whoisonline.php 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304
  1. <?php // $Id: whoisonline.php 14206 2008-01-30 22:12:56Z yannoo $
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2004 Dokeos S.A.
  6. Copyright (c) various contributors
  7. For a full list of contributors, see "credits.txt".
  8. The full license can be read in "license.txt".
  9. This program is free software; you can redistribute it and/or
  10. modify it under the terms of the GNU General Public License
  11. as published by the Free Software Foundation; either version 2
  12. of the License, or (at your option) any later version.
  13. See the GNU General Public License for more details.
  14. Contact: Dokeos, 181 rue Royale, B-1000 Brussels, Belgium, info@dokeos.com
  15. ==============================================================================
  16. */
  17. /**
  18. * @todo use the correct api_get_path instead of $clarolineRepositoryWeb
  19. */
  20. /**
  21. ==============================================================================
  22. * Who is online list
  23. ==============================================================================
  24. */
  25. // name of the language file that needs to be included
  26. $language_file = array('index','registration');
  27. // including necessary files
  28. require_once('./main/inc/global.inc.php');
  29. require_once (api_get_path(LIBRARY_PATH).'fileManage.lib.php');
  30. require_once (api_get_path(LIBRARY_PATH).'usermanager.lib.php');
  31. // table definitions
  32. $track_user_table = Database::get_main_table(TABLE_MAIN_USER);
  33. if ($_GET['chatid'] != '')
  34. {
  35. //send out call request
  36. $time = time();
  37. $time = date("Y-m-d H:i:s", $time);
  38. $chatid = addslashes($_GET['chatid']);
  39. $sql="update $track_user_table set chatcall_user_id = '".mysql_real_escape_string($_user['user_id'])."', chatcall_date = '".mysql_real_escape_string($time)."', chatcall_text = '' where (user_id = ".mysql_real_escape_string($chatid).")";
  40. $result=api_sql_query($sql,__FILE__,__LINE__);
  41. //redirect caller to chat
  42. header("Location: ".$_configuration['code_append']."chat/chat.php?".api_get_cidreq()."&origin=whoisonline&target=".Security::remove_XSS($chatid));
  43. exit();
  44. }
  45. /**
  46. * Displays a sortable table with the list of online users.
  47. * @param array $user_list
  48. */
  49. function display_user_list($user_list, $_plugins)
  50. {
  51. global $charset;
  52. if ($_GET["id"]=='')
  53. {
  54. $extra_params = array();
  55. $course_url = '';
  56. if(strlen($_GET['cidReq']) > 0)
  57. {
  58. $extra_params['cidReq'] = Database::escape_string($_GET['cidReq']);
  59. $course_url = '&amp;cidReq='.Security::remove_XSS($_GET['cidReq']);
  60. }
  61. foreach($user_list as $user)
  62. {
  63. $uid=$user[0];
  64. $user_info = api_get_user_info($uid);
  65. $table_row = array();
  66. $url = '?id='.$uid.$course_url;
  67. if(strlen($user_info['picture_uri']) > 0)
  68. {
  69. $table_row[] = '<span style="display:none;">1</span><a href="'.$url.'"><img src="'.api_get_path(WEB_CODE_PATH).'upload/users/'.$user_info['picture_uri'].'" alt="'.htmlentities($user_info['firstName'],ENT_QUOTES,$charset).'" width="40" border="0"/></a>';
  70. }
  71. else
  72. {
  73. $table_row[] = '<span style="display:none;">0</span>';
  74. }
  75. $table_row[] = '<a href="'.$url.'">'.$user_info['firstName'].'</a>';
  76. $table_row[] = '<a href="'.$url.'">'.$user_info['lastName'].'</a>';
  77. if (api_get_setting("show_email_addresses") == "true")
  78. {
  79. $table_row[] = Display::encrypted_mailto_link($user_info['mail']);
  80. }
  81. if ( api_is_plugin_installed($_plugins, 'messages') && isset($_SESSION['_user']) )
  82. {
  83. $table_row[] = '<a href="' . api_get_path(WEB_PLUGIN_PATH).'messages/new_message.php?send_to_user=' . $uid. '"><img src="./main/img/forum.gif" alt="'.get_lang("ComposeMessage").'" align="middle"></img></a>';
  84. }
  85. $table_data[] = $table_row;
  86. }
  87. $table_header[] = array(get_lang('UserPicture'),true,'width="50"');
