set"reportusers" to PARAM_ALPHANUM, so that it can accept userids and…

… group names
Mrmoodle · Aug 1, 2007 · 620aca0 · 620aca0
1 parent b2909a8
commit 620aca0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mod/hotpot/report.php b/mod/hotpot/report.php
@@ -51,7 +51,7 @@
     // assemble array of form data
     $formdata = array(
         'mode' => $mode,
-        'reportusers'      => has_capability('mod/hotpot:viewreport',$modulecontext) ? optional_param('reportusers', get_user_preferences('hotpot_reportusers', 'allusers'), PARAM_ALPHA) : 'this',
+        'reportusers'      => has_capability('mod/hotpot:viewreport',$modulecontext) ? optional_param('reportusers', get_user_preferences('hotpot_reportusers', 'allusers'), PARAM_ALPHANUM) : 'this',
         'reportattempts'   => optional_param('reportattempts', get_user_preferences('hotpot_reportattempts', 'all'), PARAM_ALPHA),
         'reportformat'     => optional_param('reportformat', 'htm', PARAM_ALPHA),
         'reportshowlegend' => optional_param('reportshowlegend', get_user_preferences('hotpot_reportshowlegend', '0'), PARAM_INT),