version 1.159.2.21.2.2, 2022/07/08 15:36:32
|
version 1.204, 2022/06/20 15:07:21
|
Line 160 sub get_posted_cgi {
|
Line 160 sub get_posted_cgi {
|
if (length($value) == 1) { |
if (length($value) == 1) { |
$value=~s/[\r\n]$//; |
$value=~s/[\r\n]$//; |
} |
} |
} |
} |
if ($fname =~ /\.(xls|doc|ppt)(x|m)$/i) { |
if ($fname =~ /\.(xls|doc|ppt)(x|m)$/i) { |
$value=~s/[\r\n]$//; |
$value=~s/[\r\n]$//; |
} |
} |
Line 204 sub get_posted_cgi {
|
Line 204 sub get_posted_cgi {
|
$fname=''; |
$fname=''; |
$fmime=''; |
$fmime=''; |
} |
} |
|
if ($i<$#lines && $lines[$i+1]=~/^Content\-Type\:\s*([\w\-\/]+)/i) { |
|
# TODO: something with $1 ! |
|
$i++; |
|
} |
|
if ($i<$#lines && $lines[$i+1]=~/^Content\-transfer\-encoding\:\s*([\w\-\/]+)/i) { |
|
# TODO: something with $1 ! |
|
$i++; |
|
} |
$i++; |
$i++; |
} |
} |
} else { |
} else { |
Line 306 sub sso_login {
|
Line 314 sub sso_login {
|
my $query = $r->args; |
my $query = $r->args; |
my %form; |
my %form; |
if ($query) { |
if ($query) { |
|
|
my @items = ('role','symb','iptoken','origurl','ttoken', |
my @items = ('role','symb','iptoken','origurl','ttoken', |
'ltoken','linkkey','logtoken','sso'); |
'ltoken','linkkey','logtoken','sso'); |
&Apache::loncommon::get_unprocessed_cgi($query,\@items); |
&Apache::loncommon::get_unprocessed_cgi($query,\@items); |
Line 326 sub sso_login {
|
Line 333 sub sso_login {
|
} |
} |
} |
} |
|
|
my ($linkprot,$linkprotuser,$linkprotexit,$linkkey,$deeplinkurl); |
my ($linkprot,$linkprotuser,$linkkey,$deeplinkurl); |
|
|
# |
# |
# If Shibboleth auth is in use, and a dual SSO and non-SSO login page |
# If Shibboleth auth is in use, and a dual SSO and non-SSO login page |
Line 365 sub sso_login {
|
Line 372 sub sso_login {
|
if ($info{'linkprot'}) { |
if ($info{'linkprot'}) { |
$linkprot = $info{'linkprot'}; |
$linkprot = $info{'linkprot'}; |
$linkprotuser = $info{'linkprotuser'}; |
$linkprotuser = $info{'linkprotuser'}; |
$linkprotexit = $info{'linkprotexit'}; |
|
} elsif ($info{'linkkey'} ne '') { |
} elsif ($info{'linkkey'} ne '') { |
$linkkey = $info{'linkkey'}; |
$linkkey = $info{'linkkey'}; |
} |
} |
Line 391 sub sso_login {
|
Line 397 sub sso_login {
|
if ($form{'linkprot'}) { |
if ($form{'linkprot'}) { |
$linkprot = $form{'linkprot'}; |
$linkprot = $form{'linkprot'}; |
$linkprotuser = $form{'linkprotuser'}; |
$linkprotuser = $form{'linkprotuser'}; |
$linkprotexit = $form{'linkprotexit'}; |
|
} elsif ($form{'linkkey'} ne '') { |
} elsif ($form{'linkkey'} ne '') { |
$linkkey = $form{'linkkey'}; |
$linkkey = $form{'linkkey'}; |
} |
} |
Line 420 sub sso_login {
|
Line 425 sub sso_login {
|
if ($form{'linkprot'}) { |
if ($form{'linkprot'}) { |
$linkprot = $form{'linkprot'}; |
$linkprot = $form{'linkprot'}; |
$linkprotuser = $form{'linkprotuser'}; |
$linkprotuser = $form{'linkprotuser'}; |
$linkprotexit = $form{'linkprotexit'}; |
|
} elsif ($form{'linkkey'} ne '') { |
} elsif ($form{'linkkey'} ne '') { |
$linkkey = $form{'linkkey'}; |
$linkkey = $form{'linkkey'}; |
} |
} |
Line 428 sub sso_login {
|
Line 432 sub sso_login {
|
} elsif ($form{'ltoken'}) { |
} elsif ($form{'ltoken'}) { |
my %link_info = &Apache::lonnet::tmpget($form{'ltoken'}); |
my %link_info = &Apache::lonnet::tmpget($form{'ltoken'}); |
