From f0202ae9a26a1838ce4df621751bdad06efa831f Mon Sep 17 00:00:00 2001
From: Petr Skoda <commits@skodak.org>
Date: Sun, 22 Apr 2012 17:17:27 +0200
Subject: [PATCH 1/2] MDL-30686 improve accuracy of qualified_me() by trying
 PAGE->url first

This should help SSL proxies and returning to current page after require_login().
---
 admin/tool/unittest/ex_reporter.php |  4 ++--
 lib/flickrlib.php                   |  3 +--
 lib/moodlelib.php                   | 19 ++++++++--------
 lib/navigationlib.php               |  2 +-
 lib/outputrenderers.php             |  1 +
 lib/setuplib.php                    |  4 ++--
 lib/tests/weblib_test.php           | 15 ++++++++++++-
 lib/weblib.php                      | 35 ++++++++++++++++++-----------
 mod/choice/view.php                 |  2 +-
 mod/forum/post.php                  |  4 ++--
 mod/forum/search.php                |  2 +-
 mod/forum/view.php                  |  2 +-
 mod/quiz/lib.php                    |  1 +
 report/participation/index.php      |  2 +-
 repository/filepicker.php           |  2 +-
 user/index.php                      |  2 +-
 16 files changed, 61 insertions(+), 39 deletions(-)

diff --git a/admin/tool/unittest/ex_reporter.php b/admin/tool/unittest/ex_reporter.php
index b7b296cc77a..01476d29329 100644
--- a/admin/tool/unittest/ex_reporter.php
+++ b/admin/tool/unittest/ex_reporter.php
@@ -147,11 +147,11 @@ class ExHtmlReporter extends HtmlReporter {
      * Private method. Used by printPass/Fail/Skip/Error.
      */
     function _paintPassFail($passorfail, $message, $stacktrace = null, $debuginfo = null) {
-        global $FULLME, $CFG, $OUTPUT;
+        global $CFG, $OUTPUT;
 
         echo $OUTPUT->box_start($passorfail . ' generalbox ');
 
-        $url = $this->_htmlEntities($this->_stripParameterFromUrl($FULLME, 'path'));
+        $url = $this->_htmlEntities($this->_stripParameterFromUrl(qualified_me(), 'path'));
         echo '<b class="', $passorfail, '">', $this->get_string($passorfail), '</b>: ';
         $breadcrumb = $this->getTestList();
         array_shift($breadcrumb);
diff --git a/lib/flickrlib.php b/lib/flickrlib.php
index 534cf35dadc..79b83ebdf32 100644
--- a/lib/flickrlib.php
+++ b/lib/flickrlib.php
@@ -240,12 +240,11 @@ class phpFlickr {
 
     function auth ($perms = "write", $remember_uri = true)
     {
-        global $FULLME;
         // Redirects to Flickr's authentication piece if there is no valid token.
         // If remember_uri is set to false, the callback script (included) will
         // redirect to its default page.
         if ($remember_uri) {
-            $redirect = $FULLME;
+            $redirect = qualified_me(); // TODO: this is not used, why?
         }
         $api_sig = md5($this->secret . "api_key" . $this->api_key . "perms" . $perms);
         $url = 'http://www.flickr.com/services/auth/?api_key=' . $this->api_key . "&perms=" .  $perms . '&api_sig='. $api_sig;
diff --git a/lib/moodlelib.php b/lib/moodlelib.php
index 90c1677f1ce..bb890e3f516 100644
--- a/lib/moodlelib.php
+++ b/lib/moodlelib.php
@@ -2646,7 +2646,7 @@ function get_login_url() {
  * @return mixed Void, exit, and die depending on path
  */
 function require_login($courseorid = NULL, $autologinguest = true, $cm = NULL, $setwantsurltome = true, $preventredirect = false) {
-    global $CFG, $SESSION, $USER, $FULLME, $PAGE, $SITE, $DB, $OUTPUT;
+    global $CFG, $SESSION, $USER, $PAGE, $SITE, $DB, $OUTPUT;
 
