1: # The LearningOnline Network
2: # Cookie Based Access Handler for Construction Area
3: # (lonacc: 5/21/99,5/22,5/29,5/31 Gerd Kortemeyer)
4: # 6/15,16/11,22/11,
5: # 01/06,01/11,6/1,9/25,9/28,11/22,12/25,12/26 Gerd Kortemeyer
6:
7: package Apache::loncacc;
8:
9: use strict;
10: use Apache::Constants qw(:common :http :methods);
11: use Apache::File;
12: use CGI::Cookie();
13:
14: sub handler {
15: my $r = shift;
16: my $requrl=$r->uri;
17: my %cookies=CGI::Cookie->parse($r->header_in('Cookie'));
18: my $lonid=$cookies{'lonID'};
19: my $cookie;
20: if ($lonid) {
21: my $handle=$lonid->value;
22: $handle=~s/\W//g;
23: my $lonidsdir=$r->dir_config('lonIDsDir');
24: if ((-e "$lonidsdir/$handle.id") && ($handle ne '')) {
25: my $ownername=$requrl;
26: $ownername=~s/\/(?:\~|priv\/)(\w+).*/\1/;
27: my $ownerdomain=$r->dir_config('lonDefDomain');
28: my @handleparts=split(/\_/,$handle);
29: my $username=$handleparts[0];
30: my $domain=$handleparts[2];
31: if (($username ne $ownername) || ($domain ne $ownerdomain)) {
32: $r->log_reason
33: ("$username at $domain not authorized", $r->filename);
34: return HTTP_NOT_ACCEPTABLE;
35: }
36: my @profile;
37: {
38: my $idf=Apache::File->new("$lonidsdir/$handle.id");
39: @profile=<$idf>;
40: }
41: my $envi;
42: for ($envi=0;$envi<=$#profile;$envi++) {
43: chomp($profile[$envi]);
44: my ($envname,$envvalue)=split(/=/,$profile[$envi]);
45: $ENV{$envname} = $envvalue;
46: }
47: $ENV{'user.environment'} = "$lonidsdir/$handle.id";
48: $ENV{'request.state'} = "construct";
49: $ENV{'request.filename'} = $r->filename;
50:
51: # -------------------------------------------------------- Load POST parameters
52:
53:
54: my $buffer;
55:
56: $r->read($buffer,$r->header_in('Content-length'));
57:
58: unless ($buffer=~/^(\-+\w+)\s+Content\-Disposition\:\s*form\-data/si) {
59: my @pairs=split(/&/,$buffer);
60: my $pair;
61: foreach $pair (@pairs) {
62: my ($name,$value) = split(/=/,$pair);
63: $value =~ tr/+/ /;
64: $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
65: $name =~ tr/+/ /;
66: $name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
67: $ENV{"form.$name"}=$value;
68: }
69: } else {
70: my $contentsep=$1;
71: my @lines = split (/\n/,$buffer);
72: my $name='';
73: my $value='';
74: my $fname='';
75: my $fmime='';
76: my $i;
77: for ($i=0;$i<=$#lines;$i++) {
78: if ($lines[$i]=~/^$contentsep/) {
79: if ($name) {
80: chomp($value);
81: if ($fname) {
82: $ENV{"form.$name.filename"}=$fname;
83: $ENV{"form.$name.mimetype"}=$fmime;
84: } else {
85: $value=~s/\s+$//s;
86: }
87: $ENV{"form.$name"}=$value;
88: }
89: if ($i<$#lines) {
90: $i++;
91: $lines[$i]=~
92: /Content\-Disposition\:\s*form\-data\;\s*name\=\"([^\"]+)\"/i;
93: $name=$1;
94: $value='';
95: if ($lines[$i]=~/filename\=\"([^\"]+)\"/i) {
96: $fname=$1;
97: if
98: ($lines[$i+1]=~/Content\-Type\:\s*([\w\-\/]+)/i) {
99: $fmime=$1;
100: $i++;
101: } else {
102: $fmime='';
103: }
104: } else {
105: $fname='';
106: $fmime='';
107: }
108: $i++;
109: }
110: } else {
111: $value.=$lines[$i]."\n";
112: }
113: }
114: }
115: $r->method_number(M_GET);
116: $r->method('GET');
117: $r->headers_in->unset('Content-length');
118:
119: return OK;
120: } else {
121: $r->log_reason("Cookie $handle not valid", $r->filename)
122: };
123: }
124:
125: # ----------------------------------------------- Store where they wanted to go
126:
127: $ENV{'request.firsturl'}=$requrl;
128: return FORBIDDEN;
129: }
130:
131: 1;
132: __END__
133:
134:
135:
136:
137:
138:
139:
140:
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>