new_message.php 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * @package chamilo.messages
  5. */
  6. /**
  7. * This script shows a compose area (wysiwyg editor if supported, otherwise
  8. * a simple textarea) where the user can type a message.
  9. * There are three modes
  10. * - standard: type a message, select a user to send it to, press send
  11. * - reply on message (when pressing reply when viewing a message)
  12. * - send to specific user (when pressing send message in the who is online list)
  13. */
  14. /* INIT SECTION */
  15. // name of the language file that needs to be included
  16. $language_file= array('messages','userInfo', 'admin');
  17. $cidReset = true;
  18. require_once '../inc/global.inc.php';
  19. api_block_anonymous_users();
  20. if (api_get_setting('allow_message_tool')!='true'){
  21. api_not_allowed();
  22. }
  23. require_once api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php';
  24. require_once api_get_path(LIBRARY_PATH).'group_portal_manager.lib.php';
  25. require_once api_get_path(LIBRARY_PATH).'message.lib.php';
  26. $nameTools = api_xml_http_response_encode(get_lang('Messages'));
  27. /* Constants and variables */
  28. $htmlHeadXtra[]='
  29. <script language="javascript">
  30. function validate(form,list) {
  31. if(list.selectedIndex<0) {
  32. alert("Please select someone to send the message to.")
  33. return false
  34. } else {
  35. return true
  36. }
  37. }
  38. </script>';
  39. $htmlHeadXtra[] = '<script src="'.api_get_path(WEB_LIBRARY_PATH).'javascript/tag/jquery.fcbkcomplete.js" type="text/javascript" language="javascript"></script>';
  40. $htmlHeadXtra[] = '<link href="'.api_get_path(WEB_LIBRARY_PATH).'javascript/tag/style.css" rel="stylesheet" type="text/css" />';
  41. $htmlHeadXtra[] = '<script type="text/javascript">
  42. $(document).ready(function (){
  43. $("#users").fcbkcomplete({
  44. json_url: "'.api_get_path(WEB_AJAX_PATH).'message.ajax.php?a=find_users",
  45. cache: false,
  46. filter_case: true,
  47. filter_hide: true,
  48. complete_text:"'.get_lang('StartToType').'",
  49. firstselected: true,
  50. //onremove: "testme",
  51. //onselect: "testme",
  52. filter_selected: true,
  53. newel: true
  54. });
  55. });
  56. var counter_image = 1;
  57. /*
  58. function remove_image_form(id_elem1) {
  59. var elem1 = document.getElementById(id_elem1);
  60. elem1.parentNode.removeChild(elem1);
  61. }
  62. */
  63. function add_image_form() {
  64. // Multiple filepaths for image form
  65. var filepaths = document.getElementById("filepaths");
  66. if (document.getElementById("filepath_"+counter_image)) {
  67. counter_image = counter_image + 1;
  68. } else {
  69. counter_image = counter_image;
  70. }
  71. var elem1 = document.createElement("div");
  72. elem1.setAttribute("id","filepath_"+counter_image);
  73. filepaths.appendChild(elem1);
  74. id_elem1 = "filepath_"+counter_image;
  75. id_elem1 = "\'"+id_elem1+"\'";
  76. //document.getElementById("filepath_"+counter_image).innerHTML = "<input type=\"file\" name=\"attach_"+counter_image+"\" size=\"20\" />&nbsp;<a href=\"javascript:remove_image_form("+id_elem1+")\"><img src=\"'.api_get_path(WEB_CODE_PATH).'img/delete.gif\"></a>";
  77. document.getElementById("filepath_"+counter_image).innerHTML = "<input type=\"file\" name=\"attach_"+counter_image+"\" size=\"20\" />&nbsp;<input type=\"text\" name=\"legend[]\" size=\"20\" />";
  78. if (filepaths.childNodes.length == 6) {
  79. var link_attach = document.getElementById("link-more-attach");
  80. if (link_attach) {
  81. link_attach.innerHTML="";
  82. }
  83. }
  84. }
  85. </script>
  86. <style>
  87. div.row div.label {
  88. width:15%;
  89. }
  90. div.row div.formw {
  91. width:80%;
  92. }
  93. </style>';
  94. $nameTools = get_lang('ComposeMessage');
  95. /* FUNCTIONS */
  96. /**
  97. * Shows the compose area + a list of users to select from.
