version 1.34, 2002/07/03 20:54:49
|
version 1.45, 2003/05/06 21:45:25
|
Line 32
|
Line 32
|
# 12/25,12/26, |
# 12/25,12/26, |
# YEAR=2001 |
# YEAR=2001 |
# 01/06/01,05/28,8/11,9/26,11/29 Gerd Kortemeyer |
# 01/06/01,05/28,8/11,9/26,11/29 Gerd Kortemeyer |
# 12/15 Scott Harrison |
|
# YEAR=2002 |
# YEAR=2002 |
# 1/4,2/25 Gerd Kortemeyer |
# 1/4,2/25 Gerd Kortemeyer |
# |
# |
Line 89 sub handler {
|
Line 88 sub handler {
|
|
|
my $buffer; |
my $buffer; |
|
|
$r->read($buffer,$r->header_in('Content-length')); |
$r->read($buffer,$r->header_in('Content-length'),0); |
|
|
unless ($buffer=~/^(\-+\w+)\s+Content\-Disposition\:\s*form\-data/si) { |
unless ($buffer=~/^(\-+\w+)\s+Content\-Disposition\:\s*form\-data/si) { |
my @pairs=split(/&/,$buffer); |
my @pairs=split(/&/,$buffer); |
my $pair; |
my $pair; |
Line 155 sub handler {
|
Line 153 sub handler {
|
|
|
# ---------------------------------------------------------------- Check access |
# ---------------------------------------------------------------- Check access |
|
|
if ($requrl!~/^\/adm\//) { |
if ($requrl!~/^\/adm|public|prtspool\//) { |
my $access=&Apache::lonnet::allowed('bre',$requrl); |
my $access=&Apache::lonnet::allowed('bre',$requrl); |
if ($access eq '1') { |
if ($access eq '1') { |
$ENV{'user.error.msg'}="$requrl:bre:0:0:Choose Course"; |
$ENV{'user.error.msg'}="$requrl:bre:0:0:Choose Course"; |
Line 166 sub handler {
|
Line 164 sub handler {
|
return HTTP_NOT_ACCEPTABLE; |
return HTTP_NOT_ACCEPTABLE; |
} |
} |
} |
} |
|
if ($requrl =~ m|^/prtspool/|) { |
|
my $start='/prtspool/'.$ENV{'user.name'}.'_'. |
|
$ENV{'user.domain'}; |
|
if ($requrl !~ /^\Q$start\E/) { |
|
$ENV{'user.error.msg'}="$requrl:bre:1:1:Access Denied"; |
|
return HTTP_NOT_ACCEPTABLE; |
|
} |
|
} |
# ------------------------------------------------------------- This is allowed |
# ------------------------------------------------------------- This is allowed |
if ($ENV{'request.course.id'}) { |
if ($ENV{'request.course.id'}) { |
&Apache::lonnet::countacc($requrl); |
&Apache::lonnet::countacc($requrl); |
$requrl=~/\.(\w+)$/; |
$requrl=~/\.(\w+)$/; |
if (&Apache::loncommon::fileembstyle($1) eq 'ssi') { |
if ((&Apache::loncommon::fileembstyle($1) eq 'ssi') || |
|
($requrl=~/^\/adm\/.*\/(aboutme|navmaps|smppg|bulletinboard)(\?|$)/) || |
|
($requrl=~/^\/adm\/wrapper\//) || |
|
($requrl=~/^\/public\/.*\/syllabus$/)) { |
# ------------------------------------- This is serious stuff, get symb and log |
# ------------------------------------- This is serious stuff, get symb and log |
my $query=$r->args; |
my $query=$r->args; |
my $symb; |
my $symb; |
Line 191 sub handler {
|
Line 200 sub handler {
|
return HTTP_NOT_ACCEPTABLE; |
return HTTP_NOT_ACCEPTABLE; |
} |
} |
} else { |
} else { |
$symb=&Apache::lonnet::symbread; |
$symb=&Apache::lonnet::symbread($requrl); |
|
my ($map,$mid,$murl)=split(/\_\_\_/,$symb); |
|
&Apache::lonnet::symblist($map,$murl => $mid, |
|
'last_known' => $murl); |
} |
} |
$ENV{'request.symb'}=$symb; |
$ENV{'request.symb'}=$symb; |
&Apache::lonnet::courseacclog($symb); |
&Apache::lonnet::courseacclog($symb); |
Line 207 sub handler {
|
Line 219 sub handler {
|
} |
} |
|
|
# -------------------------------------------- See if this is a public resource |
# -------------------------------------------- See if this is a public resource |
if (&Apache::lonnet::metadata($requrl,'copyright') eq 'public') { |
if ($requrl=~m|^/public/| |
|
|| (&Apache::lonnet::metadata($requrl,'copyright') eq 'public')) { |
&Apache::lonnet::logthis('Granting public access: '.$requrl); |
&Apache::lonnet::logthis('Granting public access: '.$requrl); |
|
my $buffer; |
|
$r->read($buffer,$r->header_in('Content-length'),0); |
|
&Apache::loncommon::get_unprocessed_cgi($buffer); |
$ENV{'user.name'}='public'; |
$ENV{'user.name'}='public'; |
$ENV{'user.domain'}='public'; |
$ENV{'user.domain'}='public'; |
$ENV{'request.state'} = "published"; |
$ENV{'request.state'} = "published"; |
Line 219 sub handler {
|
Line 235 sub handler {
|
# -------------------------------------------------------------- Not authorized |
# -------------------------------------------------------------- Not authorized |
$requrl=~/\.(\w+)$/; |
$requrl=~/\.(\w+)$/; |
if ((&Apache::loncommon::fileembstyle($1) eq 'ssi') || |
if ((&Apache::loncommon::fileembstyle($1) eq 'ssi') || |
($requrl=~/^\/adm\/(roles|logout)/)) { |
($requrl=~/^\/adm\/(roles|logout|email|menu|remote)/) || |
|
($requrl=~m|^/prtspool/|)) { |
# -------------------------- Store where they wanted to go and get login screen |
# -------------------------- Store where they wanted to go and get login screen |
$ENV{'request.firsturl'}=$requrl; |
$ENV{'request.querystring'}=$r->args; |
|
$ENV{'request.firsturl'}=$requrl; |
return FORBIDDEN; |
return FORBIDDEN; |
} else { |
} else { |
# --------------------------------------------------------------------- Goodbye |
# --------------------------------------------------------------------- Goodbye |