+global\learnpath::create_document()

Complexity

Conditions	30
Paths	> 20000

Size

Total Lines	167
Code Lines	114

Duplication

Lines	9
Ratio	5.39 %

Importance

Changes

0

<?php
    public function create_document(
        $courseInfo,
        $content = '',
        $title = '',
        $extension = 'html',
        $parentId = 0,
        $creatorId = 0
    ) {
        if (!empty($courseInfo)) {
            $course_id = $courseInfo['real_id'];
        } else {
            $course_id = api_get_course_int_id();
        }

       $creatorId = empty($creatorId) ? api_get_user_id() : $creatorId;
       $sessionId = api_get_session_id();

        // Generates folder
        $result = $this->generate_lp_folder($courseInfo);
        $dir = $result['dir'];

        if (empty($parentId) || $parentId == '/') {
            $postDir = isset($_POST['dir']) ? $_POST['dir'] : $dir;
            $dir = isset($_GET['dir']) ? $_GET['dir'] : $postDir; // Please, do not modify this dirname formatting.

            if ($parentId === '/') {

The strict comparison === seems to always evaluate to false as the types of $parentId (integer) and '/' (string) can never be identical. Maybe you want to use a loose comparison == instead?

                $dir = '/';
            }

            // Please, do not modify this dirname formatting.
            if (strstr($dir, '..')) {
                $dir = '/';
            }

            if (!empty($dir[0]) && $dir[0] == '.') {
                $dir = substr($dir, 1);
            }
            if (!empty($dir[0]) && $dir[0] != '/') {
                $dir = '/'.$dir;
            }
            if (isset($dir[strlen($dir) - 1]) && $dir[strlen($dir) - 1] != '/') {
                $dir .= '/';
            }
        } else {
            $parentInfo = DocumentManager::get_document_data_by_id($parentId, $courseInfo['code']);
            if (!empty($parentInfo)) {
                $dir = $parentInfo['path'].'/';
            }
        }

        $filepath = api_get_path(SYS_COURSE_PATH).$courseInfo['path'].'/document/'.$dir;
        if (!is_dir($filepath)) {
            $dir = '/';
            $filepath = api_get_path(SYS_COURSE_PATH).$courseInfo['path'].'/document/'.$dir;
        }

        // stripslashes() before calling api_replace_dangerous_char() because $_POST['title']
        // is already escaped twice when it gets here.

        $originalTitle = !empty($title) ? $title : $_POST['title'];
        if (!empty($title)) {
            $title = api_replace_dangerous_char(stripslashes($title));
        } else {
            $title = api_replace_dangerous_char(stripslashes($_POST['title']));
        }

        $title = disable_dangerous_file($title);
        $filename = $title;
        $content = !empty($content) ? $content : $_POST['content_lp'];
        $tmp_filename = $filename;

        $i = 0;
        while (file_exists($filepath.$tmp_filename.'.'.$extension)) {
            $tmp_filename = $filename.'_'.++ $i;
        }

        $filename = $tmp_filename.'.'.$extension;
        if ($extension == 'html') {
            $content = stripslashes($content);
            $content = str_replace(
                api_get_path(WEB_COURSE_PATH),
                api_get_path(REL_PATH).'courses/',
                $content
            );

            // Change the path of mp3 to absolute.

            // The first regexp deals with :// urls.
            $content = preg_replace(
                "|(flashvars=\"file=)([^:/]+)/|",
                "$1".api_get_path(
                    REL_COURSE_PATH
                ).$courseInfo['path'].'/document/',
                $content
            );
            // The second regexp deals with audio/ urls.
            $content = preg_replace(
                "|(flashvars=\"file=)([^/]+)/|",
                "$1".api_get_path(
                    REL_COURSE_PATH
                ).$courseInfo['path'].'/document/$2/',
                $content
            );
            // For flv player: To prevent edition problem with firefox, we have to use a strange tip (don't blame me please).
            $content = str_replace(
                '</body>',
                '<style type="text/css">body{}</style></body>',
                $content
            );
        }

        if (!file_exists($filepath.$filename)) {
            if ($fp = @ fopen($filepath.$filename, 'w')) {
                fputs($fp, $content);
                fclose($fp);

                $file_size = filesize($filepath.$filename);
                $save_file_path = $dir.$filename;

                $document_id = add_document(
                    $courseInfo,
                    $save_file_path,
                    'file',
                    $file_size,
                    $tmp_filename,
                    '',
                    0, //readonly
                    true,
                    null,
                    $sessionId,
                    $creatorId
                );

                if ($document_id) {
                    api_item_property_update(
                        $courseInfo,
                        TOOL_DOCUMENT,
                        $document_id,
                        'DocumentAdded',
                        $creatorId,
                        null,
                        null,
                        null,
                        null,
                        $sessionId
                    );

                    $new_comment = isset($_POST['comment']) ? trim($_POST['comment']) : '';
                    $new_title = $originalTitle;

                    if ($new_comment || $new_title) {
                        $tbl_doc = Database::get_course_table(TABLE_DOCUMENT);
                        $ct = '';
                        if ($new_comment)
                            $ct .= ", comment='".Database::escape_string($new_comment)."'";
                        if ($new_title)
                            $ct .= ", title='".Database::escape_string($new_title)."' ";

                        $sql = "UPDATE ".$tbl_doc." SET ".substr($ct, 1)."
                               WHERE c_id = ".$course_id." AND id = ".$document_id;
                        Database::query($sql);
                    }
                }
                return $document_id;
            }
        }
    }