--- loncom/interface/portfolio.pm 2013/04/24 02:23:51 1.242 +++ loncom/interface/portfolio.pm 2023/01/23 18:09:36 1.254.2.6.2.1 @@ -1,7 +1,7 @@ # The LearningOnline Network # portfolio browser # -# $Id: portfolio.pm,v 1.242 2013/04/24 02:23:51 raeburn Exp $ +# $Id: portfolio.pm,v 1.254.2.6.2.1 2023/01/23 18:09:36 raeburn Exp $ # # Copyright Michigan State University Board of Trustees # @@ -98,7 +98,7 @@ sub display_common { my $help_fileupload = &Apache::loncommon::help_open_topic('Portfolio AddFiles'); my $help_createdir = &Apache::loncommon::help_open_topic('Portfolio CreateDirectory'); my $help_portfolio = &Apache::loncommon::help_open_topic('Portfolio About', &mt('Help on the portfolio')); - $r->print(&display_usage($group)); + $r->print(&display_portfolio_usage($group,$help_portfolio)); my $parse_check; if (!&suppress_embed_prompt()) { $parse_check = <<"END"; @@ -112,14 +112,17 @@ sub display_common { END } - $r->print('
'.$help_portfolio); + # Find space available before uploading + my $free_space = &free_space($group); + # Upload File $r->print('
' .'
' .'
' .''.$lt{'upload_label'}.'' .$groupitem - .'' + .'' + .'' .'' .'' .'' @@ -149,7 +152,6 @@ END .'' .'
' ); - $r->print('
'); } # end "if can_upload" my @tree = split (/\//,$current_path); @@ -188,46 +190,22 @@ END $r->print(""); } -sub display_usage { - my ($group) = @_; +sub display_portfolio_usage { + my ($group,$helpitem) = @_; my $disk_quota = &get_quota($group); my $getpropath = 1; my $portfolio_root = &get_portfolio_root(); my ($uname,$udom) = &get_name_dom($group); my $current_disk_usage = &Apache::lonnet::diskusage($udom,$uname,$portfolio_root,$getpropath); - my $usage = $current_disk_usage/1000; - my $quota = $disk_quota/1000; - my $percent; - if ($disk_quota == 0) { - $percent = 100.0; - } else { - $percent = 100*($current_disk_usage/$disk_quota); - } - $usage = sprintf("%.2f",$usage); - $quota = sprintf("%.2f",$quota); - $percent = sprintf("%.0f",$percent); - my ($color,$cssclass); - if ($percent <= 60) { - $color = '#00A000'; - } elsif ($percent > 60 && $percent < 90) { - $color = '#FFD300'; - $cssclass = 'class="LC_warning"'; - } elsif( $percent >= 90) { - $color = '#FF0000'; - $cssclass = 'class="LC_error"'; - } - my $prog_width = $percent; - if ($prog_width > 100) { - $prog_width = 100; - } - my $disk_meter = ' -
'.&mt('Currently using [_1] of the [_2] available.',$usage.' MB ('.$percent.'%)',$quota.' MB')."\n". -'
'."\n". -'
'."\n". -'
'."\n". -'
'; - return &Apache::loncommon::head_subbox($disk_meter); + return &Apache::loncommon::head_subbox( + '
' + .$helpitem + .'
' + .'
' + .&Apache::lonhtmlcommon::display_usage($current_disk_usage, + $disk_quota,'portfolio') + .'
'); } sub display_directory_line { @@ -563,7 +541,7 @@ sub display_directory {


- +

'); @@ -640,7 +618,7 @@ sub display_file { sub done { my ($linktext,$url)=@_; - unless (defined $linktext) { + unless (defined($linktext)) { $linktext='Return to directory'; } my %anchor_fields = ( @@ -919,6 +897,8 @@ sub display_access { my $aclcount = keys(%access_controls); my ($header,$info); if ($action eq 'chgaccess') { + my $uhome = &Apache::lonnet::homeserver($uname,$udom); + my $prefix = &Apache::lonnet::url_prefix($r,$udom,$uhome,'web'); $header = '

