123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587 |
- <?php // $Id: edit_document.php 14907 2008-04-15 20:21:15Z juliomontoya $
- /*
- ==============================================================================
- Dokeos - elearning and course management software
- Copyright (c) 2004-2008 Dokeos SPRL
- Copyright (c) 2003 Ghent University (UGent)
- Copyright (c) 2001 Universite catholique de Louvain (UCL)
- Copyright (c) Olivier Brouckaert
- Copyright (c) Roan Embrechts
- Copyright (c) Rene Haentjens (RH) (update 2004/09/30)
- Copyright (c) Bart Mollet, Hogeschool Gent
- For a full list of contributors, see "credits.txt".
- The full license can be read in "license.txt".
- This program is free software; you can redistribute it and/or
- modify it under the terms of the GNU General Public License
- as published by the Free Software Foundation; either version 2
- of the License, or (at your option) any later version.
- See the GNU General Public License for more details.
- Contact address: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium, info@dokeos.com
-
- ==============================================================================
- */
- /**
- ==============================================================================
- * This file allows editing documents.
- *
- * Based on create_document, this file allows
- * - edit name
- * - edit comments
- * - edit metadata (requires a document table entry)
- * - edit html content (only for htm/html files)
- *
- * For all files
- * - show editable name field
- * - show editable comments field
- * Additionally, for html and text files
- * - show RTE
- *
- * Remember, all files and folders must always have an entry in the
- * database, regardless of wether they are visible/invisible, have
- * comments or not.
- *
- * @package dokeos.document
- * @todo improve script structure (FormValidator is used to display form, but
- * not for validation at the moment)
- ==============================================================================
- */
- // name of the language file that needs to be included
- $language_file = 'document';
- /*
- ------------------------------------------------------------------------------
- Included libraries
- ------------------------------------------------------------------------------
- */
- include('../inc/global.inc.php');
- $htmlHeadXtra[] = '
- <script type="text/javascript">
- function launch_templates(){
- window.frames[0].FCKToolbarItems.GetItem("Templates").Click();
- }
- </script>';
- $_SESSION['whereami'] = 'document/create';
- $this_section=SECTION_COURSES;
- include(api_get_path(LIBRARY_PATH).'fileManage.lib.php');
- include(api_get_path(LIBRARY_PATH).'fileUpload.lib.php');
- include(api_get_path(LIBRARY_PATH).'events.lib.inc.php');
- include(api_get_path(LIBRARY_PATH).'document.lib.php');
- include_once(api_get_path(LIBRARY_PATH) . 'groupmanager.lib.php');
- require_once(api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php');
- $fck_attribute['Width'] = '100%';
- $fck_attribute['Height'] = '950';
- $fck_attribute['ToolbarSet'] = 'Full';
- $fck_attribute['Config']['FullPage'] = true;
- /*
- ------------------------------------------------------------------------------
- Constants & Variables
- ------------------------------------------------------------------------------
- */
- $file = $_GET['file'];
- //echo('file: '.$file.'<br>');
- $doc=basename($file);
- //echo('doc: '.$doc.'<br>');
- $dir=$_GET['curdirpath'];
- //echo('dir: '.$dir.'<br>');
- $file_name = $doc;
- //echo('file_name: '.$file_name.'<br>');
- $baseServDir = api_get_path(SYS_COURSE_PATH);
- $baseServUrl = $_configuration['url_append']."/";
- $courseDir = $_course['path']."/document";
- $baseWorkDir = $baseServDir.$courseDir;
- $group_document = false;
- $use_document_title = (get_setting('use_document_title')=='true')?true:false;
- $noPHP_SELF=true;
- /*
- ------------------------------------------------------------------------------
- Other init code
- ------------------------------------------------------------------------------
- */
- /* please do not modify this dirname formatting */
- if(strstr($dir,'..'))
- {
- $dir='/';
- }
- if($dir[0] == '.')
