Protect lp_upload.php to avoid malicious uploads by unauthenticated users #security

Author: ywarnier

main/lp/lp_upload.php

@@ -12,9 +12,8 @@
  * @author Yannick Warnier <[email protected]>
  */
 
-// Flag to allow for anonymous user - needs to be set before global.inc.php.
-$use_anonymous = true;
 require_once __DIR__.'/../inc/global.inc.php';
+api_protect_course_script();
 $course_dir = api_get_course_path().'/scorm';
 $course_sys_dir = api_get_path(SYS_COURSE_PATH).$course_dir;
 if (empty($_POST['current_dir'])) {