' .&mt('Allowing others to retrieve file: [_1]' @@ -931,15 +911,15 @@ sub display_access { $info .= '
  • '.&mt('Passphrase-protected files do not require log-in, but will require the viewer to enter the passphrase you set.'); $info .= '
  • '.&explain_conditionals(); $info .= '
  • '. - &mt('A listing of files viewable without log-in is available at: ')."".&Apache::lonnet::absolute_url($ENV{'SERVER_NAME'})."/adm/$udom/$uname/aboutme/portfolio.
    "; + &mt('A listing of files viewable without log-in is available at: ')."$prefix/adm/$udom/$uname/aboutme/portfolio.
    "; if ($group eq '') { $info .= &mt("For logged in users a 'Display file listing' link will also appear (when there are viewable files) on your personal information page:"); } else { $info .= &mt("For logged in users a 'Display file listing' link will also appear (when there are viewable files) on the course information page:"); } - $info .= "
    ".&Apache::lonnet::absolute_url($ENV{'SERVER_NAME'})."/adm/$udom/$uname/aboutme
    "; + $info .= "
    $prefix/adm/$udom/$uname/aboutme
    "; if ($group ne '') { - $info .= &mt("Users with privileges to edit course contents may add a course information page to a course using the 'Course Info' button in DOCS").'
    '; + $info .= &mt("Users with course editing rights may add a 'Group Portfolio' item using the Course Editor (Collaboration tab), to provide access to viewable group portfolio files.").'
    '; } } else { $header = '

    '.&mt('Conditional access controls for file: [_1]',$port_path.$env{'form.currentpath'}.$env{'form.access'}).'

    '. @@ -969,9 +949,11 @@ sub display_access { sub explain_conditionals { return - &mt('Conditional files are accessible to logged-in users with accounts in the LON-CAPA network, who satisfy the conditions you set.').'
    '."\n". - &mt('The conditions can include affiliation with a particular course or community, or a user account in a specific domain.').'
    '."\n". - &mt('Alternatively access can be granted to people with specific LON-CAPA usernames and domains.'); + &mt('Conditional files are accessible to users who satisfy the conditions you set.').'
    '; } sub view_access_settings { @@ -1012,8 +994,9 @@ sub build_access_summary { domains => 'Conditional: domain-based', users => 'Conditional: user-based', course => 'Conditional: course/community-based', + ip => 'Conditional: IP-based', ); - my @allscopes = ('public','guest','domains','users','course'); + my @allscopes = ('public','guest','domains','users','course','ip'); foreach my $scope (@allscopes) { if ((!(exists($todisplay{$scope}))) || (ref($todisplay{$scope}) ne 'HASH')) { next; @@ -1090,6 +1073,9 @@ sub build_access_summary { } elsif ($scope eq 'users') { my $curr_user_list = &sort_users($content->{'users'}); $r->print(&mt('Users: ').$curr_user_list); + } elsif ($scope eq 'ip') { + my $curr_ips_list = &sort_ips($content->{'ip'}); + $r->print(&mt('IP(s):').' '.$curr_ips_list); } else { $r->print(' '); } @@ -1198,7 +1184,7 @@ sub update_access { my $totalnew = 0; my $status = 'new'; my ($firstitem,$lastitem); - my @types = ('course','domains','users'); + my @types = ('course','domains','users','ip'); foreach my $newitem (@types) { $allnew += $env{'form.new'.$newitem}; } @@ -1206,24 +1192,30 @@ sub update_access { my $now = time; my $then = $now + (60*60*24*180); # six months approx. &open_form($r,$url); - my %showtypes = &Apache::lonlocal::texthash ( + my %showtypes = ( course => 'course/community', domains => 'domain', users => 'user', + ip => 'IP', ); foreach my $newitem (@types) { - if ($env{'form.new'.$newitem} > 0) { - $r->print('
    '.&mt('Add new [_1]-based[_2] access control for portfolio file: [_3]',''.$showtypes{$newitem},'',''.$env{'form.currentpath'}.$env{'form.selectfile'}.'').'

