"); $filename2 = $state['filename']; //echo("
filename2 = ".$filename2."
"); $filetype="file"; //if(is_dir($filename)) if($state['folder']==1) { $filetype="folder"; $endchar=substr($filename,strlen($filename)-1,1); if($endchar=="\\" || $endchar=="/") $filename=substr($filename,0,strlen($filename)-1); } //store document in database if($state['status']=="ok" || $state['status']=="already_a_directory") { //echo $base_work_dir.$upload_path.clean_up_path($state["stored_filename"])." (".$filetype.")
"; $cleaned_up_filename = clean_up_path($filename); $file_path = $upload_path.$cleaned_up_filename; echo("file path = ".$file_path."
"); //this is a quick fix for zipfiles that have files in folders but the folder is not stored in the zipfile //if the path has folders, check if they already are in the database if(dirname('/'.$cleaned_up_filename)!='/' AND dirname('/'.$cleaned_up_filename)!='\\') { $folder_id=DocumentManager::get_document_id($_course,$upload_path.dirname($cleaned_up_filename)); if(!$folder_id) { echo($upload_path.dirname($cleaned_up_filename).' not found in database!
'); $folder_id = add_document($_course,$upload_path.dirname($cleaned_up_filename),'folder',0,basename(dirname($cleaned_up_filename))); if($folder_id) { api_item_property_update($_course,TOOL_DOCUMENT,$folder_id,'FolderAdded',$_user['user_id'],$to_group_id,$to_user_id); //echo('folder '.$upload_path.dirname($cleaned_up_filename)." added
\n"); } } } $store_path = $base_work_dir.$file_path; //echo("store path = ".$store_path."
"); $document_name = get_document_title(basename($filename)); //echo("document_name = ".$document_name."
"); //put the document data in the database //if the file/dir does not exist, just add it //if(!file_exists($store_path)) <- not working, as the file is already extracted //so we check if the document is already in the database $document_id = DocumentManager::get_document_id($_course,$file_path); if(!$document_id) { $document_id = add_document($_course,$file_path,$filetype,$state['size'],$document_name); if ($document_id) { $lastedit_type = ($filetype=='folder')?'FolderAdded':'DocumentAdded'; //update item property for document api_item_property_update($_course,TOOL_DOCUMENT,$document_id,$lastedit_type,$_user['user_id'],$to_group_id,$to_user_id); } } //file/dir exists -> update else { $lastedit_type = ($filetype=='folder')?'FolderUpdated':'DocumentUpdated'; //update the document in item_property api_item_property_update($_course,TOOL_DOCUMENT,$document_id,$lastedit_type,$_user['user_id'],$to_group_id,$to_user_id); } } } //print_r_pre($zip_content_array); //if the file is in a folder, we need to update all parent folders item_property_update_on_folder($_course,$upload_path,$_user['user_id']); //display success message to user chdir($save_dir); //return to previous dir position if($output){ Display::display_normal_message(get_lang('UplZipExtractSuccess')); } return true; } else { //zip file could not be extracted -> corrupt file Display::display_error_message(get_lang('UplZipCorrupt')); return false; } */ } //------------------------------------------------------------------------------ /** * this function is a callback function that is used while extracting a zipfile * http://www.phpconcept.net/pclzip/man/en/index.php?options-pclzip_cb_pre_extract * * @param $p_event * @param $p_header * @return 1 (If the function returns 1, then the extraction is resumed) */ function clean_up_files_in_zip($p_event, &$p_header) { $res = clean_up_path($p_header['filename']); return $res; } //------------------------------------------------------------------------------ /** * this function cleans up a given path * by eliminating dangerous file names and cleaning them * * @param string $path * @return $path * @see disable_dangerous_file() * @see replace_dangerous_char() */ function clean_up_path(&$path) { //split the path in folders and files $path_array = explode('/',$path); //clean up every foler and filename in the path $val = ''; foreach($path_array as $key => $val) { //we don't want to lose the dots in ././folder/file (cfr. zipfile) if($path_array[$key]!