MDL-28392 validate capability names

ds125v · Jul 22, 2011 · b7d7aaf · b7d7aaf
1 parent 6884b59
commit b7d7aaf
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/lib/accesslib.php b/lib/accesslib.php
@@ -3395,6 +3395,12 @@ function update_capabilities($component = 'moodle') {
     $storedcaps = array();
 
     $filecaps = load_capability_def($component);
+    foreach($filecaps as $capname=>$unused) {
+        if (!preg_match('|^[a-z]+/[a-z_0-9]+:[a-z_0-9]+$|', $capname)) {
+            debugging("Coding problem: Invalid capability name '$capname', use 'clonepermissionsfrom' field for migration.");
+        }
+    }
+
     $cachedcaps = get_cached_capabilities($component);
     if ($cachedcaps) {
         foreach ($cachedcaps as $cachedcap) {