index.php 18 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578
  1. <?php
  2. /*
  3. DOKEOS - elearning and course management software
  4. For a full list of contributors, see documentation/credits.html
  5. This program is free software; you can redistribute it and/or
  6. modify it under the terms of the GNU General Public License
  7. as published by the Free Software Foundation; either version 2
  8. of the License, or (at your option) any later version.
  9. See "documentation/licence.html" more details.
  10. Contact:
  11. Dokeos
  12. Rue des Palais 44 Paleizenstraat
  13. B-1030 Brussels - Belgium
  14. Tel. +32 (2) 211 34 56
  15. */
  16. /**
  17. * @package dokeos.main
  18. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University, Refactoring
  19. * @version $Id: index.php 11226 2007-02-26 13:44:34Z elixir_julian $
  20. * @todo check the different @todos in this page and really do them
  21. * @todo check if the news management works as expected
  22. */
  23. // only this script should have this constant defined. This is used to activate the javascript that
  24. // gives the login name automatic focus in header.inc.html.
  25. /** @todo Couldn't this be done using the $HtmlHeadXtra array? */
  26. define('DOKEOS_HOMEPAGE', true);
  27. // the language file
  28. $language_file = array ('courses', 'index');
  29. /* Flag forcing the 'current course' reset, as we're not inside a course anymore */
  30. // maybe we should change this into an api function? an example: Coursemanager::unset();
  31. $cidReset = true;
  32. /*
  33. -----------------------------------------------------------
  34. Included libraries
  35. -----------------------------------------------------------
  36. */
  37. /** @todo make all the library files consistent use filename.lib.php and not filename.lib.inc.php */
  38. require_once ('./main/inc/global.inc.php');
  39. include_once (api_get_path(LIBRARY_PATH).'course.lib.php');
  40. include_once (api_get_path(LIBRARY_PATH).'debug.lib.inc.php');
  41. include_once (api_get_path(LIBRARY_PATH).'events.lib.inc.php');
  42. include_once (api_get_path(LIBRARY_PATH).'system_announcements.lib.php');
  43. include_once (api_get_path(LIBRARY_PATH).'groupmanager.lib.php');
  44. include_once (api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php');
  45. $loginFailed = isset($_GET['loginFailed']) ? true : isset($loginFailed);
  46. // the section (for the tabs)
  47. $this_section = SECTION_CAMPUS;
  48. /*
  49. -----------------------------------------------------------
  50. Action Handling
  51. -----------------------------------------------------------
  52. */
  53. /** @todo wouldn't it make more sense if this would be done in local.inc.php so that local.inc.php become the only place where authentication is done?
  54. * by doing this you could logout from any page instead of only from index.php. From the moment there is a logout=true in the url you will be logged out
  55. * this can be usefull when you are on an open course and you need to log in to edit something and you immediately want to check how anonymous users
  56. * will see it.
  57. */
  58. if ($_GET['logout'])
  59. {
  60. logout();
  61. }
  62. /*
  63. -----------------------------------------------------------
  64. Table definitions
  65. -----------------------------------------------------------
  66. */
  67. $main_course_table = Database :: get_main_table(TABLE_MAIN_COURSE);
  68. $main_category_table = Database :: get_main_table(TABLE_MAIN_CATEGORY);
  69. $track_login_table = Database :: get_statistic_table(TABLE_STATISTIC_TRACK_E_LOGIN);
  70. /*
  71. -----------------------------------------------------------
  72. Constants and CONFIGURATION parameters
  73. -----------------------------------------------------------
  74. */
  75. /** @todo these configuration settings should move to the dokeos config settings */
  76. /** defines wether or not anonymous visitors can see a list of the courses on the Dokeos homepage that are open to the world */
  77. $_setting['display_courses_to_anonymous_users'] = 'true';
  78. /** defines weither empty course categories should appear in the list with the course categories */
  79. $_setting['show_empty_course_categories'] = 'true';
  80. /** defines weither the number of open courses has to appear after the course category (faculty) */
  81. /** remark: actually count are only for direct children */
  82. $_setting['show_number_of_courses'] = 'false';
  83. /** Show the back link on top of the tree */
  84. $_setting['show_back_link_on_top_of_tree'] = 'false';
  85. /** Show the course language if it is not the same as the platform lanugage */
  86. $_setting['show_different_course_language'] = 'true';
  87. /** @todo remove this piece of code because this is not used */
  88. if (isset ($_user['user_id']))
  89. {
  90. $nameTools = api_get_setting('siteName');
  91. }
  92. /*
  93. ==============================================================================
  94. LOGIN
  95. ==============================================================================
  96. */
  97. /**
  98. * @todo This piece of code should probably move to local.inc.php where the actual login / logout procedure is handled.
