From e8a2fa86aa8e7c98689f4c849b5f2cc20b260e51 Mon Sep 17 00:00:00 2001
From: Charles Fulton <mackensen@gmail.com>
Date: Sun, 6 May 2012 20:14:55 -0700
Subject: [PATCH] MDL-26277 grade import: validate file pointer before reading

---
 grade/import/csv/index.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/grade/import/csv/index.php b/grade/import/csv/index.php
index 04844b05b12..4a316026ca3 100644
--- a/grade/import/csv/index.php
+++ b/grade/import/csv/index.php
@@ -126,7 +126,9 @@ if ($formdata = $mform->get_data()) {
     fwrite($fp,$text);
     fclose($fp);
 
-    $fp = fopen($filename, "r");
+    if (!$fp = fopen($filename, "r")) {
+    	print_error('cannotopenfile');
+    }
 
     // --- get header (field names) ---
     $header = explode($csv_delimiter, fgets($fp, GRADE_CSV_LINE_LENGTH));