- {
- $dir=substr($dir,1);
- }
- if($dir[0] != '/')
- {
- $dir='/'.$dir;
- }
- if($dir[strlen($dir)-1] != '/')
- {
- $dir.='/';
- }
- $filepath=api_get_path('SYS_COURSE_PATH').$_course['path'].'/document'.$dir;
- if(!is_dir($filepath))
- {
- $filepath=api_get_path('SYS_COURSE_PATH').$_course['path'].'/document/';
- $dir='/';
- }
- /**************************************************/
- $nameTools = get_lang('EditDocument');
- $dbTable = Database::get_course_table(TABLE_DOCUMENT);
- if(isset($_SESSION['_gid']) && $_SESSION['_gid']!='')
- {
- $req_gid = '&gidReq='.$_SESSION['_gid'];
- $interbreadcrumb[]= array ("url"=>"../group/group_space.php?gidReq=".$_SESSION['_gid'], "name"=> get_lang('GroupSpace'));
- $group_document = true;
- $noPHP_SELF=true;
- }
- $interbreadcrumb[]=array("url"=>"./document.php?curdirpath=".urlencode($_GET['curdirpath']).$req_gid, "name"=> get_lang('Documents'));
- $is_allowedToEdit = is_allowed_to_edit() || $_SESSION['group_member_with_upload_rights'];
- if(!$is_allowedToEdit)
- {
- api_not_allowed(true);
- }
- event_access_tool(TOOL_DOCUMENT);
- /*
- ==============================================================================
- MAIN TOOL CODE
- ==============================================================================
- */
- /*
- ------------------------------------------------------------------------------
- General functions
- ------------------------------------------------------------------------------
- */
- /*
- ------------------------------------------------------------------------------
- Workhorse functions
- These do the actual work that is expected from of this tool, other functions
- are only there to support these ones.
- ------------------------------------------------------------------------------
- */
- /**
- This function changes the name of a certain file.
- It needs no global variables, it takes all info from parameters.
- It returns nothing.
- */
- function change_name($baseWorkDir, $sourceFile, $renameTo, $dir, $doc)
- {
- $file_name_for_change = $baseWorkDir.$dir.$sourceFile;
- //api_display_debug_info("call my_rename: params $file_name_for_change, $renameTo");
-
- $renameTo = disable_dangerous_file($renameTo); //avoid renaming to .htaccess file
- $renameTo = my_rename($file_name_for_change, stripslashes($renameTo)); //fileManage API
-
- if ($renameTo)
- {
- if (isset($dir) && $dir != "")
- {
- $sourceFile = $dir.$sourceFile;
- $new_full_file_name = dirname($sourceFile)."/".$renameTo;
- }
- else
- {
- $sourceFile = "/".$sourceFile;
- $new_full_file_name = "/".$renameTo;
- }
- update_db_info("update", $sourceFile, $new_full_file_name); //fileManage API
- $name_changed = get_lang("ElRen");
- $info_message = get_lang('fileModified');
- $GLOBALS['file_name'] = $renameTo;
- $GLOBALS['doc'] = $renameTo;
- return $info_message;
- }
- else
- {
- $dialogBox = get_lang('FileExists');
- /* return to step 1 */
- $rename = $sourceFile;
- unset($sourceFile);
- }
- }
- /*
- ------------------------------------------------------------------------------
- Code to change the comment
- ------------------------------------------------------------------------------
- Step 2. React on POST data
- (Step 1 see below)
- */
- if (isset($_POST['newComment']))
- {
- //to try to fix the path if it is wrong
- $commentPath = str_replace("//", "/", $_POST['commentPath']);
- $newComment = trim($_POST['newComment']); // remove spaces
- $newTitle = trim($_POST['newTitle']); // remove spaces
- // Check if there is already a record for this file in the DB
- $result = api_sql_query ("SELECT * FROM $dbTable WHERE path LIKE BINARY '".$commentPath."'",__FILE__,__LINE__);
- while($row = Database::fetch_array($result, 'ASSOC'))
- {
- $attribute['path' ] = $row['path' ];
- $attribute['comment' ] = $row['title' ];
- }
- //Determine the correct query to the DB
- //new code always keeps document in database
- $query = "UPDATE $dbTable SET comment='".$newComment."', title='".$newTitle."' WHERE path LIKE BINARY '".$commentPath."'";
- api_sql_query($query,__FILE__,__LINE__);
- //this is an UPDATE page... we shouldn't be creating new documents here.
- /*
- if (mysql_affected_rows() == 0)
- {
- mysql_query("INSERT INTO $dbTable SET path='".$commentPath."', title='".$newTitle."', comment='".$newComment."'");
- }
- */
- $oldComment = $newComment;
- $oldTitle = $newTitle;
- $comments_updated = get_lang('ComMod');
- $info_message = get_lang('fileModified');
- }
- /*
- ------------------------------------------------------------------------------
- Code to change the name
- ------------------------------------------------------------------------------
- Step 2. react on POST data - change the name
- (Step 1 see below)
- */
- if (isset($_POST['renameTo']))
- {
- $info_message = change_name($baseWorkDir, $_GET['sourceFile'], $_POST['renameTo'], $dir, $doc);
- //assume name change was successful
- }
- /*
- ------------------------------------------------------------------------------
- Code to change the comment
- ------------------------------------------------------------------------------
- Step 1. Create dialog box.
