chamilo-lms2/main/survey/preview.php

<?php
/* For licensing terms, see /license.txt */

/**
 *	@package chamilo.survey
 * 	@author unknown, the initial survey that did not make it in 1.8 because of bad code
 * 	@author Patrick Cool <patrick.cool@UGent.be>, Ghent University: cleanup, refactoring and rewriting large parts of the code
 *	@author Julio Montoya Armas <gugli100@gmail.com>, Chamilo: Personality Test modifications
 * 	@version $Id: survey_list.php 10680 2007-01-11 21:26:23Z pcool $
 *
 */

require_once '../inc/global.inc.php';

$this_section = SECTION_COURSES;

// Database table definitions
$table_survey = Database:: get_course_table(TABLE_SURVEY);
$table_survey_question = Database:: get_course_table(TABLE_SURVEY_QUESTION);
$table_survey_question_option = Database:: get_course_table(TABLE_SURVEY_QUESTION_OPTION);
$table_course = Database:: get_main_table(TABLE_MAIN_COURSE);
$table_user = Database:: get_main_table(TABLE_MAIN_USER);
$table_survey_invitation = Database:: get_course_table(TABLE_SURVEY_INVITATION);

$course_id = api_get_course_int_id();
$userId = api_get_user_id();
$surveyId = intval($_GET['survey_id']);
$userInvited = 0;
$userAnonymous = 0;

//query to ask if logged user is allowed to see the preview (if he is invited of he is a teacher)
$sql = "SELECT survey_invitation.user
        FROM $table_survey_invitation survey_invitation
        LEFT JOIN $table_survey survey
        ON survey_invitation.survey_code = survey.code
        WHERE
            survey_invitation.c_id = $course_id AND
            survey.survey_id = $surveyId AND
            survey_invitation.user = $userId";
$result = Database::query($sql);
if (Database::num_rows($result) > 0) {
    $userInvited = 1;
}

// We exit here if there is no valid $_GET parameter
if (!isset($_GET['survey_id']) || !is_numeric($_GET['survey_id'])){
	Display::display_header(get_lang('SurveyPreview'));
	Display::display_error_message(get_lang('InvallidSurvey'), false);
	Display::display_footer();
	exit;
}

// Getting the survey information
$survey_id = intval($_GET['survey_id']);
$survey_data = SurveyManager::get_survey($survey_id);

if (empty($survey_data)) {
	Display::display_header(get_lang('SurveyPreview'));
	Display::display_error_message(get_lang('InvallidSurvey'), false);
	Display::display_footer();
	exit;
}

$urlname = strip_tags($survey_data['title']);
if (api_is_allowed_to_edit()) {
	// Breadcrumbs
	$interbreadcrumb[] = array('url' => api_get_path(WEB_CODE_PATH).'survey/survey_list.php', 'name' => get_lang('SurveyList'));
	$interbreadcrumb[] = array('url' => api_get_path(WEB_CODE_PATH).'survey/survey.php?survey_id='.$survey_id, 'name' => $urlname);
}
$courseCode = isset($_GET['cidReq']) ? $_GET['cidReq'] : null;
$surveyAnonymous = SurveyManager::get_survey($survey_id, 0, $courseCode);
$surveyAnonymous = $surveyAnonymous['anonymous'];
if ($surveyAnonymous == 0 && api_is_anonymous()) {
    api_not_allowed(true);
} elseif ($surveyAnonymous == 0 && $userInvited == 0) {
    if (!api_is_allowed_to_edit()) {
        api_not_allowed(true);
    }
}
// Header
Display :: display_header(get_lang('SurveyPreview'));

// We exit here is the first or last question is a pagebreak (which causes errors)
SurveyUtil::check_first_last_question($survey_id, false);

// Only a course admin is allowed to preview a survey: you are NOT a course admin => error message

/*
if (!api_is_allowed_to_edit(false, true)) {
	Display :: display_error_message(get_lang('NotAllowed'), false);
}*/

$counter_question = 0;
// Only a course admin is allowed to preview a survey: you are a course admin
if (api_is_course_admin() ||
	(api_is_course_admin() && $_GET['isStudentView'] == 'true') ||
	api_is_allowed_to_session_edit(false, true)
) {
	// Survey information
	echo '<div id="survey_title">'.$survey_data['survey_title'].'</div>';
	echo '<div id="survey_subtitle">'.$survey_data['survey_subtitle'].'</div>';

	// Displaying the survey introduction
	if (!isset($_GET['show'])) {
        if (!empty($survey_data['survey_introduction'])) {
            echo '<div id="survey_content" class="survey_content">'.$survey_data['survey_introduction'].'</div>';
        }
		$limit = 0;
	}