    '); - $firstitem = $totalnew; - $lastitem = $totalnew + $env{'form.new'.$newitem}; - $totalnew = $lastitem; - my @numbers; - for (my $i=$firstitem; $i<$lastitem; $i++) { - push (@numbers,$i); - } - &display_access_row($r,$status,$newitem,\@numbers, - $access_controls{$file_name},$now,$then); + next if ($env{'form.new'.$newitem} <= 0); + $r->print( + '

    ' + .&mt('Add new [_1]'.$showtypes{$newitem}.'-based[_2] access control for portfolio file: [_3]', + '','', + '' + .$env{'form.currentpath'}.$env{'form.selectfile'}.'') + .'

    '); + $firstitem = $totalnew; + $lastitem = $totalnew + $env{'form.new'.$newitem}; + $totalnew = $lastitem; + my @numbers; + for (my $i=$firstitem; $i<$lastitem; $i++) { + push(@numbers,$i); } + &display_access_row($r,$status,$newitem,\@numbers, + $access_controls{$file_name},$now,$then); } &close_form($r,$url); } else { @@ -1308,6 +1300,13 @@ sub build_access_record { 'udom' => $udom }); } + } elsif ($scope eq 'ip') { + my $ipslist = $env{'form.ips_'.$num}; + $ipslist =~ s/\s+//sg; + my %ipshash = map { ($_,1) } (split(/,/,$ipslist)); + foreach my $ip (keys(%ipshash)) { + push(@{$record->{'ip'}},$ip); + } } return $record; } @@ -1333,6 +1332,13 @@ sub sort_users { return $curr_user_list; } +sub sort_ips { + my ($ips) = @_; + if (ref($ips) eq 'ARRAY') { + return join(",\n",sort(@{$ips})); + } +} + sub access_setting_table { my ($r,$url,$filename,$access_controls,$action) = @_; my ($public,$publictext); @@ -1342,6 +1348,7 @@ sub access_setting_table { my @courses = (); my @domains = (); my @users = (); + my @ips = (); my $now = time; my $then = $now + (60*60*24*180); # six months approx. my ($num,$scope,$publicnum,$guestnum); @@ -1364,6 +1371,8 @@ sub access_setting_table { push(@domains,$key); } elsif ($scope eq 'users') { push(@users,$key); + } elsif ($scope eq 'ip') { + push(@ips,$key); } } $acl_count{$scope} ++; @@ -1375,7 +1384,7 @@ sub access_setting_table { $guesttext,$access_controls,%conditionals); } else { &condition_setting($r,$access_controls,$now,$then,\%acl_count, - \@domains,\@users,\@courses); + \@domains,\@users,\@courses,\@ips); } $r->print(''); } @@ -1420,14 +1429,14 @@ sub standard_settings { $r->print(&Apache::loncommon::end_data_table_row()); $r->print(&Apache::loncommon::end_data_table()); $r->print(' '. - ''); + ''); my $numconditionals = 0; my $conditionstext; my %cond_status; - foreach my $scope ('domains','users','course') { + foreach my $scope ('domains','users','course','ip') { $numconditionals += $acl_count->{$scope}; if ($acl_count->{$scope} > 0) { - if ($conditionstext ne 'Active') { + if ($conditionstext ne 'Active') { foreach my $key (keys(%{$conditionals{$scope}})) { $conditionstext = &acl_status($start->{$key},$end->{$key},$now); if ($conditionstext eq 'Active') { @@ -1458,24 +1467,20 @@ sub standard_settings { &build_access_summary($r,$count,$chg,%conditionals); $r->print(&Apache::loncommon::end_data_table()); } else { - $r->print(&make_anchor($url,\%anchor_fields,&mt('Add conditional access')).' '.&mt('based on domain, username, or course/community affiliation.')); + $r->print(&make_anchor($url,\%anchor_fields,&mt('Add conditional access')).' '.&mt("based on domain, username, course/community affiliation or user's IP address.")); } } sub condition_setting { - my ($r,$access_controls,$now,$then,$acl_count,$domains,$users,$courses) = @_; + my ($r,$access_controls,$now,$then,$acl_count,$domains,$users,$courses,$ips) = @_; $r->print(''); &access_element($r,'domains',$acl_count,$domains,$access_controls,$now,$then); $r->print(' '); &access_element($r,'users',$acl_count,$users,$access_controls,$now,$then); - $r->print(''); - if ($acl_count->{course} > 0) { - $r->print(''); - } else { - $r->print(''); - } + $r->print(''); &access_element($r,'course',$acl_count,$courses,$access_controls,$now,$then); - $r->print(''); + $r->print(' '); + &access_element($r,'ip',$acl_count,$ips,$access_controls,$now,$then); $r->print(''); } @@ -1492,19 +1497,15 @@ sub acl_status { sub access_element { my ($r,$type,$acl_count,$items,$access_controls,$now,$then) = @_; - my %typetext = &Apache::lonlocal::texthash( + my %typetext = ( domains => 'Domain', users => 'User', - course => 'Course/Community' + course => 'Course/Community', + ip => 'IP', ); - $r->print('

