File:  [LON-CAPA] / loncom / auth / lonipcheck.pm
Revision 1.1: download - view: text, annotated - select for diffs
Fri Sep 5 17:43:31 2008 UTC (15 years, 7 months ago) by raeburn
Branches: MAIN
CVS tags: version_2_9_X, version_2_9_99_0, version_2_9_1, version_2_9_0, version_2_8_X, version_2_8_99_1, version_2_8_99_0, version_2_8_2, version_2_8_1, version_2_8_0, version_2_7_X, version_2_7_99_1, version_2_7_99_0, version_2_7_1, version_2_11_X, version_2_11_4_uiuc, version_2_11_4, version_2_11_3_uiuc, version_2_11_3_msu, version_2_11_3, version_2_11_2_uiuc, version_2_11_2_msu, version_2_11_2_educog, version_2_11_2, version_2_11_1, version_2_11_0_RC3, version_2_11_0_RC2, version_2_11_0_RC1, version_2_11_0, version_2_10_X, version_2_10_1, version_2_10_0_RC2, version_2_10_0_RC1, version_2_10_0, loncapaMITrelate_1, language_hyphenation_merge, language_hyphenation, bz6209-base, bz6209, bz5969, bz2851, PRINT_INCOMPLETE_base, PRINT_INCOMPLETE, HEAD, GCI_3, GCI_2, GCI_1, BZ5971-printing-apage, BZ5434-fox, BZ4492-merge, BZ4492-feature_horizontal_radioresponse, BZ4492-feature_Support_horizontal_radioresponse, BZ4492-Support_horizontal_radioresponse
Bug 5777
- IP-based access control extending to encompass additional resources (i.e., HTML files, Bulletin Boards, External Resources, Simpe Pages), beyond existing support for problem/exam/survey files.
- New lonipcheck.pm added as a chained content handler, called after londatecheck.
- &check_ip_acc() moved form lonhomework.pm to loncommon.pm to be more widely available.

# Checks IP access settings - disable subsequent PerlHandlers if client IP blocked
# $Id: lonipcheck.pm,v 1.1 2008/09/05 17:43:31 raeburn Exp $
#
# Copyright Michigan State University Board of Trustees
#
# This file is part of the LearningOnline Network with CAPA (LON-CAPA).
#
# LON-CAPA is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# LON-CAPA is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with LON-CAPA; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
#
# /home/httpd/html/adm/gpl.txt
#
# http://www.lon-capa.org/
#

use strict;
package Apache::lonipcheck;
use Apache::lonnet;
use Apache::lonlocal;
use Apache::loncommon();
use Apache::Constants qw(:common :http :methods);

sub ip_access_check {
    my $symb=$env{'request.symb'};
    if ($env{'request.state'} ne "construct") {
        my $idacc = &Apache::lonnet::EXT('resource.0.acc',$symb);
        my $allowed=&Apache::loncommon::check_ip_acc($idacc);
        if (!$allowed) {
            return('INVALID_ACCESS',
                   '<h1>'.&mt('Not open to be viewed').'</h1>'.
                   &mt("This resource can not be accessed from your location."));

        }
    }
    return ('OPEN');
}

sub handler {
    my ($r)=@_;
    if (&Apache::lonnet::allowed('bre',$r->uri) eq 'F') {
	return DECLINED;
    }
    my ($status,$msg)=&ip_access_check();
    if ($status ne 'OPEN') {
	$r->set_handlers('PerlHandler'=>undef);
	&Apache::loncommon::content_type($r,'text/html');
	$r->send_http_header;
	return OK if $r->header_only;
	my $start_page =
	    &Apache::loncommon::start_page('Not Open',undef,
					   {'bgcolor'        => '#FFFFFF',
					    'force_register' => 1,});
	my $end_page = &Apache::loncommon::end_page();
	$r->print($start_page.$msg.$end_page);

	return OK;
    }
    return DECLINED;
}
1;

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>