Skip to content

Commit

Permalink
MDL-17203 prevent disclosing of sensitive information
Browse files Browse the repository at this point in the history
  • Loading branch information
skodak committed Dec 31, 2008
1 parent b20c631 commit 804656f
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions calendar/export_execute.php
Original file line number Diff line number Diff line change
Expand Up @@ -15,12 +15,12 @@
//Fetch user information
if (!$user = get_complete_user_data('username', $username)) {
//No such user
die("No such user '$username'");
die('Invalid authentication');
}

//Check authentication token
if ($authtoken != sha1($username . $user->password . $CFG->calendar_exportsalt)) {
die('Invalid authentication token');
die('Invalid authentication');
}

$what = optional_param('preset_what', 'all', PARAM_ALPHA);
Expand Down

0 comments on commit 804656f

Please sign in to comment.