user.php 38 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This script displays a list of the users of the current course.
  5. * Course admins can change user permissions, subscribe and unsubscribe users...
  6. *
  7. * - show users registered in courses;
  8. *
  9. * @author Roan Embrechts
  10. * @author Julio Montoya Armas, Several fixes
  11. * @package chamilo.user
  12. */
  13. $use_anonymous = true;
  14. require_once '../inc/global.inc.php';
  15. $current_course_tool = TOOL_USER;
  16. $this_section = SECTION_COURSES;
  17. // notice for unauthorized people.
  18. api_protect_course_script(true);
  19. if (!api_is_platform_admin(true)) {
  20. if (!api_is_course_admin() && !api_is_coach()) {
  21. if (api_get_course_setting('allow_user_view_user_list') == 0) {
  22. api_not_allowed(true);
  23. }
  24. }
  25. }
  26. /* Constants and variables */
  27. $course_code = Database::escape_string(api_get_course_id());
  28. $sessionId = api_get_session_id();
  29. $is_western_name_order = api_is_western_name_order();
  30. $sort_by_first_name = api_sort_by_first_name();
  31. $course_info = api_get_course_info();
  32. $user_id = api_get_user_id();
  33. $_user = api_get_user_info();
  34. $courseCode = $course_info['code'];
  35. $courseId = $course_info['real_id'];
  36. $type = isset($_REQUEST['type']) ? intval($_REQUEST['type']) : STUDENT;
  37. //Can't auto unregister from a session
  38. if (!empty($sessionId)) {
  39. $course_info['unsubscribe'] = 0;
  40. }
  41. /* Unregistering a user section */
  42. if (api_is_allowed_to_edit(null, true)) {
  43. if (isset($_POST['action'])) {
  44. switch ($_POST['action']) {
  45. case 'unsubscribe':
  46. // Make sure we don't unsubscribe current user from the course
  47. if (is_array($_POST['user'])) {
  48. $user_ids = array_diff($_POST['user'], array($user_id));
  49. if (count($user_ids) > 0) {
  50. CourseManager::unsubscribe_user($user_ids, $courseCode);
  51. Display::addFlash(
  52. Display::return_message(get_lang('UsersUnsubscribed'))
  53. );
  54. }
  55. }
  56. }
  57. }
  58. }
  59. // Getting extra fields that have the filter option "on"
  60. $extraField = new ExtraField('user');
  61. $extraFields = $extraField->get_all(array('filter = ?' => 1));
  62. $user_image_pdf_size = 80;
  63. if (api_is_allowed_to_edit(null, true)) {
  64. if (isset($_GET['action'])) {
  65. switch ($_GET['action']) {
  66. case 'set_tutor':
  67. $userId = isset($_GET['user_id']) ? intval($_GET['user_id']) : null;
  68. $isTutor = isset($_GET['is_tutor']) ? intval($_GET['is_tutor']) : 0;
  69. $userInfo = api_get_user_info($userId);
  70. if (!empty($userId)) {
  71. if (!$sessionId) {
  72. if ($userInfo['status'] != INVITEE) {
  73. CourseManager::updateUserCourseTutor(
  74. $userId,
  75. $courseId,
  76. $isTutor
  77. );
  78. } else {
  79. Display::addFlash(Display::return_message(get_lang('InviteesCantBeTutors'), 'error'));
  80. }
  81. }
  82. }
  83. break;
  84. case 'export':
  85. $table_course_user = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  86. $table_users = Database::get_main_table(TABLE_MAIN_USER);
  87. $is_western_name_order = api_is_western_name_order();
  88. $data = array();
  89. $a_users = array();
  90. $current_access_url_id = api_get_current_access_url_id();
  91. $extra_fields = UserManager::get_extra_user_data(
  92. api_get_user_id(),
  93. false,
  94. false,
  95. false,
  96. true
  97. );
  98. $extra_fields = array_keys($extra_fields);
  99. $select_email_condition = '';
  100. if (api_get_setting('show_email_addresses') == 'true') {
  101. $select_email_condition = ' user.email, ';
  102. if ($sort_by_first_name) {
  103. $a_users[0] = array(
  104. 'id',
  105. get_lang('FirstName'),
  106. get_lang('LastName'),
  107. get_lang('Username'),
  108. get_lang('Email'),
  109. get_lang('Phone'),
  110. get_lang('OfficialCode'),
  111. get_lang('Active')
  112. );
  113. } else {
  114. $a_users[0] = array(
  115. 'id',
  116. get_lang('LastName'),
  117. get_lang('FirstName'),
  118. get_lang('Username'),
  119. get_lang('Email'),
  120. get_lang('Phone'),
  121. get_lang('OfficialCode'),
  122. get_lang('Active')
  123. );
