From: Petr Skoda <skodak@moodle.org>
Date: Tue, 10 Nov 2009 14:04:50 +0000 (+0000)
Subject: MDL-20798 fixed missing access control for module intros
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=57956cc3e29510f3940d6987a08a04dc9350bf53;p=moodle.git

MDL-20798 fixed missing access control for module intros
---

diff --git a/pluginfile.php b/pluginfile.php
index f1e9f771b4..17332e1036 100644
--- a/pluginfile.php
+++ b/pluginfile.php
@@ -461,6 +461,11 @@ if ($context->contextlevel == CONTEXT_SYSTEM) {
         if (!plugin_supports('mod', $modname, FEATURE_MOD_INTRO, true)) {
             send_file_not_found();
         }
+        if (!$cm = get_coursemodule_from_instance($modname, $cminfo->instance, $course->id)) {
+            send_file_not_found();
+        }
+        require_course_login($course, true, $cm);
+
         if (!$cminfo->uservisible) {
             send_file_not_found();
         }