General developer forum

Have you added a function to do any security checks and then serve your file?

blocks/voucher/lib.php:

function block_voucher_pluginfile($course, $cm, $context, $filearea, $args, $forcedownload, array $options=array()) {
// Do various security checks and then call send_stored_file()
}

See mod/forum/lib.php, forum_pluginfile(...) for an example.

Hi Dave,

I think the problem is that you are setting the file as CONTEXT_COURSE  but trying to get the file as CONTEXT_MODULE

$context = context_course::instance($COURSE->id);
$fs = get_file_storage();    // Prepare file record object    
  $fileinfo = array(    
    'contextid' => $context->id, // ID of context
    'component' => 'block_voucher',     // usually = table name    
    'filearea' => 'voucher',     // usually = table name
    'itemid' => $timestamp,      // usually = ID of row in table
    'filepath' => '/',           // any path beginning and ending in /
    'filename' => $filename); // any filename     

 if ($context->contextlevel != CONTEXT_MODULE) {
     return false;
    }

you need to make sure the values in the create $fileinfo array are exactly the same to the params in the pluginfile method in your lib.php

is if you are saving the file at in course context then

if ($context->contextlevel != CONTEXT_COURSE) {
     return false;
    }

the above is just an example you need to make sure that you save the file in the right context to ensure your capabilities work as expected

Dear all, I need a help from you too. I wrote a Block with a button or simple link to zip and download all published files of the course where the block is shown. This is useful both for teachers and students to download all files at once. Strangely there is a DOWNLOAD ALL function only for the teachers and only if the files are placed in a folder.

• I create a list of published files with an SQL-query, works fine, I get the list
• I get the needed data using list($context, $course, $cm) = get_context_info_array... ,works great
  
• I get the fileinfo by looping through the file list using get_file_browser and $browser->get_file_info with the above data, works like a charm
• I get the single file from the storage with $f = $fs->get_file, another reason to praise all involved core developers, works fine too
• with $cm I got from above, I can check if the file is visible. If the user is a teacher include it in the zip-file, otherwise skip it, as students are not allowed to download hidden sections/files
• as per File Api, you have to copy a file to an OS-path with $f->copy_content_to($CFG->dataroot . '/temp/zip/' . $file->filename, works fine
• I got a new zip archive with $zarc = new zip_archive(); and $zarc->open($CFG->dataroot . '/temp/zip/sess_' . sesskey() . '_' . $course->shortname . '_files.zip', I use the users' session key to not mess up the zip-file-names in concurrent production environment. I would rather prefer putting everything into /temp/zip/sessionkey/ but the zip_archive::open function ignores all paths different from temp/zip, works fine, no problem for me
• I can add all files in the loop to the zip_archive with $zarc->add_file_from_pathname, works fine
• I can delete all copied and added files from the temp/zip directory with unlink($CFG->dataroot . '/temp/zip/' . $file->filename, works fine
• I can delete the zip_archive file in temp/zip with unlink too
• THE ONLY THING I CAN NOT DO is serve this file to the user for download, as I have no clue on how to do it

In Moodle 1.9 I simply composed the URL like yourmoodle.com/temp/zip/myZipArchive.zip and that worked.

Now such an URL yields an error. So I tried with redirect(new moodle_url... using different paths and using also

redirect(new moodle_url('/pluginfile.php/' . $context->id . '/content/temp/zip/sess_' . sesskey() . '_' . $course->shortname . '_files.zip', array('id'=>$courseid)));

I studied also the code for the own callback function needed to use pluginfile.php but I did not implement it yet. Before doing so, I wanted to ask you for advice. It took me 3 days to implement most of the code. I hope it won't take me 3 weeks and more to implement serving that file to the users' browser.

Here is the thread where I presented my project: https://moodle.org/mod/forum/discuss.php?d=218220

Regards and many thanks, Rosario