  124. }
  125. } else {
  126. if ($sort_by_first_name) {
  127. $a_users[0] = array(
  128. 'id',
  129. get_lang('FirstName'),
  130. get_lang('LastName'),
  131. get_lang('Username'),
  132. get_lang('Phone'),
  133. get_lang('OfficialCode'),
  134. get_lang('Active')
  135. );
  136. } else {
  137. $a_users[0] = array(
  138. 'id',
  139. get_lang('LastName'),
  140. get_lang('FirstName'),
  141. get_lang('Username'),
  142. get_lang('Phone'),
  143. get_lang('OfficialCode'),
  144. get_lang('Active')
  145. );
  146. }
  147. }
  148. $legal = '';
  149. if (isset($course_info['activate_legal']) AND $course_info['activate_legal'] == 1) {
  150. $legal = ', legal_agreement';
  151. $a_users[0][] = get_lang('LegalAgreementAccepted');
  152. }
  153. if ($_GET['format'] == 'pdf') {
  154. $select_email_condition = ' user.email, ';
  155. if ($is_western_name_order) {
  156. $a_users[0] = array(
  157. '#',
  158. get_lang('UserPicture'),
  159. get_lang('OfficialCode'),
  160. get_lang('FirstName') . ', ' . get_lang('LastName'),
  161. get_lang('Email'),
  162. get_lang('Phone')
  163. );
  164. } else {
  165. $a_users[0] = array(
  166. '#',
  167. get_lang('UserPicture'),
  168. get_lang('OfficialCode'),
  169. get_lang('LastName') . ', ' . get_lang('FirstName'),
  170. get_lang('Email'),
  171. get_lang('Phone')
  172. );
  173. }
  174. }
  175. $a_users[0] = array_merge($a_users[0], $extra_fields);
  176. // users subscribed to the course through a session.
  177. if (api_get_session_id()) {
  178. $table_session_course_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  179. $sql = "SELECT DISTINCT
  180. user.user_id, ".($is_western_name_order ? "user.firstname, user.lastname" : "user.lastname, user.firstname").",
  181. user.username,
  182. $select_email_condition
  183. phone,
  184. user.official_code,
  185. active
  186. $legal
  187. FROM $table_session_course_user as session_course_user,
  188. $table_users as user ";
  189. if (api_is_multiple_url_enabled()) {
  190. $sql .= ' , '.Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER).' au ';
  191. }
  192. $sql .=" WHERE c_id = '$courseId' AND session_course_user.user_id = user.user_id ";
  193. $sql .= ' AND session_id = '.$sessionId;
  194. if (api_is_multiple_url_enabled()) {
  195. $sql .= " AND user.user_id = au.user_id AND access_url_id = $current_access_url_id ";
  196. }
  197. // only users no coaches/teachers
  198. if ($type == COURSEMANAGER) {
  199. $sql .= " AND session_course_user.status = 2 ";
  200. } else {
  201. $sql .= " AND session_course_user.status = 0 ";
  202. }
  203. $sql .= $sort_by_first_name ? ' ORDER BY user.firstname, user.lastname' : ' ORDER BY user.lastname, user.firstname';
  204. $rs = Database::query($sql);
  205. $counter = 1;
  206. while ($user = Database:: fetch_array($rs, 'ASSOC')) {
  207. if (isset($user['legal_agreement'])) {
  208. if ($user['legal_agreement'] == 1) {
  209. $user['legal_agreement'] = get_lang('Yes');
  210. } else {
  211. $user['legal_agreement'] = get_lang('No');
  212. }
  213. }
  214. $extra_fields = UserManager::get_extra_user_data(
  215. $user['user_id'],
  216. false,
  217. false,
  218. false,
  219. true
  220. );
  221. if (!empty($extra_fields)) {
  222. foreach($extra_fields as $key => $extra_value) {
  223. $user[$key] = $extra_value;
  224. }
  225. }
  226. $data[] = $user;
  227. if ($_GET['format'] == 'pdf') {
  228. $user_info = api_get_user_info($user['user_id']);
  229. $user_image = '<img src="'.$user_info['avatar'].'" width ="'.$user_image_pdf_size.'px" />';
  230. if ($is_western_name_order) {
  231. $user_pdf = array(
  232. $counter,
  233. $user_image,
  234. $user['official_code'],
  235. $user['firstname'] . ', ' . $user['lastname'],
  236. $user['email'],
  237. $user['phone']
  238. );
  239. } else {
  240. $user_pdf = array(
  241. $counter,
  242. $user_image,
  243. $user['official_code'],
  244. $user['lastname'] . ', ' . $user['firstname'],
  245. $user['email'],
  246. $user['phone']
  247. );
  248. }
  249. $a_users[] = $user_pdf;
  250. } else {
  251. $a_users[] = $user;
  252. }
  253. $counter++;
  254. }
  255. }
  256. if ($sessionId == 0) {
