From 64cc7e8bd3ab3cd7d9c840036166a8834dc2184d Mon Sep 17 00:00:00 2001
From: Julio Montoya <gugli100@gmail.com>
Date: Wed, 21 Apr 2021 15:15:04 +0200
Subject: [PATCH] Protect files adding
 api_protect_course_script,api_protect_admin_script

---
 main/admin/export_certificates.php | 4 ++++
 main/permissions/roles.php         | 9 ++++++---
 2 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/main/admin/export_certificates.php b/main/admin/export_certificates.php
index 6d37fdb605..f872a64870 100644
--- a/main/admin/export_certificates.php
+++ b/main/admin/export_certificates.php
@@ -1,8 +1,12 @@
 <?php
+
 /* For licensing terms, see /license.txt */
 
 $cidReset = true;
 require_once __DIR__.'/../inc/global.inc.php';
+
+api_protect_admin_script(true);
+
 Display::display_header(null);
 
 $form = new FormValidator('export_certificate');
diff --git a/main/permissions/roles.php b/main/permissions/roles.php
index 089e5833fb..bd1c496b6b 100755
--- a/main/permissions/roles.php
+++ b/main/permissions/roles.php
@@ -1,8 +1,11 @@
 <?php
-/**
- * @package chamilo.permissions
- */
+
+/* For licensing terms, see /license.txt */
+
 require '../inc/global.inc.php';
+
+api_protect_course_script();
+
 require_once 'permissions_functions.inc.php';
 require_once 'all_permissions.inc.php';