='.') $path_array[$key] = disable_dangerous_file( replace_dangerous_char($val) ); } //join the "cleaned" path (modified in-place as passed by reference) $path = implode('/',$path_array); $res = filter_extension($path); return $res; } /** * Check if the file is dangerous, based on extension and/or mimetype. * The list of extensions accepted/rejected can be found from * api_get_setting('upload_extensions_exclude') and api_get_setting('upload_extensions_include') * @param string filename passed by reference. The filename will be modified if filter rules say so! (you can include path but the filename should look like 'abc.html') * @return int 0 to skip file, 1 to keep file */ function filter_extension(&$filename) { if(substr($filename,-1)=='/'){return 1;} //authorize directories $blacklist = api_get_setting('upload_extensions_list_type'); if($blacklist!='whitelist')//if = blacklist { $extensions = split(';',strtolower(api_get_setting('upload_extensions_blacklist'))); $skip = api_get_setting('upload_extensions_skip'); $ext = strrchr($filename, "."); $ext = substr($ext,1); if(empty($ext)){return 1;}//we're in blacklist mode, so accept empty extensions if(in_array(strtolower($ext),$extensions)) { if($skip=='true') { return 0; } else { $new_ext = api_get_setting('upload_extensions_replace_by'); $filename = str_replace(".".$ext,".".$new_ext,$filename); return 1; } } else { return 1; } } else { $extensions = split(';',strtolower(api_get_setting('upload_extensions_whitelist'))); $skip = api_get_setting('upload_extensions_skip'); $ext = strrchr($filename, "."); $ext = substr($ext,1); if(empty($ext)){return 1;}//accept empty extensions if(!in_array(strtolower($ext),$extensions)) { if($skip=='true') { return 0; } else { $new_ext = api_get_setting('upload_extensions_replace_by'); $filename = str_replace(".".$ext,".".$new_ext,$filename); return 1; } } else { return 1; } } } //------------------------------------------------------------------------------ /** * Adds a new document to the database * * @param array $_course * @param string $path * @param string $filetype * @param int $filesize * @param string $title * @return id if inserted document */ function add_document($_course,$path,$filetype,$filesize,$title,$comment=NULL, $readonly=0) { global $charset; $session_id = api_get_session_id(); $table_document = Database::get_course_table(TABLE_DOCUMENT,$_course['dbName']); $sql="INSERT INTO $table_document (`path`, `filetype`, `size`, `title`, `comment`, `readonly`, `session_id`) VALUES ('$path','$filetype','$filesize','". Database::escape_string(htmlspecialchars($title, ENT_QUOTES, $charset))."', '$comment', $readonly, $session_id)"; if(Database::query($sql,__FILE__,__LINE__)) { //display_message("Added to database (id ".Database::insert_id().")!"); return Database::insert_id(); } else { //display_error("The uploaded file could not be added to the database (".mysql_error().")!"); return false; } } //------------------------------------------------------------------------------ /* function get_document_id() moved to document.lib.php */ //------------------------------------------------------------------------------ /** * Update an existing document in the database * as the file exists, we only need to change the size * * @param array $_course * @param int $document_id * @param int $filesize * @param int $readonly * @return boolean true /false */ function update_existing_document($_course,$document_id,$filesize,$readonly=0) { $document_table = Database::get_course_table(TABLE_DOCUMENT,$_course['dbName']); $sql="UPDATE $document_table SET size = '$filesize' , readonly = '$readonly' WHERE id='$document_id'"; if(Database::query($sql,__FILE__,__LINE__)) { return true; } else { return false; } } /** * this function updates the last_edit_date, last edit user id on all folders in a given path * * @param array $_course * @param string $path * @param int $user_id */ function item_property_update_on_folder($_course,$path,$user_id) { //display_message("Start update_lastedit_on_folder"); //if we are in the root, just return... no need to update anything if ($path=='/') return; //if the given path ends with a / we remove it $endchar=substr($path,strlen($path)-1,1); if($endchar=='/') $path=substr($path,0,strlen($path)-1); $TABLE_ITEMPROPERTY = Database::get_course_table(TABLE_ITEM_PROPERTY,$_course['dbName']); //get the time $time = date("Y-m-d H:i:s", time()); //get all paths in the given path // /folder/subfolder/subsubfolder/file // if file is updated, subsubfolder, subfolder and folder are updated $exploded_path = explode('/',$path); foreach ($exploded_path as $key => $value) { //we don't want a slash before our first slash if($key!=0){ $newpath .= "/".$value; //echo "path= ".$newpath."
