courses.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. use \Chamilo\CoreBundle\Entity\SequenceResource;
  4. /**
  5. * Template (front controller in MVC pattern) used for distpaching
  6. * to the controllers depend on the current action
  7. * @author Christian Fasanando <christian1827@gmail.com> - Beeznest
  8. * @package chamilo.auth
  9. */
  10. // Delete the globals['_cid'], we don't need it here.
  11. $cidReset = true; // Flag forcing the 'current course' reset
  12. require_once '../inc/global.inc.php';
  13. $ctok = Security::get_existing_token();
  14. // Get Limit data
  15. $limit = CourseCategory::getLimitArray();
  16. // Section for the tabs.
  17. $this_section = SECTION_CATALOG;
  18. if (api_get_setting('course_catalog_published') !== 'true') {
  19. // Access rights: anonymous users can't do anything useful here.
  20. api_block_anonymous_users();
  21. }
  22. $user_can_view_page = false;
  23. //For students
  24. if (api_get_setting('allow_students_to_browse_courses') === 'false') {
  25. $user_can_view_page = false;
  26. } else {
  27. $user_can_view_page = true;
  28. }
  29. //For teachers/admins
  30. if (api_is_platform_admin() || api_is_course_admin() || api_is_allowed_to_create_course()) {
  31. $user_can_view_page = true;
  32. }
  33. // filter actions
  34. $actions = array(
  35. 'sortmycourses',
  36. 'createcoursecategory',
  37. 'subscribe',
  38. 'deletecoursecategory',
  39. 'display_courses',
  40. 'display_random_courses',
  41. 'subscribe_user_with_password',
  42. 'display_sessions',
  43. 'subscribe_to_session',
  44. 'search_tag',
  45. 'search_session'
  46. );
  47. $action = CoursesAndSessionsCatalog::is(CATALOG_SESSIONS) ? 'display_sessions' : 'display_courses';
  48. if (isset($_GET['action']) && in_array($_GET['action'], $actions)) {
  49. $action = Security::remove_XSS($_GET['action']);
  50. }
  51. $categoryCode = isset($_GET['category_code']) && !empty($_GET['category_code']) ? $_GET['category_code'] : 'ALL';
  52. $nameTools = CourseCategory::getCourseCatalogNameTools($action);
  53. if (empty($nameTools)) {
  54. $nameTools = get_lang('CourseManagement');
  55. } else {
  56. if (!in_array($action, array('sortmycourses', 'createcoursecategory', 'display_random_courses', 'display_courses', 'subscribe'))) {
  57. $interbreadcrumb[] = array(
  58. 'url' => api_get_path(WEB_CODE_PATH).'auth/courses.php',
  59. 'name' => get_lang('CourseManagement'),
  60. );
  61. }
  62. if ($action === 'createcoursecategory') {
  63. $interbreadcrumb[] = array(
  64. 'url' => api_get_path(WEB_CODE_PATH).'auth/courses.php?action=sortmycourses',
  65. 'name' => get_lang('SortMyCourses'),
  66. );
  67. }
  68. $interbreadcrumb[] = array('url' => '#', 'name' => $nameTools);
  69. }
  70. // course description controller object
  71. $courses_controller = new CoursesController();
  72. // We are moving a course or category of the user up/down the list (=Sort My Courses).
  73. if (isset($_GET['move'])) {
  74. if (isset($_GET['course'])) {
  75. $courses_controller->move_course(
  76. $_GET['move'],
  77. $_GET['course'],
  78. $_GET['category']
  79. );
  80. }
  81. if (isset($_GET['category']) && !$_GET['course']) {
  82. $courses_controller->move_category($_GET['move'], $_GET['category']);
  83. }
  84. }
  85. // We are moving the course of the user to a different user defined course category (=Sort My Courses).
  86. if (isset($_POST['submit_change_course_category'])) {
  87. if ($ctok == $_POST['sec_token']) {
  88. $courses_controller->change_course_category(
  89. $_POST['course_2_edit_category'],
  90. $_POST['course_categories']
  91. );
  92. }
  93. }
  94. // We edit course category
  95. if (isset($_POST['submit_edit_course_category']) &&
  96. isset($_POST['title_course_category']) &&
  97. strlen(trim($_POST['title_course_category'])) > 0
  98. ) {
  99. if ($ctok == $_POST['sec_token']) {
  100. $courses_controller->edit_course_category(
  101. $_POST['title_course_category'],
  102. $_POST['edit_course_category']
  103. );
  104. }
  105. }
  106. // we are deleting a course category
  107. if ($action == 'deletecoursecategory' && isset($_GET['id'])) {
  108. if ($ctok == $_GET['sec_token']) {
  109. $get_id_cat = intval($_GET['id']);
  110. $courses_controller->delete_course_category($get_id_cat);
  111. }
  112. }
  113. // We are creating a new user defined course category (= Create Course Category).
  114. if (isset($_POST['create_course_category']) &&
  115. isset($_POST['title_course_category']) &&
  116. strlen(trim($_POST['title_course_category'])) > 0
  117. ) {
  118. if ($ctok == $_POST['sec_token']) {
  119. $courses_controller->add_course_category($_POST['title_course_category']);
  120. }
  121. }
  122. // search courses
  123. if (isset($_REQUEST['search_course'])) {
  124. if ($ctok == $_REQUEST['sec_token']) {
  125. $courses_controller->search_courses($_REQUEST['search_term'], null, null, null, $limit, true);
  126. }
  127. }
  128. // Subscribe user to course
  129. if (isset($_REQUEST['subscribe_course'])) {
  130. if ($ctok == $_GET['sec_token']) {
  131. $courses_controller->subscribe_user($_GET['subscribe_course'], $_GET['search_term'], $categoryCode);
  132. }
  133. }
  134. // We are unsubscribing from a course (=Unsubscribe from course).
