12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879 |
- <?php
- session_cache_limiter('public');
- $this_section=SECTION_COURSES;
- require_once 'forumconfig.inc.php';
- header('Expires: Wed, 01 Jan 1990 00:00:00 GMT');
- header('Cache-Control: public');
- header('Pragma: no-cache');
- api_protect_course_script(true);
- $doc_url = $_GET['file'];
- $doc_url = str_replace('///', '&', $doc_url);
- $doc_url = str_replace(' ', '+', $doc_url);
- $doc_url = str_replace('/..', '', $doc_url);
- if (! isset($_course)) {
- api_not_allowed(true);
- }
- $full_file_name = api_get_path(SYS_COURSE_PATH).api_get_course_path().'/upload/forum/'.$doc_url;
- if (is_dir($full_file_name)) {
-
-
-
- while ($doc_url{$dul = strlen($doc_url)-1}=='/') $doc_url = substr($doc_url,0,$dul);
-
- $document_explorer = api_get_path(WEB_COURSE_PATH).api_get_course_path();
-
- header('Location: '.$document_explorer);
- }
- $tbl_forum_attachment = Database::get_course_table(TABLE_FORUM_ATTACHMENT);
- $tbl_forum_post = Database::get_course_table(TABLE_FORUM_POST);
- $course_id = api_get_course_int_id();
- event_download($doc_url);
- $sql='SELECT thread_id, forum_id,filename FROM '.$tbl_forum_post.' f INNER JOIN '.$tbl_forum_attachment.' a
- ON a.post_id=f.post_id
- WHERE f.c_id = '.$course_id.' AND a.c_id = '.$course_id.' AND path LIKE BINARY "'.$doc_url.'"';
- $result = Database::query($sql);
- $row = Database::fetch_array($result);
- $forum_thread_visibility = api_get_item_visibility(api_get_course_info($course_code),TOOL_FORUM_THREAD,$row['thread_id'], api_get_session_id());
- $forum_forum_visibility = api_get_item_visibility(api_get_course_info($course_code),TOOL_FORUM,$row['forum_id'], api_get_session_id());
- if ($forum_thread_visibility==1 && $forum_forum_visibility==1) {
- if (Security::check_abs_path($full_file_name, api_get_path(SYS_COURSE_PATH).api_get_course_path().'/upload/forum/')) {
- DocumentManager::file_send_for_download($full_file_name, TRUE, $row['filename']);
- }
- }
- exit;
|