"; //select ID of given folder $folder_id = DocumentManager::get_document_id($_course,$newpath); if($folder_id) { $sql = "UPDATE $TABLE_ITEMPROPERTY SET `lastedit_date`='$time',`lastedit_type`='DocumentInFolderUpdated', `lastedit_user_id`='$user_id' WHERE tool='".TOOL_DOCUMENT."' AND ref='$folder_id'"; Database::query($sql,__FILE__,__LINE__); } } } } //------------------------------------------------------------------------------ /** * Returns the directory depth of the file. * * @author Olivier Cauberghe
"; //debug //api_display_debug_info($message); $buffer = str_replace( $replace_what, $replace_by, $buffer); } $new_html_content .= $buffer; fclose ($fp) or die ('
"; //debug } //if (isset($message) && $message == true) api_display_debug_info($message); //debug $buffer = str_replace($replaceWhat, $replaceBy, $buffer); return $buffer; } //------------------------------------------------------------------------------ /** * Checks the extension of a file, if it's .htm or .html * we use search_img_from_html to get all image paths in the file * * @param string $file * @return array paths * @see check_for_missing_files() uses search_img_from_html() */ function check_for_missing_files($file) { if (strrchr($file, '.') == '.htm' || strrchr($file, '.') == '.html') { $img_file_path = search_img_from_html($file); return $img_file_path; } return false; } //------------------------------------------------------------------------------ /** * This builds a form that asks for the missing images in a html file * maybe we should do this another way? * * @param array $missing_files * @param string $upload_path * @param string $file_name * @return string the form */ function build_missing_files_form($missing_files,$upload_path,$file_name) { //do we need a / or not? $added_slash = ($upload_path=='/')?'':'/'; //build the form $form .= "
".get_lang('MissingImagesDetected')."
\n" ."\n"; return $form; } //------------------------------------------------------------------------------ /** * This recursive function can be used during the upgrade process form older versions of Dokeos * It crawls the given directory, checks if the file is in the DB and adds it if it's not * * @param string $base_work_dir * @param string $current_path, needed for recursivity */ function add_all_documents_in_folder_to_database($_course,$user_id,$base_work_dir,$current_path='',$to_group_id=0) { $current_session_id = api_get_session_id(); $path = $base_work_dir.$current_path; //open dir $handle=opendir($path); //run trough while($file=readdir($handle)) { if ($file=='.' || $file=='..') continue; $completepath="$path/$file"; //directory? if (is_dir($completepath)) { $title=get_document_title($file); $safe_file=replace_dangerous_char($file); @rename($path.'/'.$file, $path.'/'.$safe_file); //if we can't find the file, add it if(!DocumentManager::get_document_id($_course, $current_path.'/'.$safe_file)) { $document_id=add_document($_course,$current_path.'/'.$safe_file,'folder',0,$title); api_item_property_update($_course,TOOL_DOCUMENT,$document_id,'DocumentAdded',$user_id, $to_group_id,null,null,null,$current_session_id); //echo $current_path.'/'.$safe_file." added!"; } //recursive add_all_documents_in_folder_to_database($_course,$user_id,$base_work_dir,$current_path.'/'.$safe_file, $to_group_id); } //file! else { //rename $safe_file=disable_dangerous_file(replace_dangerous_char($file, 'strict')); @rename($base_work_dir.$current_path.'/'.$file,$base_work_dir.$current_path.'/'.$safe_file); if(!DocumentManager::get_document_id($_course, $current_path.'/'.$safe_file)) { $title=get_document_title($file); $size = filesize($base_work_dir.$current_path.'/'.$safe_file); $document_id = add_document($_course,$current_path.'/'.$safe_file,'file',$size,$title); api_item_property_update($_course,TOOL_DOCUMENT,$document_id,'DocumentAdded',$user_id,$to_group_id,null,null,null,$current_session_id); //echo $current_path.'/'.$safe_file." added!
"; } } } } /* ============================================================================== DEPRECATED FUNCTIONS ============================================================================== */ /** * @deprecated Use transliteration instead, it is applicable for all languages. * * Replaces all accentuated characters by non-accentuated characters for filenames, as * well as special HTML characters by their HTML entity's first letter. * * Although this method is not absolute, it gives good results in general. It first * transforms the string to HTML entities (ô, @oslash;, etc) then removes the * HTML character part to result in simple characters (o, o, etc). * In the case of special characters (out of alphabetical value) like and <, * it will still replace them by the first letter of the HTML entity (n, l, ...) but it * is still an acceptable method, knowing we're filtering filenames here... * @param string The accentuated string * @return string The escaped string, not absolutely correct but satisfying */ function replace_accents($string, $encoding = null) { /* global $charset; $string = api_htmlentities($string,ENT_QUOTES,$charset); $res = preg_replace("/&([a-z])[a-z]+;/i","$1",$string); return $res; */ return api_transliterate($string, 'x', $encoding); } /** * @deprecated Use transliteration instead, it is applicable for all languages. */ function remove_accents($string, $encoding = null) { /* $string = strtr ( $string, "�����������������������������������������������������", "AAAAAAaaaaaaOOOOOOooooooEEEEeeeeCcIIIIiiiiUUUUuuuuyNn"); return $string; */ return api_transliterate($string, 'x', $encoding); }