-
Bug
-
Resolution: Unresolved
-
Minor
-
None
-
4.1.5
-
None
In this call there's the sesskey in querystring:
GET /enrol/manual/ajax.php?mform_showmore_main=0&id=1203&action=enrol&enrolid=623&sesskey=BaJYRrcWy7&qf_enrol_manual_enrol_users_form=1&mform_showmore_id_main=0&userlist%5B%5D=2871&roletoassign=5&startdate=4&duration= HTTP/2
This Call set things and maybe it should be a POST and the sesskey can be removed, right?