[Summary view]

   1  <?php
   2  // This file is part of Moodle - http://moodle.org/
   3  //
   4  // Moodle is free software: you can redistribute it and/or modify
   5  // it under the terms of the GNU General Public License as published by
   6  // the Free Software Foundation, either version 3 of the License, or
   7  // (at your option) any later version.
   8  //
   9  // Moodle is distributed in the hope that it will be useful,
  10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  // GNU General Public License for more details.
  13  //
  14  // You should have received a copy of the GNU General Public License
  15  // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  16  
  17  /**
  18   * This file contains the moodle hooks for the feedback file plugin
  19   *
  20   * @package   assignfeedback_file
  21   * @copyright 2012 NetSpot {@link http://www.netspot.com.au}
  22   * @license   http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  23   */
  24  defined('MOODLE_INTERNAL') || die();
  25  
  26  /**
  27   * Serves assignment feedback and other files.
  28   *
  29   * @param mixed $course course or id of the course
  30   * @param mixed $cm course module or id of the course module
  31   * @param context $context
  32   * @param string $filearea
  33   * @param array $args
  34   * @param bool $forcedownload
  35   * @param array $options - List of options affecting file serving.
  36   * @return bool false if file not found, does not return if found - just send the file
  37   */
  38  function assignfeedback_file_pluginfile($course,
  39                                          $cm,
  40                                          context $context,
  41                                          $filearea,
  42                                          $args,
  43                                          $forcedownload,
  44                                          array $options=array()) {
  45      global $USER, $DB, $CFG, $PAGE;
  46  
  47      if ($context->contextlevel != CONTEXT_MODULE) {
  48          return false;
  49      }
  50  
  51      require_once($CFG->dirroot . '/mod/assign/locallib.php');
  52  
  53      require_login($course, false, $cm);
  54      $itemid = (int)array_shift($args);
  55      $record = $DB->get_record('assign_grades', array('id' => $itemid), 'userid,assignment', MUST_EXIST);
  56      $userid = $record->userid;
  57  
  58      $assign = new assign($context, $cm, $course);
  59  
  60      if ($assign->get_instance()->id != $record->assignment) {
  61          return false;
  62      }
  63  
  64      // Rely on mod_assign checking permissions.
  65      if (!$assign->can_view_submission($userid)) {
  66          return false;
  67      }
  68  
  69      $relativepath = implode('/', $args);
  70  
  71      $fullpath = "/{$context->id}/assignfeedback_file/$filearea/$itemid/$relativepath";
  72  
  73      $fs = get_file_storage();
  74      if (!$file = $fs->get_file_by_hash(sha1($fullpath)) or $file->is_directory()) {
  75          return false;
  76      }
  77      // Download MUST be forced - security!
  78      send_stored_file($file, 0, 0, true, $options);
  79  }