From 514cda9cd7ed5b65908f8570e8ecc999074799a2 Mon Sep 17 00:00:00 2001
From: David Mudrak <david.mudrak@gmail.com>
Date: Thu, 12 Nov 2009 21:30:49 +0000
Subject: [PATCH] MDL-20830 workshop requires sesskey when editing submission

---
 mod/workshop/submissions.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/mod/workshop/submissions.php b/mod/workshop/submissions.php
index 9fd77a4315f..777f9d4ed72 100644
--- a/mod/workshop/submissions.php
+++ b/mod/workshop/submissions.php
@@ -248,6 +248,7 @@
         <form id="editform" enctype="multipart/form-data" action="submissions.php" method="post">
         <fieldset class="invisiblefieldset">
         <input type="hidden" name="action" value="updatesubmission" />
+        <input type="hidden" name="sesskey" value="<?php echo sesskey(); ?>" />
         <input type="hidden" name="id" value="<?php echo $cm->id ?>" />
         <input type="hidden" name="sid" value="<?php echo $sid ?>" />
         <div class="boxaligncenter">
@@ -413,6 +414,7 @@
     /*************** update submission ***************************/
     elseif ($action == 'updatesubmission') {
 
+        require_sesskey();
         if (empty($sid)) {
             error("Update submission: submission id missing");
         }
-- 
2.11.4.GIT