]> git.mjollnir.org Git - moodle.git/commitdiff
flash upgrader MDL-20841 New config setting excludeoldflashclients will set a minimum...
authorjerome mouneyrac <jerome@moodle.com>
Wed, 2 Dec 2009 06:38:16 +0000 (06:38 +0000)
committerjerome mouneyrac <jerome@moodle.com>
Wed, 2 Dec 2009 06:38:16 +0000 (06:38 +0000)
admin/settings/security.php
lang/en_utf8/admin.php
lang/en_utf8/moodle.php
lib/filelib.php
lib/flashdetect/flashdetect.js [new file with mode: 0644]
lib/flashdetect/flashupgrade.fla [new file with mode: 0644]
lib/flashdetect/flashupgrade.swf [new file with mode: 0644]
lib/flashdetect/message.php [new file with mode: 0644]
lib/outputrenderers.php
lib/swfobject/swfobject.js [new file with mode: 0644]
login/environment.php [new file with mode: 0644]

index 2e74e5a6ad11fe001ec54ad6bc41933c21b63284..1dba1c50d158f16247cf27ce5d36a4d3f835b443 100644 (file)
@@ -66,6 +66,7 @@ if ($hassiteconfig) { // speedup for non-admins, add all caps used on this page
     $temp->add(new admin_setting_configcheckbox('loginhttps', get_string('loginhttps', 'admin'), get_string('configloginhttps', 'admin'), 0));
     $temp->add(new admin_setting_configcheckbox('cookiesecure', get_string('cookiesecure', 'admin'), get_string('configcookiesecure', 'admin'), 0));
     $temp->add(new admin_setting_configcheckbox('cookiehttponly', get_string('cookiehttponly', 'admin'), get_string('configcookiehttponly', 'admin'), 0));
+    $temp->add(new admin_setting_configtext('excludeoldflashclients', get_string('excludeoldflashclients', 'admin'), get_string('configexcludeoldflashclients', 'admin'), '10.0.12', PARAM_TEXT));
     $ADMIN->add('security', $temp);
 
 
index 28a288ad32602e7a6bdc119dece6cb568811e1c6..40e7d6521afcc900c1ff2e6302ad661473686ce2 100644 (file)
@@ -146,6 +146,7 @@ $string['configeditordictionary'] = 'This value will be used if aspell doesn\'t
 $string['configemailchangeconfirmation'] = 'Require an email confirmation step when users change their email address in their profile.';
 $string['configemoticons'] = 'Change the code on the left that relates to the name of the emoticon on the right.  To add new emoticons, add a code and a name, then add an image as name.gif in /pix/s.';
 $string['configenableajax'] = 'This setting allows you to control the use of AJAX (advanced client/server interfaces using Javascript) across the whole site.  With this setting enabled users can still make a choice in their profile, otherwise AJAX is disabled for everybody.';
+$string['configexcludeoldflashclients'] = 'Some versions of the Adobe Flash plugin are known to be vulnerable to attacks from malicious Flash content.  You can specify a minimum supported version here, and Moodle will not show Flash files to users with lower versions. Instead they will see an alternate Flash file telling them how to upgrade. Leave this empty to disable all checks.' ;
 $string['configdisablecourseajax'] = 'Do not use AJAX when editing main course pages.';
 $string['configenablecalendarexport'] = 'Enable exporting or subscribing to calendars.';
 $string['configenablecourserequests'] = 'This will allow any user to request a course be created.';
@@ -448,6 +449,7 @@ $string['errorsetting'] = 'Could not save setting:';
 $string['errorwithsettings'] = 'Some settings were not changed due to an error.';
 $string['everyonewhocan'] = 'Everyone who can \'$a\'';
 $string['exceptions'] = 'exceptions';
+$string['excludeoldflashclients'] ='Required Flash player version';
 $string['experimental'] = 'Experimental';
 $string['experimentalsettings'] = 'Experimental settings';
 $string['experimentalsplitrestore'] = 'Experimental split restore';
index 5d533e0bc00a319f09035fe6213b7990c6588ceb..063bc3c2617f1b21ea6d04b6208730327028f98f 100644 (file)
@@ -694,6 +694,8 @@ $string['firstaccess'] = 'First access';
 $string['firstdayofweek'] = '0';
 $string['firstname'] = 'First name';
 $string['firsttime'] = 'Is this your first time here?';
+$string['flashlinkmessage'] = 'Please upgrade your Flash player now:';
+$string['flashupgrademessage'] = " The Flash plugin is required to play this content, but the version you have is too old.\n\n  You may need to log out and log in back after upgrade.";
 $string['folder'] = 'Folder';
 $string['folderclosed'] = 'Closed folder';
 $string['folderopened'] = 'Opened folder';
index 046a6e1df75b077670139fe0446db6c707d7b4e4..81dd5c17450cb762147042b615b302cec0e0d4ec 100644 (file)
@@ -1452,7 +1452,7 @@ function send_temp_file_finished($path) {
  */
 function send_file($path, $filename, $lifetime = 'default' , $filter=0, $pathisstring=false, $forcedownload=false, $mimetype='', $dontdie=false) {
     global $CFG, $COURSE, $SESSION;
-
+    
     if ($dontdie) {
         ignore_user_abort(true);
     }
@@ -1474,6 +1474,22 @@ function send_file($path, $filename, $lifetime = 'default' , $filter=0, $pathiss
     $isFF         = check_browser_version('Firefox', '1.5'); // only FF > 1.5 properly tested
     $mimetype     = ($forcedownload and !$isFF) ? 'application/x-forcedownload' :
                          ($mimetype ? $mimetype : mimeinfo('type', $filename));
+
