MDL-20798 fixed missing access control for module intros

This commit is contained in:
Petr Skoda 2009-11-10 14:04:50 +00:00
parent 384531d5e8
commit 57956cc3e2

View file

@ -461,6 +461,11 @@ if ($context->contextlevel == CONTEXT_SYSTEM) {
if (!plugin_supports('mod', $modname, FEATURE_MOD_INTRO, true)) {
send_file_not_found();
}
if (!$cm = get_coursemodule_from_instance($modname, $cminfo->instance, $course->id)) {
send_file_not_found();
}
require_course_login($course, true, $cm);
if (!$cminfo->uservisible) {
send_file_not_found();
}