  88. $table_header[] = array(get_lang('FirstName'),true);
  89. $table_header[] = array(get_lang('LastName'),true);
  90. if (api_get_setting("show_email_addresses") == "true")
  91. {
  92. $table_header[] = array(get_lang('Email'),true);
  93. }
  94. if ( api_is_plugin_installed($_plugins, 'messages') && isset($_SESSION['_user']))
  95. {
  96. $table_header[] = array(get_lang('SendMessage'),true);
  97. }
  98. $sorting_options['column'] = (isset ($_GET['column']) ? (int)$_GET['column'] : 2);
  99. Display::display_sortable_table($table_header,$table_data,$sorting_options,array('per_page_default'=>count($table_data)),$extra_params);
  100. }
  101. }
  102. /**
  103. * Displays the information of an individual user
  104. * @param int $user_id
  105. */
  106. function display_individual_user($user_id)
  107. {
  108. global $interbreadcrumb;
  109. $safe_user_id = Database::escape_string($user_id);
  110. // to prevent a hacking attempt: http://www.dokeos.com/forum/viewtopic.php?t=5363
  111. $user_table=Database::get_main_table(TABLE_MAIN_USER);
  112. $sql = "SELECT * FROM $user_table WHERE user_id='".$safe_user_id."'";
  113. $result=api_sql_query($sql,__FILE__,__LINE__);
  114. if (Database::num_rows($result)==1)
  115. {
  116. $user_object = Database::fetch_object($result);
  117. $name = GetFullUserName($user_id).($_SESSION['_uid'] == $user_id ? '&nbsp;<b>('.get_lang('Me').')</b>' : '' );
  118. $alt = GetFullUserName($user_id).($_SESSION['_uid'] == $user_id ? '&nbsp;('.get_lang('Me').')' : '');
  119. $status = ($user_object->status == COURSEMANAGER ? get_lang('Teacher') : get_lang('Student'));
  120. $interbreadcrumb[]=array("url" => "whoisonline.php","name" => get_lang('UsersOnLineList'));
  121. Display::display_header($alt);
  122. api_display_tool_title($alt);
  123. echo '<div style="text-align: center">';
  124. if (strlen(trim($user_object->picture_uri)) > 0)
  125. {
  126. $sysdir_array = UserManager::get_user_picture_path_by_id($safe_user_id,'system');
  127. $sysdir = $sysdir_array['dir'];
  128. $webdir_array = UserManager::get_user_picture_path_by_id($safe_user_id,'web');
  129. $webdir = $webdir_array['dir'];
  130. $fullurl=$webdir.$user_object->picture_uri;
  131. $system_image_path=$sysdir.$user_object->picture_uri;
  132. list($width, $height, $type, $attr) = getimagesize($system_image_path);
  133. $resizing = (($height > 200) ? 'height="200"' : '');
  134. $height += 30;
  135. $width += 30;
  136. $window_name = 'window'.uniqid('');
  137. $onclick = $window_name."=window.open('".$fullurl."','".$window_name."','alwaysRaised=yes, alwaysLowered=no,alwaysOnTop=yes,toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=no,resizable=no,width=".$width.",height=".$height.",left=200,top=20'); return false;";
  138. echo '<a href="#" onclick="'.$onclick.'" ><img src="'.$fullurl.'" '.$resizing.' alt="'.$alt.'"/></a><br />';
  139. }
  140. if (api_get_setting("show_email_addresses") == "true")
  141. {
  142. echo Display::encrypted_mailto_link($user_object->email,$user_object->email).'<br />';
  143. }
  144. echo $status.'<br />';
  145. echo '</div>';
  146. if ($user_object->competences)
  147. {
  148. echo '<dt><strong>'.get_lang('Competences').'</strong></dt>';
  149. echo '<dd>'.$user_object->competences.'</dd>';
  150. }
  151. if ($user_object->diplomas)
  152. {
  153. echo '<dt><strong>'.get_lang('Diplomas').'</strong></dt>';
  154. echo '<dd>'.$user_object->diplomas.'</dd>';
  155. }
  156. if ($user_object->teach) {
  157. echo '<dt><strong>'.get_lang('Teach').'</strong></dt>';
  158. echo '<dd>'.$user_object->teach.'</dd>';;
  159. }
  160. display_productions($user_object->user_id);
  161. if ($user_object->openarea) {
  162. echo '<dt><strong>'.get_lang('Openarea').'</strong></dt>';
  163. echo '<dd>'.$user_object->openarea.'</dd>';
  164. }
  165. }
  166. else
  167. {
  168. Display::display_header(get_lang('UsersOnLineList'));
  169. api_display_tool_title(get_lang('UsersOnLineList'));
  170. }
  171. }
  172. /**
  173. * Display productions in whoisonline
  174. * @param int $user_id User id
