<?php  //$id: $

/* For licensing terms, see /dokeos_license.txt */

/**
 * @package dokeos.glossary
 * @author Christian Fasanando, initial version
 * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University, Belgium, refactoring and tighter integration in Dokeos
 */

// name of the language file that needs to be included
$language_file = array('notebook');

// including the global dokeos file
require_once('../inc/global.inc.php');

// the section (tabs)
$this_section=SECTION_COURSES;

// notice for unauthorized people.
api_protect_course_script(true);

// including additional libraries
require_once (api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php');

// additional javascript
$htmlHeadXtra[] = javascript_notebook();

// setting the tool constants
$tool = TOOL_NOTEBOOK;

// displaying the header
Display::display_header(get_lang(ucfirst($tool)));

// tool introduction
Display::display_introduction_section(TOOL_NOTEBOOK,'left');

// action links
echo '<div class="actions">';
if (api_is_allowed_to_edit())
{
	echo '<a href="index.php?'.api_get_cidreq().'&action=addnote">'.Display::return_icon('filenew.gif',get_lang('NoteAddNew')).get_lang('NoteAddNew').'</a>';
}
echo '<a href="index.php?'.api_get_cidreq().'&action=changeview&view=creation_date">'.Display::return_icon('calendar_select.gif',get_lang('OrderByCreationDate')).get_lang('OrderByCreationDate').'</a>';
echo '<a href="index.php?'.api_get_cidreq().'&action=changeview&view=update_date">'.Display::return_icon('calendar_select.gif',get_lang('OrderByModificationDate')).get_lang('OrderByModificationDate').'</a>';
echo '<a href="index.php?'.api_get_cidreq().'&action=changeview&view=title">'.Display::return_icon('comment.gif',get_lang('OrderByTitle')).get_lang('OrderByTitle').'</a>';
echo '</div>';

// Action handling: Adding a note
if (isset($_GET['action']) && $_GET['action'] == 'addnote') 
{
	// initiate the object
	$form = new FormValidator('note','post', api_get_self().'?action='.Security::remove_XSS($_GET['action']));
	// settting the form elements
	$form->addElement('header', '', get_lang('NoteAddNew'));
	$form->addElement('text', 'note_title', get_lang('NoteTitle'));
	$form->addElement('html_editor', 'note_comment', get_lang('NoteComment'));
	$form->addElement('submit', 'SubmitNote', get_lang('Ok'));	
	
	// setting the rules
	$form->addRule('note_title', '<div class="required">'.get_lang('ThisFieldIsRequired'), 'required');	
	
	// The validation or display
	if ( $form->validate() ) 
	{
		$check = Security::check_token('post');	
		if ($check) 
		{
	   		$values = $form->exportValues();
	   		save_note($values);
		}
		Security::clear_token();
	} 
	else 
	{
		$token = Security::get_token();
		$form->addElement('hidden','sec_token');
		$form->setConstants(array('sec_token' => $token));		
		$form->display();
	}				
}

// Action handling: Editing a note
if (isset($_GET['action']) && $_GET['action'] == 'editnote' && is_numeric($_GET['notebook_id'])) 
{
	// initiate the object
	$form = new FormValidator('note','post', api_get_self().'?action='.Security::remove_XSS($_GET['action']).'&notebook_id='.Security::remove_XSS($_GET['notebook_id']));
	// settting the form elements
	$form->addElement('header', '', get_lang('NoteEdit'));
	$form->addElement('hidden', 'notebook_id');
	$form->addElement('text', 'note_title', get_lang('NoteTitle'));
	$form->addElement('html_editor', 'note_comment', get_lang('NoteComment'));
	$form->addElement('submit', 'SubmitNote', get_lang('Ok'));	
	
	// setting the defaults
	$defaults = get_note_information(Security::remove_XSS($_GET['notebook_id']));
	$form->setDefaults($defaults);
		
	// setting the rules
	$form->addRule('note_title', '<div class="required">'.get_lang('ThisFieldIsRequired'), 'required');	
		
	// The validation or display
	if ( $form->validate() ) 
	{
		$check = Security::check_token('post');	
		if ($check) 
		{
	   		$values = $form->exportValues();
	   		update_note($values);
		}
		Security::clear_token();
	} 
	else 
	{
		$token = Security::get_token();
		$form->addElement('hidden','sec_token');
		$form->setConstants(array('sec_token' => $token));		
		$form->display();
	}				
}

// Action handling: deleting a note
if (isset($_GET['action']) && $_GET['action'] == 'deletenote' && is_numeric($_GET['notebook_id'])) 
{
	delete_note(Security::remove_XSS($_GET['notebook_id']));
}

// Action handling: changing the view (sorting order)
if ($_GET['action'] == 'changeview' AND in_array($_GET['view'],array('creation_date','update_date', 'title')))
{
	$_SESSION['notebook_view'] = $_GET['view']; 
}

display_notes();

// footer
Display::display_footer();

