version 1.186, 2021/01/02 19:31:11
|
version 1.189, 2021/04/18 02:08:46
|
Line 559 sub handler {
|
Line 559 sub handler {
|
my $hostname = $r->hostname(); |
my $hostname = $r->hostname(); |
my $lonhost = &Apache::lonnet::host_from_dns($hostname); |
my $lonhost = &Apache::lonnet::host_from_dns($hostname); |
if ($lonhost) { |
if ($lonhost) { |
my $actual = &Apache::lonnet::absolute_url($hostname); |
my $actual = &Apache::lonnet::absolute_url($hostname,1,1); |
my $exphostname = &Apache::lonnet::hostname($lonhost); |
my $exphostname = &Apache::lonnet::hostname($lonhost); |
my $expected = $Apache::lonnet::protocol{$lonhost}.'://'.$hostname; |
my $expected = $Apache::lonnet::protocol{$lonhost}.'://'.$hostname; |
unless ($actual eq $expected) { |
unless ($actual eq $expected) { |
Line 789 sub handler {
|
Line 789 sub handler {
|
} |
} |
if ($env{'form.symb'}) { |
if ($env{'form.symb'}) { |
$symb=&Apache::lonnet::symbclean($env{'form.symb'}); |
$symb=&Apache::lonnet::symbclean($env{'form.symb'}); |
if ($requrl eq '/adm/navmaps') { |
if (($requrl eq '/adm/navmaps') || |
my ($map,$mid,$murl)=&Apache::lonnet::decode_symb($symb); |
($requrl =~ m{^/adm/wrapper/}) || |
&Apache::lonnet::symblist($map,$murl => [$murl,$mid]); |
($requrl =~ m{^/adm/coursedocs/showdoc/})) { |
} elsif ($requrl =~ m|^/adm/wrapper/| |
unless (&Apache::lonnet::symbverify($symb,$requrl)) { |
|| $requrl =~ m|^/adm/coursedocs/showdoc/|) { |
if (&Apache::lonnet::is_on_map($requrl)) { |
my ($map,$mid,$murl)=&Apache::lonnet::decode_symb($symb); |
$symb = &Apache::lonnet::symbread($requrl); |
if ($map =~ /\.page$/) { |
unless (&Apache::lonnet::symbverify($symb,$requrl)) { |
my $mapsymb = &Apache::lonnet::symbread($map); |
undef($symb); |
($map,$mid,$murl)=&Apache::lonnet::decode_symb($mapsymb); |
} |
|
} |
|
} |
|
if ($symb) { |
|
if ($requrl eq '/adm/navmaps') { |
|
my ($map,$mid,$murl)=&Apache::lonnet::decode_symb($symb); |
|
&Apache::lonnet::symblist($map,$murl => [$murl,$mid]); |
|
} elsif (($requrl =~ m{^/adm/wrapper/}) || |
|
($requrl =~ m{^/adm/coursedocs/showdoc/})) { |
|
my ($map,$mid,$murl)=&Apache::lonnet::decode_symb($symb); |
|
if ($map =~ /\.page$/) { |
|
my $mapsymb = &Apache::lonnet::symbread($map); |
|
($map,$mid,$murl)=&Apache::lonnet::decode_symb($mapsymb); |
|
} |
|
&Apache::lonnet::symblist($map,$murl => [$murl,$mid], |
|
'last_known' =>[$murl,$mid]); |
|
} |
} |
} |
&Apache::lonnet::symblist($map,$murl => [$murl,$mid], |
|
'last_known' =>[$murl,$mid]); |
|
} elsif ((&Apache::lonnet::symbverify($symb,$requrl)) || |
} elsif ((&Apache::lonnet::symbverify($symb,$requrl)) || |
(($requrl=~m|(.*)/smpedit$|) && |
(($requrl=~m|(.*)/smpedit$|) && |
&Apache::lonnet::symbverify($symb,$1)) || |
&Apache::lonnet::symbverify($symb,$1)) || |
Line 860 sub handler {
|
Line 874 sub handler {
|
} |
} |
} |
} |
if ($invalidsymb) { |
if ($invalidsymb) { |
$r->log_reason('Invalid symb for '.$requrl.': '.$symb); |
if ($requrl eq '/adm/navmaps') { |
$env{'user.error.msg'}= |
undef($symb); |
"$requrl:bre:1:1:Invalid Access"; |
} else { |
return HTTP_NOT_ACCEPTABLE; |
$r->log_reason('Invalid symb for '.$requrl.': '.$symb); |
|
$env{'user.error.msg'}= |
|
"$requrl:bre:1:1:Invalid Access"; |
|
return HTTP_NOT_ACCEPTABLE; |
|
} |
} |
} |
} |
} |
} |
} |