--- loncom/interface/lonhelp.pm 2003/02/25 22:50:11 1.5 +++ loncom/interface/lonhelp.pm 2003/07/15 18:50:43 1.6 @@ -132,17 +132,26 @@ sub handler my $docroot = $r->dir_config('lonDocRoot'); my $serverroot = $ENV{'HTTP_HOST'}; - my $filename = substr ($ENV{'REQUEST_URI'} , + my $filenames = substr ($ENV{'REQUEST_URI'} , rindex($ENV{'REQUEST_URI'}, '/') + 1, -4); # Security check on the file; the whole filename must consist # of nothing but alphanums, ' ,, or ., or the file # will be "not found", no matter what. - return HTTP_NOT_FOUND if ($filename !~ /\A[-0-9a-zA-z_'',.]+\Z/); + return HTTP_NOT_FOUND if ($filenames !~ /\A[-0-9a-zA-z_'',.]+\Z/); - (my $file = Apache::File->new($docroot . "/adm/help/tex/".$filename.'.tex')) - or return HTTP_NOT_FOUND; + # Join together the tex files, return HTTP_NOT_FOUND if any of + # them are not found + my $tex = ''; + my @files = split(/,/, $filenames); + + for my $filename (@files) { + (my $file = Apache::File->new($docroot + . '/adm/help/tex/'.$filename.'.tex')) + or return HTTP_NOT_FOUND; + $tex .= join('', <$file>); + } # get me my environment if it exists &Apache::lonacc::handler($r); @@ -165,7 +174,6 @@ sub handler } } - my $tex = join('', <$file>); $tex = render($tex, $docroot, $serverroot); serveTex($tex, $r);