skodak
f33e1ed4ae
MDL-14679 ok, here is the big patch with new dmllib and ddlib API, some code is already converted, XML db editor works; see tracker for details of regressions and TODOs
2008-05-15 21:40:00 +00:00
dongsheng
33aa5723ca
"MDL-14129, fix print_error call"
2008-04-30 04:09:29 +00:00
stronk7
f4013c10d3
New setting in require_login() to avoid certain scripts (file.php)
...
to mess $SESSION->wantsurl. MDL-14495 ; merged from 19_STABLE
2008-04-25 18:55:36 +00:00
dongsheng
5a2a53316f
MDL-14129, remove all the other error() call
2008-04-04 02:54:20 +00:00
skodak
f44762bd6f
MDL-11434 $CFG->filelifetime = 0 has no effect; patch by Chris Fryer
2007-09-25 09:37:58 +00:00
skodak
90a32fd5e6
MDL-9168 nested site policy when forcelogin enabled; merged from MOODLE_18_STABLE
2007-04-02 16:13:41 +00:00
skodak
feaf5d06db
MDL-8015 improved file uploading
...
- changed file upload api in formslib
- fixed blog attachments and related code in file.php
- fixed glossary attachments
- fixed embedded images in forum posts and blogs - only gif, png and jpeg; the problme was that svg were embedded using img tag which was wrong, the same applied to other picture formats unsupported by browsers (please note that student submitted svg should be never embedded in moodle page for security reasons)
- other minor fixes
2006-12-28 21:21:44 +00:00
toyomoyo
7d0e5a95c3
adding attachment for blogs
2006-11-20 08:31:48 +00:00
skodak
bee8703ea5
Advanced Upload assignment type - student can't read teacher's uploaded response file MDL-6771
2006-10-01 20:04:53 +00:00
skodak
0cd482e54d
fix for MDL-6599 - problem with hiding of resource when $CFG->preventaccesstohiddenfiles enabled
2006-09-25 08:53:10 +00:00
skodak
7eb0b60a1f
debugging and error reporting level fixes and improvements MDL-6671
2006-09-23 09:38:39 +00:00
skodak
2464c592e3
removed moodle specific debug messages from file.php
2006-09-21 06:38:27 +00:00
skodak
ba4e0b059d
fixed warning caused by missing fields in $course; tweaked mime info for firefox when forcing download - it should use default system mime associations which should be safe in case of firefox.
2006-09-20 17:51:59 +00:00
skodak
de9a33f3c9
backupdata folder is not visible in directory resource any more, the backup files were not downloadable, but they might be stored in browser cache when teacher and student were logged from the same browser and computer account - MDL-6280 ; merged from MOODLE_16_STABLE
2006-09-16 17:15:18 +00:00
toyomoyo
ea8158c118
changing sql calls from user_students table to role_assignments table
2006-09-14 09:08:07 +00:00
toyomoyo
c5a3467aa0
fixing missing bracket
2006-09-14 06:43:01 +00:00
toyomoyo
61b03dc7a6
replacing legacy calls
2006-09-14 03:18:55 +00:00
toyomoyo
3924b9884b
adding capabilities
2006-09-05 08:50:23 +00:00
skodak
3d05094553
SC #280 force downloading of database files; merged from MOODLE_16_STABLE
2006-07-30 22:44:50 +00:00
thepurpleblob
b9709b76d9
Corrected oversight with uploaded file filters change
...
See http://moodle.org/mod/forum/discuss.php?d=40177
2006-02-21 12:54:24 +00:00
skodak
69faecceaf
new parameter forcedownload; merged from MOODLE_15_STABLE
2005-07-12 08:05:42 +00:00
martinlanghoff
2ea55bc050
Merged from MOODLE_14_STABLE - Unlock session during fileserving.
