From 76c8063a28713326c1feb54649dd56399077cebd Mon Sep 17 00:00:00 2001
From: Jean-Michel Vedrine <vedrine@vedrine.org>
Date: Sat, 2 Feb 2019 08:33:28 +0100
Subject: First try at mobile 3.x support

---
 ajax.php | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'ajax.php')

diff --git a/ajax.php b/ajax.php
index 9231012..544603c 100644
--- a/ajax.php
+++ b/ajax.php
@@ -29,12 +29,17 @@ $p = new qtype_algebra_parser;
 
 $vars  = required_param('vars', PARAM_RAW);
 $expr  = required_param('expr', PARAM_RAW);
+
+// This should be accessed by only valid logged in user.
+require_login(null, false);
+
 /*
 if (!confirm_sesskey()) {
     header('HTTP/1.1 403 Forbidden');
     die();
 }
 */
+
 try {
     $vars = explode(',', $vars);
     if (empty($expr)) {
-- 
cgit v1.2.3