  257. // users directly subscribed to the course
  258. $table_course_user = Database :: get_main_table(TABLE_MAIN_COURSE_USER);
  259. $sql = "SELECT DISTINCT
  260. user.user_id, ".($is_western_name_order ? "user.firstname, user.lastname" : "user.lastname, user.firstname").",
  261. user.username,
  262. $select_email_condition
  263. phone,
  264. user.official_code,
  265. active $legal
  266. FROM $table_course_user as course_user, $table_users as user ";
  267. if (api_is_multiple_url_enabled()) {
  268. $sql .= ' , '.Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER).' au ';
  269. }
  270. $sql .= " WHERE
  271. c_id = '$courseId' AND
  272. course_user.relation_type<>".COURSE_RELATION_TYPE_RRHH." AND
  273. course_user.user_id = user.user_id ";
  274. if (api_is_multiple_url_enabled()) {
  275. $sql .= " AND user.user_id = au.user_id AND access_url_id = $current_access_url_id ";
  276. }
  277. // only users no teachers/coaches
  278. if ($type == COURSEMANAGER) {
  279. $sql .= " AND course_user.status = 1 ";
  280. } else {
  281. $sql .= " AND course_user.status = 5 ";
  282. }
  283. $sql .= ($sort_by_first_name ? " ORDER BY user.firstname, user.lastname" : " ORDER BY user.lastname, user.firstname");
  284. $rs = Database::query($sql);
  285. $counter = 1;
  286. while ($user = Database::fetch_array($rs, 'ASSOC')) {
  287. if (isset($user['legal_agreement'])) {
  288. if ($user['legal_agreement'] == 1) {
  289. $user['legal_agreement'] = get_lang('Yes');
  290. } else {
  291. $user['legal_agreement'] = get_lang('No');
  292. }
  293. }
  294. $extra_fields = UserManager::get_extra_user_data(
  295. $user['user_id'],
  296. false,
  297. false,
  298. false,
  299. true
  300. );
  301. if (!empty($extra_fields)) {
  302. foreach ($extra_fields as $key => $extra_value) {
  303. $user[$key] = $extra_value;
  304. }
  305. }
  306. if ($_GET['format'] == 'pdf') {
  307. $user_info = api_get_user_info($user['user_id']);
  308. $user_image = '<img src="'.$user_info['avatar'].'" width ="'.$user_image_pdf_size.'px" />';
  309. if ($is_western_name_order) {
  310. $user_pdf = array(
  311. $counter,
  312. $user_image,
  313. $user['official_code'],
  314. $user['firstname'] . ', ' . $user['lastname'],
  315. $user['email'],
  316. $user['phone']
  317. );
  318. } else {
  319. $user_pdf = array(
  320. $counter,
  321. $user_image,
  322. $user['official_code'],
  323. $user['lastname'] . ', ' . $user['firstname'],
  324. $user['email'],
  325. $user['phone']
  326. );
  327. }
  328. $a_users[] = $user_pdf;
  329. } else {
  330. $a_users[] = $user;
  331. }
  332. $data[] = $user;
  333. $counter++;
  334. }
  335. }
  336. $fileName = get_lang('StudentList');
  337. $pdfTitle = get_lang('StudentList');
  338. if ($type == COURSEMANAGER) {
  339. $fileName = get_lang('Teachers');
  340. $pdfTitle = get_lang('Teachers');
  341. }
  342. switch ($_GET['format']) {
  343. case 'csv' :
  344. Export::arrayToCsv($a_users, $fileName);
  345. exit;
  346. case 'xls' :
  347. Export::arrayToXls($a_users, $fileName);
  348. exit;
  349. case 'pdf' :
  350. $header_attributes = array(
  351. array('style' => 'width:10px'),
  352. array('style' => 'width:30px'),
  353. array('style' => 'width:50px'),
  354. array('style' => 'width:500px'),
  355. );
  356. $params = array(
  357. 'add_signatures' => false,
  358. 'filename' => $fileName,
  359. 'pdf_title' => $pdfTitle,
  360. 'header_attributes' => $header_attributes
  361. );
  362. Export::export_table_pdf($a_users, $params);
  363. exit;
  364. }
  365. }
  366. }
  367. } // end if allowed to edit
  368. if (api_is_allowed_to_edit(null, true)) {
  369. // Unregister user from course
  370. if (isset($_REQUEST['unregister']) && $_REQUEST['unregister']) {
  371. if (isset($_GET['user_id']) && is_numeric($_GET['user_id']) &&
  372. ($_GET['user_id'] != $_user['user_id'] || api_is_platform_admin())
  373. ) {
  374. $user_id = intval($_GET['user_id']);
  375. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  376. $tbl_session_rel_course = Database::get_main_table(TABLE_MAIN_SESSION_COURSE);
  377. $tbl_session_rel_user = Database::get_main_table(TABLE_MAIN_SESSION_USER);