$linkprot = $link_info{'linkprot'}; |
$linkprot = $link_info{'linkprot'}; |
if ($linkprot) { |
if (($linkprot) && ($link_info{'linkprotuser'} ne '')) { |
if ($link_info{'linkprotuser'} ne '') { |
$linkprotuser = $link_info{'linkprotuser'}; |
$linkprotuser = $link_info{'linkprotuser'}; |
|
} |
|
if ($link_info{'linkprotexit'} ne '') { |
|
$linkprotexit = $link_info{'linkprotexit'}; |
|
} |
|
} |
} |
my $delete = &Apache::lonnet::tmpdel($form{'ltoken'}); |
my $delete = &Apache::lonnet::tmpdel($form{'ltoken'}); |
delete($form{'ltoken'}); |
delete($form{'ltoken'}); |
Line 456 sub sso_login {
|
Line 455 sub sso_login {
|
origurl => $deeplinkurl, |
origurl => $deeplinkurl, |
linkprot => $linkprot, |
linkprot => $linkprot, |
linkprotuser => $linkprotuser, |
linkprotuser => $linkprotuser, |
linkprotexit => $linkprotexit, |
|
); |
); |
my $token = &Apache::lonnet::tmpput(\%data,$r->dir_config('lonHostID'),'link'); |
my $token = &Apache::lonnet::tmpput(\%data,$r->dir_config('lonHostID'),'link'); |
unless (($token eq 'con_lost') || ($token eq 'refused') || ($token =~ /^error:/) || |
unless (($token eq 'con_lost') || ($token eq 'refused') || ($token =~ /^error:/) || |
Line 523 sub sso_login {
|
Line 521 sub sso_login {
|
if ($linkprotuser ne '') { |
if ($linkprotuser ne '') { |
$env{'request.linkprotuser'} = $linkprotuser; |
$env{'request.linkprotuser'} = $linkprotuser; |
} |
} |
if ($linkprotexit ne '') { |
|
$env{'request.linkprotexit'} = $linkprotexit; |
|
} |
|
} elsif ($linkkey ne '') { |
} elsif ($linkkey ne '') { |
$env{'request.linkkey'} = $linkkey; |
$env{'request.linkkey'} = $linkkey; |
} |
} |
Line 544 sub sso_login {
|
Line 539 sub sso_login {
|
} else { |
} else { |
# need to login them in, so generate the need data that |
# need to login them in, so generate the need data that |
# migrate expects to do login |
# migrate expects to do login |
my $ip = &Apache::lonnet::get_requestor_ip($r); |
my $ip = &Apache::lonnet::get_requestor_ip($r); |
my %info=('ip' => $ip, |
my %info=('ip' => $ip, |
'domain' => $domain, |
'domain' => $domain, |
'username' => $user, |
'username' => $user, |
Line 571 sub sso_login {
|
Line 566 sub sso_login {
|
if ($info{'deeplink.login'}) { |
if ($info{'deeplink.login'}) { |
if ($linkprot) { |
if ($linkprot) { |
$info{'linkprot'} = $linkprot; |
$info{'linkprot'} = $linkprot; |
if ($linkprotuser ne '') { |
|
$info{'linkprotuser'} = $linkprotuser; |
|
} |
|
if ($linkprotexit ne '') { |
|
$info{'linkprotexit'} = $linkprotexit; |
|
} |
|
} elsif ($linkkey ne '') { |
} elsif ($linkkey ne '') { |
$info{'linkkey'} = $linkkey; |
$info{'linkkey'} = $linkkey; |
} |
} |
Line 715 sub handler {
|
Line 704 sub handler {
|
} |
} |
} elsif ($env{'request.course.id'} && |
} elsif ($env{'request.course.id'} && |
(($requrl =~ m{^/adm/$match_domain/$match_username/aboutme$}) || |
(($requrl =~ m{^/adm/$match_domain/$match_username/aboutme$}) || |
($requrl =~ m{^/public/$cdom/$cnum/syllabus$}))) { |
($requrl eq "/public/$cdom/$cnum/syllabus") || |
|
($requrl =~ m{^/adm/$cdom/$cnum/\d+/ext\.tool$}))) { |
my $query = $r->args; |
my $query = $r->args; |
if ($query) { |
if ($query) { |
foreach my $pair (split(/&/,$query)) { |
foreach my $pair (split(/&/,$query)) { |
