diff --git a/course/mod.php b/course/mod.php index 9921d86..89c1b68 100644 --- a/course/mod.php +++ b/course/mod.php @@ -28,7 +28,7 @@ $sectionreturn = optional_param('sr', 0, PARAM_INT); $add = optional_param('add', '', PARAM_ALPHA); -$type = optional_param('type', '', PARAM_ALPHA); +$type = optional_param('type', '', PARAM_ALPHANUMEXT); $indent = optional_param('indent', 0, PARAM_INT); $update = optional_param('update', 0, PARAM_INT); $duplicate = optional_param('duplicate', 0, PARAM_INT); @@ -70,7 +70,7 @@ if (!empty($add)) { $id = required_param('id', PARAM_INT); $section = required_param('section', PARAM_INT); - $type = optional_param('type', '', PARAM_ALPHA); + $type = optional_param('type', '', PARAM_ALPHANUMEXT); $returntomod = optional_param('return', 0, PARAM_BOOL); redirect("$CFG->wwwroot/course/modedit.php?add=$add&type=$type&course=$id§ion=$section&return=$returntomod"); diff --git a/course/modedit.php b/course/modedit.php index b9bf127..ec10700 100644 --- a/course/modedit.php +++ b/course/modedit.php @@ -34,7 +34,7 @@ $add = optional_param('add', '', PARAM_ALPHA); // module name $update = optional_param('update', 0, PARAM_INT); $return = optional_param('return', 0, PARAM_BOOL); //return to course/view.php if false or mod/modname/view.php if true -$type = optional_param('type', '', PARAM_ALPHANUM); //TODO: hopefully will be removed in 2.0 +$type = optional_param('type', '', PARAM_ALPHANUMEXT); //TODO: hopefully will be removed in 2.0 $url = new moodle_url('/course/modedit.php'); if (!empty($return)) {