[Summary view]

   1  <?php
   2  // This file is part of Moodle - http://moodle.org/
   3  //
   4  // Moodle is free software: you can redistribute it and/or modify
   5  // it under the terms of the GNU General Public License as published by
   6  // the Free Software Foundation, either version 3 of the License, or
   7  // (at your option) any later version.
   8  //
   9  // Moodle is distributed in the hope that it will be useful,
  10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  // GNU General Public License for more details.
  13  //
  14  // You should have received a copy of the GNU General Public License
  15  // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  16  
  17  /**
  18   * This file contains the moodle hooks for the comments feedback plugin
  19   *
  20   * @package   assignfeedback_comments
  21   * @copyright 2018 Mark Nelson <markn@moodle.com>
  22   * @license   http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  23   */
  24  defined('MOODLE_INTERNAL') || die();
  25  
  26  /**
  27   * Serves assignment comment feedback files.
  28   *
  29   * @param mixed $course course or id of the course
  30   * @param mixed $cm course module or id of the course module
  31   * @param context $context
  32   * @param string $filearea
  33   * @param array $args
  34   * @param bool $forcedownload
  35   * @param array $options - List of options affecting file serving.
  36   * @return bool false if file not found, does not return if found - just send the file
  37   */
  38  function assignfeedback_comments_pluginfile(
  39          $course,
  40          $cm,
  41          context $context,
  42          $filearea,
  43          $args,
  44          $forcedownload,
  45          array $options = []) {
  46      global $CFG, $DB;
  47  
  48      require_once($CFG->dirroot . '/mod/assign/locallib.php');
  49  
  50      if ($context->contextlevel != CONTEXT_MODULE) {
  51          return false;
  52      }
  53  
  54      require_login($course, false, $cm);
  55      $itemid = (int)array_shift($args);
  56      $record = $DB->get_record('assign_grades', array('id' => $itemid), 'userid,assignment', MUST_EXIST);
  57      $userid = $record->userid;
  58  
  59      $assign = new assign($context, $cm, $course);
  60      $instance = $assign->get_instance();
  61  
  62      if ($instance->id != $record->assignment) {
  63          return false;
  64      }
  65  
  66      if (!$assign->can_view_submission($userid)) {
  67          return false;
  68      }
  69  
  70      $relativepath = implode('/', $args);
  71  
  72      $fullpath = "/{$context->id}/assignfeedback_comments/$filearea/$itemid/$relativepath";
  73  
  74      $fs = get_file_storage();
  75  
  76      if (!$file = $fs->get_file_by_hash(sha1($fullpath)) or $file->is_directory()) {
  77          return false;
  78      }
  79  
  80      // Download MUST be forced - security!
  81      send_stored_file($file, 0, 0, true, $options);
  82  }