  378. $sql = 'SELECT user.user_id
  379. FROM '.$tbl_user.' user
  380. INNER JOIN '.$tbl_session_rel_user.' reluser
  381. ON user.user_id = reluser.user_id AND reluser.relation_type<>'.SESSION_RELATION_TYPE_RRHH.'
  382. INNER JOIN '.$tbl_session_rel_course.' rel_course
  383. ON rel_course.session_id = reluser.session_id
  384. WHERE
  385. user.user_id = "'.$user_id.'" AND
  386. rel_course.c_id = "'.$courseId.'"';
  387. $result = Database::query($sql);
  388. $row = Database::fetch_array($result, 'ASSOC');
  389. if ($row['user_id'] == $user_id || $row['user_id'] == "") {
  390. CourseManager::unsubscribe_user($_GET['user_id'], $courseCode);
  391. Display::addFlash(Display::return_message(get_lang('UserUnsubscribed')));
  392. } else {
  393. Display::addFlash(Display::return_message(get_lang('ThisStudentIsSubscribeThroughASession')));
  394. }
  395. }
  396. }
  397. } else {
  398. // If student can unsubscribe
  399. if (isset($_REQUEST['unregister']) && $_REQUEST['unregister'] == 'yes') {
  400. if ($course_info['unsubscribe'] == 1) {
  401. $user_id = api_get_user_id();
  402. CourseManager::unsubscribe_user($user_id, $course_info['code']);
  403. header('Location: '.api_get_path(WEB_PATH).'user_portal.php');
  404. exit;
  405. }
  406. }
  407. }
  408. // $is_allowed_in_course is first defined in local.inc.php
  409. if (!$is_allowed_in_course) {
  410. api_not_allowed(true);
  411. }
  412. // Statistics
  413. Event::event_access_tool(TOOL_USER);
  414. /**
  415. * Get the users to display on the current page.
  416. */
  417. function get_number_of_users()
  418. {
  419. $counter = 0;
  420. $sessionId = api_get_session_id();
  421. $courseCode = api_get_course_id();
  422. $active = isset($_GET['active']) ? $_GET['active'] : null;
  423. if (!empty($sessionId)) {
  424. $a_course_users = CourseManager::get_user_list_from_course_code(
  425. $courseCode,
  426. $sessionId,
  427. null,
  428. null,
  429. null,
  430. null,
  431. false,
  432. false,
  433. null,
  434. null,
  435. null,
  436. $active
  437. );
  438. } else {
  439. $a_course_users = CourseManager::get_user_list_from_course_code(
  440. $courseCode,
  441. 0,
  442. null,
  443. null,
  444. null,
  445. null,
  446. false,
  447. false,
  448. null,
  449. null,
  450. null,
  451. $active
  452. );
  453. }
  454. foreach ($a_course_users as $o_course_user) {
  455. if ((isset($_GET['keyword']) &&
  456. searchUserKeyword(
  457. $o_course_user['firstname'],
  458. $o_course_user['lastname'],
  459. $o_course_user['username'],
  460. $o_course_user['official_code'],
  461. $_GET['keyword']
  462. )
  463. ) || !isset($_GET['keyword']) || empty($_GET['keyword'])
  464. ) {
  465. $counter++;
  466. }
  467. }
  468. return $counter;
  469. }
  470. /**
  471. * @param string $firstname
  472. * @param string $lastname
  473. * @param string $username
  474. * @param string $official_code
  475. * @param $keyword
  476. * @return bool
  477. */
  478. function searchUserKeyword($firstname, $lastname, $username, $official_code, $keyword) {
  479. if (
  480. api_strripos($firstname, $keyword) !== false ||
  481. api_strripos($lastname, $keyword) !== false ||
  482. api_strripos($username, $keyword) !== false ||
  483. api_strripos($official_code, $keyword) !== false
  484. ) {
  485. return true;
  486. } else {
  487. return false;
  488. }
  489. }
  490. /**
  491. * Get the users to display on the current page.