  135. if (isset($_GET['unsubscribe'])) {
  136. $search_term = isset($_GET['search_term']) ? $_GET['search_term'] : null;
  137. if ($ctok == $_GET['sec_token']) {
  138. $courses_controller->unsubscribe_user_from_course($_GET['unsubscribe'], $search_term, $categoryCode);
  139. }
  140. }
  141. // We are unsubscribing from a course (=Unsubscribe from course).
  142. if (isset($_POST['unsubscribe'])) {
  143. if ($ctok == $_POST['sec_token']) {
  144. $courses_controller->unsubscribe_user_from_course($_POST['unsubscribe']);
  145. }
  146. }
  147. switch ($action) {
  148. case 'subscribe_user_with_password':
  149. $courses_controller->subscribe_user(
  150. isset($_POST['subscribe_user_with_password']) ? $_POST['subscribe_user_with_password'] : '',
  151. isset($_POST['search_term']) ? $_POST['search_term'] : '',
  152. isset($_POST['category_code']) ? $_POST['category_code'] : ''
  153. );
  154. break;
  155. case 'createcoursecategory':
  156. $courses_controller->categories_list($action);
  157. break;
  158. case 'deletecoursecategory':
  159. $courses_controller->courses_list($action);
  160. break;
  161. case 'sortmycourses':
  162. $courses_controller->courses_list($action);
  163. break;
  164. case 'subscribe':
  165. if (!$user_can_view_page) {
  166. api_not_allowed(true);
  167. }
  168. if (!CoursesAndSessionsCatalog::is(CATALOG_SESSIONS)) {
  169. $courses_controller->courses_categories(
  170. $action,
  171. $categoryCode,
  172. null,
  173. null,
  174. null,
  175. $limit
  176. );
  177. } else {
  178. header('Location: ' . api_get_self());
  179. exit;
  180. }
  181. break;
  182. case 'display_random_courses':
  183. if (!$user_can_view_page) {
  184. api_not_allowed(true);
  185. }
  186. $courses_controller->courses_categories($action);
  187. break;
  188. case 'display_courses':
  189. if (!$user_can_view_page) {
  190. api_not_allowed(true);
  191. }
  192. $courses_controller->courses_categories(
  193. $action,
  194. $categoryCode,
  195. null,
  196. null,
  197. null,
  198. $limit
  199. );
  200. break;
  201. case 'display_sessions':
  202. if (!$user_can_view_page) {
  203. api_not_allowed(true);
  204. }
  205. $courses_controller->sessionsList($action, $nameTools, $limit);
  206. break;
  207. case 'subscribe_to_session':
  208. if (!$user_can_view_page) {
  209. api_not_allowed(true);
  210. }
  211. $userId = api_get_user_id();
  212. $confirmed = isset($_GET['confirm']);
  213. $sessionId = intval($_GET['session_id']);
  214. if (empty($userId)) {
  215. api_not_allowed();
  216. exit;
  217. }
  218. if (!$confirmed) {
  219. $template = new Template(null, false, false, false, false, false);
  220. $template->assign('session_id', $sessionId);
  221. $layout = $template->get_template('auth/confirm_session_subscription.tpl');
  222. echo $template->fetch($layout);
  223. exit;
  224. }
  225. $registrationAllowed = api_get_setting('catalog_allow_session_auto_subscription');
  226. if ($registrationAllowed === 'true') {
  227. $entityManager = Database::getManager();
  228. $repository = $entityManager->getRepository('ChamiloCoreBundle:SequenceResource');
  229. $sequences = $repository->getRequirements(
  230. $sessionId,
  231. SequenceResource::SESSION_TYPE
  232. );
  233. if (count($sequences) > 0) {
  234. $requirementsData = SequenceResourceManager::checkRequirementsForUser(
  235. $sequences,
  236. SequenceResource::SESSION_TYPE,
  237. $userId
  238. );
  239. $continueWithSubscription = SequenceResourceManager::checkSequenceAreCompleted($requirementsData);
  240. if (!$continueWithSubscription) {
  241. header('Location: ' . api_get_path(WEB_CODE_PATH) . 'auth/courses.php');
  242. exit;
  243. }
  244. }
  245. SessionManager::suscribe_users_to_session(
  246. $_GET['session_id'],
  247. array($userId),
  248. SESSION_VISIBLE_READ_ONLY,
  249. false
  250. );
  251. $coursesList = SessionManager::get_course_list_by_session_id($_GET['session_id']);
  252. $count = count($coursesList);
  253. $url = '';
  254. if ($count <= 0) {
  255. // no course in session -> return to catalog
  256. $url = api_get_path(WEB_CODE_PATH) . 'auth/courses.php';
  257. } elseif ($count == 1) {
  258. // only one course, so redirect directly to this course
  259. foreach ($coursesList as $course) {
  260. $url = api_get_path(WEB_COURSE_PATH) . $course['directory'] . '/index.php?id_session=' . intval($_GET['session_id']);
  261. }
  262. } else {
  263. $url = api_get_path(WEB_CODE_PATH) . 'session/index.php?session_id=' . intval($_GET['session_id']);
  264. }
  265. header('Location: ' . $url);
  266. exit;
  267. }
  268. //else show error message?
  269. break;
  270. case 'search_tag':
  271. if (!$user_can_view_page) {
  272. api_not_allowed(true);
  273. }
  274. $courses_controller->sessionsListByCoursesTag($limit);
  275. break;
  276. case 'search_session':
  277. if (!$user_can_view_page) {
  278. api_not_allowed(true);
  279. }
  280. $courses_controller->sessionListBySearch($limit);
  281. break;
  282. }