MDL-74075 core_badges: Check accepted criterias

dpalou · Mar 9, 2022 · c36ab09 · c36ab09
1 parent bf84224
commit c36ab09
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/badges/criteria_settings.php b/badges/criteria_settings.php
@@ -55,6 +55,12 @@
     redirect($return);
 }
 
+// Make sure the criteria type is accepted.
+$accepted = $badge->get_accepted_criteria();
+if (!in_array($type, $accepted)) {
+    redirect($return);
+}
+
 if ($badge->type == BADGE_TYPE_COURSE) {
     require_login($badge->courseid);
     $course = get_course($badge->courseid);