Line 737 sub handler {
|
Line 727 sub handler {
|
my $lonhost = &Apache::lonnet::host_from_dns($hostname); |
my $lonhost = &Apache::lonnet::host_from_dns($hostname); |
if ($lonhost) { |
if ($lonhost) { |
my $actual = &Apache::lonnet::absolute_url($hostname,1,1); |
my $actual = &Apache::lonnet::absolute_url($hostname,1,1); |
|
my $exphostname = &Apache::lonnet::hostname($lonhost); |
my $expected = $Apache::lonnet::protocol{$lonhost}.'://'.$hostname; |
my $expected = $Apache::lonnet::protocol{$lonhost}.'://'.$hostname; |
unless ($actual eq $expected) { |
unless ($actual eq $expected) { |
$env{'request.use_absolute'} = $expected; |
$env{'request.use_absolute'} = $expected; |
Line 794 sub handler {
|
Line 785 sub handler {
|
origurl => $requrl, |
origurl => $requrl, |
linkprot => $info{'linkprot'}, |
linkprot => $info{'linkprot'}, |
linkprotuser => $info{'linkprotuser'}, |
linkprotuser => $info{'linkprotuser'}, |
linkprotexit => $info{'linkprotexit'}, |
|
); |
); |
} elsif ($info{'ltoken'} ne '') { |
} elsif ($info{'ltoken'} ne '') { |
my %ltoken_info = &Apache::lonnet::tmpget($info{'ltoken'}); |
my %ltoken_info = &Apache::lonnet::tmpget($info{'ltoken'}); |
Line 804 sub handler {
|
Line 794 sub handler {
|
origurl => $requrl, |
origurl => $requrl, |
linkprot => $ltoken_info{'linkprot'}, |
linkprot => $ltoken_info{'linkprot'}, |
linkprotuser => $ltoken_info{'linkprotuser'}, |
linkprotuser => $ltoken_info{'linkprotuser'}, |
linkprotexit => $ltoken_info{'linkprotexit'}, |
|
); |
); |
} |
} |
} |
} |
Line 928 sub handler {
|
Line 917 sub handler {
|
&Apache::blockedaccess::setup_handler($r); |
&Apache::blockedaccess::setup_handler($r); |
return OK; |
return OK; |
} |
} |
} elsif ($check_access) { |
} elsif ($check_access) { |
if ($handle eq '') { |
if ($handle eq '') { |
unless ($access eq 'F') { |
unless ($access eq 'F') { |
if ($requrl =~ m{^/res/$match_domain/$match_username/}) { |
if ($requrl =~ m{^/res/$match_domain/$match_username/}) { |
Line 1128 sub handler {
|
Line 1117 sub handler {
|
my $mapsymb = &Apache::lonnet::symbread($map); |
my $mapsymb = &Apache::lonnet::symbread($map); |
($map,$mid,$murl)=&Apache::lonnet::decode_symb($mapsymb); |
($map,$mid,$murl)=&Apache::lonnet::decode_symb($mapsymb); |
} |
} |
&Apache::lonnet::symblist($map,$murl =>[$murl,$mid], |
&Apache::lonnet::symblist($map,$murl =>[$murl,$mid], |
'last_known' =>[$murl,$mid]); |
'last_known' =>[$murl,$mid]); |
} |
} |
} |
} |
} |
} |
Line 1182 sub handler {
|
Line 1171 sub handler {
|
# ------------------------------------ See if this is a viewable portfolio file |
# ------------------------------------ See if this is a viewable portfolio file |
if (&Apache::lonnet::is_portfolio_url($requrl)) { |
if (&Apache::lonnet::is_portfolio_url($requrl)) { |
my $clientip = &Apache::lonnet::get_requestor_ip($r); |
my $clientip = &Apache::lonnet::get_requestor_ip($r); |
my $access=&Apache::lonnet::allowed('bre',$requrl,undef,undef,$clientip); |
my $access=&Apache::lonnet::allowed('bre',$requrl,undef,undef,$clientip); |
if ($access eq 'A') { |
if ($access eq 'A') { |
&Apache::restrictedaccess::setup_handler($r); |
&Apache::restrictedaccess::setup_handler($r); |
return OK; |
return OK; |