| Commit | Line | Data |
|---|---|---|
| d92e7c4d | 1 | <?php |
| 2 | ||
| 3 | // This file is part of Moodle - http://moodle.org/ | |
| 4 | // | |
| 5 | // Moodle is free software: you can redistribute it and/or modify | |
| 6 | // it under the terms of the GNU General Public License as published by | |
| 7 | // the Free Software Foundation, either version 3 of the License, or | |
| 8 | // (at your option) any later version. | |
| 9 | // | |
| 10 | // Moodle is distributed in the hope that it will be useful, | |
| 11 | // but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 12 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 13 | // GNU General Public License for more details. | |
| 14 | // | |
| 15 | // You should have received a copy of the GNU General Public License | |
| 16 | // along with Moodle. If not, see <http://www.gnu.org/licenses/>. | |
| 17 | ||
| 18 | /** | |
| 19a2b80f | 19 | * This script serves draft files of current user |
| d92e7c4d | 20 | * |
| 64f93798 | 21 | * @package core |
| d92e7c4d | 22 | * @subpackage file |
| 23 | * @copyright 2008 Petr Skoda (http://skodak.org) | |
| 24 | * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later | |
| 25 | */ | |
| 26 | ||
| 2e9b772f PS |
27 | // disable moodle specific debug messages and any errors in output |
| 28 | define('NO_DEBUG_DISPLAY', true); | |
| 29 | ||
| d92e7c4d | 30 | require_once('config.php'); |
| 31 | require_once('lib/filelib.php'); | |
| 32 | ||
| 33 | require_login(); | |
| 34 | if (isguestuser()) { | |
| 35 | print_error('noguest'); | |
| 36 | } | |
| 37 | ||
| d92e7c4d | 38 | $relativepath = get_file_argument(); |
| 39 | ||
| 40 | // relative path must start with '/' | |
| 41 | if (!$relativepath) { | |
| 42 | print_error('invalidargorconf'); | |
| 43 | } else if ($relativepath{0} != '/') { | |
| 44 | print_error('pathdoesnotstartslash'); | |
| 45 | } | |
| 46 | ||
| 47 | // extract relative path components | |
| 48 | $args = explode('/', ltrim($relativepath, '/')); | |
| 49 | ||
| 50 | if (count($args) == 0) { // always at least user id | |
| 51 | print_error('invalidarguments'); | |
| 52 | } | |
| 53 | ||
| 54 | $contextid = (int)array_shift($args); | |
| 64f93798 PS |
55 | $component = array_shift($args); |
| 56 | $filearea = array_shift($args); | |
| 57 | $draftid = (int)array_shift($args); | |
| 58 | ||
| 59 | if ($component !== 'user' or $filearea !== 'draft') { | |
| 60 | send_file_not_found(); | |
| 61 | } | |
| d92e7c4d | 62 | |
| 63 | $context = get_context_instance_by_id($contextid); | |
| 64 | if ($context->contextlevel != CONTEXT_USER) { | |
| 64f93798 | 65 | send_file_not_found(); |
| d92e7c4d | 66 | } |
| 67 | ||
| 68 | $userid = $context->instanceid; | |
| 69 | if ($USER->id != $userid) { | |
| 70 | print_error('invaliduserid'); | |
| 71 | } | |
| 72 | ||
| 4149edbd | 73 | |
| d92e7c4d | 74 | $fs = get_file_storage(); |
| 7070268e | 75 | |
| 64f93798 PS |
76 | $relativepath = implode('/', $args); |
| 77 | $fullpath = "/$context->id/user/draft/$draftid/$relativepath"; | |
| 7070268e | 78 | |
| d92e7c4d | 79 | if (!$file = $fs->get_file_by_hash(sha1($fullpath)) or $file->get_filename() == '.') { |
| 80 | send_file_not_found(); | |
| 81 | } | |
| 7070268e | 82 | |
| d92e7c4d | 83 | // ======================================== |
| 84 | // finally send the file | |
| 85 | // ======================================== | |
| 86 | session_get_instance()->write_close(); // unlock session during fileserving | |
| 87 | send_stored_file($file, 0, false, true); // force download - security first! |