- */
- /** TODO check if this code is still used **/
- /* Search the old comment */ // RH: metadata: added 'id,'
- $result = api_sql_query("SELECT id,comment,title FROM $dbTable WHERE path LIKE BINARY '$dir$doc'",__FILE__,__LINE__);
- $message = "<i>Debug info</i><br>directory = $dir<br>";
- $message .= "document = $file_name<br>";
- $message .= "comments file = " . $file . "<br>";
- //Display::display_normal_message($message);
- while($row = Database::fetch_array($result, 'ASSOC'))
- {
- $oldComment = $row['comment'];
- $oldTitle = $row['title'];
- $docId = $row['id']; // RH: metadata
- }
- /*
- ------------------------------------------------------------------------------
- WYSIWYG HTML EDITOR - Program Logic
- ------------------------------------------------------------------------------
- */
- if($is_allowedToEdit)
- {
- if($_POST['formSent']==1)
- {
- if(isset($_POST['renameTo']))
- {
- $_POST['filename']=disable_dangerous_file($_POST['renameTo']);
- $extension=explode('.',$_POST['filename']);
- $extension=$extension[sizeof($extension)-1];
- $_POST['filename']=str_replace('.'.$extension,'',$_POST['filename']);
- }
- $filename=stripslashes($_POST['filename']);
- $texte=trim(str_replace(array("\r","\n"),"",stripslashes($_POST['texte'])));
- if(!strstr($texte,'/css/frames.css'))
- {
- $texte=str_replace('</title></head>','</title><link rel="stylesheet" href="./css/frames.css" type="text/css" /></head>',$texte);
- }
- // RH commented: $filename=replace_dangerous_char($filename,'strict');
- if($_POST['extension'] != 'htm' && $_POST['extension'] != 'html')
- {
- $extension='html';
- }
- else
- {
- $extension = $_POST['extension'];
- }
- $file=$dir.$filename.'.'.$extension;
- if(empty($texte))
- {
- $msgError=get_lang('NoText');
- }
- elseif(empty($filename))
- {
- $msgError=get_lang('NoFileName');
- }
- else
- {
- if($fp=@fopen($filepath.$filename.'.'.$extension,'w'))
- {
- $texte = text_filter($texte);
- //echo('file path: '.$filepath.$filename.'.'.$extension);
-
- //if flv player, change absolute paht temporarely to prevent from erasing it in the following lines
- $texte = str_replace('flv=h','flv=h|',$texte);
- $texte = str_replace('flv=/','flv=/|',$texte);
-
- $path_to_remove=api_get_path('WEB_COURSE_PATH').$_course['path'].'/document'.$dir;
- $texte=str_replace($path_to_remove,'./',$texte);
- $texte=str_replace('mp3player.swf?son='.urlencode($path_to_remove),'mp3player.swf?son=.%2F',$texte);
-
-
- // for flv player : change back the url to absolute
- $texte = str_replace('flv=h|','flv=h',$texte);
- $texte = str_replace('flv=/|','flv=/',$texte);
-
- //echo('texte: '.$texte);
- //echo (fputs($fp,$texte))?'FPUTS OK':'FPUTS NIET OK';
- fputs($fp,$texte);
-
- fclose($fp);
- $perm = api_get_setting('permissions_for_new_directories');
- $perm = octdec(!empty($perm)?$perm:'0770');
- if(!is_dir($filepath.'css'))
- {
- mkdir($filepath.'css',$perm);
- $doc_id=add_document($_course,$dir.'css','folder',0,'css');
- api_item_property_update($_course, TOOL_DOCUMENT, $doc_id, 'FolderCreated', $_user['user_id']);
- api_item_property_update($_course, TOOL_DOCUMENT, $doc_id, 'invisible', $_user['user_id']);
- }
- if(!is_file($filepath.'css/frames.css'))
- {
- copy(api_get_path(SYS_CODE_PATH).'css/frames.css',$filepath.'css/frames.css');
- $doc_id=add_document($_course,$dir.'css/frames.css','file',filesize($filepath.'css/frames.css'),'frames.css');
- api_item_property_update($_course, TOOL_DOCUMENT, $doc_id, 'DocumentAdded', $_user['user_id']);
- api_item_property_update($_course, TOOL_DOCUMENT, $doc_id, 'invisible', $_user['user_id']);
- }
- // "WHAT'S NEW" notification: update table item_property (previously last_tooledit)
- $document_id = DocumentManager::get_document_id($_course,$file);
- if($document_id)
- {
- $file_size = filesize($filepath.$filename.'.'.$extension);
- update_existing_document($_course, $document_id,$file_size);
- api_item_property_update($_course, TOOL_DOCUMENT, $document_id, 'DocumentUpdated', $_user['user_id']);
- //update parent folders
- item_property_update_on_folder($_course,$dir,$_user['user_id']);
- header('Location: document.php?curdirpath='.urlencode($_GET['curdirpath']).$req_gid);
- exit();
- }
- else
- {
- //$msgError=get_lang('Impossible');
- }
- }
- else
- {
- $msgError=get_lang('Impossible');
