From: mjollnir_ <mjollnir_>
Date: Tue, 16 Sep 2008 14:17:32 +0000 (+0000)
Subject: MDL-14591 - added security in file serving in pull portfolio plugins
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=6b6f1c056dbb8edf786353b575c73ad858583d5e;p=moodle.git

MDL-14591 - added security in file serving in pull portfolio plugins
---

diff --git a/portfolio/file.php b/portfolio/file.php
index e92efc3bda..4dce6e4f57 100644
--- a/portfolio/file.php
+++ b/portfolio/file.php
@@ -7,6 +7,7 @@ require_once($CFG->libdir . '/filelib.php');
 $id = required_param('id', PARAM_INT);
 
 $exporter = portfolio_exporter::rewaken_object($id);
+$exporter->verify_rewaken();
 
 if ($exporter->get('instance')->is_push()) {
     throw new portfolio_export_exception($exporter, 'filedenied', 'portfolio');