MDL-40818 calendar: Require login to calendar pages

[moodle.git] / calendar / managesubscriptions.php

diff --git a/calendar/managesubscriptions.php b/calendar/managesubscriptions.php
index 3e4e0e9..f1c74d6 100644 (file)
--- a/calendar/managesubscriptions.php
+++ b/calendar/managesubscriptions.php
@@ -45,13 +45,15 @@ $PAGE->set_pagelayout('admin');
 $PAGE->navbar->add(get_string('managesubscriptions', 'calendar'));
 
 if ($courseid != SITEID && !empty($courseid)) {
 $PAGE->navbar->add(get_string('managesubscriptions', 'calendar'));
 
 if ($courseid != SITEID && !empty($courseid)) {

-    $course = $DB->get_record('course', array('id' => $courseid));
+    // Course ID must be valid and existing.
+    $course = $DB->get_record('course', array('id' => $courseid), '*', MUST_EXIST);

     $courses = array($course->id => $course);
 } else {
     $course = get_site();
     $courses = calendar_get_default_courses();
 }
     $courses = array($course->id => $course);
 } else {
     $course = get_site();
     $courses = calendar_get_default_courses();
 }

-require_course_login($course);
+require_login($course, false);
+

 if (!calendar_user_can_add_event($course)) {
     print_error('errorcannotimport', 'calendar');
 }
 if (!calendar_user_can_add_event($course)) {
     print_error('errorcannotimport', 'calendar');
 }