aboutsummaryrefslogtreecommitdiff
path: root/app/controllers/ical.php
diff options
context:
space:
mode:
authorJan-Hendrik Willms <tleilax+github@gmail.com>2021-07-22 16:07:19 +0200
committerJan-Hendrik Willms <tleilax+github@gmail.com>2021-07-22 16:19:12 +0200
commita3da1483a9e689846179159355badfec8073dbec (patch)
tree770dcca6bdf5f6f2a11b0e7fcbbeda6919a3fc52 /app/controllers/ical.php
current code from svn, revision 62608
Diffstat (limited to 'app/controllers/ical.php')
-rw-r--r--app/controllers/ical.php82
1 files changed, 82 insertions, 0 deletions
diff --git a/app/controllers/ical.php b/app/controllers/ical.php
new file mode 100644
index 0000000..06afc4d
--- /dev/null
+++ b/app/controllers/ical.php
@@ -0,0 +1,82 @@
+<?php
+/*
+ * ical.php - iCalendar export controller
+ *
+ * Copyright (C) 2011 - Peter Thienel <thienel@data-quest.de>, Elmar Ludwig
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License as
+ * published by the Free Software Foundation; either version 2 of
+ * the License, or (at your option) any later version.
+ */
+class iCalController extends StudipController
+{
+
+ function before_filter(&$action, &$args) {
+ // allow only "word" characters in arguments
+ $this->validate_args($args);
+ }
+
+ /**
+ * Handles the download the calendar data as iCalendar for the
+ * user identified by $key.
+ *
+ *
+ * @global Seminar_User $user
+ * @global Seminar_Perm $perm
+ * @param string $key
+ * @param string $type type of export
+ */
+ function index_action($key = '')
+ {
+ if (mb_strlen($key)) {
+ $user_id = IcalExport::getUserIdByKey($key);
+ } else {
+ $username = $_SERVER['PHP_AUTH_USER'];
+ $password = $_SERVER['PHP_AUTH_PW'];
+ if (isset($username) && isset($password)) {
+ $result = StudipAuthAbstract::CheckAuthentication($username, $password);
+ }
+ if (isset($result) && $result['uid'] !== false) {
+ $user_id = $result['uid'];
+ } else {
+ $this->response->add_header('WWW-Authenticate', 'Basic realm="Stud.IP Login"');
+ $this->set_status(401);
+ $this->render_text('authentication failed');
+ return;
+ }
+ }
+
+ if ($user_id) {
+ $GLOBALS['user'] = new Seminar_User($user_id);
+ $GLOBALS['perm'] = new Seminar_Perm();
+
+ $extype = 'ALL_EVENTS';
+ $export = new CalendarExport(new CalendarWriterICalendar());
+ $export->exportFromDatabase($user_id, strtotime('-4 week'), 2114377200, 'ALL_EVENTS');
+
+ if ($GLOBALS['_calendar_error']->getMaxStatus(ErrorHandler::ERROR_CRITICAL)) {
+ $this->set_status(500);
+ $this->render_nothing();
+ return;
+ }
+ $content = join($export->getExport());
+ if (mb_stripos($_SERVER['HTTP_USER_AGENT'], 'google-calendar') !== false) {
+ $content = str_replace(['CLASS:PRIVATE','CLASS:CONFIDENTIAL'], 'CLASS:PUBLIC', $content);
+ }
+ $this->response->add_header('Content-Type', 'text/calendar;charset=utf-8');
+ $this->response->add_header('Content-Disposition', 'attachment; filename="studip.ics"');
+ $this->response->add_header('Content-Transfer-Encoding', 'binary');
+ $this->response->add_header('Pragma', 'public');
+ $this->response->add_header('Cache-Control', 'private');
+ $this->response->add_header('Content-Length', strlen($content));
+ $this->render_text($content);
+ } else {
+ // delayed response to prevent brute force attacks ???
+
+ $this->set_status(400);
+ $this->render_nothing();
+ }
+ }
+
+}