fix(ISSUE-45): blocks confirmation for unauthorized users

hrimhari · Oct 1, 2021 · 919e035 · 919e035
1 parent 39ffe29
commit 919e035
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/auth.php b/auth.php
@@ -168,6 +168,9 @@ public function user_confirm($username, $confirmsecret) {
         $user = get_complete_user_data('username', $username);
 
         if (!empty($user)) {
+            require_login();
+            require_capability('moodle/user:update', context_system::instance());
+
             if ($user->confirmed) {
                 return AUTH_CONFIRM_ALREADY;
 

diff --git a/version.php b/version.php
@@ -26,7 +26,7 @@
 
 defined('MOODLE_INTERNAL') || die;
 
-$plugin->version   = 2030061001;        // The current plugin version (Date: YY300610XX).
+$plugin->version   = 2030110100;        // The current plugin version (Date: YY301101XX).
 $plugin->requires  = 2017111300;        // Requires this Moodle version.
 $plugin->component = 'auth_emailadmin';      // Full name of the plugin (used for diagnostics).
 $plugin->maturity = MATURITY_STABLE;