From 280b223d84e3b00a4871ece315c8563967ba5bbf Mon Sep 17 00:00:00 2001
From: Charles Fulton <mackensen@gmail.com>
Date: Sun, 6 May 2012 20:14:55 -0700
Subject: [PATCH] MDL-26277 grade import: validate file pointer before reading

---
 grade/import/csv/index.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/grade/import/csv/index.php b/grade/import/csv/index.php
index 11ae292f7c4..de9abe2e3ca 100644
--- a/grade/import/csv/index.php
+++ b/grade/import/csv/index.php
@@ -125,7 +125,9 @@ if ($formdata = $mform->get_data()) {
     fwrite($fp,$text);
     fclose($fp);
 
-    $fp = fopen($filename, "r");
+    if (!$fp = fopen($filename, "r")) {
+    	print_error('cannotopenfile');
+    }
 
     // --- get header (field names) ---
     $header = explode($csv_delimiter, fgets($fp, GRADE_CSV_LINE_LENGTH));