create_paint.php 5.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This file allows creating audio files from a text.
  5. *
  6. * @package chamilo.document
  7. *
  8. * @author Juan Carlos Raña Trabado
  9. * @since 30/January/2011
  10. * @todo clean all file
  11. */
  12. /* INIT SECTION */
  13. require_once '../inc/global.inc.php';
  14. $_SESSION['whereami'] = 'document/createpaint';
  15. $this_section = SECTION_COURSES;
  16. $nameTools = get_lang('PhotoRetouching');
  17. api_protect_course_script();
  18. api_block_anonymous_users();
  19. if (api_get_setting('enabled_support_paint') == 'false') {
  20. api_not_allowed(true);
  21. }
  22. $document_data = DocumentManager::get_document_data_by_id($_GET['id'], api_get_course_id(), true);
  23. if (empty($document_data)) {
  24. if (api_is_in_group()) {
  25. $group_properties = GroupManager::get_group_properties(api_get_group_id());
  26. $document_id = DocumentManager::get_document_id(api_get_course_info(), $group_properties['directory']);
  27. $document_data = DocumentManager::get_document_data_by_id($document_id, api_get_course_id());
  28. }
  29. }
  30. $document_id = $document_data['id'];
  31. $dir = $document_data['path'];
  32. //$dir = isset($_GET['dir']) ? Security::remove_XSS($_GET['dir']) : Security::remove_XSS($_POST['dir']);
  33. $is_allowed_to_edit = api_is_allowed_to_edit(null, true);
  34. //path for pixlr save
  35. $_SESSION['paint_dir']=Security::remove_XSS($dir);
  36. if ($_SESSION['paint_dir']=='/'){
  37. $_SESSION['paint_dir']='';
  38. }
  39. $_SESSION['paint_file']=get_lang('NewImage');
  40. // Please, do not modify this dirname formatting
  41. if (strstr($dir, '..')) {
  42. $dir = '/';
  43. }
  44. if ($dir[0] == '.') {
  45. $dir = substr($dir, 1);
  46. }
  47. if ($dir[0] != '/') {
  48. $dir = '/'.$dir;
  49. }
  50. if ($dir[strlen($dir) - 1] != '/') {
  51. $dir .= '/';
  52. }
  53. $filepath = api_get_path(SYS_COURSE_PATH).$_course['path'].'/document'.$dir;
  54. if (!is_dir($filepath)) {
  55. $filepath = api_get_path(SYS_COURSE_PATH).$_course['path'].'/document/';
  56. $dir = '/';
  57. }
  58. $groupId = api_get_group_id();
  59. if (!empty($groupId)) {
  60. $interbreadcrumb[] = array ("url" => "../group/group_space.php?".api_get_cidreq(), "name" => get_lang('GroupSpace'));
  61. $noPHP_SELF = true;
  62. $group = GroupManager::get_group_properties($groupId);
  63. $path = explode('/', $dir);
  64. if ('/'.$path[1] != $group['directory']) {
  65. api_not_allowed(true);
  66. }
  67. }
  68. $interbreadcrumb[] = array ("url" => "./document.php?curdirpath=".urlencode($dir)."&".api_get_cidreq(), "name" => get_lang('Documents'));
  69. if (!$is_allowed_in_course) {
  70. api_not_allowed(true);
  71. }
  72. if (!($is_allowed_to_edit || $_SESSION['group_member_with_upload_rights'] ||
  73. DocumentManager::is_my_shared_folder($_user['user_id'], Security::remove_XSS($dir),api_get_session_id()))) {
  74. api_not_allowed(true);
  75. }
  76. /* Header */
  77. Event::event_access_tool(TOOL_DOCUMENT);
  78. $display_dir = $dir;
  79. if (isset ($group)) {
  80. $display_dir = explode('/', $dir);
  81. unset ($display_dir[0]);
  82. unset ($display_dir[1]);
  83. $display_dir = implode('/', $display_dir);
  84. }
  85. // Interbreadcrumb for the current directory root path
  86. if (empty($document_data['parents'])) {
  87. $interbreadcrumb[] = array('url' => '#', 'name' => $document_data['title']);
  88. } else {
  89. foreach($document_data['parents'] as $document_sub_data) {
  90. $interbreadcrumb[] = array('url' => $document_sub_data['document_url'], 'name' => $document_sub_data['title']);
  91. }
  92. }
  93. Display :: display_header($nameTools, 'Doc');
  94. echo '<div class="actions">';
  95. echo '<a href="document.php?id='.$document_id.'">'.