+    // If the file is a Flash file and that the user flash player is outdated return a flash upgrader MDL-20841
+    if (!empty($CFG->excludeoldflashclients) && $mimetype == 'application/x-shockwave-flash'&& !empty($SESSION->flashversion)) {
+        $userplayerversion = explode('.', $SESSION->flashversion);
+        $requiredplayerversion = explode('.', $CFG->excludeoldflashclients);
+        if (($userplayerversion[0] <  $requiredplayerversion[0]) ||
+            ($userplayerversion[0] == $requiredplayerversion[0] && $userplayerversion[1] < $requiredplayerversion[1]) ||
+            ($userplayerversion[0] == $requiredplayerversion[0] && $userplayerversion[1] == $requiredplayerversion[1]
+             && $userplayerversion[2] < $requiredplayerversion[2])) {
+            $path = $CFG->dirroot."/lib/flashdetect/flashupgrade.swf";  // Alternate content asking user to upgrade Flash
+            $filename = "flashupgrade.swf";
+            $lifetime = 0;  // Do not cache
+        }
+    }
+
+
     $lastmodified = $pathisstring ? time() : filemtime($path);
     $filesize     = $pathisstring ? strlen($path) : filesize($path);
 
@@ -1682,6 +1698,39 @@ function send_stored_file($stored_file, $lifetime=86400 , $filter=0, $forcedownl
     $isFF         = check_browser_version('Firefox', '1.5'); // only FF > 1.5 properly tested
     $mimetype     = ($forcedownload and !$isFF) ? 'application/x-forcedownload' :
                          ($stored_file->get_mimetype() ? $stored_file->get_mimetype() : mimeinfo('type', $filename));
+    
+    // If the file is a Flash file and that the user flash player is outdated return a flash upgrader MDL-20841
+    if (!empty($CFG->excludeoldflashclients) && $mimetype == 'application/x-shockwave-flash'&& !empty($SESSION->flashversion)) {     
+        $userplayerversion = explode('.', $SESSION->flashversion);
+        $requiredplayerversion = explode('.', $CFG->excludeoldflashclients);
+        if (($userplayerversion[0] <  $requiredplayerversion[0]) ||
+            ($userplayerversion[0] == $requiredplayerversion[0] && $userplayerversion[1] < $requiredplayerversion[1]) ||
+            ($userplayerversion[0] == $requiredplayerversion[0] && $userplayerversion[1] == $requiredplayerversion[1]
+             && $userplayerversion[2] < $requiredplayerversion[2])) {
+
+            $path = $CFG->dirroot."/lib/flashdetect/";
+            $filename = "flashupgrade.swf";
+
+            $entry = new object();
+            $entry->filearea  = 'content';
+            $entry->contextid =  get_system_context()->id;
+            $entry->filename  = $filename;
+            $entry->filepath  = $path;
+            $entry->timecreated  = time();
+            $entry->timemodified = time();
+            $entry->mimetype     = $mimetype;
+            $entry->itemid = 0;
+            $fs = get_file_storage();
+            $browser = get_file_browser();
+            $stored_file = $fs->get_file($entry->contextid, $entry->filearea, $entry->itemid, $entry->filepath, $entry->filename);
+            if (empty($stored_file)) {
+                $stored_file = $fs->create_file_from_pathname($entry, $path.$filename);
+            }
+
+            $lifetime = 0;  // Do not cache
+        }
+    }
+
     $lastmodified = $stored_file->get_timemodified();
     $filesize     = $stored_file->get_filesize();
 
diff --git a/lib/flashdetect/flashdetect.js b/lib/flashdetect/flashdetect.js
new file mode 100644 (file)
index 0000000..c6b396b
--- /dev/null
@@ -0,0 +1,10 @@
+/* 
+ * To change this template, choose Tools | Templates
+ * and open the template in the editor.
+ */
+
+//WARNING: before to use this function you need to load lib/swfobject/swfobject.js + YUI: 'yahoo-min.js', 'event-min.js', 'connection-min.js'
+function setflashversiontosession (wwwroot, sesskey) {
+    var flashversion = swfobject.getFlashPlayerVersion();
+    YAHOO.util.Connect.asyncRequest('GET',wwwroot+'/login/environment.php?sesskey='+sesskey+'&flashversion='+flashversion.major+'.'+flashversion.minor+'.'+flashversion.release);
+}
\ No newline at end of file
diff --git a/lib/flashdetect/flashupgrade.fla b/lib/flashdetect/flashupgrade.fla
new file mode 100644 (file)
index 0000000..9ca9264
Binary files /dev/null and b/lib/flashdetect/flashupgrade.fla differ
diff --git a/lib/flashdetect/flashupgrade.swf b/lib/flashdetect/flashupgrade.swf
new file mode 100644 (file)
index 0000000..c56478a
Binary files /dev/null and b/lib/flashdetect/flashupgrade.swf differ
diff --git a/lib/flashdetect/message.php b/lib/flashdetect/message.php
new file mode 100644 (file)
index 0000000..e03ff3e
--- /dev/null
@@ -0,0 +1,9 @@
+<?php
+/* 
+ * To change this template, choose Tools | Templates
+ * and open the template in the editor.
+ */
+require('../../config.php');
+require_login();
+echo 'alertmessage='.get_string('flashupgrademessage').'&linkmessage='.get_string('flashlinkmessage');
+?>
index 6cee3d5baf209d95b7f2a9e6ad865c0e7746431b..c0a79812727e72e5efc05ffc0a3a05d7313177be 100644 (file)
@@ -472,7 +472,7 @@ class moodle_core_renderer extends moodle_renderer_base {
      * @return string HTML fragment.
