MDL-52774 ajax: Require authentication when getting nav branch

When getting the navigation branch data through AJAX, require
login if forcelogin is set.

diff --git a/lib/ajax/getnavbranch.php b/lib/ajax/getnavbranch.php
index e2e319a..d87f4ea 100644 (file)
--- a/lib/ajax/getnavbranch.php
+++ b/lib/ajax/getnavbranch.php
@@ -32,6 +32,10 @@ require_once(dirname(__FILE__) . '/../../config.php');
 /** Include course lib for its functions */
 require_once($CFG->dirroot.'/course/lib.php');
 
+if (!empty($CFG->forcelogin)) {
+    require_login();
+}
+
 try {
     // Start buffer capture so that we can `remove` any errors
     ob_start();