  99. * @todo consider removing this piece of code because does nothing.
  100. */
  101. if ($_GET["submitAuth"] == 1)
  102. {
  103. // nice lie!!!
  104. echo "Attempted breakin - sysadmins notified.";
  105. session_destroy();
  106. die();
  107. }
  108. /**
  109. * @todo This piece of code should probably move to local.inc.php where the actual login procedure is handled.
  110. * @todo check if this code is used. I think this code is never executed because after clicking the submit button
  111. * the code does the stuff in local.inc.php and then redirects to index.php or user_portal.php depending
  112. * on api_get_setting('page_after_login')
  113. */
  114. if ($_POST["submitAuth"])
  115. {
  116. // the user is already authenticated, we now find the last login of the user.
  117. if (isset ($_user['user_id']))
  118. {
  119. $sql_last_login = "SELECT UNIX_TIMESTAMP(login_date)
  120. FROM $track_login_table
  121. WHERE login_user_id = '".$_user['user_id']."'
  122. ORDER BY login_date DESC LIMIT 1";
  123. $result_last_login = api_sql_query($sql_last_login, __FILE__, __LINE__);
  124. if (!$result_last_login)
  125. if (mysql_num_rows($result_last_login) > 0)
  126. {
  127. $user_last_login_datetime = mysql_fetch_array($result_last_login);
  128. $user_last_login_datetime = $user_last_login_datetime[0];
  129. api_session_register('user_last_login_datetime');
  130. }
  131. mysql_free_result($result_last_login);
  132. //event_login();
  133. if (api_is_platform_admin())
  134. {
  135. // decode all open event informations and fill the track_c_* tables
  136. include (api_get_path(LIBRARY_PATH)."stats.lib.inc.php");
  137. decodeOpenInfos();
  138. }
  139. }
  140. } // end login -- if($_POST["submitAuth"])
  141. else
  142. {
  143. // only if login form was not sent because if the form is sent the user was already on the page.
  144. event_open();
  145. }
  146. // the header
  147. Display :: display_header('', 'dokeos');
  148. /*
  149. ==============================================================================
  150. MAIN CODE
  151. ==============================================================================
  152. */
  153. echo '<div class="maincontent" id="content">';
  154. // Plugins for loginpage_main AND campushomepage_main
  155. if (!api_get_user_id())
  156. {
  157. api_plugin('loginpage_main');
  158. }
  159. else
  160. {
  161. api_plugin('campushomepage_main');
  162. }
  163. // Including the page for the news
  164. $page_included = false;
  165. if (!empty ($_GET['include']) && !strstr($_GET['include'], '/') && !strstr($_GET['include'], '\\') && strstr($_GET['include'], '.html'))
  166. {
  167. include ('./home/'.$_GET['include']);
  168. $page_included = true;
  169. }
  170. else
  171. {
  172. if(!file_exists('home/home_news_'.$user_selected_language.'.html'))
  173. {
  174. include ('home/home_top.html');
  175. }
  176. else
  177. {
  178. include('home/home_top_'.$user_selected_language.'.html');
  179. }
  180. }
  181. // Display System announcements
  182. $announcement = $_GET['announcement'] ? $_GET['announcement'] : -1;
  183. $announcement = intval($announcement);
  184. SystemAnnouncementManager :: display_announcements(VISIBLE_GUEST, $announcement);
  185. // Display courses and category list
  186. if (!$page_included)
  187. {
  188. if (api_get_setting('display_courses_to_anonymous_users') == 'true')
  189. {
  190. echo '<div class="home_cats">';
  191. //display_anonymous_course_list();
  192. echo '</div>';
  193. }
  194. }
  195. echo '</div>';
  196. // display right menu: language form, login section + useful weblinks
  197. echo '<div class="menu" id="menu">';
  198. display_anonymous_right_menu();
  199. echo '</div>';
  200. /*
  201. ==============================================================================
  202. FOOTER
  203. ==============================================================================
  204. */
  205. Display :: display_footer();
  206. /**
  207. * This function handles the logout and is called whenever there is a $_GET['logout']
  208. *
  209. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  210. */
  211. function logout()
  212. {
  213. // variable initialisation
  214. $query_string='';
  215. if(!empty($_SESSION['user_language_choice']))
  216. {
  217. $query_string='?language='.$_SESSION['user_language_choice'];
  218. }
  219. // Database table definition
