chamilo
/
chamilo-lms
mirror of https://github.com/chamilo/chamilo-lms/tree/1.11.x
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

Adding some validation if $_POST[course] is not loaded

Browse Source
skala
Julio Montoya 13 years ago
parent 168ae397d9
commit 04d7cc81c1
1 changed files with 21 additions and 12 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 33
      main/coursecopy/classes/CourseSelectForm.class.php

33
main/coursecopy/classes/CourseSelectForm.class.php
Unescape View File

@ -371,11 +371,17 @@ class CourseSelectForm
* @return course The course-object with all resources selected by the user
* in the form given by display_form(...)
*/
static function get_posted_course($from='', $session_id = 0, $course_code = '') {
$course = Course::unserialize(base64_decode($_POST['course']));
static function get_posted_course($from = '', $session_id = 0, $course_code = '') {
$course = null;
if (isset($_POST['course'])) {
$course = Course::unserialize(base64_decode($_POST['course']));
} else {
return false;
}
//Create the resource DOCUMENT objects
//Loading the results from the checkboxes of the javascript
//Loading the results from the checkboxes of ethe javascript
$resource = $_POST['resource'][RESOURCE_DOCUMENT];
$course_info = api_get_course_info($course_code);
@ -408,19 +414,22 @@ class CourseSelectForm
$db_result = Database::query($sql);
while ($obj = Database::fetch_object($db_result)) {
$doc = new Document($obj->id, $obj->path, $obj->comment, $obj->title, $obj->filetype, $obj->size);
$course->add_resource($doc);
// adding item property
$sql = "SELECT * FROM $table_prop WHERE c_id = '.$course_id.' AND TOOL = '".RESOURCE_DOCUMENT."' AND ref='".$resource_item."'";
$res = Database::query($sql);
$all_properties = array ();
while ($item_property = Database::fetch_array($res,'ASSOC')) {
$all_properties[] = $item_property;
}
$course->resources[RESOURCE_DOCUMENT][$resource_item]->item_properties = $all_properties;
if ($doc) {
$course->add_resource($doc);
// adding item property
$sql = "SELECT * FROM $table_prop WHERE c_id = $course_id AND tool = '".RESOURCE_DOCUMENT."' AND ref = $resource_item ";
$res = Database::query($sql);
$all_properties = array ();
while ($item_property = Database::fetch_array($res,'ASSOC')) {
$all_properties[] = $item_property;
}
$course->resources[RESOURCE_DOCUMENT][$resource_item]->item_properties = $all_properties;
}
}
}
}
}
if (is_array($course->resources)) {
foreach ($course->resources as $type => $resources) {
switch ($type) {

Write Preview
Loading…
Cancel
Save