mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-14 04:52:36 +02:00
Code Issues Projects Releases Wiki Activity

MDL-60264 media_vimeo: Support restricted videos by domain in the app

Browse Source 
As reported in MOBILE-1511, Vimeo videos restricted by domain are not
working in the app.

The reason is simple: The restriction is done by the Referer HTTP
header, when a video is embedded via an iframe in the Moodle Site,
Vimeo checks the Referer to see if it matches the specified domain.

When the video is embedded in the mobile app, the Referer is the one
provided by the app Cordova container so Vimeo won't allow playing the
video.

The solution is to add an extra iframe on top of the Vimeo embedding
one (like a proxy), the app will display an iframe pointing to a page
in the site that will include the iframe pointing to vimeo so the
restriction check will work.
This commit is contained in:
Juan Leyva 2017-09-28 10:00:21 +02:00
parent 91cbdda6af
commit 41447216ea
1 changed files with 61 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

61
media/player/vimeo/wsplayer.php Normal file
View File

@ -0,0 +1,61 @@
<?php
// This file is part of Moodle - http://moodle.org/
//
// Moodle is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// Moodle is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with Moodle. If not, see <http://www.gnu.org/licenses/>.
/**
* A script to embed vimeo videos via the site (so vimeo privacy restrictions by domain will work in the mobile app).
*
* The site is doing a double frame embedding:
* - First, the media player replaces the vimeo link with an iframe pointing to vimeo.
* - Second, the app replaces the previous iframe link with a link to this file that includes again the iframe to vimeo.
* Thanks to these changes, the video is embedded in a page in the site server so the privacy restrictions will work.
*
* Note 1: Vimeo privacy restrictions seems to be based on the Referer HTTP header.
* Note 2: This script works even if the plugin is disabled (some users could be using the vimeo embedding code).
*
* @package media_vimeo
* @copyright 2017 Juan Leyva
* @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
*/
define('NO_MOODLE_COOKIES', true);
require_once(__DIR__ . '/../../../config.php');
require_once($CFG->dirroot . '/webservice/lib.php');
$token = required_param('token', PARAM_ALPHANUM);
$video = required_param('video', PARAM_ALPHANUM); // Video ids are numeric, but it's more solid to expect things like 00001.
$width = required_param('width', PARAM_INT);
$height = required_param('height', PARAM_INT);
// Authenticate the user.
$webservicelib = new webservice();
$webservicelib->authenticate_user($token);
$output = <<<OET
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
</head>
<body style="margin:0; padding:0">
<iframe src="https://player.vimeo.com/video/$video"
width="$width" height="$height" frameborder="0"
webkitallowfullscreen mozallowfullscreen allowfullscreen>
</iframe>
</body>
</html>
OET;
echo $output;