version 1.3, 2016/02/17 00:05:14
|
version 1.4, 2016/03/18 18:21:01
|
Line 44 sub handler {
|
Line 44 sub handler {
|
$request->content_type('text/plain'); |
$request->content_type('text/plain'); |
|
|
# path should be in the form "/daxeopen/priv/..." |
# path should be in the form "/daxeopen/priv/..." |
# or ^/daxeopen/uploaded/[^/]+/[^/]+/supplemental/.*html?$ |
# or ^/daxeopen/uploaded/[^/]+/[^/]+/.*html?$ |
my $path = $env{'form.path'}; |
my $path = $env{'form.path'}; |
$path =~ s/^\/daxeopen//; |
$path =~ s/^\/daxeopen//; |
|
|
Line 60 sub handler {
|
Line 60 sub handler {
|
} |
} |
} |
} |
} |
} |
} elsif ($path =~ m|^/uploaded/[^/]+/[^/]+/supplemental/|) { |
} elsif ($path =~ m|^/uploaded/[^/]+/[^/]+/|) { |
if ($env{'user.name'} ne '' && $env{'user.domain'} ne '' && $env{'request.course.id'}) { |
if ($env{'user.name'} ne '' && $env{'user.domain'} ne '' && $env{'request.course.id'}) { |
$cdom = $env{'course.'.$env{'request.course.id'}.'.domain'}; |
$cdom = $env{'course.'.$env{'request.course.id'}.'.domain'}; |
$cnum = $env{'course.'.$env{'request.course.id'}.'.num'}; |
$cnum = $env{'course.'.$env{'request.course.id'}.'.num'}; |
if ($path =~ m|^/uploaded/\Q$cdom\E/\Q$cnum\E/supplemental/| && $path !~ /\.\./) { |
if ($path =~ m|^/uploaded/\Q$cdom\E/\Q$cnum\E/| && $path !~ /\.\./) { |
if (&Apache::lonnet::allowed('mdc', $env{'request.course.id'})) { |
if (&Apache::lonnet::allowed('mdc', $env{'request.course.id'})) { |
$allowed = 1; |
$allowed = 1; |
} |
} |