You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
351 lines
15 KiB
351 lines
15 KiB
2 years ago
|
<?php
|
||
|
|
// This file is part of Moodle - http://moodle.org/
|
||
|
|
//
|
||
|
|
// Moodle is free software: you can redistribute it and/or modify
|
||
|
|
// it under the terms of the GNU General Public License as published by
|
||
|
|
// the Free Software Foundation, either version 3 of the License, or
|
||
|
|
// (at your option) any later version.
|
||
|
|
//
|
||
|
|
// Moodle is distributed in the hope that it will be useful,
|
||
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
|
|
// GNU General Public License for more details.
|
||
|
|
//
|
||
|
|
// You should have received a copy of the GNU General Public License
|
||
|
|
// along with Moodle. If not, see <http://www.gnu.org/licenses/>.
|
||
|
|
|
||
|
|
|
||
|
|
/**
|
||
|
|
* The Web service script that is called from the filepicker front end
|
||
|
|
*
|
||
|
|
* @since Moodle 2.0
|
||
|
|
* @package repository
|
||
|
|
* @copyright 2009 Dongsheng Cai {@link http://dongsheng.org}
|
||
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
|
||
|
|
*/
|
||
|
|
|
||
|
|
define('AJAX_SCRIPT', true);
|
||
|
|
|
||
|
|
require_once(__DIR__ . '/../config.php');
|
||
|
|
require_once(__DIR__ . '/../lib/filelib.php');
|
||
|
|
require_once(__DIR__.'/lib.php');
|
||
|
|
|
||
|
|
$err = new stdClass();
|
||
|
|
|
||
|
|
// Parameters
|
||
|
|
$action = optional_param('action', '', PARAM_ALPHA);
|
||
|
|
$repo_id = optional_param('repo_id', 0, PARAM_INT); // Repository ID
|
||
|
|
$contextid = optional_param('ctx_id', SYSCONTEXTID, PARAM_INT); // Context ID
|
||
|
|
$env = optional_param('env', 'filepicker', PARAM_ALPHA); // Opened in editor or moodleform
|
||
|
|
$license = optional_param('license', $CFG->sitedefaultlicense, PARAM_TEXT);
|
||
|
|
$author = optional_param('author', '', PARAM_TEXT); // File author
|
||
|
|
$source = optional_param('source', '', PARAM_RAW); // File to download
|
||
|
|
$sourcekey = optional_param('sourcekey', '', PARAM_RAW); // Used to verify the source.
|
||
|
|
$itemid = optional_param('itemid', 0, PARAM_INT); // Itemid
|
||
|
|
$page = optional_param('page', '', PARAM_RAW); // Page
|
||
|
|
$maxbytes = optional_param('maxbytes', 0, PARAM_INT); // Maxbytes
|
||
|
|
$req_path = optional_param('p', '', PARAM_RAW); // Path
|
||
|
|
$accepted_types = optional_param_array('accepted_types', '*', PARAM_RAW);
|
||
|
|
$saveas_filename = optional_param('title', '', PARAM_FILE); // save as file name
|
||
|
|
$areamaxbytes = optional_param('areamaxbytes', FILE_AREA_MAX_BYTES_UNLIMITED, PARAM_INT); // Area max bytes.
|
||
|
|
$saveas_path = optional_param('savepath', '/', PARAM_PATH); // save as file path
|
||
|
|
$search_text = optional_param('s', '', PARAM_CLEANHTML);
|
||
|
|
$linkexternal = optional_param('linkexternal', '', PARAM_ALPHA);
|
||
|
|
$usefilereference = optional_param('usefilereference', false, PARAM_BOOL);
|
||
|
|
$usecontrolledlink = optional_param('usecontrolledlink', false, PARAM_BOOL);
|
||
|
|
|
||
|
|
list($context, $course, $cm) = get_context_info_array($contextid);
|
||
|
|
require_login($course, false, $cm, false, true);
|
||
|
|
$PAGE->set_context($context);
|
||
|
|
|
||
|
|
echo $OUTPUT->header(); // send headers
|
||
|
|
|
||
|
|
// If uploaded file is larger than post_max_size (php.ini) setting, $_POST content will be empty.
