MDL-38990 mod_forum: Restrict ability to post to all groups in a forum
[moodle.git] / lib / filelib.php
blobf6a33164323e90426457c727b3c696e2de62fd2e
1 <?php
2 // This file is part of Moodle - http://moodle.org/
3 //
4 // Moodle is free software: you can redistribute it and/or modify
5 // it under the terms of the GNU General Public License as published by
6 // the Free Software Foundation, either version 3 of the License, or
7 // (at your option) any later version.
8 //
9 // Moodle is distributed in the hope that it will be useful,
10 // but WITHOUT ANY WARRANTY; without even the implied warranty of
11 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 // GNU General Public License for more details.
14 // You should have received a copy of the GNU General Public License
15 // along with Moodle. If not, see <http://www.gnu.org/licenses/>.
17 /**
18 * Functions for file handling.
20 * @package core_files
21 * @copyright 1999 onwards Martin Dougiamas (http://dougiamas.com)
22 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
25 defined('MOODLE_INTERNAL') || die();
27 /**
28 * BYTESERVING_BOUNDARY - string unique string constant.
30 define('BYTESERVING_BOUNDARY', 's1k2o3d4a5k6s7');
32 /**
33 * Unlimited area size constant
35 define('FILE_AREA_MAX_BYTES_UNLIMITED', -1);
37 require_once("$CFG->libdir/filestorage/file_exceptions.php");
38 require_once("$CFG->libdir/filestorage/file_storage.php");
39 require_once("$CFG->libdir/filestorage/zip_packer.php");
40 require_once("$CFG->libdir/filebrowser/file_browser.php");
42 /**
43 * Encodes file serving url
45 * @deprecated use moodle_url factory methods instead
47 * @todo MDL-31071 deprecate this function
48 * @global stdClass $CFG
49 * @param string $urlbase
50 * @param string $path /filearea/itemid/dir/dir/file.exe
51 * @param bool $forcedownload
52 * @param bool $https https url required
53 * @return string encoded file url
55 function file_encode_url($urlbase, $path, $forcedownload=false, $https=false) {
56 global $CFG;
58 //TODO: deprecate this
60 if ($CFG->slasharguments) {
61 $parts = explode('/', $path);
62 $parts = array_map('rawurlencode', $parts);
63 $path = implode('/', $parts);
64 $return = $urlbase.$path;
65 if ($forcedownload) {
66 $return .= '?forcedownload=1';
68 } else {
69 $path = rawurlencode($path);
70 $return = $urlbase.'?file='.$path;
71 if ($forcedownload) {
72 $return .= '&amp;forcedownload=1';
76 if ($https) {
77 $return = str_replace('http://', 'https://', $return);
80 return $return;
83 /**
84 * Detects if area contains subdirs,
85 * this is intended for file areas that are attached to content
86 * migrated from 1.x where subdirs were allowed everywhere.
88 * @param context $context
89 * @param string $component
90 * @param string $filearea
91 * @param string $itemid
92 * @return bool
94 function file_area_contains_subdirs(context $context, $component, $filearea, $itemid) {
95 global $DB;
97 if (!isset($itemid)) {
98 // Not initialised yet.
99 return false;
102 // Detect if any directories are already present, this is necessary for content upgraded from 1.x.
103 $select = "contextid = :contextid AND component = :component AND filearea = :filearea AND itemid = :itemid AND filepath <> '/' AND filename = '.'";
104 $params = array('contextid'=>$context->id, 'component'=>$component, 'filearea'=>$filearea, 'itemid'=>$itemid);
105 return $DB->record_exists_select('files', $select, $params);
109 * Prepares 'editor' formslib element from data in database
111 * The passed $data record must contain field foobar, foobarformat and optionally foobartrust. This
112 * function then copies the embedded files into draft area (assigning itemids automatically),
113 * creates the form element foobar_editor and rewrites the URLs so the embedded images can be
114 * displayed.
115 * In your mform definition, you must have an 'editor' element called foobar_editor. Then you call
116 * your mform's set_data() supplying the object returned by this function.
118 * @category files
119 * @param stdClass $data database field that holds the html text with embedded media
120 * @param string $field the name of the database field that holds the html text with embedded media
121 * @param array $options editor options (like maxifiles, maxbytes etc.)
122 * @param stdClass $context context of the editor
123 * @param string $component
124 * @param string $filearea file area name
125 * @param int $itemid item id, required if item exists
126 * @return stdClass modified data object
128 function file_prepare_standard_editor($data, $field, array $options, $context=null, $component=null, $filearea=null, $itemid=null) {
129 $options = (array)$options;
130 if (!isset($options['trusttext'])) {
131 $options['trusttext'] = false;
133 if (!isset($options['forcehttps'])) {
134 $options['forcehttps'] = false;
136 if (!isset($options['subdirs'])) {
137 $options['subdirs'] = false;
139 if (!isset($options['maxfiles'])) {
140 $options['maxfiles'] = 0; // no files by default
142 if (!isset($options['noclean'])) {
143 $options['noclean'] = false;
146 //sanity check for passed context. This function doesn't expect $option['context'] to be set
147 //But this function is called before creating editor hence, this is one of the best places to check
148 //if context is used properly. This check notify developer that they missed passing context to editor.
149 if (isset($context) && !isset($options['context'])) {
150 //if $context is not null then make sure $option['context'] is also set.
151 debugging('Context for editor is not set in editoroptions. Hence editor will not respect editor filters', DEBUG_DEVELOPER);
152 } else if (isset($options['context']) && isset($context)) {
153 //If both are passed then they should be equal.
154 if ($options['context']->id != $context->id) {
155 $exceptionmsg = 'Editor context ['.$options['context']->id.'] is not equal to passed context ['.$context->id.']';
156 throw new coding_exception($exceptionmsg);
160 if (is_null($itemid) or is_null($context)) {
161 $contextid = null;
162 $itemid = null;
163 if (!isset($data)) {
164 $data = new stdClass();
166 if (!isset($data->{$field})) {
167 $data->{$field} = '';
169 if (!isset($data->{$field.'format'})) {
170 $data->{$field.'format'} = editors_get_preferred_format();
172 if (!$options['noclean']) {
173 $data->{$field} = clean_text($data->{$field}, $data->{$field.'format'});
176 } else {
177 if ($options['trusttext']) {
178 // noclean ignored if trusttext enabled
179 if (!isset($data->{$field.'trust'})) {
180 $data->{$field.'trust'} = 0;
182 $data = trusttext_pre_edit($data, $field, $context);
183 } else {
184 if (!$options['noclean']) {
185 $data->{$field} = clean_text($data->{$field}, $data->{$field.'format'});
188 $contextid = $context->id;
191 if ($options['maxfiles'] != 0) {
192 $draftid_editor = file_get_submitted_draft_itemid($field);
193 $currenttext = file_prepare_draft_area($draftid_editor, $contextid, $component, $filearea, $itemid, $options, $data->{$field});
194 $data->{$field.'_editor'} = array('text'=>$currenttext, 'format'=>$data->{$field.'format'}, 'itemid'=>$draftid_editor);
195 } else {
196 $data->{$field.'_editor'} = array('text'=>$data->{$field}, 'format'=>$data->{$field.'format'}, 'itemid'=>0);
199 return $data;
203 * Prepares the content of the 'editor' form element with embedded media files to be saved in database
205 * This function moves files from draft area to the destination area and
206 * encodes URLs to the draft files so they can be safely saved into DB. The
207 * form has to contain the 'editor' element named foobar_editor, where 'foobar'
208 * is the name of the database field to hold the wysiwyg editor content. The
209 * editor data comes as an array with text, format and itemid properties. This
210 * function automatically adds $data properties foobar, foobarformat and
211 * foobartrust, where foobar has URL to embedded files encoded.
213 * @category files
214 * @param stdClass $data raw data submitted by the form
215 * @param string $field name of the database field containing the html with embedded media files
216 * @param array $options editor options (trusttext, subdirs, maxfiles, maxbytes etc.)
217 * @param stdClass $context context, required for existing data
218 * @param string $component file component
219 * @param string $filearea file area name
220 * @param int $itemid item id, required if item exists
221 * @return stdClass modified data object
223 function file_postupdate_standard_editor($data, $field, array $options, $context, $component=null, $filearea=null, $itemid=null) {
224 $options = (array)$options;
225 if (!isset($options['trusttext'])) {
226 $options['trusttext'] = false;
228 if (!isset($options['forcehttps'])) {
229 $options['forcehttps'] = false;
231 if (!isset($options['subdirs'])) {
232 $options['subdirs'] = false;
234 if (!isset($options['maxfiles'])) {
235 $options['maxfiles'] = 0; // no files by default
237 if (!isset($options['maxbytes'])) {
238 $options['maxbytes'] = 0; // unlimited
241 if ($options['trusttext']) {
242 $data->{$field.'trust'} = trusttext_trusted($context);
243 } else {
244 $data->{$field.'trust'} = 0;
247 $editor = $data->{$field.'_editor'};
249 if ($options['maxfiles'] == 0 or is_null($filearea) or is_null($itemid) or empty($editor['itemid'])) {
250 $data->{$field} = $editor['text'];
251 } else {
252 $data->{$field} = file_save_draft_area_files($editor['itemid'], $context->id, $component, $filearea, $itemid, $options, $editor['text'], $options['forcehttps']);
254 $data->{$field.'format'} = $editor['format'];
256 return $data;
260 * Saves text and files modified by Editor formslib element
262 * @category files
263 * @param stdClass $data $database entry field
264 * @param string $field name of data field
265 * @param array $options various options
266 * @param stdClass $context context - must already exist
267 * @param string $component
268 * @param string $filearea file area name
269 * @param int $itemid must already exist, usually means data is in db
270 * @return stdClass modified data obejct
272 function file_prepare_standard_filemanager($data, $field, array $options, $context=null, $component=null, $filearea=null, $itemid=null) {
273 $options = (array)$options;
274 if (!isset($options['subdirs'])) {
275 $options['subdirs'] = false;
277 if (is_null($itemid) or is_null($context)) {
278 $itemid = null;
279 $contextid = null;
280 } else {
281 $contextid = $context->id;
284 $draftid_editor = file_get_submitted_draft_itemid($field.'_filemanager');
285 file_prepare_draft_area($draftid_editor, $contextid, $component, $filearea, $itemid, $options);
286 $data->{$field.'_filemanager'} = $draftid_editor;
288 return $data;
292 * Saves files modified by File manager formslib element
294 * @todo MDL-31073 review this function
295 * @category files
296 * @param stdClass $data $database entry field
297 * @param string $field name of data field
298 * @param array $options various options
299 * @param stdClass $context context - must already exist
300 * @param string $component
301 * @param string $filearea file area name
302 * @param int $itemid must already exist, usually means data is in db
303 * @return stdClass modified data obejct
305 function file_postupdate_standard_filemanager($data, $field, array $options, $context, $component, $filearea, $itemid) {
306 $options = (array)$options;
307 if (!isset($options['subdirs'])) {
308 $options['subdirs'] = false;
310 if (!isset($options['maxfiles'])) {
311 $options['maxfiles'] = -1; // unlimited
313 if (!isset($options['maxbytes'])) {
314 $options['maxbytes'] = 0; // unlimited
317 if (empty($data->{$field.'_filemanager'})) {
318 $data->$field = '';
320 } else {
321 file_save_draft_area_files($data->{$field.'_filemanager'}, $context->id, $component, $filearea, $itemid, $options);
322 $fs = get_file_storage();
324 if ($fs->get_area_files($context->id, $component, $filearea, $itemid)) {
325 $data->$field = '1'; // TODO: this is an ugly hack (skodak)
326 } else {
327 $data->$field = '';
331 return $data;
335 * Generate a draft itemid
337 * @category files
338 * @global moodle_database $DB
339 * @global stdClass $USER
340 * @return int a random but available draft itemid that can be used to create a new draft
341 * file area.
343 function file_get_unused_draft_itemid() {
344 global $DB, $USER;
346 if (isguestuser() or !isloggedin()) {
347 // guests and not-logged-in users can not be allowed to upload anything!!!!!!
348 print_error('noguest');
351 $contextid = context_user::instance($USER->id)->id;
353 $fs = get_file_storage();
354 $draftitemid = rand(1, 999999999);
355 while ($files = $fs->get_area_files($contextid, 'user', 'draft', $draftitemid)) {
356 $draftitemid = rand(1, 999999999);
359 return $draftitemid;
363 * Initialise a draft file area from a real one by copying the files. A draft
364 * area will be created if one does not already exist. Normally you should
365 * get $draftitemid by calling file_get_submitted_draft_itemid('elementname');
367 * @category files
368 * @global stdClass $CFG
369 * @global stdClass $USER
370 * @param int $draftitemid the id of the draft area to use, or 0 to create a new one, in which case this parameter is updated.
371 * @param int $contextid This parameter and the next two identify the file area to copy files from.
372 * @param string $component
373 * @param string $filearea helps indentify the file area.
374 * @param int $itemid helps identify the file area. Can be null if there are no files yet.
375 * @param array $options text and file options ('subdirs'=>false, 'forcehttps'=>false)
376 * @param string $text some html content that needs to have embedded links rewritten to point to the draft area.
377 * @return string|null returns string if $text was passed in, the rewritten $text is returned. Otherwise NULL.
379 function file_prepare_draft_area(&$draftitemid, $contextid, $component, $filearea, $itemid, array $options=null, $text=null) {
380 global $CFG, $USER, $CFG;
382 $options = (array)$options;
383 if (!isset($options['subdirs'])) {
384 $options['subdirs'] = false;
386 if (!isset($options['forcehttps'])) {
387 $options['forcehttps'] = false;
390 $usercontext = context_user::instance($USER->id);
391 $fs = get_file_storage();
393 if (empty($draftitemid)) {
394 // create a new area and copy existing files into
395 $draftitemid = file_get_unused_draft_itemid();
396 $file_record = array('contextid'=>$usercontext->id, 'component'=>'user', 'filearea'=>'draft', 'itemid'=>$draftitemid);
397 if (!is_null($itemid) and $files = $fs->get_area_files($contextid, $component, $filearea, $itemid)) {
398 foreach ($files as $file) {
399 if ($file->is_directory() and $file->get_filepath() === '/') {
400 // we need a way to mark the age of each draft area,
401 // by not copying the root dir we force it to be created automatically with current timestamp
402 continue;
404 if (!$options['subdirs'] and ($file->is_directory() or $file->get_filepath() !== '/')) {
405 continue;
407 $draftfile = $fs->create_file_from_storedfile($file_record, $file);
408 // XXX: This is a hack for file manager (MDL-28666)
409 // File manager needs to know the original file information before copying
410 // to draft area, so we append these information in mdl_files.source field
411 // {@link file_storage::search_references()}
412 // {@link file_storage::search_references_count()}
413 $sourcefield = $file->get_source();
414 $newsourcefield = new stdClass;
415 $newsourcefield->source = $sourcefield;
416 $original = new stdClass;
417 $original->contextid = $contextid;
418 $original->component = $component;
419 $original->filearea = $filearea;
420 $original->itemid = $itemid;
421 $original->filename = $file->get_filename();
422 $original->filepath = $file->get_filepath();
423 $newsourcefield->original = file_storage::pack_reference($original);
424 $draftfile->set_source(serialize($newsourcefield));
425 // End of file manager hack
428 if (!is_null($text)) {
429 // at this point there should not be any draftfile links yet,
430 // because this is a new text from database that should still contain the @@pluginfile@@ links
431 // this happens when developers forget to post process the text
432 $text = str_replace("\"$CFG->httpswwwroot/draftfile.php", "\"$CFG->httpswwwroot/brokenfile.php#", $text);
434 } else {
435 // nothing to do
438 if (is_null($text)) {
439 return null;
442 // relink embedded files - editor can not handle @@PLUGINFILE@@ !
443 return file_rewrite_pluginfile_urls($text, 'draftfile.php', $usercontext->id, 'user', 'draft', $draftitemid, $options);
447 * Convert encoded URLs in $text from the @@PLUGINFILE@@/... form to an actual URL.
449 * @category files
450 * @global stdClass $CFG
451 * @param string $text The content that may contain ULRs in need of rewriting.
452 * @param string $file The script that should be used to serve these files. pluginfile.php, draftfile.php, etc.
453 * @param int $contextid This parameter and the next two identify the file area to use.
454 * @param string $component
455 * @param string $filearea helps identify the file area.
456 * @param int $itemid helps identify the file area.
457 * @param array $options text and file options ('forcehttps'=>false)
458 * @return string the processed text.
460 function file_rewrite_pluginfile_urls($text, $file, $contextid, $component, $filearea, $itemid, array $options=null) {
461 global $CFG;
463 $options = (array)$options;
464 if (!isset($options['forcehttps'])) {
465 $options['forcehttps'] = false;
468 if (!$CFG->slasharguments) {
469 $file = $file . '?file=';
472 $baseurl = "$CFG->wwwroot/$file/$contextid/$component/$filearea/";
474 if ($itemid !== null) {
475 $baseurl .= "$itemid/";
478 if ($options['forcehttps']) {
479 $baseurl = str_replace('http://', 'https://', $baseurl);
482 return str_replace('@@PLUGINFILE@@/', $baseurl, $text);
486 * Returns information about files in a draft area.
488 * @global stdClass $CFG
489 * @global stdClass $USER
490 * @param int $draftitemid the draft area item id.
491 * @param string $filepath path to the directory from which the information have to be retrieved.
492 * @return array with the following entries:
493 * 'filecount' => number of files in the draft area.
494 * 'filesize' => total size of the files in the draft area.
495 * 'foldercount' => number of folders in the draft area.
496 * 'filesize_without_references' => total size of the area excluding file references.
497 * (more information will be added as needed).
499 function file_get_draft_area_info($draftitemid, $filepath = '/') {
500 global $CFG, $USER;
502 $usercontext = context_user::instance($USER->id);
503 $fs = get_file_storage();
505 $results = array(
506 'filecount' => 0,
507 'foldercount' => 0,
508 'filesize' => 0,
509 'filesize_without_references' => 0
512 if ($filepath != '/') {
513 $draftfiles = $fs->get_directory_files($usercontext->id, 'user', 'draft', $draftitemid, $filepath, true, true);
514 } else {
515 $draftfiles = $fs->get_area_files($usercontext->id, 'user', 'draft', $draftitemid, 'id', true);
517 foreach ($draftfiles as $file) {
518 if ($file->is_directory()) {
519 $results['foldercount'] += 1;
520 } else {
521 $results['filecount'] += 1;
524 $filesize = $file->get_filesize();
525 $results['filesize'] += $filesize;
526 if (!$file->is_external_file()) {
527 $results['filesize_without_references'] += $filesize;
531 return $results;
535 * Returns whether a draft area has exceeded/will exceed its size limit.
537 * Please note that the unlimited value for $areamaxbytes is -1 {@link FILE_AREA_MAX_BYTES_UNLIMITED}, not 0.
539 * @param int $draftitemid the draft area item id.
540 * @param int $areamaxbytes the maximum size allowed in this draft area.
541 * @param int $newfilesize the size that would be added to the current area.
542 * @param bool $includereferences true to include the size of the references in the area size.
543 * @return bool true if the area will/has exceeded its limit.
544 * @since Moodle 2.4
546 function file_is_draft_area_limit_reached($draftitemid, $areamaxbytes, $newfilesize = 0, $includereferences = false) {
547 if ($areamaxbytes != FILE_AREA_MAX_BYTES_UNLIMITED) {
548 $draftinfo = file_get_draft_area_info($draftitemid);
549 $areasize = $draftinfo['filesize_without_references'];
550 if ($includereferences) {
551 $areasize = $draftinfo['filesize'];
553 if ($areasize + $newfilesize > $areamaxbytes) {
554 return true;
557 return false;
561 * Get used space of files
562 * @global moodle_database $DB
563 * @global stdClass $USER
564 * @return int total bytes
566 function file_get_user_used_space() {
567 global $DB, $USER;
569 $usercontext = context_user::instance($USER->id);
570 $sql = "SELECT SUM(files1.filesize) AS totalbytes FROM {files} files1
571 JOIN (SELECT contenthash, filename, MAX(id) AS id
572 FROM {files}
573 WHERE contextid = ? AND component = ? AND filearea != ?
574 GROUP BY contenthash, filename) files2 ON files1.id = files2.id";
575 $params = array('contextid'=>$usercontext->id, 'component'=>'user', 'filearea'=>'draft');
576 $record = $DB->get_record_sql($sql, $params);
577 return (int)$record->totalbytes;
581 * Convert any string to a valid filepath
582 * @todo review this function
583 * @param string $str
584 * @return string path
586 function file_correct_filepath($str) { //TODO: what is this? (skodak) - No idea (Fred)
587 if ($str == '/' or empty($str)) {
588 return '/';
589 } else {
590 return '/'.trim($str, '/').'/';
595 * Generate a folder tree of draft area of current USER recursively
597 * @todo MDL-31073 use normal return value instead, this does not fit the rest of api here (skodak)
598 * @param int $draftitemid
599 * @param string $filepath
600 * @param mixed $data
602 function file_get_drafarea_folders($draftitemid, $filepath, &$data) {
603 global $USER, $OUTPUT, $CFG;
604 $data->children = array();
605 $context = context_user::instance($USER->id);
606 $fs = get_file_storage();
607 if ($files = $fs->get_directory_files($context->id, 'user', 'draft', $draftitemid, $filepath, false)) {
608 foreach ($files as $file) {
609 if ($file->is_directory()) {
610 $item = new stdClass();
611 $item->sortorder = $file->get_sortorder();
612 $item->filepath = $file->get_filepath();
614 $foldername = explode('/', trim($item->filepath, '/'));
615 $item->fullname = trim(array_pop($foldername), '/');
617 $item->id = uniqid();
618 file_get_drafarea_folders($draftitemid, $item->filepath, $item);
619 $data->children[] = $item;
620 } else {
621 continue;
628 * Listing all files (including folders) in current path (draft area)
629 * used by file manager
630 * @param int $draftitemid
631 * @param string $filepath
632 * @return stdClass
634 function file_get_drafarea_files($draftitemid, $filepath = '/') {
635 global $USER, $OUTPUT, $CFG;
637 $context = context_user::instance($USER->id);
638 $fs = get_file_storage();
640 $data = new stdClass();
641 $data->path = array();
642 $data->path[] = array('name'=>get_string('files'), 'path'=>'/');
644 // will be used to build breadcrumb
645 $trail = '/';
646 if ($filepath !== '/') {
647 $filepath = file_correct_filepath($filepath);
648 $parts = explode('/', $filepath);
649 foreach ($parts as $part) {
650 if ($part != '' && $part != null) {
651 $trail .= ($part.'/');
652 $data->path[] = array('name'=>$part, 'path'=>$trail);
657 $list = array();
658 $maxlength = 12;
659 if ($files = $fs->get_directory_files($context->id, 'user', 'draft', $draftitemid, $filepath, false)) {
660 foreach ($files as $file) {
661 $item = new stdClass();
662 $item->filename = $file->get_filename();
663 $item->filepath = $file->get_filepath();
664 $item->fullname = trim($item->filename, '/');
665 $filesize = $file->get_filesize();
666 $item->size = $filesize ? $filesize : null;
667 $item->filesize = $filesize ? display_size($filesize) : '';
669 $item->sortorder = $file->get_sortorder();
670 $item->author = $file->get_author();
671 $item->license = $file->get_license();
672 $item->datemodified = $file->get_timemodified();
673 $item->datecreated = $file->get_timecreated();
674 $item->isref = $file->is_external_file();
675 if ($item->isref && $file->get_status() == 666) {
676 $item->originalmissing = true;
678 // find the file this draft file was created from and count all references in local
679 // system pointing to that file
680 $source = @unserialize($file->get_source());
681 if (isset($source->original)) {
682 $item->refcount = $fs->search_references_count($source->original);
685 if ($file->is_directory()) {
686 $item->filesize = 0;
687 $item->icon = $OUTPUT->pix_url(file_folder_icon(24))->out(false);
688 $item->type = 'folder';
689 $foldername = explode('/', trim($item->filepath, '/'));
690 $item->fullname = trim(array_pop($foldername), '/');
691 $item->thumbnail = $OUTPUT->pix_url(file_folder_icon(90))->out(false);
692 } else {
693 // do NOT use file browser here!