  96. Display::return_icon('back.png',get_lang('BackTo').' '.get_lang('DocumentsOverview'),'',ICON_SIZE_MEDIUM).'</a>';
  97. echo '</div>';
  98. ///pixlr
  99. // max size 1 Mb ??
  100. $title = urlencode(utf8_encode(get_lang('NewImage')));//TODO:check
  101. //
  102. $image = api_get_path(WEB_IMG_PATH) . 'canvas1024x768.png';
  103. //
  104. $pixlr_code_translation_table = array('' => 'en', 'pt' => 'pt-Pt', 'sr' => 'sr_latn');
  105. $langpixlr = api_get_language_isocode();
  106. $langpixlr = isset($pixlr_code_translation_table[$langpixlr]) ? $pixlredit_code_translation_table[$langpixlr] : $langpixlr;
  107. $loc=$langpixlr;// deprecated ?? TODO:check pixlr read user browser
  108. $exit_path=api_get_path(WEB_CODE_PATH).'document/exit_pixlr.php';
  109. $_SESSION['exit_pixlr']=$document_data['path'];
  110. $referrer="Chamilo";
  111. $target_path=api_get_path(WEB_CODE_PATH).'document/save_pixlr.php';
  112. $target=$target_path;
  113. $locktarget="true";
  114. $locktitle="false";
  115. if ($_SERVER['HTTP_HOST']=="localhost") {
  116. $path_and_file= api_get_path(SYS_SERVER_ROOT_PATH).'/crossdomain.xml';
  117. if (!file_exists($path_and_file)) {
  118. $crossdomain='<?xml version="1.0"?>
  119. <!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
  120. <cross-domain-policy>
  121. <allow-access-from domain="cdn.pixlr.com" />
  122. <site-control permitted-cross-domain-policies="master-only"/>
  123. <allow-http-request-headers-from domain="cnd.pixlr.com" headers="*" secure="true"/>
  124. </cross-domain-policy>';//more open domain="*"
  125. @file_put_contents($path_and_file, $crossdomain);
  126. }
  127. $credentials="true";
  128. } else {
  129. $credentials="false";
  130. }
  131. $pixlr_url = api_get_protocol().'://pixlr.com/editor/?title='.$title.'&image='.$image.'&loc='.$loc.'&referrer='.$referrer.'&target='.$target.'&exit='.$exit_path.'&locktarget='.$locktarget.'&locktitle='.$locktitle.'&credentials='.$credentials;
  132. ?>
  133. <script type="text/javascript">
  134. document.write ('<iframe id="frame" frameborder="0" scrolling="no" src="<?php echo $pixlr_url; ?>" width="100%" height="100%"><noframes><p>Sorry, your browser does not handle frames</p></noframes></iframe></div>');
  135. function resizeIframe() {
  136. var height = window.innerHeight;
  137. //max lower size
  138. if (height<600) {
  139. height=600;
  140. }
  141. document.getElementById('frame').style.height = height +"px";
  142. };
  143. document.getElementById('frame').onload = resizeIframe;
  144. window.onresize = resizeIframe;
  145. </script>
  146. <?php
  147. echo '<noscript>';
  148. echo '<iframe style="height: 600px; width: 100%;" scrolling="no" frameborder="0" src="'.$pixlr_url.'"><noframes><p>Sorry, your browser does not handle frames</p></noframes></iframe>';
  149. echo '</noscript>';
  150. Display::display_footer();