MDL-51569 mod_choice: Prevent users from updating choices with curl

mod/choice/lib.php

@@ -852,6 +852,7 @@ function choice_page_type_list($pagetype, $parentcontext, $currentcontext) {
  * @return array                       status (available or not and possible warnings)
  */
 function choice_get_availability_status($choice) {
+    global $DB, $USER;
     $available = true;
     $warnings = array();
 
@@ -866,6 +867,10 @@ function choice_get_availability_status($choice) {
             $warnings['expired'] = userdate($choice->timeclose);
         }
     }
+    if (!$choice->allowupdate && $DB->get_records('choice_answers', array('choiceid' => $choice->id, 'userid' => $USER->id))) {
+        $available = false;
+        $warnings['choicesaved'] = '';
+    }
 
     // Choice is available.
     return array($available, $warnings);