694 $item->mimetype = get_mimetype_description($file);
695 if (file_extension_in_typegroup($file->get_filename(), 'archive')) {
696 $item->type = 'zip';
697 } else {
698 $item->type = 'file';
700 $itemurl = moodle_url::make_draftfile_url($draftitemid, $item->filepath, $item->filename);
701 $item->url = $itemurl->out();
702 $item->icon = $OUTPUT->pix_url(file_file_icon($file, 24))->out(false);
703 $item->thumbnail = $OUTPUT->pix_url(file_file_icon($file, 90))->out(false);
704 if ($imageinfo = $file->get_imageinfo()) {
705 $item->realthumbnail = $itemurl->out(false, array('preview' => 'thumb', 'oid' => $file->get_timemodified()));
706 $item->realicon = $itemurl->out(false, array('preview' => 'tinyicon', 'oid' => $file->get_timemodified()));
707 $item->image_width = $imageinfo['width'];
708 $item->image_height = $imageinfo['height'];
711 $list[] = $item;
714 $data->itemid = $draftitemid;
715 $data->list = $list;
716 return $data;
720 * Returns draft area itemid for a given element.
722 * @category files
723 * @param string $elname name of formlib editor element, or a hidden form field that stores the draft area item id, etc.
724 * @return int the itemid, or 0 if there is not one yet.
726 function file_get_submitted_draft_itemid($elname) {
727 // this is a nasty hack, ideally all new elements should use arrays here or there should be a new parameter
728 if (!isset($_REQUEST[$elname])) {
729 return 0;
731 if (is_array($_REQUEST[$elname])) {
732 $param = optional_param_array($elname, 0, PARAM_INT);
733 if (!empty($param['itemid'])) {
734 $param = $param['itemid'];
735 } else {
736 debugging('Missing itemid, maybe caused by unset maxfiles option', DEBUG_DEVELOPER);
737 return false;
740 } else {
741 $param = optional_param($elname, 0, PARAM_INT);
744 if ($param) {
745 require_sesskey();
748 return $param;
752 * Restore the original source field from draft files
754 * Do not use this function because it makes field files.source inconsistent
755 * for draft area files. This function will be deprecated in 2.6
757 * @param stored_file $storedfile This only works with draft files
758 * @return stored_file
760 function file_restore_source_field_from_draft_file($storedfile) {
761 $source = @unserialize($storedfile->get_source());
762 if (!empty($source)) {
763 if (is_object($source)) {
764 $restoredsource = $source->source;
765 $storedfile->set_source($restoredsource);
766 } else {
767 throw new moodle_exception('invalidsourcefield', 'error');
770 return $storedfile;
773 * Saves files from a draft file area to a real one (merging the list of files).
774 * Can rewrite URLs in some content at the same time if desired.
776 * @category files
777 * @global stdClass $USER
778 * @param int $draftitemid the id of the draft area to use. Normally obtained
779 * from file_get_submitted_draft_itemid('elementname') or similar.
780 * @param int $contextid This parameter and the next two identify the file area to save to.
781 * @param string $component
782 * @param string $filearea indentifies the file area.
783 * @param int $itemid helps identifies the file area.
784 * @param array $options area options (subdirs=>false, maxfiles=-1, maxbytes=0)
785 * @param string $text some html content that needs to have embedded links rewritten
786 * to the @@PLUGINFILE@@ form for saving in the database.
787 * @param bool $forcehttps force https urls.
788 * @return string|null if $text was passed in, the rewritten $text is returned. Otherwise NULL.
790 function file_save_draft_area_files($draftitemid, $contextid, $component, $filearea, $itemid, array $options=null, $text=null, $forcehttps=false) {
791 global $USER;
793 $usercontext = context_user::instance($USER->id);
794 $fs = get_file_storage();
796 $options = (array)$options;
797 if (!isset($options['subdirs'])) {
798 $options['subdirs'] = false;
800 if (!isset($options['maxfiles'])) {
801 $options['maxfiles'] = -1; // unlimited
803 if (!isset($options['maxbytes']) || $options['maxbytes'] == USER_CAN_IGNORE_FILE_SIZE_LIMITS) {
804 $options['maxbytes'] = 0; // unlimited
806 if (!isset($options['areamaxbytes'])) {
807 $options['areamaxbytes'] = FILE_AREA_MAX_BYTES_UNLIMITED; // Unlimited.
809 $allowreferences = true;
810 if (isset($options['return_types']) && !($options['return_types'] & FILE_REFERENCE)) {
811 // we assume that if $options['return_types'] is NOT specified, we DO allow references.
812 // this is not exactly right. BUT there are many places in code where filemanager options
813 // are not passed to file_save_draft_area_files()
814 $allowreferences = false;
817 // Check if the draft area has exceeded the authorised limit. This should never happen as validation
818 // should have taken place before, unless the user is doing something nauthly. If so, let's just not save
819 // anything at all in the next area.
820 if (file_is_draft_area_limit_reached($draftitemid, $options['areamaxbytes'])) {
821 return null;
824 $draftfiles = $fs->get_area_files($usercontext->id, 'user', 'draft', $draftitemid, 'id');
825 $oldfiles = $fs->get_area_files($contextid, $component, $filearea, $itemid, 'id');
827 // One file in filearea means it is empty (it has only top-level directory '.').
828 if (count($draftfiles) > 1 || count($oldfiles) > 1) {
829 // we have to merge old and new files - we want to keep file ids for files that were not changed
830 // we change time modified for all new and changed files, we keep time created as is
832 $newhashes = array();
833 $filecount = 0;
834 foreach ($draftfiles as $file) {
835 if (!$options['subdirs'] && $file->get_filepath() !== '/') {
836 continue;
838 if (!$allowreferences && $file->is_external_file()) {
839 continue;
841 if (!$file->is_directory()) {
842 if ($options['maxbytes'] and $options['maxbytes'] < $file->get_filesize()) {
843 // oversized file - should not get here at all
844 continue;
846 if ($options['maxfiles'] != -1 and $options['maxfiles'] <= $filecount) {
847 // more files - should not get here at all
848 continue;
850 $filecount++;
852 $newhash = $fs->get_pathname_hash($contextid, $component, $filearea, $itemid, $file->get_filepath(), $file->get_filename());
853 $newhashes[$newhash] = $file;
856 // Loop through oldfiles and decide which we need to delete and which to update.
857 // After this cycle the array $newhashes will only contain the files that need to be added.
858 foreach ($oldfiles as $oldfile) {
859 $oldhash = $oldfile->get_pathnamehash();
860 if (!isset($newhashes[$oldhash])) {
861 // delete files not needed any more - deleted by user
862 $oldfile->delete();
863 continue;
866 $newfile = $newhashes[$oldhash];
867 // Now we know that we have $oldfile and $newfile for the same path.
868 // Let's check if we can update this file or we need to delete and create.
869 if ($newfile->is_directory()) {
870 // Directories are always ok to just update.
871 } else if (($source = @unserialize($newfile->get_source())) && isset($source->original)) {
872 // File has the 'original' - we need to update the file (it may even have not been changed at all).
873 $original = file_storage::unpack_reference($source->original);
874 if ($original['filename'] !== $oldfile->get_filename() || $original['filepath'] !== $oldfile->get_filepath()) {
875 // Very odd, original points to another file. Delete and create file.
876 $oldfile->delete();
877 continue;
879 } else {
880 // The same file name but absence of 'original' means that file was deteled and uploaded again.
881 // By deleting and creating new file we properly manage all existing references.
882 $oldfile->delete();
883 continue;
886 // status changed, we delete old file, and create a new one
887 if ($oldfile->get_status() != $newfile->get_status()) {
888 // file was changed, use updated with new timemodified data
889 $oldfile->delete();
890 // This file will be added later
891 continue;
894 // Updated author
895 if ($oldfile->get_author() != $newfile->get_author()) {
896 $oldfile->set_author($newfile->get_author());
898 // Updated license
899 if ($oldfile->get_license() != $newfile->get_license()) {
900 $oldfile->set_license($newfile->get_license());
903 // Updated file source
904 // Field files.source for draftarea files contains serialised object with source and original information.
905 // We only store the source part of it for non-draft file area.
906 $newsource = $newfile->get_source();
907 if ($source = @unserialize($newfile->get_source())) {
908 $newsource = $source->source;
910 if ($oldfile->get_source() !== $newsource) {
911 $oldfile->set_source($newsource);
914 // Updated sort order
915 if ($oldfile->get_sortorder() != $newfile->get_sortorder()) {
916 $oldfile->set_sortorder($newfile->get_sortorder());
919 // Update file timemodified
920 if ($oldfile->get_timemodified() != $newfile->get_timemodified()) {
921 $oldfile->set_timemodified($newfile->get_timemodified());
924 // Replaced file content
925 if (!$oldfile->is_directory() &&
926 ($oldfile->get_contenthash() != $newfile->get_contenthash() ||
927 $oldfile->get_filesize() != $newfile->get_filesize() ||
928 $oldfile->get_referencefileid() != $newfile->get_referencefileid() ||
929 $oldfile->get_userid() != $newfile->get_userid())) {
930 $oldfile->replace_file_with($newfile);
933 // unchanged file or directory - we keep it as is
934 unset($newhashes[$oldhash]);
937 // Add fresh file or the file which has changed status
938 // the size and subdirectory tests are extra safety only, the UI should prevent it
939 foreach ($newhashes as $file) {
940 $file_record = array('contextid'=>$contextid, 'component'=>$component, 'filearea'=>$filearea, 'itemid'=>$itemid, 'timemodified'=>time());
941 if ($source = @unserialize($file->get_source())) {
942 // Field files.source for draftarea files contains serialised object with source and original information.
943 // We only store the source part of it for non-draft file area.
944 $file_record['source'] = $source->source;
947 if ($file->is_external_file()) {
948 $repoid = $file->get_repository_id();
949 if (!empty($repoid)) {
950 $file_record['repositoryid'] = $repoid;
951 $file_record['reference'] = $file->get_reference();
955 $fs->create_file_from_storedfile($file_record, $file);
959 // note: do not purge the draft area - we clean up areas later in cron,
960 // the reason is that user might press submit twice and they would loose the files,
961 // also sometimes we might want to use hacks that save files into two different areas
963 if (is_null($text)) {
964 return null;
965 } else {
966 return file_rewrite_urls_to_pluginfile($text, $draftitemid, $forcehttps);
971 * Convert the draft file area URLs in some content to @@PLUGINFILE@@ tokens
972 * ready to be saved in the database. Normally, this is done automatically by
973 * {@link file_save_draft_area_files()}.
975 * @category files
976 * @param string $text the content to process.
977 * @param int $draftitemid the draft file area the content was using.
978 * @param bool $forcehttps whether the content contains https URLs. Default false.
979 * @return string the processed content.
981 function file_rewrite_urls_to_pluginfile($text, $draftitemid, $forcehttps = false) {
982 global $CFG, $USER;
984 $usercontext = context_user::instance($USER->id);
986 $wwwroot = $CFG->wwwroot;
987 if ($forcehttps) {
988 $wwwroot = str_replace('http://', 'https://', $wwwroot);
991 // relink embedded files if text submitted - no absolute links allowed in database!
992 $text = str_ireplace("$wwwroot/draftfile.php/$usercontext->id/user/draft/$draftitemid/", '@@PLUGINFILE@@/', $text);
994 if (strpos($text, 'draftfile.php?file=') !== false) {
995 $matches = array();
996 preg_match_all("!$wwwroot/draftfile.php\?file=%2F{$usercontext->id}%2Fuser%2Fdraft%2F{$draftitemid}%2F[^'\",&<>|`\s:\\\\]+!iu", $text, $matches);
997 if ($matches) {
998 foreach ($matches[0] as $match) {
999 $replace = str_ireplace('%2F', '/', $match);
1000 $text = str_replace($match, $replace, $text);
1003 $text = str_ireplace("$wwwroot/draftfile.php?file=/$usercontext->id/user/draft/$draftitemid/", '@@PLUGINFILE@@/', $text);
1006 return $text;
1010 * Set file sort order
1012 * @global moodle_database $DB
1013 * @param int $contextid the context id
1014 * @param string $component file component
1015 * @param string $filearea file area.
1016 * @param int $itemid itemid.
1017 * @param string $filepath file path.
1018 * @param string $filename file name.
1019 * @param int $sortorder the sort order of file.
1020 * @return bool
1022 function file_set_sortorder($contextid, $component, $filearea, $itemid, $filepath, $filename, $sortorder) {
1023 global $DB;
1024 $conditions = array('contextid'=>$contextid, 'component'=>$component, 'filearea'=>$filearea, 'itemid'=>$itemid, 'filepath'=>$filepath, 'filename'=>$filename);
1025 if ($file_record = $DB->get_record('files', $conditions)) {
1026 $sortorder = (int)$sortorder;
1027 $file_record->sortorder = $sortorder;
1028 $DB->update_record('files', $file_record);
1029 return true;
1031 return false;
1035 * reset file sort order number to 0
1036 * @global moodle_database $DB
1037 * @param int $contextid the context id
1038 * @param string $component
1039 * @param string $filearea file area.
1040 * @param int|bool $itemid itemid.
1041 * @return bool
1043 function file_reset_sortorder($contextid, $component, $filearea, $itemid=false) {
1044 global $DB;
1046 $conditions = array('contextid'=>$contextid, 'component'=>$component, 'filearea'=>$filearea);
1047 if ($itemid !== false) {
1048 $conditions['itemid'] = $itemid;
1051 $file_records = $DB->get_records('files', $conditions);
1052 foreach ($file_records as $file_record) {
1053 $file_record->sortorder = 0;
1054 $DB->update_record('files', $file_record);
1056 return true;
1060 * Returns description of upload error
1062 * @param int $errorcode found in $_FILES['filename.ext']['error']
1063 * @return string error description string, '' if ok
1065 function file_get_upload_error($errorcode) {
1067 switch ($errorcode) {
1068 case 0: // UPLOAD_ERR_OK - no error
1069 $errmessage = '';
1070 break;
1072 case 1: // UPLOAD_ERR_INI_SIZE
1073 $errmessage = get_string('uploadserverlimit');
1074 break;
1076 case 2: // UPLOAD_ERR_FORM_SIZE
1077 $errmessage = get_string('uploadformlimit');
1078 break;
1080 case 3: // UPLOAD_ERR_PARTIAL
1081 $errmessage = get_string('uploadpartialfile');
1082 break;
1084 case 4: // UPLOAD_ERR_NO_FILE
1085 $errmessage = get_string('uploadnofilefound');
1086 break;
1088 // Note: there is no error with a value of 5
1090 case 6: // UPLOAD_ERR_NO_TMP_DIR
1091 $errmessage = get_string('uploadnotempdir');
1092 break;
1094 case 7: // UPLOAD_ERR_CANT_WRITE
1095 $errmessage = get_string('uploadcantwrite');
1096 break;
1098 case 8: // UPLOAD_ERR_EXTENSION
1099 $errmessage = get_string('uploadextension');
1100 break;
1102 default:
1103 $errmessage = get_string('uploadproblem');
1106 return $errmessage;
1110 * Recursive function formating an array in POST parameter
1111 * @param array $arraydata - the array that we are going to format and add into &$data array
1112 * @param string $currentdata - a row of the final postdata array at instant T
1113 * when finish, it's assign to $data under this format: name[keyname][][]...[]='value'
1114 * @param array $data - the final data array containing all POST parameters : 1 row = 1 parameter
1116 function format_array_postdata_for_curlcall($arraydata, $currentdata, &$data) {
1117 foreach ($arraydata as $k=>$v) {
1118 $newcurrentdata = $currentdata;
1119 if (is_array($v)) { //the value is an array, call the function recursively
1120 $newcurrentdata = $newcurrentdata.'['.urlencode($k).']';
1121 format_array_postdata_for_curlcall($v, $newcurrentdata, $data);
1122 } else { //add the POST parameter to the $data array
1123 $data[] = $newcurrentdata.'['.urlencode($k).']='.urlencode($v);
1129 * Transform a PHP array into POST parameter
1130 * (see the recursive function format_array_postdata_for_curlcall)
1131 * @param array $postdata
1132 * @return array containing all POST parameters (1 row = 1 POST parameter)
1134 function format_postdata_for_curlcall($postdata) {
1135 $data = array();
1136 foreach ($postdata as $k=>$v) {
1137 if (is_array($v)) {
1138 $currentdata = urlencode($k);
1139 format_array_postdata_for_curlcall($v, $currentdata, $data);
1140 } else {
1141 $data[] = urlencode($k).'='.urlencode($v);
1144 $convertedpostdata = implode('&', $data);
1145 return $convertedpostdata;
1149 * Fetches content of file from Internet (using proxy if defined). Uses cURL extension if present.
1150 * Due to security concerns only downloads from http(s) sources are supported.
1152 * @category files
1153 * @param string $url file url starting with http(s)://
1154 * @param array $headers http headers, null if none. If set, should be an
1155 * associative array of header name => value pairs.
1156 * @param array $postdata array means use POST request with given parameters
1157 * @param bool $fullresponse return headers, responses, etc in a similar way snoopy does
1158 * (if false, just returns content)
1159 * @param int $timeout timeout for complete download process including all file transfer
1160 * (default 5 minutes)
1161 * @param int $connecttimeout timeout for connection to server; this is the timeout that
1162 * usually happens if the remote server is completely down (default 20 seconds);
1163 * may not work when using proxy
1164 * @param bool $skipcertverify If true, the peer's SSL certificate will not be checked.
1165 * Only use this when already in a trusted location.
1166 * @param string $tofile store the downloaded content to file instead of returning it.
1167 * @param bool $calctimeout false by default, true enables an extra head request to try and determine
1168 * filesize and appropriately larger timeout based on $CFG->curltimeoutkbitrate
1169 * @return mixed false if request failed or content of the file as string if ok. True if file downloaded into $tofile successfully.
1171 function download_file_content($url, $headers=null, $postdata=null, $fullresponse=false, $timeout=300, $connecttimeout=20, $skipcertverify=false, $tofile=NULL, $calctimeout=false) {
1172 global $CFG;
1174 // Only http and https links supported.
1175 if (!preg_match('|^https?://|i', $url)) {
1176 if ($fullresponse) {
1177 $response = new stdClass();
1178 $response->status = 0;
1179 $response->headers = array();
1180 $response->response_code = 'Invalid protocol specified in url';
1181 $response->results = '';
1182 $response->error = 'Invalid protocol specified in url';
1183 return $response;
1184 } else {
1185 return false;
1189 $options = array();
1191 $headers2 = array();
1192 if (is_array($headers)) {
1193 foreach ($headers as $key => $value) {
1194 if (is_numeric($key)) {
1195 $headers2[] = $value;
1196 } else {
1197 $headers2[] = "$key: $value";
1202 if ($skipcertverify) {
1203 $options['CURLOPT_SSL_VERIFYPEER'] = false;
1204 } else {
1205 $options['CURLOPT_SSL_VERIFYPEER'] = true;
1208 $options['CURLOPT_CONNECTTIMEOUT'] = $connecttimeout;
1210 $options['CURLOPT_FOLLOWLOCATION'] = 1;
1211 $options['CURLOPT_MAXREDIRS'] = 5;
1213 // Use POST if requested.
1214 if (is_array($postdata)) {
1215 $postdata = format_postdata_for_curlcall($postdata);
1216 } else if (empty($postdata)) {
1217 $postdata = null;
1220 // Optionally attempt to get more correct timeout by fetching the file size.