      */
     public function standard_head_html() {
-        global $CFG;
+        global $CFG, $SESSION;
         $output = '';
         $output .= '<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />' . "\n";
         $output .= '<meta name="keywords" content="moodle, ' . $this->page->title . '" />' . "\n";
@@ -510,6 +510,16 @@ class moodle_core_renderer extends moodle_renderer_base {
             }
         }
 
+        /// Perform a browser environment check for the flash version.  Should only run once per login session.
+        if (isloggedin() && !empty($CFG->excludeoldflashclients) && empty($SESSION->flashversion)) {
+            $this->page->requires->js('lib/yui/yahoo/yahoo-min.js')->in_head();
+            $this->page->requires->js('lib/yui/event/event-min.js')->in_head();
+            $this->page->requires->js('lib/yui/connection/connection-min.js')->in_head();
+            $this->page->requires->js('lib/swfobject/swfobject.js')->in_head();
+            $this->page->requires->js('lib/flashdetect/flashdetect.js')->in_head();
+            $this->page->requires->js_function_call('setflashversiontosession', array($CFG->wwwroot, sesskey()));
+        }
+
         // Add the meta tags from the themes if any were requested.
         $output .= $this->page->theme->get_meta_tags($this->page);
 
diff --git a/lib/swfobject/swfobject.js b/lib/swfobject/swfobject.js
new file mode 100644 (file)
index 0000000..9378c8f
--- /dev/null
@@ -0,0 +1,777 @@
+/*!    SWFObject v2.2 <http://code.google.com/p/swfobject/> 
+       is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> 
+*/
+
+var swfobject = function() {
+       
+       var UNDEF = "undefined",
+               OBJECT = "object",
+               SHOCKWAVE_FLASH = "Shockwave Flash",
+               SHOCKWAVE_FLASH_AX = "ShockwaveFlash.ShockwaveFlash",
+               FLASH_MIME_TYPE = "application/x-shockwave-flash",
+               EXPRESS_INSTALL_ID = "SWFObjectExprInst",
+               ON_READY_STATE_CHANGE = "onreadystatechange",
+               
+               win = window,
+               doc = document,
+               nav = navigator,
+               
+               plugin = false,
+               domLoadFnArr = [main],
+               regObjArr = [],
+               objIdArr = [],
+               listenersArr = [],
+               storedAltContent,
+               storedAltContentId,
+               storedCallbackFn,
+               storedCallbackObj,
+               isDomLoaded = false,
+               isExpressInstallActive = false,
+               dynamicStylesheet,
+               dynamicStylesheetMedia,
+               autoHideShow = true,
+       
+       /* Centralized function for browser feature detection
+               - User agent string detection is only used when no good alternative is possible
+               - Is executed directly for optimal performance
+       */      
+       ua = function() {
+               var w3cdom = typeof doc.getElementById != UNDEF && typeof doc.getElementsByTagName != UNDEF && typeof doc.createElement != UNDEF,
+                       u = nav.userAgent.toLowerCase(),
+                       p = nav.platform.toLowerCase(),
+                       windows = p ? /win/.test(p) : /win/.test(u),
+                       mac = p ? /mac/.test(p) : /mac/.test(u),
+                       webkit = /webkit/.test(u) ? parseFloat(u.replace(/^.*webkit\/(\d+(\.\d+)?).*$/, "$1")) : false, // returns either the webkit version or false if not webkit
+                       ie = !+"\v1", // feature detection based on Andrea Giammarchi's solution: http://webreflection.blogspot.com/2009/01/32-bytes-to-know-if-your-browser-is-ie.html
+                       playerVersion = [0,0,0],
+                       d = null;
+               if (typeof nav.plugins != UNDEF && typeof nav.plugins[SHOCKWAVE_FLASH] == OBJECT) {
+                       d = nav.plugins[SHOCKWAVE_FLASH].description;
+                       if (d && !(typeof nav.mimeTypes != UNDEF && nav.mimeTypes[FLASH_MIME_TYPE] && !nav.mimeTypes[FLASH_MIME_TYPE].enabledPlugin)) { // navigator.mimeTypes["application/x-shockwave-flash"].enabledPlugin indicates whether plug-ins are enabled or disabled in Safari 3+
+                               plugin = true;
+                               ie = false; // cascaded feature detection for Internet Explorer
+                               d = d.replace(/^.*\s+(\S+\s+\S+$)/, "$1");
+                               playerVersion[0] = parseInt(d.replace(/^(.*)\..*$/, "$1"), 10);
+                               playerVersion[1] = parseInt(d.replace(/^.*\.(.*)\s.*$/, "$1"), 10);
+                               playerVersion[2] = /[a-zA-Z]/.test(d) ? parseInt(d.replace(/^.*[a-zA-Z]+(.*)$/, "$1"), 10) : 0;
+                       }
+               }
+               else if (typeof win.ActiveXObject != UNDEF) {
+                       try {
+                               var a = new ActiveXObject(SHOCKWAVE_FLASH_AX);
+                               if (a) { // a will return null when ActiveX is disabled
+                                       d = a.GetVariable("$version");
+                                       if (d) {
+                                               ie = true; // cascaded feature detection for Internet Explorer
+                                               d = d.split(" ")[1].split(",");
+                                               playerVersion = [parseInt(d[0], 10), parseInt(d[1], 10), parseInt(d[2], 10)];
+                                       }
+                               }
+                       }
+                       catch(e) {}
+               }
+               return { w3:w3cdom, pv:playerVersion, wk:webkit, ie:ie, win:windows, mac:mac };
+       }(),
+       
+       /* Cross-browser onDomLoad
+               - Will fire an event as soon as the DOM of a web page is loaded
+               - Internet Explorer workaround based on Diego Perini's solution: http://javascript.nwbox.com/IEContentLoaded/
+               - Regular onload serves as fallback
+       */ 
+       onDomLoad = function() {
+               if (!ua.w3) { return; }
+               if ((typeof doc.readyState != UNDEF && doc.readyState == "complete") || (typeof doc.readyState == UNDEF && (doc.getElementsByTagName("body")[0] || doc.body))) { // function is fired after onload, e.g. when script is inserted dynamically 
+                       callDomLoadFunctions();
+               }
+               if (!isDomLoaded) {
+                       if (typeof doc.addEventListener != UNDEF) {
+                               doc.addEventListener("DOMContentLoaded", callDomLoadFunctions, false);
+                       }               
+                       if (ua.ie && ua.win) {
+                               doc.attachEvent(ON_READY_STATE_CHANGE, function() {
+                                       if (doc.readyState == "complete") {