  492. */
  493. function get_user_data($from, $number_of_items, $column, $direction)
  494. {
  495. global $is_western_name_order;
  496. global $extraFields;
  497. $type = isset($_REQUEST['type']) ? intval($_REQUEST['type']) : STUDENT;
  498. $course_info = api_get_course_info();
  499. $sessionId = api_get_session_id();
  500. $course_code = $course_info['code'];
  501. $a_users = array();
  502. $limit = null;
  503. // limit
  504. if (!isset($_GET['keyword']) || empty($_GET['keyword'])) {
  505. $limit = 'LIMIT '.intval($from).','.intval($number_of_items);
  506. }
  507. if (!in_array($direction, array('ASC', 'DESC'))) {
  508. $direction = 'ASC';
  509. }
  510. switch ($column) {
  511. case 2: //official code
  512. $order_by = 'ORDER BY user.official_code '.$direction;
  513. break;
  514. case 3:
  515. if ($is_western_name_order) {
  516. $order_by = 'ORDER BY user.firstname '.$direction.', user.lastname '.$direction;
  517. } else {
  518. $order_by = 'ORDER BY user.lastname '.$direction.', user.firstname '.$direction;
  519. }
  520. break;
  521. case 4:
  522. if ($is_western_name_order) {
  523. $order_by = 'ORDER BY user.lastname '.$direction.', user.firstname '.$direction;
  524. } else {
  525. $order_by = 'ORDER BY user.firstname '.$direction.', user.lastname '.$direction;
  526. }
  527. break;
  528. case 5: //username
  529. $order_by = 'ORDER BY user.username '.$direction;
  530. break;
  531. default:
  532. if ($is_western_name_order) {
  533. $order_by = 'ORDER BY user.lastname '.$direction.', user.firstname '.$direction;
  534. } else {
  535. $order_by = 'ORDER BY user.firstname '.$direction.', user.lastname '.$direction;
  536. }
  537. break;
  538. }
  539. $active = isset($_GET['active']) ? $_GET['active'] : null;
  540. if (empty($sessionId)) {
  541. $status = $type;
  542. } else {
  543. if ($type == COURSEMANAGER) {
  544. $status = 2;
  545. } else {
  546. $status = 0;
  547. }
  548. }
  549. $a_course_users = CourseManager :: get_user_list_from_course_code(
  550. $course_code,
  551. $sessionId,
  552. $limit,
  553. $order_by,
  554. $status,
  555. null,
  556. false,
  557. false,
  558. null,
  559. array(),
  560. array(),
  561. $active
  562. );
  563. foreach ($a_course_users as $user_id => $o_course_user) {
  564. if ((
  565. isset($_GET['keyword']) &&
  566. searchUserKeyword(
  567. $o_course_user['firstname'],
  568. $o_course_user['lastname'],
  569. $o_course_user['username'],
  570. $o_course_user['official_code'],
  571. $_GET['keyword'])
  572. ) || !isset($_GET['keyword']) || empty($_GET['keyword'])
  573. ) {
  574. $groupsNameList = GroupManager::getAllGroupPerUserSubscription($user_id);
  575. $groupsNameListParsed = [];
  576. if (!empty($groupsNameList)) {
  577. $groupsNameListParsed = array_column($groupsNameList, 'name');
  578. }
  579. $temp = array();
  580. if (api_is_allowed_to_edit(null, true)) {
  581. $userInfo = api_get_user_info($user_id);
  582. $photo = Display::img($userInfo['avatar_small'], $userInfo['complete_name'], [], false);
  583. $temp[] = $user_id;
  584. $temp[] = $photo;
  585. $temp[] = $o_course_user['official_code'];
  586. if ($is_western_name_order) {
  587. $temp[] = $o_course_user['firstname'];
  588. $temp[] = $o_course_user['lastname'];
  589. } else {
  590. $temp[] = $o_course_user['lastname'];
  591. $temp[] = $o_course_user['firstname'];
  592. }
  593. $temp[] = $o_course_user['username'];
  594. // Groups.
  595. $temp[] = implode(', ', $groupsNameListParsed);
  596. // Status
  597. $default_status = get_lang('Student');
  598. if ((isset($o_course_user['status_rel']) && $o_course_user['status_rel'] == 1) ||
  599. (isset($o_course_user['status_session']) && $o_course_user['status_session'] == 2)
  600. ) {
  601. $default_status = get_lang('CourseManager');
  602. } elseif (isset($o_course_user['is_tutor']) && $o_course_user['is_tutor'] == 1) {
  603. $default_status = get_lang('Tutor');
  604. }
  605. $temp[] = $default_status;
  606. // Active
  607. $temp[] = $o_course_user['active'];
  608. if (!empty($extraFields)) {
  609. foreach ($extraFields as $extraField) {
  610. $extraFieldValue = new ExtraFieldValue('user');
  611. $data = $extraFieldValue->get_values_by_handler_and_field_id(
  612. $user_id,
  613. $extraField['id']
  614. );
  615. $temp[] = $data['value'];
  616. }
  617. }
  618. // User id for actions
  619. $temp[] = $user_id;
  620. $temp['is_tutor'] = isset($o_course_user['is_tutor']) ? $o_course_user['is_tutor'] : '';
  621. $temp['user_status_in_course'] = isset($o_course_user['status_rel']) ? $o_course_user['status_rel'] : '';
  622. } else {
  623. $userInfo = api_get_user_info($user_id);
  624. $userPicture = $userInfo['avatar'];
  625. $photo= '<img src="'.$userPicture.'" alt="'.$userInfo['complete_name'].'" width="22" height="22" title="'.$userInfo['complete_name'].'" />';
  626. $temp[] = $user_id;
  627. $temp[] = $photo;
  628. $temp[] = $o_course_user['official_code'];
  629. if ($is_western_name_order) {
  630. $temp[] = $o_course_user['firstname'];
  631. $temp[] = $o_course_user['lastname'];
  632. } else {
  633. $temp[] = $o_course_user['lastname'];
  634. $temp[] = $o_course_user['firstname'];
  635. }
  636. $temp[] = $o_course_user['username'];
  637. // Group.
