Missing Mentor check in URI

ned-code / moodle-block_mentor

7 stars 13 forks source link

Missing Mentor check in URI #22

Closed gethanos closed 8 years ago

gethanos commented 8 years ago

Hi and thank you for this block! I noticed that if you give the menteeid manually on the URI it returns the user info without checking if the mentor (or mentees) have the required permission.

blocks/ned_mentor/course_overview.php?menteeid=##

Kind Regards, Thanos

ned-code commented 8 years ago

Fixed