Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
amd	[ DIR ]	drwxr-sr-x	2017-06-22 15:13
backup	[ DIR ]	drwxr-sr-x	2017-06-22 15:13
classes	[ DIR ]	drwxr-sr-x	2017-06-22 15:23
db	[ DIR ]	drwxr-sr-x	2017-06-22 15:23
lang	[ DIR ]	drwxr-sr-x	2017-06-22 15:13
pix	[ DIR ]	drwxr-sr-x	2017-06-22 15:23
service	[ DIR ]	drwxr-sr-x	2017-06-22 15:23
source	[ DIR ]	drwxr-sr-x	2017-06-22 15:24
templates	[ DIR ]	drwxr-sr-x	2017-06-22 15:24
tests	[ DIR ]	drwxr-sr-x	2017-06-22 15:24
OAuth.php	27.91 KB	-rw-r--r--	2017-06-22 15:23
OAuthBody.php	4.05 KB	-rw-r--r--	2017-06-22 15:23
TrivialStore.php	4.87 KB	-rw-r--r--	2017-06-22 15:24
ajax.php	3.18 KB	-rw-r--r--	2017-06-22 15:23
contentitem.php	2.1 KB	-rw-r--r--	2017-06-22 15:23
contentitem_return.php	2.74 KB	-rw-r--r--	2017-06-22 15:23
edit_form.php	12.02 KB	-rw-r--r--	2017-06-22 15:23
externalregistrationreturn.php	2.31 KB	-rw-r--r--	2017-06-22 15:23
index.php	4.46 KB	-rw-r--r--	2017-06-22 15:23
instructor_edit_tool_type.php	3.54 KB	-rw-r--r--	2017-06-22 15:23
launch.php	2.97 KB	-rw-r--r--	2017-06-22 15:23
lib.php	19.25 KB	-rw-r--r--	2017-06-22 15:23
locallib.php	104.59 KB	-rw-r--r--	2017-06-22 15:23
mod_form.js	22.45 KB	-rw-r--r--	2017-06-22 15:23
mod_form.php	14.56 KB	-rw-r--r--	2017-06-22 15:23
register.php	4.39 KB	-rw-r--r--	2017-06-22 15:23
register_form.php	4.33 KB	-rw-r--r--	2017-06-22 15:23
registersettings.php	3.09 KB	-rw-r--r--	2017-06-22 15:23
registration.php	1.4 KB	-rw-r--r--	2017-06-22 15:23
registrationreturn.php	3.47 KB	-rw-r--r--	2017-06-22 15:23
request_tool.php	2.57 KB	-rw-r--r--	2017-06-22 15:23
return.php	4.64 KB	-rw-r--r--	2017-06-22 15:23
service.php	7.21 KB	-rw-r--r--	2017-06-22 15:24
servicelib.php	9.39 KB	-rw-r--r--	2017-06-22 15:24
services.php	2.63 KB	-rw-r--r--	2017-06-22 15:24
settings.php	8.03 KB	-rw-r--r--	2017-06-22 15:24
styles.css	7.95 KB	-rw-r--r--	2017-06-22 15:24
toolconfigure.php	2.09 KB	-rw-r--r--	2017-06-22 15:24
toolproxies.php	6.4 KB	-rw-r--r--	2017-06-22 15:24
toolssettings.php	3.83 KB	-rw-r--r--	2017-06-22 15:24
typessettings.php	5.53 KB	-rw-r--r--	2017-06-22 15:24
upgrade.txt	1.35 KB	-rw-r--r--	2017-06-22 15:24
version.php	2.58 KB	-rw-r--r--	2017-06-22 15:24
view.php	6.34 KB	-rw-r--r--	2017-06-22 15:24

Rename

<?php
// This file is part of Moodle - http://moodle.org/
//
// Moodle is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// Moodle is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.

/**
 * LTI web service endpoints
 *
 * @package mod_lti
 * @copyright  Copyright (c) 2011 Moodlerooms Inc. (http://www.moodlerooms.com)
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
 * @author     Chris Scribner
 */

define('NO_DEBUG_DISPLAY', true);
define('NO_MOODLE_COOKIES', true);

require_once(__DIR__ . "/../../config.php");
require_once($CFG->dirroot.'/mod/lti/locallib.php');
require_once($CFG->dirroot.'/mod/lti/servicelib.php');

// TODO: Switch to core oauthlib once implemented - MDL-30149.
use mod_lti\service_exception_handler;
use moodle\mod\lti as lti;

$rawbody = file_get_contents("php://input");

$logrequests  = lti_should_log_request($rawbody);
$errorhandler = new service_exception_handler($logrequests);

// Register our own error handler so we can always send valid XML response.
set_exception_handler(array($errorhandler, 'handle'));

if ($logrequests) {
    lti_log_request($rawbody);
}

foreach (lti\OAuthUtil::get_headers() as $name => $value) {
    if ($name === 'Authorization') {
        // TODO: Switch to core oauthlib once implemented - MDL-30149.
        $oauthparams = lti\OAuthUtil::split_header($value);