     // setup global $COURSE, themes, language and locale
     if (!empty($courseorid)) {
@@ -2710,8 +2710,7 @@ function require_login($courseorid = NULL, $autologinguest = true, $cm = NULL, $
             }
 
             if ($setwantsurltome) {
-                // TODO: switch to PAGE->url
-                $SESSION->wantsurl = $FULLME;
+                $SESSION->wantsurl = qualified_me();
             }
             if (!empty($_SERVER['HTTP_REFERER'])) {
                 $SESSION->fromurl  = $_SERVER['HTTP_REFERER'];
@@ -2735,7 +2734,7 @@ function require_login($courseorid = NULL, $autologinguest = true, $cm = NULL, $
         $userauth = get_auth_plugin($USER->auth);
         if ($userauth->can_change_password() and !$preventredirect) {
             if ($setwantsurltome) {
-                $SESSION->wantsurl = $FULLME;
+                $SESSION->wantsurl = qualified_me();
             }
             if ($changeurl = $userauth->change_password_url()) {
                 //use plugin custom url
@@ -2760,7 +2759,7 @@ function require_login($courseorid = NULL, $autologinguest = true, $cm = NULL, $
             throw new require_login_exception('User not fully set-up');
         }
         if ($setwantsurltome) {
-            $SESSION->wantsurl = $FULLME;
+            $SESSION->wantsurl = qualified_me();
         }
         redirect($CFG->wwwroot .'/user/edit.php?id='. $USER->id .'&amp;course='. SITEID);
     }
@@ -2782,7 +2781,7 @@ function require_login($courseorid = NULL, $autologinguest = true, $cm = NULL, $
                 throw new require_login_exception('Policy not agreed');
             }
             if ($setwantsurltome) {
-                $SESSION->wantsurl = $FULLME;
+                $SESSION->wantsurl = qualified_me();
             }
             redirect($CFG->wwwroot .'/user/policy.php');
         } else if (!empty($CFG->sitepolicyguest) and isguestuser()) {
@@ -2790,7 +2789,7 @@ function require_login($courseorid = NULL, $autologinguest = true, $cm = NULL, $
                 throw new require_login_exception('Policy not agreed');
             }
             if ($setwantsurltome) {
-                $SESSION->wantsurl = $FULLME;
+                $SESSION->wantsurl = qualified_me();
             }
             redirect($CFG->wwwroot .'/user/policy.php');
         }
@@ -2944,7 +2943,7 @@ function require_login($courseorid = NULL, $autologinguest = true, $cm = NULL, $
                 throw new require_login_exception('Not enrolled');
             }
             if ($setwantsurltome) {
-                $SESSION->wantsurl = $FULLME;
+                $SESSION->wantsurl = qualified_me();
             }
             redirect($CFG->wwwroot .'/enrol/index.php?id='. $course->id);
         }
@@ -5113,7 +5112,7 @@ function get_mailer($action='get') {
  */
 function email_to_user($user, $from, $subject, $messagetext, $messagehtml='', $attachment='', $attachname='', $usetrueaddress=true, $replyto='', $replytoname='', $wordwrapwidth=79) {
 
-    global $CFG, $FULLME;
+    global $CFG;
 
     if (empty($user) || empty($user->email)) {
         $nulluser = 'User is null or has no email';
@@ -5313,7 +5312,7 @@ function email_to_user($user, $from, $subject, $messagetext, $messagehtml='', $a
         }
         return true;
     } else {
-        add_to_log(SITEID, 'library', 'mailer', $FULLME, 'ERROR: '. $mail->ErrorInfo);
+        add_to_log(SITEID, 'library', 'mailer', qualified_me(), 'ERROR: '. $mail->ErrorInfo);
         if (CLI_SCRIPT) {
             mtrace('Error: lib/moodlelib.php email_to_user(): '.$mail->ErrorInfo);
         }
diff --git a/lib/navigationlib.php b/lib/navigationlib.php
index a2974c953aa..51b6efa16ed 100644
--- a/lib/navigationlib.php
+++ b/lib/navigationlib.php
@@ -3622,7 +3622,7 @@ class settings_navigation extends navigation_node {
      * @return navigation_node|false
      */
     protected function load_user_settings($courseid=SITEID) {
-        global $USER, $FULLME, $CFG;
+        global $USER, $CFG;
 
