You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
153 lines
4.5 KiB
153 lines
4.5 KiB
<?php
|
|
/* For licensing terms, see /license.txt */
|
|
/**
|
|
* This script shows the list of exercises for administrators and students.
|
|
* @package chamilo.exercise
|
|
* @author Istvan Mandak
|
|
* @version $Id: Hpdownload.php 22201 2009-07-17 19:57:03Z cfasanando $
|
|
*/
|
|
/**
|
|
* Code
|
|
*/
|
|
session_cache_limiter('public');
|
|
|
|
require_once '../inc/global.inc.php';
|
|
$this_section=SECTION_COURSES;
|
|
|
|
$tbl_document = Database::get_course_table(TABLE_DOCUMENT);
|
|
|
|
$doc_url=str_replace(array('../','\\..','\\0','..\\'),array('','','',''),urldecode($_GET['doc_url']));
|
|
$filename=basename($doc_url);
|
|
|
|
// launch event
|
|
//event_download($doc_url);
|
|
if (isset($_course['path'])) {
|
|
$course_path = api_get_path(SYS_COURSE_PATH).$_course['path'].'/document';
|
|
$full_file_name = $course_path.Security::remove_XSS($doc_url);
|
|
} else {
|
|
$course_path = api_get_path(SYS_COURSE_PATH).$cid.'/document';
|
|
$full_file_name = $course_path.Security::remove_XSS($doc_url);
|
|
}
|
|
|
|
if(!is_file($full_file_name)) {
|
|
exit;
|
|
}
|
|
|
|
if (!Security::check_abs_path($full_file_name, $course_path.'/')) {
|
|
exit;
|
|
}
|
|
|
|
$extension=explode('.',$filename);
|
|
$extension=strtolower($extension[sizeof($extension)-1]);
|
|
|
|
switch($extension) {
|
|
case 'gz': $content_type='application/x-gzip'; break;
|
|
case 'zip': $content_type='application/zip'; break;
|
|
case 'pdf': $content_type='application/pdf'; break;
|
|
case 'png': $content_type='image/png'; break;
|
|
case 'gif': $content_type='image/gif'; break;
|
|
case 'jpg': $content_type='image/jpeg'; break;
|
|
case 'txt': $content_type='text/plain'; break;
|
|
case 'htm': $content_type='text/html'; break;
|
|
case 'html': $content_type='text/html'; break;
|
|
default: $content_type='application/octet-stream'; break;
|
|
}
|
|
|
|
header('Content-disposition: filename='.$filename);
|
|
header('Content-Type: '.$content_type);
|
|
header('Expires: '.gmdate('D, d M Y H:i:s',time()+10).' GMT');
|
|
header('Last-Modified: '.gmdate('D, d M Y H:i:s',time()+10).' GMT');
|
|
|
|
/*
|
|
Dynamic parsing section
|
|
is activated whenever a user views an html file
|
|
work in progress
|
|
- question: we could also parse per line,
|
|
perhaps this would be faster.
|
|
($file_content = file($full_file_name) returns file in array)
|
|
*/
|
|
|
|
if ($content_type == 'text/html') {
|
|
require_once api_get_path(LIBRARY_PATH).'fileUpload.lib.php';
|
|
$directory_name = dirname($full_file_name);
|
|
|
|
$dir=str_replace(array('\\',$_configuration['root_sys']."courses/".$_course['path'].'/document'),array('/',''),$directory_name);
|
|
|
|
if($dir[strlen($dir)-1] != '/') {
|
|
$dir.='/';
|
|
}
|
|
|
|
|
|
//Parse whole file at one
|
|
$fp = fopen($full_file_name, "r");
|
|
$file_content = fread ($fp, filesize ($full_file_name));
|
|
fclose($fp);
|
|
//$file_content = api_replace_parameter($dir, $file_content, "src");
|
|
//$file_content = api_replace_parameter($dir, $file_content, "href");
|
|
|
|
/*
|
|
//parse line per line
|
|
$file_content_array = file($full_file_name);
|
|
|
|
foreach($file_content_array as $line)
|
|
{
|
|
$line = api_replace_parameter($dir, $line, "src");
|
|
$line = api_replace_parameter($dir, $line, "href");
|
|
$file_content .= $line;
|
|
}
|
|
*/
|
|
|
|
|
|
$exercicePath = api_get_self();
|
|
$exfile = explode('/',$exercicePath);
|
|
$exfile = $exfile[sizeof($exfile)-1];
|
|
$exercicePath = substr($exercicePath,0,strpos($exercicePath,$exfile));
|
|
$exercicePath = $exercicePath;
|
|
|
|
$content = $file_content;
|
|
$mit = "function Finish(){";
|
|
|
|
$js_content = "var SaveScoreVariable = 0; // This variable included by Dokeos System\n".
|
|
"function mySaveScore() // This function included by Dokeos System\n".
|
|
"{\n".
|
|
" if (SaveScoreVariable==0)\n".
|
|
" {\n".
|
|
" SaveScoreVariable = 1;\n".
|
|
" if (C.ie)\n".
|
|
" {\n".
|
|
" document.location.href = \"".$exercicePath."savescores.php?origin=$origin&time=$time&test=".$doc_url."&uid=".$_user['user_id']."&cid=".$cid."&score=\"+Score;\n".
|
|
" //window.alert(Score);\n".
|
|
" }\n".
|
|
" else\n".
|
|
" {\n".
|
|
" }\n".
|
|
" }\n".
|
|
"}\n".
|
|
"// Must be included \n".
|
|
"function Finish(){\n".
|
|
" mySaveScore();";
|
|
$newcontent = str_replace($mit,$js_content,$content);
|
|
|
|
$prehref="javascript:void(0);";
|
|
$posthref=$_configuration['root_web']."main/exercice/Hpdownload.php?doc_url=".$doc_url."&cid=".$cid."&uid=".$uid;
|
|
$newcontent = str_replace($prehref,$posthref,$newcontent);
|
|
|
|
|
|
$prehref="class=\"GridNum\" onclick=";
|
|
$posthref="class=\"GridNum\" onMouseover=";
|
|
$newcontent = str_replace($prehref,$posthref,$newcontent);
|
|
|
|
|
|
header('Content-length: '.strlen($newcontent));
|
|
// Dipsp.
|
|
echo $newcontent;
|
|
|
|
exit();
|
|
}
|
|
|
|
//normal case, all non-html files
|
|
//header('Content-length: '.filesize($full_file_name));
|
|
$fp=fopen($full_file_name,'rb');
|
|
fpassthru($fp);
|
|
fclose($fp);
|
|
?>
|
|
|