    '.&mt('[_1]-based conditional access: ',$typetext{$type})); + $r->print('

    '.&mt($typetext{$type}.'-based conditional access:').' '); if ($$acl_count{$type}) { - $r->print($$acl_count{$type}.' '); - if ($$acl_count{$type} > 1) { - $r->print(&mt('conditions')); - } else { - $r->print(&mt('condition')); - } + $r->print(&mt('[quant,_1,condition]',$$acl_count{$type})); } else { $r->print(&mt('Off')); } @@ -1515,13 +1516,19 @@ sub access_element { sub display_access_row { my ($r,$status,$type,$items,$access_controls,$now,$then) = @_; - my $showtype; + my ($showtype, $infotype); if ($type eq 'course') { $showtype = &mt('Courses/Communities'); + $infotype = 'Course/Community'; } elsif ($type eq 'domains') { $showtype = &mt('Domains'); + $infotype = 'Domain'; } elsif ($type eq 'users') { $showtype = &mt('Users'); + $infotype = 'User'; + } elsif ($type eq 'ip') { + $showtype = &mt('IP-based'); + $infotype = 'IP'; } if (@{$items} > 0) { my @all_doms; @@ -1531,7 +1538,6 @@ sub display_access_row { $r->print(''.&mt('Action?').''.$showtype.''. &mt('Dates available').''); if ($type eq 'course' && $status eq 'old') { - $r->print(''.&mt('Allowed course/community affiliations'). ''); $colspan ++; @@ -1548,6 +1554,8 @@ sub display_access_row { $then); } elsif ($type eq 'users') { &users_row($r,$status,$key,$access_controls,$now,$then); + } elsif ($type eq 'ip') { + &ips_row($r,$status,$key,$access_controls,$now,$then); } $r->print(&Apache::loncommon::end_data_table_row()); } @@ -1559,8 +1567,12 @@ sub display_access_row { } $r->print(&Apache::loncommon::end_data_table()); } else { - $r->print(&mt('No [_1]-based conditions defined.',$showtype).'
    '. - &additional_item($type)); + $r->print( + '

    ' + .&mt('No '.$infotype.'-based conditions defined') + .'

