L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-22764, added capability check on view.php, edit.php requires managefiles capability, use require_login to force logged in user in edit.php page

Browse Source
This commit is contained in:
Dongsheng Cai
2010-06-21 09:11:24 +00:00
parent a76982080e
commit 3ebb42aeea
2 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mod/folder/edit.php
+3 -3
View File
@@ -31,12 +31,12 @@ require_once("$CFG->dirroot/repository/lib.php");
$id = required_param('id', PARAM_INT); // Course module ID
$cm = get_coursemodule_from_id('folder', $id, 0, false, MUST_EXIST);
$context = get_context_instance(CONTEXT_MODULE, $cm->id);
$folder = $DB->get_record('folder', array('id'=>$cm->instance), '*', MUST_EXIST);
$course = $DB->get_record('course', array('id'=>$cm->course), '*', MUST_EXIST);
require_course_login($course, true, $cm);
$context = get_context_instance(CONTEXT_MODULE, $cm->id);
require_login($course, true, $cm);
require_capability('moodle/course:managefiles', $context);
add_to_log($course->id, 'folder', 'edit', 'edit.php?id='.$cm->id, $folder->id, $cm->id);