diff --git a/main/exercice/upload_exercise.php b/main/exercice/upload_exercise.php index 49038af972..5841a7b3d0 100755 --- a/main/exercice/upload_exercise.php +++ b/main/exercice/upload_exercise.php @@ -37,9 +37,7 @@ lp_upload_quiz_action_handling(); $interbreadcrumb[]= array ("url"=>"exercise.php", "name"=> get_lang('Exercises')); -// Display the header - -Display :: display_header(get_lang('ImportExcelQuiz'), 'Exercises'); +Display::display_header(get_lang('ImportExcelQuiz'), 'Exercises'); if (isset($_GET['message'])) { if (in_array($_GET['message'], array('ExerciseEdited'))) { @@ -61,18 +59,17 @@ function lp_upload_quiz_actions() { return $return; } -function lp_upload_quiz_secondary_actions() { - $lp_id = Security::remove_XSS($_GET['lp_id']); - $return = ''; - $return .= '' . - Display :: return_icon('reporting32.png', get_lang('Tracking')) . get_lang('Tracking') . ''; +function lp_upload_quiz_secondary_actions() +{ + $return = '' . + Display :: return_icon('reporting32.png', get_lang('Tracking')) . get_lang('Tracking') . ''; return $return; } function lp_upload_quiz_main() { // variable initialisation - $lp_id = isset($_GET['lp_id']) ? Security::remove_XSS($_GET['lp_id']) : null; + $lp_id = isset($_GET['lp_id']) ? intval($_GET['lp_id']) : null; $form = new FormValidator( 'upload', @@ -85,7 +82,7 @@ function lp_upload_quiz_main() { $form->addElement('file', 'user_upload_quiz', get_lang('FileUpload')); $link = ''. - Display::return_icon('export_excel.png', get_lang('DownloadExcelTemplate')).get_lang('DownloadExcelTemplate').''; + Display::return_icon('export_excel.png', get_lang('DownloadExcelTemplate')).get_lang('DownloadExcelTemplate').''; $form->addElement('label', '', $link); $form->addElement('checkbox', 'user_custom_score', null, get_lang('UseCustomScoreForAllQuestions'), array('id'=> 'user_custom_score')); $form->addElement('html', '