MDL-16596 always force download of draft files - this prevents proble…

…ms when editing area with file suploaded by otehr users
ITRC · Sep 21, 2008 · ac84a07 · ac84a07
1 parent ae6bc29
commit ac84a07
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/draftfile.php b/draftfile.php
@@ -12,7 +12,6 @@
     disable_debugging();
 
     $relativepath = get_file_argument('draftfile.php');
-    $forcedownload = optional_param('forcedownload', 0, PARAM_BOOL);
 
     // relative path must start with '/'
     if (!$relativepath) {
@@ -64,4 +63,4 @@
     // finally send the file
     // ========================================
     session_write_close(); // unlock session during fileserving
-    send_stored_file($file, 0, false, $forcedownload);
+    send_stored_file($file, 0, false, true); // force download - security first!