  98. */
  99. function show_compose_to_any ($user_id) {
  100. $online_user_list = MessageManager::get_online_user_list($user_id);
  101. $default['user_list'] = 0;
  102. $online_user_list=null;
  103. manage_form($default, $online_user_list);
  104. }
  105. function show_compose_reply_to_message ($message_id, $receiver_id) {
  106. global $charset;
  107. $table_message = Database::get_main_table(TABLE_MESSAGE);
  108. $query = "SELECT user_sender_id FROM $table_message WHERE user_receiver_id=".intval($receiver_id)." AND id='".intval($message_id)."';";
  109. $result = Database::query($query);
  110. $row = Database::fetch_array($result,'ASSOC');
  111. if (!isset($row['user_sender_id'])) {
  112. echo get_lang('InvalidMessageId');
  113. die();
  114. }
  115. $pre_html = '<div class="row">
  116. <div class="label">'.get_lang('SendMessageTo').'</div>
  117. <div class="formw">';
  118. $post = '</div></div>';
  119. $multi_select = '<select id="users" name="users">
  120. </select>';
  121. echo $pre_html.'<strong>'.GetFullUserName($row['user_sender_id']).'</strong>'.$post;
  122. //echo get_lang('To').':&nbsp;<strong>'. GetFullUserName($row['user_sender_id']).'</strong>';
  123. //$default['title'] = get_lang('EnterTitle');
  124. $default['users'] = array($row['user_sender_id']);
  125. manage_form($default);
  126. }
  127. function show_compose_to_user ($receiver_id) {
  128. global $charset;
  129. echo get_lang('To').':&nbsp;<strong>'. GetFullUserName($receiver_id).'</strong>';
  130. $default['title'] = api_xml_http_response_encode(get_lang('EnterTitle'));
  131. $default['users'] = array($receiver_id);
  132. manage_form($default);
  133. }
  134. function manage_form ($default, $select_from_user_list = null) {
  135. global $charset;
  136. $table_message = Database::get_main_table(TABLE_MESSAGE);
  137. $group_id = intval($_REQUEST['group_id']);
  138. $message_id = intval($_GET['message_id']);
  139. $param_f = isset($_GET['f'])?Security::remove_XSS($_GET['f']):'';
  140. $form = new FormValidator('compose_message',null,api_get_self().'?f='.$param_f,null,array('enctype'=>'multipart/form-data'));
  141. if (empty($group_id)) {
  142. if (isset($select_from_user_list)) {
  143. $form->add_textfield('id_text_name', get_lang('SendMessageTo'),true,array('size' => 40,'id'=>'id_text_name','onkeyup'=>'send_request_and_search()','autocomplete'=>'off','style'=>'padding:0px'));
  144. $form->addRule('id_text_name', get_lang('ThisFieldIsRequired'), 'required');
  145. $form->addElement('html','<div id="id_div_search" style="padding:0px" class="message-select-box" >&nbsp;</div>');
  146. $form->addElement('hidden','user_list',0,array('id'=>'user_list'));
  147. } else {
  148. if (empty($default['users'])) {
  149. //the magic should be here
  150. $pre_html = '<div class="row">
  151. <div class="label">'.get_lang('SendMessageTo').'</div>
  152. <div class="formw">';
  153. $post = '</div></div>';
  154. $multi_select = '<select id="users" name="users">
  155. </select>';
  156. $form->addElement('html',$pre_html.$multi_select.$post );
  157. } else {
  158. $form->addElement('hidden','hidden_user',$default['users'][0],array('id'=>'hidden_user'));
  159. }
  160. }
  161. } else {
  162. $group_info = GroupPortalManager::get_group_data($group_id);
  163. $form->addElement('html','<div class="row"><div class="label">'.get_lang('ToGroup').'</div><div class="formw">'.api_xml_http_response_encode($group_info['name']).'</div></div>');
  164. $form->addElement('hidden','group_id',$group_id);
  165. $form->addElement('hidden','parent_id',$message_id);
  166. }
  167. $form->add_textfield('title', get_lang('Subject'),true ,array('size' => 54));
  168. $form->add_html_editor('content', get_lang('Message'), false, false, array('ToolbarSet' => 'Messages', 'Width' => '95%', 'Height' => '250'));
  169. //$form->addElement('textarea','content', get_lang('Message'), array('cols' => 75,'rows'=>8));
  170. if (isset($_GET['re_id'])) {
  171. $message_reply_info = MessageManager::get_message_by_id($_GET['re_id']);