1221 if (!isset($CFG->curltimeoutkbitrate)) {
1222 // Use very slow rate of 56kbps as a timeout speed when not set.
1223 $bitrate = 56;
1224 } else {
1225 $bitrate = $CFG->curltimeoutkbitrate;
1227 if ($calctimeout and !isset($postdata)) {
1228 $curl = new curl();
1229 $curl->setHeader($headers2);
1231 $curl->head($url, $postdata, $options);
1233 $info = $curl->get_info();
1234 $error_no = $curl->get_errno();
1235 if (!$error_no && $info['download_content_length'] > 0) {
1236 // No curl errors - adjust for large files only - take max timeout.
1237 $timeout = max($timeout, ceil($info['download_content_length'] * 8 / ($bitrate * 1024)));
1241 $curl = new curl();
1242 $curl->setHeader($headers2);
1244 $options['CURLOPT_RETURNTRANSFER'] = true;
1245 $options['CURLOPT_NOBODY'] = false;
1246 $options['CURLOPT_TIMEOUT'] = $timeout;
1248 if ($tofile) {
1249 $fh = fopen($tofile, 'w');
1250 if (!$fh) {
1251 if ($fullresponse) {
1252 $response = new stdClass();
1253 $response->status = 0;
1254 $response->headers = array();
1255 $response->response_code = 'Can not write to file';
1256 $response->results = false;
1257 $response->error = 'Can not write to file';
1258 return $response;
1259 } else {
1260 return false;
1263 $options['CURLOPT_FILE'] = $fh;
1266 if (isset($postdata)) {
1267 $content = $curl->post($url, $postdata, $options);
1268 } else {
1269 $content = $curl->get($url, null, $options);
1272 if ($tofile) {
1273 fclose($fh);
1274 @chmod($tofile, $CFG->filepermissions);
1278 // Try to detect encoding problems.
1279 if ((curl_errno($ch) == 23 or curl_errno($ch) == 61) and defined('CURLOPT_ENCODING')) {
1280 curl_setopt($ch, CURLOPT_ENCODING, 'none');
1281 $result = curl_exec($ch);
1285 $info = $curl->get_info();
1286 $error_no = $curl->get_errno();
1287 $rawheaders = $curl->get_raw_response();
1289 if ($error_no) {
1290 $error = $content;
1291 if (!$fullresponse) {
1292 debugging("cURL request for \"$url\" failed with: $error ($error_no)", DEBUG_ALL);
1293 return false;
1296 $response = new stdClass();
1297 if ($error_no == 28) {
1298 $response->status = '-100'; // Mimic snoopy.
1299 } else {
1300 $response->status = '0';
1302 $response->headers = array();
1303 $response->response_code = $error;
1304 $response->results = false;
1305 $response->error = $error;
1306 return $response;
1309 if ($tofile) {
1310 $content = true;
1313 if (empty($info['http_code'])) {
1314 // For security reasons we support only true http connections (Location: file:// exploit prevention).
1315 $response = new stdClass();
1316 $response->status = '0';
1317 $response->headers = array();
1318 $response->response_code = 'Unknown cURL error';
1319 $response->results = false; // do NOT change this, we really want to ignore the result!
1320 $response->error = 'Unknown cURL error';
1322 } else {
1323 $response = new stdClass();
1324 $response->status = (string)$info['http_code'];
1325 $response->headers = $rawheaders;
1326 $response->results = $content;
1327 $response->error = '';
1329 // There might be multiple headers on redirect, find the status of the last one.
1330 $firstline = true;
1331 foreach ($rawheaders as $line) {
1332 if ($firstline) {
1333 $response->response_code = $line;
1334 $firstline = false;
1336 if (trim($line, "\r\n") === '') {
1337 $firstline = true;
1342 if ($fullresponse) {
1343 return $response;
1346 if ($info['http_code'] != 200) {
1347 debugging("cURL request for \"$url\" failed, HTTP response code: ".$response->response_code, DEBUG_ALL);
1348 return false;
1350 return $response->results;
1354 * Returns a list of information about file types based on extensions.
1356 * The following elements expected in value array for each extension:
1357 * 'type' - mimetype
1358 * 'icon' - location of the icon file. If value is FILENAME, then either pix/f/FILENAME.gif
1359 * or pix/f/FILENAME.png must be present in moodle and contain 16x16 filetype icon;
1360 * also files with bigger sizes under names
1361 * FILENAME-24, FILENAME-32, FILENAME-64, FILENAME-128, FILENAME-256 are recommended.
1362 * 'groups' (optional) - array of filetype groups this filetype extension is part of;
1363 * commonly used in moodle the following groups:
1364 * - web_image - image that can be included as <img> in HTML
1365 * - image - image that we can parse using GD to find it's dimensions, also used for portfolio format
1366 * - video - file that can be imported as video in text editor
1367 * - audio - file that can be imported as audio in text editor
1368 * - archive - we can extract files from this archive
1369 * - spreadsheet - used for portfolio format
1370 * - document - used for portfolio format
1371 * - presentation - used for portfolio format
1372 * 'string' (optional) - the name of the string from lang/en/mimetypes.php that displays
1373 * human-readable description for this filetype;
1374 * Function {@link get_mimetype_description()} first looks at the presence of string for
1375 * particular mimetype (value of 'type'), if not found looks for string specified in 'string'
1376 * attribute, if not found returns the value of 'type';
1377 * 'defaulticon' (boolean, optional) - used by function {@link file_mimetype_icon()} to find
1378 * an icon for mimetype. If an entry with 'defaulticon' is not found for a particular mimetype,
1379 * this function will return first found icon; Especially usefull for types such as 'text/plain'
1381 * @category files
1382 * @return array List of information about file types based on extensions.
1383 * Associative array of extension (lower-case) to associative array
1384 * from 'element name' to data. Current element names are 'type' and 'icon'.
1385 * Unknown types should use the 'xxx' entry which includes defaults.
1387 function &get_mimetypes_array() {
1388 static $mimearray = array (
1389 'xxx' => array ('type'=>'document/unknown', 'icon'=>'unknown'),
1390 '3gp' => array ('type'=>'video/quicktime', 'icon'=>'quicktime', 'groups'=>array('video'), 'string'=>'video'),
1391 'aac' => array ('type'=>'audio/aac', 'icon'=>'audio', 'groups'=>array('audio'), 'string'=>'audio'),
1392 'accdb' => array ('type'=>'application/msaccess', 'icon'=>'base'),
1393 'ai' => array ('type'=>'application/postscript', 'icon'=>'eps', 'groups'=>array('image'), 'string'=>'image'),
1394 'aif' => array ('type'=>'audio/x-aiff', 'icon'=>'audio', 'groups'=>array('audio'), 'string'=>'audio'),
1395 'aiff' => array ('type'=>'audio/x-aiff', 'icon'=>'audio', 'groups'=>array('audio'), 'string'=>'audio'),
1396 'aifc' => array ('type'=>'audio/x-aiff', 'icon'=>'audio', 'groups'=>array('audio'), 'string'=>'audio'),
1397 'applescript' => array ('type'=>'text/plain', 'icon'=>'text'),
1398 'asc' => array ('type'=>'text/plain', 'icon'=>'sourcecode'),
1399 'asm' => array ('type'=>'text/plain', 'icon'=>'sourcecode'),
1400 'au' => array ('type'=>'audio/au', 'icon'=>'audio', 'groups'=>array('audio'), 'string'=>'audio'),
1401 'avi' => array ('type'=>'video/x-ms-wm', 'icon'=>'avi', 'groups'=>array('video','web_video'), 'string'=>'video'),
1402 'bmp' => array ('type'=>'image/bmp', 'icon'=>'bmp', 'groups'=>array('image'), 'string'=>'image'),
1403 'c' => array ('type'=>'text/plain', 'icon'=>'sourcecode'),
1404 'cct' => array ('type'=>'shockwave/director', 'icon'=>'flash'),
1405 'cpp' => array ('type'=>'text/plain', 'icon'=>'sourcecode'),
1406 'cs' => array ('type'=>'application/x-csh', 'icon'=>'sourcecode'),
1407 'css' => array ('type'=>'text/css', 'icon'=>'text', 'groups'=>array('web_file')),
1408 'csv' => array ('type'=>'text/csv', 'icon'=>'spreadsheet', 'groups'=>array('spreadsheet')),
1409 'dv' => array ('type'=>'video/x-dv', 'icon'=>'quicktime', 'groups'=>array('video'), 'string'=>'video'),
1410 'dmg' => array ('type'=>'application/octet-stream', 'icon'=>'unknown'),
1412 'doc' => array ('type'=>'application/msword', 'icon'=>'document', 'groups'=>array('document')),
1413 'bdoc' => array ('type'=>'application/x-digidoc', 'icon'=>'document', 'groups'=>array('archive')),
1414 'cdoc' => array ('type'=>'application/x-digidoc', 'icon'=>'document', 'groups'=>array('archive')),
1415 'ddoc' => array ('type'=>'application/x-digidoc', 'icon'=>'document', 'groups'=>array('archive')),
1416 'docx' => array ('type'=>'application/vnd.openxmlformats-officedocument.wordprocessingml.document', 'icon'=>'document', 'groups'=>array('document')),
1417 'docm' => array ('type'=>'application/vnd.ms-word.document.macroEnabled.12', 'icon'=>'document'),
1418 'dotx' => array ('type'=>'application/vnd.openxmlformats-officedocument.wordprocessingml.template', 'icon'=>'document'),
1419 'dotm' => array ('type'=>'application/vnd.ms-word.template.macroEnabled.12', 'icon'=>'document'),
1421 'dcr' => array ('type'=>'application/x-director', 'icon'=>'flash'),
1422 'dif' => array ('type'=>'video/x-dv', 'icon'=>'quicktime', 'groups'=>array('video'), 'string'=>'video'),
1423 'dir' => array ('type'=>'application/x-director', 'icon'=>'flash'),
1424 'dxr' => array ('type'=>'application/x-director', 'icon'=>'flash'),
1425 'eps' => array ('type'=>'application/postscript', 'icon'=>'eps'),
1426 'epub' => array ('type'=>'application/epub+zip', 'icon'=>'epub', 'groups'=>array('document')),
1427 'fdf' => array ('type'=>'application/pdf', 'icon'=>'pdf'),
1428 'flv' => array ('type'=>'video/x-flv', 'icon'=>'flash', 'groups'=>array('video','web_video'), 'string'=>'video'),
1429 'f4v' => array ('type'=>'video/mp4', 'icon'=>'flash', 'groups'=>array('video','web_video'), 'string'=>'video'),
1431 'gallery' => array ('type'=>'application/x-smarttech-notebook', 'icon'=>'archive'),
1432 'galleryitem' => array ('type'=>'application/x-smarttech-notebook', 'icon'=>'archive'),
1433 'gallerycollection' => array ('type'=>'application/x-smarttech-notebook', 'icon'=>'archive'),
1434 'gif' => array ('type'=>'image/gif', 'icon'=>'gif', 'groups'=>array('image', 'web_image'), 'string'=>'image'),
1435 'gtar' => array ('type'=>'application/x-gtar', 'icon'=>'archive', 'groups'=>array('archive'), 'string'=>'archive'),
1436 'tgz' => array ('type'=>'application/g-zip', 'icon'=>'archive', 'groups'=>array('archive'), 'string'=>'archive'),
1437 'gz' => array ('type'=>'application/g-zip', 'icon'=>'archive', 'groups'=>array('archive'), 'string'=>'archive'),
1438 'gzip' => array ('type'=>'application/g-zip', 'icon'=>'archive', 'groups'=>array('archive'), 'string'=>'archive'),
1439 'h' => array ('type'=>'text/plain', 'icon'=>'sourcecode'),
1440 'hpp' => array ('type'=>'text/plain', 'icon'=>'sourcecode'),
1441 'hqx' => array ('type'=>'application/mac-binhex40', 'icon'=>'archive', 'groups'=>array('archive'), 'string'=>'archive'),
1442 'htc' => array ('type'=>'text/x-component', 'icon'=>'markup'),
1443 'html' => array ('type'=>'text/html', 'icon'=>'html', 'groups'=>array('web_file')),
1444 'xhtml'=> array ('type'=>'application/xhtml+xml', 'icon'=>'html', 'groups'=>array('web_file')),
1445 'htm' => array ('type'=>'text/html', 'icon'=>'html', 'groups'=>array('web_file')),
1446 'ico' => array ('type'=>'image/vnd.microsoft.icon', 'icon'=>'image', 'groups'=>array('image'), 'string'=>'image'),
1447 'ics' => array ('type'=>'text/calendar', 'icon'=>'text'),
1448 'isf' => array ('type'=>'application/inspiration', 'icon'=>'isf'),
1449 'ist' => array ('type'=>'application/inspiration.template', 'icon'=>'isf'),
1450 'java' => array ('type'=>'text/plain', 'icon'=>'sourcecode'),
1451 'jar' => array ('type'=>'application/java-archive', 'icon' => 'archive'),
1452 'jcb' => array ('type'=>'text/xml', 'icon'=>'markup'),
1453 'jcl' => array ('type'=>'text/xml', 'icon'=>'markup'),
1454 'jcw' => array ('type'=>'text/xml', 'icon'=>'markup'),
1455 'jmt' => array ('type'=>'text/xml', 'icon'=>'markup'),
1456 'jmx' => array ('type'=>'text/xml', 'icon'=>'markup'),
1457 'jnlp' => array ('type'=>'application/x-java-jnlp-file', 'icon'=>'markup'),
1458 'jpe' => array ('type'=>'image/jpeg', 'icon'=>'jpeg', 'groups'=>array('image', 'web_image'), 'string'=>'image'),
1459 'jpeg' => array ('type'=>'image/jpeg', 'icon'=>'jpeg', 'groups'=>array('image', 'web_image'), 'string'=>'image'),
1460 'jpg' => array ('type'=>'image/jpeg', 'icon'=>'jpeg', 'groups'=>array('image', 'web_image'), 'string'=>'image'),
1461 'jqz' => array ('type'=>'text/xml', 'icon'=>'markup'),
1462 'js' => array ('type'=>'application/x-javascript', 'icon'=>'text', 'groups'=>array('web_file')),
1463 'latex'=> array ('type'=>'application/x-latex', 'icon'=>'text'),
1464 'm' => array ('type'=>'text/plain', 'icon'=>'sourcecode'),
1465 'mbz' => array ('type'=>'application/vnd.moodle.backup', 'icon'=>'moodle'),
1466 'mdb' => array ('type'=>'application/x-msaccess', 'icon'=>'base'),
1467 'mht' => array ('type'=>'message/rfc822', 'icon'=>'archive'),
1468 'mhtml'=> array ('type'=>'message/rfc822', 'icon'=>'archive'),
1469 'mov' => array ('type'=>'video/quicktime', 'icon'=>'quicktime', 'groups'=>array('video','web_video'), 'string'=>'video'),
1470 'movie'=> array ('type'=>'video/x-sgi-movie', 'icon'=>'quicktime', 'groups'=>array('video'), 'string'=>'video'),
1471 'mw' => array ('type'=>'application/maple', 'icon'=>'math'),
1472 'mws' => array ('type'=>'application/maple', 'icon'=>'math'),
1473 'm3u' => array ('type'=>'audio/x-mpegurl', 'icon'=>'mp3', 'groups'=>array('audio'), 'string'=>'audio'),
1474 'mp3' => array ('type'=>'audio/mp3', 'icon'=>'mp3', 'groups'=>array('audio','web_audio'), 'string'=>'audio'),
1475 'mp4' => array ('type'=>'video/mp4', 'icon'=>'mpeg', 'groups'=>array('video','web_video'), 'string'=>'video'),
1476 'm4v' => array ('type'=>'video/mp4', 'icon'=>'mpeg', 'groups'=>array('video','web_video'), 'string'=>'video'),
1477 'm4a' => array ('type'=>'audio/mp4', 'icon'=>'mp3', 'groups'=>array('audio'), 'string'=>'audio'),
1478 'mpeg' => array ('type'=>'video/mpeg', 'icon'=>'mpeg', 'groups'=>array('video','web_video'), 'string'=>'video'),
1479 'mpe' => array ('type'=>'video/mpeg', 'icon'=>'mpeg', 'groups'=>array('video','web_video'), 'string'=>'video'),
1480 'mpg' => array ('type'=>'video/mpeg', 'icon'=>'mpeg', 'groups'=>array('video','web_video'), 'string'=>'video'),
1481 'mpr' => array ('type'=>'application/vnd.moodle.profiling', 'icon'=>'moodle'),
1483 'nbk' => array ('type'=>'application/x-smarttech-notebook', 'icon'=>'archive'),
1484 'notebook' => array ('type'=>'application/x-smarttech-notebook', 'icon'=>'archive'),
1486 'odt' => array ('type'=>'application/vnd.oasis.opendocument.text', 'icon'=>'writer', 'groups'=>array('document')),
1487 'ott' => array ('type'=>'application/vnd.oasis.opendocument.text-template', 'icon'=>'writer', 'groups'=>array('document')),
1488 'oth' => array ('type'=>'application/vnd.oasis.opendocument.text-web', 'icon'=>'oth', 'groups'=>array('document')),
1489 'odm' => array ('type'=>'application/vnd.oasis.opendocument.text-master', 'icon'=>'writer'),
1490 'odg' => array ('type'=>'application/vnd.oasis.opendocument.graphics', 'icon'=>'draw'),
1491 'otg' => array ('type'=>'application/vnd.oasis.opendocument.graphics-template', 'icon'=>'draw'),
1492 'odp' => array ('type'=>'application/vnd.oasis.opendocument.presentation', 'icon'=>'impress'),
1493 'otp' => array ('type'=>'application/vnd.oasis.opendocument.presentation-template', 'icon'=>'impress'),
1494 'ods' => array ('type'=>'application/vnd.oasis.opendocument.spreadsheet', 'icon'=>'calc', 'groups'=>array('spreadsheet')),
1495 'ots' => array ('type'=>'application/vnd.oasis.opendocument.spreadsheet-template', 'icon'=>'calc', 'groups'=>array('spreadsheet')),
1496 'odc' => array ('type'=>'application/vnd.oasis.opendocument.chart', 'icon'=>'chart'),
1497 'odf' => array ('type'=>'application/vnd.oasis.opendocument.formula', 'icon'=>'math'),
1498 'odb' => array ('type'=>'application/vnd.oasis.opendocument.database', 'icon'=>'base'),
1499 'odi' => array ('type'=>'application/vnd.oasis.opendocument.image', 'icon'=>'draw'),
1500 'oga' => array ('type'=>'audio/ogg', 'icon'=>'audio', 'groups'=>array('audio'), 'string'=>'audio'),
1501 'ogg' => array ('type'=>'audio/ogg', 'icon'=>'audio', 'groups'=>array('audio'), 'string'=>'audio'),
1502 'ogv' => array ('type'=>'video/ogg', 'icon'=>'video', 'groups'=>array('video'), 'string'=>'video'),
1504 'pct' => array ('type'=>'image/pict', 'icon'=>'image', 'groups'=>array('image'), 'string'=>'image'),
1505 'pdf' => array ('type'=>'application/pdf', 'icon'=>'pdf'),
1506 'php' => array ('type'=>'text/plain', 'icon'=>'sourcecode'),
1507 'pic' => array ('type'=>'image/pict', 'icon'=>'image', 'groups'=>array('image'), 'string'=>'image'),
1508 'pict' => array ('type'=>'image/pict', 'icon'=>'image', 'groups'=>array('image'), 'string'=>'image'),
1509 'png' => array ('type'=>'image/png', 'icon'=>'png', 'groups'=>array('image', 'web_image'), 'string'=>'image'),
1510 'pps' => array ('type'=>'application/vnd.ms-powerpoint', 'icon'=>'powerpoint', 'groups'=>array('presentation')),
1511 'ppt' => array ('type'=>'application/vnd.ms-powerpoint', 'icon'=>'powerpoint', 'groups'=>array('presentation')),
1512 'pptx' => array ('type'=>'application/vnd.openxmlformats-officedocument.presentationml.presentation', 'icon'=>'powerpoint'),
1513 'pptm' => array ('type'=>'application/vnd.ms-powerpoint.presentation.macroEnabled.12', 'icon'=>'powerpoint'),
1514 'potx' => array ('type'=>'application/vnd.openxmlformats-officedocument.presentationml.template', 'icon'=>'powerpoint'),
1515 'potm' => array ('type'=>'application/vnd.ms-powerpoint.template.macroEnabled.12', 'icon'=>'powerpoint'),
1516 'ppam' => array ('type'=>'application/vnd.ms-powerpoint.addin.macroEnabled.12', 'icon'=>'powerpoint'),
1517 'ppsx' => array ('type'=>'application/vnd.openxmlformats-officedocument.presentationml.slideshow', 'icon'=>'powerpoint'),
1518 'ppsm' => array ('type'=>'application/vnd.ms-powerpoint.slideshow.macroEnabled.12', 'icon'=>'powerpoint'),
1519 'ps' => array ('type'=>'application/postscript', 'icon'=>'pdf'),
1520 'pub' => array ('type'=>'application/x-mspublisher', 'icon'=>'publisher', 'groups'=>array('presentation')),
1522 'qt' => array ('type'=>'video/quicktime', 'icon'=>'quicktime', 'groups'=>array('video','web_video'), 'string'=>'video'),
1523 'ra' => array ('type'=>'audio/x-realaudio-plugin', 'icon'=>'audio', 'groups'=>array('audio','web_audio'), 'string'=>'audio'),
1524 'ram' => array ('type'=>'audio/x-pn-realaudio-plugin', 'icon'=>'audio', 'groups'=>array('audio'), 'string'=>'audio'),
1525 'rhb' => array ('type'=>'text/xml', 'icon'=>'markup'),
1526 'rm' => array ('type'=>'audio/x-pn-realaudio-plugin', 'icon'=>'audio', 'groups'=>array('audio'), 'string'=>'audio'),
1527 'rmvb' => array ('type'=>'application/vnd.rn-realmedia-vbr', 'icon'=>'video', 'groups'=>array('video'), 'string'=>'video'),
1528 'rtf' => array ('type'=>'text/rtf', 'icon'=>'text', 'groups'=>array('document')),
1529 'rtx' => array ('type'=>'text/richtext', 'icon'=>'text'),
1530 'rv' => array ('type'=>'audio/x-pn-realaudio-plugin', 'icon'=>'audio', 'groups'=>array('video'), 'string'=>'video'),
1531 'sh' => array ('type'=>'application/x-sh', 'icon'=>'sourcecode'),
1532 'sit' => array ('type'=>'application/x-stuffit', 'icon'=>'archive', 'groups'=>array('archive'), 'string'=>'archive'),
1533 'smi' => array ('type'=>'application/smil', 'icon'=>'text'),
1534 'smil' => array ('type'=>'application/smil', 'icon'=>'text'),
1535 'sqt' => array ('type'=>'text/xml', 'icon'=>'markup'),
1536 'svg' => array ('type'=>'image/svg+xml', 'icon'=>'image', 'groups'=>array('image','web_image'), 'string'=>'image'),
1537 'svgz' => array ('type'=>'image/svg+xml', 'icon'=>'image', 'groups'=>array('image','web_image'), 'string'=>'image'),
1538 'swa' => array ('type'=>'application/x-director', 'icon'=>'flash'),
1539 'swf' => array ('type'=>'application/x-shockwave-flash', 'icon'=>'flash', 'groups'=>array('video','web_video')),
1540 'swfl' => array ('type'=>'application/x-shockwave-flash', 'icon'=>'flash', 'groups'=>array('video','web_video')),
1542 'sxw' => array ('type'=>'application/vnd.sun.xml.writer', 'icon'=>'writer'),
1543 'stw' => array ('type'=>'application/vnd.sun.xml.writer.template', 'icon'=>'writer'),
1544 'sxc' => array ('type'=>'application/vnd.sun.xml.calc', 'icon'=>'calc'),
1545 'stc' => array ('type'=>'application/vnd.sun.xml.calc.template', 'icon'=>'calc'),
1546 'sxd' => array ('type'=>'application/vnd.sun.xml.draw', 'icon'=>'draw'),
1547 'std' => array ('type'=>'application/vnd.sun.xml.draw.template', 'icon'=>'draw'),
1548 'sxi' => array ('type'=>'application/vnd.sun.xml.impress', 'icon'=>'impress'),
1549 'sti' => array ('type'=>'application/vnd.sun.xml.impress.template', 'icon'=>'impress'),
1550 'sxg' => array ('type'=>'application/vnd.sun.xml.writer.global', 'icon'=>'writer'),
1551 'sxm' => array ('type'=>'application/vnd.sun.xml.math', 'icon'=>'math'),
1553 'tar' => array ('type'=>'application/x-tar', 'icon'=>'archive', 'groups'=>array('archive'), 'string'=>'archive'),
1554 'tif' => array ('type'=>'image/tiff', 'icon'=>'tiff', 'groups'=>array('image'), 'string'=>'image'),
1555 'tiff' => array ('type'=>'image/tiff', 'icon'=>'tiff', 'groups'=>array('image'), 'string'=>'image'),
1556 'tex' => array ('type'=>'application/x-tex', 'icon'=>'text'),
1557 'texi' => array ('type'=>'application/x-texinfo', 'icon'=>'text'),
1558 'texinfo' => array ('type'=>'application/x-texinfo', 'icon'=>'text'),
1559 'tsv' => array ('type'=>'text/tab-separated-values', 'icon'=>'text'),
1560 'txt' => array ('type'=>'text/plain', 'icon'=>'text', 'defaulticon'=>true),
1561 'wav' => array ('type'=>'audio/wav', 'icon'=>'wav', 'groups'=>array('audio'), 'string'=>'audio'),
1562 'webm' => array ('type'=>'video/webm', 'icon'=>'video', 'groups'=>array('video'), 'string'=>'video'),
1563 'wmv' => array ('type'=>'video/x-ms-wmv', 'icon'=>'wmv', 'groups'=>array('video'), 'string'=>'video'),
1564 'asf' => array ('type'=>'video/x-ms-asf', 'icon'=>'wmv', 'groups'=>array('video'), 'string'=>'video'),
1565 'wma' => array ('type'=>'audio/x-ms-wma', 'icon'=>'audio', 'groups'=>array('audio'), 'string'=>'audio'),
1567 'xbk' => array ('type'=>'application/x-smarttech-notebook', 'icon'=>'archive'),
1568 'xdp' => array ('type'=>'application/pdf', 'icon'=>'pdf'),
1569 'xfd' => array ('type'=>'application/pdf', 'icon'=>'pdf'),
1570 'xfdf' => array ('type'=>'application/pdf', 'icon'=>'pdf'),
1572 'xls' => array ('type'=>'application/vnd.ms-excel', 'icon'=>'spreadsheet', 'groups'=>array('spreadsheet')),
1573 'xlsx' => array ('type'=>'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', 'icon'=>'spreadsheet'),
1574 'xlsm' => array ('type'=>'application/vnd.ms-excel.sheet.macroEnabled.12', 'icon'=>'spreadsheet', 'groups'=>array('spreadsheet')),
1575 'xltx' => array ('type'=>'application/vnd.openxmlformats-officedocument.spreadsheetml.template', 'icon'=>'spreadsheet'),
1576 'xltm' => array ('type'=>'application/vnd.ms-excel.template.macroEnabled.12', 'icon'=>'spreadsheet'),
1577 'xlsb' => array ('type'=>'application/vnd.ms-excel.sheet.binary.macroEnabled.12', 'icon'=>'spreadsheet'),
1578 'xlam' => array ('type'=>'application/vnd.ms-excel.addin.macroEnabled.12', 'icon'=>'spreadsheet'),
1580 'xml' => array ('type'=>'application/xml', 'icon'=>'markup'),
1581 'xsl' => array ('type'=>'text/xml', 'icon'=>'markup'),
1583 'zip' => array ('type'=>'application/zip', 'icon'=>'archive', 'groups'=>array('archive'), 'string'=>'archive')
1585 return $mimearray;
1589 * Obtains information about a filetype based on its extension. Will
1590 * use a default if no information is present about that particular
1591 * extension.