$consumerkey = $oauthparams['oauth_consumer_key'];
        break;
    }
}

if (empty($consumerkey)) {
    throw new Exception('Consumer key is missing.');
}

$sharedsecret = lti_verify_message($consumerkey, lti_get_shared_secrets_by_key($consumerkey), $rawbody);

if ($sharedsecret === false) {
    throw new Exception('Message signature not valid');
}

// TODO MDL-46023 Replace this code with a call to the new library.
$origentity = libxml_disable_entity_loader(true);
$xml = simplexml_load_string($rawbody);
if (!$xml) {
    libxml_disable_entity_loader($origentity);
    throw new Exception('Invalid XML content');
}
libxml_disable_entity_loader($origentity);

$body = $xml->imsx_POXBody;
foreach ($body->children() as $child) {
    $messagetype = $child->getName();
}

// We know more about the message, update error handler to send better errors.
$errorhandler->set_message_id(lti_parse_message_id($xml));
$errorhandler->set_message_type($messagetype);

switch ($messagetype) {
    case 'replaceResultRequest':
        $parsed = lti_parse_grade_replace_message($xml);

$ltiinstance = $DB->get_record('lti', array('id' => $parsed->instanceid));

if (!lti_accepts_grades($ltiinstance)) {
            throw new Exception('Tool does not accept grades');
        }

lti_verify_sourcedid($ltiinstance, $parsed);
        lti_set_session_user($parsed->userid);

$gradestatus = lti_update_grade($ltiinstance, $parsed->userid, $parsed->launchid, $parsed->gradeval);

if (!$gradestatus) {
            throw new Exception('Grade replace response');
        }

$responsexml = lti_get_response_xml(
                'success',
                'Grade replace response',
                $parsed->messageid,
                'replaceResultResponse'
        );

echo $responsexml->asXML();

break;

case 'readResultRequest':
        $parsed = lti_parse_grade_read_message($xml);

$ltiinstance = $DB->get_record('lti', array('id' => $parsed->instanceid));

if (!lti_accepts_grades($ltiinstance)) {
            throw new Exception('Tool does not accept grades');
        }

// Getting the grade requires the context is set.
        $context = context_course::instance($ltiinstance->course);
        $PAGE->set_context($context);

lti_verify_sourcedid($ltiinstance, $parsed);

$grade = lti_read_grade($ltiinstance, $parsed->userid);

$responsexml = lti_get_response_xml(
                'success',  // Empty grade is also 'success'.
                'Result read',
                $parsed->messageid,
                'readResultResponse'
        );

$node = $responsexml->imsx_POXBody->readResultResponse;
        $node = $node->addChild('result')->addChild('resultScore');
        $node->addChild('language', 'en');
        $node->addChild('textString', isset($grade) ? $grade : '');

echo $responsexml->asXML();

break;

case 'deleteResultRequest':
        $parsed = lti_parse_grade_delete_message($xml);

$ltiinstance = $DB->get_record('lti', array('id' => $parsed->instanceid));

if (!lti_accepts_grades($ltiinstance)) {
            throw new Exception('Tool does not accept grades');
        }

lti_verify_sourcedid($ltiinstance, $parsed);
        lti_set_session_user($parsed->userid);

$gradestatus = lti_delete_grade($ltiinstance, $parsed->userid);

if (!$gradestatus) {
            throw new Exception('Grade delete request');
        }

$responsexml = lti_get_response_xml(
                'success',
                'Grade delete request',
                $parsed->messageid,
                'deleteResultResponse'
        );

echo $responsexml->asXML();

break;

default:
        // Fire an event if we get a web service request which we don't support directly.
        // This will allow others to extend the LTI services, which I expect to be a common
        // use case, at least until the spec matures.
        $data = new stdClass();
        $data->body = $rawbody;
        $data->xml = $xml;
        $data->messageid = lti_parse_message_id($xml);
        $data->messagetype = $messagetype;
        $data->consumerkey = $consumerkey;
        $data->sharedsecret = $sharedsecret;
        $eventdata = array();
        $eventdata['other'] = array();
        $eventdata['other']['messageid'] = $data->messageid;
        $eventdata['other']['messagetype'] = $messagetype;
        $eventdata['other']['consumerkey'] = $consumerkey;

// Before firing the event, allow subplugins a chance to handle.
        if (lti_extend_lti_services($data)) {
            break;
        }

// If an event handler handles the web service, it should set this global to true
        // So this code knows whether to send an "operation not supported" or not.
        global $ltiwebservicehandled;
        $ltiwebservicehandled = false;

try {
            $event = \mod_lti\event\unknown_service_api_called::create($eventdata);
            $event->set_message_data($data);
            $event->trigger();
        } catch (Exception $e) {
            $ltiwebservicehandled = false;
        }

if (!$ltiwebservicehandled) {
            $responsexml = lti_get_response_xml(
                'unsupported',
                'unsupported',
                 lti_parse_message_id($xml),
                 $messagetype
            );

echo $responsexml->asXML();
        }

break;
}