mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-11-07 16:44:07 +01:00
90 lines
3.0 KiB
PHP
90 lines
3.0 KiB
PHP
<?php
|
|
/**
|
|
* FileManger - WebDAV access
|
|
*
|
|
* For Apache FCGI you need the following rewrite rule:
|
|
*
|
|
* RewriteEngine on
|
|
* RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
|
|
*
|
|
* Otherwise authentication request will be send over and over again, as password is NOT available to PHP!
|
|
*
|
|
* Using the PEAR HTTP/WebDAV/Server class (which need to be installed!)
|
|
*
|
|
* @link http://www.egroupware.org
|
|
* @license http://opensource.org/licenses/gpl-license.php GPL - GNU General Public License
|
|
* @package api
|
|
* @subpackage vfs
|
|
* @author Ralf Becker <RalfBecker-AT-outdoor-training.de>
|
|
* @copyright (c) 2006-16 by Ralf Becker <RalfBecker-AT-outdoor-training.de>
|
|
* @version $Id$
|
|
*/
|
|
|
|
use EGroupware\Api;
|
|
use EGroupware\Api\Vfs;
|
|
|
|
$starttime = microtime(true);
|
|
|
|
/**
|
|
* check if the given user has access
|
|
*
|
|
* Create a session or if the user has no account return authenticate header and 401 Unauthorized
|
|
*
|
|
* @param array &$account
|
|
* @return int session-id
|
|
*/
|
|
function check_access(&$account)
|
|
{
|
|
if (isset($_GET['auth']))
|
|
{
|
|
list($_SERVER['PHP_AUTH_USER'],$_SERVER['PHP_AUTH_PW']) = explode(':',base64_decode($_GET['auth']),2);
|
|
}
|
|
return Api\Header\Authenticate::autocreate_session_callback($account);
|
|
}
|
|
|
|
$GLOBALS['egw_info'] = array(
|
|
'flags' => array(
|
|
'disable_Template_class' => True,
|
|
'noheader' => True,
|
|
'currentapp' => preg_match('|/webdav.php/apps/([A-Za-z0-9_-]+)/|', $_SERVER['REQUEST_URI'], $matches) ? $matches[1] : 'filemanager',
|
|
'autocreate_session_callback' => 'check_access',
|
|
'no_exception_handler' => 'basic_auth', // we use a basic auth exception handler (sends exception message as basic auth realm)
|
|
'auth_realm' => 'EGroupware WebDAV server', // cant use Vfs\WebDAV::REALM as autoloading and include path not yet setup!
|
|
)
|
|
);
|
|
|
|
// if you move this file somewhere else, you need to adapt the path to the header!
|
|
try
|
|
{
|
|
include(dirname(__FILE__).'/header.inc.php');
|
|
}
|
|
catch (Api\Exception\NoPermission\App $e)
|
|
{
|
|
if (isset($GLOBALS['egw_info']['user']['apps']['filemanager']))
|
|
{
|
|
$GLOBALS['egw_info']['currentapp'] = 'filemanager';
|
|
}
|
|
elseif (isset($GLOBALS['egw_info']['user']['apps']['sitemgr-link']))
|
|
{
|
|
$GLOBALS['egw_info']['currentapp'] = 'sitemgr-link';
|
|
}
|
|
// allow access to mounted eTemplates, if there are no filemanager or sitemgr-link app rights
|
|
// and still allow for temp file upload.
|
|
elseif (preg_match("/\/webdav\.php\/etemplates\/|\/webdav.php\/home\/".$GLOBALS['egw_info']['user']['account_lid']."\/.tmp\//", $_SERVER['REQUEST_URI']))
|
|
{
|
|
$GLOBALS['egw_info']['currentapp'] = 'api';
|
|
}
|
|
else
|
|
{
|
|
throw $e;
|
|
}
|
|
}
|
|
//$headertime = microtime(true);
|
|
|
|
// webdav is stateless: we dont need to keep the session open, it only blocks other calls to same basic-auth session
|
|
$GLOBALS['egw']->session->commit_session();
|
|
|
|
$webdav_server = new Vfs\WebDAV();
|
|
$webdav_server->ServeRequest();
|
|
//error_log(sprintf('WebDAV %s request: status "%s", took %5.3f s'.($headertime?' (header include took %5.3f s)':''),$_SERVER['REQUEST_METHOD'].' '.$_SERVER['PATH_INFO'],$webdav_server->_http_status,microtime(true)-$starttime,$headertime-$starttime));
|