@ -4,10 +4,10 @@
use ChamiloSession as Session;
/**
* This file allows creating new svg and png documents with an online editor.
* This file allows creating new svg and png documents with an online editor.
*
* @package chamilo.document
* @todo used the document_id instead of the curdirpath
* @package chamilo.document
* @todo used the document_id instead of the curdirpath
*
* @author Juan Carlos Raña Trabado
* @since 30/january/2011
@ -30,10 +30,10 @@ $document_data = DocumentManager::get_document_data_by_id(
if (empty($document_data)) {
api_not_allowed();
} else {
$document_id = $document_data['id'];
$file_path = $document_data['path'];
$dir = dirname($document_data['path']);
$parent_id = DocumentManager::get_document_id(api_get_course_info(), $dir);
$document_id = $document_data['id'];
$file_path = $document_data['path'];
$dir = dirname($document_data['path']);
$parent_id = DocumentManager::get_document_id(api_get_course_info(), $dir);
$my_cur_dir_path = isset($_GET['curdirpath']) ? Security::remove_XSS($_GET['curdirpath']) : null;
}
@ -47,62 +47,62 @@ if ($_SESSION['paint_dir'] == '/') {
$_SESSION['paint_dir'] = '';
}
$_SESSION['paint_file'] = basename(Security::remove_XSS($file_path));
$get_file = Security::remove_XSS($file_path);
$file = basename($get_file);
$temp_file = explode(".", $file);
$filename = $temp_file[0];
$nameTools = get_lang('EditDocument').': '.$filename;
$courseDir = $_course['path'].'/document';
$is_allowed_to_edit = api_is_allowed_to_edit(null, true);
/* Other initialization code */
/* Please, do not modify this dirname formatting */
if (strstr($dir, '..')) {
$dir = '/';
$dir = '/';
}
if ($dir[0] == '.') {
$dir = substr($dir, 1);
$dir = substr($dir, 1);
}
if ($dir[0] != '/') {
$dir = '/'.$dir;
$dir = '/'.$dir;
}
if ($dir[strlen($dir) - 1] != '/') {
$dir .= '/';
$dir .= '/';
}
$filepath = api_get_path(SYS_COURSE_PATH).$_course['path'].'/document'.$dir;
if (!is_dir($filepath)) {
$filepath = api_get_path(SYS_COURSE_PATH).$_course['path'].'/document/';
$dir = '/';
$filepath = api_get_path(SYS_COURSE_PATH).$_course['path'].'/document/';
$dir = '/';
}
//groups //TODO:clean
if (!empty($groupId)) {
$interbreadcrumb[] = array(
'url' => api_get_path(WEB_CODE_PATH).'group/group_space.php?'.api_get_cidreq(),
'name' => get_lang('GroupSpace'),
);
$group_document = true;
$noPHP_SELF = true;
$interbreadcrumb[] = array(
'url' => api_get_path(WEB_CODE_PATH).'group/group_space.php?'.api_get_cidreq(),
'name' => get_lang('GroupSpace'),
);
$group_document = true;
$noPHP_SELF = true;
}
$is_certificate_mode = DocumentManager::is_certificate_mode($dir);
if (!$is_certificate_mode)
$interbreadcrumb[] = array("url" => "./document.php?curdirpath=".urlencode($my_cur_dir_path).'& '.api_get_cidreq(), "name"=> get_lang('Documents'));
else
$interbreadcrumb[] = array('url' => '../gradebook/'.$_SESSION['gradebook_dest'], 'name' => get_lang('Gradebook'));
if (!$is_certificate_mode) {
$interbreadcrumb[] = array(
"url" => "./document.php?curdirpath=".urlencode($my_cur_dir_path).'& '.api_get_cidreq(),
"name" => get_lang('Documents')
);
} else {
$interbreadcrumb[] = array(
'url' => '../gradebook/'.$_SESSION['gradebook_dest'],
'name' => get_lang('Gradebook')
);
}
// Interbreadcrumb for the current directory root path
if (empty($document_data['parents'])) {
@ -120,7 +120,7 @@ $is_allowedToEdit = api_is_allowed_to_edit(null, true) || $groupRights ||
DocumentManager::is_my_shared_folder(api_get_user_id(), $dir, $current_session_id);
