4.3, * but this doesn't work as it should on Windows installations * * @param string $filename or boolean TRUE to return complete array * @author ? first version * @author Bert Vanderkimpen * */ public static function file_get_mime_type ($filename) { //all mime types in an array (from 1.6, this is the authorative source) //please keep this alphabetical if you add something to this list!!! $mime_types=array( "ai" => "application/postscript", "aif" => "audio/x-aiff", "aifc" => "audio/x-aiff", "aiff" => "audio/x-aiff", "asf" => "video/x-ms-asf", "asc" => "text/plain", "au" => "audio/basic", "avi" => "video/x-msvideo", "bcpio" => "application/x-bcpio", "bin" => "application/octet-stream", "bmp" => "image/bmp", "cdf" => "application/x-netcdf", "class" => "application/octet-stream", "cpio" => "application/x-cpio", "cpt" => "application/mac-compactpro", "csh" => "application/x-csh", "css" => "text/css", "dcr" => "application/x-director", "dir" => "application/x-director", "djv" => "image/vnd.djvu", "djvu" => "image/vnd.djvu", "dll" => "application/octet-stream", "dmg" => "application/x-diskcopy", "dms" => "application/octet-stream", "doc" => "application/msword", "dvi" => "application/x-dvi", "dwg" => "application/vnd.dwg", "dxf" => "application/vnd.dxf", "dxr" => "application/x-director", "eps" => "application/postscript", "etx" => "text/x-setext", "exe" => "application/octet-stream", "ez" => "application/andrew-inset", "gif" => "image/gif", "gtar" => "application/x-gtar", "gz" => "application/x-gzip", "hdf" => "application/x-hdf", "hqx" => "application/mac-binhex40", "htm" => "text/html", "html" => "text/html", "ice" => "x-conference-xcooltalk", "ief" => "image/ief", "iges" => "model/iges", "igs" => "model/iges", "jar" => "application/java-archiver", "jpe" => "image/jpeg", "jpeg" => "image/jpeg", "jpg" => "image/jpeg", "js" => "application/x-javascript", "kar" => "audio/midi", "latex" => "application/x-latex", "lha" => "application/octet-stream", "lzh" => "application/octet-stream", "m1a" => "audio/mpeg", "m2a" => "audio/mpeg", "m3u" => "audio/x-mpegurl", "man" => "application/x-troff-man", "me" => "application/x-troff-me", "mesh" => "model/mesh", "mid" => "audio/midi", "midi" => "audio/midi", "mov" => "video/quicktime", "movie" => "video/x-sgi-movie", "mp2" => "audio/mpeg", "mp3" => "audio/mpeg", "mp4" => "video/mpeg4-generic", "mpa" => "audio/mpeg", "mpe" => "video/mpeg", "mpeg" => "video/mpeg", "mpg" => "video/mpeg", "mpga" => "audio/mpeg", "ms" => "application/x-troff-ms", "msh" => "model/mesh", "mxu" => "video/vnd.mpegurl", "nc" => "application/x-netcdf", "oda" => "application/oda", "pbm" => "image/x-portable-bitmap", "pct" => "image/pict", "pdb" => "chemical/x-pdb", "pdf" => "application/pdf", "pgm" => "image/x-portable-graymap", "pgn" => "application/x-chess-pgn", "pict" => "image/pict", "png" => "image/png", "pnm" => "image/x-portable-anymap", "ppm" => "image/x-portable-pixmap", "ppt" => "application/vnd.ms-powerpoint", "pps" => "application/vnd.ms-powerpoint", "ps" => "application/postscript", "qt" => "video/quicktime", "ra" => "audio/x-realaudio", "ram" => "audio/x-pn-realaudio", "rar" => "image/x-rar-compressed", "ras" => "image/x-cmu-raster", "rgb" => "image/x-rgb", "rm" => "audio/x-pn-realaudio", "roff" => "application/x-troff", "rpm" => "audio/x-pn-realaudio-plugin", "rtf" => "text/rtf", "rtx" => "text/richtext", "sgm" => "text/sgml", "sgml" => "text/sgml", "sh" => "application/x-sh", "shar" => "application/x-shar", "silo" => "model/mesh", "sib" => "application/X-Sibelius-Score", "sit" => "application/x-stuffit", "skd" => "application/x-koan", "skm" => "application/x-koan", "skp" => "application/x-koan", "skt" => "application/x-koan", "smi" => "application/smil", "smil" => "application/smil", "snd" => "audio/basic", "so" => "application/octet-stream", "spl" => "application/x-futuresplash", "src" => "application/x-wais-source", "sv4cpio" => "application/x-sv4cpio", "sv4crc" => "application/x-sv4crc", "svf" => "application/vnd.svf", "swf" => "application/x-shockwave-flash", "sxc" => "application/vnd.sun.xml.calc", "sxi" => "application/vnd.sun.xml.impress", "sxw" => "application/vnd.sun.xml.writer", "t" => "application/x-troff", "tar" => "application/x-tar", "tcl" => "application/x-tcl", "tex" => "application/x-tex", "texi" => "application/x-texinfo", "texinfo" => "application/x-texinfo", "tga" => "image/x-targa", "tif" => "image/tif", "tiff" => "image/tiff", "tr" => "application/x-troff", "tsv" => "text/tab-seperated-values", "txt" => "text/plain", "ustar" => "application/x-ustar", "vcd" => "application/x-cdlink", "vrml" => "model/vrml", "wav" => "audio/x-wav", "wbmp" => "image/vnd.wap.wbmp", "wbxml" => "application/vnd.wap.wbxml", "wml" => "text/vnd.wap.wml", "wmlc" => "application/vnd.wap.wmlc", "wmls" => "text/vnd.wap.wmlscript", "wmlsc" => "application/vnd.wap.wmlscriptc", "wma" => "video/x-ms-wma", "wmv" => "audio/x-ms-wmv", "wrl" => "model/vrml", "xbm" => "image/x-xbitmap", "xht" => "application/xhtml+xml", "xhtml" => "application/xhtml+xml", "xls" => "application/vnd.ms-excel", "xml" => "text/xml", "xpm" => "image/x-xpixmap", "xsl" => "text/xml", "xwd" => "image/x-windowdump", "xyz" => "chemical/x-xyz", "zip" => "application/zip" ); if ($filename === TRUE) { return $mime_types; } //get the extension of the file $extension = explode('.', $filename); //$filename will be an array if a . was found if (is_array($extension)) { $extension = (strtolower($extension[sizeof($extension) - 1])); } //file without extension else { $extension = 'empty'; } //if the extension is found, return the content type if (isset ($mime_types[$extension])) return $mime_types[$extension]; //else return octet-stream return "application/octet-stream"; } /** * @return true if the user is allowed to see the document, false otherwise * @author Sergio A Kessler, first version * @author Roan Embrechts, bugfix * @todo ??not only check if a file is visible, but also check if the user is allowed to see the file?? */ public static function file_visible_to_user ($this_course, $doc_url) { $current_session_id = api_get_session_id(); $is_allowed_to_edit = api_is_allowed_to_edit(null,true); if ($is_allowed_to_edit) { return true; } else { $tbl_document = Database::get_course_table(TABLE_DOCUMENT); $tbl_item_property = $this_course.'item_property'; $doc_url = Database::escape_string($doc_url); //$doc_url = addslashes($doc_url); $query = "SELECT 1 FROM $tbl_document AS docs,$tbl_item_property AS props WHERE props.tool = 'document' AND docs.id=props.ref AND props.visibility <> '1' AND docs.path = '$doc_url'"; //echo $query; $result = Database::query($query); return (Database::num_rows($result) == 0); } } /** * This function streams a file to the client * * @param string $full_file_name * @param boolean $forced * @param string $name * @return false if file doesn't exist, true if stream succeeded */ public static function file_send_for_download ($full_file_name, $forced = false, $name = '') { if (!is_file($full_file_name)) { return false; } $filename = ($name == '') ? basename($full_file_name) : $name; $len = filesize($full_file_name); if ($forced) { //force the browser to save the file instead of opening it header('Content-type: application/octet-stream'); //header('Content-Type: application/force-download'); header('Content-length: '.$len); if (preg_match("/MSIE 5.5/", $_SERVER['HTTP_USER_AGENT'])) { header('Content-Disposition: filename= '.$filename); } else { header('Content-Disposition: attachment; filename= '.$filename); } if (strpos($_SERVER['HTTP_USER_AGENT'], 'MSIE')) { header('Pragma: '); header('Cache-Control: '); header('Cache-Control: public'); // IE cannot download from sessions without a cache } header('Content-Description: '.$filename); header('Content-transfer-encoding: binary'); $fp = fopen($full_file_name, 'r'); fpassthru($fp); return true; } else { //no forced download, just let the browser decide what to do according to the mimetype $content_type = self::file_get_mime_type($filename); header('Expires: Wed, 01 Jan 1990 00:00:00 GMT'); header('Last-Modified: '.gmdate('D, d M Y H:i:s').' GMT'); // Commented to avoid double caching declaration when playing with IE and HTTPS //header('Cache-Control: no-cache, must-revalidate'); //header('Pragma: no-cache'); header('Content-type: '.$content_type); header('Content-Length: '.$len); $user_agent = strtolower($_SERVER['HTTP_USER_AGENT']); if (strpos($user_agent, 'msie')) { header('Content-Disposition: ; filename= '.$filename); } else { header('Content-Disposition: inline; filename= '.$filename); } readfile($full_file_name); return true; } } /** * This function streams a string to the client for download. * You have to ensure that the calling script then stops processing (exit();) * otherwise it may cause subsequent use of the page to want to download * other pages in php rather than interpreting them. * * @param string The string contents * @param boolean Whether "save" mode is forced (or opening directly authorized) * @param string The name of the file in the end (including extension) * @return false if file doesn't exist, true if stream succeeded */ public static function string_send_for_download ($full_string, $forced = false, $name = '') { $filename = $name; $len = strlen($full_string); if ($forced) { //force the browser to save the file instead of opening it header('Content-type: application/octet-stream'); //header('Content-Type: application/force-download'); header('Content-length: '.$len); if (preg_match("/MSIE 5.5/", $_SERVER['HTTP_USER_AGENT'])) { header('Content-Disposition: filename= '.$filename); } else { header('Content-Disposition: attachment; filename= '.$filename); } if (strpos($_SERVER['HTTP_USER_AGENT'], 'MSIE')) { header('Pragma: '); header('Cache-Control: '); header('Cache-Control: public'); // IE cannot download from sessions without a cache } header('Content-Description: '.$filename); header('Content-transfer-encoding: binary'); //$fp = fopen($full_string, 'r'); //fpassthru($fp); echo $full_string; return true; //You have to ensure that the calling script then stops processing (exit();) //otherwise it may cause subsequent use of the page to want to download //other pages in php rather than interpreting them. } else { //no forced download, just let the browser decide what to do according to the mimetype $content_type = self::file_get_mime_type($filename); header('Expires: Wed, 01 Jan 1990 00:00:00 GMT'); header('Last-Modified: '.gmdate('D, d M Y H:i:s').' GMT'); header('Cache-Control: no-cache, must-revalidate'); header('Pragma: no-cache'); header('Content-type: '.$content_type); header('Content-Length: '.$len); $user_agent = strtolower($_SERVER['HTTP_USER_AGENT']); if (strpos($user_agent, 'msie')) { header('Content-Disposition: ; filename= '.$filename); } else { header('Content-Disposition: inline; filename= '.