|
||
|
|
if (empty($_POST) && !empty($action)) {
|
||
|
|
$err->error = get_string('errorpostmaxsize', 'repository');
|
||
|
|
die(json_encode($err));
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!confirm_sesskey()) {
|
||
|
|
$err->error = get_string('invalidsesskey', 'error');
|
||
|
|
die(json_encode($err));
|
||
|
|
}
|
||
|
|
|
||
|
|
// Get repository instance information
|
||
|
|
$repooptions = array(
|
||
|
|
'ajax' => true,
|
||
|
|
'mimetypes' => $accepted_types
|
||
|
|
);
|
||
|
|
|
||
|
|
ajax_capture_output();
|
||
|
|
$repo = repository::get_repository_by_id($repo_id, $contextid, $repooptions);
|
||
|
|
|
||
|
|
// Check permissions
|
||
|
|
$repo->check_capability();
|
||
|
|
|
||
|
|
$coursemaxbytes = 0;
|
||
|
|
if (!empty($course)) {
|
||
|
|
$coursemaxbytes = $course->maxbytes;
|
||
|
|
}
|
||
|
|
// Make sure maxbytes passed is within site filesize limits.
|
||
|
|
$maxbytes = get_user_max_upload_file_size($context, $CFG->maxbytes, $coursemaxbytes, $maxbytes);
|
||
|
|
|
||
|
|
// Wait as long as it takes for this script to finish
|
||
|
|
core_php_time_limit::raise();
|
||
|
|
|
||
|
|
// These actions all occur on the currently active repository instance
|
||
|
|
switch ($action) {
|
||
|
|
case 'sign':
|
||
|
|
case 'signin':
|
||
|
|
case 'list':
|
||
|
|
if ($repo->check_login()) {
|
||
|
|
$listing = repository::prepare_listing($repo->get_listing($req_path, $page));
|
||
|
|
$listing['repo_id'] = $repo_id;
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($listing);
|
||
|
|
break;
|
||
|
|
} else {
|
||
|
|
$action = 'login';
|
||
|
|
}
|
||
|
|
case 'login':
|
||
|
|
$listing = $repo->print_login();
|
||
|
|
$listing['repo_id'] = $repo_id;
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($listing);
|
||
|
|
break;
|
||
|
|
case 'logout':
|
||
|
|
$logout = $repo->logout();
|
||
|
|
$logout['repo_id'] = $repo_id;
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($logout);
|
||
|
|
break;
|
||
|
|
case 'searchform':
|
||
|
|
$search_form['repo_id'] = $repo_id;
|
||
|
|
$search_form['form'] = $repo->print_search();
|
||
|
|
$search_form['allowcaching'] = true;
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($search_form);
|
||
|
|
break;
|
||
|
|
case 'search':
|
||
|
|
$search_result = repository::prepare_listing($repo->search($search_text, (int)$page));
|
||
|
|
$search_result['repo_id'] = $repo_id;
|
||
|
|
$search_result['issearchresult'] = true;
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($search_result);
|
||
|
|
break;
|
||
|
|
case 'download':
|
||
|
|
// validate mimetype
|
||
|
|
$mimetypes = array();
|
||
|
|
if ((is_array($accepted_types) and in_array('*', $accepted_types)) or $accepted_types == '*') {
|
||
|
|
$mimetypes = '*';
|
||
|
|
} else {
|
||
|
|
foreach ($accepted_types as $type) {
|
||
|
|
$mimetypes[] = mimeinfo('type', $type);
|
||
|
|
}
|
||
|
|
if (!in_array(mimeinfo('type', $saveas_filename), $mimetypes)) {
|
||
|
|
throw new moodle_exception('invalidfiletype', 'repository', '', get_mimetype_description(array('filename' => $saveas_filename)));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// We have two special repository type need to deal with
|
||
|
|
// local and recent plugins don't added new files to moodle, just add new records to database
|
||
|
|
// so we don't check user quota and maxbytes here
|
||
|
|
$allowexternallink = (int)get_config(null, 'repositoryallowexternallinks');
|
||
|
|
if (!empty($allowexternallink)) {
|
||
|
|
$allowexternallink = true;
|
||
|
|
} else {
|
||
|
|
$allowexternallink = false;
|
||
|
|
}
|
||
|
|
// allow external links in url element all the time
|
||
|
|
$allowexternallink = ($allowexternallink || ($env == 'url'));
|
||
|
|
|
||
|
|
// Validate the sourcekey.
|
||
|
|
if (empty($sourcekey)) {
|
||
|
|
throw new moodle_exception('missingsourcekey', 'repository');
|
||
|
|
}
|
||
|
|
|
||
|
|
// Check that the sourcekey matches.