1593 * @category files
1594 * @param string $element Desired information (usually 'icon'
1595 * for icon filename or 'type' for MIME type. Can also be
1596 * 'icon24', ...32, 48, 64, 72, 80, 96, 128, 256)
1597 * @param string $filename Filename we're looking up
1598 * @return string Requested piece of information from array
1600 function mimeinfo($element, $filename) {
1601 global $CFG;
1602 $mimeinfo = & get_mimetypes_array();
1603 static $iconpostfixes = array(256=>'-256', 128=>'-128', 96=>'-96', 80=>'-80', 72=>'-72', 64=>'-64', 48=>'-48', 32=>'-32', 24=>'-24', 16=>'');
1605 $filetype = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
1606 if (empty($filetype)) {
1607 $filetype = 'xxx'; // file without extension
1609 if (preg_match('/^icon(\d*)$/', $element, $iconsizematch)) {
1610 $iconsize = max(array(16, (int)$iconsizematch[1]));
1611 $filenames = array($mimeinfo['xxx']['icon']);
1612 if ($filetype != 'xxx' && isset($mimeinfo[$filetype]['icon'])) {
1613 array_unshift($filenames, $mimeinfo[$filetype]['icon']);
1615 // find the file with the closest size, first search for specific icon then for default icon
1616 foreach ($filenames as $filename) {
1617 foreach ($iconpostfixes as $size => $postfix) {
1618 $fullname = $CFG->dirroot.'/pix/f/'.$filename.$postfix;
1619 if ($iconsize >= $size && (file_exists($fullname.'.png') || file_exists($fullname.'.gif'))) {
1620 return $filename.$postfix;
1624 } else if (isset($mimeinfo[$filetype][$element])) {
1625 return $mimeinfo[$filetype][$element];
1626 } else if (isset($mimeinfo['xxx'][$element])) {
1627 return $mimeinfo['xxx'][$element]; // By default
1628 } else {
1629 return null;
1634 * Obtains information about a filetype based on the MIME type rather than
1635 * the other way around.
1637 * @category files
1638 * @param string $element Desired information ('extension', 'icon', 'icon-24', etc.)
1639 * @param string $mimetype MIME type we're looking up
1640 * @return string Requested piece of information from array
1642 function mimeinfo_from_type($element, $mimetype) {
1643 /* array of cached mimetype->extension associations */
1644 static $cached = array();
1645 $mimeinfo = & get_mimetypes_array();
1647 if (!array_key_exists($mimetype, $cached)) {
1648 $cached[$mimetype] = null;
1649 foreach($mimeinfo as $filetype => $values) {
1650 if ($values['type'] == $mimetype) {
1651 if ($cached[$mimetype] === null) {
1652 $cached[$mimetype] = '.'.$filetype;
1654 if (!empty($values['defaulticon'])) {
1655 $cached[$mimetype] = '.'.$filetype;
1656 break;
1660 if (empty($cached[$mimetype])) {
1661 $cached[$mimetype] = '.xxx';
1664 if ($element === 'extension') {
1665 return $cached[$mimetype];
1666 } else {
1667 return mimeinfo($element, $cached[$mimetype]);
1672 * Return the relative icon path for a given file
1674 * Usage:
1675 * <code>
1676 * // $file - instance of stored_file or file_info
1677 * $icon = $OUTPUT->pix_url(file_file_icon($file))->out();
1678 * echo html_writer::empty_tag('img', array('src' => $icon, 'alt' => get_mimetype_description($file)));
1679 * </code>
1680 * or
1681 * <code>
1682 * echo $OUTPUT->pix_icon(file_file_icon($file), get_mimetype_description($file));
1683 * </code>
1685 * @param stored_file|file_info|stdClass|array $file (in case of object attributes $file->filename
1686 * and $file->mimetype are expected)
1687 * @param int $size The size of the icon. Defaults to 16 can also be 24, 32, 64, 128, 256
1688 * @return string
1690 function file_file_icon($file, $size = null) {
1691 if (!is_object($file)) {
1692 $file = (object)$file;
1694 if (isset($file->filename)) {
1695 $filename = $file->filename;
1696 } else if (method_exists($file, 'get_filename')) {
1697 $filename = $file->get_filename();
1698 } else if (method_exists($file, 'get_visible_name')) {
1699 $filename = $file->get_visible_name();
1700 } else {
1701 $filename = '';
1703 if (isset($file->mimetype)) {
1704 $mimetype = $file->mimetype;
1705 } else if (method_exists($file, 'get_mimetype')) {
1706 $mimetype = $file->get_mimetype();
1707 } else {
1708 $mimetype = '';
1710 $mimetypes = &get_mimetypes_array();
1711 if ($filename) {
1712 $extension = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
1713 if ($extension && !empty($mimetypes[$extension])) {
1714 // if file name has known extension, return icon for this extension
1715 return file_extension_icon($filename, $size);
1718 return file_mimetype_icon($mimetype, $size);
1722 * Return the relative icon path for a folder image
1724 * Usage:
1725 * <code>
1726 * $icon = $OUTPUT->pix_url(file_folder_icon())->out();
1727 * echo html_writer::empty_tag('img', array('src' => $icon));
1728 * </code>
1729 * or
1730 * <code>
1731 * echo $OUTPUT->pix_icon(file_folder_icon(32));
1732 * </code>
1734 * @param int $iconsize The size of the icon. Defaults to 16 can also be 24, 32, 48, 64, 72, 80, 96, 128, 256
1735 * @return string
1737 function file_folder_icon($iconsize = null) {
1738 global $CFG;
1739 static $iconpostfixes = array(256=>'-256', 128=>'-128', 96=>'-96', 80=>'-80', 72=>'-72', 64=>'-64', 48=>'-48', 32=>'-32', 24=>'-24', 16=>'');
1740 static $cached = array();
1741 $iconsize = max(array(16, (int)$iconsize));
1742 if (!array_key_exists($iconsize, $cached)) {
1743 foreach ($iconpostfixes as $size => $postfix) {
1744 $fullname = $CFG->dirroot.'/pix/f/folder'.$postfix;
1745 if ($iconsize >= $size && (file_exists($fullname.'.png') || file_exists($fullname.'.gif'))) {
1746 $cached[$iconsize] = 'f/folder'.$postfix;
1747 break;
1751 return $cached[$iconsize];
1755 * Returns the relative icon path for a given mime type
1757 * This function should be used in conjunction with $OUTPUT->pix_url to produce
1758 * a return the full path to an icon.
1760 * <code>
1761 * $mimetype = 'image/jpg';
1762 * $icon = $OUTPUT->pix_url(file_mimetype_icon($mimetype))->out();
1763 * echo html_writer::empty_tag('img', array('src' => $icon, 'alt' => get_mimetype_description($mimetype)));
1764 * </code>
1766 * @category files
1767 * @todo MDL-31074 When an $OUTPUT->icon method is available this function should be altered
1768 * to conform with that.
1769 * @param string $mimetype The mimetype to fetch an icon for
1770 * @param int $size The size of the icon. Defaults to 16 can also be 24, 32, 64, 128, 256
1771 * @return string The relative path to the icon
1773 function file_mimetype_icon($mimetype, $size = NULL) {
1774 return 'f/'.mimeinfo_from_type('icon'.$size, $mimetype);
1778 * Returns the relative icon path for a given file name
1780 * This function should be used in conjunction with $OUTPUT->pix_url to produce
1781 * a return the full path to an icon.
1783 * <code>
1784 * $filename = '.jpg';
1785 * $icon = $OUTPUT->pix_url(file_extension_icon($filename))->out();
1786 * echo html_writer::empty_tag('img', array('src' => $icon, 'alt' => '...'));
1787 * </code>
1789 * @todo MDL-31074 When an $OUTPUT->icon method is available this function should be altered
1790 * to conform with that.
1791 * @todo MDL-31074 Implement $size
1792 * @category files
1793 * @param string $filename The filename to get the icon for
1794 * @param int $size The size of the icon. Defaults to 16 can also be 24, 32, 64, 128, 256
1795 * @return string
1797 function file_extension_icon($filename, $size = NULL) {
1798 return 'f/'.mimeinfo('icon'.$size, $filename);
1802 * Obtains descriptions for file types (e.g. 'Microsoft Word document') from the
1803 * mimetypes.php language file.
1805 * @param mixed $obj - instance of stored_file or file_info or array/stdClass with field
1806 * 'filename' and 'mimetype', or just a string with mimetype (though it is recommended to
1807 * have filename); In case of array/stdClass the field 'mimetype' is optional.
1808 * @param bool $capitalise If true, capitalises first character of result
1809 * @return string Text description
1811 function get_mimetype_description($obj, $capitalise=false) {
1812 $filename = $mimetype = '';
1813 if (is_object($obj) && method_exists($obj, 'get_filename') && method_exists($obj, 'get_mimetype')) {
1814 // this is an instance of stored_file
1815 $mimetype = $obj->get_mimetype();
1816 $filename = $obj->get_filename();
1817 } else if (is_object($obj) && method_exists($obj, 'get_visible_name') && method_exists($obj, 'get_mimetype')) {
1818 // this is an instance of file_info
1819 $mimetype = $obj->get_mimetype();
1820 $filename = $obj->get_visible_name();
1821 } else if (is_array($obj) || is_object ($obj)) {
1822 $obj = (array)$obj;
1823 if (!empty($obj['filename'])) {
1824 $filename = $obj['filename'];
1826 if (!empty($obj['mimetype'])) {
1827 $mimetype = $obj['mimetype'];
1829 } else {
1830 $mimetype = $obj;
1832 $mimetypefromext = mimeinfo('type', $filename);
1833 if (empty($mimetype) || $mimetypefromext !== 'document/unknown') {
1834 // if file has a known extension, overwrite the specified mimetype
1835 $mimetype = $mimetypefromext;
1837 $extension = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
1838 if (empty($extension)) {
1839 $mimetypestr = mimeinfo_from_type('string', $mimetype);
1840 $extension = str_replace('.', '', mimeinfo_from_type('extension', $mimetype));
1841 } else {
1842 $mimetypestr = mimeinfo('string', $filename);
1844 $chunks = explode('/', $mimetype, 2);
1845 $chunks[] = '';
1846 $attr = array(
1847 'mimetype' => $mimetype,
1848 'ext' => $extension,
1849 'mimetype1' => $chunks[0],
1850 'mimetype2' => $chunks[1],
1852 $a = array();
1853 foreach ($attr as $key => $value) {
1854 $a[$key] = $value;
1855 $a[strtoupper($key)] = strtoupper($value);
1856 $a[ucfirst($key)] = ucfirst($value);
1859 // MIME types may include + symbol but this is not permitted in string ids.
1860 $safemimetype = str_replace('+', '_', $mimetype);
1861 $safemimetypestr = str_replace('+', '_', $mimetypestr);
1862 if (get_string_manager()->string_exists($safemimetype, 'mimetypes')) {
1863 $result = get_string($safemimetype, 'mimetypes', (object)$a);
1864 } else if (get_string_manager()->string_exists($safemimetypestr, 'mimetypes')) {
1865 $result = get_string($safemimetypestr, 'mimetypes', (object)$a);
1866 } else if (get_string_manager()->string_exists('default', 'mimetypes')) {
1867 $result = get_string('default', 'mimetypes', (object)$a);
1868 } else {
1869 $result = $mimetype;
1871 if ($capitalise) {
1872 $result=ucfirst($result);
1874 return $result;
1878 * Returns array of elements of type $element in type group(s)
1880 * @param string $element name of the element we are interested in, usually 'type' or 'extension'
1881 * @param string|array $groups one group or array of groups/extensions/mimetypes
1882 * @return array
1884 function file_get_typegroup($element, $groups) {
1885 static $cached = array();
1886 if (!is_array($groups)) {
1887 $groups = array($groups);
1889 if (!array_key_exists($element, $cached)) {
1890 $cached[$element] = array();
1892 $result = array();
1893 foreach ($groups as $group) {
1894 if (!array_key_exists($group, $cached[$element])) {
1895 // retrieive and cache all elements of type $element for group $group
1896 $mimeinfo = & get_mimetypes_array();
1897 $cached[$element][$group] = array();
1898 foreach ($mimeinfo as $extension => $value) {
1899 $value['extension'] = '.'.$extension;
1900 if (empty($value[$element])) {
1901 continue;
1903 if (($group === '.'.$extension || $group === $value['type'] ||
1904 (!empty($value['groups']) && in_array($group, $value['groups']))) &&
1905 !in_array($value[$element], $cached[$element][$group])) {
1906 $cached[$element][$group][] = $value[$element];
1910 $result = array_merge($result, $cached[$element][$group]);
1912 return array_values(array_unique($result));
1916 * Checks if file with name $filename has one of the extensions in groups $groups
1918 * @see get_mimetypes_array()
1919 * @param string $filename name of the file to check
1920 * @param string|array $groups one group or array of groups to check
1921 * @param bool $checktype if true and extension check fails, find the mimetype and check if
1922 * file mimetype is in mimetypes in groups $groups
1923 * @return bool
1925 function file_extension_in_typegroup($filename, $groups, $checktype = false) {
1926 $extension = pathinfo($filename, PATHINFO_EXTENSION);
1927 if (!empty($extension) && in_array('.'.strtolower($extension), file_get_typegroup('extension', $groups))) {
1928 return true;
1930 return $checktype && file_mimetype_in_typegroup(mimeinfo('type', $filename), $groups);
1934 * Checks if mimetype $mimetype belongs to one of the groups $groups
1936 * @see get_mimetypes_array()
1937 * @param string $mimetype
1938 * @param string|array $groups one group or array of groups to check
1939 * @return bool
1941 function file_mimetype_in_typegroup($mimetype, $groups) {
1942 return !empty($mimetype) && in_array($mimetype, file_get_typegroup('type', $groups));
1946 * Requested file is not found or not accessible, does not return, terminates script
1948 * @global stdClass $CFG
1949 * @global stdClass $COURSE
1951 function send_file_not_found() {
1952 global $CFG, $COURSE;
1953 send_header_404();
1954 print_error('filenotfound', 'error', $CFG->wwwroot.'/course/view.php?id='.$COURSE->id); //this is not displayed on IIS??
1957 * Helper function to send correct 404 for server.
1959 function send_header_404() {
1960 if (substr(php_sapi_name(), 0, 3) == 'cgi') {
1961 header("Status: 404 Not Found");
1962 } else {
1963 header('HTTP/1.0 404 not found');
1968 * The readfile function can fail when files are larger than 2GB (even on 64-bit
1969 * platforms). This wrapper uses readfile for small files and custom code for
1970 * large ones.
1972 * @param string $path Path to file
1973 * @param int $filesize Size of file (if left out, will get it automatically)
1974 * @return int|bool Size read (will always be $filesize) or false if failed
1976 function readfile_allow_large($path, $filesize = -1) {
1977 // Automatically get size if not specified.
1978 if ($filesize === -1) {
1979 $filesize = filesize($path);
1981 if ($filesize <= 2147483647) {
1982 // If the file is up to 2^31 - 1, send it normally using readfile.
1983 return readfile($path);
1984 } else {
1985 // For large files, read and output in 64KB chunks.
1986 $handle = fopen($path, 'r');
1987 if ($handle === false) {
1988 return false;
1990 $left = $filesize;
1991 while ($left > 0) {
1992 $size = min($left, 65536);
1993 $buffer = fread($handle, $size);
1994 if ($buffer === false) {
1995 return false;
1997 echo $buffer;
1998 $left -= $size;
2000 return $filesize;
2005 * Enhanced readfile() with optional acceleration.
