From: moodler <moodler>
Date: Tue, 7 Sep 2004 14:13:19 +0000 (+0000)
Subject: Merged from stable
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=76112421d8c4b80884b0bd5cde7452eb9312ac2e;p=moodle.git

Merged from stable
---

diff --git a/file.php b/file.php
index b25e6cf301..9443edb52d 100644
--- a/file.php
+++ b/file.php
@@ -32,7 +32,9 @@
 
     $courseid = (integer)$args[0];
 
-    $course = get_record("course", "id", $courseid);
+    if (!$course = get_record("course", "id", $courseid)) {  // Course ID must be specified
+        error("Invalid course ID");
+    }
 
     if ($course->category) {
         require_login($courseid);
@@ -40,8 +42,6 @@
         require_login();
     }
 
-    // it's OK to get here if no course was specified
-
     $pathname = "$CFG->dataroot$pathinfo";
     if ($pathargs = explode("?",$pathname)) {
         $pathname = $pathargs[0];            // Only keep what's before the '?'