$filename); } echo($full_string); //You have to ensure that the calling script then stops processing (exit();) //otherwise it may cause subsequent use of the page to want to download //other pages in php rather than interpreting them. return true; } } /** * Fetches all document data for the given user/group * * @param array $_course * @param string $path * @param int $to_group_id * @param int $to_user_id * @param boolean $can_see_invisible * @return array with all document data */ public static function get_all_document_data ($_course, $path = '/', $to_group_id = 0, $to_user_id = NULL, $can_see_invisible = false) { $TABLE_ITEMPROPERTY = Database::get_course_table(TABLE_ITEM_PROPERTY, $_course['dbName']); $TABLE_DOCUMENT = Database::get_course_table(TABLE_DOCUMENT, $_course['dbName']); $TABLE_COURSE = Database::get_main_table(TABLE_MAIN_COURSE); //if to_user_id = NULL -> change query (IS NULL) //$to_user_id = (is_null($to_user_id))?'IS NULL':'= '.$to_user_id; if (!is_null($to_user_id)) { $to_field = 'last.to_user_id'; $to_value = $to_user_id; } else { $to_field = 'last.to_group_id'; $to_value = $to_group_id; } //escape underscores in the path so they don't act as a wildcard $path = Database::escape_string(str_replace('_', '\_', $path)); $to_user_id = Database::escape_string($to_user_id); $to_value = Database::escape_string($to_value); //if they can't see invisible files, they can only see files with visibility 1 $visibility_bit = ' = 1'; //if they can see invisible files, only deleted files (visibility 2) are filtered out if ($can_see_invisible) { $visibility_bit = ' <> 2'; } //the given path will not end with a slash, unless it's the root '/' //so no root -> add slash $added_slash = ($path == '/') ? '' : '/'; //condition for the session $current_session_id = api_get_session_id(); $condition_session = " AND (id_session = '$current_session_id' OR id_session = '0')"; $sql = "SELECT docs.id, docs.filetype, docs.path, docs.title, docs.comment, docs.size, docs.readonly, last.visibility FROM ".$TABLE_ITEMPROPERTY." AS last, ".$TABLE_DOCUMENT." AS docs WHERE docs.id = last.ref AND docs.path LIKE '".$path.$added_slash."%' AND docs.path NOT LIKE '".$path.$added_slash."%/%' AND last.tool = '".TOOL_DOCUMENT."' AND ".$to_field." = ".$to_value." AND last.visibility".$visibility_bit . $condition_session; $result = Database::query($sql); if ($result && Database::num_rows($result) != 0) { while ($row = Database::fetch_array($result,'ASSOC')) //while ($row = Database::fetch_array($result, 'NUM')) { if($row['filetype']=='file' && pathinfo($row['path'],PATHINFO_EXTENSION)=='html'){ //Templates management $table_template = Database::get_main_table(TABLE_MAIN_TEMPLATES); $sql_is_template = "SELECT id FROM $table_template WHERE course_code='".$_course['id']."' AND user_id='".api_get_user_id()."' AND ref_doc='".$row['id']."'"; $template_result = Database::query($sql_is_template); if(Database::num_rows($template_result)>0){ $row['is_template'] = 1; } else{ $row['is_template'] = 0; } } $document_data[$row['id']] = $row; //$document_data[] = $row; } return $document_data; } else { //display_error("Error getting document info from database (".Database::error().")!"); return false; } } /** * Gets the paths of all folders in a course * can show all folders (exept for the deleted ones) or only visible ones * @param array $_course * @param boolean $can_see_invisible * @param int $to_group_id * @return array with paths */ public static function get_all_document_folders ($_course, $to_group_id = '0', $can_see_invisible = false) { $TABLE_ITEMPROPERTY = Database::get_course_table(TABLE_ITEM_PROPERTY, $_course['dbName']); $TABLE_DOCUMENT = Database::get_course_table(TABLE_DOCUMENT, $_course['dbName']); /*if(empty($doc_url)){ $to_group_id = '0'; } else { $to_group_id = Database::escape_string($to_group_id); }*/ if (!empty($to_group_id)) { $to_group_id = intval($to_group_id); } if ($can_see_invisible) { //condition for the session $session_id = api_get_session_id(); $condition_session = api_get_session_condition($session_id); $sql = "SELECT path FROM ".$TABLE_ITEMPROPERTY." AS last, ".$TABLE_DOCUMENT." AS docs WHERE docs.id = last.ref AND docs.filetype = 'folder' AND last.tool = '".TOOL_DOCUMENT."' AND last.to_group_id = ".$to_group_id." AND last.visibility <> 2 $condition_session"; $result = Database::query($sql); if ($result && Database::num_rows($result) != 0) { while ($row = Database::fetch_array($result,'ASSOC')) { $document_folders[] = $row['path']; } //sort($document_folders); natsort($document_folders); //return results return $document_folders; } else { return false; } } //no invisible folders else { //condition for the session $session_id = api_get_session_id(); $condition_session = api_get_session_condition($session_id); //get visible folders $visible_sql = "SELECT path FROM ".$TABLE_ITEMPROPERTY." AS last, ".$TABLE_DOCUMENT." AS docs WHERE docs.id = last.ref AND docs.filetype = 'folder' AND last.tool = '".TOOL_DOCUMENT."' AND last.to_group_id = ".$to_group_id." AND last.visibility = 1 $condition_session"; $visibleresult = Database::query($visible_sql); while ($all_visible_folders = Database::fetch_array($visibleresult,'ASSOC')) { $visiblefolders[] = $all_visible_folders['path']; //echo "visible folders: ".$all_visible_folders['path']."
"; } //condition for the session $session_id = api_get_session_id(); $condition_session = api_get_session_condition($session_id); //get invisible folders $invisible_sql = "SELECT path FROM ".$TABLE_ITEMPROPERTY." AS last, ".$TABLE_DOCUMENT." AS docs WHERE docs.id = last.ref AND docs.filetype = 'folder' AND last.tool = '".TOOL_DOCUMENT."' AND last.to_group_id = ".$to_group_id." AND last.visibility = 0 $condition_session"; $invisibleresult = Database::query($invisible_sql); while ($invisible_folders = Database::fetch_array($invisibleresult,'ASSOC')) { //condition for the session $session_id = api_get_session_id(); $condition_session = api_get_session_condition($session_id); //get visible folders in the invisible ones -> they are invisible too //echo "invisible folders: ".$invisible_folders['path']."
