<?php // $Id: download.php 22201 2009-07-17 19:57:03Z cfasanando $ /* For licensing terms, see /dokeos_license.txt */ /** ============================================================================== * This file is responsible for passing requested documents to the browser. * Html files are parsed to fix a few problems with URLs, * but this code will hopefully be replaced soon by an Apache URL * rewrite mechanism. * * @package dokeos.work ============================================================================== */ /* ============================================================================== MAIN CODE ============================================================================== */ session_cache_limiter('public'); require '../inc/global.inc.php'; $this_section=SECTION_COURSES; require_once(api_get_path(LIBRARY_PATH).'document.lib.php'); //include 'agenda.inc.php'; // IMPORTANT to avoid caching of documents header('Expires: Wed, 01 Jan 1990 00:00:00 GMT'); header('Cache-Control: public'); header('Pragma: no-cache'); //protection api_protect_course_script(true); $doc_url = $_GET['file']; //change the '&' that got rewritten to '///' by mod_rewrite back to '&' $doc_url = str_replace('///', '&', $doc_url); //still a space present? it must be a '+' (that got replaced by mod_rewrite) $doc_url = str_replace(' ', '+', $doc_url); $doc_url = str_replace('/..', '', $doc_url); //echo $doc_url; if (! isset($_course)) { api_not_allowed(true); } $full_file_name = api_get_path(SYS_COURSE_PATH).api_get_course_path().'/'.$doc_url; $tbl_student_publication = Database::get_course_table(TABLE_STUDENT_PUBLICATION); // launch event event_download($doc_url); $sql='SELECT title FROM '.$tbl_student_publication.' WHERE url LIKE BINARY "'.$doc_url.'"'; $result= api_sql_query($sql, __FILE__, __LINE__); $row= Database::fetch_array($result); $title = str_replace(' ','_', $row['title']); DocumentManager::file_send_for_download($full_file_name,TRUE, $title); exit; ?>