audiopost.php 2.7 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283
  1. <?php
  2. /* See license terms in /license.txt */
  3. //file_put_contents("result.txt", print_r($_POST, true));
  4. //file_put_contents("result3.txt", print_r($_FILES, true));
  5. //file_put_contents("result2.txt", print_r($_GET, true));
  6. require_once '../inc/global.inc.php';
  7. // check the request comes from our red5 server
  8. $ips = gethostbynamel(api_get_setting('service_visio','visio_host'));
  9. $is_our_server = false;
  10. // ignoring null file
  11. if ($_FILES["file"]["size"] == 0)
  12. exit(0);
  13. if(is_array($ips))
  14. {
  15. foreach($ips as $ip)
  16. {
  17. //get 255 range for known server address
  18. $split = split('.',$ip);
  19. $ip_range_server = $split[0].'.'.$split[1].'.'.$split[2];
  20. //get 255 range for request source address
  21. $split = split('.',$_SERVER['REMOTE_ADDR']);
  22. $ip_range_request = $split[0].'.'.$split[1].'.'.$split[2];
  23. if($ip_range_server == $ip_range_request){$is_our_server = true;}
  24. }
  25. }
  26. if($is_our_server)
  27. {
  28. if(api_get_setting('service_visio','active')=='true')
  29. {
  30. //check encryption key
  31. $string1 = $_GET['course_code'].$_GET['user_id'].gmdate('Ymd').$_configuration['security_key'];
  32. $string2 = $_GET['course_code'].$_GET['user_id'].(gmdate('Ymd')-1).$_configuration['security_key'];
  33. if(md5($string1) == $_GET['checker'] or md5($string2) == $_GET['checker'])
  34. {
  35. $course_info = api_get_course_info($_GET['course_code']);
  36. $target = api_get_path(SYS_COURSE_PATH).$course_info['path'].'/document/audio/';
  37. $basename = basename( $_FILES['file']['name']);
  38. $target = $target . $basename ;
  39. if(!move_uploaded_file($_FILES['file']['tmp_name'], $target))
  40. {
  41. error_log(__FILE__.':'.__LINE__.': File upload to '.$target.' failed',0);
  42. }
  43. else
  44. {
  45. require_once(api_get_path(LIBRARY_PATH).'fileUpload.lib.php');
  46. $id = add_document($course_info,'/audio/'.$basename,'file',filesize($target),$basename);
  47. if($id !== false)
  48. {
  49. $res = api_item_property_update($course_info,TOOL_DOCUMENT,$id,'DocumentAdded',$_GET['user_id']);
  50. if($res === false)
  51. {
  52. error_log(__FILE__.':'.__LINE__.': Something went wrong with item properties update of '.$target,0);
  53. }
  54. else
  55. {//make sound invisible?
  56. //$res = api_item_property_update($course_info,TOOL_DOCUMENT,$id,'invisible',$_GET['user_id']);
  57. }
  58. }
  59. else
  60. {
  61. error_log(__FILE__.':'.__LINE__.': Could not create document record for document '.$target,0);
  62. }
  63. }
  64. }
  65. else
  66. {
  67. error_log(__FILE__.':'.__LINE__.': Attempting to save file but hash check did not suceed (hacking attempt?)',0);
  68. }
  69. }
  70. else
  71. {
  72. error_log(__FILE__.':'.__LINE__.': Attempting to save file but videoconf is not enabled',0);
  73. }
  74. }
  75. else
  76. {
  77. error_log(__FILE__.':'.__LINE__.': Attempting to save file but coming from unknown source',0);
  78. }
  79. ?>