"; $folder_in_invisible_sql = "SELECT path FROM ".$TABLE_ITEMPROPERTY." AS last, ".$TABLE_DOCUMENT." AS docs WHERE docs.id = last.ref AND docs.path LIKE '".Database::escape_string($invisible_folders['path'])."/%' AND docs.filetype = 'folder' AND last.tool = '".TOOL_DOCUMENT."' AND last.to_group_id = ".$to_group_id." AND last.visibility = 1 $condition_session"; $folder_in_invisible_result = Database::query($folder_in_invisible_sql); while ($folders_in_invisible_folder = Database::fetch_array($folder_in_invisible_result,'ASSOC')) { $invisiblefolders[] = $folders_in_invisible_folder['path']; //echo "
folders in invisible folders: ".$folders_in_invisible_folder['path']."


"; } } //if both results are arrays -> //calculate the difference between the 2 arrays -> only visible folders are left :) if (is_array($visiblefolders) && is_array($invisiblefolders)) { $document_folders = array_diff($visiblefolders, $invisiblefolders); //sort($document_folders); natsort($document_folders); return $document_folders; } //only visible folders found elseif (is_array($visiblefolders)) { //sort($visiblefolders); natsort($visiblefolders); return $visiblefolders; } //no visible folders found else { return false; } } } /** * This check if a document has the readonly property checked, then see if the user * is the owner of this file, if all this is true then return true. * * @param array $_course * @param int $user_id id of the current user * @param string $file path stored in the database * @param int $document_id in case you dont have the file path ,insert the id of the file here and leave $file in blank '' * @return boolean true/false **/ public static function check_readonly ($_course,$user_id,$file,$document_id='',$to_delete=false) { if(!(!empty($document_id) && is_numeric($document_id))) { $document_id = self::get_document_id($_course, $file); } $TABLE_PROPERTY = Database::get_course_table(TABLE_ITEM_PROPERTY, $_course['dbName']); $TABLE_DOCUMENT = Database::get_course_table(TABLE_DOCUMENT, $_course['dbName']); if ($to_delete) { if (self::is_folder($_course, $document_id)) { if (!empty($file)) { $path = Database::escape_string($file); $what_to_check_sql = "SELECT td.id, readonly, tp.insert_user_id FROM ".$TABLE_DOCUMENT." td , $TABLE_PROPERTY tp WHERE tp.ref= td.id and (path='".$path."' OR path LIKE BINARY '".$path."/%' ) "; //get all id's of documents that are deleted $what_to_check_result = Database::query($what_to_check_sql); if ($what_to_check_result && Database::num_rows($what_to_check_result) != 0) { // file with readonly set to 1 exist? $readonly_set=false; while ($row = Database::fetch_array($what_to_check_result)) { //query to delete from item_property table //echo $row['id']; echo "
"; if ($row['readonly']==1) { if (!($row['insert_user_id'] == $user_id)) { $readonly_set=true; break; } } } if ($readonly_set) { return true; } } } return false; } } if (!empty($document_id)) { $sql= 'SELECT a.insert_user_id, b.readonly FROM '.$TABLE_PROPERTY.' a,'.$TABLE_DOCUMENT.' b WHERE a.ref = b.id and a.ref='.$document_id.' LIMIT 1'; $resultans = Database::query($sql); $doc_details = Database ::fetch_array($resultans,'ASSOC'); if($doc_details['readonly']==1) { if ( $doc_details['insert_user_id'] == $user_id || api_is_platform_admin() ) { return false; } else { return true; } } } return false; } /** * This check if a document is a folder or not * @param array $_course * @param int $document_id of the item * @return boolean true/false **/ public static function is_folder ($_course, $document_id) { $TABLE_DOCUMENT = Database::get_course_table(TABLE_DOCUMENT, $_course['dbName']); //if (!empty($document_id)) $document_id = Database::escape_string($document_id); $resultans = Database::query('SELECT filetype FROM '.$TABLE_DOCUMENT.' WHERE id='.$document_id.''); $result= Database::fetch_array($resultans,'ASSOC'); if ($result['filetype']=='folder') { return true; } else { return false; } } /** * This deletes a document by changing visibility to 2, renaming it to filename_DELETED_#id * Files/folders that are inside a deleted folder get visibility 2 * * @param array $_course * @param string $path, path stored in the database * @param string ,$base_work_dir, path to the documents folder * @return boolean true/false * @todo now only files/folders in a folder get visibility 2, we should rename them too. */ public static function delete_document ($_course, $path, $base_work_dir) { $TABLE_DOCUMENT = Database :: get_course_table(TABLE_DOCUMENT, $_course['dbName']); $TABLE_ITEMPROPERTY = Database :: get_course_table(TABLE_ITEM_PROPERTY, $_course['dbName']); //first, delete the actual document... $document_id = self :: get_document_id($_course, $path); $new_path = $path.'_DELETED_'.$document_id; $current_session_id = api_get_session_id(); if ($document_id) { if (api_get_setting('permanently_remove_deleted_files') == 'true') //deleted files are *really* deleted { $what_to_delete_sql = "SELECT id FROM ".$TABLE_DOCUMENT." WHERE path='".$path."' OR path LIKE BINARY '".$path."/%'"; //get all id's of documents that are deleted $what_to_delete_result = Database::query($what_to_delete_sql); if ($what_to_delete_result && Database::num_rows($what_to_delete_result) != 0) { //needed to deleted medadata require_once (api_get_path(SYS_CODE_PATH).'metadata/md_funcs.php'); require_once(api_get_path(LIBRARY_PATH).'fileManage.lib.php'); $mdStore = new mdstore(TRUE); //delete all item_property entries while ($row = Database::fetch_array($what_to_delete_result)) { //query to delete from item_property table //avoid wrong behavior //$remove_from_item_property_sql = "DELETE FROM ".$TABLE_ITEMPROPERTY." WHERE ref = ".$row['id']." AND tool='".TOOL_DOCUMENT."'"; api_item_property_update($_course, TOOL_DOCUMENT, $row['id'], 'delete', api_get_user_id(),null,null,null,null,$current_session_id); //query to delete from document table $remove_from_document_sql = "DELETE FROM ".$TABLE_DOCUMENT." WHERE id = ".$row['id'].""; self::unset_document_as_template($row['id'],$_course, api_get_user_id()); //echo($remove_from_item_property_sql.'
