mirror of
https://github.com/moodle/moodle.git
synced 2025-01-18 05:58:34 +01:00
67 lines
1.7 KiB
PHP
67 lines
1.7 KiB
PHP
<?php // $Id$
|
|
|
|
require_once('config.php');
|
|
require_once('lib/filelib.php');
|
|
|
|
require_login();
|
|
if (isguestuser()) {
|
|
print_error('noguest');
|
|
}
|
|
|
|
// disable moodle specific debug messages
|
|
disable_debugging();
|
|
|
|
$relativepath = get_file_argument();
|
|
|
|
// relative path must start with '/'
|
|
if (!$relativepath) {
|
|
print_error('invalidargorconf');
|
|
} else if ($relativepath{0} != '/') {
|
|
print_error('pathdoesnotstartslash');
|
|
}
|
|
|
|
// extract relative path components
|
|
$args = explode('/', ltrim($relativepath, '/'));
|
|
|
|
if (count($args) == 0) { // always at least user id
|
|
print_error('invalidarguments');
|
|
}
|
|
|
|
$contextid = (int)array_shift($args);
|
|
$filearea = array_shift($args);
|
|
|
|
$context = get_context_instance_by_id($contextid);
|
|
if ($context->contextlevel != CONTEXT_USER) {
|
|
print_error('invalidarguments');
|
|
}
|
|
|
|
$userid = $context->instanceid;
|
|
if ($USER->id != $userid) {
|
|
print_error('invaliduserid');
|
|
}
|
|
|
|
switch ($filearea) {
|
|
case 'user_draft':
|
|
$itemid = (int)array_shift($args);
|
|
break;
|
|
default:
|
|
send_file_not_found();
|
|
}
|
|
|
|
$relativepath = '/'.implode('/', $args);
|
|
|
|
|
|
$fs = get_file_storage();
|
|
|
|
$fullpath = $context->id.$filearea.$itemid.$relativepath;
|
|
|
|
if (!$file = $fs->get_file_by_hash(sha1($fullpath)) or $file->get_filename() == '.') {
|
|
send_file_not_found();
|
|
}
|
|
|
|
// ========================================
|
|
// finally send the file
|
|
// ========================================
|
|
session_get_instance()->write_close(); // unlock session during fileserving
|
|
send_stored_file($file, 0, false, true); // force download - security first!
|