  172. $form->addElement('hidden','re_id',Security::remove_XSS($_GET['re_id']));
  173. $form->addElement('hidden','save_form','save_form');
  174. //adding reply mail
  175. $user_reply_info = UserManager::get_user_info_by_id($message_reply_info['user_sender_id']);
  176. $default['content']='<p></p>'.api_get_person_name($user_reply_info['firstname'],$user_reply_info['lastname']).' '.get_lang('Wrote').' :<i> <br />'.api_html_entity_decode($message_reply_info['content'],ENT_QUOTES,$charset).'</i>';
  177. }
  178. if (empty($group_id)) {
  179. $form->addElement('html','<div class="row"><div class="label">'.get_lang('FilesAttachment').'</div><div class="formw">
  180. <span id="filepaths">
  181. <div id="filepath_1">
  182. <input type="file" name="attach_1" size="20" />
  183. <input type="text" name="legend[]" size="20" />
  184. </div></span></div></div>');
  185. $form->addElement('html','<div class="row"><div class="formw"><span id="link-more-attach"><a href="javascript://" onclick="return add_image_form()">'.get_lang('AddOneMoreFile').'</a></span>&nbsp;('.sprintf(get_lang('MaximunFileSizeX'),format_file_size(api_get_setting('message_max_upload_filesize'))).')</div></div>');
  186. }
  187. $form->addElement('style_submit_button','compose',api_xml_http_response_encode(get_lang('SendMessage')),'class="save"');
  188. $form->setRequiredNote('<span class="form_required">*</span> <small>'.get_lang('ThisFieldIsRequired').'</small>');
  189. if (!empty($group_id) && !empty($message_id)) {
  190. $message_info = MessageManager::get_message_by_id($message_id);
  191. $default['title']=get_lang('Re:').api_html_entity_decode($message_info['title'],ENT_QUOTES,$charset);
  192. }
  193. $form->setDefaults($default);
  194. if ($form->validate()) {
  195. $check = Security::check_token('post');
  196. if ($check) {
  197. $values = $default;
  198. $user_list = $values['users'];
  199. $file_comments = $_POST['legend'];
  200. $title = $values['title'];
  201. $content = $values['content'];
  202. $group_id = $values['group_id'];
  203. $parent_id = $values['parent_id'];
  204. if (is_array($user_list) && count($user_list)> 0) {
  205. //all is well, send the message
  206. foreach ($user_list as $user) {
  207. $res = MessageManager::send_message($user, $title, $content, $_FILES, $file_comments, $group_id, $parent_id);
  208. if ($res) {
  209. if (is_string($res)) {
  210. Display::display_error_message($res);
  211. } else {
  212. MessageManager::display_success_message($user);
  213. }
  214. }
  215. }
  216. } else {
  217. Display::display_error_message('ErrorSendingMessage');
  218. }
  219. }
  220. Security::clear_token();
  221. } else {
  222. $token = Security::get_token();
  223. $form->addElement('hidden','sec_token');
  224. $form->setConstants(array('sec_token' => $token));
  225. $form->display();
  226. }
  227. }
  228. /* MAIN SECTION */
  229. if ($_GET['f']=='social') {
  230. $this_section = SECTION_SOCIAL;
  231. $interbreadcrumb[]= array ('url' => api_get_path(WEB_PATH).'main/social/home.php','name' => get_lang('Social'));
  232. $interbreadcrumb[]= array ('url' => '#','name' => $nameTools);
  233. } else {
  234. $this_section = SECTION_MYPROFILE;
  235. $interbreadcrumb[]= array ('url' => api_get_path(WEB_PATH).'main/auth/profile.php','name' => get_lang('Profile'));
  236. $interbreadcrumb[]= array ('url' => 'inbox.php','name' => get_lang('Inbox'));
  237. }
  238. Display::display_header('');
  239. $group_id = intval($_REQUEST['group_id']);
  240. if ($group_id != 0) {
  241. echo '<div class=actions>';
  242. echo '<a href="'.api_get_path(WEB_PATH).'main/social/groups.php?id='.$group_id.'">'.Display::return_icon('back.png',api_xml_http_response_encode(get_lang('ComposeMessage'))).api_xml_http_response_encode(get_lang('BackToGroup')).'</a>';
  243. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/new_message.php?group_id='.$group_id.'">'.Display::return_icon('message_new.png',api_xml_http_response_encode(get_lang('ComposeMessage'))).api_xml_http_response_encode(get_lang('ComposeMessage')).'</a>';