if (!$is_allowedToEdit) {
api_not_allowed(true);
api_not_allowed(true);
}
Event::event_access_tool(TOOL_DOCUMENT);
@ -142,31 +142,27 @@ $loc = $langpixlr; // deprecated ?? TODO:check pixlr read user browser
$exit_path = api_get_path(WEB_CODE_PATH).'document/exit_pixlr.php';
$_SESSION['exit_pixlr'] = Security::remove_XSS($parent_id);
$referrer = "Chamilo";
$target_path = api_get_path(WEB_CODE_PATH).'document/save_pixlr.php';
$target = $target_path;
$locktarget = "true";
$locktitle = "false";
if ($_SERVER['HTTP_HOST'] == "localhost") {
$path_and_file = api_get_path(SYS_PATH).'/crossdomain.xml';
if (!file_exists($path_and_file)) {
$crossdomain = '<? xml version = "1.0" ?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
< cross-domain-policy >
< allow-access-from domain = "cdn.pixlr.com" / >
< site-control permitted-cross-domain-policies = "master-only" / >
< allow-http-request-headers-from domain = "cnd.pixlr.com" headers = "*" secure = "true" / >
< / cross-domain-policy > ';//more open domain="*"
@file_put_contents($path_and_file, $crossdomain);
}
$credentials = "true";
}
else {
$credentials = "false";
$path_and_file = api_get_path(SYS_PATH).'/crossdomain.xml';
if (!file_exists($path_and_file)) {
$crossdomain = '<? xml version = "1.0" ?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
< cross-domain-policy >
< allow-access-from domain = "cdn.pixlr.com" / >
< site-control permitted-cross-domain-policies = "master-only" / >
< allow-http-request-headers-from domain = "cnd.pixlr.com" headers = "*" secure = "true" / >
< / cross-domain-policy > ';//more open domain="*"
@file_put_contents($path_and_file, $crossdomain);
}
$credentials = "true";
} else {
$credentials = "false";
}
//make temp images
@ -178,24 +174,22 @@ if (!file_exists($temp_folder)) {
//make htaccess with allow from all, and file index.html into temp/images
$htaccess = api_get_path(SYS_ARCHIVE_PATH).'temp/images/.htaccess';
if (!file_exists($htaccess)) {
$htaccess_content = "order deny,allow\r\nallow from all\r\nOptions -Indexes";
$fp = @ fopen(api_get_path(SYS_ARCHIVE_PATH).'temp/images/.htaccess', 'w');
if ($fp) {
fwrite($fp, $htaccess_content);
fclose($fp);
}
$htaccess_content = "order deny,allow\r\nallow from all\r\nOptions -Indexes";
$fp = @ fopen(api_get_path(SYS_ARCHIVE_PATH).'temp/images/.htaccess', 'w');
if ($fp) {
fwrite($fp, $htaccess_content);
fclose($fp);
}
}
$html_index = api_get_path(SYS_ARCHIVE_PATH).'temp/images/index.html';
if (!file_exists($html_index)) {
$html_index_content = "< html > < head > < / head > < body > < / body > < / html > ";
$fp = @ fopen(api_get_path(SYS_ARCHIVE_PATH).'temp/images/index.html', 'w');
if ($fp) {
fwrite($fp, $html_index_content);
fclose($fp);
}
$html_index_content = "< html > < head > < / head > < body > < / body > < / html > ";
$fp = @ fopen(api_get_path(SYS_ARCHIVE_PATH).'temp/images/index.html', 'w');
if ($fp) {
fwrite($fp, $html_index_content);
fclose($fp);
}
}
//encript temp name file
@ -217,9 +211,7 @@ $pixlr_url = api_get_protocol().'://pixlr.com/editor/?title='.$title.'&image='.$
//make frame an send image
?>
< script type = "text/javascript" >
< script >
document.write ('< iframe id = "frame" frameborder = "0" scrolling = "no" src = " <?php echo $pixlr_url ; ?> " width = "100%" height = "100%" >< noframes >< p > Sorry, your browser does not handle frames</ p ></ noframes ></ iframe > ');
function resizeIframe() {
var height = window.innerHeight;
jmontoyaa
7 years ago