From 1b6f518436db3d6ac810fa0472cc7390cfa71a09 Mon Sep 17 00:00:00 2001
From: David Siegfried <david.siegfried@uni-vechta.de>
Date: Mon, 4 Nov 2024 12:31:06 +0000
Subject: [PATCH] prevent php-exceptions in files, closes #4804
Closes #4804
Merge request studip/studip!3594
---
app/controllers/file.php | 3 +++
1 file changed, 3 insertions(+)
diff --git a/app/controllers/file.php b/app/controllers/file.php
index ddcef2c3a2d..3b3c83dcace 100644
--- a/app/controllers/file.php
+++ b/app/controllers/file.php
@@ -1331,6 +1331,9 @@ class FileController extends AuthenticatedController
$folder = $filetype->getFolderType();
} else {
$file_ref = FileRef::find($file_ref_id);
+ if (!$file_ref) {
+ throw new Trails\Exception(404, _('Datei nicht gefunden.'));
+ }
$folder = $file_ref->foldertype;
$filetype = $file_ref->getFileType();
}
--
GitLab