	// Displaying the survey thanks message
	if (isset($_POST['finish_survey'])) {
		Display::display_confirmation_message(get_lang('SurveyFinished'));
        echo $survey_data['survey_thanks'];
		Display :: display_footer();
		exit;
	}

    $questions = array();

	if (isset($_GET['show'])) {
		// Getting all the questions for this page and add them to a
		// multidimensional array where the first index is the page.
		// as long as there is no pagebreak fount we keep adding questions to the page
		$questions_displayed = array();
		$paged_questions = array();
		$counter = 0;
		$sql = "SELECT * FROM $table_survey_question
		        WHERE c_id = $course_id AND survey_id = '".intval($survey_id)."'
				ORDER BY sort ASC";
		$result = Database::query($sql);
        $questions_exists = true;
        if (Database::num_rows($result)) {
    		while ($row = Database::fetch_array($result)) {
    			if ($row['type'] == 'pagebreak') {
    				$counter++;
    			} else {
    				$paged_questions[$counter][] = $row['question_id'];
    			}
    		}
        } else {
            $questions_exists = false;
        }

		if (array_key_exists($_GET['show'], $paged_questions)) {
			$sql = "SELECT
                        survey_question.question_id,
                        survey_question.survey_id,
                        survey_question.survey_question,
                        survey_question.display,
                        survey_question.sort,
                        survey_question.type,
                        survey_question.max_value,
						survey_question_option.question_option_id,
						survey_question_option.option_text,
						survey_question_option.sort as option_sort
					FROM $table_survey_question survey_question
					LEFT JOIN $table_survey_question_option survey_question_option
					ON
						survey_question.question_id = survey_question_option.question_id AND
						survey_question_option.c_id = $course_id
					WHERE
					    survey_question.survey_id = '".intval($survey_id)."' AND
						survey_question.question_id IN (".Database::escape_string(implode(',',$paged_questions[$_GET['show']]), null, false).") AND
						survey_question.c_id =  $course_id
					ORDER BY survey_question.sort, survey_question_option.sort ASC";

			$result = Database::query($sql);
			$question_counter_max = Database::num_rows($result);
			$limit = 0;
			while ($row = Database::fetch_array($result)) {
				// If the type is not a pagebreak we store it in the $questions array
				if ($row['type'] != 'pagebreak') {
					$questions[$row['sort']]['question_id'] = $row['question_id'];
					$questions[$row['sort']]['survey_id'] = $row['survey_id'];
					$questions[$row['sort']]['survey_question'] = $row['survey_question'];
					$questions[$row['sort']]['display'] = $row['display'];
					$questions[$row['sort']]['type'] = $row['type'];
					$questions[$row['sort']]['options'][intval($row['option_sort'])] = $row['option_text'];
					$questions[$row['sort']]['maximum_score'] = $row['max_value'];
				} else {
					// If the type is a pagebreak we are finished loading the questions for this page
					break;
				}
				$counter_question++;
			}
		}
	}

	// Selecting the maximum number of pages
	$sql = "SELECT * FROM $table_survey_question
	        WHERE
	            c_id = $course_id AND
	            type='".Database::escape_string('pagebreak')."' AND
	            survey_id='".intval($survey_id)."'";
	$result = Database::query($sql);
	$numberofpages = Database::num_rows($result) + 1;

	// Displaying the form with the questions
	if (isset($_GET['show'])) {
		$show = (int)$_GET['show'] + 1;
	} else {
		$show = 0;
	}

	$url = api_get_self().'?survey_id='.Security::remove_XSS($survey_id).'&show='.$show;
	$form = new FormValidator('question', 'post', $url);

	if (is_array($questions) && count($questions) > 0) {
		foreach ($questions as $key => & $question) {
			$ch_type = 'ch_'.$question['type'];
			/** @var survey_question $display */
			$display = new $ch_type;
			$form->addHtml('<div class="survey_question_wrapper"><div class="survey_question">');
			$form->addHtml($question['survey_question']);
			$display->render($form, $question);
			$form->addHtml('</div></div>');
		}
	}

	if (($show < $numberofpages) || (!$_GET['show'] && count($questions) > 0)) {
        if ($show == 0) {
			$form->addButton('next_survey_page', get_lang('StartSurvey'), 'arrow-right', 'success', 'large');
        } else {
			$form->addButton('next_survey_page', get_lang('NextQuestion'), 'arrow-right');
        }
	}
	if ($show >= $numberofpages && $_GET['show'] || (isset($_GET['show']) && count($questions) == 0)) {
		if ($questions_exists == false) {
			echo '<p>'.get_lang('ThereAreNotQuestionsForthisSurvey').'</p>';
		}
		$form->addButton('finish_survey', get_lang('FinishSurvey'), 'arrow-right');
	}
	$form->display();
} else {
	Display :: display_error_message(get_lang('NotAllowed'), false);
}

// Footer
Display :: display_footer();