    ' + .&additional_item($type) + ); } return; } @@ -1568,6 +1580,7 @@ sub display_access_row { sub course_js { return qq| |; } @@ -1659,7 +1673,7 @@ sub course_row { } $r->print('
    '.&mt('Add a roles-based condition'). ' {'domain'}','$content->{'number'}', '$showtype'".')" value="" />'); $newrole_id = $max_id; @@ -1720,18 +1734,39 @@ sub users_row { $r->print(''.&actionbox($status,$num,$scope).''.&mt("Format for users' username:domain information:").'
    sparty:msu,illini:uiuc ... etc.
    '.&dateboxes($num,$start,$end).''); } +sub ips_row { + my ($r,$status,$item,$access_controls,$now,$then) = @_; + my ($num,$scope,$end,$start) = &set_identifiers($status,$item,$now,$then, + 'ip'); + my $curr_ips_list; + if ($status eq 'old') { + my $content = $$access_controls{$item}; + $curr_ips_list = &sort_ips($content->{'ip'}); + } + $r->print(''.&actionbox($status,$num,$scope).''.&mt('Format for IP controls').'
    '. + &mt('[_1] or [_2] or [_3] or [_4] or [_5]','35.8.*','35.8.3.[34-56]', + '*.msu.edu','35.8.3.34','somehostname.pa.msu.edu').'
    '. + &mt('Use a comma to separate different ranges.').'
    '. + ''. + ''.&dateboxes($num,$start,$end).''); +} + sub additional_item { my ($type) = @_; my $showtype; if ($type eq 'course') { - $showtype = &mt('course/community'); + $showtype = 'course/community'; } elsif ($type eq 'domains') { - $showtype = &mt('domains'); + $showtype = 'domain'; } elsif ($type eq 'users') { - $showtype = &mt('users'); + $showtype = 'user'; + } elsif ($type eq 'ip') { + $showtype = 'IP'; } - my $output = &mt('Add new [_1] condition(s)?',$showtype).' '.&mt('Number to add: ').''; - return $output; + return + &mt('Add new '.$showtype.'-based condition(s)?') + .' '.&mt('Number to add: ') + .''; } sub actionbox { @@ -1739,7 +1774,7 @@ sub actionbox { my $output = ''; + $output .= ''; return $output; } @@ -2101,21 +2136,24 @@ function confirmOverwrite() { } // ]]> +

    $msg -

    -$lt{'over'} +

    + +

    $lt{'over'}   - +

    +

    $hidden $parserflag $group_elem -

    -

    +

    + END } else { $r->print( @@ -2213,10 +2251,13 @@ sub overwrite { } } if ($fname eq '') { - my $msg = &mt('Invalid filename: [_1]; the name of the uploaded file did not contain any letters, '. + $r->print( + &Apache::loncommon::confirmwrapper( + &Apache::lonhtmlcommon::confirm_success( + &mt('Invalid filename: [_1]; the name of the uploaded file did not contain any letters, '. 'so after eliminating special characters there was nothing left.', - ''.$env{'form.filename'}.''); - $r->print($msg.&done(undef,$url)); + ''.$env{'form.filename'}.''),1))); + $r->print(&done(undef,$url)); return; } $env{'form.'.$formname.'.filename'} = $fname; @@ -2227,9 +2268,11 @@ sub overwrite { \%allfiles,\%codebase,undef,undef,undef, undef,undef,undef,\$mimetype); if ($result !~ m|^/uploaded/|) { - $r->print('

    '.&mt('An error occurred ([_1]) while trying to overwrite [_2].' - ,$result,&display_file(undef,$fname)).'

    '); - $r->print(&after_overwrite(&mt('Back'),$url)); + $r->print( + &Apache::loncommon::confirmwrapper( + &Apache::lonhtmlcommon::confirm_success( + &mt('An error occurred ([_1]) while trying to overwrite [_2].' + ,$result,&display_file(undef,$fname)),1))); } else { if ($mode eq 'parse') { if ($mimetype eq 'text/html') { @@ -2237,18 +2280,21 @@ sub overwrite { &print_dependency_form($r,$url,\%allfiles,\%codebase,$result); return; } else { - $r->print('

    '.&mt('Overwriting completed.').'
    '. - &mt('No embedded items identified.').'

