adding a api_protect_course_script() when downloading course files

13 years ago · bc9e269db7
parent e07dd23f36
commit bc9e269db7
1 changed files with 3 additions and 0 deletions
--- a/main/document/downloadfolder.inc.php
+++ b/main/document/downloadfolder.inc.php
@ -11,6 +11,9 @@
 set_time_limit(0);

 require_once '../inc/global.inc.php';
+
+api_protect_course_script();
+
 $document_data = DocumentManager::get_document_data_by_id($_GET['id'], api_get_course_id());
 $path          = $document_data['path'];