Use param raw as base64 can contain non alphanum chars

909d68c1 · David Beniamine · 6f9d3d0d · 909d68c1
Verified Commit 909d68c1 authored Jun 24, 2021 by David Beniamine
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

user-binding.php user-binding.php +1 -1

No files found.
--- a/user-binding.php
+++ b/user-binding.php
@@ -11,7 +11,7 @@ use mod_labnbook\fetch;
 require_once \dirname(__DIR__, 2) . '/config.php';
-$returnUrl = \base64_decode(required_param('return', PARAM_ALPHANUM));
+$returnUrl = \base64_decode(required_param('return', PARAM_RAW));
 $courseid = required_param('courseid', PARAM_INT);
 $course = $DB->get_record('course', ['id' => $courseid], '*', MUST_EXIST);