    '); + $r->print( + &Apache::loncommon::confirmwrapper( + &Apache::lonhtmlcommon::confirm_success( + &mt('Overwriting completed.')) + .'
    '.&mt('No embedded items identified.'))); } } + } else { + $r->print( + &Apache::loncommon::confirmwrapper( + &Apache::lonhtmlcommon::confirm_success( + &mt('Overwriting completed.')))); } - $r->print(&after_overwrite(undef,$url)); } - return; -} -sub after_overwrite { - my ($text,$url) = @_; my $group_elem; if (defined($env{'form.group'})) { $group_elem = ''; @@ -2256,18 +2302,18 @@ sub after_overwrite { $group_elem .= ''."\n"; } } - if ($text eq '') { - $text = &mt('Done'); - } my $hidden = &hidden_elems(); - return <$text

    -
    -$hidden -$group_elem -
    -END + $r->print( + &Apache::lonhtmlcommon::actionbox( + ['' + .&mt('Return to directory') + .'']) + .'
    ' + .$hidden + .$group_elem + .'
    ' + ); + return; } sub lock_info { @@ -2405,7 +2451,7 @@ sub get_group_quota { if (%curr_groups) { my %group_info = &Apache::longroup::get_group_settings( $curr_groups{$group}); - $group_quota = $group_info{'quota'}; #expressed in Mb + $group_quota = $group_info{'quota'}; #expressed in MB if ($group_quota) { $group_quota = 1000 * $group_quota; #expressed in k } @@ -2505,13 +2551,15 @@ sub coursegrp_portfolio_header { } &Apache::lonhtmlcommon::add_breadcrumb ({href=>"/adm/$cdom/$cnum/$env{'form.group'}/smppg?ref=$env{'form.ref'}", - text=>"$ucgpterm: $grp_desc", - title=>"Go to group's home page"}, + text=>&mt('Group').": $grp_desc", + title=>&mt("Go to group's home page"), + no_mt=>1}, {href=>"/adm/coursegrp_portfolio?".&group_args(), text=>"Group Portfolio", title=>"Display group portfolio"}); my $output = &Apache::lonhtmlcommon::breadcrumbs( - &mt('[_1] portfolio files - [_2]',$gpterm,$grp_desc)); + &mt('Group portfolio files - [_1]',$grp_desc), + undef,undef,undef,undef,1); return $output; } @@ -2527,8 +2575,8 @@ sub get_quota { } } else { $disk_quota = &Apache::loncommon::get_user_quota($env{'user.name'}, - $env{'user.domain'}); #expressed in Mb - $disk_quota = 1000 * $disk_quota; # convert from Mb to kb + $env{'user.domain'}); #expressed in MB + $disk_quota = 1024 * $disk_quota; # convert from MB to kB } return $disk_quota; } @@ -2558,6 +2606,58 @@ STATE return $state; } +# Find space available in a user's portfolio (convert to bytes) +sub free_space { + my ($group) = @_; + my $disk_quota = &get_quota($group); # Expressed in kB + my ($uname,$udom) = &get_name_dom($group); + my $portfolio_root = &get_portfolio_root(); + my $getpropath = 1; + my $current_disk_usage = &Apache::lonnet::diskusage($udom, $uname, + $portfolio_root, $getpropath); # Expressed in kB + my $free_space = 1024 * ($disk_quota - $current_disk_usage); + return $free_space; +} + +sub valid_container { + my ($uname,$udom,$group) = @_; + my $container_prefix; + if ($group ne '') { + $container_prefix = "/uploaded/$udom/$uname/groups/$group/portfolio"; + } else { + $container_prefix = "/uploaded/$udom/$uname/portfolio"; + } + if ($env{'form.currentpath'}) { + $container_prefix .= $env{'form.currentpath'}; + } else { + $container_prefix .= '/'; + } + if ($env{'form.container'} =~ m{^\Q$container_prefix\E(.+)$}) { + my $filename = $1; + if ($filename eq &Apache::lonnet::clean_filename($filename)) { + return 1; + } + } + return; +} + +sub invalid_parms { + my ($r,$url,$currentpath) = @_; + my $escpath = &HTML::Entities::encode($currentpath,'&<>"'); + my $rtnlink = ''.&mt('Return to directory').''; + $r->print('

    '.&mt('Action disallowed').'

