From faf40ca3e33435d8468d5dd2daee7d43a2620de0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20S=CC=8Ckoda?= Date: Tue, 31 Jul 2012 16:02:54 +0200 Subject: [PATCH] MDL-34585 fix broken blog file access control --- lib/filelib.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/filelib.php b/lib/filelib.php index 32df4bceee7..79efe3a615c 100644 --- a/lib/filelib.php +++ b/lib/filelib.php @@ -3471,15 +3471,15 @@ function file_pluginfile($relativepath, $forcedownload, $preview = null) { } } - if ('publishstate' === 'public') { + if ($entry->publishstate === 'public') { if ($CFG->forcelogin) { require_login(); } - } else if ('publishstate' === 'site') { + } else if ($entry->publishstate === 'site') { require_login(); //ok - } else if ('publishstate' === 'draft') { + } else if ($entry->publishstate === 'draft') { require_login(); if ($USER->id != $entry->userid) { send_file_not_found();