session_list.php 7.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259
  1. <?php
  2. $language_file='admin';
  3. $cidReset=true;
  4. include('../inc/global.inc.php');
  5. api_protect_admin_script(true);
  6. $tbl_session=Database::get_main_table(TABLE_MAIN_SESSION);
  7. $tbl_session_rel_course=Database::get_main_table(TABLE_MAIN_SESSION_COURSE);
  8. $tbl_session_rel_course_rel_user=Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  9. $tbl_session_rel_user=Database::get_main_table(TABLE_MAIN_SESSION_USER);
  10. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  11. $page=intval($_GET['page']);
  12. $action=$_REQUEST['action'];
  13. $sort=in_array($_GET['sort'],array('name','nbr_courses','date_start','date_end'))?$_GET['sort']:'name';
  14. $idChecked = $_REQUEST['idChecked'];
  15. if($action == 'delete')
  16. {
  17. if(is_array($idChecked))
  18. {
  19. $idChecked=Database::escape_string(implode(',',$idChecked));
  20. }
  21. else
  22. {
  23. $idChecked=intval($idChecked);
  24. }
  25. if(!api_is_platform_admin())
  26. {
  27. $sql = 'SELECT session_admin_id FROM '.Database :: get_main_table(TABLE_MAIN_SESSION).' WHERE id='.$idChecked;
  28. $rs = api_sql_query($sql,__FILE__,__LINE__);
  29. if(mysql_result($rs,0,0)!=$_user['user_id'])
  30. {
  31. api_not_allowed(true);
  32. }
  33. }
  34. api_sql_query("DELETE FROM $tbl_session WHERE id IN($idChecked)",__FILE__,__LINE__);
  35. api_sql_query("DELETE FROM $tbl_session_rel_course WHERE id_session IN($idChecked)",__FILE__,__LINE__);
  36. api_sql_query("DELETE FROM $tbl_session_rel_course_rel_user WHERE id_session IN($idChecked)",__FILE__,__LINE__);
  37. api_sql_query("DELETE FROM $tbl_session_rel_user WHERE id_session IN($idChecked)",__FILE__,__LINE__);
  38. header('Location: '.api_get_self().'?sort='.$sort);
  39. exit();
  40. }
  41. $limit=1;
  42. $from=$page * $limit;
  43. //if user is crfp admin only list its sessions
  44. if(!api_is_platform_admin())
  45. {
  46. $where = 'WHERE session_admin_id='.intval($_user['user_id']);
  47. $where .= (empty($_REQUEST['keyword']) ? " " : " AND name LIKE '%".addslashes($_REQUEST['keyword'])."%'");
  48. }
  49. else{
  50. $where .= (empty($_REQUEST['keyword']) ? " " : " WHERE name LIKE '%".addslashes($_REQUEST['keyword'])."%'");
  51. }
  52. if(trim($where) == ''){
  53. $and=" WHERE id_coach=user_id";
  54. }
  55. else{
  56. $and=" AND id_coach=user_id";
  57. }
  58. $result=api_sql_query("SELECT id,name,nbr_courses,date_start,date_end, firstname, lastname
  59. FROM $tbl_session, $tbl_user
  60. $where
  61. $and
  62. ORDER BY $sort
  63. LIMIT $from,".($limit+1),__FILE__,__LINE__);
  64. $Sessions=api_store_result($result);
  65. $nbr_results=sizeof($Sessions);
  66. $tool_name = get_lang('SessionList');
  67. $interbreadcrumb[]=array("url" => "index.php","name" => get_lang('AdministrationTools'));
  68. Display::display_header($tool_name);
  69. api_display_tool_title($tool_name);
  70. ?>
  71. <div id="main">
  72. <?php
  73. if(isset($_GET['action'])){
  74. Display::display_normal_message(Security::remove_XSS($_GET['message']), false);
  75. }
  76. ?>
  77. <form method="POST" action="session_list.php">
  78. <input type="text" name="keyword" value="<?php echo Security::remove_XSS($_GET['keyword']); ?>"/>
  79. <input type="submit" value="<?php echo get_lang('Search'); ?>"/>
  80. </form>
  81. <form method="post" action="<?php echo api_get_self(); ?>?action=delete&sort=<?php echo $sort; ?>" onsubmit="javascript:if(!confirm('<?php echo get_lang('ConfirmYourChoice'); ?>')) return false;">
  82. <div align="left">
  83. <?php
  84. if(count($Sessions)==0 && isset($_POST['keyword']))
  85. {
  86. echo get_lang('NoSearchResults');
  87. }
  88. else
  89. {
  90. if($page)
  91. {
  92. ?>
  93. <a href="<?php echo api_get_self(); ?>?page=<?php echo $page-1; ?>&sort=<?php echo $sort; ?>&keyword=<?php echo $_REQUEST['keyword']; ?>"><?php echo get_lang('Previous'); ?></a>
  94. <?php
  95. }
  96. else
  97. {
  98. echo get_lang('Previous');
  99. }
  100. ?>
  101. |
  102. <?php
  103. if($nbr_results > $limit)
  104. {
  105. ?>