         if (isguestuser() || !isloggedin()) {
             return false;
diff --git a/lib/outputrenderers.php b/lib/outputrenderers.php
index f50ef94644b..bbcc8771745 100644
--- a/lib/outputrenderers.php
+++ b/lib/outputrenderers.php
@@ -471,6 +471,7 @@ class core_renderer extends renderer_base {
             $output .= '<div class="purgecaches"><a href="'.$CFG->wwwroot.'/admin/purgecaches.php?confirm=1&amp;sesskey='.sesskey().'">'.get_string('purgecaches', 'admin').'</a></div>';
         }
         if (!empty($CFG->debugvalidators)) {
+            // NOTE: this is not a nice hack, $PAGE->url is not always accurate and $FULLME neither, it is not a bug if it fails. --skodak
             $output .= '<div class="validators"><ul>
               <li><a href="http://validator.w3.org/check?verbose=1&amp;ss=1&amp;uri=' . urlencode(qualified_me()) . '">Validate HTML</a></li>
               <li><a href="http://www.contentquality.com/mynewtester/cynthia.exe?rptmode=-1&amp;url1=' . urlencode(qualified_me()) . '">Section 508 Check</a></li>
diff --git a/lib/setuplib.php b/lib/setuplib.php
index 5bc617b0b0b..3540fcef4e6 100644
--- a/lib/setuplib.php
+++ b/lib/setuplib.php
@@ -338,13 +338,13 @@ class file_serving_exception extends moodle_exception {
  * @return void -does not return. Terminates execution!
  */
 function default_exception_handler($ex) {
-    global $CFG, $DB, $OUTPUT, $USER, $FULLME, $SESSION;
+    global $CFG, $DB, $OUTPUT, $USER, $FULLME, $SESSION, $PAGE;
 
     // detect active db transactions, rollback and log as error
     abort_all_db_transactions();
 
     if (($ex instanceof required_capability_exception) && !CLI_SCRIPT && !AJAX_SCRIPT && !empty($CFG->autologinguests) && !empty($USER->autologinguest)) {
-        $SESSION->wantsurl = $FULLME;
+        $SESSION->wantsurl = qualified_me();
         redirect(get_login_url());
     }
 
diff --git a/lib/tests/weblib_test.php b/lib/tests/weblib_test.php
index d7524c29fb4..0452cf78514 100644
--- a/lib/tests/weblib_test.php
+++ b/lib/tests/weblib_test.php
@@ -33,7 +33,7 @@
 defined('MOODLE_INTERNAL') || die();
 
 
-class web_testcase extends basic_testcase {
+class web_testcase extends advanced_testcase {
 
     function test_format_string() {
         global $CFG;
@@ -184,4 +184,17 @@ class web_testcase extends basic_testcase {
         $this->assertEquals('lala xx', clean_text($text, FORMAT_MOODLE));
         $this->assertEquals('lala xx', clean_text($text, FORMAT_HTML));
     }
+
+    public function test_quolified_me() {
+        global $PAGE, $FULLME, $CFG;
+        $this->resetAfterTest();
+
+        $PAGE = new moodle_page();
+
+        $FULLME = $CFG->wwwroot.'/course/view.php?id=1&xx=yy';
+        $this->assertEquals($FULLME, qualified_me());
+
+        $PAGE->set_url('/course/view.php', array('id'=>1));
+        $this->assertEquals($CFG->wwwroot.'/course/view.php?id=1', qualified_me());
+    }
 }
diff --git a/lib/weblib.php b/lib/weblib.php
index 9d56482e5b6..52f107e242f 100644
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -187,7 +187,6 @@ function get_referer($stripquery=true) {
  * server, and the way PHP is compiled (ie. as a CGI, module, ISAPI, etc.)
  * <b>NOTE:</b> This function returns false if the global variables needed are not set.
  *
- * @global string
  * @return mixed String, or false if the global variables needed are not set
  */
 function me() {
@@ -196,22 +195,32 @@ function me() {
 }
 
