 8d5e99f086
commit ed22c4f3bc

View file

@ -53,6 +53,9 @@
}
$strforums = get_string('modulenameplural', 'forum');
if (!get_referer()) { // No referer - probably coming in via email See MDL-9052
require_login();
}
if ($course->id != SITEID) {
print_header($course->shortname, $course->fullname,
"<a href=\"../../course/view.php?id=$course->id\">$course->shortname</a> ->