--- loncom/lonenc.pm 2004/12/20 19:26:53 1.9 +++ loncom/lonenc.pm 2006/12/24 21:22:33 1.19 @@ -1,7 +1,7 @@ # The LearningOnline Network # URL translation for encrypted filenames # -# $Id: lonenc.pm,v 1.9 2004/12/20 19:26:53 albertel Exp $ +# $Id: lonenc.pm,v 1.19 2006/12/24 21:22:33 raeburn Exp $ # # Copyright Michigan State University Board of Trustees # @@ -29,53 +29,51 @@ package Apache::lonenc; use strict; -use Apache::Constants qw(:common :remotehost); -use Apache::lonnet(); -use Apache::File(); -use Apache::loncommon; +use Apache::lonnet; use Crypt::IDEA; use Time::HiRes qw(gettimeofday); - -sub handler { - my $r = shift; - my %cookies=CGI::Cookie->parse($r->header_in('Cookie')); - my $lonid=$cookies{'lonID'}; - my $cookie; - if ($lonid) { - my $handle=$lonid->value; - $handle=~s/\W//g; - my $lonidsdir=$r->dir_config('lonIDsDir'); - $ENV{'request.enc'}=1; - if ((-e "$lonidsdir/$handle.id") && ($handle ne '')) { -# Initialize Environment - &Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle); -# Decrypt URL and redirect - my $redirect=&unencrypted($r->uri); - if ($r->args) { $redirect.='?'.$r->args; } - $r->internal_redirect($redirect); - return OK; - } - } - return FORBIDDEN; -} - +use LONCAPA; + sub encryptseed { - my $seed=$ENV{'course.'.$ENV{'request.course.id'}.'.internal.encseed'}; - $seed=~s/[^0-9a-f]/0/g; - $seed.='0123456789abcdef'; - $seed=substr($seed.$seed,0,32); - return pack("H32",$seed); + my ($cid) = @_; + if (!defined($cid)) { + $cid = $env{'request.course.id'}; + } + my $seed; + if (defined($cid)) { + if (defined$env{'course.'.$cid.'.internal.encseed'}) { + $seed = $env{'course.'.$cid.'.internal.encseed'}; + } else { + my %descargs = ( 'one_time' => 1); + my %course = + &Apache::lonnet::coursedescription($cid,\%descargs); + my %seedhash = + &Apache::lonnet::get('environment',['internal.encseed'], + $course{'domain'},$course{'num'}); + $seed = $seedhash{'internal.encseed'}; + } + } + if (defined($seed)) { + $seed=~s/[^0-9a-f]/0/g; + $seed.='0123456789abcdef'; + $seed=substr($seed.$seed,0,32); + return pack("H32",$seed); + } else { + return; + } } sub unencrypted { - my $uri=shift; + my ($uri,$cid) = @_; $uri=~s/^\/enc\/(\d+)\///; my $cmdlength=$1; - my $seed=&encryptseed(); + # strip any added extension + $uri=~s/\.[^.]*//; + my $seed=&encryptseed($cid); unless ($seed) { return '/'.$uri; } - $uri=&Apache::lonnet::unescape($uri); + $uri=&unescape($uri); my $cipher=new IDEA $seed; my $decuri=''; for (my $encidx=0;$encidxencrypt(substr($uri,$encidx,8))); } - return '/enc/'.$cmdlength.'/'.&Apache::lonnet::escape($encuri); + return '/enc/'.$cmdlength.'/'.&escape($encuri); } sub check_encrypt { my $str=shift; - if ($ENV{'request.enc'}) { return &Apache::lonenc::encrypted($str); } + if (ref($str)) { + if ($env{'request.enc'}) { $$str = &Apache::lonenc::encrypted($$str); } + return; + } else { + if ($env{'request.enc'}) { return &Apache::lonenc::encrypted($str); } + } return $str; } @@ -146,6 +149,28 @@ sub check_decrypt { return $str; } +sub encrypt_ref { + my ($token,$elements,$force_enc)=@_; + my $html; + if ($force_enc || $env{'request.enc'}) { + while (my ($name,$value)= each(%{ $elements })) { + if (!$value) { next; } + my $href=&Apache::lonnet::hreflocation($Apache::lonxml::pwd[-1],$value); + if ($href !~ /^http:/) { + # IE really wants an extension + my ($extension) = ($href =~ m/(\.[^.]*)$/); + $href = &Apache::lonenc::encrypted($href,$force_enc); + $href .= $extension; + } + $token->[2]->{$name}=$href; + } + delete($token->[2]->{'encrypturl'}); + $html = &Apache::edit::rebuild_tag($token); + } else { + $html = $token->[4]; + } + return $html; +} 1; __END__