--- loncom/auth/lonacc.pm 2000/11/06 16:30:21 1.13
+++ loncom/auth/lonacc.pm 2001/11/29 21:54:56 1.23
@@ -1,7 +1,34 @@
# The LearningOnline Network
# Cookie Based Access Handler
+#
+# $Id: lonacc.pm,v 1.23 2001/11/29 21:54:56 www Exp $
+#
+# Copyright Michigan State University Board of Trustees
+#
+# This file is part of the LearningOnline Network with CAPA (LON-CAPA).
+#
+# LON-CAPA is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# LON-CAPA is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with LON-CAPA; if not, write to the Free Software
+# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+#
+# /home/httpd/html/adm/gpl.txt
+#
+# http://www.lon-capa.org/
+#
# 5/21/99,5/22,5/29,5/31,6/15,16/11,22/11,
-# 01/06,01/13,05/31,06/01,09/06,09/25,09/28,10/30,11/6 Gerd Kortemeyer
+# 01/06,01/13,05/31,06/01,09/06,09/25,09/28,10/30,11/6,
+# 12/25,12/26,
+# 01/06/01,05/28,8/11,9/26,11/29 Gerd Kortemeyer
package Apache::lonacc;
@@ -10,6 +37,7 @@ use Apache::Constants qw(:common :http :
use Apache::File;
use Apache::lonnet;
use CGI::Cookie();
+use Fcntl qw(:flock);
sub handler {
my $r = shift;
@@ -28,7 +56,9 @@ sub handler {
my @profile;
{
my $idf=Apache::File->new("$lonidsdir/$handle.id");
+ flock($idf,LOCK_SH);
@profile=<$idf>;
+ $idf->close();
}
my $envi;
for ($envi=0;$envi<=$#profile;$envi++) {
@@ -37,25 +67,22 @@ sub handler {
$ENV{$envname} = $envvalue;
}
$ENV{'user.environment'} = "$lonidsdir/$handle.id";
- $ENV{'request.state'} = "published";
- $ENV{'request.filename'} = $r->filename;
-
-# --------------------- Figure out referer, first from HTTP_REFERER, then cache
-
- my $referer='';
- if ($referer=$r->header_in('Referer')) {
- $ENV{'HTTP_REFERER'}=$referer;
+ if ($requrl=~/^\/res\//) {
+ $ENV{'request.state'} = "published";
} else {
- $ENV{'HTTP_REFERER'}=$ENV{'httpref.'.$requrl};
- }
+ $ENV{'request.state'} = 'unknown';
+ }
+ $ENV{'request.filename'} = $r->filename;
# -------------------------------------------------------- Load POST parameters
- my $buffer;
+ my $buffer;
+
+ $r->read($buffer,$r->header_in('Content-length'));
- $r->read($buffer,$r->header_in('Content-length'));
+ unless ($buffer=~/^(\-+\w+)\s+Content\-Disposition\:\s*form\-data/si) {
my @pairs=split(/&/,$buffer);
my $pair;
foreach $pair (@pairs) {
@@ -66,7 +93,52 @@ sub handler {
$name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
$ENV{"form.$name"}=$value;
}
-
+ } else {
+ my $contentsep=$1;
+ my @lines = split (/\n/,$buffer);
+ my $name='';
+ my $value='';
+ my $fname='';
+ my $fmime='';
+ my $i;
+ for ($i=0;$i<=$#lines;$i++) {
+ if ($lines[$i]=~/^$contentsep/) {
+ if ($name) {
+ chomp($value);
+ if ($fname) {
+ $ENV{"form.$name.filename"}=$fname;
+ $ENV{"form.$name.mimetype"}=$fmime;
+ } else {
+ $value=~s/\s+$//s;
+ }
+ $ENV{"form.$name"}=$value;
+ }
+ if ($i<$#lines) {
+ $i++;
+ $lines[$i]=~
+ /Content\-Disposition\:\s*form\-data\;\s*name\=\"([^\"]+)\"/i;
+ $name=$1;
+ $value='';
+ if ($lines[$i]=~/filename\=\"([^\"]+)\"/i) {
+ $fname=$1;
+ if
+ ($lines[$i+1]=~/Content\-Type\:\s*([\w\-\/]+)/i) {
+ $fmime=$1;
+ $i++;
+ } else {
+ $fmime='';
+ }
+ } else {
+ $fname='';
+ $fmime='';
+ }
+ $i++;
+ }
+ } else {
+ $value.=$lines[$i]."\n";
+ }
+ }
+ }
$r->method_number(M_GET);
$r->method('GET');
$r->headers_in->unset('Content-length');
@@ -83,15 +155,38 @@ sub handler {
$ENV{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
return HTTP_NOT_ACCEPTABLE;
}
- }
+ }
+# ------------------------------------------------------------- This is allowed
+ if ($ENV{'request.course.id'}) {
+ $requrl=~/\.(\w+)$/;
+ if (&Apache::lonnet::fileembstyle($1) eq 'ssi') {
+# ------------------------------------- This is serious stuff, get symb and log
+ my $symb=&Apache::lonnet::symbread;
+ $ENV{'request.symb'}=$symb;
+ &Apache::lonnet::courseacclog($symb);
+ } else {
+# ------------------------------------------------------- This is other content
+ &Apache::lonnet::courseacclog($requrl);
+ }
+ }
return OK;
} else {
$r->log_reason("Cookie $handle not valid", $r->filename)
};
}
+# -------------------------------------------- See if this is a public resource
+ if (&Apache::lonnet::metadata($requrl,'copyright') eq 'public') {
+ &Apache::lonnet::logthis('Granting public access: '.$requrl);
+ $ENV{'user.name'}='public';
+ $ENV{'user.domain'}='public';
+ $ENV{'request.state'} = "published";
+ $ENV{'request.publicaccess'} = 1;
+ $ENV{'request.filename'} = $r->filename;
+ return OK;
+ }
# ----------------------------------------------- Store where they wanted to go
-
+
$ENV{'request.firsturl'}=$requrl;
return FORBIDDEN;
}
500 Internal Server Error
Internal Server Error
The server encountered an internal error or
misconfiguration and was unable to complete
your request.
Please contact the server administrator at
root@localhost to inform them of the time this error occurred,
and the actions you performed just before this error.
More information about this error may be available
in the server error log.