New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Missing sesskey checks at the administration page #6

Open

mudrd8mz opened this issue Dec 18, 2017 · 2 comments

mudrd8mz commented Dec 18, 2017

See https://tracker.moodle.org/browse/CONTRIB-7096 for details

Owner

valentineus commented Dec 30, 2017

The sesskey check is added to the main page.

Do you want to check sesskey on the recovery page and in the editor?

Author

mudrd8mz commented Jan 2, 2018

Thanks. sesskey should be checked everywhere where the Moodle database is modified based on user's input.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment