Return to lonencurl.pm CVS log

Up to [LON-CAPA] / loncom

Annotation of loncom/lonencurl.pm, revision 1.6

1.4       albertel    1: 
1.1       albertel    2: # The LearningOnline Network
                      3: # URL translation for encrypted filenames
                      4: #
1.6     ! raeburn     5: # $Id: lonencurl.pm,v 1.5 2011/10/01 03:18:57 raeburn Exp $
1.1       albertel    6: #
                      7: # Copyright Michigan State University Board of Trustees
                      8: #
                      9: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
                     10: #
                     11: # LON-CAPA is free software; you can redistribute it and/or modify
                     12: # it under the terms of the GNU General Public License as published by
                     13: # the Free Software Foundation; either version 2 of the License, or
                     14: # (at your option) any later version.
                     15: #
                     16: # LON-CAPA is distributed in the hope that it will be useful,
                     17: # but WITHOUT ANY WARRANTY; without even the implied warranty of
                     18: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
                     19: # GNU General Public License for more details.
                     20: #
                     21: # You should have received a copy of the GNU General Public License
                     22: # along with LON-CAPA; if not, write to the Free Software
                     23: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
                     24: #
                     25: # /home/httpd/html/adm/gpl.txt
                     26: #
                     27: # http://www.lon-capa.org/
                     28: #
                     29: 
                     30: package Apache::lonencurl;
                     31: 
                     32: use strict;
                     33: use Apache::Constants qw(:common :remotehost);
                     34: use Apache::lonnet;
                     35: use Apache::lonenc;
1.5       raeburn    36: use GDBM_File;
1.1       albertel   37: 
                     38: sub handler {
                     39:     my $r = shift;
1.4       albertel   40: 
                     41:     $env{'request.enc'}=1;
                     42: 
                     43:     my $handle = &Apache::lonnet::check_for_valid_session($r);
                     44:     if ($handle ne '') {
1.1       albertel   45: # Initialize Environment
1.4       albertel   46: 	my $lonidsdir=$r->dir_config('lonIDsDir');
                     47: 	&Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle);
1.5       raeburn    48: # Decrypt URL, if appropriate, and redirect
                     49:         my $redirect;
                     50:         my ($decrypted,$encnum,$remainder) = &checkdecryption($r->uri);
                     51:         if (($encnum ne '') && ($remainder ne '')) {
                     52:             my $referrer = $r->headers_in->{'Referer'} || '';
                     53:             my $host = $r->headers_in->{'Host'};
                     54:             my $decryptreferrer;
                     55:             if ($referrer =~ m{^https?://\Q$host\E(/enc/\Q$encnum\E/[^?]+)}) {
                     56:                 ($decryptreferrer) = &checkdecryption($1);
                     57:             }
                     58:             if ($decryptreferrer eq '') {
                     59:                 if ($env{'request.course.fn'} ne '') {
                     60:                     my %symbhash;
                     61:                     if (tie(%symbhash,'GDBM_File',$env{'request.course.fn'}.'_symb.db',
                     62:                         &GDBM_READER(),0640)) {
                     63:                         my $lastsymb=$symbhash{'last_known'};
                     64:                         untie(%symbhash);
                     65:                         (undef,undef,$decryptreferrer)=&Apache::lonnet::decode_symb($lastsymb);
                     66:                         $decryptreferrer = &Apache::lonnet::clutter($decryptreferrer);
                     67:                     }
                     68:                 }
                     69:             }
                     70:             if ($decryptreferrer ne '') {
                     71:                 my ($referrerpath) = ($decryptreferrer =~ m{^(.+/)[^/]+$});
                     72:                 if (($env{'httpref.'.$referrerpath.$remainder} eq $decryptreferrer) ||
                     73:                     ($env{'httpref.'.$referrerpath.'*'} eq $decryptreferrer) ||
                     74:                     ($env{'httpref.'.$referrerpath} eq $decryptreferrer)) {
                     75:                    $redirect=$referrerpath.$remainder;
                     76:                 }
                     77:             }
                     78:         }
1.6     ! raeburn    79:         my $anchor;
1.5       raeburn    80:         if ($redirect eq '') {
                     81:             $redirect=&Apache::lonenc::unencrypted($r->uri);
1.6     ! raeburn    82:             if ($redirect =~ m{^/adm/wrapper/ext/[^\#]+(\#.+)$}) {
        !            83:                $anchor = $1;
        !            84:                $redirect =~ s/\#.+$//;
        !            85:             }
1.5       raeburn    86:         }
1.4       albertel   87: 	if ($r->args) { $redirect.='?'.$r->args; }
1.6     ! raeburn    88: 	$r->internal_redirect($redirect.$anchor);
1.4       albertel   89: 	return OK;
1.1       albertel   90:     }
                     91:     return FORBIDDEN;
                     92: }
1.2       albertel   93: 
1.5       raeburn    94: sub checkdecryption {
                     95:     my ($uri) = @_;
                     96:     my ($encnum,$encname,$rest) = ($uri =~ m{^/enc/(\d+)/([^.]+)(.*)$});
                     97:     my $enclength = length($encname);
                     98:     my $rem = $enclength%16;
                     99:     if (($encname =~ /[^a-f0-9]/) || ($rem != 0) || ($enclength < 16)) {
                    100:         return ('',$encnum,$encname.$rest);
                    101:     } else {
                    102:         return (&Apache::lonenc::unencrypted($uri));
                    103:     }
                    104: }
                    105: 
1.2       albertel  106: 1;
                    107: __END__