+                                               doc.detachEvent(ON_READY_STATE_CHANGE, arguments.callee);
+                                               callDomLoadFunctions();
+                                       }
+                               });
+                               if (win == top) { // if not inside an iframe
+                                       (function(){
+                                               if (isDomLoaded) { return; }
+                                               try {
+                                                       doc.documentElement.doScroll("left");
+                                               }
+                                               catch(e) {
+                                                       setTimeout(arguments.callee, 0);
+                                                       return;
+                                               }
+                                               callDomLoadFunctions();
+                                       })();
+                               }
+                       }
+                       if (ua.wk) {
+                               (function(){
+                                       if (isDomLoaded) { return; }
+                                       if (!/loaded|complete/.test(doc.readyState)) {
+                                               setTimeout(arguments.callee, 0);
+                                               return;
+                                       }
+                                       callDomLoadFunctions();
+                               })();
+                       }
+                       addLoadEvent(callDomLoadFunctions);
+               }
+       }();
+       
+       function callDomLoadFunctions() {
+               if (isDomLoaded) { return; }
+               try { // test if we can really add/remove elements to/from the DOM; we don't want to fire it too early
+                       var t = doc.getElementsByTagName("body")[0].appendChild(createElement("span"));
+                       t.parentNode.removeChild(t);
+               }
+               catch (e) { return; }
+               isDomLoaded = true;
+               var dl = domLoadFnArr.length;
+               for (var i = 0; i < dl; i++) {
+                       domLoadFnArr[i]();
+               }
+       }
+       
+       function addDomLoadEvent(fn) {
+               if (isDomLoaded) {
+                       fn();
+               }
+               else { 
+                       domLoadFnArr[domLoadFnArr.length] = fn; // Array.push() is only available in IE5.5+
+               }
+       }
+       
+       /* Cross-browser onload
+               - Based on James Edwards' solution: http://brothercake.com/site/resources/scripts/onload/
+               - Will fire an event as soon as a web page including all of its assets are loaded 
+        */
+       function addLoadEvent(fn) {
+               if (typeof win.addEventListener != UNDEF) {
+                       win.addEventListener("load", fn, false);
+               }
+               else if (typeof doc.addEventListener != UNDEF) {
+                       doc.addEventListener("load", fn, false);
+               }
+               else if (typeof win.attachEvent != UNDEF) {
+                       addListener(win, "onload", fn);
+               }
+               else if (typeof win.onload == "function") {
+                       var fnOld = win.onload;
+                       win.onload = function() {
+                               fnOld();
+                               fn();
+                       };
+               }
+               else {
+                       win.onload = fn;
+               }
+       }
+       
+       /* Main function
+               - Will preferably execute onDomLoad, otherwise onload (as a fallback)
+       */
+       function main() { 
+               if (plugin) {
+                       testPlayerVersion();
+               }
+               else {
+                       matchVersions();
+               }
+       }
+       
+       /* Detect the Flash Player version for non-Internet Explorer browsers
+               - Detecting the plug-in version via the object element is more precise than using the plugins collection item's description:
+                 a. Both release and build numbers can be detected
+                 b. Avoid wrong descriptions by corrupt installers provided by Adobe
+                 c. Avoid wrong descriptions by multiple Flash Player entries in the plugin Array, caused by incorrect browser imports
+               - Disadvantage of this method is that it depends on the availability of the DOM, while the plugins collection is immediately available
+       */
+       function testPlayerVersion() {
+               var b = doc.getElementsByTagName("body")[0];
+               var o = createElement(OBJECT);
+               o.setAttribute("type", FLASH_MIME_TYPE);
+               var t = b.appendChild(o);
+               if (t) {
+                       var counter = 0;
+                       (function(){
+                               if (typeof t.GetVariable != UNDEF) {
+                                       var d = t.GetVariable("$version");
+                                       if (d) {
+                                               d = d.split(" ")[1].split(",");
+                                               ua.pv = [parseInt(d[0], 10), parseInt(d[1], 10), parseInt(d[2], 10)];
+                                       }
+                               }
+                               else if (counter < 10) {
+                                       counter++;
+                                       setTimeout(arguments.callee, 10);
+                                       return;
+                               }
+                               b.removeChild(o);
+                               t = null;
+                               matchVersions();
+                       })();
+               }
+               else {
+                       matchVersions();
+               }
+       }
+       
+       /* Perform Flash Player and SWF version matching; static publishing only
+       */
+       function matchVersions() {
+               var rl = regObjArr.length;
+               if (rl > 0) {
+                       for (var i = 0; i < rl; i++) { // for each registered object element
+                               var id = regObjArr[i].id;
+                               var cb = regObjArr[i].callbackFn;
+                               var cbObj = {success:false, id:id};
+                               if (ua.pv[0] > 0) {
+                                       var obj = getElementById(id);
+                                       if (obj) {
+                                               if (hasPlayerVersion(regObjArr[i].swfVersion) && !(ua.wk && ua.wk < 312)) { // Flash Player version >= published SWF version: Houston, we have a match!
