MDL-37797 HTML block: add contextid to block_positions query and make…

… it more unique.
moodle · Feb 5, 2013 · 3bcf80e · 3bcf80e
1 parent a8e927e
commit 3bcf80e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/filelib.php b/lib/filelib.php
@@ -4277,7 +4277,7 @@ function file_pluginfile($relativepath, $forcedownload, $preview = null) {
                 send_file_not_found();
             }
 
-            $bprecord = $DB->get_record('block_positions', array('blockinstanceid' => $context->instanceid), 'visible');
+            $bprecord = $DB->get_record('block_positions', array('contextid' => $context->id, 'blockinstanceid' => $context->instanceid));
             // User can't access file, if block is hidden or doesn't have block:view capability
             if (($bprecord && !$bprecord->visible) || !has_capability('moodle/block:view', $context)) {
                  send_file_not_found();