  220. $tbl_track_login = Database :: get_statistic_table(TABLE_STATISTIC_TRACK_E_LOGIN);
  221. // selecting the last login of the user
  222. $uid = intval($_GET['uid']);
  223. $sql_last_connection="SELECT login_id, login_date FROM $tbl_track_login WHERE login_user_id='$uid' ORDER BY login_date DESC LIMIT 0,1";
  224. $q_last_connection=mysql_query($sql_last_connection);
  225. $i_id_last_connection=mysql_result($q_last_connection,0,"login_id");
  226. $s_sql_update_logout_date="UPDATE $tbl_track_login SET logout_date=NOW() WHERE login_id='$i_id_last_connection'";
  227. api_sql_query($s_sql_update_logout_date);
  228. LoginDelete($uid, $_configuration['statistics_database']);
  229. api_session_destroy();
  230. header("Location: index.php$query_string");
  231. exit();
  232. }
  233. /**
  234. * This function checks if there are courses that are open to the world in the platform course categories (=faculties)
  235. *
  236. * @param unknown_type $category
  237. * @return boolean
  238. */
  239. function category_has_open_courses($category)
  240. {
  241. $main_course_table = Database :: get_main_table(TABLE_MAIN_COURSE);
  242. $sql_query = "SELECT * FROM $main_course_table WHERE category_code='$category'";
  243. $sql_result = api_sql_query($sql_query, __FILE__, __LINE__);
  244. while ($course = mysql_fetch_array($sql_result))
  245. {
  246. if ($course['visibility'] == COURSE_VISIBILITY_OPEN_WORLD)
  247. {
  248. return true; //at least one open course
  249. }
  250. }
  251. return false;
  252. }
  253. /**
  254. * Displays the right-hand menu for anonymous users:
  255. * login form, useful links, help section
  256. * Warning: function defines globals
  257. * @version 1.0.1
  258. * @todo does $_plugins need to be global?
  259. */
  260. function display_anonymous_right_menu()
  261. {
  262. global $loginFailed, $_plugins, $_user;
  263. $platformLanguage = api_get_setting('platformLanguage');
  264. if ( !($_user['user_id']) ) // only display if the user isn't logged in
  265. {
  266. api_display_language_form();
  267. echo '<br />';
  268. display_login_form();
  269. if ($loginFailed)
  270. {
  271. handle_login_failed();
  272. }
  273. if (api_get_setting('allow_lostpassword') == 'true' OR api_get_setting('allow_registration') == 'true')
  274. {
  275. echo '<div class="menusection"><span class="menusectioncaption">'.get_lang('MenuUser').'</span><ul class="menulist">';
  276. if (get_setting('allow_registration') <> 'false')
  277. {
  278. echo '<li><a href="main/auth/inscription.php">'.get_lang('Reg').'</a></li>';
  279. }
  280. if (get_setting('allow_lostpassword') == 'true')
  281. {
  282. display_lost_password_info();
  283. }
  284. echo '</ul></div>';
  285. }
  286. if(api_number_of_plugins('loginpage_menu') > 0)
  287. {
  288. echo '<div class="note" style="background: none">';
  289. api_plugin('loginpage_menu');
  290. echo '</div>';
  291. }
  292. }
  293. /*** hide right menu "general" and other parts on anonymous right menu *****/
  294. echo "<div class=\"menusection\">", "<span class=\"menusectioncaption\">".get_lang("MenuGeneral")."</span>";
  295. echo "<ul class=\"menulist\">";
  296. $user_selected_language = api_get_interface_language();
  297. if (!isset ($user_selected_language))
  298. $user_selected_language = $platformLanguage;
  299. if(!file_exists('home/home_menu_'.$user_selected_language.'.html'))
  300. {
  301. include ('home/home_menu.html');
  302. }
  303. else
  304. {
  305. include('home/home_menu_'.$user_selected_language.'.html');
  306. }
  307. echo '</ul>';
  308. echo '</div>';
  309. if ($_user['user_id'] && api_number_of_plugins('campushomepage_menu') > 0)
  310. {
  311. echo '<div class="note" style="background: none">';
  312. api_plugin('campushomepage_menu');
  313. echo '</div>';
  314. }
  315. /**** use this comment to hide notice file section from right menu ****
  316. echo '<div class="note">';
  317. // includes for any files to be displayed below anonymous right menu
  318. if(!file_exists('home/home_notice_'.$user_selected_language.'.html'))
  319. {
  320. include ('home/home_notice.html');
  321. }
  322. else
  323. {
  324. include('home/home_notice_'.$user_selected_language.'.html');
  325. }
  326. echo '</div>';
  327. **** end of hide various right menu items on anonymous right menu ****/
  328. }
  329. /**
  330. * Reacts on a failed login:
  331. * displays an explanation with
  332. * a link to the registration form.