  638. $temp[] = implode(', ', $groupsNameListParsed);
  639. if ($course_info['unsubscribe'] == 1) {
  640. //User id for actions
  641. $temp[] = $user_id;
  642. }
  643. }
  644. $a_users[$user_id] = $temp;
  645. }
  646. }
  647. return $a_users;
  648. }
  649. /**
  650. * Build the active-column of the table to lock or unlock a certain user
  651. * lock = the user can no longer use this account
  652. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  653. * @param int $active the current state of the account
  654. * @param int $user_id The user id
  655. * @param string $urlParams
  656. *
  657. * @return string Some HTML-code with the lock/unlock button
  658. */
  659. function active_filter($active, $urlParams, $row)
  660. {
  661. $userId = api_get_user_id();
  662. $action = '';
  663. $image = '';
  664. if ($active == '1') {
  665. $action = 'AccountActive';
  666. $image = 'accept';
  667. }
  668. if ($active == '0') {
  669. $action = 'AccountInactive';
  670. $image = 'error';
  671. }
  672. $result = '';
  673. /* you cannot lock yourself out otherwise you could disable all the accounts including your own => everybody is
  674. locked out and nobody can change it anymore.*/
  675. if ($row[0] <> $userId) {
  676. $result = '<center><img src="'.Display::returnIconPath($image.'.png', 16).'" border="0" alt="'.get_lang(ucfirst($action)).'" title="'.get_lang(ucfirst($action)).'"/></center>';
  677. }
  678. return $result;
  679. }
  680. /**
  681. * Build the modify-column of the table
  682. * @param int $user_id The user id
  683. * @return string Some HTML-code
  684. */
  685. function modify_filter($user_id, $row, $data)
  686. {
  687. global $is_allowed_to_track, $charset;
  688. $user_id = $data[0];
  689. $userInfo = api_get_user_info($user_id);
  690. $isInvitee = $userInfo['status'] == INVITEE ? true : false;
  691. $course_info = $_course = api_get_course_info();
  692. $current_user_id = api_get_user_id();
  693. $sessionId = api_get_session_id();
  694. $type = isset($_REQUEST['type']) ? intval($_REQUEST['type']) : STUDENT;
  695. $result = "";
  696. if ($is_allowed_to_track) {
  697. $result .= '<a href="../mySpace/myStudents.php?'.api_get_cidreq().'&student='.$user_id.'&details=true&course='.$_course['id'].'&origin=user_course&id_session='.api_get_session_id().'" title="'.get_lang('Tracking').'">
  698. '.Display::return_icon('stats.png', get_lang('Tracking')).'
  699. </a>';
  700. }
  701. // If platform admin, show the login_as icon (this drastically shortens
  702. // time taken by support to test things out)
  703. if (api_is_platform_admin()) {
  704. $result .= ' <a href="'.api_get_path(WEB_CODE_PATH).'admin/user_list.php?action=login_as&user_id='.$user_id.'&sec_token='.$_SESSION['sec_token'].'">'.
  705. Display::return_icon('login_as.gif', get_lang('LoginAs')).'</a>&nbsp;&nbsp;';
  706. }
  707. if (api_is_allowed_to_edit(null, true)) {
  708. if (empty($sessionId)) {
  709. $isTutor = isset($data['is_tutor']) ? intval($data['is_tutor']) : 0;
  710. $isTutor = empty($isTutor) ? 1 : 0;
  711. $text = get_lang('RemoveTutorStatus');
  712. if ($isTutor) {
  713. $text = get_lang('SetTutor');
  714. }
  715. if ($isInvitee) {
  716. $disabled = 'disabled';
  717. } else {
  718. $disabled = '';
  719. }
  720. if ($data['user_status_in_course'] == STUDENT) {
  721. $result .= Display::url(
  722. $text,
  723. 'user.php?'.api_get_cidreq(
  724. ).'&action=set_tutor&is_tutor='.$isTutor.'&user_id='.$user_id.'&type='.$type,
  725. array('class' => 'btn btn-default '.$disabled)
  726. ).'&nbsp;';
  727. }
  728. }
  729. // edit
  730. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true' or api_is_platform_admin()) {
  731. // unregister
  732. if ($user_id != $current_user_id || api_is_platform_admin()) {
  733. $result .= '<a class="btn btn-small btn-danger" href="'.api_get_self().'?'.api_get_cidreq().'&type='.$type.'&unregister=yes&user_id='.$user_id.'" title="'.get_lang('Unreg').' " onclick="javascript:if(!confirm(\''.addslashes(api_htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset)).'\')) return false;">'.