 /**
- * Returns the name of the current script, WITH the full URL.
+ * Guesses the full URL of the current script.
  *
- * This function is necessary because PHP_SELF and REQUEST_URI and SCRIPT_NAME
- * return different things depending on a lot of things like your OS, Web
- * server, and the way PHP is compiled (ie. as a CGI, module, ISAPI, etc.
- * <b>NOTE:</b> This function returns false if the global variables needed are not set.
+ * This function is using $PAGE->url, but may fall back to $FULLME which
+ * is constructed from  PHP_SELF and REQUEST_URI or SCRIPT_NAME
  *
- * Like {@link me()} but returns a full URL
- * @see me()
- *
- * @global string
- * @return mixed String, or false if the global variables needed are not set
+ * @return mixed full page URL string or false if unknown
  */
 function qualified_me() {
-    global $FULLME;
-    return $FULLME;
+    global $FULLME, $PAGE, $CFG;
+
+    if (isset($PAGE) and $PAGE->has_set_url()) {
+        // this is the only recommended way to find out current page
+        return $PAGE->url->out(false);
+
+    } else {
+        if ($FULLME === null) {
+            // CLI script most probably
+            return false;
+        }
+        if (!empty($CFG->sslproxy)) {
+            // return only https links when using SSL proxy
+            return preg_replace('/^http:/', 'https:', $FULLME, 1);
+        } else {
+            return $FULLME;
+        }
+    }
 }
 
 /**
diff --git a/mod/choice/view.php b/mod/choice/view.php
index d09728647de..1a222fc87c7 100644
--- a/mod/choice/view.php
+++ b/mod/choice/view.php
@@ -141,7 +141,7 @@
                          get_login_url(), new moodle_url('/course/view.php', array('id'=>$course->id)));
         } else if (!is_enrolled($context)) {
             // Only people enrolled can make a choice
-            $SESSION->wantsurl = $FULLME;
+            $SESSION->wantsurl = qualified_me();
             $SESSION->enrolcancel = (!empty($_SERVER['HTTP_REFERER'])) ? $_SERVER['HTTP_REFERER'] : '';
 
             $coursecontext = get_context_instance(CONTEXT_COURSE, $course->id);
diff --git a/mod/forum/post.php b/mod/forum/post.php
index f3fd922de4a..9bf970c0818 100644
--- a/mod/forum/post.php
+++ b/mod/forum/post.php
@@ -113,7 +113,7 @@ if (!empty($forum)) {      // User is starting a new discussion in a forum
         if (!isguestuser()) {
             if (!is_enrolled($coursecontext)) {
                 if (enrol_selfenrol_available($course->id)) {
-                    $SESSION->wantsurl = $FULLME;
+                    $SESSION->wantsurl = qualified_me();
                     $SESSION->enrolcancel = $_SERVER['HTTP_REFERER'];
                     redirect($CFG->wwwroot.'/enrol/index.php?id='.$course->id, get_string('youneedtoenrol'));
                 }
@@ -181,7 +181,7 @@ if (!empty($forum)) {      // User is starting a new discussion in a forum
     if (! forum_user_can_post($forum, $discussion, $USER, $cm, $course, $modcontext)) {
         if (!isguestuser()) {
             if (!is_enrolled($coursecontext)) {  // User is a guest here!
-                $SESSION->wantsurl = $FULLME;
+                $SESSION->wantsurl = qualified_me();
                 $SESSION->enrolcancel = $_SERVER['HTTP_REFERER'];
                 redirect($CFG->wwwroot.'/enrol/index.php?id='.$course->id, get_string('youneedtoenrol'));
             }
diff --git a/mod/forum/search.php b/mod/forum/search.php
index 9913facfd7a..daa7bdc194a 100644
--- a/mod/forum/search.php
+++ b/mod/forum/search.php
@@ -64,7 +64,7 @@ if ($timetorestrict) {
 }
 
 $PAGE->set_pagelayout('standard');
-$PAGE->set_url($FULLME);
+$PAGE->set_url($FULLME); //TODO: this is very sloppy --skodak
 
 if (empty($search)) {   // Check the other parameters instead
     if (!empty($words)) {
diff --git a/mod/forum/view.php b/mod/forum/view.php
index fa1bdb46920..8601fe1bf8a 100644
--- a/mod/forum/view.php
+++ b/mod/forum/view.php
@@ -133,7 +133,7 @@
         add_to_log($course->id, "forum", "view forum", "view.php?f=$forum->id", "$forum->id");
     }
 