  106. <a href="<?php echo api_get_self(); ?>?page=<?php echo $page+1; ?>&sort=<?php echo $sort; ?>&keyword=<?php echo $_REQUEST['keyword']; ?>"><?php echo get_lang('Next'); ?></a>
  107. <?php
  108. }
  109. else
  110. {
  111. echo get_lang('Next');
  112. }
  113. ?>
  114. </div>
  115. <br>
  116. <table class="data_table" width="100%">
  117. <tr>
  118. <th>&nbsp;</th>
  119. <th><a href="<?php echo api_get_self(); ?>?sort=name"><?php echo get_lang('NameOfTheSession'); ?></a></th>
  120. <th><a href="<?php echo api_get_self(); ?>?sort=nbr_courses"><?php echo get_lang('NumberOfCourses'); ?></a></th>
  121. <th><a href="<?php echo api_get_self(); ?>?sort=date_start"><?php echo get_lang('StartDate'); ?></a></th>
  122. <th><a href="<?php echo api_get_self(); ?>?sort=date_end"><?php echo get_lang('EndDate'); ?></a></th>
  123. <th><a href="<?php echo api_get_self(); ?>?sort=coach_name"><?php echo get_lang('Coach'); ?></a></th>
  124. <th><?php echo get_lang('Actions'); ?></th>
  125. </tr>
  126. <?php
  127. $i=0;
  128. foreach($Sessions as $key=>$enreg)
  129. {
  130. if($key == $limit)
  131. {
  132. break;
  133. }
  134. $sql = 'SELECT COUNT(course_code) FROM '.$tbl_session_rel_course.' WHERE id_session='.intval($enreg['id']);
  135. $rs = api_sql_query($sql, __FILE__, __LINE__);
  136. list($nb_courses) = Database::fetch_array($rs);
  137. ?>
  138. <tr class="<?php echo $i?'row_odd':'row_even'; ?>">
  139. <td><input type="checkbox" name="idChecked[]" value="<?php echo $enreg['id']; ?>"></td>
  140. <td><a href="resume_session.php?id_session=<?php echo $enreg['id']; ?>"><?php echo htmlentities($enreg['name'],ENT_QUOTES,$charset); ?></a></td>
  141. <td><a href="session_course_list.php?id_session=<?php echo $enreg['id']; ?>"><?php echo $nb_courses; ?> cours</a></td>
  142. <td><?php echo htmlentities($enreg['date_start'],ENT_QUOTES,$charset); ?></td>
  143. <td><?php echo htmlentities($enreg['date_end'],ENT_QUOTES,$charset); ?></td>
  144. <td><?php echo htmlentities($enreg['firstname'],ENT_QUOTES,$charset).' '.htmlentities($enreg['lastname'],ENT_QUOTES,$charset); ?></td>
  145. <td>
  146. <a href="add_users_to_session.php?page=session_list.php&id_session=<?php echo $enreg['id']; ?>"><img src="../img/add_user_big.gif" border="0" align="absmiddle" title="<?php echo get_lang('SubscribeUsersToSession'); ?>"></a>
  147. <a href="add_courses_to_session.php?page=session_list.php&id_session=<?php echo $enreg['id']; ?>"><img src="../img/synthese_view.gif" border="0" align="absmiddle" title="<?php echo get_lang('SubscribeCoursesToSession'); ?>"></a>
  148. <a href="session_edit.php?page=session_list.php&id=<?php echo $enreg['id']; ?>"><img src="../img/edit.gif" border="0" align="absmiddle" title="<?php echo get_lang('Edit'); ?>"></a>
  149. <a href="<?php echo api_get_self(); ?>?sort=<?php echo $sort; ?>&action=delete&idChecked=<?php echo $enreg['id']; ?>" onclick="javascript:if(!confirm('<?php echo get_lang('ConfirmYourChoice'); ?>')) return false;"><img src="../img/delete.gif" border="0" align="absmiddle" title="<?php echo get_lang('Delete'); ?>" alt="<?php echo get_lang('Delete'); ?>"></a>
  150. </td>
  151. </tr>
  152. <?php
  153. $i=$i ? 0 : 1;
  154. }
  155. unset($Sessions);
  156. ?>
  157. </table>
  158. <br>
  159. <div align="left">
  160. <?php
  161. if($page)
  162. {
  163. ?>
  164. <a href="<?php echo api_get_self(); ?>?page=<?php echo $page-1; ?>&sort=<?php echo $sort; ?>&keyword=<?php echo $_REQUEST['keyword']; ?>"><?php echo get_lang('Previous'); ?></a>
  165. <?php
  166. }
  167. else
  168. {
  169. echo get_lang('Previous');
  170. }
  171. ?>
  172. |
  173. <?php
  174. if($nbr_results > $limit)
  175. {
  176. ?>
  177. <a href="<?php echo api_get_self(); ?>?page=<?php echo $page+1; ?>&sort=<?php echo $sort; ?>&keyword=<?php echo $_REQUEST['keyword']; ?>"><?php echo get_lang('Next'); ?></a>
  178. <?php
  179. }
  180. else
  181. {
  182. echo get_lang('Next');
  183. }
  184. ?>
  185. </div>
  186. <br>
  187. <select name="action">
  188. <option value="delete"><?php echo get_lang('DeleteSelectedSessions'); ?></option>
  189. </select>
  190. <input type="submit" value="<?php echo get_lang('Ok'); ?>">
  191. <?php } ?>
  192. </table>
  193. </div>
  194. <?php
  195. Display::display_footer();
  196. ?>