From 283c64f62ed1df30fa3031761c6198a8c1daec2a Mon Sep 17 00:00:00 2001
From: Valentin Popov <info@valentineus.link>
Date: Thu, 4 Jan 2018 15:29:17 +0400
Subject: Check the sesskey on the recovery page

---
 restorebackup.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'restorebackup.php')

diff --git a/restorebackup.php b/restorebackup.php
index 174a9b2..69f6057 100644
--- a/restorebackup.php
+++ b/restorebackup.php
@@ -40,7 +40,7 @@ $context = context_system::instance();
 $mform = new service_backup_form($PAGE->url);
 
 /* Cancel processing */
-if ($mform->is_cancelled()) {
+if (($mform->is_cancelled()) && confirm_sesskey()) {
     redirect($managerservice);
 }
 
-- 
cgit v1.2.3