From 57956cc3e29510f3940d6987a08a04dc9350bf53 Mon Sep 17 00:00:00 2001
From: Petr Skoda <skodak@moodle.org>
Date: Tue, 10 Nov 2009 14:04:50 +0000
Subject: [PATCH] MDL-20798 fixed missing access control for module intros

---
 pluginfile.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pluginfile.php b/pluginfile.php
index f1e9f771b4..17332e1036 100644
--- a/pluginfile.php
+++ b/pluginfile.php
@@ -461,6 +461,11 @@ if ($context->contextlevel == CONTEXT_SYSTEM) {
         if (!plugin_supports('mod', $modname, FEATURE_MOD_INTRO, true)) {
             send_file_not_found();
         }
+        if (!$cm = get_coursemodule_from_instance($modname, $cminfo->instance, $course->id)) {
+            send_file_not_found();
+        }
+        require_course_login($course, true, $cm);
+
         if (!$cminfo->uservisible) {
             send_file_not_found();
         }
-- 
2.39.5