  734. get_lang('Unreg').'</a>&nbsp;';
  735. } else {
  736. //$result .= Display::return_icon('unsubscribe_course_na.png', get_lang('Unreg'),'',ICON_SIZE_SMALL).'</a>&nbsp;';
  737. }
  738. }
  739. } else {
  740. // Show buttons for unsubscribe
  741. if ($course_info['unsubscribe'] == 1) {
  742. if ($user_id == $current_user_id) {
  743. $result .= '<a class="btn btn-small btn-danger" href="'.api_get_self().'?'.api_get_cidreq().'&type='.$type.'&unregister=yes&user_id='.$user_id.'" title="'.get_lang('Unreg').' " onclick="javascript:if(!confirm(\''.addslashes(api_htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset)).'\')) return false;">'.
  744. get_lang('Unreg').'</a>&nbsp;';
  745. }
  746. }
  747. }
  748. return $result;
  749. }
  750. function hide_field()
  751. {
  752. return null;
  753. }
  754. $default_column = 3;
  755. $table = new SortableTable('user_list', 'get_number_of_users', 'get_user_data', $default_column);
  756. $parameters['keyword'] = isset($_GET['keyword']) ? Security::remove_XSS($_GET['keyword']) : null;
  757. $parameters['sec_token'] = Security::get_token();
  758. $table->set_additional_parameters($parameters);
  759. $header_nr = 0;
  760. $indexList = array();
  761. $table->set_header($header_nr++, '', false);
  762. $indexList['photo'] = $header_nr;
  763. $table->set_header($header_nr++, get_lang('Photo'), false);
  764. $table->set_header($header_nr++, get_lang('OfficialCode'));
  765. $indexList['official_code'] = $header_nr;
  766. if ($is_western_name_order) {
  767. $indexList['firstname'] = $header_nr;
  768. $table->set_header($header_nr++, get_lang('FirstName'));
  769. $indexList['lastname'] = $header_nr;
  770. $table->set_header($header_nr++, get_lang('LastName'));
  771. } else {
  772. $indexList['lastname'] = $header_nr;
  773. $table->set_header($header_nr++, get_lang('LastName'));
  774. $indexList['firstname'] = $header_nr;
  775. $table->set_header($header_nr++, get_lang('FirstName'));
  776. }
  777. $indexList['username'] = $header_nr;
  778. $table->set_header($header_nr++, get_lang('LoginName'));
  779. $indexList['groups'] = $header_nr;
  780. $table->set_header($header_nr++, get_lang('GroupSingle'), false);
  781. /*
  782. if (api_is_allowed_to_edit(null, true) && api_get_setting('allow_user_course_subscription_by_course_admin') == 'true') {
  783. } else {
  784. $table->set_column_filter(0, 'hide_field');
  785. }
  786. */
  787. $hideFields = api_get_configuration_value('hide_user_field_from_list');
  788. if (!empty($hideFields)) {
  789. foreach ($hideFields as $fieldToHide) {
  790. if (isset($indexList[$fieldToHide])) {
  791. $table->setHideColumn($indexList[$fieldToHide]);
  792. }
  793. }
  794. }
  795. if (api_is_allowed_to_edit(null, true)) {
  796. $table->set_header($header_nr++, get_lang('Status'), false);
  797. $table->set_header($header_nr++, get_lang('Active'), false);
  798. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true') {
  799. $table->set_column_filter(8, 'active_filter');
  800. } else {
  801. $table->set_column_filter(8, 'active_filter');
  802. }
  803. foreach ($extraFields as $extraField) {
  804. $table->set_header($header_nr++, $extraField['display_text'], false);
  805. }
  806. // Actions column
  807. $table->set_header($header_nr++, get_lang('Action'), false);
  808. $table->set_column_filter($header_nr-1, 'modify_filter');
  809. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true') {
  810. $table->set_form_actions(array('unsubscribe' => get_lang('Unreg')), 'user');
  811. }
  812. } else {
  813. if ($course_info['unsubscribe'] == 1) {
  814. $table->set_header($header_nr++, get_lang('Action'), false);
  815. $table->set_column_filter($header_nr-1, 'modify_filter');