+                                                       setVisibility(id, true);
+                                                       if (cb) {
+                                                               cbObj.success = true;
+                                                               cbObj.ref = getObjectById(id);
+                                                               cb(cbObj);
+                                                       }
+                                               }
+                                               else if (regObjArr[i].expressInstall && canExpressInstall()) { // show the Adobe Express Install dialog if set by the web page author and if supported
+                                                       var att = {};
+                                                       att.data = regObjArr[i].expressInstall;
+                                                       att.width = obj.getAttribute("width") || "0";
+                                                       att.height = obj.getAttribute("height") || "0";
+                                                       if (obj.getAttribute("class")) { att.styleclass = obj.getAttribute("class"); }
+                                                       if (obj.getAttribute("align")) { att.align = obj.getAttribute("align"); }
+                                                       // parse HTML object param element's name-value pairs
+                                                       var par = {};
+                                                       var p = obj.getElementsByTagName("param");
+                                                       var pl = p.length;
+                                                       for (var j = 0; j < pl; j++) {
+                                                               if (p[j].getAttribute("name").toLowerCase() != "movie") {
+                                                                       par[p[j].getAttribute("name")] = p[j].getAttribute("value");
+                                                               }
+                                                       }
+                                                       showExpressInstall(att, par, id, cb);
+                                               }
+                                               else { // Flash Player and SWF version mismatch or an older Webkit engine that ignores the HTML object element's nested param elements: display alternative content instead of SWF
+                                                       displayAltContent(obj);
+                                                       if (cb) { cb(cbObj); }
+                                               }
+                                       }
+                               }
+                               else {  // if no Flash Player is installed or the fp version cannot be detected we let the HTML object element do its job (either show a SWF or alternative content)
+                                       setVisibility(id, true);
+                                       if (cb) {
+                                               var o = getObjectById(id); // test whether there is an HTML object element or not
+                                               if (o && typeof o.SetVariable != UNDEF) { 
+                                                       cbObj.success = true;
+                                                       cbObj.ref = o;
+                                               }
+                                               cb(cbObj);
+                                       }
+                               }
+                       }
+               }
+       }
+       
+       function getObjectById(objectIdStr) {
+               var r = null;
+               var o = getElementById(objectIdStr);
+               if (o && o.nodeName == "OBJECT") {
+                       if (typeof o.SetVariable != UNDEF) {
+                               r = o;
+                       }
+                       else {
+                               var n = o.getElementsByTagName(OBJECT)[0];
+                               if (n) {
+                                       r = n;
+                               }
+                       }
+               }
+               return r;
+       }
+       
+       /* Requirements for Adobe Express Install
+               - only one instance can be active at a time
+               - fp 6.0.65 or higher
+               - Win/Mac OS only
+               - no Webkit engines older than version 312
+       */
+       function canExpressInstall() {
+               return !isExpressInstallActive && hasPlayerVersion("6.0.65") && (ua.win || ua.mac) && !(ua.wk && ua.wk < 312);
+       }
+       
+       /* Show the Adobe Express Install dialog
+               - Reference: http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=6a253b75
+       */
+       function showExpressInstall(att, par, replaceElemIdStr, callbackFn) {
+               isExpressInstallActive = true;
+               storedCallbackFn = callbackFn || null;
+               storedCallbackObj = {success:false, id:replaceElemIdStr};
+               var obj = getElementById(replaceElemIdStr);
+               if (obj) {
+                       if (obj.nodeName == "OBJECT") { // static publishing
+                               storedAltContent = abstractAltContent(obj);
+                               storedAltContentId = null;
+                       }
+                       else { // dynamic publishing
+                               storedAltContent = obj;
+                               storedAltContentId = replaceElemIdStr;
+                       }
+                       att.id = EXPRESS_INSTALL_ID;
+                       if (typeof att.width == UNDEF || (!/%$/.test(att.width) && parseInt(att.width, 10) < 310)) { att.width = "310"; }
+                       if (typeof att.height == UNDEF || (!/%$/.test(att.height) && parseInt(att.height, 10) < 137)) { att.height = "137"; }
+                       doc.title = doc.title.slice(0, 47) + " - Flash Player Installation";
+                       var pt = ua.ie && ua.win ? "ActiveX" : "PlugIn",
+                               fv = "MMredirectURL=" + win.location.toString().replace(/&/g,"%26") + "&MMplayerType=" + pt + "&MMdoctitle=" + doc.title;
+                       if (typeof par.flashvars != UNDEF) {
+                               par.flashvars += "&" + fv;
+                       }
+                       else {
+                               par.flashvars = fv;
+                       }
+                       // IE only: when a SWF is loading (AND: not available in cache) wait for the readyState of the object element to become 4 before removing it,
+                       // because you cannot properly cancel a loading SWF file without breaking browser load references, also obj.onreadystatechange doesn't work
+                       if (ua.ie && ua.win && obj.readyState != 4) {
+                               var newObj = createElement("div");
+                               replaceElemIdStr += "SWFObjectNew";
+                               newObj.setAttribute("id", replaceElemIdStr);
+                               obj.parentNode.insertBefore(newObj, obj); // insert placeholder div that will be replaced by the object element that loads expressinstall.swf
+                               obj.style.display = "none";
+                               (function(){
+                                       if (obj.readyState == 4) {
+                                               obj.parentNode.removeChild(obj);
+                                       }
+                                       else {
