File:  [LON-CAPA] / loncom / publisher / lonupload.pm
Revision 1.18: download - view: text, annotated - select for diffs
Mon Aug 4 17:45:06 2003 UTC (20 years, 10 months ago) by www
Branches: MAIN
CVS tags: HEAD
Working on bug #2018: could not handle absolute vs. relative URLs

    1: 
    2: # The LearningOnline Network with CAPA
    3: # Handler to upload files into construction space
    4: #
    5: # $Id: lonupload.pm,v 1.18 2003/08/04 17:45:06 www Exp $
    6: #
    7: # Copyright Michigan State University Board of Trustees
    8: #
    9: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
   10: #
   11: # LON-CAPA is free software; you can redistribute it and/or modify
   12: # it under the terms of the GNU General Public License as published by
   13: # the Free Software Foundation; either version 2 of the License, or
   14: # (at your option) any later version.
   15: #
   16: # LON-CAPA is distributed in the hope that it will be useful,
   17: # but WITHOUT ANY WARRANTY; without even the implied warranty of
   18: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   19: # GNU General Public License for more details.
   20: #
   21: # You should have received a copy of the GNU General Public License
   22: # along with LON-CAPA; if not, write to the Free Software
   23: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
   24: #
   25: # /home/httpd/html/adm/gpl.txt
   26: #
   27: # http://www.lon-capa.org/
   28: #
   29: ###
   30: 
   31: package Apache::lonupload;
   32: 
   33: use strict;
   34: use Apache::File;
   35: use File::Copy;
   36: use File::Basename;
   37: use Apache::Constants qw(:common :http :methods);
   38: use Apache::loncacc;
   39: use Apache::loncommon();
   40: use Apache::Log();
   41: use Apache::lonnet;
   42: use HTML::Entities();
   43: 
   44: my $DEBUG=0;
   45: 
   46: sub Debug {
   47:   
   48:   # Marshall the parameters.
   49:   
   50:   my $r       = shift;
   51:   my $log     = $r->log;
   52:   my $message = shift;
   53:   
   54:   # Put out the indicated message butonly if DEBUG is false.
   55:   
   56:   if ($DEBUG) {
   57:     $log->debug($message);
   58:   }
   59: }
   60: 
   61: sub upfile_store {
   62:     my $r=shift;
   63: 	
   64:     my $fname=$ENV{'form.upfile.filename'};
   65:     $fname=~s/\W//g;
   66:     
   67:     chomp($ENV{'form.upfile'});
   68:   
   69:     my $datatoken=$ENV{'user.name'}.'_'.$ENV{'user.domain'}.
   70: 		  '_upload_'.$fname.'_'.time.'_'.$$;
   71:     {
   72:        my $fh=Apache::File->new('>'.$r->dir_config('lonDaemons').
   73:                                    '/tmp/'.$datatoken.'.tmp');
   74:        print $fh $ENV{'form.upfile'};
   75:     }
   76:     return $datatoken;
   77: }
   78: 
   79: 
   80: sub phaseone {
   81:    my ($r,$fn,$uname,$udom)=@_;
   82:    $ENV{'form.upfile.filename'}=~s/\\/\//g;
   83:    $ENV{'form.upfile.filename'}=~s/^.*\/([^\/]+)$/$1/;
   84:    if ($ENV{'form.upfile.filename'}) {
   85:     $fn=~s/\/[^\/]+$//;
   86:     $fn=~s/([^\/])$/$1\//;
   87:     $fn.=$ENV{'form.upfile.filename'};
   88:     $fn=~s/^\///;
   89:     $fn=~s/(\/)+/\//g;
   90: 
   91: #    Fn is the full path to the destination filename.
   92: #    
   93: 
   94:     &Debug($r, "Filename for upload: $fn");
   95:     if (($fn) && ($fn!~/\/$/)) {
   96:       $r->print(
   97:  '<form action=/adm/upload method=post>'.
   98:  '<input type=hidden name=phase value=two>'.
   99:  '<input type=hidden name=datatoken value="'.&upfile_store.'">'.
  100:  '<input type=hidden name=uploaduname value="'.$uname.'">'.
  101:  'Store uploaded file as '.
  102:  '<input type=text size=50 name=filename value="'.$fn.'"><br>'.
  103:  '<input type=submit value="Store"></form>');
  104:       # Check for bad extension and warn user
  105:       if ($fn=~/\.(\w+)$/ && 
  106: 	  (&Apache::loncommon::fileembstyle($1) eq 'hdn')) {
  107: 	  $r->print(
  108:  '<font color=red>'.
