From bfa9be6230de5132e2f6e5e7d3f9a5a9f7b57125 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20S=CC=8Ckoda?= Date: Tue, 31 Jul 2012 16:02:54 +0200 Subject: [PATCH] MDL-34585 fix broken blog file access control --- lib/filelib.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/filelib.php b/lib/filelib.php index 2826f55f448..78f45b237f2 100644 --- a/lib/filelib.php +++ b/lib/filelib.php @@ -3263,15 +3263,15 @@ function file_pluginfile($relativepath, $forcedownload) { } } - if ('publishstate' === 'public') { + if ($entry->publishstate === 'public') { if ($CFG->forcelogin) { require_login(); } - } else if ('publishstate' === 'site') { + } else if ($entry->publishstate === 'site') { require_login(); //ok - } else if ('publishstate' === 'draft') { + } else if ($entry->publishstate === 'draft') { require_login(); if ($USER->id != $entry->userid) { send_file_not_found();