From c7da0d864e58cb8f37f8f567d889250b03c85235 Mon Sep 17 00:00:00 2001
From: toyomoyo <toyomoyo>
Date: Tue, 10 Apr 2007 05:15:14 +0000
Subject: [PATCH] fix for MDL-9268

---
 blog/index.php |  3 ++-
 blog/lib.php   | 10 ++++++++--
 2 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/blog/index.php b/blog/index.php
index b8b1da2501587..e48269b829d7e 100755
--- a/blog/index.php
+++ b/blog/index.php
@@ -84,7 +84,8 @@
         if ($CFG->bloglevel < BLOG_GROUP_LEVEL) {
             error('Group blogs is not enabled');
         }
-        if (!$group = get_record('groups','id',$groupid)) {
+        // fix for MDL-9268
+        if (!$group = get_record('groups','id',$filterselect)) {
             error('Incorrect group id specified');
         }
         if (!$course = get_record('course', 'id', $group->courseid)) {
diff --git a/blog/lib.php b/blog/lib.php
index 3469a134c989b..0e8ea2a4f389c 100755
--- a/blog/lib.php
+++ b/blog/lib.php
@@ -496,14 +496,20 @@ function fetch_entries($postid='', $fetchlimit=10, $fetchstart='', $filtertype='
             break;
 
             case 'group':
-
                 $SQL = 'SELECT '.$requiredfields.' FROM '.$CFG->prefix.'post p, '.$tagtablesql
+                        .$CFG->prefix.'groups_members m, '.$CFG->prefix.'user u
+                        WHERE p.userid = m.userid '.$tagquerysql.'
+                        AND u.id = p.userid
+                        AND m.groupid = '.$filterselect.'
+                        AND (p.publishstate = \'site\' OR p.publishstate = \'public\' OR p.userid = '.$USER->id.')';
+                
+                /*$SQL = 'SELECT '.$requiredfields.' FROM '.$CFG->prefix.'post p, '.$tagtablesql
                         .groups_members_from_sql().', '.$CFG->prefix.'user u
                         WHERE '.groups_members_where_sql($filterselect, 'p.userid').'
                         AND u.id = p.userid
                         AND u.deleted = 0
                         '.$permissionsql.$typesql;
-
+                */
             break;
 
             case 'user':