  109:  'The extension on this file, "'.$1.
  110:  '", is reserved internally by LON-CAPA. <br \>'.
  111:  'Please change the extension.'.
  112:  '</font>');
  113:       } elsif($fn=~/\.(\w+)$/ && 
  114: 	      !defined(&Apache::loncommon::fileembstyle($1))) {
  115: 	  $r->print(
  116:  '<font color=red>'.
  117:  'The extension on this file, "'.$1.
  118:  '", is not recognized by LON-CAPA. <br \>'.
  119:  'Please change the extension.'.
  120:  '</font>');
  121:       }
  122:   } else {
  123:       $r->print('<font color=red>Illegal filename.</font>');
  124:   }
  125:  } else {
  126:      $r->print('<font color=red>No upload file specified.</font>');
  127:  }
  128: }
  129: 
  130: sub phasetwo {
  131:    my ($r,$tfn,$uname,$udom)=@_;
  132:    my $fn='/priv/'.$uname.'/'.$tfn;
  133:    $fn=~s/\/+/\//g;
  134:    &Debug($r, "Filename is ".$tfn);
  135:    if ($tfn) {
  136:     &Debug($r, "Filename for tfn = ".$tfn);
  137:     my $target='/home/'.$uname.'/public_html'.$tfn;
  138:     &Debug($r, "target -> ".$target);
  139: #     target is the full filesystem path of the destination file.
  140:     my $base = &File::Basename::basename($fn);
  141:     my $path = &File::Basename::dirname($fn);
  142:     $base    = &HTML::Entities::encode($base);
  143:     my $url  = $path."/".$base; 
  144:     &Debug($r, "URL is now ".$url);
  145:     my $datatoken=$ENV{'form.datatoken'};
  146:     if (($fn) && ($datatoken)) {
  147: 	if ((-e $target) && ($ENV{'form.override'} ne 'Yes')) {
  148:            $r->print(
  149:  '<form action=/adm/upload method=post>'.
  150:  'File <tt>'.$fn.'</tt> exists. Overwrite? '.
  151:  '<input type=hidden name=phase value=two>'.
  152:  '<input type=hidden name=filename value="'."$url".'">'.
  153:  '<input type=hidden name=datatoken value="'.$datatoken.'">'.
  154:  '<input type=submit name=override value="Yes"></form>');
  155:        } else {
  156:            my $source=$r->dir_config('lonDaemons').
  157: 	                             '/tmp/'.$datatoken.'.tmp';
  158:            # Check for bad extension and disallow upload
  159: 	   if ($fn=~/\.(\w+)$/ && 
  160: 	       (&Apache::loncommon::fileembstyle($1) eq 'hdn')) {
  161: 	       $r->print(
  162:  'File <tt>'.$fn.'</tt> could not be copied.<br />'.
  163:  '<font color=red>'.
  164:  'The extension on this file is reserved internally by LON-CAPA.'.
  165:  '</font>');
  166: 	   } elsif ($fn=~/\.(\w+)$/ && 
  167: 		    !defined(&Apache::loncommon::fileembstyle($1))) {
  168: 	       $r->print(
  169:  'File <tt>'.$fn.'</tt> could not be copied.<br />'.
  170:  '<font color=red>'.
  171:  'The extension on this file is not recognized by LON-CAPA.'.
  172:  '</font>');
  173: 	   } elsif (copy($source,$target)) {
  174: 	       chmod(0660, $target); # Set permissions to rw-rw---.
  175: 	      $r->print('File copied.');
  176:               $r->print('<p><font size=+2><a href="'.$url.
  177:                         '">View file</a></font>');
  178:               $r->print('<p><font size=+2><a href="'.$path.
  179:                         '">Back to Directory</a></font>');
  180: 	   } else {
  181:               $r->print('Failed to copy: '.$!);
  182: 	   }
  183:        }
  184:     } else {
  185:        $r->print(
  186:    '<font size=+1 color=red>Please pick a filename</font><p>');
  187:        &phaseone($r,$fn,$uname,$udom);
  188:     }
  189:   } else {
  190:     $r->print(
  191:    '<font size=+1 color=red>Please pick a filename</font><p>');
  192:     &phaseone($r,$fn,$uname,$udom);
  193:   }
  194: }
  195: 
  196: # ---------------------------------------------------------------- Main Handler
  197: sub handler {
  198: 
  199:   my $r=shift;
  200: 
  201:   my $uname;
  202:   my $udom;
  203: #
  204: # phase two: re-attach user
  205: #
  206:   if ($ENV{'form.uploaduname'}) {
  207:       $ENV{'form.filename'}='/priv/'.$ENV{'form.uploaduname'}.'/'.
