From 2d2cce8bd2024e55ffcfa29c2a0da3b3bfce011e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20S=CC=8Ckoda?= <commits@skodak.org>
Date: Tue, 31 Jul 2012 16:08:12 +0200
Subject: [PATCH] MDL-34585 fix broken blog file access control

---
 pluginfile.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pluginfile.php b/pluginfile.php
index 00dcc7d7a10..5584b666190 100644
--- a/pluginfile.php
+++ b/pluginfile.php
@@ -101,15 +101,15 @@ if ($component === 'blog') {
         }
     }
 
-    if ('publishstate' === 'public') {
+    if ($entry->publishstate === 'public') {
         if ($CFG->forcelogin) {
             require_login();
         }
 
-    } else if ('publishstate' === 'site') {
+    } else if ($entry->publishstate === 'site') {
         require_login();
         //ok
-    } else if ('publishstate' === 'draft') {
+    } else if ($entry->publishstate === 'draft') {
         require_login();
         if ($USER->id != $entry->userid) {
             send_file_not_found();