  244. echo '</div>';
  245. } else {
  246. if ($_GET['f']=='social') {
  247. } else {
  248. echo '<div class=actions>';
  249. if (api_get_setting('allow_social_tool') == 'true' && api_get_setting('allow_message_tool') == 'true') {
  250. echo '<a href="'.api_get_path(WEB_PATH).'main/social/profile.php">'.Display::return_icon('shared_profile.png', get_lang('ViewSharedProfile')).'&nbsp;'.get_lang('ViewSharedProfile').'</a>';
  251. }
  252. if (api_get_setting('allow_message_tool') == 'true') {
  253. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/inbox.php">'.Display::return_icon('inbox.png').' '.get_lang('Messages').'</a>';
  254. }
  255. echo '<a href="'.api_get_path(WEB_PATH).'main/auth/profile.php?type=reduced">'.Display::return_icon('edit.gif', get_lang('EditNormalProfile')).'&nbsp;'.get_lang('EditNormalProfile').'</a>';
  256. echo '</div>';
  257. }
  258. }
  259. echo '<div id="social-content">';
  260. $id_content_right = '';
  261. //LEFT COLUMN
  262. if (api_get_setting('allow_social_tool') != 'true') {
  263. $id_content_right = 'inbox';
  264. echo '<div id="inbox-menu" class="actions">';
  265. echo '<ul>';
  266. echo '<li><a href="'.api_get_path(WEB_PATH).'main/messages/new_message.php">'.Display::return_icon('message_new.png',get_lang('ComposeMessage')).get_lang('ComposeMessage').'</a>'.'</li>';
  267. echo '<li><a href="'.api_get_path(WEB_PATH).'main/messages/inbox.php">'.Display::return_icon('inbox.png',get_lang('Inbox')).get_lang('Inbox').'</a>'.'</li>';
  268. echo '<li><a href="'.api_get_path(WEB_PATH).'main/messages/outbox.php">'.Display::return_icon('outbox.png',get_lang('Outbox')).get_lang('Outbox').'</a>'.'</li>';
  269. echo '</ul>';
  270. echo '</div>';
  271. } else {
  272. require_once api_get_path(LIBRARY_PATH).'social.lib.php';
  273. echo '<div id="social-content-left">';
  274. //this include the social menu div
  275. SocialManager::show_social_menu('messages');
  276. echo '</div>';
  277. $id_content_right = 'social-content-right';
  278. }
  279. echo '<div id="'.$id_content_right.'">';
  280. //MAIN CONTENT
  281. if (api_get_setting('allow_social_tool') == 'true'){
  282. echo '<div class="social-box-container2">';
  283. echo '<div class="actions">';
  284. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/inbox.php?f=social">'.Display::return_icon('back.png', get_lang('Back'), array(), 32).'</a>';
  285. echo '</div>';
  286. //echo '<div>'.Display::return_icon('content-post-group1.jpg',get_lang('ComposeMessage')).'</div>';
  287. //echo '<div id="div_content_table" class="social-box-content2">';
  288. }
  289. if (!isset($_POST['compose'])) {
  290. if(isset($_GET['re_id'])) {
  291. show_compose_reply_to_message($_GET['re_id'], api_get_user_id());
  292. } elseif(isset($_GET['send_to_user'])) {
  293. show_compose_to_user($_GET['send_to_user']);
  294. } else {
  295. show_compose_to_any($_user['user_id']);
  296. }
  297. } else {
  298. $restrict = false;
  299. if (isset($_POST['users'])) {
  300. $restrict = true;
  301. } elseif (isset($_POST['group_id'])) {
  302. $restrict = true;
  303. } elseif(isset($_POST['hidden_user'])) {
  304. $restrict = true;
  305. }
  306. $default['title'] = $_POST['title'];
  307. $default['content'] = $_POST['content'];
  308. // comes from a reply button
  309. if (isset($_GET['re_id'])) {
  310. manage_form($default);
  311. } else {
  312. // post
  313. if ($restrict) {
  314. if (!isset($_POST['group_id'])) {
  315. $default['users'] = $_POST['users'];
  316. } else {
  317. $default['group_id'] = $_POST['group_id'];
  318. }
  319. if (isset($_POST['hidden_user'])) {
  320. $default['users'] = array($_POST['hidden_user']);
  321. }
  322. manage_form($default);
  323. } else {
  324. Display::display_error_message(get_lang('ErrorSendingMessage'));
  325. }
  326. }
  327. }
  328. if (api_get_setting('allow_social_tool') == 'true'){
  329. echo '</div>';
  330. }
  331. echo '</div>';
  332. echo '</div>';
  333. /* FOOTER */
  334. Display::display_footer();