+                                               setTimeout(arguments.callee, 10);
+                                       }
+                               })();
+                       }
+                       createSWF(att, par, replaceElemIdStr);
+               }
+       }
+       
+       /* Functions to abstract and display alternative content
+       */
+       function displayAltContent(obj) {
+               if (ua.ie && ua.win && obj.readyState != 4) {
+                       // IE only: when a SWF is loading (AND: not available in cache) wait for the readyState of the object element to become 4 before removing it,
+                       // because you cannot properly cancel a loading SWF file without breaking browser load references, also obj.onreadystatechange doesn't work
+                       var el = createElement("div");
+                       obj.parentNode.insertBefore(el, obj); // insert placeholder div that will be replaced by the alternative content
+                       el.parentNode.replaceChild(abstractAltContent(obj), el);
+                       obj.style.display = "none";
+                       (function(){
+                               if (obj.readyState == 4) {
+                                       obj.parentNode.removeChild(obj);
+                               }
+                               else {
+                                       setTimeout(arguments.callee, 10);
+                               }
+                       })();
+               }
+               else {
+                       obj.parentNode.replaceChild(abstractAltContent(obj), obj);
+               }
+       } 
+
+       function abstractAltContent(obj) {
+               var ac = createElement("div");
+               if (ua.win && ua.ie) {
+                       ac.innerHTML = obj.innerHTML;
+               }
+               else {
+                       var nestedObj = obj.getElementsByTagName(OBJECT)[0];
+                       if (nestedObj) {
+                               var c = nestedObj.childNodes;
+                               if (c) {
+                                       var cl = c.length;
+                                       for (var i = 0; i < cl; i++) {
+                                               if (!(c[i].nodeType == 1 && c[i].nodeName == "PARAM") && !(c[i].nodeType == 8)) {
+                                                       ac.appendChild(c[i].cloneNode(true));
+                                               }
+                                       }
+                               }
+                       }
+               }
+               return ac;
+       }
+       
+       /* Cross-browser dynamic SWF creation
+       */
+       function createSWF(attObj, parObj, id) {
+               var r, el = getElementById(id);
+               if (ua.wk && ua.wk < 312) { return r; }
+               if (el) {
+                       if (typeof attObj.id == UNDEF) { // if no 'id' is defined for the object element, it will inherit the 'id' from the alternative content
+                               attObj.id = id;
+                       }
+                       if (ua.ie && ua.win) { // Internet Explorer + the HTML object element + W3C DOM methods do not combine: fall back to outerHTML
+                               var att = "";
+                               for (var i in attObj) {
+                                       if (attObj[i] != Object.prototype[i]) { // filter out prototype additions from other potential libraries
+                                               if (i.toLowerCase() == "data") {
+                                                       parObj.movie = attObj[i];
+                                               }
+                                               else if (i.toLowerCase() == "styleclass") { // 'class' is an ECMA4 reserved keyword
+                                                       att += ' class="' + attObj[i] + '"';
+                                               }
+                                               else if (i.toLowerCase() != "classid") {
+                                                       att += ' ' + i + '="' + attObj[i] + '"';
+                                               }
+                                       }
+                               }
+                               var par = "";
+                               for (var j in parObj) {
+                                       if (parObj[j] != Object.prototype[j]) { // filter out prototype additions from other potential libraries
+                                               par += '<param name="' + j + '" value="' + parObj[j] + '" />';
+                                       }
+                               }
+                               el.outerHTML = '<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"' + att + '>' + par + '</object>';
+                               objIdArr[objIdArr.length] = attObj.id; // stored to fix object 'leaks' on unload (dynamic publishing only)
+                               r = getElementById(attObj.id);  
+                       }
+                       else { // well-behaving browsers
+                               var o = createElement(OBJECT);
+                               o.setAttribute("type", FLASH_MIME_TYPE);
+                               for (var m in attObj) {
+                                       if (attObj[m] != Object.prototype[m]) { // filter out prototype additions from other potential libraries
+                                               if (m.toLowerCase() == "styleclass") { // 'class' is an ECMA4 reserved keyword
+                                                       o.setAttribute("class", attObj[m]);
+                                               }
+                                               else if (m.toLowerCase() != "classid") { // filter out IE specific attribute
+                                                       o.setAttribute(m, attObj[m]);
+                                               }
+                                       }
+                               }
+                               for (var n in parObj) {
+                                       if (parObj[n] != Object.prototype[n] && n.toLowerCase() != "movie") { // filter out prototype additions from other potential libraries and IE specific param element
+                                               createObjParam(o, n, parObj[n]);
+                                       }
+                               }
+                               el.parentNode.replaceChild(o, el);
+                               r = o;
+                       }
+               }
+               return r;
+       }
+       
+       function createObjParam(el, pName, pValue) {
+               var p = createElement("param");
+               p.setAttribute("name", pName);  
+               p.setAttribute("value", pValue);
+               el.appendChild(p);
+       }
+       
+       /* Cross-browser SWF removal
+               - Especially needed to safely and completely remove a SWF in Internet Explorer
+       */
+       function removeSWF(id) {
+               var obj = getElementById(id);
+               if (obj && obj.nodeName == "OBJECT") {
+                       if (ua.ie && ua.win) {
+                               obj.style.display = "none";
+                               (function(){
+                                       if (obj.readyState == 4) {
+                                               removeObjectInIE(id);
+                                       }
+                                       else {
+                                               setTimeout(arguments.callee, 10);
+                                       }
+                               })();
