moodle/file.php

<?php

    /**
     * file.php - Used to fetch file from the data directory
     *
     * This script file fetches files from the data directory (dataroot)<br>
     * Syntax:   file.php/courseid/dir/.../dir/filename.ext
     *
     * @uses $CFG
     * @uses FORMAT_HTML
     * @uses FORMAT_MOODLE
     * @author Martin Dougiamas
     * @version $Id$
     * @package moodlecore
     */
     
    require_once('config.php');
    require_once('files/mimetypes.php');

    if (empty($CFG->filelifetime)) {
        $CFG->filelifetime = 86400;     /// Seconds for files to remain in caches
    }

    if (isset($file)) {     // workaround for situations where / syntax doesn't work
        $pathinfo = $file;
    } else {
        $pathinfo = get_slash_arguments('file.php');
    }

    if (!$pathinfo) {
        error('No file parameters!');
    }

    $pathinfo = urldecode($pathinfo);

    if (! $args = parse_slash_arguments($pathinfo)) {
        error('No valid arguments supplied');
    }

    $numargs = count($args);
    if ($numargs < 2 or empty($args[1])) {
        error('No valid arguments supplied');
    }

    $courseid = (integer)$args[0];

    if (!$course = get_record('course', 'id', $courseid)) {  // Course ID must be specified
        error('Invalid course ID');
    }

    if ($course->category) {
        require_login($courseid);
    } else if ($CFG->forcelogin) {
        require_login();
    }

    $pathname = $CFG->dataroot . $pathinfo;
    if ($pathargs = explode('?', $pathname)) {
        $pathname = $pathargs[0];            // Only keep what's before the '?'
    }
    $filename = $args[$numargs-1];
    if ($fileargs = explode('?', $filename)) {
        $filename = $fileargs[0];            // Only keep what's before the '?'
    }

    if (file_exists($pathname)) {
        $lastmodified = filemtime($pathname);
        $mimetype = mimeinfo('type', $filename);

        header('Last-Modified: ' . gmdate("D, d M Y H:i:s", $lastmodified) . ' GMT');
        header('Expires: ' . gmdate("D, d M Y H:i:s", time() + $CFG->filelifetime) . ' GMT');
        header('Cache-control: max_age = '. $CFG->filelifetime);
        header('Pragma: ');
        header('Content-disposition: inline; filename='. $filename);


        if (empty($CFG->filteruploadedfiles)) {
            header('Content-length: '. filesize($pathname));
            header('Content-type: '. $mimetype);
            readfile($pathname);

        } else {     /// Try and put the file through filters
            if ($mimetype == 'text/html') {
                $options->noclean = true;
                $output = format_text(implode('', file($pathname)), FORMAT_HTML, $options, $courseid);

                header('Content-length: '. strlen($output));
                header('Content-type: text/html');
                echo $output;
    
            } else if ($mimetype == 'text/plain') {
                $options->newlines = false;
                $options->noclean = true;
                $output = '<pre>'. format_text(implode('', file($pathname)), FORMAT_MOODLE, $options, $courseid) .'</pre>';
                header('Content-length: '. strlen($output));
                header('Content-type: text/html');
                echo $output;
    
            } else {    /// Just send it out raw
                header('Content-length: '. filesize($pathname));
                header('Content-type: '. $mimetype);
                readfile($pathname);
            }
        }
    } else {
        header('HTTP/1.0 404 not found');
        error(get_string('filenotfound', 'error'), $CFG->wwwroot .'/course/view.php?id='. $courseid);
    }

    exit;
?>