Replacing is_allowed_in_course validation with the more complete function: api_protect_course_script()

main/newscorm/back_compat.inc.php

@@ -11,7 +11,6 @@
  * Code
  */
 require_once '../inc/global.inc.php';
-require_once api_get_path(LIBRARY_PATH).'database.lib.php';
 require_once api_get_path(LIBRARY_PATH).'document.lib.php';
 require_once api_get_path(LIBRARY_PATH).'fileDisplay.lib.php';
 require_once api_get_path(LIBRARY_PATH).'fileUpload.lib.php'; // replace_dangerous_char()

main/newscorm/learnpath.class.php

@@ -2589,7 +2589,6 @@ class learnpath {
                 'type'          => $this->items[$item_id]->get_type(),
                 'description'   => $this->items[$item_id]->get_description(),
                 'path'          => $this->items[$item_id]->get_path(),
-
             );
         }
         if ($this->debug > 2) {

main/newscorm/lp_controller.php

@@ -78,9 +78,11 @@ if ($debug > 0) error_log('New LP - Included back_compat', 0);
 
 $session_id = api_get_session_id();
 
-if (!$is_allowed_in_course) {
+api_protect_course_script(true);
+
+/*if (!$is_allowed_in_course) {
     api_not_allowed(true);
-}
+}*/
 
 require_once api_get_path(LIBRARY_PATH).'fckeditor/fckeditor.php';
 $lpfound = false;

main/newscorm/lp_edit.php

@@ -14,7 +14,9 @@ $show_description_field = false; //for now
 $nameTools = get_lang('Doc');
 $this_section = SECTION_COURSES;
 event_access_tool(TOOL_LEARNPATH);
-if (! $is_allowed_in_course) api_not_allowed();
+
+api_protect_course_script();
+//if (! $is_allowed_in_course) api_not_allowed();
 
 if (isset($_SESSION['gradebook'])) {
     $gradebook = $_SESSION['gradebook'];

main/newscorm/lp_list.php

@@ -39,7 +39,8 @@ function confirmation(name) {
 $nameTools = get_lang('LearningPaths');
 event_access_tool(TOOL_LEARNPATH);
 
-if (!$is_allowed_in_course) api_not_allowed();
+api_protect_course_script();
+//if (!$is_allowed_in_course) api_not_allowed();
 
 /**
  * Display

main/newscorm/lp_view.php

@@ -31,7 +31,8 @@ require_once 'scorm.lib.php';
 require_once 'learnpath.class.php';
 require_once 'learnpathItem.class.php';
 
-if (!$is_allowed_in_course) api_not_allowed();
+api_protect_course_script();
+//if (!$is_allowed_in_course) api_not_allowed(); 
 
 $oLearnpath     = false;
 $course_code    = api_get_course_id();
@@ -342,17 +343,17 @@ if ($_SESSION['oLP']->mode == 'embedframe' ||$_SESSION['oLP']->get_hide_toc_fram
         <div id="media"  <?php echo $style_media; ?>>
             <?php echo (!empty($mediaplayer)) ? $mediaplayer : '&nbsp;' ?>
         </div>
-        <!-- end media player layaout -->
+        <!-- end media player layout -->
 
-        <!-- toc layout -->
+        <!-- TOC layout -->
         <!-- hub 26-05-2010 remove height for lp toc height resizable
         <div id="toc_id" name="toc_name"  style="overflow: auto; padding:0;margin-top:20px;height:60%;width:100%">
         -->
         <div id="toc_id" name="toc_name"  style="overflow: auto; padding:0;margin-top:20px;width:100%">
-            <div id="learning_path_toc" style="font-size:9pt;margin:0;"><?php echo $_SESSION['oLP']->get_html_toc(); ?>
+            <div id="learning_path_toc" style="font-size:9pt;margin:0;">
+                <?php echo $_SESSION['oLP']->get_html_toc(); ?>
 
-        <?php if (!empty($_SESSION['oLP']->scorm_debug)) { //only show log
+                <?php  if (!empty($_SESSION['oLP']->scorm_debug)) { //only show log  ?>
-        ?>
                 <!-- log message layout -->
                 <div id="lp_log_name" name="lp_log_name" class="lp_log" style="height:150px;overflow:auto;margin:4px">
                     <div id="log_content"></div>
@@ -362,7 +363,7 @@ if ($_SESSION['oLP']->mode == 'embedframe' ||$_SESSION['oLP']->get_hide_toc_fram
                 <?php } ?>
             </div>
         </div>
-        <!-- end toc layout -->
+        <!-- end TOC layout -->
     </div>
     <!-- end left Zone -->
 

main/newscorm/scorm_admin.php

@@ -54,7 +54,9 @@ $dialogbox = '';
 
 $course_id = api_get_course_int_id();
 
-if (! $is_allowed_in_course) api_not_allowed();
+api_protect_course_script();
+
+//if (! $is_allowed_in_course) api_not_allowed();
 $is_allowedToUnzip = $is_courseAdmin;
 
 /* Main code */