[Summary view] [Print] [Text view]

   1  <?php
   2  // This file is part of Moodle - http://moodle.org/
   3  //
   4  // Moodle is free software: you can redistribute it and/or modify
   5  // it under the terms of the GNU General Public License as published by
   6  // the Free Software Foundation, either version 3 of the License, or
   7  // (at your option) any later version.
   8  //
   9  // Moodle is distributed in the hope that it will be useful,
  10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  // GNU General Public License for more details.
  13  //
  14  // You should have received a copy of the GNU General Public License
  15  // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  16  
  17  /**
  18   * This file contains the moodle hooks for the feedback file plugin
  19   *
  20   * @package   assignfeedback_file
  21   * @copyright 2012 NetSpot {@link http://www.netspot.com.au}
  22   * @license   http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  23   */
  24  defined('MOODLE_INTERNAL') || die();
  25  
  26  /**
  27   * Serves assignment feedback and other files.
  28   *
  29   * @param mixed $course course or id of the course
  30   * @param mixed $cm course module or id of the course module
  31   * @param context $context
  32   * @param string $filearea
  33   * @param array $args
  34   * @param bool $forcedownload
  35   * @return bool false if file not found, does not return if found - just send the file
  36   */
  37  function assignfeedback_file_pluginfile($course,
  38                                          $cm,
  39                                          context $context,
  40                                          $filearea,
  41                                          $args,
  42                                          $forcedownload) {
  43      global $USER, $DB;
  44  
  45      if ($context->contextlevel != CONTEXT_MODULE) {
  46          return false;
  47      }
  48  
  49      require_login($course, false, $cm);
  50      $itemid = (int)array_shift($args);
  51      $record = $DB->get_record('assign_grades', array('id'=>$itemid), 'userid,assignment', MUST_EXIST);
  52      $userid = $record->userid;
  53  
  54      if (!$assign = $DB->get_record('assign', array('id'=>$cm->instance))) {
  55          return false;
  56      }
  57  
  58      if ($assign->id != $record->assignment) {
  59          return false;
  60      }
  61  
  62      // Check is users feedback or has grading permission.
  63      if ($USER->id != $userid and !has_capability('mod/assign:grade', $context)) {
  64          return false;
  65      }
  66  
  67      $relativepath = implode('/', $args);
  68  
  69      $fullpath = "/{$context->id}/assignfeedback_file/$filearea/$itemid/$relativepath";
  70  
  71      $fs = get_file_storage();
  72      if (!$file = $fs->get_file_by_hash(sha1($fullpath)) or $file->is_directory()) {
  73          return false;
  74      }
  75      // Download MUST be forced - security!
  76      send_stored_file($file, 0, 0, true);
  77  }