+                       }
+                       else {
+                               obj.parentNode.removeChild(obj);
+                       }
+               }
+       }
+       
+       function removeObjectInIE(id) {
+               var obj = getElementById(id);
+               if (obj) {
+                       for (var i in obj) {
+                               if (typeof obj[i] == "function") {
+                                       obj[i] = null;
+                               }
+                       }
+                       obj.parentNode.removeChild(obj);
+               }
+       }
+       
+       /* Functions to optimize JavaScript compression
+       */
+       function getElementById(id) {
+               var el = null;
+               try {
+                       el = doc.getElementById(id);
+               }
+               catch (e) {}
+               return el;
+       }
+       
+       function createElement(el) {
+               return doc.createElement(el);
+       }
+       
+       /* Updated attachEvent function for Internet Explorer
+               - Stores attachEvent information in an Array, so on unload the detachEvent functions can be called to avoid memory leaks
+       */      
+       function addListener(target, eventType, fn) {
+               target.attachEvent(eventType, fn);
+               listenersArr[listenersArr.length] = [target, eventType, fn];
+       }
+       
+       /* Flash Player and SWF content version matching
+       */
+       function hasPlayerVersion(rv) {
+               var pv = ua.pv, v = rv.split(".");
+               v[0] = parseInt(v[0], 10);
+               v[1] = parseInt(v[1], 10) || 0; // supports short notation, e.g. "9" instead of "9.0.0"
+               v[2] = parseInt(v[2], 10) || 0;
+               return (pv[0] > v[0] || (pv[0] == v[0] && pv[1] > v[1]) || (pv[0] == v[0] && pv[1] == v[1] && pv[2] >= v[2])) ? true : false;
+       }
+       
+       /* Cross-browser dynamic CSS creation
+               - Based on Bobby van der Sluis' solution: http://www.bobbyvandersluis.com/articles/dynamicCSS.php
+       */      
+       function createCSS(sel, decl, media, newStyle) {
+               if (ua.ie && ua.mac) { return; }
+               var h = doc.getElementsByTagName("head")[0];
+               if (!h) { return; } // to also support badly authored HTML pages that lack a head element
+               var m = (media && typeof media == "string") ? media : "screen";
+               if (newStyle) {
+                       dynamicStylesheet = null;
+                       dynamicStylesheetMedia = null;
+               }
+               if (!dynamicStylesheet || dynamicStylesheetMedia != m) { 
+                       // create dynamic stylesheet + get a global reference to it
+                       var s = createElement("style");
+                       s.setAttribute("type", "text/css");
+                       s.setAttribute("media", m);
+                       dynamicStylesheet = h.appendChild(s);
+                       if (ua.ie && ua.win && typeof doc.styleSheets != UNDEF && doc.styleSheets.length > 0) {
+                               dynamicStylesheet = doc.styleSheets[doc.styleSheets.length - 1];
+                       }
+                       dynamicStylesheetMedia = m;
+               }
+               // add style rule
+               if (ua.ie && ua.win) {
+                       if (dynamicStylesheet && typeof dynamicStylesheet.addRule == OBJECT) {
+                               dynamicStylesheet.addRule(sel, decl);
+                       }
+               }
+               else {
+                       if (dynamicStylesheet && typeof doc.createTextNode != UNDEF) {
+                               dynamicStylesheet.appendChild(doc.createTextNode(sel + " {" + decl + "}"));
+                       }
+               }
+       }
+       
+       function setVisibility(id, isVisible) {
+               if (!autoHideShow) { return; }
+               var v = isVisible ? "visible" : "hidden";
+               if (isDomLoaded && getElementById(id)) {
+                       getElementById(id).style.visibility = v;
+               }
+               else {
+                       createCSS("#" + id, "visibility:" + v);
+               }
+       }
+
+       /* Filter to avoid XSS attacks
+       */
+       function urlEncodeIfNecessary(s) {
+               var regex = /[\\\"<>\.;]/;
+               var hasBadChars = regex.exec(s) != null;
+               return hasBadChars && typeof encodeURIComponent != UNDEF ? encodeURIComponent(s) : s;
+       }
+       
+       /* Release memory to avoid memory leaks caused by closures, fix hanging audio/video threads and force open sockets/NetConnections to disconnect (Internet Explorer only)
+       */
+       var cleanup = function() {
+               if (ua.ie && ua.win) {
+                       window.attachEvent("onunload", function() {
+                               // remove listeners to avoid memory leaks
+                               var ll = listenersArr.length;
+                               for (var i = 0; i < ll; i++) {
+                                       listenersArr[i][0].detachEvent(listenersArr[i][1], listenersArr[i][2]);
+                               }
+                               // cleanup dynamically embedded objects to fix audio/video threads and force open sockets and NetConnections to disconnect
+                               var il = objIdArr.length;
+                               for (var j = 0; j < il; j++) {
+                                       removeSWF(objIdArr[j]);
+                               }
+                               // cleanup library's main closures to avoid memory leaks
+                               for (var k in ua) {
+                                       ua[k] = null;
+                               }
+                               ua = null;
+                               for (var l in swfobject) {
+                                       swfobject[l] = null;
+                               }
+                               swfobject = null;
+                       });
+               }
+       }();
+       
+       return {
+               /* Public API
+                       - Reference: http://code.google.com/p/swfobject/wiki/documentation
+               */ 
+               registerObject: function(objectIdStr, swfVersionStr, xiSwfUrlStr, callbackFn) {
+                       if (ua.w3 && objectIdStr && swfVersionStr) {
+                               var regObj = {};
+                               regObj.id = objectIdStr;
+                               regObj.swfVersion = swfVersionStr;
+                               regObj.expressInstall = xiSwfUrlStr;
+                               regObj.callbackFn = callbackFn;
+                               regObjArr[regObjArr.length] = regObj;
+                               setVisibility(objectIdStr, false);
+                       }
+                       else if (callbackFn) {
+                               callbackFn({success:false, id:objectIdStr});
+                       }
+               },
+               
+               getObjectById: function(objectIdStr) {
+                       if (ua.w3) {
+                               return getObjectById(objectIdStr);
+                       }
+               },
+               
+               embedSWF: function(swfUrlStr, replaceElemIdStr, widthStr, heightStr, swfVersionStr, xiSwfUrlStr, flashvarsObj, parObj, attObj, callbackFn) {
+                       var callbackObj = {success:false, id:replaceElemIdStr};
+                       if (ua.w3 && !(ua.wk && ua.wk < 312) && swfUrlStr && replaceElemIdStr && widthStr && heightStr && swfVersionStr) {
