lib.php

<?php
// This file is part of Moodle - http://moodle.org/
//
// Moodle is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// Moodle is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.

defined('MOODLE_INTERNAL') || die();

/**
 * Form for editing HTML block instances.
 *
 * @package   block_rolespecifichtml
 * @category  blocks
 * @copyright 2012 Valery Fremaux (valery.fremaux@gmail.com)
 * @license   http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
 */

function block_rolespecifichtml_pluginfile($course, $birecord_or_cm, $context, $filearea, $args, $forcedownload) {
    global $SCRIPT, $USER;

    if ($context->contextlevel != CONTEXT_BLOCK) {
        send_file_not_found();
    }

    require_course_login($course);

    if (substr($filearea,0,8) !== 'content_') {
        send_file_not_found();
    }
    $role = substr($filearea,8);
    if (!$role){
        send_file_not_found();
    }
    //TODO check if user should have access
    $contextcheckid = array_shift($args);
    $rolecheck = array_shift($args);
    
    if($role !== 'all'){
        $block = block_instance_by_id($context->instanceid);
        if (empty($block->config)) {
            send_file_not_found();
        }
        if($role !== $rolecheck){
            $lookupvar = 'lookup_'.$rolecheck;
            if(!(isset($block->config->{$lookupvar}) && $role == $block->config->{$lookupvar})){
                send_file_not_found();
            }
        }
        if (isset($block->config->inherit)) {
            $inherit=$block->config->inherit;
        } else {
            $inherit=true;
        }
        if (isset($block->config->context)) {
            $cl = $block->config->context;
        } else {
            $cl = 'page';
        }
        if ($cl == 'system'){
            $contextcheck = context_system::instance();
        } else if ($cl == 'parent'){
            $contextcheck = $context->get_parent_context();
        } else {
            $contextcheck = context::instance_by_id($contextcheckid);
            if(!in_array($block->instance->parentcontextid, explode('/', $contextcheck->path))){
                send_file_not_found();
            }
        }
        $roles = get_user_roles($contextcheck, $USER->id, $inherit);
        $hasaccess = false;
        foreach($roles as $r){
            if($r->roleid == $rolecheck){
                $hasaccess = true;
                break;
            }
        }
        if(!$hasaccess){
            send_file_not_found();
        }
    }

    $fs = get_file_storage();

    $filename = array_pop($args);
    $filepath = $args ? '/'.implode('/', $args).'/' : '/';

    if (!$file = $fs->get_file($context->id, 'block_rolespecifichtml', $filearea, 0, $filepath, $filename) or $file->is_directory()) {
        send_file_not_found();
    }

    if ($parentcontext = context::instance_by_id($birecord_or_cm->parentcontextid)) {
        if ($parentcontext->contextlevel == CONTEXT_USER) {
            /*
             * force download on all personal pages including /my/
             * because we do not have reliable way to find out from where this is used
             */
            $forcedownload = true;
        }
    } else {
        // Weird, there should be parent context, better force dowload then.
        $forcedownload = true;
    }

    \core\session\manager::write_close();
    send_stored_file($file, 60*60, 0, $forcedownload);
}

/**
 * Perform global search replace such as when migrating site to new URL.
 * @param  $search
 * @param  $replace
 * @return void
 */
function block_rolespecifichtml_global_db_replace($search, $replace) {
    global $DB;

    $instances = $DB->get_recordset('block_instances', array('blockname' => 'rolespecifichtml'));
    foreach ($instances as $instance) {
        // TODO: intentionally hardcoded until MDL-26800 is fixed
        $config = unserialize(base64_decode($instance->configdata));
        $commit = false;
        if (isset($config->text_all) and is_string($config->text_all)) {
            $commit = true;
            $config->text_all = str_replace($search, $replace, $config->text_all);
        }

        if (isset($config->text_0) and is_string($config->text_0)) {
            $commit = true;
            $config->text_0 = str_replace($search, $replace, $config->text_0);
        }

        $groups = groups_get_all_groups($instance->courseid);
        if (!empty($groups)) {
            foreach ($groups as $g) {
                $textvar = 'text_'.$g->id;
                if (isset($config->{$textvar}) and is_string($config->{$textvar})) {
                    $commit = true;
                    $config->{$textvar} = str_replace($search, $replace, $config->{$textvar});
                }
            }
        }

        if ($commit) {
            $DB->set_field('block_instances', 'configdata', base64_encode(serialize($config)), array('id' => $instance->id));
        }
    }
    $instances->close();
}