  333. *
  334. * @version 1.0.1
  335. */
  336. function handle_login_failed()
  337. {
  338. switch ($_GET['error'])
  339. {
  340. case '':
  341. $message = get_lang("InvalidId");
  342. if (api_is_self_registration_allowed())
  343. {
  344. $message = get_lang("InvalidForSelfRegistration");
  345. }
  346. break;
  347. case 'account_expired':
  348. $message=get_lang('AccountExpired');
  349. break;
  350. case 'account_inactive':
  351. $message=get_lang('AccountInactive');
  352. break;
  353. case 'user_password_incorrect':
  354. $message=get_lang('InvalidId');
  355. break;
  356. }
  357. echo "<div id=\"login_fail\">".$message."</div>";
  358. }
  359. /**
  360. * Adds a form to let users login
  361. * @version 1.1
  362. */
  363. function display_login_form()
  364. {
  365. $form = new FormValidator('formLogin');
  366. $form->addElement('text','login',get_lang('UserName'),array('size'=>15));
  367. $form->addElement('password','password',get_lang('Pass'),array('size'=>15));
  368. $form->addElement('submit','submitAuth',get_lang('Ok'));
  369. $renderer =& $form->defaultRenderer();
  370. $element_template = '<!-- BEGIN required --><span class="form_required">*</span> <!-- END required -->{label}<br />
  371. <!-- BEGIN error --><span class="form_error">{error}</span><br /><!-- END error --> {element}<br />';
  372. $renderer->setElementTemplate($element_template);
  373. $form->display();
  374. }
  375. /**
  376. * Displays a link to the lost password section
  377. */
  378. function display_lost_password_info()
  379. {
  380. echo "<li><a href=\"main/auth/lostPassword.php\">".get_lang("LostPassword")."</a></li>";
  381. }
  382. /**
  383. * Display list of courses in a category.
  384. * (for anonymous users)
  385. *
  386. * @version 1.1
  387. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University - refactoring and code cleaning
  388. */
  389. function display_anonymous_course_list()
  390. {
  391. //init
  392. $web_course_path = api_get_path(WEB_COURSE_PATH);
  393. $category = $_GET["category"];
  394. // Database table definitions
  395. $main_course_table = Database :: get_main_table(TABLE_MAIN_COURSE);
  396. $main_category_table = Database :: get_main_table(TABLE_MAIN_CATEGORY);
  397. $platformLanguage = api_get_setting('platformLanguage');
  398. //get list of courses in category $category
  399. $sql_get_course_list = "SELECT * FROM $main_course_table cours
  400. WHERE category_code = '".mysql_real_escape_string($_GET["category"])."'
  401. ORDER BY UPPER(visual_code)";
  402. //removed: AND cours.visibility='".COURSE_VISIBILITY_OPEN_WORLD."'
  403. $sql_result_courses = api_sql_query($sql_get_course_list, __FILE__, __LINE__);
  404. while ($course_result = mysql_fetch_array($sql_result_courses))
  405. {
  406. $course_list[] = $course_result;
  407. }
  408. $sqlGetSubCatList = "
