Annotation of loncom/homework/daxesave.pm, revision 1.3

1.1       damieng     1: # The LearningOnline Network
                      2: # Convert and save a problem from Daxe.
                      3: #
1.3     ! damieng     4: # $Id: daxesave.pm,v 1.2 2015/12/10 16:26:43 damieng Exp $
1.1       damieng     5: #
                      6: # Copyright Michigan State University Board of Trustees
                      7: #
                      8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
                      9: #
                     10: # LON-CAPA is free software; you can redistribute it and/or modify
                     11: # it under the terms of the GNU General Public License as published by
                     12: # the Free Software Foundation; either version 2 of the License, or
                     13: # (at your option) any later version.
                     14: #
                     15: # LON-CAPA is distributed in the hope that it will be useful,
                     16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
                     17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
                     18: # GNU General Public License for more details.
                     19: #
                     20: # You should have received a copy of the GNU General Public License
                     21: # along with LON-CAPA; if not, write to the Free Software
                     22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
                     23: #
                     24: # /home/httpd/html/adm/gpl.txt
                     25: #
                     26: # http://www.lon-capa.org/
                     27: #
                     28: ###
                     29: 
                     30: package Apache::daxesave;
                     31: 
                     32: use Apache::Constants;
                     33: use Apache::lonnet;
                     34: use Try::Tiny;
                     35: use File::Copy;
                     36: 
                     37: use Apache::lonacc;
                     38: use Apache::loncommon;
                     39: use Apache::xml_to_loncapa;
                     40: 
                     41: sub handler {
                     42:     my $request = shift;
                     43:     
1.2       damieng    44:     $request->content_type('text/plain');
                     45:     
1.3     ! damieng    46:     # path should be in the form "/daxeopen/priv/..."
        !            47:     # or ^/daxeopen/uploaded/[^/]+/[^/]+/supplemental/.*html?$
        !            48:     my $path = $env{'form.path'};
1.1       damieng    49:     $path =~ s/^\/daxeopen//;
                     50:     
1.3     ! damieng    51:     my $allowed = 0;
        !            52:     if ($path =~ /^\/priv/) {
        !            53:         my ($ownername,$ownerdom,$ownerhome) = 
        !            54:             &Apache::lonnet::constructaccess($path, 'setpriv');
        !            55:         if (($ownername ne '') && ($ownerdom ne '') && ($ownerhome ne '')) {
        !            56:             unless ($ownerhome eq 'no_host') {
        !            57:                 my @hosts = &Apache::lonnet::current_machine_ids();
        !            58:                 if (grep(/^\Q$ownerhome\E$/,@hosts)) {
        !            59:                     $allowed = 1;
        !            60:                 }
        !            61:             }
        !            62:         }
        !            63:     } elsif ($path =~ m|^/uploaded/[^/]+/[^/]+/supplemental/|) {
        !            64:         if ($env{'user.name'} ne '' && $env{'user.domain'} ne '' && $env{'request.course.id'}) {
        !            65:             $cdom = $env{'course.'.$env{'request.course.id'}.'.domain'};
        !            66:             $cnum = $env{'course.'.$env{'request.course.id'}.'.num'};
        !            67:             if ($path =~ m|^/uploaded/\Q$cdom\E/\Q$cnum\E/supplemental/| && $path !~ /\.\./) {
        !            68:                 if (&Apache::lonnet::allowed('mdc', $env{'request.course.id'})) {
        !            69:                     $allowed = 1;
        !            70:                 }
1.1       damieng    71:             }
                     72:         }
                     73:     }
                     74:     unless ($allowed) {
1.2       damieng    75:         $request->log_reason("Unauthorized path: $path", $path);
                     76:         $request->print("error\nUnauthorized path: $path");
                     77:         $request->status(403);
                     78:         return OK;
1.1       damieng    79:     }
                     80: 
                     81:     my $newpath = &Apache::lonnet::filelocation('', $path);
                     82: 
                     83:     my $contents = $env{'form.file'};
                     84:     
                     85:     try {
                     86:         $contents = &Apache::xml_to_loncapa::convert_file($contents);
                     87:     } catch {
                     88:         $request->print("error\nconvert failed for $path: $_");
                     89:         return OK;
                     90:     };
                     91:     
                     92:     my $filebak = $newpath.".bak";
                     93:     if (-e $newpath) {
                     94:         copy($newpath, $filebak); # errors ignored
                     95:     }
                     96:     open my $out, '>:encoding(UTF-8)', $newpath;
                     97:     print $out $contents;
                     98:     close $out;
                     99:     
                    100:     $request->print("ok\n");
                    101:     return OK;
                    102: }
                    103: 
                    104: 1;
                    105: __END__

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>