mirror of
https://github.com/moodle/moodle.git
synced 2025-02-23 11:27:51 +01:00
f8d8b7be3f
enhancing security of command injections. allowing space in pathes for files. allowing binding with tools out of moodleroot
57 lines
1.9 KiB
PHP
57 lines
1.9 KiB
PHP
<?php
|
|
/**
|
|
* Global Search Engine for Moodle
|
|
*
|
|
* @package search
|
|
* @category core
|
|
* @subpackage document_wrappers
|
|
* @author Valery Fremaux [valery.fremaux@club-internet.fr] > 1.8
|
|
* @date 2008/03/31
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
|
*
|
|
* this is a format handler for getting text out of a proprietary binary format
|
|
* so it can be indexed by Lucene search engine
|
|
*/
|
|
|
|
/**
|
|
* MS Word extractor
|
|
* @param object $resource
|
|
* @uses CFG, USER
|
|
*/
|
|
function get_text_for_indexing_doc(&$resource){
|
|
global $CFG, $USER;
|
|
|
|
// SECURITY : do not allow non admin execute anything on system !!
|
|
if (!isadmin($USER->id)) return;
|
|
|
|
$moodleroot = (@$CFG->block_search_usemoodleroot) ? "{$CFG->dirroot}/" : '' ;
|
|
|
|
// just call pdftotext over stdout and capture the output
|
|
if (!empty($CFG->block_search_word_to_text_cmd)){
|
|
if (!file_exists("{$moodleroot}{$CFG->block_search_word_to_text_cmd}")){
|
|
mtrace('Error with MSWord to text converter command : exectuable not found.');
|
|
}
|
|
else{
|
|
$file = escapeshellarg($CFG->dataroot.'/'.$resource->course.'/'.$resource->reference);
|
|
$command = trim($CFG->block_search_word_to_text_cmd);
|
|
$text_converter_cmd = "{$moodleroot}{$command} \"$file\"";
|
|
if ($CFG->block_search_word_to_text_env){
|
|
putenv($CFG->block_search_word_to_text_env);
|
|
}
|
|
mtrace("Executing : $text_converter_cmd");
|
|
$result = shell_exec($text_converter_cmd);
|
|
if ($result){
|
|
return mb_convert_encoding($result, 'UTF8', 'auto');
|
|
}
|
|
else{
|
|
mtrace('Error with MSWord to text converter command : execution failed. ');
|
|
return '';
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
mtrace('Error with MSWord to text converter command : command not set up. Execute once search block configuration.');
|
|
return '';
|
|
}
|
|
}
|
|
?>
|