  409. SELECT t1.name,t1.code,t1.parent_id,t1.children_count,COUNT(DISTINCT t3.code) AS nbCourse
  410. FROM $main_category_table t1
  411. LEFT JOIN $main_category_table t2 ON t1.code=t2.parent_id
  412. LEFT JOIN $main_course_table t3 ON (t3.category_code=t1.code AND t3.visibility='".COURSE_VISIBILITY_OPEN_WORLD."')
  413. WHERE t1.parent_id ". (empty ($category) ? "IS NULL" : "='$category'")."
  414. GROUP BY t1.name,t1.code,t1.parent_id,t1.children_count ORDER BY t1.tree_pos";
  415. $resCats = api_sql_query($sqlGetSubCatList, __FILE__, __LINE__);
  416. $thereIsSubCat = FALSE;
  417. if (mysql_num_rows($resCats) > 0)
  418. {
  419. $htmlListCat = "<h4 style=\"margin-top: 0px;\">".get_lang("CatList")."</h4>"."<ul>";
  420. while ($catLine = mysql_fetch_array($resCats))
  421. {
  422. if ($catLine['code'] != $category)
  423. {
  424. $htmlListCat .= "<li>";
  425. $category_has_open_courses = category_has_open_courses($catLine['code']);
  426. if ($category_has_open_courses)
  427. {
  428. //the category contains courses accessible to anonymous visitors
  429. $htmlListCat .= "<a href=\"".$_SERVER['PHP_SELF']."?category=".$catLine['code']."\">".$catLine['name']."</a>";
  430. if (get_setting('show_number_of_courses') == 'true')
  431. {
  432. $htmlListCat .= " (".$catLine['nbCourse']." ".get_lang("Courses").")";
  433. }
  434. }
  435. elseif ($catLine['children_count'] > 0)
  436. {
  437. //the category has children, subcategories
  438. $htmlListCat .= "<a href=\"".$_SERVER['PHP_SELF']."?category=".$catLine['code']."\">".$catLine['name']."</a>";
  439. }
  440. /************************************************************************
  441. end changed code to eliminate the (0 courses) after empty categories
  442. ************************************************************************/
  443. elseif (get_setting('show_empty_course_categories') == 'true')
  444. {
  445. $htmlListCat .= $catLine['name'];
  446. }
  447. $htmlListCat .= "</li>\n";
  448. $thereIsSubCat = true;
  449. }
  450. else
  451. {
  452. $htmlTitre = "<p>";
  453. if ($_setting['show_back_link_on_top_of_tree'] == 'true')
  454. {
  455. $htmlTitre .= "<a href=\"".$_SERVER['PHP_SELF']."\">"."&lt;&lt; ".get_lang("BackToHomePage")."</a>";
  456. }
  457. if (!is_null($catLine['parent_id']) || ($_setting['show_back_link_on_top_of_tree'] <> 'true' && !is_null($catLine['code'])))
  458. {
  459. $htmlTitre .= "<a href=\"".$_SERVER['PHP_SELF']."?category=".$catLine['parent_id']."\">"."&lt;&lt; ".get_lang("Up")."</a>";
  460. }
  461. $htmlTitre .= "</p>\n";
  462. if ($category != "" && !is_null($catLine['code']))
  463. {
  464. $htmlTitre .= "<h3>".$catLine['name']."</h3>\n";
  465. }
  466. else
  467. {
  468. $htmlTitre .= "<h3>".get_lang("Categories")."</h3>\n";
  469. }
  470. }
  471. }
  472. $htmlListCat .= "</ul>\n";
  473. }
  474. echo $htmlTitre;
  475. if ($thereIsSubCat)
  476. {
  477. echo $htmlListCat;
  478. }
  479. while ($categoryName = mysql_fetch_array($resCats))
  480. {
  481. echo "<h3>", $categoryName['name'], "</h3>\n";
  482. }
  483. $numrows = mysql_num_rows($sql_result_courses);
  484. if ($numrows > 0)
  485. {
  486. if ($thereIsSubCat)
  487. {
  488. echo "<hr size=\"1\" noshade=\"noshade\">\n";
  489. }
  490. echo "<h4 style=\"margin-top: 0px;\">", get_lang("CourseList"), "</h4>\n", "<ul>\n";
  491. while ($course = mysql_fetch_array($sql_result_courses))
  492. {
  493. echo "<li>\n";
  494. echo "<a href=\"".$web_course_path.$course['directory'], "/\">", $course['title'], "</a>";
  495. echo "<br/>", $course['visual_code'], " - ", $course['tutor_name'];
  496. if ($_setting['show_different_course_language'] == 'true' && $course['course_language'] <> api_get_setting('platformLanguage'))
  497. {
  498. echo ' - '.$course['course_language'];
  499. }
  500. echo "</li>\n";
  501. }
  502. echo "</ul>\n";
  503. }
  504. else
  505. {
  506. // echo "<blockquote>",get_lang('_No_course_publicly_available'),"</blockquote>\n";
  507. }
  508. if ($category != "")
  509. {
  510. echo "<p>", "<a href=\"".$_SERVER['PHP_SELF']."\"><b>&lt;&lt;</b> ", get_lang("BackToHomePage"), "</a>", "</p>\n";
  511. }
  512. }
  513. ?>