|
||
|
|
if (sha1($source . repository::get_secret_key() . sesskey()) !== $sourcekey) {
|
||
|
|
throw new moodle_exception('sourcekeymismatch', 'repository');
|
||
|
|
}
|
||
|
|
|
||
|
|
$reference = $repo->get_file_reference($source);
|
||
|
|
|
||
|
|
// Use link of the files
|
||
|
|
if ($allowexternallink and $linkexternal === 'yes' and ($repo->supported_returntypes() & FILE_EXTERNAL)) {
|
||
|
|
// use external link
|
||
|
|
$link = $repo->get_link($reference);
|
||
|
|
$info = array();
|
||
|
|
$info['file'] = $saveas_filename;
|
||
|
|
$info['type'] = 'link';
|
||
|
|
$info['url'] = $link;
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($info);
|
||
|
|
die;
|
||
|
|
} else {
|
||
|
|
$fs = get_file_storage();
|
||
|
|
|
||
|
|
// Prepare file record.
|
||
|
|
$record = new stdClass();
|
||
|
|
$record->filepath = $saveas_path;
|
||
|
|
$record->filename = $saveas_filename;
|
||
|
|
$record->component = 'user';
|
||
|
|
$record->filearea = 'draft';
|
||
|
|
$record->itemid = $itemid;
|
||
|
|
$record->license = $license;
|
||
|
|
$record->author = $author;
|
||
|
|
|
||
|
|
if ($record->filepath !== '/') {
|
||
|
|
$record->filepath = trim($record->filepath, '/');
|
||
|
|
$record->filepath = '/'.$record->filepath.'/';
|
||
|
|
}
|
||
|
|
$usercontext = context_user::instance($USER->id);
|
||
|
|
$now = time();
|
||
|
|
$record->contextid = $usercontext->id;
|
||
|
|
$record->timecreated = $now;
|
||
|
|
$record->timemodified = $now;
|
||
|
|
$record->userid = $USER->id;
|
||
|
|
$record->sortorder = 0;
|
||
|
|
|
||
|
|
// Check that user has permission to access this file
|
||
|
|
if (!$repo->file_is_accessible($source)) {
|
||
|
|
throw new file_exception('storedfilecannotread');
|
||
|
|
}
|
||
|
|
|
||
|
|
// {@link repository::build_source_field()}
|
||
|
|
$sourcefield = $repo->get_file_source_info($source);
|
||
|
|
$record->source = $repo::build_source_field($sourcefield);
|
||
|
|
|
||
|
|
// If file is already a reference, set $source = file source, $repo = file repository
|
||
|
|
// note that in this case user may not have permission to access the source file directly
|
||
|
|
// so no file_browser/file_info can be used below
|
||
|
|
if ($repo->has_moodle_files()) {
|
||
|
|
$file = repository::get_moodle_file($reference);
|
||
|
|
if ($file && $file->is_external_file()) {
|
||
|
|
$sourcefield = $file->get_source(); // remember the original source
|
||
|
|
$record->source = $repo::build_source_field($sourcefield);
|
||
|
|
$record->contenthash = $file->get_contenthash();
|
||
|
|
$record->filesize = $file->get_filesize();
|
||
|
|
$reference = $file->get_reference();
|
||
|
|
$repo_id = $file->get_repository_id();
|
||
|
|
$repo = repository::get_repository_by_id($repo_id, $contextid, $repooptions);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($usefilereference || $usecontrolledlink) {
|
||
|
|
if ($repo->has_moodle_files()) {
|
||
|
|
$sourcefile = repository::get_moodle_file($reference);
|
||
|
|
$record->contenthash = $sourcefile->get_contenthash();
|
||
|
|
$record->filesize = $sourcefile->get_filesize();
|
||
|
|
}
|
||
|
|
|
||
|
|
// Check if file exists.
|
||
|
|
if (repository::draftfile_exists($itemid, $saveas_path, $saveas_filename)) {
|
||
|
|
// File name being used, rename it.
|
||
|
|
$unused_filename = repository::get_unused_filename($itemid, $saveas_path, $saveas_filename);
|
||
|
|
$record->filename = $unused_filename;
|
||
|
|
// Create a file copy using unused filename.