  208: 	  $ENV{'form.filename'};
  209:   }
  210: #
  211: 
  212:   ($uname,$udom)=
  213:     &Apache::loncacc::constructaccess(
  214: 			 $ENV{'form.filename'},$r->dir_config('lonDefDomain'));
  215:   unless (($uname) && ($udom)) {
  216:      $r->log_reason($uname.' at '.$udom.
  217:          ' trying to publish file '.$ENV{'form.filename'}.
  218:          ' - not authorized', 
  219:          $r->filename); 
  220:      return HTTP_NOT_ACCEPTABLE;
  221:   }
  222: 
  223:   my $fn;
  224:   if ($ENV{'form.filename'}) {
  225:       $fn=$ENV{'form.filename'};
  226:       $fn=~s/^http\:\/\/[^\/]+\///;
  227:       $fn=~s/^\///;
  228:       $fn=~s/(\~|priv\/)(\w+)//;
  229:       $fn=~s/\/+/\//g;
  230:   } else {
  231:      $r->log_reason($ENV{'user.name'}.' at '.$ENV{'user.domain'}.
  232:          ' unspecified filename for upload', $r->filename); 
  233:      return HTTP_NOT_FOUND;
  234:   }
  235: 
  236: # ----------------------------------------------------------- Start page output
  237: 
  238: 
  239:   $r->content_type('text/html');
  240:   $r->send_http_header;
  241: 
  242:   $r->print('<html><head><title>LON-CAPA Construction Space</title></head>');
  243: 
  244:   $r->print(&Apache::loncommon::bodytag('Upload file to Construction Space'));
  245:   
  246:   if (($uname ne $ENV{'user.name'}) || ($udom ne $ENV{'user.domain'})) {
  247:           $r->print('<h3><font color=red>Co-Author: '.$uname.' at '.$udom.
  248:                '</font></h3>');
  249:   }
  250: 
  251: 
  252:   if ($ENV{'form.phase'} eq 'two') {
  253:       &phasetwo($r,$fn,$uname,$udom);
  254:   } else {
  255:       &phaseone($r,$fn,$uname,$udom);
  256:   }
  257: 
  258:   $r->print('</body></html>');
  259:   return OK;  
  260: }
  261: 
  262: 1;
  263: __END__
  264: 
  265: =head1 NAME
  266: 
  267: Apache::lonupload - upload files into construction space
  268: 
  269: =head1 SYNOPSIS
  270: 
  271: Invoked by /etc/httpd/conf/srm.conf:
  272: 
  273:  <Location /adm/upload>
  274:  PerlAccessHandler       Apache::lonacc
  275:  SetHandler perl-script
  276:  PerlHandler Apache::lonupload
  277:  ErrorDocument     403 /adm/login
  278:  ErrorDocument     404 /adm/notfound.html
  279:  ErrorDocument     406 /adm/unauthorized.html
  280:  ErrorDocument	  500 /adm/errorhandler
  281:  </Location>
  282: 
  283: =head1 INTRODUCTION
  284: 
  285: This module uploads a file sitting on a client computer into 
  286: library server construction space.
  287: 
  288: This is part of the LearningOnline Network with CAPA project
  289: described at http://www.lon-capa.org.
  290: 
  291: =head1 HANDLER SUBROUTINE
  292: 
  293: This routine is called by Apache and mod_perl.
  294: 
  295: =over 4
  296: 
  297: =item *
  298: 
  299: Initialize variables
  300: 
  301: =item *
  302: 
  303: Start page output
  304: 
  305: =item *
  306: 
  307: output relevant interface phase (phaseone or phasetwo)
  308: 
  309: =item *
  310: 
  311: (phase one is to specify upload file; phase two is to handle conditions
  312: subsequent to specification--like overwriting an existing file)
  313: 
  314: =back
  315: 
  316: =head1 OTHER SUBROUTINES
  317: 
  318: =over 4
  319: 
  320: =item *
  321: 
  322: phaseone() : Interface for specifying file to upload.
  323: 
  324: =item *
  325: 
  326: phasetwo() : Interface for handling post-conditions about uploading (such
  327: as overwriting an existing file).
  328: 
  329: =item *
  330: 
  331: upfile_store() : Store contents of uploaded file into temporary space.  Invoked
  332: by phaseone subroutine.
  333: 
  334: =back
  335: 
  336: =cut

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>