aboutsummaryrefslogtreecommitdiff
path: root/ajax.php
diff options
context:
space:
mode:
authorJean-Michel Vedrine <vedrine@vedrine.org>2019-02-02 08:33:28 +0100
committerJean-Michel Vedrine <vedrine@vedrine.org>2019-02-02 08:33:28 +0100
commit76c8063a28713326c1feb54649dd56399077cebd (patch)
treeb8e0db5ed49f90a3055aa09203c29fd19875f940 /ajax.php
parent664753b7873f3dcc200f255bfb5a7535424f9eca (diff)
First try at mobile 3.x support
Diffstat (limited to 'ajax.php')
-rw-r--r--ajax.php5
1 files changed, 5 insertions, 0 deletions
diff --git a/ajax.php b/ajax.php
index 9231012..544603c 100644
--- a/ajax.php
+++ b/ajax.php
@@ -29,12 +29,17 @@ $p = new qtype_algebra_parser;
$vars = required_param('vars', PARAM_RAW);
$expr = required_param('expr', PARAM_RAW);
+
+// This should be accessed by only valid logged in user.
+require_login(null, false);
+
/*
if (!confirm_sesskey()) {
header('HTTP/1.1 403 Forbidden');
die();
}
*/
+
try {
$vars = explode(',', $vars);
if (empty($expr)) {