--- loncom/lonenc.pm 2005/01/19 18:16:35 1.10 +++ loncom/lonenc.pm 2006/09/28 20:47:13 1.17 @@ -1,7 +1,7 @@ # The LearningOnline Network # URL translation for encrypted filenames # -# $Id: lonenc.pm,v 1.10 2005/01/19 18:16:35 albertel Exp $ +# $Id: lonenc.pm,v 1.17 2006/09/28 20:47:13 albertel Exp $ # # Copyright Michigan State University Board of Trustees # @@ -29,38 +29,13 @@ package Apache::lonenc; use strict; -use Apache::Constants qw(:common :remotehost); -use Apache::lonnet(); -use Apache::File(); -use Apache::loncommon; +use Apache::lonnet; use Crypt::IDEA; use Time::HiRes qw(gettimeofday); - -sub handler { - my $r = shift; - my %cookies=CGI::Cookie->parse($r->header_in('Cookie')); - my $lonid=$cookies{'lonID'}; - my $cookie; - if ($lonid) { - my $handle=$lonid->value; - $handle=~s/\W//g; - my $lonidsdir=$r->dir_config('lonIDsDir'); - $ENV{'request.enc'}=1; - if ((-e "$lonidsdir/$handle.id") && ($handle ne '')) { -# Initialize Environment - &Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle); -# Decrypt URL and redirect - my $redirect=&unencrypted($r->uri); - if ($r->args) { $redirect.='?'.$r->args; } - $r->internal_redirect($redirect); - return OK; - } - } - return FORBIDDEN; -} - +use LONCAPA; + sub encryptseed { - my $seed=$ENV{'course.'.$ENV{'request.course.id'}.'.internal.encseed'}; + my $seed=$env{'course.'.$env{'request.course.id'}.'.internal.encseed'}; $seed=~s/[^0-9a-f]/0/g; $seed.='0123456789abcdef'; $seed=substr($seed.$seed,0,32); @@ -71,11 +46,13 @@ sub unencrypted { my $uri=shift; $uri=~s/^\/enc\/(\d+)\///; my $cmdlength=$1; + # strip any added extension + $uri=~s/\.[^.]*//; my $seed=&encryptseed(); unless ($seed) { return '/'.$uri; } - $uri=&Apache::lonnet::unescape($uri); + $uri=&unescape($uri); my $cipher=new IDEA $seed; my $decuri=''; for (my $encidx=0;$encidxencrypt(substr($uri,$encidx,8))); } - return '/enc/'.$cmdlength.'/'.&Apache::lonnet::escape($encuri); + return '/enc/'.$cmdlength.'/'.&escape($encuri); } sub check_encrypt { my $str=shift; - if ($ENV{'request.enc'}) { return &Apache::lonenc::encrypted($str); } + if ($env{'request.enc'}) { return &Apache::lonenc::encrypted($str); } return $str; } @@ -147,15 +124,21 @@ sub check_decrypt { } sub encrypt_ref { - my ($token,$elements)=@_; + my ($token,$elements,$force_enc)=@_; my $html; - if ($ENV{'request.enc'}) { + if ($force_enc || $env{'request.enc'}) { while (my ($name,$value)= each(%{ $elements })) { if (!$value) { next; } my $href=&Apache::lonnet::hreflocation($Apache::lonxml::pwd[-1],$value); - if ($href !~ /^http:/) { $href=&Apache::lonenc::encrypted($href); } + if ($href !~ /^http:/) { + # IE really wants an extension + my ($extension) = ($href =~ m/(\.[^.]*)$/); + $href = &Apache::lonenc::encrypted($href,$force_enc); + $href .= $extension; + } $token->[2]->{$name}=$href; } + delete($token->[2]->{'encrypturl'}); $html = &Apache::edit::rebuild_tag($token); } else { $html = $token->[4];