From eaea796e70f6630494d3772684604ab6e907f4ac Mon Sep 17 00:00:00 2001 From: Marina Glancy Date: Wed, 16 Apr 2014 14:35:20 +0800 Subject: [PATCH] MDL-45126 do not allow guests see name and summary of hidden course --- enrol/index.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/enrol/index.php b/enrol/index.php index 3cc533507c0..68a12fd7254 100644 --- a/enrol/index.php +++ b/enrol/index.php @@ -41,6 +41,10 @@ if ($course->id == SITEID) { redirect("$CFG->wwwroot/"); } +if (!$course->visible && !has_capability('moodle/course:viewhiddencourses', context_course::instance($course->id))) { + print_error('coursehidden'); +} + $PAGE->set_course($course); $PAGE->set_pagelayout('course'); $PAGE->set_url('/enrol/index.php', array('id'=>$course->id));