pedit_launch.php

<?php
/**
 * Licensed to The Apereo Foundation under one or more contributor license
 * agreements. See the NOTICE file distributed with this work for
 * additional information regarding copyright ownership.

 * The Apereo Foundation licenses this file to you under the Apache License,
 * Version 2.0 (the "License"); you may not use this file except in
 * compliance with the License. You may obtain a copy of the License at:
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

/**
 *
 * Play page, displays the template to the end user
 *
 * @author Patrick Lockley
 * @version 1.0
 * @package
 */

/*
 * Make sure that play does not use cookie based sessions
 * Thise requires to switch off cookiebased sessions and some helper functions.
 *
 * If this is an LTI session, do not use this functionality, because tsugi will handle the session
 *
 * This must be done before loading config.php
*/
if (!isset($lti_enabled))
{
    $lti_enabled = false;
}
if (!$lti_enabled)
{
    require_once(dirname(__FILE__) . "/session_helpers.php");
    ini_set('session.use_cookies', 0);
    ini_set('session.use_only_cookies', 0);
    ini_set('session.use_trans_sid', 1);
}


require_once(dirname(__FILE__) . "/config.php");
require_once(dirname(__FILE__) . "/website_code/php/xAPI/xAPI_library.php");
require_once(dirname(__FILE__) . "/pedit_config.php");

_load_language_file("/play.inc");

require_once $xerte_toolkits_site->php_library_path . "display_library.php";
require_once $xerte_toolkits_site->php_library_path . "template_library.php";



//error_reporting(E_ALL);
//ini_set('display_errors',"ON");


global $tsugi_enabled, $pedit_enabled;
global $xapi_enabled;
global $x_embed;
global $x_embed_activated;

if (!isset($_GET['template_id'])) {

    /*
     * Was not numeric, so display error message
     */
    echo file_get_contents($xerte_toolkits_site->website_code_path . "error_top") . " " . PLAY_RESOURCE_FAIL . " </div></div></body></html>";
    exit(0);
}

function xmlRemoveNamespace($xml)
{
    // Gets rid of all namespace definitions
    $xml_string = preg_replace('/xmlns[^=]*="[^"]*"/i', '', $xml);

    // Gets rid of all namespace references
    $xml_string = preg_replace('/(<\/|<)[a-zA-Z]+:([a-zA-Z0-9]+[ =>])/', '$1$2', $xml_string);

    return $xml_string;
}

//Decrypt Function
function decrypt($decrypt) {
    global $pedit_config;
    $key_hex = $pedit_config->key;
    $key_bin = hex2bin($key_hex);

    $decoded = base64_decode($decrypt);
    $iv = str_repeat("\x00", openssl_cipher_iv_length ('des-cbc'));
    $decrypted = openssl_decrypt($decoded, 'des-cbc', $key_bin, OPENSSL_RAW_DATA, $iv);
    return $decrypted;
}

$id = x_clean_input($_GET['template_id'], 'numeric');

if (!isset($_REQUEST['param']))
{
    $xerte_toolkits_site->xapi_user->first_name = "Guest";
    $xerte_toolkits_site->xapi_user->last_name = "User";
    $xerte_toolkits_site->xapi_user->email = "info@example.com";
    $xerte_toolkits_site->xapi_user->displayname = "Guest User";
}
else
{
    $decoded = decrypt(x_clean_input($_REQUEST['param']));
    _debug("Decoded param: " . print_r($decoded, true));

    $temp = explode('&', $decoded);
    foreach ($temp as $param)
    {
        $keyvalue = explode('=', $param);
        $params[$keyvalue[0]] = $keyvalue[1];
    }

    _debug("Decoded param array: " . print_r($params, true));

    $client = new SoapClient($pedit_config->soapUrl);

    $soapresult = $client->GetSystemUserByActorId(array(
        'sKey' => $pedit_config->soapKey,
        'iActorID' => $params['actor']
    ));

    _debug("System user by actor is (" . $params['actor'] . "): " . print_r($soapresult, true));

    $userxml = $soapresult->GetSystemUserByActorIdResult;
    $user = simplexml_load_string($userxml);
    $members = $user->xpath('//member');

