File:  [LON-CAPA] / loncom / auth / lonacc.pm
Revision 1.17: download - view: text, annotated - select for diffs
Mon May 28 22:29:17 2001 UTC (23 years ago) by www
Branches: MAIN
CVS tags: HEAD
Request State more Informative

# The LearningOnline Network
# Cookie Based Access Handler
# 5/21/99,5/22,5/29,5/31,6/15,16/11,22/11,
# 01/06,01/13,05/31,06/01,09/06,09/25,09/28,10/30,11/6,
# 12/25,12/26,
# 01/06/01,05/28 Gerd Kortemeyer

package Apache::lonacc;

use strict;
use Apache::Constants qw(:common :http :methods);
use Apache::File;
use Apache::lonnet;
use CGI::Cookie();
use Fcntl qw(:flock);

sub handler {
    my $r = shift;
    my $requrl=$r->uri;
    my %cookies=CGI::Cookie->parse($r->header_in('Cookie'));
    my $lonid=$cookies{'lonID'};
    my $cookie;
    if ($lonid) {
	my $handle=$lonid->value;
        $handle=~s/\W//g;
        my $lonidsdir=$r->dir_config('lonIDsDir');
        if ((-e "$lonidsdir/$handle.id") && ($handle ne '')) {

# ------------------------------------------- Transfer profile into environment

            my @profile;
	    {
             my $idf=Apache::File->new("$lonidsdir/$handle.id");
             flock($idf,LOCK_SH);
             @profile=<$idf>;
             $idf->close();
	    }
            my $envi;
            for ($envi=0;$envi<=$#profile;$envi++) {
		chomp($profile[$envi]);
		my ($envname,$envvalue)=split(/=/,$profile[$envi]);
                $ENV{$envname} = $envvalue;
            }
            $ENV{'user.environment'} = "$lonidsdir/$handle.id";
            if ($requrl=~/^\/res\/) {
               $ENV{'request.state'} = "published";
	    } else {
	       $ENV{'request.state'} = 'unknown';
            }
            $ENV{'request.filename'} = $r->filename;

# --------------------- Figure out referer, first from HTTP_REFERER, then cache

            my $referer='';
            if ($referer=$r->header_in('Referer')) {
               $ENV{'HTTP_REFERER'}=$referer;
	    } else {
	       $ENV{'HTTP_REFERER'}=$ENV{'httpref.'.$requrl};
	    }

# -------------------------------------------------------- Load POST parameters


           
        my $buffer;

        $r->read($buffer,$r->header_in('Content-length'));

	unless ($buffer=~/^(\-+\w+)\s+Content\-Disposition\:\s*form\-data/si) {
            my @pairs=split(/&/,$buffer);
            my $pair;
            foreach $pair (@pairs) {
               my ($name,$value) = split(/=/,$pair);
               $value =~ tr/+/ /;
               $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
               $name  =~ tr/+/ /;
               $name  =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
               $ENV{"form.$name"}=$value;
            }
        } else {
	    my $contentsep=$1;
            my @lines = split (/\n/,$buffer);
            my $name='';
            my $value='';
            my $fname='';
            my $fmime='';
            my $i;
            for ($i=0;$i<=$#lines;$i++) {
		if ($lines[$i]=~/^$contentsep/) {
		    if ($name) {
                        chomp($value);
			if ($fname) {
			    $ENV{"form.$name.filename"}=$fname;
                            $ENV{"form.$name.mimetype"}=$fmime;
                        } else {
                            $value=~s/\s+$//s;
                        }
                        $ENV{"form.$name"}=$value;
                    }
                    if ($i<$#lines) {
			$i++;
                        $lines[$i]=~
		 /Content\-Disposition\:\s*form\-data\;\s*name\=\"([^\"]+)\"/i;
                        $name=$1;
                        $value='';
                        if ($lines[$i]=~/filename\=\"([^\"]+)\"/i) {
			   $fname=$1;
                           if 
                            ($lines[$i+1]=~/Content\-Type\:\s*([\w\-\/]+)/i) {
			      $fmime=$1;
                              $i++;
			   } else {
                              $fmime='';
                           }
                        } else {
			    $fname='';
                            $fmime='';
                        }
                        $i++;
                    }
                } else {
		    $value.=$lines[$i]."\n";
                }
            }
	}
            $r->method_number(M_GET);
	    $r->method('GET');
            $r->headers_in->unset('Content-length');

# ---------------------------------------------------------------- Check access

            if ($requrl!~/^\/adm\//) {
		my $access=&Apache::lonnet::allowed('bre',$requrl);
                if ($access eq '1') {
		   $ENV{'user.error.msg'}="$requrl:bre:0:0:Choose Course";
	           return HTTP_NOT_ACCEPTABLE; 
                }
                if (($access ne '2') && ($access ne 'F')) {
		   $ENV{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
	           return HTTP_NOT_ACCEPTABLE; 
                }
            } 
            return OK; 
        } else { 
            $r->log_reason("Cookie $handle not valid", $r->filename) 
        };
    }

# ----------------------------------------------- Store where they wanted to go

    $ENV{'request.firsturl'}=$requrl;
    return FORBIDDEN;
}

1;
__END__

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
500 Internal Server Error

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator at root@localhost to inform them of the time this error occurred, and the actions you performed just before this error.

More information about this error may be available in the server error log.