- }
- }
- }
- }
- if(file_exists($filepath.$doc))
- {
- $extension=explode('.',$doc);
- $extension=$extension[sizeof($extension)-1];
- $filename=str_replace('.'.$extension,'',$doc);
- $extension=strtolower($extension);
- if(!in_array($extension,array('html','htm')))
- {
- $extension=$filename=$texte='';
- }
- else
- {
- $texte=file($filepath.$doc);
- $texte=implode('',$texte);
- $path_to_append=api_get_path('WEB_COURSE_PATH').$_course['path'].'/document'.$dir;
- $texte=str_replace('="./','="'.$path_to_append,$texte);
- $texte=str_replace('mp3player.swf?son=.%2F','mp3player.swf?son='.urlencode($path_to_append),$texte);
- }
- }
- /*
- ==============================================================================
- MAIN EDIT_DOCUMENT CODE
- - react on input
- - display user interface
- ==============================================================================
- */
- Display::display_header($nameTools,"Doc");
- api_display_tool_title(get_lang("EditDocument") . ": $file_name");
- if(isset($msgError))
- {
- Display::display_error_message($msgError); //main API
- }
- if( isset($info_message))
- {
- Display::display_normal_message($info_message); //main API
- }
- // readonly
- $sql = 'SELECT id, readonly FROM '.$dbTable.' WHERE path LIKE BINARY "'.$dir.$doc.'"';
- $rs = api_sql_query($sql, __FILE__, __LINE__);
- $readonly = Database::result($rs,0,'readonly');
- $doc_id = Database::result($rs,0,'id');
- // owner
- $sql = 'SELECT insert_user_id FROM '.Database::get_course_table(TABLE_ITEM_PROPERTY).'
- WHERE tool LIKE "document"
- AND ref='.intval($doc_id);
- $rs = api_sql_query($sql, __FILE__, __LINE__);
- $owner_id = Database::result($rs,0,'insert_user_id');
- if (api_is_allowed_to_edit() || GroupManager :: is_user_in_group($_user['user_id'],$_SESSION['_gid'] ))
- {
- // if readonly, check if it the owner of the file ?
- if ($owner_id == $_user['user_id'] || api_is_platform_admin())
- {
- $action = api_get_self().'?sourceFile='.urlencode($file_name).'&curdirpath='.urlencode($_GET['curdirpath']).'&file='.urlencode($_GET['file']).'&doc='.urlencode($doc);
- $form = new FormValidator('formEdit','post',$action);
- $form->addElement('hidden','filename');
- $form->addElement('hidden','extension');
- $form->addElement('hidden','file_path');
- $form->addElement('hidden','commentPath');
-
- if($use_document_title)
- {
- $form->add_textfield('newTitle',get_lang('Title'));
- $defaults['newTitle'] = $oldTitle;
- }
- else
- {
- $form->addElement('hidden','renameTo');
- }
-
- if($extension == "htm" || $extension == "html")
- {
- $form->addElement('hidden','formSent');
- $defaults['formSent'] = 1;
- $form->addElement('submit','submit',get_lang('Ok'));
- $form->add_html_editor('texte','<a style="cursor:pointer" onclick="launch_templates()"><img src="'.api_get_path(WEB_IMG_PATH).'templates.gif" /></a>',false,true);
- $defaults['texte'] = $texte;
- }
- if(!$group_document)
- {
- $metadata_link = '<a href="../metadata/index.php?eid='.urlencode('Document.'.$docId).'">'.get_lang('AddMetadata').'</a>';
- $form->addElement('static',null,get_lang('Metadata'),$metadata_link);
- }
-
- $form->addElement('textarea','newComment',get_lang('Comment'),'rows="3" style="width:300px;"');
-
- /* if($owner_id != $_user['user_id'])
- {
- $form->addElement('hidden','readonly');
- }
- else
- {
- */
- $renderer = $form->defaultRenderer();
- $renderer->setElementTemplate('<div class="row"><div class="label"></div><div class="formw">{element}{label}</div></div>', 'readonly');
- $form->addElement('checkbox','readonly',get_lang('ReadOnly'));
- //}
-
- $defaults['readonly']=$readonly;
-
- $form->addElement('submit','submit',get_lang('Ok'));
- $defaults['filename'] = $filename;
- $defaults['extension'] = $extension;
- $defaults['file_path'] = $_GET['file'];
- $defaults['commentPath'] = $file;
- $defaults['renameTo'] = $file_name;
- $defaults['newComment'] = $oldComment;
- $form->setDefaults($defaults);
- $form->display();
- }
- else
- {
- Display::display_error_message(get_lang('ReadOnlyFile')); //main API
- }
- }
- /*
- ==============================================================================
- DOKEOS FOOTER
- ==============================================================================
- */
- Display::display_footer();
- ?>
|