'); //Database::query($remove_from_item_property_sql); //echo($remove_from_document_sql.'
'); Database::query($remove_from_document_sql); //delete metadata $eid = 'Document'.'.'.$row['id']; $mdStore->mds_delete($eid); $mdStore->mds_delete_offspring($eid); } self::delete_document_from_search_engine(api_get_course_id(), $document_id); //delete documents, do it like this so metadata get's deleted too //update_db_info('delete', $path); //throw it away my_delete($base_work_dir.$path); return true; } else { return false; } } else //set visibility to 2 and rename file/folder to qsdqsd_DELETED_#id { if (api_item_property_update($_course, TOOL_DOCUMENT, $document_id, 'delete', api_get_user_id(),null,null,null,null,$current_session_id)) { //echo('item_property_update OK'); if (is_file($base_work_dir.$path) || is_dir($base_work_dir.$path) ) { if(rename($base_work_dir.$path, $base_work_dir.$new_path)) { self::unset_document_as_template($document_id, api_get_course_id(), api_get_user_id()); $sql = "UPDATE $TABLE_DOCUMENT set path='".$new_path."' WHERE id='".$document_id."'"; if (Database::query($sql)) { //if it is a folder it can contain files $sql = "SELECT id,path FROM ".$TABLE_DOCUMENT." WHERE path LIKE BINARY '".$path."/%'"; $result = Database::query($sql); if ($result && Database::num_rows($result) > 0) { while ($deleted_items = Database::fetch_array($result,'ASSOC')) { //echo('to delete also: id '.$deleted_items['id']); api_item_property_update($_course, TOOL_DOCUMENT, $deleted_items['id'], 'delete', api_get_user_id(),null,null,null,null,$current_session_id); //Change path of subfolders and documents in database $old_item_path = $deleted_items['path']; $new_item_path = $new_path.substr($old_item_path, strlen($path)); /*/ * trying to fix this bug FS#2681 echo $base_work_dir.$old_item_path; echo "
"; echo $base_work_dir.$new_item_path; echo "
";echo "
"; rename($base_work_dir.$old_item_path, $base_work_dir.$new_item_path); */ self::unset_document_as_template($deleted_items['id'], api_get_course_id(), api_get_user_id()); $sql = "UPDATE $TABLE_DOCUMENT set path = '".$new_item_path."' WHERE id = ".$deleted_items['id']; Database::query($sql); } } self::delete_document_from_search_engine(api_get_course_id(), $document_id); return true; } } else { //Couldn't rename - file permissions problem? error_log(__FILE__.' '.__LINE__.': Error renaming '.$base_work_dir.$path.' to '.$base_work_dir.$new_path.'. This is probably due to file permissions',0); } } else { //echo $base_work_dir.$path; //The file or directory isn't there anymore (on the filesystem) // This means it has been removed externally. To prevent a // blocking error from happening, we drop the related items from the // item_property and the document table. error_log(__FILE__.' '.__LINE__.': System inconsistency detected. The file or directory '.$base_work_dir.$path.' seems to have been removed from the filesystem independently from the web platform. To restore consistency, the elements using the same path will be removed from the database',0); $sql = "SELECT id FROM $TABLE_DOCUMENT WHERE path='".$path."' OR path LIKE BINARY '".$path."/%'"; $res = Database::query($sql); self::delete_document_from_search_engine(api_get_course_id(), $document_id); while ( $row = Database::fetch_array($res) ) { $sqlipd = "DELETE FROM $TABLE_ITEMPROPERTY WHERE ref = ".$row['id']." AND tool='".TOOL_DOCUMENT."'"; $resipd = Database::query($sqlipd); self::unset_document_as_template($row['id'],api_get_course_id(), api_get_user_id()); $sqldd = "DELETE FROM $TABLE_DOCUMENT WHERE id = ".$row['id']; $resdd = Database::query($sqldd); } } } } } return false; } /** * Removes documents from search engine database * * @param string $course_id Course code * @param int $document_id Document id to delete */ public static function delete_document_from_search_engine ($course_id, $document_id) { // remove from search engine if enabled if (api_get_setting('search_enabled') == 'true') { $tbl_se_ref = Database::get_main_table(TABLE_MAIN_SEARCH_ENGINE_REF); $sql = 'SELECT * FROM %s WHERE course_code=\'%s\' AND tool_id=\'%s\' AND ref_id_high_level=%s LIMIT 1'; $sql = sprintf($sql, $tbl_se_ref, $course_id, TOOL_DOCUMENT, $document_id); $res = Database::query($sql); if (Database::num_rows($res) > 0) { $row2 = Database::fetch_array($res); require_once(api_get_path(LIBRARY_PATH) .'search/DokeosIndexer.class.php'); $di = new DokeosIndexer(); $di->remove_document((int)$row2['search_did']); } $sql = 'DELETE FROM %s WHERE course_code=\'%s\' AND tool_id=\'%s\' AND ref_id_high_level=%s LIMIT 1'; $sql = sprintf($sql, $tbl_se_ref, $course_id, TOOL_DOCUMENT, $document_id); Database::query($sql); // remove terms from db require_once(api_get_path(LIBRARY_PATH) .'specific_fields_manager.lib.php'); delete_all_values_for_item($course_id, TOOL_DOCUMENT, $document_id); } } /** * Gets the id of a document with a given path * * @param array $_course * @param string $path * @return int id of document / false if no doc found */ public static function get_document_id ($_course, $path) { $TABLE_DOCUMENT = Database :: get_course_table(TABLE_DOCUMENT, $_course['dbName']); $path = Database::escape_string($path); $sql = "SELECT id FROM $TABLE_DOCUMENT WHERE path LIKE BINARY '$path'"; $result = Database::query($sql); if ($result && Database::num_rows($result) == 1) { $row = Database::fetch_array($result); return $row[0]; } else { return false; } } /** * Allow to set a specific document as a new template for FCKEditor for a particular user in a particular course * * @param string $title * @param string $description * @param int $document_id_for_template the document id * @param string $couse_code * @param int $user_id */ public static function set_document_as_template ($title, $description, $document_id_for_template, $couse_code, $user_id, $image) { // Database table definition $table_template = Database::get_main_table(TABLE_MAIN_TEMPLATES); // creating the sql statement $sql = "INSERT INTO ".