From 283c64f62ed1df30fa3031761c6198a8c1daec2a Mon Sep 17 00:00:00 2001 From: Valentin Popov Date: Thu, 4 Jan 2018 15:29:17 +0400 Subject: Check the sesskey on the recovery page --- restorebackup.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/restorebackup.php b/restorebackup.php index 174a9b2..69f6057 100644 --- a/restorebackup.php +++ b/restorebackup.php @@ -40,7 +40,7 @@ $context = context_system::instance(); $mform = new service_backup_form($PAGE->url); /* Cancel processing */ -if ($mform->is_cancelled()) { +if (($mform->is_cancelled()) && confirm_sesskey()) { redirect($managerservice); } -- cgit v1.2.3