    $xerte_toolkits_site->xapi_user = new stdClass();
    $xerte_toolkits_site->xapi_user->first_name = str_replace("'", "\'", (string) $members[0]['firstName']);
    if (strlen($members[0]['middleName']) > 0)
    {
        $xerte_toolkits_site->xapi_user->last_name = str_replace("'", "\'", (string)$members[0]['middleName'] . ' ' . (string)$members[0]['lastName']);
    }
    else {
        $xerte_toolkits_site->xapi_user->last_name = str_replace("'", "\'", (string)$members[0]['lastName']);
    }
    $xerte_toolkits_site->xapi_user->email = (string)$members[0]['emailAddressPrivate'];
    $xerte_toolkits_site->xapi_user->displayname = $xerte_toolkits_site->xapi_user->first_name . ' ' . $xerte_toolkits_site->xapi_user->last_name;

    // Get goup information
    $soapresult = $client->GetPageInformation(array(
        'sKey' => $pedit_config->soapKey,
        'iPageID' => $params['pageid']
    ));
    _debug("Page information is (" . $params['pageid'] . "): " . print_r($soapresult, true));
    $pageinfoxml = xmlRemoveNamespace($soapresult->GetPageInformationResult);
    $pageinfo = simplexml_load_string($pageinfoxml);

    $classinfopart = $pageinfo->xpath('/*/DSPartContentFull[Class]');
    if (count($classinfopart)) {
        $classinfo=$classinfopart[0]->Class;
        $keywords = $classinfopart[0]->keywords;
        $metadata = (string)$classinfo[0]['ingress'];
        if (trim($metadata) != "") {
            $pos = strpos($metadata, '(');
            if ($pos !== false) {
                $metadata_groep = substr($metadata, 0, $pos);
                $metadata_groep = trim($metadata_groep);
            } else {
                $metadata_groep = trim($metadata);
            }
            $xerte_toolkits_site->group = $metadata_groep;
            $groupssource = "metadata " . $metadata;
        }
        for($k=0; $k<count($keywords); $k++)
        {
            $keywordxml = $keywords[$k];
            $keyword = (string)$keywordxml->keyword;
            if (stripos($keyword, 'groep=') !== false)
            {
                $groeparr = explode('=', $keyword);
                if (count($groeparr) == 2)
                {
                    $xerte_toolkits_site->group = $groeparr[1];
                    $groupssource = "keyword " . $keyword;
                }
            }
        }
        if (isset($xerte_toolkits_site->group))
            _debug("groupsinformation is set to " . $xerte_toolkits_site->group . " based on " . $groupssource);
    }
}
$pedit_enabled = true;
$xapi_enabled = true;
if (isset($_REQUEST['group']) && !isset($xerte_toolkits_site->group))
{
    $xerte_toolkits_site->group = x_clean_input($_REQUEST['group']);
}
if (isset($_REQUEST['course'])) {
    $xerte_toolkits_site->course = x_clean_input($_REQUEST['course']);
}
if (isset($_REQUEST['module'])) {
    $xerte_toolkits_site->module = x_clean_input($_REQUEST['module']);
}

// Get LRS endpoint and see if xAPI is enabled
$prefix = $xerte_toolkits_site->database_table_prefix;
$q = "select * from {$prefix}templatedetails where template_id=?";
$params = array($id);
$row = db_query_one($q, $params);
if ($row === false)
{
    die("template_id not found");
}
if ($row['tsugi_xapi_enabled'] != '1')
{
    die("Xapi is not enabled");
}
if ($row['tsugi_xapi_useglobal'])
{
    $q = "select LRS_Endpoint, LRS_Key, LRS_Secret from {$prefix}sitedetails where site_id=1";
    $globalrow = db_query_one($q);
    $lrs = array('lrsendpoint' => $globalrow['LRS_Endpoint'],
        'lrskey' => $globalrow['LRS_Key'],
        'lrssecret' => $globalrow['LRS_Secret'],
    );
}
else{
    $lrs = array('lrsendpoint' => $row['tsugi_xapi_endpoint'],
        'lrskey' => $row['tsugi_xapi_key'],
        'lrssecret' => $row['tsugi_xapi_secret'],
    );
}
$lrs = CheckLearningLocker($lrs);
$_SESSION['XAPI_PROXY'] = $lrs;

// Set studentid mode
$xerte_toolkits_site->xapi_user->studentidmode = $row['tsugi_xapi_student_id_mode'];

if ($_GET['x_embed'] === 'true') {
    $x_embed = true;
    if ($_GET['activated'] !== 'true') {
        $xapi_enabled = false;
        $x_embed_activated = false;
    } else {
        $x_embed_activated = true;
    }
}
require(dirname(__FILE__) . "/play.php");