12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455 |
- <?php
- session_cache_limiter('none');
- require_once __DIR__.'/../inc/global.inc.php';
- $this_section = SECTION_COURSES;
- api_protect_course_script();
- if (!isset($_course)) {
- api_not_allowed(true);
- }
- $doc_url = $_GET['doc_url'];
- $doc_url = str_replace('///', '&', $doc_url);
- $doc_url = str_replace(' ', '+', $doc_url);
- $doc_url = str_replace(array('../', '\\..', '\\0', '..\\'), array('', '', '', ''), $doc_url);
- if (strpos($doc_url,'../') || strpos($doc_url,'/..')) {
- $doc_url = '';
- }
- $sys_course_path = api_get_path(SYS_COURSE_PATH).$_course['path'].'/scorm';
- $user_id = api_get_user_id();
- if ($_SESSION['oLP']) {
- $lp_id = $_SESSION['oLP']->get_id();
- $lp_item_id = $_SESSION['oLP']->current;
- $lp_item_info = new learnpathItem($lp_item_id);
- if (!empty($lp_item_info)) {
-
- $visible = learnpath::is_lp_visible_for_student($lp_id, $user_id);
- if ($visible) {
- Event::event_download($doc_url);
- if (Security::check_abs_path($sys_course_path.$doc_url, $sys_course_path.'/')) {
- $full_file_name = $sys_course_path.$doc_url;
- DocumentManager::file_send_for_download($full_file_name);
- exit;
- }
- }
-
- }
- }
- Display::display_error_message(get_lang('ProtectedDocument'));
- exit;
|