$table_template." (title, description, course_code, user_id, ref_doc, image) VALUES ( '".Database::escape_string($title)."', '".Database::escape_string($description)."', '".Database::escape_string($couse_code)."', '".Database::escape_string($user_id)."', '".Database::escape_string($document_id_for_template)."', '".Database::escape_string($image)."')"; Database::query($sql); return true; } /** * Unset a document as template * * @param int $document_id * @param string $couse_code * @param int $user_id */ public static function unset_document_as_template ($document_id, $course_code, $user_id) { $table_template = Database::get_main_table(TABLE_MAIN_TEMPLATES); $course_code = Database::escape_string($course_code); $user_id = Database::escape_string($user_id); $document_id = Database::escape_string($document_id); $sql = 'SELECT id FROM '.$table_template.' WHERE course_code="'.$course_code.'" AND user_id="'.$user_id.'" AND ref_doc="'.$document_id.'"'; $result = Database::query($sql); $template_id = Database::result($result,0,0); include_once(api_get_path(LIBRARY_PATH) . 'fileManage.lib.php'); my_delete(api_get_path(SYS_CODE_PATH).'upload/template_thumbnails/'.$template_id.'.jpg'); $sql = 'DELETE FROM '.$table_template.' WHERE course_code="'.$course_code.'" AND user_id="'.$user_id.'" AND ref_doc="'.$document_id.'"'; Database::query($sql); } /** * return true if the documentpath have visibility=1 as item_property * * @param string $document_path the relative complete path of the document * @param array $course the _course array info of the document's course */ public static function is_visible ($doc_path, $course) { $docTable = Database::get_course_table(TABLE_DOCUMENT, $course['dbName']); $propTable = Database::get_course_table(TABLE_ITEM_PROPERTY, $course['dbName']); //note the extra / at the end of doc_path to match every path in the // document table that is part of the document path $doc_path = Database::escape_string($doc_path); $sql = "SELECT path FROM $docTable d, $propTable ip " . "where d.id=ip.ref AND ip.tool='".TOOL_DOCUMENT."' AND d.filetype='file' AND visibility=0 AND ". "locate(concat(path,'/'),'".$doc_path."/')=1"; $result = Database::query($sql); if (Database::num_rows($result) > 0){ $row = Database::fetch_array($result); //echo "$row[0] not visible"; return false; } //improved protection of documents viewable directly through the url: incorporates the same protections of the course at the url of documents: access allowed for the whole world Open, access allowed for users registered on the platform Private access, document accessible only to course members (see the Users list), Completely closed; the document is only accessible to the course admin and teaching assistants. if ($_SESSION ['is_allowed_in_course'] || api_is_platform_admin()) { return true; // ok, document is visible } else { return false; } } /** * Gets the list of included resources as a list of absolute or relative paths from a html file or string html * This allows for a better SCORM export or replace urls inside content html from copy course * The list will generally include pictures, flash objects, java applets, or any other * stuff included in the source of the current item. The current item is expected * to be an HTML file or string html. If it is not, then the function will return and empty list. * @param string source html (content or path) * @param bool is file or string html * @param string type (one of the Dokeos tools) - optional (otherwise takes the current item's type) * @param int level of recursivity we're in * @return array List of file paths. An additional field containing 'local' or 'remote' helps determine if the file should be copied into the zip or just linked */ function get_resources_from_source_html($source_html, $is_file = false, $type=null, $recursivity=1) { $max = 5; $attributes = array(); $wanted_attributes = array('src','url','@import','href','value'); $abs_path = ''; if ($recursivity > $max) { return array(); } if (!isset($type)) { $type = TOOL_DOCUMENT; } if (!$is_file) { $attributes = DocumentManager::parse_HTML_attributes($source_html,$wanted_attributes); } else { if (is_file($source_html)) { $abs_path = $source_html; //for now, read the whole file in one go (that's gonna be a problem when the file is too big) $info = pathinfo($abs_path); $ext = $info['extension']; switch (strtolower($ext)) { case 'html' : case 'htm' : case 'shtml': case 'css' : $file_content = file_get_contents($abs_path); //get an array of attributes from the HTML source $attributes = DocumentManager::parse_HTML_attributes($file_content,$wanted_attributes); break; default : break; } } else { return false; } } switch($type) { case TOOL_DOCUMENT : case TOOL_QUIZ: case 'sco': foreach($wanted_attributes as $attr) { if(isset($attributes[$attr])) { //find which kind of path these are (local or remote) $sources = $attributes[$attr]; foreach($sources as $source) { //skip what is obviously not a resource if(strpos($source,"+this.")) continue; //javascript code - will still work unaltered if(strpos($source,'.')=== false) continue; //no dot, should not be an external file anyway if(strpos($source,'mailto:')) continue; //mailto link if(strpos($source,';') && !strpos($source,'&')) continue; //avoid code - that should help if($attr == 'value') { if(strpos($source , 'mp3file')) { $files_list[] = array(substr($source, 0, strpos($source , '.swf')+4),'local','abs'); $mp3file = substr($source , strpos($source , 'mp3file=')+8); if(substr($mp3file,0,1) == '/') $files_list[] = array($mp3file,'local','abs'); else $files_list[] = array($mp3file,'local','rel'); } elseif(strpos($source, 'flv=')===0) { $source = substr($source, 4); if(strpos($source, '&')>0) { $source = substr($source,0,strpos($source, '&')); } if(strpos($source,'://')>0) { if(strpos($source,api_get_path(WEB_PATH))!