123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125 |
- <?php // $Id: download.php 22201 2009-07-17 19:57:03Z cfasanando $
- /*
- ==============================================================================
- Dokeos - elearning and course management software
- Copyright (c) 2004 Dokeos S.A.
- Copyright (c) 2003 Ghent University (UGent)
- Copyright (c) 2001 Universite catholique de Louvain (UCL)
- Copyright (c) Olivier Brouckaert
- Copyright (c) Roan Embrechts
- Copyright (c) Sergio A. Kessler aka "sak"
- For a full list of contributors, see "credits.txt".
- The full license can be read in "license.txt".
- This program is free software; you can redistribute it and/or
- modify it under the terms of the GNU General Public License
- as published by the Free Software Foundation; either version 2
- of the License, or (at your option) any later version.
- See the GNU General Public License for more details.
- Contact: Dokeos, 181 rue Royale, B-1000 Brussels, Belgium, info@dokeos.com
- ==============================================================================
- */
- /**
- ==============================================================================
- * This file is responsible for passing requested documents to the browser.
- * Html files are parsed to fix a few problems with URLs,
- * but this code will hopefully be replaced soon by an Apache URL
- * rewrite mechanism.
- *
- * @package dokeos.document
- ==============================================================================
- */
- /*
- ==============================================================================
- FUNCTIONS
- ==============================================================================
- */
- /* file_html_dynamic_parsing removed */
- /* other functions updated and moved to lib/document.lib.php */
- /*
- ==============================================================================
- MAIN CODE
- ==============================================================================
- */
- session_cache_limiter('none');
- require_once '../inc/global.inc.php';
- $this_section=SECTION_COURSES;
- require_once api_get_path(LIBRARY_PATH).'document.lib.php';
- $doc_url = $_GET['doc_url'];
- //change the '&' that got rewritten to '///' by mod_rewrite back to '&'
- $doc_url = str_replace('///', '&', $doc_url);
- //still a space present? it must be a '+' (that got replaced by mod_rewrite)
- $doc_url = str_replace(' ', '+', $doc_url);
- $doc_url = str_replace(array('../','\\..','\\0','..\\'),array('','','',''), $doc_url); //echo $doc_url;
- // dealing with image included into survey: when users receive a link towards a
- // survey while not being authenticated on the plateform.
- // the administrator should probably be able to disable this code through admin
- // inteface
- $refer_script = strrchr($_SERVER["HTTP_REFERER"],'/');
- if (substr($refer_script,0,15) == "/fillsurvey.php") {
- $invitation = substr(strstr($refer_script, 'invitationcode='),15);
- $course = strstr($refer_script, 'course=');
- $course = substr($course, 7, strpos($course, '&')-7);
- include ("../survey/survey.download.inc.php");
- $_course = check_download_survey($course, $invitation, $doc_url);
- $_course['path']=$_course['directory'];
- } else {
- //protection
- api_protect_course_script();
- if (! isset($_course))
- {
- api_not_allowed(true);
- }
- //if the rewrite rule asks for a directory, we redirect to the document explorer
- if(is_dir(api_get_path(SYS_COURSE_PATH).$_course['path']."/document".$doc_url))
- {
- //remove last slash if present
- //$doc_url = ($doc_url{strlen($doc_url)-1}=='/')?substr($doc_url,0,strlen($doc_url)-1):$doc_url;
- //mod_rewrite can change /some/path/ to /some/path// in some cases, so clean them all off (Ren�)
- while ($doc_url{$dul = strlen($doc_url)-1}=='/') $doc_url = substr($doc_url,0,$dul);
- //group folder?
- $gid_req = ($_GET['gidReq'])?'&gidReq='.Security::remove_XSS($_GET['gidReq']):'';
- //create the path
- $document_explorer = api_get_path(WEB_CODE_PATH).'document/document.php?curdirpath='.urlencode($doc_url).'&cidReq='.Security::remove_XSS($_GET['cidReq']).$gid_req;
- //redirect
- header('Location: '.$document_explorer);
- }
- // launch event
- event_download($doc_url);
- }
- $sys_course_path = api_get_path(SYS_COURSE_PATH);
- $full_file_name = $sys_course_path.$_course['path'].'/document'.$doc_url;
- // check visibility of document and paths
- $is_allowed_to_edit = api_is_allowed_to_edit();
- if (!$is_allowed_to_edit &&
- !DocumentManager::is_visible($doc_url, $_course)){
- echo "document not visible"; //api_not_allowed backbutton won't work
- exit; // you shouldn't be here anyway
- }
- DocumentManager::file_send_for_download($full_file_name);
- ?>
|