2005-05-17 01:00:48 +00:00
moodler
4d68dff4b7
Call new lib/filelib.php
2005-03-07 11:34:16 +00:00
skodak
48283ff638
slashargument test fix
2005-02-26 20:43:30 +00:00
skodak
fd05dffed6
SC#98 protection of uploaded files in resources, please review and test
2005-02-22 23:36:20 +00:00
skodak
e7f927a0fc
new handling of uploaded files, please TEST, TEST, TEST
2004-12-14 18:57:51 +00:00
dhawes
822a106319
Added a file level phpdoc docblock tag. Also converted double quote strings to single quote literals.
2004-09-29 18:19:39 +00:00
moodler
76112421d8
Merged from stable
2004-09-07 14:13:19 +00:00
moodler
de482722f6
Added a 404 header but it seems not to work ... not sure why not.
2004-08-18 05:59:14 +00:00
moodler
5e98103bd0
Remove possible path disclosure and add a translatable error message
2004-08-18 05:47:55 +00:00
moodler
ee88d30b4c
Don't put HTML and text files through clean_text.
2004-08-10 10:44:29 +00:00
moodler
6093cbfcd8
FIxed link after file not found error
2004-08-04 09:45:45 +00:00
moodler
f57cd38b82
Use forcelogin on site files if it's defined bug 1486
2004-05-28 01:17:37 +00:00
moodler
d45bd055d7
Parameters fix for files.
...
This allows
http://example.com/file.php/1/somefile.swf?a=xxx&b=xxxx
Thanks to Bernard Boucher!
2004-05-01 03:33:10 +00:00
moodler
e5890e7160
file.php now calculates content-length correctly for filtered text and HTML files.
...
Bug 1240
2004-04-26 03:41:45 +00:00
moodler
66e5f959e9
Can now handle a $CFG->filelifetime to determine cacheability of files
2004-04-01 02:32:04 +00:00
moodler
a4557331c9
Some security fixes with directory listing
2004-03-16 07:20:00 +00:00
moodler
3cf4ab978b
Added an option on the filters page to control whether uploaded
...
files are parsed by filters. bug 1128
2004-03-11 02:14:15 +00:00
moodler
b7a3d3b24c
Filter text files as well
2004-03-09 06:44:27 +00:00
moodler
f05070115c
If the uploaded file is HTML, then put it through the filters
2004-03-09 06:28:01 +00:00
moodler
ae67d9cd40
Decode pathinfo in case it has encoded spaces etc in it
2003-11-27 17:23:36 +00:00
moodler
dcde9f020a
Displayed time formats are now stored in lang files
...
(see the new strftime* strings) so they can be customised per language
2003-01-15 10:55:54 +00:00
moodler
9277dbd42d
Bummer ... I introduced a new bug in 1.0.8.1 with pathinfo. Fixed.
2003-01-15 05:32:14 +00:00
moodler
6ed3da1da4
Cleaned up file argument processing a bit
2003-01-12 06:53:25 +00:00
moodler
b0e3a92523
Clean sweep through all the important changing all include(), include_once()
...
and require() to require_once()
2003-01-05 14:19:20 +00:00
martin
55b8ac3107
Better error message when invalid arguments are supplied.
2002-09-05 11:56:20 +00:00
martin
5be2f47cf4
Added Content-disposition header to help some browsers suggest the right
...
filename when saving pictures and files.
2002-09-02 09:06:43 +00:00
martin
3f8247c2ea
Changes to use a new configuration variable: CFG->slasharguments
...
If true, then display of user pictures or filenames will use the
method of providing arguments as "slash" arguments - this is much
better for caching, proxies, search engines etc. Unfortunately
it doesn't seem to work on some PHP installations.
If false (the default), then a more compatible method is used
(ie usual way of passing parameters to scripts)
2002-08-26 09:48:00 +00:00
martin
21ddaf605c
Several changes related to the front page, so that it now works OK.
2001-11-25 15:48:24 +00:00
martin
f9903ed0a4
Initial revision
2001-11-22 06:23:56 +00:00