==false) { //we found the current portal url $files_list[] = array($source,'local','url'); } else { //we didn't find any trace of current portal $files_list[] = array($source,'remote','url'); } } else { $files_list[] = array($source,'local','abs'); } continue; //skipping anything else to avoid two entries (while the others can have sub-files in their url, flv's can't) } } if(strpos($source,'://') > 0) { //cut at '?' in a URL with params if(strpos($source,'?')>0) { $second_part = substr($source,strpos($source,'?')); if(strpos($second_part,'://')>0) {//if the second part of the url contains a url too, treat the second one before cutting $pos1 = strpos($second_part,'='); $pos2 = strpos($second_part,'&'); $second_part = substr($second_part,$pos1+1,$pos2-($pos1+1)); if(strpos($second_part,api_get_path(WEB_PATH))!==false) { //we found the current portal url $files_list[] = array($second_part,'local','url'); $in_files_list[] = DocumentManager::get_resources_from_source_html($second_part, true, TOOL_DOCUMENT, recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } else { //we didn't find any trace of current portal $files_list[] = array($second_part,'remote','url'); } } elseif(strpos($second_part,'=')>0) { if(substr($second_part,0,1) === '/') { //link starts with a /, making it absolute (relative to DocumentRoot) $files_list[] = array($second_part,'local','abs'); $in_files_list[] = DocumentManager::get_resources_from_source_html($second_part, true, TOOL_DOCUMENT,$recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } elseif(strstr($second_part,'..') === 0) { //link is relative but going back in the hierarchy $files_list[] = array($second_part,'local','rel'); //$dir = api_get_path(SYS_CODE_PATH);//dirname($abs_path); //$new_abs_path = realpath($dir.'/'.$second_part); $dir = ''; if (!empty($abs_path)) { $dir = dirname($abs_path).'/'; } $new_abs_path = realpath($dir.$second_part); $in_files_list[] = DocumentManager::get_resources_from_source_html($new_abs_path, true, TOOL_DOCUMENT,$recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } else { //no starting '/', making it relative to current document's path if(substr($second_part,0,2) == './') { $second_part = substr($second_part,2); } $files_list[] = array($second_part,'local','rel'); $dir = ''; if (!empty($abs_path)) { $dir = dirname($abs_path).'/'; } $new_abs_path = realpath($dir.$second_part); $in_files_list[] = DocumentManager::get_resources_from_source_html($new_abs_path, true, TOOL_DOCUMENT,$recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } } //leave that second part behind now $source = substr($source,0,strpos($source,'?')); if(strpos($source,'://') > 0) { if(strpos($source,api_get_path(WEB_PATH))!==false) { //we found the current portal url $files_list[] = array($source,'local','url'); $in_files_list[] = DocumentManager::get_resources_from_source_html($source, true, TOOL_DOCUMENT, $recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } else { //we didn't find any trace of current portal $files_list[] = array($source,'remote','url'); } } else { //no protocol found, make link local if(substr($source,0,1) === '/') { //link starts with a /, making it absolute (relative to DocumentRoot) $files_list[] = array($source,'local','abs'); $in_files_list[] = DocumentManager::get_resources_from_source_html($source, true, TOOL_DOCUMENT, $recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } elseif(strstr($source,'..') === 0) { //link is relative but going back in the hierarchy $files_list[] = array($source,'local','rel'); $dir = ''; if (!empty($abs_path)) { $dir = dirname($abs_path).'/'; } $new_abs_path = realpath($dir.$source); $in_files_list[] = DocumentManager::get_resources_from_source_html($new_abs_path, true, TOOL_DOCUMENT, $recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } else { //no starting '/', making it relative to current document's path if(substr($source,0,2) == './') { $source = substr($source,2); } $files_list[] = array($source,'local','rel'); $dir = ''; if (!empty($abs_path)) { $dir = dirname($abs_path).'/'; } $new_abs_path = realpath($dir.$source); $in_files_list[] = DocumentManager::get_resources_from_source_html($new_abs_path, true, TOOL_DOCUMENT, $recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } } } //found some protocol there if(strpos($source,api_get_path(WEB_PATH))!==false) { //we found the current portal url $files_list[] = array($source,'local','url'); $in_files_list[] = DocumentManager::get_resources_from_source_html($source, true, TOOL_DOCUMENT, $recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } else { //we didn't find any trace of current portal $files_list[] = array($source,'remote','url'); } } else { //no protocol found, make link local if(substr($source,0,1) === '/') { //link starts with a /, making it absolute (relative to DocumentRoot) $files_list[] = array($source,'local','abs'); $in_files_list[] = DocumentManager::get_resources_from_source_html($source, true, TOOL_DOCUMENT, $recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } elseif(strpos($source,'..') === 0) { //link is relative but going back in the hierarchy $files_list[] = array($source,'local','rel'); $dir = ''; if (!empty($abs_path)) { $dir = dirname($abs_path).'/'; } $new_abs_path = realpath($dir.$source); $in_files_list[] = DocumentManager::get_resources_from_source_html($new_abs_path, true, TOOL_DOCUMENT,$recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } else { //no starting '/', making it relative to current document's path if(substr($source,0,2) == './') { $source = substr($source,2); } $files_list[] = array($source,'local','rel'); $dir = ''; if (!empty($abs_path)) { $dir = dirname($abs_path).'/'; } $new_abs_path = realpath($dir.