From 3c21fdc9ce4732e801659c3ab37d6d92c148f769 Mon Sep 17 00:00:00 2001
From: Howard Miller <howard@e-learndesign.co.uk>
Date: Tue, 5 Feb 2013 16:15:43 +0800
Subject: [PATCH] MDL-37797 HTML block: add contextid to block_positions query
 and make it more unique.

---
 lib/filelib.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/filelib.php b/lib/filelib.php
index f01219dac91..529b9e43e40 100644
--- a/lib/filelib.php
+++ b/lib/filelib.php
@@ -4236,7 +4236,7 @@ function file_pluginfile($relativepath, $forcedownload, $preview = null) {
                 send_file_not_found();
             }
 
-            $bprecord = $DB->get_record('block_positions', array('blockinstanceid' => $context->instanceid), 'visible');
+            $bprecord = $DB->get_record('block_positions', array('contextid' => $context->id, 'blockinstanceid' => $context->instanceid));
             // User can't access file, if block is hidden or doesn't have block:view capability
             if (($bprecord && !$bprecord->visible) || !has_capability('moodle/block:view', $context)) {
                  send_file_not_found();