|
||
|
|
$storedfile = $fs->create_file_from_reference($record, $repo_id, $reference);
|
||
|
|
|
||
|
|
$event = array();
|
||
|
|
$event['event'] = 'fileexists';
|
||
|
|
$event['newfile'] = new stdClass;
|
||
|
|
$event['newfile']->filepath = $saveas_path;
|
||
|
|
$event['newfile']->filename = $unused_filename;
|
||
|
|
$event['newfile']->url = moodle_url::make_draftfile_url($itemid, $saveas_path, $unused_filename)->out();
|
||
|
|
|
||
|
|
$event['existingfile'] = new stdClass;
|
||
|
|
$event['existingfile']->filepath = $saveas_path;
|
||
|
|
$event['existingfile']->filename = $saveas_filename;
|
||
|
|
$event['existingfile']->url = moodle_url::make_draftfile_url($itemid, $saveas_path, $saveas_filename)->out();
|
||
|
|
} else {
|
||
|
|
|
||
|
|
$storedfile = $fs->create_file_from_reference($record, $repo_id, $reference);
|
||
|
|
$event = array(
|
||
|
|
'url'=>moodle_url::make_draftfile_url($storedfile->get_itemid(), $storedfile->get_filepath(), $storedfile->get_filename())->out(),
|
||
|
|
'id'=>$storedfile->get_itemid(),
|
||
|
|
'file'=>$storedfile->get_filename(),
|
||
|
|
'icon' => $OUTPUT->image_url(file_file_icon($storedfile, 32))->out(),
|
||
|
|
);
|
||
|
|
}
|
||
|
|
// Repository plugin callback
|
||
|
|
// You can cache reository file in this callback
|
||
|
|
// or complete other tasks.
|
||
|
|
$repo->cache_file_by_reference($reference, $storedfile);
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($event);
|
||
|
|
die;
|
||
|
|
} else if ($repo->has_moodle_files()) {
|
||
|
|
// Some repository plugins (local, user, coursefiles, recent) are hosting moodle
|
||
|
|
// internal files, we cannot use get_file method, so we use copy_to_area method
|
||
|
|
|
||
|
|
// If the moodle file is an alias we copy this alias, otherwise we copy the file
|
||
|
|
// {@link repository::copy_to_area()}.
|
||
|
|
$fileinfo = $repo->copy_to_area($reference, $record, $maxbytes, $areamaxbytes);
|
||
|
|
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($fileinfo);
|
||
|
|
die;
|
||
|
|
} else {
|
||
|
|
// Download file to moodle.
|
||
|
|
$downloadedfile = $repo->get_file($reference, $saveas_filename);
|
||
|
|
|
||
|
|
if (!empty($downloadedfile['newfilename'])) {
|
||
|
|
$record->filename = $downloadedfile['newfilename'];
|
||
|
|
}
|
||
|
|
if (empty($downloadedfile['path'])) {
|
||
|
|
$err->error = get_string('cannotdownload', 'repository');
|
||
|
|
die(json_encode($err));
|
||
|
|
}
|
||
|
|
|
||
|
|
// Check if exceed maxbytes.
|
||
|
|
if ($maxbytes != -1 && filesize($downloadedfile['path']) > $maxbytes) {
|
||
|
|
$maxbytesdisplay = display_size($maxbytes);
|
||
|
|
throw new file_exception('maxbytesfile', (object) array('file' => $record->filename,
|
||
|
|
'size' => $maxbytesdisplay));
|
||
|
|
}
|
||
|
|
|
||
|
|
// Check if we exceed the max bytes of the area.
|
||
|
|
if (file_is_draft_area_limit_reached($itemid, $areamaxbytes, filesize($downloadedfile['path']))) {
|
||
|
|
throw new file_exception('maxareabytes');
|
||
|
|
}
|
||
|
|
|
||
|
|
$info = repository::move_to_filepool($downloadedfile['path'], $record);
|
||
|
|
if (empty($info)) {
|
||
|
|
$info['e'] = get_string('error', 'moodle');
|
||
|
|
}
|
||
|
|
}
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($info);
|
||
|
|
die;
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case 'upload':
|
||
|
|
$result = $repo->upload($saveas_filename, $maxbytes);
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($result);
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'overwrite':
|
||
|
|
// existing file
|
||
|
|
$filepath = required_param('existingfilepath', PARAM_PATH);
|
||
|
|
$filename = required_param('existingfilename', PARAM_FILE);
|
||
|
|
// user added file which needs to replace the existing file
|
||
|
|
$newfilepath = required_param('newfilepath', PARAM_PATH);
|
||
|
|
$newfilename = required_param('newfilename', PARAM_FILE);
|
||
|
|
|
||
|
|
$info = repository::overwrite_existing_draftfile($itemid, $filepath, $filename, $newfilepath, $newfilename);
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode($info);
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'deletetmpfile':
|
||
|
|
// delete tmp file
|
||
|
|
$newfilepath = required_param('newfilepath', PARAM_PATH);
|
||
|
|
$newfilename = required_param('newfilename', PARAM_FILE);
|
||
|
|
ajax_check_captured_output();
|
||
|
|
echo json_encode(repository::delete_tempfile_from_draft($itemid, $newfilepath, $newfilename));
|
||
|
|
|
||
|
|
break;
|
||
|
|
}
|