From 48bce2cee15b363cdb2e1cd536df71e39043464c Mon Sep 17 00:00:00 2001
From: Shintaro Fujiwara <shintaro.fujiwara@gmail.com>
Date: Fri, 26 Mar 2021 04:45:52 +0900
Subject: [PATCH] MDL-69304 gradeimport_csv: Validate if the user id is
 numerical.

---
 grade/import/csv/classes/load_data.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/grade/import/csv/classes/load_data.php b/grade/import/csv/classes/load_data.php
index df8876aeeb8..2167eb2d497 100644
--- a/grade/import/csv/classes/load_data.php
+++ b/grade/import/csv/classes/load_data.php
@@ -240,6 +240,10 @@ class gradeimport_csv_load_data {
                 $select = "{$field} = :{$field}";
             }
 
+            // Validate if the user id value is numerical.
+            if ($field === 'id' && !is_numeric($value)) {
+                $errorkey = 'usermappingerror';
+            }
             // Make sure the record exists and that there's only one matching record found.
             $user = $DB->get_record_select('user', $select, array($userfields['field'] => $value), '*', MUST_EXIST);
         } catch (dml_missing_record_exception $missingex) {