+                               setVisibility(replaceElemIdStr, false);
+                               addDomLoadEvent(function() {
+                                       widthStr += ""; // auto-convert to string
+                                       heightStr += "";
+                                       var att = {};
+                                       if (attObj && typeof attObj === OBJECT) {
+                                               for (var i in attObj) { // copy object to avoid the use of references, because web authors often reuse attObj for multiple SWFs
+                                                       att[i] = attObj[i];
+                                               }
+                                       }
+                                       att.data = swfUrlStr;
+                                       att.width = widthStr;
+                                       att.height = heightStr;
+                                       var par = {}; 
+                                       if (parObj && typeof parObj === OBJECT) {
+                                               for (var j in parObj) { // copy object to avoid the use of references, because web authors often reuse parObj for multiple SWFs
+                                                       par[j] = parObj[j];
+                                               }
+                                       }
+                                       if (flashvarsObj && typeof flashvarsObj === OBJECT) {
+                                               for (var k in flashvarsObj) { // copy object to avoid the use of references, because web authors often reuse flashvarsObj for multiple SWFs
+                                                       if (typeof par.flashvars != UNDEF) {
+                                                               par.flashvars += "&" + k + "=" + flashvarsObj[k];
+                                                       }
+                                                       else {
+                                                               par.flashvars = k + "=" + flashvarsObj[k];
+                                                       }
+                                               }
+                                       }
+                                       if (hasPlayerVersion(swfVersionStr)) { // create SWF
+                                               var obj = createSWF(att, par, replaceElemIdStr);
+                                               if (att.id == replaceElemIdStr) {
+                                                       setVisibility(replaceElemIdStr, true);
+                                               }
+                                               callbackObj.success = true;
+                                               callbackObj.ref = obj;
+                                       }
+                                       else if (xiSwfUrlStr && canExpressInstall()) { // show Adobe Express Install
+                                               att.data = xiSwfUrlStr;
+                                               showExpressInstall(att, par, replaceElemIdStr, callbackFn);
+                                               return;
+                                       }
+                                       else { // show alternative content
+                                               setVisibility(replaceElemIdStr, true);
+                                       }
+                                       if (callbackFn) { callbackFn(callbackObj); }
+                               });
+                       }
+                       else if (callbackFn) { callbackFn(callbackObj); }
+               },
+               
+               switchOffAutoHideShow: function() {
+                       autoHideShow = false;
+               },
+               
+               ua: ua,
+               
+               getFlashPlayerVersion: function() {
+                       return { major:ua.pv[0], minor:ua.pv[1], release:ua.pv[2] };
+               },
+               
+               hasFlashPlayerVersion: hasPlayerVersion,
+               
+               createSWF: function(attObj, parObj, replaceElemIdStr) {
+                       if (ua.w3) {
+                               return createSWF(attObj, parObj, replaceElemIdStr);
+                       }
+                       else {
+                               return undefined;
+                       }
+               },
+               
+               showExpressInstall: function(att, par, replaceElemIdStr, callbackFn) {
+                       if (ua.w3 && canExpressInstall()) {
+                               showExpressInstall(att, par, replaceElemIdStr, callbackFn);
+                       }
+               },
+               
+               removeSWF: function(objElemIdStr) {
+                       if (ua.w3) {
+                               removeSWF(objElemIdStr);
+                       }
+               },
+               
+               createCSS: function(selStr, declStr, mediaStr, newStyleBoolean) {
+                       if (ua.w3) {
+                               createCSS(selStr, declStr, mediaStr, newStyleBoolean);
+                       }
+               },
+               
+               addDomLoadEvent: addDomLoadEvent,
+               
+               addLoadEvent: addLoadEvent,
+               
+               getQueryParamValue: function(param) {
+                       var q = doc.location.search || doc.location.hash;
+                       if (q) {
+                               if (/\?/.test(q)) { q = q.split("?")[1]; } // strip question mark
+                               if (param == null) {
+                                       return urlEncodeIfNecessary(q);
+                               }
+                               var pairs = q.split("&");
+                               for (var i = 0; i < pairs.length; i++) {
+                                       if (pairs[i].substring(0, pairs[i].indexOf("=")) == param) {
+                                               return urlEncodeIfNecessary(pairs[i].substring((pairs[i].indexOf("=") + 1)));
+                                       }
+                               }
+                       }
+                       return "";
+               },
+               
+               // For internal usage only
+               expressInstallCallback: function() {
+                       if (isExpressInstallActive) {
+                               var obj = getElementById(EXPRESS_INSTALL_ID);
+                               if (obj && storedAltContent) {
+                                       obj.parentNode.replaceChild(storedAltContent, obj);
+                                       if (storedAltContentId) {
+                                               setVisibility(storedAltContentId, true);
+                                               if (ua.ie && ua.win) { storedAltContent.style.display = "block"; }
+                                       }
+                                       if (storedCallbackFn) { storedCallbackFn(storedCallbackObj); }
+                               }
+                               isExpressInstallActive = false;
+                       } 
+               }
+       };
+}();
diff --git a/login/environment.php b/login/environment.php
new file mode 100644 (file)
index 0000000..cdbd32b
--- /dev/null
@@ -0,0 +1,16 @@
+<?php
+/* 
+ * This script can set environment variables in the current session
+ */
+
+require('../config.php');
+
+require_sesskey();
+
+if (!empty($SESSION)) {
+    if ($flashversion = optional_param('flashversion', false, PARAM_TEXT)) {   // eg 10.0.32
+        $SESSION->flashversion = $flashversion;
+    }
+}
+
+?>