Remove "More..." from info modal. Add current window location to OL problem contact...

[bookreader.git] / BookReaderIA / datanode / BookReaderGetTextWrapper.php

diff --git a/BookReaderIA/datanode/BookReaderGetTextWrapper.php b/BookReaderIA/datanode/BookReaderGetTextWrapper.php
index 6e70134..03d6367 100644 (file)
--- a/BookReaderIA/datanode/BookReaderGetTextWrapper.php
+++ b/BookReaderIA/datanode/BookReaderGetTextWrapper.php
@@ -21,9 +21,21 @@ This file is part of BookReader.
     The BookReader source is hosted at http://github.com/openlibrary/bookreader/
 */
 
-$env = 'LD_LIBRARY_PATH=/petabox/sw/lib/lxml/lib PYTHONPATH=/petabox/sw/lib/lxml/lib/python2.5/site-packages:$PYTHONPATH';
-$path=$_GET['path'];
-$page=$_GET['page'];
-passthru("$env python BookReaderGetText.py $path $page");
+//$env = 'LD_LIBRARY_PATH=/petabox/sw/lib/lxml/lib PYTHONPATH=/petabox/sw/lib/lxml/lib/python2.5/site-packages:$PYTHONPATH';
 
-?>
\ No newline at end of file
+checkPrivs($_GET['path']);
+
+$path     = escapeshellarg($_GET['path']);
+$page     = escapeshellarg($_GET['page']);
+$callback = escapeshellarg($_GET['callback']);
+
+header('Content-Type: application/javascript');
+passthru("python BookReaderGetText.py $path $page $callback");
+
+function checkPrivs($filename) {
+    if (!is_readable($filename)) {        
+        header('HTTP/1.1 403 Forbidden');
+        exit(0);
+    }
+}
+?>