Check the sesskey on the recovery page

2018-01-04 15:29:17 +04:00
parent 17ae01ab71
commit 283c64f62e
1 changed files with 1 additions and 1 deletions
--- a/restorebackup.php
+++ b/restorebackup.php
@@ -40,7 +40,7 @@ $context = context_system::instance();
 $mform = new service_backup_form($PAGE->url);

 /* Cancel processing */
-if ($mform->is_cancelled()) {
+if (($mform->is_cancelled()) && confirm_sesskey()) {
    redirect($managerservice);
 }