[Summary view]

   1  <?php
   2  // This file is part of Moodle - http://moodle.org/
   3  //
   4  // Moodle is free software: you can redistribute it and/or modify
   5  // it under the terms of the GNU General Public License as published by
   6  // the Free Software Foundation, either version 3 of the License, or
   7  // (at your option) any later version.
   8  //
   9  // Moodle is distributed in the hope that it will be useful,
  10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  // GNU General Public License for more details.
  13  //
  14  // You should have received a copy of the GNU General Public License
  15  // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  16  
  17  /**
  18   * Entry point for token-based access to pluginfile.php.
  19   *
  20   * @package    core
  21   * @copyright  2018 Andrew Nicols <andrew@nicols.co.uk>
  22   * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  23   */
  24  
  25  // Disable the use of sessions/cookies - we recreate $USER for every call.
  26  define('NO_MOODLE_COOKIES', true);
  27  
  28  // Disable debugging for this script.
  29  // It is typically used to display images.
  30  define('NO_DEBUG_DISPLAY', true);
  31  
  32  require_once('config.php');
  33  
  34  $relativepath = get_file_argument();
  35  $token = optional_param('token', '', PARAM_ALPHANUM);
  36  if (0 == strpos($relativepath, '/token/')) {
  37      $relativepath = ltrim($relativepath, '/');
  38      $pathparts = explode('/', $relativepath, 2);
  39      $token = $pathparts[0];
  40      $token = clean_param($token, PARAM_ALPHANUM);
  41      $relativepath = "/{$pathparts[1]}";
  42  }
  43  
  44  require_user_key_login('core_files', null, $token);
  45  require_once ('pluginfile.php');