$source); $in_files_list[] = DocumentManager::get_resources_from_source_html($new_abs_path, true, TOOL_DOCUMENT, $recursivity+1); if(count($in_files_list)>0) { $files_list = array_merge($files_list,$in_files_list); } } } } } } break; default: //ignore break; } $checked_files_list = array(); $checked_array_list = array(); if (count($files_list ) > 0) { foreach($files_list as $idx => $file) { if(!empty($file[0])) { if(!in_array($file[0],$checked_files_list)) { $checked_files_list[] = $files_list[$idx][0]; $checked_array_list[] = $files_list[$idx]; } } } } return $checked_array_list; } /** * Parses the HTML attributes given as string. * * @param string HTML attribute string * @param array List of attributes that we want to get back * @return array An associative array of attributes * @author Based on a function from the HTML_Common2 PEAR module */ function parse_HTML_attributes($attrString,$wanted=array()) { $attributes = array(); $regs = array(); $reduced = false; if(count($wanted)>0) { $reduced = true; } try { //Find all occurences of something that looks like a URL // The structure of this regexp is: // (find protocol) then // (optionally find some kind of space 1 or more times) then // find (either an equal sign or a bracket) followed by an optional space // followed by some text without quotes (between quotes itself or not) // then possible closing brackets if we were in the opening bracket case // OR something like @import() $res = preg_match_all( '/(((([A-Za-z_:])([A-Za-z0-9_:\.-]*))' . // '/(((([A-Za-z_:])([A-Za-z0-9_:\.-]|[^\x00-\x7F])*)' . -> seems to be taking too much // '/(((([A-Za-z_:])([^\x00-\x7F])*)' . -> takes only last letter of parameter name '([ \n\t\r]+)?(' . // '(=([ \n\t\r]+)?("[^"]+"|\'[^\']+\'|[^ \n\t\r]+))' . -> doesn't restrict close enough to the url itself '(=([ \n\t\r]+)?("[^"\)]+"|\'[^\'\)]+\'|[^ \n\t\r\)]+))' . '|' . // '(\(([ \n\t\r]+)?("[^"]+"|\'[^\']+\'|[^ \n\t\r]+)\))' . -> doesn't restrict close enough to the url itself '(\(([ \n\t\r]+)?("[^"\)]+"|\'[^\'\)]+\'|[^ \n\t\r\)]+)\))' . '))' . '|' . // '(@import([ \n\t\r]+)?("[^"]+"|\'[^\']+\'|[^ \n\t\r]+)))?/', -> takes a lot (like 100's of thousands of empty possibilities) '(@import([ \n\t\r]+)?("[^"]+"|\'[^\']+\'|[^ \n\t\r]+)))/', $attrString, $regs ); } catch (Exception $e) { error_log('Caught exception: '. $e->getMessage(),0) ; } if ($res) { for ($i = 0; $i < count($regs[1]); $i++) { $name = trim($regs[3][$i]); $check = trim($regs[0][$i]); $value = trim($regs[10][$i]); if(empty($value) and !empty($regs[13][$i])){ $value = $regs[13][$i]; } if(empty($name) && !empty($regs[16][$i])) { $name = '@import'; $value = trim($regs[16][$i]); } if(!empty($name)) { if(!$reduced OR in_array(strtolower($name),$wanted)) { if ($name == $check) { $attributes[strtolower($name)][] = strtolower($name); } else { if (!empty($value) && ($value[0] == '\'' || $value[0] == '"')) { $value = substr($value, 1, -1); } if ($value=='API.LMSGetValue(name') { $value='API.LMSGetValue(name)'; } $attributes[strtolower($name)][] = $value; } } } } }else{ error_log('preg_match did not find anything',0); } return $attributes; } /** * Replace urls inside content html from a copy course * @param string content html * @param string origin course code * @param string destination course directory * @return string new content html with replaced urls or return false if content is not a string */ function replace_urls_inside_content_html_from_copy_course($content_html, $origin_course_code, $destination_course_directory) { if (!is_string($content_html)) { return false; } $orig_source_html = DocumentManager::get_resources_from_source_html($content_html); $orig_course_info = api_get_course_info($origin_course_code); $orig_course_path = api_get_path(SYS_PATH).'courses/'.$orig_course_info['path'].'/'; $destination_course_code = CourseManager::get_course_id_from_path ($destination_course_directory); $dest_course_path = api_get_path(SYS_COURSE_PATH).$destination_course_directory.'/'; foreach ($orig_source_html as $source) { //var_dump($source); // get information about source url $real_orig_url = $source[0]; // url $scope_url = $source[1]; // scope (local, remote) $type_url = $source[2]; // tyle (rel, abs, url) // get path and query from origin url $orig_parse_url = parse_url($real_orig_url); $real_orig_path = $orig_parse_url['path']; $real_orig_query = $orig_parse_url['query']; // replace origin course code by destination course code from origin url query $dest_url_query = ''; if (!empty($real_orig_query)) { $dest_url_query = '?'.$real_orig_query; if (strpos($dest_url_query,$origin_course_code) !== false) { $dest_url_query = str_replace($origin_course_code,$destination_course_code,$dest_url_query); } } if ($scope_url == 'local') { if ( $type_url == 'abs' || $type_url == 'rel') { $document_file = strstr($real_orig_path,'document'); if (strpos($real_orig_path,$document_file) !== false) { $origin_filepath = $orig_course_path.$document_file; $destination_filepath = $dest_course_path.$document_file; // copy origin file inside destination course if (file_exists($origin_filepath)) { $filepath_dir = dirname($destination_filepath); if (!is_dir($filepath_dir)) { $perm = api_get_setting('permissions_for_new_directories'); $perm = octdec(!empty($perm)?$perm:0777); @mkdir($filepath_dir,$perm,true); } if (!file_exists($destination_filepath)) { @copy($origin_filepath,$destination_filepath); } } // replace origin course path by destination course path if (strpos($content_html,$real_orig_url) !== false) { $url_course_path = str_replace($orig_course_info['path'].'/'.$document_file,'',$real_orig_path); $destination_url = $url_course_path.$destination_course_directory.'/'.$document_file.$dest_url_query; $content_html = str_replace($real_orig_url,$destination_url, $content_html); } } // replace origin course code by destination course code from origin url if (strpos($real_orig_url,'?') === 0) { $dest_url = str_replace($origin_course_code,$destination_course_code,$real_orig_url); $content_html = str_replace($real_orig_url,$dest_url, $content_html); } } } } return $content_html; } } //end class DocumentManager ?>