-    $SESSION->fromdiscussion = $FULLME;   // Return here if we post or set subscription etc
+    $SESSION->fromdiscussion = qualified_me();   // Return here if we post or set subscription etc
 
 
 /// Print settings and things across the top
diff --git a/mod/quiz/lib.php b/mod/quiz/lib.php
index 004487fea62..8af83d82dec 100644
--- a/mod/quiz/lib.php
+++ b/mod/quiz/lib.php
@@ -667,6 +667,7 @@ function quiz_grade_item_update($quiz, $grades = null) {
     if (!empty($gradebook_grades->items)) {
         $grade_item = $gradebook_grades->items[0];
         if ($grade_item->locked) {
+            // NOTE: this is an extremely nasty hack! It is not a bug if this confirmation fails badly.  --skodak
             $confirm_regrade = optional_param('confirm_regrade', 0, PARAM_INT);
             if (!$confirm_regrade) {
                 $message = get_string('gradeitemislocked', 'grades');
diff --git a/report/participation/index.php b/report/participation/index.php
index f5246b0099a..50c5b6e6c1c 100644
--- a/report/participation/index.php
+++ b/report/participation/index.php
@@ -283,7 +283,7 @@ if (!empty($instanceid) && !empty($roleid)) {
     echo '<form action="'.$CFG->wwwroot.'/user/action_redir.php" method="post" id="studentsform">'."\n";
     echo '<div>'."\n";
     echo '<input type="hidden" name="id" value="'.$id.'" />'."\n";
-    echo '<input type="hidden" name="returnto" value="'. s($FULLME) .'" />'."\n";
+    echo '<input type="hidden" name="returnto" value="'. s($PAGE->url) .'" />'."\n";
     echo '<input type="hidden" name="sesskey" value="'.sesskey().'" />'."\n";
 
     foreach ($users as $u) {
diff --git a/repository/filepicker.php b/repository/filepicker.php
index c00c248bfce..853111ccc14 100644
--- a/repository/filepicker.php
+++ b/repository/filepicker.php
@@ -316,7 +316,7 @@ case 'download':
 
 case 'confirm':
     echo $OUTPUT->header();
-    echo '<div><a href="'.me().'">'.get_string('back', 'repository').'</a></div>';
+    echo '<div><a href="'.s($PAGE->url(false)).'">'.get_string('back', 'repository').'</a></div>';
     echo '<img src="'.$thumbnail.'" />';
     echo '<form method="post">';
     echo '<table>';
diff --git a/user/index.php b/user/index.php
index 08a5196821e..8ea84f93f4f 100644
--- a/user/index.php
+++ b/user/index.php
@@ -525,7 +525,7 @@
         echo '<form action="action_redir.php" method="post" id="participantsform">';
         echo '<div>';
         echo '<input type="hidden" name="sesskey" value="'.sesskey().'" />';
-        echo '<input type="hidden" name="returnto" value="'.s(me()).'" />';
+        echo '<input type="hidden" name="returnto" value="'.s($PAGE->url->out(false)).'" />';
     }
 
     if ($mode === MODE_USERDETAILS) {    // Print simple listing

From bd319d12c296eadee183e117a39a08e2bed5c145 Mon Sep 17 00:00:00 2001
From: Petr Skoda <commits@skodak.org>
Date: Mon, 23 Apr 2012 08:20:17 +0200
Subject: [PATCH 2/2] MDL-30686 fix typo

Thanks Dan Poltawski!
---
 lib/tests/weblib_test.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/tests/weblib_test.php b/lib/tests/weblib_test.php
index 0452cf78514..f3e315d5f37 100644
--- a/lib/tests/weblib_test.php
+++ b/lib/tests/weblib_test.php
@@ -185,7 +185,7 @@ class web_testcase extends advanced_testcase {
         $this->assertEquals('lala xx', clean_text($text, FORMAT_HTML));
     }
 
-    public function test_quolified_me() {
+    public function test_qualified_me() {
         global $PAGE, $FULLME, $CFG;
         $this->resetAfterTest();