2006 * @param string|stored_file $file
2007 * @param string $mimetype
2008 * @param bool $accelerate
2009 * @return void
2011 function readfile_accel($file, $mimetype, $accelerate) {
2012 global $CFG;
2014 if ($mimetype === 'text/plain') {
2015 // there is no encoding specified in text files, we need something consistent
2016 header('Content-Type: text/plain; charset=utf-8');
2017 } else {
2018 header('Content-Type: '.$mimetype);
2021 $lastmodified = is_object($file) ? $file->get_timemodified() : filemtime($file);
2022 header('Last-Modified: '. gmdate('D, d M Y H:i:s', $lastmodified) .' GMT');
2024 if (is_object($file)) {
2025 header('Etag: "' . $file->get_contenthash() . '"');
2026 if (isset($_SERVER['HTTP_IF_NONE_MATCH']) and trim($_SERVER['HTTP_IF_NONE_MATCH'], '"') === $file->get_contenthash()) {
2027 header('HTTP/1.1 304 Not Modified');
2028 return;
2032 // if etag present for stored file rely on it exclusively
2033 if (!empty($_SERVER['HTTP_IF_MODIFIED_SINCE']) and (empty($_SERVER['HTTP_IF_NONE_MATCH']) or !is_object($file))) {
2034 // get unixtime of request header; clip extra junk off first
2035 $since = strtotime(preg_replace('/;.*$/', '', $_SERVER["HTTP_IF_MODIFIED_SINCE"]));
2036 if ($since && $since >= $lastmodified) {
2037 header('HTTP/1.1 304 Not Modified');
2038 return;
2042 if ($accelerate and !empty($CFG->xsendfile)) {
2043 if (empty($CFG->disablebyteserving) and $mimetype !== 'text/plain') {
2044 header('Accept-Ranges: bytes');
2045 } else {
2046 header('Accept-Ranges: none');
2049 if (is_object($file)) {
2050 $fs = get_file_storage();
2051 if ($fs->xsendfile($file->get_contenthash())) {
2052 return;
2055 } else {
2056 require_once("$CFG->libdir/xsendfilelib.php");
2057 if (xsendfile($file)) {
2058 return;
2063 $filesize = is_object($file) ? $file->get_filesize() : filesize($file);
2065 header('Last-Modified: '. gmdate('D, d M Y H:i:s', $lastmodified) .' GMT');
2067 if ($accelerate and empty($CFG->disablebyteserving) and $mimetype !== 'text/plain') {
2068 header('Accept-Ranges: bytes');
2070 if (!empty($_SERVER['HTTP_RANGE']) and strpos($_SERVER['HTTP_RANGE'],'bytes=') !== FALSE) {
2071 // byteserving stuff - for acrobat reader and download accelerators
2072 // see: http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.35
2073 // inspired by: http://www.coneural.org/florian/papers/04_byteserving.php
2074 $ranges = false;
2075 if (preg_match_all('/(\d*)-(\d*)/', $_SERVER['HTTP_RANGE'], $ranges, PREG_SET_ORDER)) {
2076 foreach ($ranges as $key=>$value) {
2077 if ($ranges[$key][1] == '') {
2078 //suffix case
2079 $ranges[$key][1] = $filesize - $ranges[$key][2];
2080 $ranges[$key][2] = $filesize - 1;
2081 } else if ($ranges[$key][2] == '' || $ranges[$key][2] > $filesize - 1) {
2082 //fix range length
2083 $ranges[$key][2] = $filesize - 1;
2085 if ($ranges[$key][2] != '' && $ranges[$key][2] < $ranges[$key][1]) {
2086 //invalid byte-range ==> ignore header
2087 $ranges = false;
2088 break;
2090 //prepare multipart header
2091 $ranges[$key][0] = "\r\n--".BYTESERVING_BOUNDARY."\r\nContent-Type: $mimetype\r\n";
2092 $ranges[$key][0] .= "Content-Range: bytes {$ranges[$key][1]}-{$ranges[$key][2]}/$filesize\r\n\r\n";
2094 } else {
2095 $ranges = false;
2097 if ($ranges) {
2098 if (is_object($file)) {
2099 $handle = $file->get_content_file_handle();
2100 } else {
2101 $handle = fopen($file, 'rb');
2103 byteserving_send_file($handle, $mimetype, $ranges, $filesize);
2106 } else {
2107 // Do not byteserve
2108 header('Accept-Ranges: none');
2111 header('Content-Length: '.$filesize);
2113 if ($filesize > 10000000) {
2114 // for large files try to flush and close all buffers to conserve memory
2115 while(@ob_get_level()) {
2116 if (!@ob_end_flush()) {
2117 break;
2122 // send the whole file content
2123 if (is_object($file)) {
2124 $file->readfile();
2125 } else {
2126 readfile_allow_large($file, $filesize);
2131 * Similar to readfile_accel() but designed for strings.
2132 * @param string $string
2133 * @param string $mimetype
2134 * @param bool $accelerate
2135 * @return void
2137 function readstring_accel($string, $mimetype, $accelerate) {
2138 global $CFG;
2140 if ($mimetype === 'text/plain') {
2141 // there is no encoding specified in text files, we need something consistent
2142 header('Content-Type: text/plain; charset=utf-8');
2143 } else {
2144 header('Content-Type: '.$mimetype);
2146 header('Last-Modified: '. gmdate('D, d M Y H:i:s', time()) .' GMT');
2147 header('Accept-Ranges: none');
2149 if ($accelerate and !empty($CFG->xsendfile)) {
2150 $fs = get_file_storage();
2151 if ($fs->xsendfile(sha1($string))) {
2152 return;
2156 header('Content-Length: '.strlen($string));
2157 echo $string;
2161 * Handles the sending of temporary file to user, download is forced.
2162 * File is deleted after abort or successful sending, does not return, script terminated
2164 * @param string $path path to file, preferably from moodledata/temp/something; or content of file itself
2165 * @param string $filename proposed file name when saving file
2166 * @param bool $pathisstring If the path is string
2168 function send_temp_file($path, $filename, $pathisstring=false) {
2169 global $CFG;
2171 if (core_useragent::is_firefox()) {
2172 // only FF is known to correctly save to disk before opening...
2173 $mimetype = mimeinfo('type', $filename);
2174 } else {
2175 $mimetype = 'application/x-forcedownload';
2178 // close session - not needed anymore
2179 \core\session\manager::write_close();
2181 if (!$pathisstring) {
2182 if (!file_exists($path)) {
2183 send_header_404();
2184 print_error('filenotfound', 'error', $CFG->wwwroot.'/');
2186 // executed after normal finish or abort
2187 core_shutdown_manager::register_function('send_temp_file_finished', array($path));
2190 // if user is using IE, urlencode the filename so that multibyte file name will show up correctly on popup
2191 if (core_useragent::is_ie()) {
2192 $filename = urlencode($filename);
2195 header('Content-Disposition: attachment; filename="'.$filename.'"');
2196 if (strpos($CFG->wwwroot, 'https://') === 0) { //https sites - watch out for IE! KB812935 and KB316431
2197 header('Cache-Control: private, max-age=10, no-transform');
2198 header('Expires: '. gmdate('D, d M Y H:i:s', 0) .' GMT');
2199 header('Pragma: ');
2200 } else { //normal http - prevent caching at all cost
2201 header('Cache-Control: private, must-revalidate, pre-check=0, post-check=0, max-age=0, no-transform');
2202 header('Expires: '. gmdate('D, d M Y H:i:s', 0) .' GMT');
2203 header('Pragma: no-cache');
2206 // send the contents - we can not accelerate this because the file will be deleted asap
2207 if ($pathisstring) {
2208 readstring_accel($path, $mimetype, false);
2209 } else {
2210 readfile_accel($path, $mimetype, false);
2211 @unlink($path);
2214 die; //no more chars to output
2218 * Internal callback function used by send_temp_file()
2220 * @param string $path
2222 function send_temp_file_finished($path) {
2223 if (file_exists($path)) {
2224 @unlink($path);
2229 * Handles the sending of file data to the user's browser, including support for
2230 * byteranges etc.
2232 * @category files
2233 * @param string $path Path of file on disk (including real filename), or actual content of file as string
2234 * @param string $filename Filename to send
2235 * @param int $lifetime Number of seconds before the file should expire from caches (null means $CFG->filelifetime)
2236 * @param int $filter 0 (default)=no filtering, 1=all files, 2=html files only
2237 * @param bool $pathisstring If true (default false), $path is the content to send and not the pathname
2238 * @param bool $forcedownload If true (default false), forces download of file rather than view in browser/plugin
2239 * @param string $mimetype Include to specify the MIME type; leave blank to have it guess the type from $filename
2240 * @param bool $dontdie - return control to caller afterwards. this is not recommended and only used for cleanup tasks.
2241 * if this is passed as true, ignore_user_abort is called. if you don't want your processing to continue on cancel,
2242 * you must detect this case when control is returned using connection_aborted. Please not that session is closed
2243 * and should not be reopened.
2244 * @return null script execution stopped unless $dontdie is true
2246 function send_file($path, $filename, $lifetime = null , $filter=0, $pathisstring=false, $forcedownload=false, $mimetype='', $dontdie=false) {
2247 global $CFG, $COURSE;
2249 if ($dontdie) {
2250 ignore_user_abort(true);
2253 if ($lifetime === 'default' or is_null($lifetime)) {
2254 $lifetime = $CFG->filelifetime;
2257 \core\session\manager::write_close(); // Unlock session during file serving.
2259 // Use given MIME type if specified, otherwise guess it using mimeinfo.
2260 // IE, Konqueror and Opera open html file directly in browser from web even when directed to save it to disk :-O
2261 // only Firefox saves all files locally before opening when content-disposition: attachment stated
2262 $isFF = core_useragent::is_firefox(); // only FF properly tested
2263 $mimetype = ($forcedownload and !$isFF) ? 'application/x-forcedownload' :
2264 ($mimetype ? $mimetype : mimeinfo('type', $filename));
2266 // if user is using IE, urlencode the filename so that multibyte file name will show up correctly on popup
2267 if (core_useragent::is_ie()) {
2268 $filename = rawurlencode($filename);
2271 if ($forcedownload) {
2272 header('Content-Disposition: attachment; filename="'.$filename.'"');
2273 } else {
2274 header('Content-Disposition: inline; filename="'.$filename.'"');
2277 if ($lifetime > 0) {
2278 $private = '';
2279 if (isloggedin() and !isguestuser()) {
2280 $private = ' private,';
2282 $nobyteserving = false;
2283 header('Cache-Control:'.$private.' max-age='.$lifetime.', no-transform');
2284 header('Expires: '. gmdate('D, d M Y H:i:s', time() + $lifetime) .' GMT');
2285 header('Pragma: ');
2287 } else { // Do not cache files in proxies and browsers
2288 $nobyteserving = true;
2289 if (strpos($CFG->wwwroot, 'https://') === 0) { //https sites - watch out for IE! KB812935 and KB316431
2290 header('Cache-Control: private, max-age=10, no-transform');
2291 header('Expires: '. gmdate('D, d M Y H:i:s', 0) .' GMT');
2292 header('Pragma: ');
2293 } else { //normal http - prevent caching at all cost
2294 header('Cache-Control: private, must-revalidate, pre-check=0, post-check=0, max-age=0, no-transform');
2295 header('Expires: '. gmdate('D, d M Y H:i:s', 0) .' GMT');
2296 header('Pragma: no-cache');
2300 if (empty($filter)) {
2301 // send the contents
2302 if ($pathisstring) {
2303 readstring_accel($path, $mimetype, !$dontdie);
2304 } else {
2305 readfile_accel($path, $mimetype, !$dontdie);
2308 } else {
2309 // Try to put the file through filters
2310 if ($mimetype == 'text/html') {
2311 $options = new stdClass();
2312 $options->noclean = true;
2313 $options->nocache = true; // temporary workaround for MDL-5136
2314 $text = $pathisstring ? $path : implode('', file($path));
2316 $text = file_modify_html_header($text);
2317 $output = format_text($text, FORMAT_HTML, $options, $COURSE->id);
2319 readstring_accel($output, $mimetype, false);
2321 } else if (($mimetype == 'text/plain') and ($filter == 1)) {
2322 // only filter text if filter all files is selected
2323 $options = new stdClass();
2324 $options->newlines = false;
2325 $options->noclean = true;
2326 $text = htmlentities($pathisstring ? $path : implode('', file($path)), ENT_QUOTES, 'UTF-8');
2327 $output = '<pre>'. format_text($text, FORMAT_MOODLE, $options, $COURSE->id) .'</pre>';
2329 readstring_accel($output, $mimetype, false);
2331 } else {
2332 // send the contents
2333 if ($pathisstring) {
2334 readstring_accel($path, $mimetype, !$dontdie);
2335 } else {
2336 readfile_accel($path, $mimetype, !$dontdie);
2340 if ($dontdie) {
2341 return;
2343 die; //no more chars to output!!!
2347 * Handles the sending of file data to the user's browser, including support for
2348 * byteranges etc.
2350 * The $options parameter supports the following keys:
2351 * (string|null) preview - send the preview of the file (e.g. "thumb" for a thumbnail)
2352 * (string|null) filename - overrides the implicit filename
2353 * (bool) dontdie - return control to caller afterwards. this is not recommended and only used for cleanup tasks.
2354 * if this is passed as true, ignore_user_abort is called. if you don't want your processing to continue on cancel,
2355 * you must detect this case when control is returned using connection_aborted. Please not that session is closed
2356 * and should not be reopened.
2358 * @category files
2359 * @param stored_file $stored_file local file object
2360 * @param int $lifetime Number of seconds before the file should expire from caches (null means $CFG->filelifetime)
2361 * @param int $filter 0 (default)=no filtering, 1=all files, 2=html files only
2362 * @param bool $forcedownload If true (default false), forces download of file rather than view in browser/plugin
2363 * @param array $options additional options affecting the file serving
2364 * @return null script execution stopped unless $options['dontdie'] is true
2366 function send_stored_file($stored_file, $lifetime=null, $filter=0, $forcedownload=false, array $options=array()) {
2367 global $CFG, $COURSE;
2369 if (empty($options['filename'])) {
2370 $filename = null;
2371 } else {
2372 $filename = $options['filename'];
2375 if (empty($options['dontdie'])) {
2376 $dontdie = false;
2377 } else {
2378 $dontdie = true;
2381 if ($lifetime === 'default' or is_null($lifetime)) {
2382 $lifetime = $CFG->filelifetime;
2385 if (!empty($options['preview'])) {
2386 // replace the file with its preview
2387 $fs = get_file_storage();
2388 $preview_file = $fs->get_file_preview($stored_file, $options['preview']);
2389 if (!$preview_file) {
2390 // unable to create a preview of the file, send its default mime icon instead
2391 if ($options['preview'] === 'tinyicon') {
2392 $size = 24;
2393 } else if ($options['preview'] === 'thumb') {
2394 $size = 90;
2395 } else {
2396 $size = 256;
2398 $fileicon = file_file_icon($stored_file, $size);
2399 send_file($CFG->dirroot.'/pix/'.$fileicon.'.png', basename($fileicon).'.png');
2400 } else {
2401 // preview images have fixed cache lifetime and they ignore forced download
2402 // (they are generated by GD and therefore they are considered reasonably safe).
2403 $stored_file = $preview_file;
2404 $lifetime = DAYSECS;
2405 $filter = 0;
2406 $forcedownload = false;
2410 // handle external resource
2411 if ($stored_file && $stored_file->is_external_file() && !isset($options['sendcachedexternalfile'])) {
2412 $stored_file->send_file($lifetime, $filter, $forcedownload, $options);
2413 die;
2416 if (!$stored_file or $stored_file->is_directory()) {
2417 // nothing to serve
2418 if ($dontdie) {
2419 return;
2421 die;
2424 if ($dontdie) {
2425 ignore_user_abort(true);
2428 \core\session\manager::write_close(); // Unlock session during file serving.
2430 // Use given MIME type if specified, otherwise guess it using mimeinfo.
2431 // IE, Konqueror and Opera open html file directly in browser from web even when directed to save it to disk :-O
2432 // only Firefox saves all files locally before opening when content-disposition: attachment stated
2433 $filename = is_null($filename) ? $stored_file->get_filename() : $filename;
2434 $isFF = core_useragent::is_firefox(); // only FF properly tested
2435 $mimetype = ($forcedownload and !$isFF) ? 'application/x-forcedownload' :
2436 ($stored_file->get_mimetype() ? $stored_file->get_mimetype() : mimeinfo('type', $filename));
2438 // if user is using IE, urlencode the filename so that multibyte file name will show up correctly on popup
2439 if (core_useragent::is_ie()) {
2440 $filename = rawurlencode($filename);
2443 if ($forcedownload) {
2444 header('Content-Disposition: attachment; filename="'.$filename.'"');
2445 } else {
2446 header('Content-Disposition: inline; filename="'.$filename.'"');
2449 if ($lifetime > 0) {
2450 $private = '';
2451 if (isloggedin() and !isguestuser()) {
2452 $private = ' private,';
2454 header('Cache-Control:'.$private.' max-age='.$lifetime.', no-transform');
2455 header('Expires: '. gmdate('D, d M Y H:i:s', time() + $lifetime) .' GMT');
2456 header('Pragma: ');
2458 } else { // Do not cache files in proxies and browsers
2459 if (strpos($CFG->wwwroot, 'https://') === 0) { //https sites - watch out for IE! KB812935 and KB316431
2460 header('Cache-Control: private, max-age=10, no-transform');
2461 header('Expires: '. gmdate('D, d M Y H:i:s', 0) .' GMT');
2462 header('Pragma: ');
2463 } else { //normal http - prevent caching at all cost
2464 header('Cache-Control: private, must-revalidate, pre-check=0, post-check=0, max-age=0, no-transform');
2465 header('Expires: '. gmdate('D, d M Y H:i:s', 0) .' GMT');
2466 header('Pragma: no-cache');
2470 if (empty($filter)) {
2471 // send the contents
2472 readfile_accel($stored_file, $mimetype, !$dontdie);
2474 } else { // Try to put the file through filters
2475 if ($mimetype == 'text/html') {
2476 $options = new stdClass();
2477 $options->noclean = true;
2478 $options->nocache = true; // temporary workaround for MDL-5136
2479 $text = $stored_file->get_content();
2480 $text = file_modify_html_header($text);
2481 $output = format_text($text, FORMAT_HTML, $options, $COURSE->id);
2483 readstring_accel($output, $mimetype, false);
2485 } else if (($mimetype == 'text/plain') and ($filter == 1)) {
2486 // only filter text if filter all files is selected
2487 $options = new stdClass();
2488 $options->newlines = false;
2489 $options->noclean = true;
2490 $text = $stored_file->get_content();
2491 $output = '<pre>'. format_text($text, FORMAT_MOODLE, $options, $COURSE->id) .'</pre>';
2493 readstring_accel($output, $mimetype, false);
2495 } else { // Just send it out raw
2496 readfile_accel($stored_file, $mimetype, !$dontdie);
2499 if ($dontdie) {
2500 return;
2502 die; //no more chars to output!!!
2506 * Retrieves an array of records from a CSV file and places
2507 * them into a given table structure
2509 * @global stdClass $CFG
2510 * @global moodle_database $DB
2511 * @param string $file The path to a CSV file
2512 * @param string $table The table to retrieve columns from
2513 * @return bool|array Returns an array of CSV records or false
2515 function get_records_csv($file, $table) {
2516 global $CFG, $DB;
2518 if (!$metacolumns = $DB->get_columns($table)) {
2519 return false;
2522 if(!($handle = @fopen($file, 'r'))) {
2523 print_error('get_records_csv failed to open '.$file);
2526 $fieldnames = fgetcsv($handle, 4096);
2527 if(empty($fieldnames)) {
2528 fclose($handle);
2529 return false;
2532 $columns = array();
2534 foreach($metacolumns as $metacolumn) {
2535 $ord = array_search($metacolumn->name, $fieldnames);
2536 if(is_int($ord)) {
2537 $columns[$metacolumn->name] = $ord;
2541 $rows = array();
2543 while (($data = fgetcsv($handle, 4096)) !== false) {
2544 $item = new stdClass;
2545 foreach($columns as $name => $ord) {
2546 $item->$name = $data[$ord];
2548 $rows[] = $item;
2551 fclose($handle);
2552 return $rows;
2556 * Create a file with CSV contents
2558 * @global stdClass $CFG
2559 * @global moodle_database $DB
2560 * @param string $file The file to put the CSV content into
2561 * @param array $records An array of records to write to a CSV file
2562 * @param string $table The table to get columns from
2563 * @return bool success
2565 function put_records_csv($file, $records, $table = NULL) {
2566 global $CFG, $DB;
2568 if (empty($records)) {
2569 return true;
2572 $metacolumns = NULL;
2573 if ($table !== NULL && !$metacolumns = $DB->get_columns($table)) {
2574 return false;
2577 echo "x";
2579 if(!($fp = @fopen($CFG->tempdir.'/'.$file, 'w'))) {
2580 print_error('put_records_csv failed to open '.$file);
2583 $proto = reset($records);
2584 if(is_object($proto)) {
2585 $fields_records = array_keys(get_object_vars($proto));
2587 else if(is_array($proto)) {
2588 $fields_records = array_keys($proto);
2590 else {
2591 return false;
2593 echo "x";
2595 if(!empty($metacolumns)) {
2596 $fields_table = array_map(create_function('$a', 'return $a->name;'), $metacolumns);
2597 $fields = array_intersect($fields_records, $fields_table);
2599 else {
2600 $fields = $fields_records;
2603 fwrite($fp, implode(',', $fields));
2604 fwrite($fp, "\r\n");
2606 foreach($records as $record) {
2607 $array = (array)$record;
2608 $values = array();
2609 foreach($fields as $field) {
2610 if(strpos($array[$field], ',')) {
2611 $values[] = '"'.str_replace('"', '\"', $array[$field]).'"';
2613 else {
2614 $values[] = $array[$field];
2617 fwrite($fp, implode(',', $values)."\r\n");
2620 fclose($fp);
2621 @chmod($CFG->tempdir.'/'.$file, $CFG->filepermissions);
2622 return true;
2627 * Recursively delete the file or folder with path $location. That is,
2628 * if it is a file delete it. If it is a folder, delete all its content
2629 * then delete it. If $location does not exist to start, that is not
2630 * considered an error.