  175. * @todo use the correct api_get_path instead of $clarolineRepositoryWeb
  176. */
  177. function display_productions($user_id)
  178. {
  179. global $clarolineRepositoryWeb, $disabled_output;
  180. $sysdir_array = UserManager::get_user_picture_path_by_id($user_id,'system');
  181. $sysdir = $sysdir_array['dir'];
  182. $webdir_array = UserManager::get_user_picture_path_by_id($user_id,'web');
  183. $webdir = $webdir_array['dir'];
  184. if( !is_dir($sysdir))
  185. {
  186. mkpath($sysdir);
  187. }
  188. $handle = opendir($sysdir);
  189. $productions = array();
  190. while ($file = readdir($handle))
  191. {
  192. if ($file == '.' || $file == '..' || $file == '.htaccess')
  193. {
  194. continue; // Skip current and parent directories
  195. }
  196. $productions[] = $file;
  197. }
  198. if(count($productions) > 0)
  199. {
  200. echo '<dt><strong>'.get_lang('Productions').'</strong></dt>';
  201. echo '<dd><ul>';
  202. foreach($productions as $index => $file)
  203. {
  204. // Only display direct file links to avoid browsing an empty directory
  205. if(is_file($sysdir.$file) && $file != $webdir_array['file']){
  206. echo '<li><a href="'.$webdir.urlencode($file).'" target=_blank>'.$file.'</a></li>';
  207. }
  208. // Real productions are under a subdirectory by the User's id
  209. if(is_dir($sysdir.$file)){
  210. $subs = scandir($sysdir.$file);
  211. foreach($subs as $my => $sub)
  212. {
  213. if(substr($sub,0,1) != '.' && is_file($sysdir.$file.'/'.$sub))
  214. {
  215. echo '<li><a href="'.$webdir.urlencode($file).'/'.urlencode($sub).'" target=_blank>'.$sub.'</a></li>';
  216. }
  217. }
  218. }
  219. }
  220. echo '</ul></dd>';
  221. }
  222. }
  223. // This if statement prevents users accessing the who's online feature when it has been disabled.
  224. if ((api_get_setting('showonline','world') == 'true' AND !$_user['user_id']) OR (api_get_setting('showonline','users') == 'true' AND $_user['user_id']))
  225. {
  226. if(isset($_GET['cidReq']) && strlen($_GET['cidReq']) > 0)
  227. {
  228. $user_list = Who_is_online_in_this_course($_user['user_id'],api_get_setting('time_limit_whosonline'),$_GET['cidReq']);
  229. }
  230. else
  231. {
  232. $user_list = WhoIsOnline($_user['user_id'],$_configuration['statistics_database'],api_get_setting('time_limit_whosonline'));
  233. }
  234. $total=count($user_list);
  235. if (!isset($_GET['id']))
  236. {
  237. Display::display_header(get_lang('UsersOnLineList'));
  238. api_display_tool_title(get_lang('UsersOnLineList'));
  239. echo '<b>'.get_lang('TotalOnLine').' : '.$total.'</b>';
  240. if ($_GET['id']=='')
  241. {
  242. echo '<p><a href="javascript:window.location.reload()">'.get_lang('Refresh').'</a></p>';
  243. }
  244. else
  245. {
  246. if(0) // if ($_user['user_id'] && $_GET["id"] != $_user['user_id'])
  247. {
  248. echo '<a href="'.api_get_self().'?chatid='.Security::remove_XSS($_GET['id']).'">'.get_lang('SendChatRequest').'</a>';
  249. }
  250. }
  251. }
  252. if ($user_list!=false)
  253. {
  254. if (!isset($_GET['id']))
  255. {
  256. display_user_list($user_list, $_plugins);
  257. }
  258. else //individual user information - also displays header info
  259. {
  260. display_individual_user($_GET['id']);
  261. }
  262. }
  263. elseif(isset($_GET['id']))
  264. {
  265. Display::display_header(get_lang('UsersOnLineList'));
  266. api_display_tool_title(get_lang('UsersOnLineList'));
  267. }
  268. }
  269. else
  270. {
  271. Display::display_header(get_lang('UsersOnLineList'));
  272. Display::display_error_message(get_lang('AccessNotAllowed'));
  273. }
  274. $referer = empty($_GET['referer'])?'index.php':htmlentities(strip_tags($_GET['referer']),ENT_QUOTES,$charset);
  275. echo '<a href="'.(Security::remove_XSS($_GET['id'])?'javascript:window.history.back();':$referer).'">&lt; '.get_lang('Back').'</a>';
  276. /*
  277. ==============================================================================
  278. FOOTER
  279. ==============================================================================
  280. */
  281. Display::display_footer();
  282. ?>