    '); + $r->print(&mt('Some of the data included with this request were invalid')); + $r->print('
    '.$rtnlink); + return; +} + sub handler { # this handles file management my $r = shift; @@ -2631,7 +2731,7 @@ sub handler { } else { ($uname,$udom) = &get_name_dom(); $portfolio_root = &get_portfolio_root(); - $title = &mt('My Space'); + $title = 'My Space'; $can_modify = 1; $can_delete = 1; $can_upload = 1; @@ -2645,16 +2745,19 @@ sub handler { # Give the LON-CAPA page header my $brcrum = [{href=>"/adm/portfolio",text=>"Portfolio Manager"}]; + my $js = ''; + if ($env{"form.mode"} eq 'selectfile'){ - $r->print(&Apache::loncommon::start_page($title,undef, + $r->print(&Apache::loncommon::start_page($title, $js, {'only_body' => 1})); } elsif ($env{'form.action'} eq 'rolepicker') { - $r->print(&Apache::loncommon::start_page('New role-based condition',undef, + $r->print(&Apache::loncommon::start_page('New role-based condition', $js, {'no_nav_bar' => 1, })); } elsif ($caller eq 'coursegrp_portfolio') { - $r->print(&Apache::loncommon::start_page($title)); + $r->print(&Apache::loncommon::start_page($title, $js)); } else { - $r->print(&Apache::loncommon::start_page($title,undef, + $r->print(&Apache::loncommon::start_page($title, $js, {'bread_crumbs' => $brcrum})); if (!&Apache::lonnet::usertools_access($uname,$udom,'portfolio')) { $r->print('

    '.&mt('No user portfolio available') .'

    '. @@ -2668,8 +2771,9 @@ sub handler { } $r->rflush(); # Check if access to portfolio is blocked by one or more blocking events in courses. + my $clientip = &Apache::lonnet::get_requestor_ip($r); my ($blocked,$blocktext) = - &Apache::loncommon::blocking_status('port',$uname,$udom); + &Apache::loncommon::blocking_status('port',$clientip,$uname,$udom); if ($blocked) { my $evade_block; # If portfolio display is in a window popped up from a "Select Portfolio Files" @@ -2704,11 +2808,26 @@ sub handler { return OK; } } + if (($env{'form.currentpath'}) && ($env{'form.currentpath'} ne '/')) { + my $clean_currentpath = '/'.&Apache::loncommon::clean_path($env{'form.currentpath'}).'/'; + unless ($env{'form.currentpath'} eq $clean_currentpath) { + &invalid_parms($r,$url); + $r->print(&Apache::loncommon::end_page()); + return OK; + } + } + if ($env{'form.container'}) { + unless (&valid_container($uname,$udom,$group)) { + &invalid_parms($r,$url,$env{'form.currentpath'}); + $r->print(&Apache::loncommon::end_page()); + return OK; + } + } if (($env{'form.storeupl'}) & (!$env{'form.uploaddoc.filename'})){ $r->print( '

    ' .&mt('No file was selected to upload.') - .'<
    ' + .'
    ' .&mt('To upload a file, click [_1]Browse...[_2] and select a file, then click [_1]Upload[_2].' ,'','') .'

    ' @@ -2716,7 +2835,7 @@ sub handler { } if ($env{'form.meta'}) { &open_form($r,$url); - $r->print(&mt('Edit the meta data').'
    '); + $r->print(&mt('Edit Metadata').'
    '); &close_form($r,$url); } if ($env{'form.uploaddoc.filename'}) {