2632 * @param string $location the path to remove.
2633 * @return bool
2635 function fulldelete($location) {
2636 if (empty($location)) {
2637 // extra safety against wrong param
2638 return false;
2640 if (is_dir($location)) {
2641 if (!$currdir = opendir($location)) {
2642 return false;
2644 while (false !== ($file = readdir($currdir))) {
2645 if ($file <> ".." && $file <> ".") {
2646 $fullfile = $location."/".$file;
2647 if (is_dir($fullfile)) {
2648 if (!fulldelete($fullfile)) {
2649 return false;
2651 } else {
2652 if (!unlink($fullfile)) {
2653 return false;
2658 closedir($currdir);
2659 if (! rmdir($location)) {
2660 return false;
2663 } else if (file_exists($location)) {
2664 if (!unlink($location)) {
2665 return false;
2668 return true;
2672 * Send requested byterange of file.
2674 * @param resource $handle A file handle
2675 * @param string $mimetype The mimetype for the output
2676 * @param array $ranges An array of ranges to send
2677 * @param string $filesize The size of the content if only one range is used
2679 function byteserving_send_file($handle, $mimetype, $ranges, $filesize) {
2680 // better turn off any kind of compression and buffering
2681 ini_set('zlib.output_compression', 'Off');
2683 $chunksize = 1*(1024*1024); // 1MB chunks - must be less than 2MB!
2684 if ($handle === false) {
2685 die;
2687 if (count($ranges) == 1) { //only one range requested
2688 $length = $ranges[0][2] - $ranges[0][1] + 1;
2689 header('HTTP/1.1 206 Partial content');
2690 header('Content-Length: '.$length);
2691 header('Content-Range: bytes '.$ranges[0][1].'-'.$ranges[0][2].'/'.$filesize);
2692 header('Content-Type: '.$mimetype);
2694 while(@ob_get_level()) {
2695 if (!@ob_end_flush()) {
2696 break;
2700 fseek($handle, $ranges[0][1]);
2701 while (!feof($handle) && $length > 0) {
2702 core_php_time_limit::raise(60*60); //reset time limit to 60 min - should be enough for 1 MB chunk
2703 $buffer = fread($handle, ($chunksize < $length ? $chunksize : $length));
2704 echo $buffer;
2705 flush();
2706 $length -= strlen($buffer);
2708 fclose($handle);
2709 die;
2710 } else { // multiple ranges requested - not tested much
2711 $totallength = 0;
2712 foreach($ranges as $range) {
2713 $totallength += strlen($range[0]) + $range[2] - $range[1] + 1;
2715 $totallength += strlen("\r\n--".BYTESERVING_BOUNDARY."--\r\n");
2716 header('HTTP/1.1 206 Partial content');
2717 header('Content-Length: '.$totallength);
2718 header('Content-Type: multipart/byteranges; boundary='.BYTESERVING_BOUNDARY);
2720 while(@ob_get_level()) {
2721 if (!@ob_end_flush()) {
2722 break;
2726 foreach($ranges as $range) {
2727 $length = $range[2] - $range[1] + 1;
2728 echo $range[0];
2729 fseek($handle, $range[1]);
2730 while (!feof($handle) && $length > 0) {
2731 core_php_time_limit::raise(60*60); //reset time limit to 60 min - should be enough for 1 MB chunk
2732 $buffer = fread($handle, ($chunksize < $length ? $chunksize : $length));
2733 echo $buffer;
2734 flush();
2735 $length -= strlen($buffer);
2738 echo "\r\n--".BYTESERVING_BOUNDARY."--\r\n";
2739 fclose($handle);
2740 die;
2745 * add includes (js and css) into uploaded files
2746 * before returning them, useful for themes and utf.js includes
2748 * @global stdClass $CFG
2749 * @param string $text text to search and replace
2750 * @return string text with added head includes
2751 * @todo MDL-21120
2753 function file_modify_html_header($text) {
2754 // first look for <head> tag
2755 global $CFG;
2757 $stylesheetshtml = '';
2758 /* foreach ($CFG->stylesheets as $stylesheet) {
2759 //TODO: MDL-21120
2760 $stylesheetshtml .= '<link rel="stylesheet" type="text/css" href="'.$stylesheet.'" />'."\n";
2763 $ufo = '';
2764 if (filter_is_enabled('mediaplugin')) {
2765 // this script is needed by most media filter plugins.
2766 $attributes = array('type'=>'text/javascript', 'src'=>$CFG->httpswwwroot . '/lib/ufo.js');
2767 $ufo = html_writer::tag('script', '', $attributes) . "\n";
2770 preg_match('/\<head\>|\<HEAD\>/', $text, $matches);
2771 if ($matches) {
2772 $replacement = '<head>'.$ufo.$stylesheetshtml;
2773 $text = preg_replace('/\<head\>|\<HEAD\>/', $replacement, $text, 1);
2774 return $text;
2777 // if not, look for <html> tag, and stick <head> right after
2778 preg_match('/\<html\>|\<HTML\>/', $text, $matches);
2779 if ($matches) {
2780 // replace <html> tag with <html><head>includes</head>
2781 $replacement = '<html>'."\n".'<head>'.$ufo.$stylesheetshtml.'</head>';
2782 $text = preg_replace('/\<html\>|\<HTML\>/', $replacement, $text, 1);
2783 return $text;
2786 // if not, look for <body> tag, and stick <head> before body
2787 preg_match('/\<body\>|\<BODY\>/', $text, $matches);
2788 if ($matches) {
2789 $replacement = '<head>'.$ufo.$stylesheetshtml.'</head>'."\n".'<body>';
2790 $text = preg_replace('/\<body\>|\<BODY\>/', $replacement, $text, 1);
2791 return $text;
2794 // if not, just stick a <head> tag at the beginning
2795 $text = '<head>'.$ufo.$stylesheetshtml.'</head>'."\n".$text;
2796 return $text;
2800 * RESTful cURL class
2802 * This is a wrapper class for curl, it is quite easy to use:
2803 * <code>
2804 * $c = new curl;
2805 * // enable cache
2806 * $c = new curl(array('cache'=>true));
2807 * // enable cookie
2808 * $c = new curl(array('cookie'=>true));
2809 * // enable proxy
2810 * $c = new curl(array('proxy'=>true));
2812 * // HTTP GET Method
2813 * $html = $c->get('http://example.com');
2814 * // HTTP POST Method
2815 * $html = $c->post('http://example.com/', array('q'=>'words', 'name'=>'moodle'));
2816 * // HTTP PUT Method
2817 * $html = $c->put('http://example.com/', array('file'=>'/var/www/test.txt');
2818 * </code>
2820 * @package core_files
2821 * @category files
2822 * @copyright Dongsheng Cai <dongsheng@moodle.com>
2823 * @license http://www.gnu.org/copyleft/gpl.html GNU Public License
2825 class curl {
2826 /** @var bool Caches http request contents */
2827 public $cache = false;
2828 /** @var bool Uses proxy, null means automatic based on URL */
2829 public $proxy = null;
2830 /** @var string library version */
2831 public $version = '0.4 dev';
2832 /** @var array http's response */
2833 public $response = array();
2834 /** @var array Raw response headers, needed for BC in download_file_content(). */
2835 public $rawresponse = array();
2836 /** @var array http header */
2837 public $header = array();
2838 /** @var string cURL information */
2839 public $info;
2840 /** @var string error */
2841 public $error;
2842 /** @var int error code */
2843 public $errno;
2844 /** @var bool use workaround for open_basedir restrictions, to be changed from unit tests only! */
2845 public $emulateredirects = null;
2847 /** @var array cURL options */
2848 private $options;
2849 /** @var string Proxy host */
2850 private $proxy_host = '';
2851 /** @var string Proxy auth */
2852 private $proxy_auth = '';
2853 /** @var string Proxy type */
2854 private $proxy_type = '';
2855 /** @var bool Debug mode on */
2856 private $debug = false;
2857 /** @var bool|string Path to cookie file */
2858 private $cookie = false;
2859 /** @var bool tracks multiple headers in response - redirect detection */
2860 private $responsefinished = false;
2863 * Curl constructor.
2865 * Allowed settings are:
2866 * proxy: (bool) use proxy server, null means autodetect non-local from url
2867 * debug: (bool) use debug output
2868 * cookie: (string) path to cookie file, false if none
2869 * cache: (bool) use cache
2870 * module_cache: (string) type of cache
2872 * @param array $settings
2874 public function __construct($settings = array()) {
2875 global $CFG;
2876 if (!function_exists('curl_init')) {
2877 $this->error = 'cURL module must be enabled!';
2878 trigger_error($this->error, E_USER_ERROR);
2879 return false;
2882 // All settings of this class should be init here.
2883 $this->resetopt();
2884 if (!empty($settings['debug'])) {
2885 $this->debug = true;
2887 if (!empty($settings['cookie'])) {
2888 if($settings['cookie'] === true) {
2889 $this->cookie = $CFG->dataroot.'/curl_cookie.txt';
2890 } else {
2891 $this->cookie = $settings['cookie'];
2894 if (!empty($settings['cache'])) {
2895 if (class_exists('curl_cache')) {
2896 if (!empty($settings['module_cache'])) {
2897 $this->cache = new curl_cache($settings['module_cache']);
2898 } else {
2899 $this->cache = new curl_cache('misc');
2903 if (!empty($CFG->proxyhost)) {
2904 if (empty($CFG->proxyport)) {
2905 $this->proxy_host = $CFG->proxyhost;
2906 } else {
2907 $this->proxy_host = $CFG->proxyhost.':'.$CFG->proxyport;
2909 if (!empty($CFG->proxyuser) and !empty($CFG->proxypassword)) {
2910 $this->proxy_auth = $CFG->proxyuser.':'.$CFG->proxypassword;
2911 $this->setopt(array(
2912 'proxyauth'=> CURLAUTH_BASIC | CURLAUTH_NTLM,
2913 'proxyuserpwd'=>$this->proxy_auth));
2915 if (!empty($CFG->proxytype)) {
2916 if ($CFG->proxytype == 'SOCKS5') {
2917 $this->proxy_type = CURLPROXY_SOCKS5;
2918 } else {
2919 $this->proxy_type = CURLPROXY_HTTP;
2920 $this->setopt(array('httpproxytunnel'=>false));
2922 $this->setopt(array('proxytype'=>$this->proxy_type));
2925 if (isset($settings['proxy'])) {
2926 $this->proxy = $settings['proxy'];
2928 } else {
2929 $this->proxy = false;
2932 if (!isset($this->emulateredirects)) {
2933 $this->emulateredirects = ini_get('open_basedir');
2938 * Resets the CURL options that have already been set
2940 public function resetopt() {
2941 $this->options = array();
2942 $this->options['CURLOPT_USERAGENT'] = 'MoodleBot/1.0';
2943 // True to include the header in the output
2944 $this->options['CURLOPT_HEADER'] = 0;
2945 // True to Exclude the body from the output
2946 $this->options['CURLOPT_NOBODY'] = 0;
2947 // Redirect ny default.
2948 $this->options['CURLOPT_FOLLOWLOCATION'] = 1;
2949 $this->options['CURLOPT_MAXREDIRS'] = 10;
2950 $this->options['CURLOPT_ENCODING'] = '';
2951 // TRUE to return the transfer as a string of the return
2952 // value of curl_exec() instead of outputting it out directly.
2953 $this->options['CURLOPT_RETURNTRANSFER'] = 1;
2954 $this->options['CURLOPT_SSL_VERIFYPEER'] = 0;
2955 $this->options['CURLOPT_SSL_VERIFYHOST'] = 2;
2956 $this->options['CURLOPT_CONNECTTIMEOUT'] = 30;
2958 if ($cacert = self::get_cacert()) {
2959 $this->options['CURLOPT_CAINFO'] = $cacert;
2964 * Get the location of ca certificates.
2965 * @return string absolute file path or empty if default used
2967 public static function get_cacert() {
2968 global $CFG;
2970 // Bundle in dataroot always wins.
2971 if (is_readable("$CFG->dataroot/moodleorgca.crt")) {
2972 return realpath("$CFG->dataroot/moodleorgca.crt");
2975 // Next comes the default from php.ini
2976 $cacert = ini_get('curl.cainfo');
2977 if (!empty($cacert) and is_readable($cacert)) {
2978 return realpath($cacert);
2981 // Windows PHP does not have any certs, we need to use something.
2982 if ($CFG->ostype === 'WINDOWS') {
2983 if (is_readable("$CFG->libdir/cacert.pem")) {
2984 return realpath("$CFG->libdir/cacert.pem");
2988 // Use default, this should work fine on all properly configured *nix systems.
2989 return null;
2993 * Reset Cookie
2995 public function resetcookie() {
2996 if (!empty($this->cookie)) {
2997 if (is_file($this->cookie)) {
2998 $fp = fopen($this->cookie, 'w');
2999 if (!empty($fp)) {
3000 fwrite($fp, '');
3001 fclose($fp);
3008 * Set curl options.
3010 * Do not use the curl constants to define the options, pass a string
3011 * corresponding to that constant. Ie. to set CURLOPT_MAXREDIRS, pass
3012 * array('CURLOPT_MAXREDIRS' => 10) or array('maxredirs' => 10) to this method.
3014 * @param array $options If array is null, this function will reset the options to default value.
3015 * @return void
3016 * @throws coding_exception If an option uses constant value instead of option name.
3018 public function setopt($options = array()) {
3019 if (is_array($options)) {
3020 foreach ($options as $name => $val) {
3021 if (!is_string($name)) {
3022 throw new coding_exception('Curl options should be defined using strings, not constant values.');
3024 if (stripos($name, 'CURLOPT_') === false) {
3025 $name = strtoupper('CURLOPT_'.$name);
3026 } else {
3027 $name = strtoupper($name);
3029 $this->options[$name] = $val;
3035 * Reset http method
3037 public function cleanopt() {
3038 unset($this->options['CURLOPT_HTTPGET']);
3039 unset($this->options['CURLOPT_POST']);
3040 unset($this->options['CURLOPT_POSTFIELDS']);
3041 unset($this->options['CURLOPT_PUT']);
3042 unset($this->options['CURLOPT_INFILE']);
3043 unset($this->options['CURLOPT_INFILESIZE']);
3044 unset($this->options['CURLOPT_CUSTOMREQUEST']);
3045 unset($this->options['CURLOPT_FILE']);
3049 * Resets the HTTP Request headers (to prepare for the new request)
3051 public function resetHeader() {
3052 $this->header = array();
3056 * Set HTTP Request Header
3058 * @param array $header
3060 public function setHeader($header) {
3061 if (is_array($header)) {
3062 foreach ($header as $v) {
3063 $this->setHeader($v);
3065 } else {
3066 // Remove newlines, they are not allowed in headers.
3067 $this->header[] = preg_replace('/[\r\n]/', '', $header);
3072 * Get HTTP Response Headers
3073 * @return array of arrays
3075 public function getResponse() {
3076 return $this->response;
3080 * Get raw HTTP Response Headers
3081 * @return array of strings
3083 public function get_raw_response() {
3084 return $this->rawresponse;
3088 * private callback function
3089 * Formatting HTTP Response Header
3091 * We only keep the last headers returned. For example during a redirect the
3092 * redirect headers will not appear in {@link self::getResponse()}, if you need
3093 * to use those headers, refer to {@link self::get_raw_response()}.
3095 * @param resource $ch Apparently not used
3096 * @param string $header
3097 * @return int The strlen of the header
3099 private function formatHeader($ch, $header) {
3100 $this->rawresponse[] = $header;
3102 if (trim($header, "\r\n") === '') {
3103 // This must be the last header.
3104 $this->responsefinished = true;
3107 if (strlen($header) > 2) {
3108 if ($this->responsefinished) {
3109 // We still have headers after the supposedly last header, we must be
3110 // in a redirect so let's empty the response to keep the last headers.
3111 $this->responsefinished = false;
3112 $this->response = array();
3114 list($key, $value) = explode(" ", rtrim($header, "\r\n"), 2);
3115 $key = rtrim($key, ':');
3116 if (!empty($this->response[$key])) {
3117 if (is_array($this->response[$key])) {
3118 $this->response[$key][] = $value;
3119 } else {
3120 $tmp = $this->response[$key];
3121 $this->response[$key] = array();
3122 $this->response[$key][] = $tmp;
3123 $this->response[$key][] = $value;
3126 } else {
3127 $this->response[$key] = $value;
3130 return strlen($header);
3134 * Set options for individual curl instance
3136 * @param resource $curl A curl handle
3137 * @param array $options
3138 * @return resource The curl handle
3140 private function apply_opt($curl, $options) {
3141 // Some more security first.
3142 if (defined('CURLOPT_PROTOCOLS')) {
3143 $this->options['CURLOPT_PROTOCOLS'] = (CURLPROTO_HTTP | CURLPROTO_HTTPS);
3145 if (defined('CURLOPT_REDIR_PROTOCOLS')) {
3146 $this->options['CURLOPT_REDIR_PROTOCOLS'] = (CURLPROTO_HTTP | CURLPROTO_HTTPS);
3149 // Clean up
3150 $this->cleanopt();
3151 // set cookie
3152 if (!empty($this->cookie) || !empty($options['cookie'])) {
3153 $this->setopt(array('cookiejar'=>$this->cookie,
3154 'cookiefile'=>$this->cookie
3158 // Bypass proxy if required.
3159 if ($this->proxy === null) {
3160 if (!empty($this->options['CURLOPT_URL']) and is_proxybypass($this->options['CURLOPT_URL'])) {
3161 $proxy = false;
3162 } else {
3163 $proxy = true;
3165 } else {
3166 $proxy = (bool)$this->proxy;
3169 // Set proxy.
3170 if ($proxy) {
3171 $options['CURLOPT_PROXY'] = $this->proxy_host;
3172 } else {
3173 unset($this->options['CURLOPT_PROXY']);
3176 $this->setopt($options);
3177 // reset before set options
3178 curl_setopt($curl, CURLOPT_HEADERFUNCTION, array(&$this,'formatHeader'));
3179 // set headers
3180 if (empty($this->header)) {
3181 $this->setHeader(array(
3182 'User-Agent: MoodleBot/1.0',
3183 'Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7',
3184 'Connection: keep-alive'
3187 curl_setopt($curl, CURLOPT_HTTPHEADER, $this->header);
3189 if ($this->debug) {
3190 echo '<h1>Options</h1>';
3191 var_dump($this->options);
3192 echo '<h1>Header</h1>';
3193 var_dump($this->header);
3196 // Do not allow infinite redirects.
3197 if (!isset($this->options['CURLOPT_MAXREDIRS'])) {
3198 $this->options['CURLOPT_MAXREDIRS'] = 0;
3199 } else if ($this->options['CURLOPT_MAXREDIRS'] > 100) {
3200 $this->options['CURLOPT_MAXREDIRS'] = 100;
3201 } else {
3202 $this->options['CURLOPT_MAXREDIRS'] = (int)$this->options['CURLOPT_MAXREDIRS'];
3205 // Make sure we always know if redirects expected.
3206 if (!isset($this->options['CURLOPT_FOLLOWLOCATION'])) {
3207 $this->options['CURLOPT_FOLLOWLOCATION'] = 0;
3210 // Set options.
3211 foreach($this->options as $name => $val) {
3212 if ($name === 'CURLOPT_PROTOCOLS' or $name === 'CURLOPT_REDIR_PROTOCOLS') {
3213 // These can not be changed, sorry.
3214 continue;
3216 if ($name === 'CURLOPT_FOLLOWLOCATION' and $this->emulateredirects) {
3217 // The redirects are emulated elsewhere.
3218 curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 0);
3219 continue;
3221 $name = constant($name);
3222 curl_setopt($curl, $name, $val);
3225 return $curl;
3229 * Download multiple files in parallel
3231 * Calls {@link multi()} with specific download headers
3233 * <code>
3234 * $c = new curl();
3235 * $file1 = fopen('a', 'wb');
3236 * $file2 = fopen('b', 'wb');
3237 * $c->download(array(
3238 * array('url'=>'http://localhost/', 'file'=>$file1),
3239 * array('url'=>'http://localhost/20/', 'file'=>$file2)
3240 * ));
3241 * fclose($file1);
3242 * fclose($file2);
3243 * </code>
3245 * or
3247 * <code>
3248 * $c = new curl();
3249 * $c->download(array(
3250 * array('url'=>'http://localhost/', 'filepath'=>'/tmp/file1.tmp'),
3251 * array('url'=>'http://localhost/20/', 'filepath'=>'/tmp/file2.tmp')
3252 * ));
3253 * </code>
3255 * @param array $requests An array of files to request {
3256 * url => url to download the file [required]
3257 * file => file handler, or
3258 * filepath => file path
3260 * If 'file' and 'filepath' parameters are both specified in one request, the
3261 * open file handle in the 'file' parameter will take precedence and 'filepath'
3262 * will be ignored.
3264 * @param array $options An array of options to set
3265 * @return array An array of results
3267 public function download($requests, $options = array()) {
3268 $options['RETURNTRANSFER'] = false;
3269 return $this->multi($requests, $options);
3273 * Multi HTTP Requests
3274 * This function could run multi-requests in parallel.