  816. }
  817. }
  818. /* Header */
  819. if (isset($origin) && $origin == 'learnpath') {
  820. Display::display_reduced_header();
  821. } else {
  822. if (isset($_GET['keyword']) && !empty($_GET['keyword'])) {
  823. $interbreadcrumb[] = array(
  824. "url" => "user.php?".api_get_cidreq(),
  825. "name" => get_lang("Users"),
  826. );
  827. $tool_name = get_lang('SearchResults');
  828. } else {
  829. $tool_name = get_lang('Users');
  830. $origin = 'users';
  831. }
  832. Display::display_header($tool_name, "User");
  833. }
  834. /* Setting the permissions for this page */
  835. $is_allowed_to_track = ($is_courseAdmin || $is_courseTutor);
  836. // Tool introduction
  837. Display::display_introduction_section(TOOL_USER, 'left');
  838. $actions = '';
  839. $selectedTab = 1;
  840. if (api_is_allowed_to_edit(null, true)) {
  841. echo '<div class="actions">';
  842. switch ($type) {
  843. case STUDENT:
  844. $selectedTab = 1;
  845. $url = api_get_path(WEB_CODE_PATH).'user/subscribe_user.php?'.api_get_cidreq().'&type='.STUDENT;
  846. $icon = Display::url(
  847. Display::return_icon('add-user.png', get_lang('Add'), '', ICON_SIZE_MEDIUM),
  848. $url
  849. );
  850. break;
  851. case COURSEMANAGER:
  852. $selectedTab = 2;
  853. $url = api_get_path(WEB_CODE_PATH).'user/subscribe_user.php?'.api_get_cidreq().'&type='.COURSEMANAGER;
  854. $icon = Display::url(
  855. Display::return_icon('add-teacher.png', get_lang('Add'), '', ICON_SIZE_MEDIUM),
  856. $url
  857. );
  858. break;
  859. }
  860. echo '<div class="row">';
  861. echo '<div class="col-md-6">';
  862. echo $icon;
  863. $actions .= '<a href="user.php?'.api_get_cidreq().'&action=export&format=csv&type='.$type.'">'.
  864. Display::return_icon('export_csv.png', get_lang('ExportAsCSV'),'',ICON_SIZE_MEDIUM).'</a> ';
  865. $actions .= '<a href="user.php?'.api_get_cidreq().'&action=export&format=xls&type='.$type.'">'.
  866. Display::return_icon('export_excel.png', get_lang('ExportAsXLS'),'',ICON_SIZE_MEDIUM).'</a> ';
  867. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true' ||
  868. api_is_platform_admin()
  869. ) {
  870. $actions .= '<a href="user_import.php?'.api_get_cidreq().'&action=import">'.
  871. Display::return_icon('import_csv.png', get_lang('ImportUsersToACourse'),'',ICON_SIZE_MEDIUM).'</a> ';
  872. }
  873. $actions .= '<a href="user.php?'.api_get_cidreq().'&action=export&format=pdf&type='.$type.'">'.
  874. Display::return_icon('pdf.png', get_lang('ExportToPDF'),'',ICON_SIZE_MEDIUM).'</a> ';
  875. echo $actions;
  876. echo '</div>';
  877. echo '<div class="col-md-6">';
  878. echo '<div class="pull-right">';
  879. // Build search-form
  880. $form = new FormValidator('search_user', 'get', '', '', null, FormValidator::LAYOUT_INLINE);
  881. $form->addText('keyword', '', false);
  882. $form->addButtonSearch(get_lang('SearchButton'));
  883. $form->display();
  884. echo '</div>';
  885. echo '</div>';
  886. echo '</div>';
  887. $allowTutors = api_get_setting('allow_tutors_to_assign_students_to_session');
  888. if (api_is_allowed_to_edit() && $allowTutors == 'true') {
  889. $actions .= ' <a class="btn btn-default" href="session_list.php?'.api_get_cidreq().'">'.
  890. get_lang('Sessions').'</a>';
  891. }
  892. echo '</div>';
  893. }
  894. echo UserManager::getUserSubscriptionTab($selectedTab);
  895. $table->display();
  896. if (!empty($_GET['keyword']) && !empty($_GET['submit'])) {
  897. $keyword_name = Security::remove_XSS($_GET['keyword']);
  898. echo '<br/>'.get_lang('SearchResultsFor').' <span style="font-style: italic ;"> '.$keyword_name.' </span><br>';
  899. }
  900. if (!isset($origin) || $origin != 'learnpath') {
  901. Display::display_footer();
  902. }