/**
 * a little bit of javascript to display a prettier warning when deleting a note
 *
 * @return unknown
 * 
 * @author Patrick Cool <patrick.cool@ugent.be>, Ghent University, Belgium
 * @version januari 2009, dokeos 1.8.6
 */
function javascript_notebook() 
{
	return "<script type=\"text/javascript\">
			function confirmation (name)
			{
				if (confirm(\" ". get_lang("NoteConfirmDelete") ." \"+ name + \" ?\"))
					{return true;}
				else
					{return false;}
			}
			</script>";
}

/**
 * This functions stores the note in the database
 *
 * @param array $values
 * 
 * @author Christian Fasanando <christian.fasanando@dokeos.com>
 * @author Patrick Cool <patrick.cool@ugent.be>, Ghent University, Belgium
 * @version januari 2009, dokeos 1.8.6
 */
function save_note($values)
{
	// Database table definition
	$t_notebook = Database :: get_course_table(TABLE_NOTEBOOK);
	
	$sql = "INSERT INTO $t_notebook (user_id, course, session_id, title, description, creation_date, status)
			VALUES(
				'".Database::escape_string(api_get_user_id())."', 
				'".Database::escape_string(api_get_course_id())."',
				'".Database::escape_string($_SESSION['id_session'])."',
				'".Database::escape_string($values['note_title'])."',
				'".Database::escape_string($values['note_comment'])."',
				'".Database::escape_string(date('Y-m-d H:i:s'))."',
				'0')";
	$result = api_sql_query($sql, __FILE__, __LINE__);
	// display the feedback message
	Display::display_confirmation_message(get_lang('NoteAdded'));	
}

function get_note_information($notebook_id)
{
	// Database table definition
	$t_notebook = Database :: get_course_table(TABLE_NOTEBOOK);
	
	$sql = "SELECT 	notebook_id 		AS notebook_id, 
					title				AS note_title, 
					description 		AS note_comment
			   FROM $t_notebook
			   WHERE notebook_id = '".Database::escape_string($notebook_id)."' ";	
	$result = api_sql_query($sql, __FILE__, __LINE__);
	return Database::fetch_array($result);	
}

/**
 * This functions updates the note in the database
 *
 * @param array $values
 * 
 * @author Christian Fasanando <christian.fasanando@dokeos.com>
 * @author Patrick Cool <patrick.cool@ugent.be>, Ghent University, Belgium
 * @version januari 2009, dokeos 1.8.6
 */
function update_note($values)
{
	// Database table definition
	$t_notebook = Database :: get_course_table(TABLE_NOTEBOOK);
	
	$sql = "UPDATE $t_notebook SET
				user_id = '".Database::escape_string(api_get_user_id())."', 
				course = '".Database::escape_string(api_get_course_id())."',
				session_id = '".Database::escape_string($_SESSION['id_session'])."',
				title = '".Database::escape_string($values['note_title'])."',
				description = '".Database::escape_string($values['note_comment'])."',
				update_date = '".Database::escape_string(date('Y-m-d H:i:s'))."'
			WHERE notebook_id = '".Database::escape_string($values['notebook_id'])."'";
	$result = api_sql_query($sql, __FILE__, __LINE__);
	// display the feedback message
	Display::display_confirmation_message(get_lang('NoteUpdated'));	
}

function delete_note($notebook_id)
{
	// Database table definition
	$t_notebook = Database :: get_course_table(TABLE_NOTEBOOK);

	$sql = "DELETE FROM $t_notebook WHERE notebook_id='".Database::escape_string($notebook_id)."' AND user_id = '".Database::escape_string(api_get_user_id())."'";
	$result = api_sql_query($sql, __FILE__, __LINE__);	
	Display::display_confirmation_message(get_lang('NoteDeleted'));		
}

function display_notes()
{
	if (!in_array($_SESSION['notebook_view'],array('creation_date','update_date', 'title')))
	{
		$_SESSION['notebook_view'] = 'update_date';
	}
	
	// Database table definition
	$t_notebook = Database :: get_course_table(TABLE_NOTEBOOK);

	$sql = "SELECT * FROM $t_notebook WHERE user_id = '".Database::escape_string(api_get_user_id())."' ORDER BY ".$_SESSION['notebook_view']." ASC";
	$result = api_sql_query($sql, __FILE__, __LINE__);
	while ($row = Database::fetch_array($result))
	{
		echo '<div class="sectiontitle">';
		echo '<span style="float: right;"> ('.get_lang('CreationDate').': '.$row['creation_date'];
		if ($row['update_date'] <> '0000-00-00 00:00:00')
		{
			echo ', '.get_lang('UpdateDate').': '.$row['update_date'];
		}
		echo ')</span>';
		echo $row['title'];
		echo '</div>';
		echo '<div class="sectioncomment">'.$row['description'].'</div>';
		echo '<div>';
		echo '<a href="'.api_get_self().'?action=editnote&amp;notebook_id='.$row['notebook_id'].'">'.Display::return_icon('edit.gif', get_lang('Edit')).'</a>';
		echo '<a href="'.api_get_self().'?action=deletenote&amp;notebook_id='.$row['notebook_id'].'" onclick="return confirmation(\''.$row['title'].'\');">'.Display::return_icon('delete.gif', get_lang('Delete')).'</a>';
		echo '</div>';
	}
	return $return;	
}
?>