3276 * @param array $requests An array of files to request
3277 * @param array $options An array of options to set
3278 * @return array An array of results
3280 protected function multi($requests, $options = array()) {
3281 $count = count($requests);
3282 $handles = array();
3283 $results = array();
3284 $main = curl_multi_init();
3285 for ($i = 0; $i < $count; $i++) {
3286 if (!empty($requests[$i]['filepath']) and empty($requests[$i]['file'])) {
3287 // open file
3288 $requests[$i]['file'] = fopen($requests[$i]['filepath'], 'w');
3289 $requests[$i]['auto-handle'] = true;
3291 foreach($requests[$i] as $n=>$v) {
3292 $options[$n] = $v;
3294 $handles[$i] = curl_init($requests[$i]['url']);
3295 $this->apply_opt($handles[$i], $options);
3296 curl_multi_add_handle($main, $handles[$i]);
3298 $running = 0;
3299 do {
3300 curl_multi_exec($main, $running);
3301 } while($running > 0);
3302 for ($i = 0; $i < $count; $i++) {
3303 if (!empty($options['CURLOPT_RETURNTRANSFER'])) {
3304 $results[] = true;
3305 } else {
3306 $results[] = curl_multi_getcontent($handles[$i]);
3308 curl_multi_remove_handle($main, $handles[$i]);
3310 curl_multi_close($main);
3312 for ($i = 0; $i < $count; $i++) {
3313 if (!empty($requests[$i]['filepath']) and !empty($requests[$i]['auto-handle'])) {
3314 // close file handler if file is opened in this function
3315 fclose($requests[$i]['file']);
3318 return $results;
3322 * Single HTTP Request
3324 * @param string $url The URL to request
3325 * @param array $options
3326 * @return bool
3328 protected function request($url, $options = array()) {
3329 // Set the URL as a curl option.
3330 $this->setopt(array('CURLOPT_URL' => $url));
3332 // Create curl instance.
3333 $curl = curl_init();
3335 // Reset here so that the data is valid when result returned from cache.
3336 $this->info = array();
3337 $this->error = '';
3338 $this->errno = 0;
3339 $this->response = array();
3340 $this->rawresponse = array();
3341 $this->responsefinished = false;
3343 $this->apply_opt($curl, $options);
3344 if ($this->cache && $ret = $this->cache->get($this->options)) {
3345 return $ret;
3348 $ret = curl_exec($curl);
3349 $this->info = curl_getinfo($curl);
3350 $this->error = curl_error($curl);
3351 $this->errno = curl_errno($curl);
3352 // Note: $this->response and $this->rawresponse are filled by $hits->formatHeader callback.
3354 if ($this->emulateredirects and $this->options['CURLOPT_FOLLOWLOCATION'] and $this->info['http_code'] != 200) {
3355 $redirects = 0;
3357 while($redirects <= $this->options['CURLOPT_MAXREDIRS']) {
3359 if ($this->info['http_code'] == 301) {
3360 // Moved Permanently - repeat the same request on new URL.
3362 } else if ($this->info['http_code'] == 302) {
3363 // Found - the standard redirect - repeat the same request on new URL.
3365 } else if ($this->info['http_code'] == 303) {
3366 // 303 See Other - repeat only if GET, do not bother with POSTs.
3367 if (empty($this->options['CURLOPT_HTTPGET'])) {
3368 break;
3371 } else if ($this->info['http_code'] == 307) {
3372 // Temporary Redirect - must repeat using the same request type.
3374 } else if ($this->info['http_code'] == 308) {
3375 // Permanent Redirect - must repeat using the same request type.
3377 } else {
3378 // Some other http code means do not retry!
3379 break;
3382 $redirects++;
3384 $redirecturl = null;
3385 if (isset($this->info['redirect_url'])) {
3386 if (preg_match('|^https?://|i', $this->info['redirect_url'])) {
3387 $redirecturl = $this->info['redirect_url'];
3390 if (!$redirecturl) {
3391 foreach ($this->response as $k => $v) {
3392 if (strtolower($k) === 'location') {
3393 $redirecturl = $v;
3394 break;
3397 if (preg_match('|^https?://|i', $redirecturl)) {
3398 // Great, this is the correct location format!
3400 } else if ($redirecturl) {
3401 $current = curl_getinfo($curl, CURLINFO_EFFECTIVE_URL);
3402 if (strpos($redirecturl, '/') === 0) {
3403 // Relative to server root - just guess.
3404 $pos = strpos('/', $current, 8);
3405 if ($pos === false) {
3406 $redirecturl = $current.$redirecturl;
3407 } else {
3408 $redirecturl = substr($current, 0, $pos).$redirecturl;
3410 } else {
3411 // Relative to current script.
3412 $redirecturl = dirname($current).'/'.$redirecturl;
3417 curl_setopt($curl, CURLOPT_URL, $redirecturl);
3418 $ret = curl_exec($curl);
3420 $this->info = curl_getinfo($curl);
3421 $this->error = curl_error($curl);
3422 $this->errno = curl_errno($curl);
3424 $this->info['redirect_count'] = $redirects;
3426 if ($this->info['http_code'] === 200) {
3427 // Finally this is what we wanted.
3428 break;
3430 if ($this->errno != CURLE_OK) {
3431 // Something wrong is going on.
3432 break;
3435 if ($redirects > $this->options['CURLOPT_MAXREDIRS']) {
3436 $this->errno = CURLE_TOO_MANY_REDIRECTS;
3437 $this->error = 'Maximum ('.$this->options['CURLOPT_MAXREDIRS'].') redirects followed';
3441 if ($this->cache) {
3442 $this->cache->set($this->options, $ret);
3445 if ($this->debug) {
3446 echo '<h1>Return Data</h1>';
3447 var_dump($ret);
3448 echo '<h1>Info</h1>';
3449 var_dump($this->info);
3450 echo '<h1>Error</h1>';
3451 var_dump($this->error);
3454 curl_close($curl);
3456 if (empty($this->error)) {
3457 return $ret;
3458 } else {
3459 return $this->error;
3460 // exception is not ajax friendly
3461 //throw new moodle_exception($this->error, 'curl');
3466 * HTTP HEAD method
3468 * @see request()
3470 * @param string $url
3471 * @param array $options
3472 * @return bool
3474 public function head($url, $options = array()) {
3475 $options['CURLOPT_HTTPGET'] = 0;
3476 $options['CURLOPT_HEADER'] = 1;
3477 $options['CURLOPT_NOBODY'] = 1;
3478 return $this->request($url, $options);
3482 * HTTP POST method
3484 * @param string $url
3485 * @param array|string $params
3486 * @param array $options
3487 * @return bool
3489 public function post($url, $params = '', $options = array()) {
3490 $options['CURLOPT_POST'] = 1;
3491 if (is_array($params)) {
3492 $this->_tmp_file_post_params = array();
3493 foreach ($params as $key => $value) {
3494 if ($value instanceof stored_file) {
3495 $value->add_to_curl_request($this, $key);
3496 } else {
3497 $this->_tmp_file_post_params[$key] = $value;
3500 $options['CURLOPT_POSTFIELDS'] = $this->_tmp_file_post_params;
3501 unset($this->_tmp_file_post_params);
3502 } else {
3503 // $params is the raw post data
3504 $options['CURLOPT_POSTFIELDS'] = $params;
3506 return $this->request($url, $options);
3510 * HTTP GET method
3512 * @param string $url
3513 * @param array $params
3514 * @param array $options
3515 * @return bool
3517 public function get($url, $params = array(), $options = array()) {
3518 $options['CURLOPT_HTTPGET'] = 1;
3520 if (!empty($params)) {
3521 $url .= (stripos($url, '?') !== false) ? '&' : '?';
3522 $url .= http_build_query($params, '', '&');
3524 return $this->request($url, $options);
3528 * Downloads one file and writes it to the specified file handler
3530 * <code>
3531 * $c = new curl();
3532 * $file = fopen('savepath', 'w');
3533 * $result = $c->download_one('http://localhost/', null,
3534 * array('file' => $file, 'timeout' => 5, 'followlocation' => true, 'maxredirs' => 3));
3535 * fclose($file);
3536 * $download_info = $c->get_info();
3537 * if ($result === true) {
3538 * // file downloaded successfully
3539 * } else {
3540 * $error_text = $result;
3541 * $error_code = $c->get_errno();
3543 * </code>
3545 * <code>
3546 * $c = new curl();
3547 * $result = $c->download_one('http://localhost/', null,
3548 * array('filepath' => 'savepath', 'timeout' => 5, 'followlocation' => true, 'maxredirs' => 3));
3549 * // ... see above, no need to close handle and remove file if unsuccessful
3550 * </code>
3552 * @param string $url
3553 * @param array|null $params key-value pairs to be added to $url as query string
3554 * @param array $options request options. Must include either 'file' or 'filepath'
3555 * @return bool|string true on success or error string on failure
3557 public function download_one($url, $params, $options = array()) {
3558 $options['CURLOPT_HTTPGET'] = 1;
3559 if (!empty($params)) {
3560 $url .= (stripos($url, '?') !== false) ? '&' : '?';
3561 $url .= http_build_query($params, '', '&');
3563 if (!empty($options['filepath']) && empty($options['file'])) {
3564 // open file
3565 if (!($options['file'] = fopen($options['filepath'], 'w'))) {
3566 $this->errno = 100;
3567 return get_string('cannotwritefile', 'error', $options['filepath']);
3569 $filepath = $options['filepath'];
3571 unset($options['filepath']);
3572 $result = $this->request($url, $options);
3573 if (isset($filepath)) {
3574 fclose($options['file']);
3575 if ($result !== true) {
3576 unlink($filepath);
3579 return $result;
3583 * HTTP PUT method
3585 * @param string $url
3586 * @param array $params
3587 * @param array $options
3588 * @return bool
3590 public function put($url, $params = array(), $options = array()) {
3591 $file = $params['file'];
3592 if (!is_file($file)) {
3593 return null;
3595 $fp = fopen($file, 'r');
3596 $size = filesize($file);
3597 $options['CURLOPT_PUT'] = 1;
3598 $options['CURLOPT_INFILESIZE'] = $size;
3599 $options['CURLOPT_INFILE'] = $fp;
3600 if (!isset($this->options['CURLOPT_USERPWD'])) {
3601 $this->setopt(array('CURLOPT_USERPWD'=>'anonymous: noreply@moodle.org'));
3603 $ret = $this->request($url, $options);
3604 fclose($fp);
3605 return $ret;
3609 * HTTP DELETE method
3611 * @param string $url
3612 * @param array $param
3613 * @param array $options
3614 * @return bool
3616 public function delete($url, $param = array(), $options = array()) {
3617 $options['CURLOPT_CUSTOMREQUEST'] = 'DELETE';
3618 if (!isset($options['CURLOPT_USERPWD'])) {
3619 $options['CURLOPT_USERPWD'] = 'anonymous: noreply@moodle.org';
3621 $ret = $this->request($url, $options);
3622 return $ret;
3626 * HTTP TRACE method
3628 * @param string $url
3629 * @param array $options
3630 * @return bool
3632 public function trace($url, $options = array()) {
3633 $options['CURLOPT_CUSTOMREQUEST'] = 'TRACE';
3634 $ret = $this->request($url, $options);
3635 return $ret;
3639 * HTTP OPTIONS method
3641 * @param string $url
3642 * @param array $options
3643 * @return bool
3645 public function options($url, $options = array()) {
3646 $options['CURLOPT_CUSTOMREQUEST'] = 'OPTIONS';
3647 $ret = $this->request($url, $options);
3648 return $ret;
3652 * Get curl information
3654 * @return string
3656 public function get_info() {
3657 return $this->info;
3661 * Get curl error code
3663 * @return int
3665 public function get_errno() {
3666 return $this->errno;
3670 * When using a proxy, an additional HTTP response code may appear at
3671 * the start of the header. For example, when using https over a proxy
3672 * there may be 'HTTP/1.0 200 Connection Established'. Other codes are
3673 * also possible and some may come with their own headers.
3675 * If using the return value containing all headers, this function can be
3676 * called to remove unwanted doubles.
3678 * Note that it is not possible to distinguish this situation from valid
3679 * data unless you know the actual response part (below the headers)
3680 * will not be included in this string, or else will not 'look like' HTTP
3681 * headers. As a result it is not safe to call this function for general
3682 * data.
3684 * @param string $input Input HTTP response
3685 * @return string HTTP response with additional headers stripped if any
3687 public static function strip_double_headers($input) {
3688 // I have tried to make this regular expression as specific as possible
3689 // to avoid any case where it does weird stuff if you happen to put
3690 // HTTP/1.1 200 at the start of any line in your RSS file. This should
3691 // also make it faster because it can abandon regex processing as soon
3692 // as it hits something that doesn't look like an http header. The
3693 // header definition is taken from RFC 822, except I didn't support
3694 // folding which is never used in practice.
3695 $crlf = "\r\n";
3696 return preg_replace(
3697 // HTTP version and status code (ignore value of code).
3698 '~^HTTP/1\..*' . $crlf .
3699 // Header name: character between 33 and 126 decimal, except colon.
3700 // Colon. Header value: any character except \r and \n. CRLF.
3701 '(?:[\x21-\x39\x3b-\x7e]+:[^' . $crlf . ']+' . $crlf . ')*' .
3702 // Headers are terminated by another CRLF (blank line).
3703 $crlf .
3704 // Second HTTP status code, this time must be 200.
3705 '(HTTP/1.[01] 200 )~', '$1', $input);
3710 * This class is used by cURL class, use case:
3712 * <code>
3713 * $CFG->repositorycacheexpire = 120;
3714 * $CFG->curlcache = 120;
3716 * $c = new curl(array('cache'=>true), 'module_cache'=>'repository');
3717 * $ret = $c->get('http://www.google.com');
3718 * </code>
3720 * @package core_files
3721 * @copyright Dongsheng Cai <dongsheng@moodle.com>
3722 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
3724 class curl_cache {
3725 /** @var string Path to cache directory */
3726 public $dir = '';
3729 * Constructor
3731 * @global stdClass $CFG
3732 * @param string $module which module is using curl_cache
3734 public function __construct($module = 'repository') {
3735 global $CFG;
3736 if (!empty($module)) {
3737 $this->dir = $CFG->cachedir.'/'.$module.'/';
3738 } else {
3739 $this->dir = $CFG->cachedir.'/misc/';
3741 if (!file_exists($this->dir)) {
3742 mkdir($this->dir, $CFG->directorypermissions, true);
3744 if ($module == 'repository') {
3745 if (empty($CFG->repositorycacheexpire)) {
3746 $CFG->repositorycacheexpire = 120;
3748 $this->ttl = $CFG->repositorycacheexpire;
3749 } else {
3750 if (empty($CFG->curlcache)) {
3751 $CFG->curlcache = 120;
3753 $this->ttl = $CFG->curlcache;
3758 * Get cached value
3760 * @global stdClass $CFG
3761 * @global stdClass $USER
3762 * @param mixed $param
3763 * @return bool|string
3765 public function get($param) {
3766 global $CFG, $USER;
3767 $this->cleanup($this->ttl);
3768 $filename = 'u'.$USER->id.'_'.md5(serialize($param));
3769 if(file_exists($this->dir.$filename)) {
3770 $lasttime = filemtime($this->dir.$filename);
3771 if (time()-$lasttime > $this->ttl) {
3772 return false;
3773 } else {
3774 $fp = fopen($this->dir.$filename, 'r');
3775 $size = filesize($this->dir.$filename);
3776 $content = fread($fp, $size);
3777 return unserialize($content);
3780 return false;
3784 * Set cache value
3786 * @global object $CFG
3787 * @global object $USER
3788 * @param mixed $param
3789 * @param mixed $val
3791 public function set($param, $val) {
3792 global $CFG, $USER;
3793 $filename = 'u'.$USER->id.'_'.md5(serialize($param));
3794 $fp = fopen($this->dir.$filename, 'w');
3795 fwrite($fp, serialize($val));
3796 fclose($fp);
3797 @chmod($this->dir.$filename, $CFG->filepermissions);
3801 * Remove cache files
3803 * @param int $expire The number of seconds before expiry
3805 public function cleanup($expire) {
3806 if ($dir = opendir($this->dir)) {
3807 while (false !== ($file = readdir($dir))) {
3808 if(!is_dir($file) && $file != '.' && $file != '..') {
3809 $lasttime = @filemtime($this->dir.$file);
3810 if (time() - $lasttime > $expire) {
3811 @unlink($this->dir.$file);
3815 closedir($dir);
3819 * delete current user's cache file
3821 * @global object $CFG
3822 * @global object $USER
3824 public function refresh() {
3825 global $CFG, $USER;
3826 if ($dir = opendir($this->dir)) {
3827 while (false !== ($file = readdir($dir))) {
3828 if (!is_dir($file) && $file != '.' && $file != '..') {
3829 if (strpos($file, 'u'.$USER->id.'_') !== false) {
3830 @unlink($this->dir.$file);
3839 * This function delegates file serving to individual plugins
3841 * @param string $relativepath
3842 * @param bool $forcedownload
3843 * @param null|string $preview the preview mode, defaults to serving the original file
3844 * @todo MDL-31088 file serving improments
3846 function file_pluginfile($relativepath, $forcedownload, $preview = null) {
3847 global $DB, $CFG, $USER;
3848 // relative path must start with '/'
3849 if (!$relativepath) {
3850 print_error('invalidargorconf');
3851 } else if ($relativepath[0] != '/') {
3852 print_error('pathdoesnotstartslash');
3855 // extract relative path components
3856 $args = explode('/', ltrim($relativepath, '/'));
3858 if (count($args) < 3) { // always at least context, component and filearea
3859 print_error('invalidarguments');
3862 $contextid = (int)array_shift($args);
3863 $component = clean_param(array_shift($args), PARAM_COMPONENT);
3864 $filearea = clean_param(array_shift($args), PARAM_AREA);
3866 list($context, $course, $cm) = get_context_info_array($contextid);
3868 $fs = get_file_storage();
3870 // ========================================================================================================================
3871 if ($component === 'blog') {
3872 // Blog file serving
3873 if ($context->contextlevel != CONTEXT_SYSTEM) {
3874 send_file_not_found();
3876 if ($filearea !== 'attachment' and $filearea !== 'post') {
3877 send_file_not_found();
3880 if (empty($CFG->enableblogs)) {
3881 print_error('siteblogdisable', 'blog');
3884 $entryid = (int)array_shift($args);
3885 if (!$entry = $DB->get_record('post', array('module'=>'blog', 'id'=>$entryid))) {
3886 send_file_not_found();
3888 if ($CFG->bloglevel < BLOG_GLOBAL_LEVEL) {
3889 require_login();
3890 if (isguestuser()) {
3891 print_error('noguest');
3893 if ($CFG->bloglevel == BLOG_USER_LEVEL) {
3894 if ($USER->id != $entry->userid) {
3895 send_file_not_found();
3900 if ($entry->publishstate === 'public') {
3901 if ($CFG->forcelogin) {
3902 require_login();
3905 } else if ($entry->publishstate === 'site') {
3906 require_login();
3907 //ok
3908 } else if ($entry->publishstate === 'draft') {
3909 require_login();
3910 if ($USER->id != $entry->userid) {
3911 send_file_not_found();
3915 $filename = array_pop($args);
3916 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
3918 if (!$file = $fs->get_file($context->id, $component, $filearea, $entryid, $filepath, $filename) or $file->is_directory()) {
3919 send_file_not_found();
3922 send_stored_file($file, 10*60, 0, true, array('preview' => $preview)); // download MUST be forced - security!
3924 // ========================================================================================================================
3925 } else if ($component === 'grade') {
3926 if (($filearea === 'outcome' or $filearea === 'scale') and $context->contextlevel == CONTEXT_SYSTEM) {
3927 // Global gradebook files
3928 if ($CFG->forcelogin) {
3929 require_login();
3932 $fullpath = "/$context->id/$component/$filearea/".implode('/', $args);
3934 if (!$file = $fs->get_file_by_hash(sha1($fullpath)) or $file->is_directory()) {
3935 send_file_not_found();
3938 \core\session\manager::write_close(); // Unlock session during file serving.
3939 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
3941 } else if ($filearea === 'feedback' and $context->contextlevel == CONTEXT_COURSE) {
3942 //TODO: nobody implemented this yet in grade edit form!!
3943 send_file_not_found();
3945 if ($CFG->forcelogin || $course->id != SITEID) {
3946 require_login($course);
3949 $fullpath = "/$context->id/$component/$filearea/".implode('/', $args);
3951 if (!$file = $fs->get_file_by_hash(sha1($fullpath)) or $file->is_directory()) {
3952 send_file_not_found();
3955 \core\session\manager::write_close(); // Unlock session during file serving.
3956 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
3957 } else {
3958 send_file_not_found();
3961 // ========================================================================================================================
3962 } else if ($component === 'tag') {
3963 if ($filearea === 'description' and $context->contextlevel == CONTEXT_SYSTEM) {
3965 // All tag descriptions are going to be public but we still need to respect forcelogin
3966 if ($CFG->forcelogin) {
3967 require_login();
3970 $fullpath = "/$context->id/tag/description/".implode('/', $args);
3972 if (!$file = $fs->get_file_by_hash(sha1($fullpath)) or $file->is_directory()) {
3973 send_file_not_found();
3976 \core\session\manager::write_close(); // Unlock session during file serving.
3977 send_stored_file($file, 60*60, 0, true, array('preview' => $preview));
3979 } else {
3980 send_file_not_found();
3982 // ========================================================================================================================
3983 } else if ($component === 'badges') {
3984 require_once($CFG->libdir . '/badgeslib.php');
3986 $badgeid = (int)array_shift($args);
3987 $badge = new badge($badgeid);
3988 $filename = array_pop($args);
3990 if ($filearea === 'badgeimage') {
3991 if ($filename !== 'f1' && $filename !== 'f2') {
3992 send_file_not_found();
3994 if (!$file = $fs->get_file($context->id, 'badges', 'badgeimage', $badge->id, '/', $filename.'.png')) {
3995 send_file_not_found();
3998 \core\session\manager::write_close();
3999 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4000 } else if ($filearea === 'userbadge' and $context->contextlevel == CONTEXT_USER) {
4001 if (!$file = $fs->get_file($context->id, 'badges', 'userbadge', $badge->id, '/', $filename.'.png')) {
4002 send_file_not_found();
4005 \core\session\manager::write_close();
4006 send_stored_file($file, 60*60, 0, true, array('preview' => $preview));
4008 // ========================================================================================================================
4009 } else if ($component === 'calendar') {
4010 if ($filearea === 'event_description' and $context->contextlevel == CONTEXT_SYSTEM) {
4012 // All events here are public the one requirement is that we respect forcelogin
4013 if ($CFG->forcelogin) {
4014 require_login();
4017 // Get the event if from the args array
4018 $eventid = array_shift($args);
4020 // Load the event from the database
4021 if (!$event = $DB->get_record('event', array('id'=>(int)$eventid, 'eventtype'=>'site'))) {
4022 send_file_not_found();
4025 // Get the file and serve if successful
4026 $filename = array_pop($args);
4027 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4028 if (!$file = $fs->get_file($context->id, $component, $filearea, $eventid, $filepath, $filename) or $file->is_directory()) {
4029 send_file_not_found();
4032 \core\session\manager::write_close(); // Unlock session during file serving.
