From efc508c39c053ab7c7789829b49801ee3feda6b6 Mon Sep 17 00:00:00 2001
From: Adam Olley <adam.olley@blackboard.com>
Date: Tue, 8 May 2018 17:01:53 +0800
Subject: [PATCH] MDL-62210 mod_assign: limit file lookup to the target assign

---
 mod/assign/locallib.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/assign/locallib.php b/mod/assign/locallib.php
index 93fe7a52a0b..75f4ccd9d9b 100644
--- a/mod/assign/locallib.php
+++ b/mod/assign/locallib.php
@@ -8918,7 +8918,7 @@ class assign_portfolio_caller extends portfolio_module_caller_base {
 
             $submission = $DB->get_record('assign_submission', array('id' => $this->sid));
         } else {
-            $submissionid = $DB->get_field('files', 'itemid', array('id' => $this->fileid));
+            $submissionid = $DB->get_field('files', 'itemid', array('id' => $this->fileid, 'contextid' => $context->id));
             if ($submissionid) {
                 $submission = $DB->get_record('assign_submission', array('id' => $submissionid));
             }
-- 
2.17.1