296e4909e0
* Added check_cookie_auth to C4::Auth * Added permissions checks to the file upload scripts * Added more error handling Signed-off-by: Joshua Ferraro <jmf@liblime.com>
63 lines
1.9 KiB
Perl
Executable file
63 lines
1.9 KiB
Perl
Executable file
#!/usr/bin/perl
|
|
|
|
# Copyright (C) 2007 LibLime
|
|
#
|
|
# This file is part of Koha.
|
|
#
|
|
# Koha is free software; you can redistribute it and/or modify it under the
|
|
# terms of the GNU General Public License as published by the Free Software
|
|
# Foundation; either version 2 of the License, or (at your option) any later
|
|
# version.
|
|
#
|
|
# Koha is distributed in the hope that it will be useful, but WITHOUT ANY
|
|
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
|
|
# A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License along with
|
|
# Koha; if not, write to the Free Software Foundation, Inc., 59 Temple Place,
|
|
# Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
use strict;
|
|
|
|
# standard or CPAN modules used
|
|
use IO::File;
|
|
use CGI;
|
|
use CGI::Session;
|
|
use C4::Context;
|
|
use C4::Auth qw/get_session check_cookie_auth/;
|
|
use CGI::Cookie; # need to check cookies before
|
|
# having CGI parse the POST request
|
|
use Digest::MD5;
|
|
|
|
my %cookies = fetch CGI::Cookie;
|
|
my %cookies = fetch CGI::Cookie;
|
|
my ($auth_status, $sessionID) = check_cookie_auth($cookies{'CGISESSID'}->value, { tools => 1 });
|
|
if ($auth_status ne "ok") {
|
|
my $reply = CGI->new("");
|
|
print $reply->header(-type => 'text/html');
|
|
print "{ progress: 0 }";
|
|
exit 0;
|
|
}
|
|
|
|
my $session = get_session($sessionID);
|
|
|
|
my $query = CGI->new;
|
|
my $fileid = $session->param('current_upload');
|
|
|
|
my $reported_progress = 0;
|
|
if (defined $fileid and $fileid ne "") {
|
|
my $progress = $session->param("$fileid.uploadprogress");
|
|
if (defined $progress) {
|
|
if ($progress eq "done") {
|
|
$reported_progress = 100;
|
|
} else {
|
|
$reported_progress = $progress;
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
my $reply = CGI->new("");
|
|
print $reply->header(-type => 'text/html');
|
|
# response will be sent back as JSON
|
|
print "{ progress: $reported_progress }";
|