4033 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4035 } else if ($filearea === 'event_description' and $context->contextlevel == CONTEXT_USER) {
4037 // Must be logged in, if they are not then they obviously can't be this user
4038 require_login();
4040 // Don't want guests here, potentially saves a DB call
4041 if (isguestuser()) {
4042 send_file_not_found();
4045 // Get the event if from the args array
4046 $eventid = array_shift($args);
4048 // Load the event from the database - user id must match
4049 if (!$event = $DB->get_record('event', array('id'=>(int)$eventid, 'userid'=>$USER->id, 'eventtype'=>'user'))) {
4050 send_file_not_found();
4053 // Get the file and serve if successful
4054 $filename = array_pop($args);
4055 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4056 if (!$file = $fs->get_file($context->id, $component, $filearea, $eventid, $filepath, $filename) or $file->is_directory()) {
4057 send_file_not_found();
4060 \core\session\manager::write_close(); // Unlock session during file serving.
4061 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4063 } else if ($filearea === 'event_description' and $context->contextlevel == CONTEXT_COURSE) {
4065 // Respect forcelogin and require login unless this is the site.... it probably
4066 // should NEVER be the site
4067 if ($CFG->forcelogin || $course->id != SITEID) {
4068 require_login($course);
4071 // Must be able to at least view the course. This does not apply to the front page.
4072 if ($course->id != SITEID && (!is_enrolled($context)) && (!is_viewing($context))) {
4073 //TODO: hmm, do we really want to block guests here?
4074 send_file_not_found();
4077 // Get the event id
4078 $eventid = array_shift($args);
4080 // Load the event from the database we need to check whether it is
4081 // a) valid course event
4082 // b) a group event
4083 // Group events use the course context (there is no group context)
4084 if (!$event = $DB->get_record('event', array('id'=>(int)$eventid, 'courseid'=>$course->id))) {
4085 send_file_not_found();
4088 // If its a group event require either membership of view all groups capability
4089 if ($event->eventtype === 'group') {
4090 if (!has_capability('moodle/site:accessallgroups', $context) && !groups_is_member($event->groupid, $USER->id)) {
4091 send_file_not_found();
4093 } else if ($event->eventtype === 'course' || $event->eventtype === 'site') {
4094 // Ok. Please note that the event type 'site' still uses a course context.
4095 } else {
4096 // Some other type.
4097 send_file_not_found();
4100 // If we get this far we can serve the file
4101 $filename = array_pop($args);
4102 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4103 if (!$file = $fs->get_file($context->id, $component, $filearea, $eventid, $filepath, $filename) or $file->is_directory()) {
4104 send_file_not_found();
4107 \core\session\manager::write_close(); // Unlock session during file serving.
4108 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4110 } else {
4111 send_file_not_found();
4114 // ========================================================================================================================
4115 } else if ($component === 'user') {
4116 if ($filearea === 'icon' and $context->contextlevel == CONTEXT_USER) {
4117 if (count($args) == 1) {
4118 $themename = theme_config::DEFAULT_THEME;
4119 $filename = array_shift($args);
4120 } else {
4121 $themename = array_shift($args);
4122 $filename = array_shift($args);
4125 // fix file name automatically
4126 if ($filename !== 'f1' and $filename !== 'f2' and $filename !== 'f3') {
4127 $filename = 'f1';
4130 if ((!empty($CFG->forcelogin) and !isloggedin()) ||
4131 (!empty($CFG->forceloginforprofileimage) && (!isloggedin() || isguestuser()))) {
4132 // protect images if login required and not logged in;
4133 // also if login is required for profile images and is not logged in or guest
4134 // do not use require_login() because it is expensive and not suitable here anyway
4135 $theme = theme_config::load($themename);
4136 redirect($theme->pix_url('u/'.$filename, 'moodle')); // intentionally not cached
4139 if (!$file = $fs->get_file($context->id, 'user', 'icon', 0, '/', $filename.'.png')) {
4140 if (!$file = $fs->get_file($context->id, 'user', 'icon', 0, '/', $filename.'.jpg')) {
4141 if ($filename === 'f3') {
4142 // f3 512x512px was introduced in 2.3, there might be only the smaller version.
4143 if (!$file = $fs->get_file($context->id, 'user', 'icon', 0, '/', 'f1.png')) {
4144 $file = $fs->get_file($context->id, 'user', 'icon', 0, '/', 'f1.jpg');
4149 if (!$file) {
4150 // bad reference - try to prevent future retries as hard as possible!
4151 if ($user = $DB->get_record('user', array('id'=>$context->instanceid), 'id, picture')) {
4152 if ($user->picture > 0) {
4153 $DB->set_field('user', 'picture', 0, array('id'=>$user->id));
4156 // no redirect here because it is not cached
4157 $theme = theme_config::load($themename);
4158 $imagefile = $theme->resolve_image_location('u/'.$filename, 'moodle', null);
4159 send_file($imagefile, basename($imagefile), 60*60*24*14);
4162 send_stored_file($file, 60*60*24*365, 0, false, array('preview' => $preview)); // enable long caching, there are many images on each page
4164 } else if ($filearea === 'private' and $context->contextlevel == CONTEXT_USER) {
4165 require_login();
4167 if (isguestuser()) {
4168 send_file_not_found();
4171 if ($USER->id !== $context->instanceid) {
4172 send_file_not_found();
4175 $filename = array_pop($args);
4176 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4177 if (!$file = $fs->get_file($context->id, $component, $filearea, 0, $filepath, $filename) or $file->is_directory()) {
4178 send_file_not_found();
4181 \core\session\manager::write_close(); // Unlock session during file serving.
4182 send_stored_file($file, 0, 0, true, array('preview' => $preview)); // must force download - security!
4184 } else if ($filearea === 'profile' and $context->contextlevel == CONTEXT_USER) {
4186 if ($CFG->forcelogin) {
4187 require_login();
4190 $userid = $context->instanceid;
4192 if ($USER->id == $userid) {
4193 // always can access own
4195 } else if (!empty($CFG->forceloginforprofiles)) {
4196 require_login();
4198 if (isguestuser()) {
4199 send_file_not_found();
4202 // we allow access to site profile of all course contacts (usually teachers)
4203 if (!has_coursecontact_role($userid) && !has_capability('moodle/user:viewdetails', $context)) {
4204 send_file_not_found();
4207 $canview = false;
4208 if (has_capability('moodle/user:viewdetails', $context)) {
4209 $canview = true;
4210 } else {
4211 $courses = enrol_get_my_courses();
4214 while (!$canview && count($courses) > 0) {
4215 $course = array_shift($courses);
4216 if (has_capability('moodle/user:viewdetails', context_course::instance($course->id))) {
4217 $canview = true;
4222 $filename = array_pop($args);
4223 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4224 if (!$file = $fs->get_file($context->id, $component, $filearea, 0, $filepath, $filename) or $file->is_directory()) {
4225 send_file_not_found();
4228 \core\session\manager::write_close(); // Unlock session during file serving.
4229 send_stored_file($file, 0, 0, true, array('preview' => $preview)); // must force download - security!
4231 } else if ($filearea === 'profile' and $context->contextlevel == CONTEXT_COURSE) {
4232 $userid = (int)array_shift($args);
4233 $usercontext = context_user::instance($userid);
4235 if ($CFG->forcelogin) {
4236 require_login();
4239 if (!empty($CFG->forceloginforprofiles)) {
4240 require_login();
4241 if (isguestuser()) {
4242 print_error('noguest');
4245 //TODO: review this logic of user profile access prevention
4246 if (!has_coursecontact_role($userid) and !has_capability('moodle/user:viewdetails', $usercontext)) {
4247 print_error('usernotavailable');
4249 if (!has_capability('moodle/user:viewdetails', $context) && !has_capability('moodle/user:viewdetails', $usercontext)) {
4250 print_error('cannotviewprofile');
4252 if (!is_enrolled($context, $userid)) {
4253 print_error('notenrolledprofile');
4255 if (groups_get_course_groupmode($course) == SEPARATEGROUPS and !has_capability('moodle/site:accessallgroups', $context)) {
4256 print_error('groupnotamember');
4260 $filename = array_pop($args);
4261 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4262 if (!$file = $fs->get_file($usercontext->id, 'user', 'profile', 0, $filepath, $filename) or $file->is_directory()) {
4263 send_file_not_found();
4266 \core\session\manager::write_close(); // Unlock session during file serving.
4267 send_stored_file($file, 0, 0, true, array('preview' => $preview)); // must force download - security!
4269 } else if ($filearea === 'backup' and $context->contextlevel == CONTEXT_USER) {
4270 require_login();
4272 if (isguestuser()) {
4273 send_file_not_found();
4275 $userid = $context->instanceid;
4277 if ($USER->id != $userid) {
4278 send_file_not_found();
4281 $filename = array_pop($args);
4282 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4283 if (!$file = $fs->get_file($context->id, 'user', 'backup', 0, $filepath, $filename) or $file->is_directory()) {
4284 send_file_not_found();
4287 \core\session\manager::write_close(); // Unlock session during file serving.
4288 send_stored_file($file, 0, 0, true, array('preview' => $preview)); // must force download - security!
4290 } else {
4291 send_file_not_found();
4294 // ========================================================================================================================
4295 } else if ($component === 'coursecat') {
4296 if ($context->contextlevel != CONTEXT_COURSECAT) {
4297 send_file_not_found();
4300 if ($filearea === 'description') {
4301 if ($CFG->forcelogin) {
4302 // no login necessary - unless login forced everywhere
4303 require_login();
4306 $filename = array_pop($args);
4307 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4308 if (!$file = $fs->get_file($context->id, 'coursecat', 'description', 0, $filepath, $filename) or $file->is_directory()) {
4309 send_file_not_found();
4312 \core\session\manager::write_close(); // Unlock session during file serving.
4313 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4314 } else {
4315 send_file_not_found();
4318 // ========================================================================================================================
4319 } else if ($component === 'course') {
4320 if ($context->contextlevel != CONTEXT_COURSE) {
4321 send_file_not_found();
4324 if ($filearea === 'summary' || $filearea === 'overviewfiles') {
4325 if ($CFG->forcelogin) {
4326 require_login();
4329 $filename = array_pop($args);
4330 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4331 if (!$file = $fs->get_file($context->id, 'course', $filearea, 0, $filepath, $filename) or $file->is_directory()) {
4332 send_file_not_found();
4335 \core\session\manager::write_close(); // Unlock session during file serving.
4336 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4338 } else if ($filearea === 'section') {
4339 if ($CFG->forcelogin) {
4340 require_login($course);
4341 } else if ($course->id != SITEID) {
4342 require_login($course);
4345 $sectionid = (int)array_shift($args);
4347 if (!$section = $DB->get_record('course_sections', array('id'=>$sectionid, 'course'=>$course->id))) {
4348 send_file_not_found();
4351 $filename = array_pop($args);
4352 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4353 if (!$file = $fs->get_file($context->id, 'course', 'section', $sectionid, $filepath, $filename) or $file->is_directory()) {
4354 send_file_not_found();
4357 \core\session\manager::write_close(); // Unlock session during file serving.
4358 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4360 } else {
4361 send_file_not_found();
4364 } else if ($component === 'group') {
4365 if ($context->contextlevel != CONTEXT_COURSE) {
4366 send_file_not_found();
4369 require_course_login($course, true, null, false);
4371 $groupid = (int)array_shift($args);
4373 $group = $DB->get_record('groups', array('id'=>$groupid, 'courseid'=>$course->id), '*', MUST_EXIST);
4374 if (($course->groupmodeforce and $course->groupmode == SEPARATEGROUPS) and !has_capability('moodle/site:accessallgroups', $context) and !groups_is_member($group->id, $USER->id)) {
4375 // do not allow access to separate group info if not member or teacher
4376 send_file_not_found();
4379 if ($filearea === 'description') {
4381 require_login($course);
4383 $filename = array_pop($args);
4384 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4385 if (!$file = $fs->get_file($context->id, 'group', 'description', $group->id, $filepath, $filename) or $file->is_directory()) {
4386 send_file_not_found();
4389 \core\session\manager::write_close(); // Unlock session during file serving.
4390 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4392 } else if ($filearea === 'icon') {
4393 $filename = array_pop($args);
4395 if ($filename !== 'f1' and $filename !== 'f2') {
4396 send_file_not_found();
4398 if (!$file = $fs->get_file($context->id, 'group', 'icon', $group->id, '/', $filename.'.png')) {
4399 if (!$file = $fs->get_file($context->id, 'group', 'icon', $group->id, '/', $filename.'.jpg')) {
4400 send_file_not_found();
4404 \core\session\manager::write_close(); // Unlock session during file serving.
4405 send_stored_file($file, 60*60, 0, false, array('preview' => $preview));
4407 } else {
4408 send_file_not_found();
4411 } else if ($component === 'grouping') {
4412 if ($context->contextlevel != CONTEXT_COURSE) {
4413 send_file_not_found();
4416 require_login($course);
4418 $groupingid = (int)array_shift($args);
4420 // note: everybody has access to grouping desc images for now
4421 if ($filearea === 'description') {
4423 $filename = array_pop($args);
4424 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4425 if (!$file = $fs->get_file($context->id, 'grouping', 'description', $groupingid, $filepath, $filename) or $file->is_directory()) {
4426 send_file_not_found();
4429 \core\session\manager::write_close(); // Unlock session during file serving.
4430 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4432 } else {
4433 send_file_not_found();
4436 // ========================================================================================================================
4437 } else if ($component === 'backup') {
4438 if ($filearea === 'course' and $context->contextlevel == CONTEXT_COURSE) {
4439 require_login($course);
4440 require_capability('moodle/backup:downloadfile', $context);
4442 $filename = array_pop($args);
4443 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4444 if (!$file = $fs->get_file($context->id, 'backup', 'course', 0, $filepath, $filename) or $file->is_directory()) {
4445 send_file_not_found();
4448 \core\session\manager::write_close(); // Unlock session during file serving.
4449 send_stored_file($file, 0, 0, $forcedownload, array('preview' => $preview));
4451 } else if ($filearea === 'section' and $context->contextlevel == CONTEXT_COURSE) {
4452 require_login($course);
4453 require_capability('moodle/backup:downloadfile', $context);
4455 $sectionid = (int)array_shift($args);
4457 $filename = array_pop($args);
4458 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4459 if (!$file = $fs->get_file($context->id, 'backup', 'section', $sectionid, $filepath, $filename) or $file->is_directory()) {
4460 send_file_not_found();
4463 \core\session\manager::write_close();
4464 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4466 } else if ($filearea === 'activity' and $context->contextlevel == CONTEXT_MODULE) {
4467 require_login($course, false, $cm);
4468 require_capability('moodle/backup:downloadfile', $context);
4470 $filename = array_pop($args);
4471 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4472 if (!$file = $fs->get_file($context->id, 'backup', 'activity', 0, $filepath, $filename) or $file->is_directory()) {
4473 send_file_not_found();
4476 \core\session\manager::write_close();
4477 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4479 } else if ($filearea === 'automated' and $context->contextlevel == CONTEXT_COURSE) {
4480 // Backup files that were generated by the automated backup systems.
4482 require_login($course);
4483 require_capability('moodle/site:config', $context);
4485 $filename = array_pop($args);
4486 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4487 if (!$file = $fs->get_file($context->id, 'backup', 'automated', 0, $filepath, $filename) or $file->is_directory()) {
4488 send_file_not_found();
4491 \core\session\manager::write_close(); // Unlock session during file serving.
4492 send_stored_file($file, 0, 0, $forcedownload, array('preview' => $preview));
4494 } else {
4495 send_file_not_found();
4498 // ========================================================================================================================
4499 } else if ($component === 'question') {
4500 require_once($CFG->libdir . '/questionlib.php');
4501 question_pluginfile($course, $context, 'question', $filearea, $args, $forcedownload);
4502 send_file_not_found();
4504 // ========================================================================================================================
4505 } else if ($component === 'grading') {
4506 if ($filearea === 'description') {
4507 // files embedded into the form definition description
4509 if ($context->contextlevel == CONTEXT_SYSTEM) {
4510 require_login();
4512 } else if ($context->contextlevel >= CONTEXT_COURSE) {
4513 require_login($course, false, $cm);
4515 } else {
4516 send_file_not_found();
4519 $formid = (int)array_shift($args);
4521 $sql = "SELECT ga.id
4522 FROM {grading_areas} ga
4523 JOIN {grading_definitions} gd ON (gd.areaid = ga.id)
4524 WHERE gd.id = ? AND ga.contextid = ?";
4525 $areaid = $DB->get_field_sql($sql, array($formid, $context->id), IGNORE_MISSING);
4527 if (!$areaid) {
4528 send_file_not_found();
4531 $fullpath = "/$context->id/$component/$filearea/$formid/".implode('/', $args);
4533 if (!$file = $fs->get_file_by_hash(sha1($fullpath)) or $file->is_directory()) {
4534 send_file_not_found();
4537 \core\session\manager::write_close(); // Unlock session during file serving.
4538 send_stored_file($file, 60*60, 0, $forcedownload, array('preview' => $preview));
4541 // ========================================================================================================================
4542 } else if (strpos($component, 'mod_') === 0) {
4543 $modname = substr($component, 4);
4544 if (!file_exists("$CFG->dirroot/mod/$modname/lib.php")) {
4545 send_file_not_found();
4547 require_once("$CFG->dirroot/mod/$modname/lib.php");
4549 if ($context->contextlevel == CONTEXT_MODULE) {
4550 if ($cm->modname !== $modname) {
4551 // somebody tries to gain illegal access, cm type must match the component!
4552 send_file_not_found();
4556 if ($filearea === 'intro') {
4557 if (!plugin_supports('mod', $modname, FEATURE_MOD_INTRO, true)) {
4558 send_file_not_found();
4560 require_course_login($course, true, $cm);
4562 // all users may access it
4563 $filename = array_pop($args);
4564 $filepath = $args ? '/'.implode('/', $args).'/' : '/';
4565 if (!$file = $fs->get_file($context->id, 'mod_'.$modname, 'intro', 0, $filepath, $filename) or $file->is_directory()) {
4566 send_file_not_found();
4569 // finally send the file
4570 send_stored_file($file, null, 0, false, array('preview' => $preview));
4573 $filefunction = $component.'_pluginfile';
4574 $filefunctionold = $modname.'_pluginfile';
4575 if (function_exists($filefunction)) {
4576 // if the function exists, it must send the file and terminate. Whatever it returns leads to "not found"
4577 $filefunction($course, $cm, $context, $filearea, $args, $forcedownload, array('preview' => $preview));
4578 } else if (function_exists($filefunctionold)) {
4579 // if the function exists, it must send the file and terminate. Whatever it returns leads to "not found"
4580 $filefunctionold($course, $cm, $context, $filearea, $args, $forcedownload, array('preview' => $preview));
4583 send_file_not_found();
4585 // ========================================================================================================================
4586 } else if (strpos($component, 'block_') === 0) {
4587 $blockname = substr($component, 6);
4588 // note: no more class methods in blocks please, that is ....
4589 if (!file_exists("$CFG->dirroot/blocks/$blockname/lib.php")) {
4590 send_file_not_found();
4592 require_once("$CFG->dirroot/blocks/$blockname/lib.php");
4594 if ($context->contextlevel == CONTEXT_BLOCK) {
4595 $birecord = $DB->get_record('block_instances', array('id'=>$context->instanceid), '*',MUST_EXIST);
4596 if ($birecord->blockname !== $blockname) {
4597 // somebody tries to gain illegal access, cm type must match the component!
4598 send_file_not_found();
4601 $bprecord = $DB->get_record('block_positions', array('contextid' => $context->id, 'blockinstanceid' => $context->instanceid));
4602 // User can't access file, if block is hidden or doesn't have block:view capability
4603 if (($bprecord && !$bprecord->visible) || !has_capability('moodle/block:view', $context)) {
4604 send_file_not_found();
4606 } else {
4607 $birecord = null;
4610 $filefunction = $component.'_pluginfile';
4611 if (function_exists($filefunction)) {
4612 // if the function exists, it must send the file and terminate. Whatever it returns leads to "not found"
4613 $filefunction($course, $birecord, $context, $filearea, $args, $forcedownload, array('preview' => $preview));
4616 send_file_not_found();
4618 // ========================================================================================================================
4619 } else if (strpos($component, '_') === false) {
4620 // all core subsystems have to be specified above, no more guessing here!
4621 send_file_not_found();
4623 } else {
4624 // try to serve general plugin file in arbitrary context
4625 $dir = core_component::get_component_directory($component);
4626 if (!file_exists("$dir/lib.php")) {
4627 send_file_not_found();
4629 include_once("$dir/lib.php");
4631 $filefunction = $component.'_pluginfile';
4632 if (function_exists($filefunction)) {
4633 // if the function exists, it must send the file and terminate. Whatever it returns leads to "not found"
4634 $filefunction($course, $cm, $context, $filearea, $args, $forcedownload, array('preview' => $preview));
4637 send_file_not_found();