[Summary view]

   1  <?php
   2  // This file is part of Moodle - http://moodle.org/
   3  //
   4  // Moodle is free software: you can redistribute it and/or modify
   5  // it under the terms of the GNU General Public License as published by
   6  // the Free Software Foundation, either version 3 of the License, or
   7  // (at your option) any later version.
   8  //
   9  // Moodle is distributed in the hope that it will be useful,
  10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  // GNU General Public License for more details.
  13  //
  14  // You should have received a copy of the GNU General Public License
  15  // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  16  
  17  /**
  18   * jQuery serving script.
  19   *
  20   * Do not include jQuery scripts or CSS directly, always use
  21   * $PAGE->requires->jquery() or $PAGE->requires->jquery_plugin('xx', 'yy').
  22   *
  23   * @package    core
  24   * @copyright  2013 Petr Skoda  {@link http://skodak.org}
  25   * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  26   */
  27  
  28  // Disable moodle specific debug messages and any errors in output,
  29  // comment out when debugging or better look into error log!
  30  define('NO_DEBUG_DISPLAY', true);
  31  
  32  // We need just the values from config.php and minlib.php.
  33  define('ABORT_AFTER_CONFIG', true);
  34  require('../config.php'); // This stops immediately at the beginning of lib/setup.php.
  35  
  36  if ($slashargument = min_get_slash_argument()) {
  37      $path = ltrim($slashargument, '/');
  38  } else {
  39      $path = min_optional_param('file', '', 'SAFEPATH');
  40      $path = ltrim($path, '/');
  41  }
  42  
  43  if (strpos($path, '/') === false) {
  44      jquery_file_not_found();
  45  }
  46  
  47  list($component, $path) = explode('/', $path, 2);
  48  
  49  if (empty($path) or empty($component)) {
  50      jquery_file_not_found();
  51  }
  52  
  53  // Find the jQuery dir for this component.
  54  if ($component === 'core') {
  55      $componentdir = "$CFG->dirroot/lib";
  56  
  57  } else if (strpos($component, 'theme_')) {
  58      if (!empty($CFG->themedir)) {
  59          $componentdir = "$CFG->themedir/$component";
  60      } else {
  61          $componentdir = "$CFG->dirroot/theme/$component";
  62      }
  63  
  64  } else {
  65      $componentdir = core_component::get_component_directory($component);
  66  }
  67  
  68  if (!file_exists($componentdir) or !file_exists("$componentdir/jquery/plugins.php")) {
  69      jquery_file_not_found();
  70  }
  71  
  72  $file = realpath("$componentdir/jquery/$path");
  73  
  74  if (!$file or is_dir($file)) {
  75      jquery_file_not_found();
  76  }
  77  
  78  $etag = sha1("$component/$path");
  79  // 90 days only - based on Moodle point release cadence being every 3 months.
  80  $lifetime = 60 * 60 * 24 * 90;
  81  $pathinfo = pathinfo($path);
  82  
  83  if (empty($pathinfo['extension'])) {
  84      jquery_file_not_found();
  85  }
  86  
  87  $filename = $pathinfo['filename'].'.'.$pathinfo['extension'];
  88  
  89  switch($pathinfo['extension']) {
  90      case 'gif'  : $mimetype = 'image/gif';
  91          break;
  92      case 'png'  : $mimetype = 'image/png';
  93          break;
  94      case 'jpg'  : $mimetype = 'image/jpeg';
  95          break;
  96      case 'jpeg' : $mimetype = 'image/jpeg';
  97          break;
  98      case 'ico'  : $mimetype = 'image/vnd.microsoft.icon';
  99          break;
 100      case 'svg'  : $mimetype = 'image/svg+xml';
 101          break;
 102      case 'js'   : $mimetype = 'application/javascript';
 103          break;
 104      case 'css'  : $mimetype = 'text/css';
 105          break;
 106      case 'php'  : jquery_file_not_found();
 107          break;
 108      default     : $mimetype = 'document/unknown';
 109  }
 110  
 111  if (!empty($_SERVER['HTTP_IF_NONE_MATCH']) || !empty($_SERVER['HTTP_IF_MODIFIED_SINCE'])) {
 112      // We do not actually need to verify the etag value because these files
 113      // never change, devs need to change file names on update!
 114      header('HTTP/1.1 304 Not Modified');
 115      header('Expires: '. gmdate('D, d M Y H:i:s', time() + $lifetime) .' GMT');
 116      header('Cache-Control: public, max-age='.$lifetime);
 117      header('Content-Type: '.$mimetype);
 118      header('Etag: "'.$etag.'"');
 119      die;
 120  }
 121  
 122  require_once("$CFG->dirroot/lib/xsendfilelib.php");
 123  
 124  header('Etag: "'.$etag.'"');
 125  header('Content-Disposition: inline; filename="'.$filename.'"');
 126  header('Last-Modified: '. gmdate('D, d M Y H:i:s', filemtime($file)) .' GMT');
 127  header('Expires: '. gmdate('D, d M Y H:i:s', time() + $lifetime) .' GMT');
 128  header('Pragma: ');
 129  header('Cache-Control: public, max-age='.$lifetime.', immutable');
 130  header('Accept-Ranges: none');
 131  header('Content-Type: '.$mimetype);
 132  
 133  if (xsendfile($file)) {
 134      die;
 135  }
 136  
 137  if ($mimetype === 'text/css' or $mimetype === 'application/javascript') {
 138      if (!min_enable_zlib_compression()) {
 139          header('Content-Length: '.filesize($file));
 140      }
 141  } else {
 142      // No need to compress images.
 143      header('Content-Length: '.filesize($file));
 144  }
 145  
 146  readfile($file);
 147  die;
 148  
 149  
 150  
 151  function jquery_file_not_found() {
 152      // Note: we can not disclose the exact file path here, sorry.
 153      header('HTTP/1.0 404 not found');
 154      die('File was not found, sorry.');
 155  }