courses.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. use Chamilo\CoreBundle\Entity\SequenceResource;
  4. /**
  5. * Template (front controller in MVC pattern) used for dispatching
  6. * to the controllers depend on the current action.
  7. *
  8. * @author Christian Fasanando <christian1827@gmail.com> - Beeznest
  9. *
  10. * @package chamilo.auth
  11. */
  12. // Delete the globals['_cid'], we don't need it here.
  13. $cidReset = true; // Flag forcing the 'current course' reset
  14. require_once __DIR__.'/../inc/global.inc.php';
  15. $ctok = Security::get_existing_token();
  16. // Get Limit data
  17. $limit = CoursesController::getLimitArray();
  18. // Section for the tabs.
  19. $this_section = SECTION_CATALOG;
  20. if (api_get_setting('course_catalog_published') !== 'true') {
  21. // Access rights: anonymous users can't do anything useful here.
  22. api_block_anonymous_users();
  23. }
  24. $user_can_view_page = false;
  25. //For students
  26. if (api_get_setting('allow_students_to_browse_courses') === 'false') {
  27. $user_can_view_page = false;
  28. } else {
  29. $user_can_view_page = true;
  30. }
  31. //For teachers/admins
  32. if (api_is_platform_admin() || api_is_course_admin() || api_is_allowed_to_create_course()) {
  33. $user_can_view_page = true;
  34. }
  35. // filter actions
  36. $actions = [
  37. 'sortmycourses',
  38. 'createcoursecategory',
  39. 'subscribe',
  40. 'deletecoursecategory',
  41. 'display_courses',
  42. 'display_random_courses',
  43. 'subscribe_user_with_password',
  44. 'display_sessions',
  45. 'subscribe_to_session',
  46. 'search_tag',
  47. 'search_session',
  48. ];
  49. $action = CoursesAndSessionsCatalog::is(CATALOG_SESSIONS) ? 'display_sessions' : 'display_courses';
  50. if (isset($_GET['action']) && in_array($_GET['action'], $actions)) {
  51. $action = Security::remove_XSS($_GET['action']);
  52. }
  53. $categoryCode = isset($_GET['category_code']) && !empty($_GET['category_code']) ? $_GET['category_code'] : 'ALL';
  54. $searchTerm = isset($_REQUEST['search_term']) ? Security::remove_XSS($_REQUEST['search_term']) : '';
  55. $nameTools = CourseCategory::getCourseCatalogNameTools($action);
  56. if (empty($nameTools)) {
  57. $nameTools = get_lang('CourseManagement');
  58. } else {
  59. if (!in_array($action, ['sortmycourses', 'createcoursecategory', 'display_random_courses', 'display_courses', 'subscribe'])) {
  60. $interbreadcrumb[] = [
  61. 'url' => api_get_path(WEB_CODE_PATH).'auth/courses.php',
  62. 'name' => get_lang('CourseManagement'),
  63. ];
  64. }
  65. if ($action === 'createcoursecategory') {
  66. $interbreadcrumb[] = [
  67. 'url' => api_get_path(WEB_CODE_PATH).'auth/courses.php?action=sortmycourses',
  68. 'name' => get_lang('SortMyCourses'),
  69. ];
  70. }
  71. $interbreadcrumb[] = ['url' => '#', 'name' => $nameTools];
  72. }
  73. // course description controller object
  74. $courseController = new CoursesController();
  75. // We are moving a course or category of the user up/down the list (=Sort My Courses).
  76. if (isset($_GET['move'])) {
  77. if (isset($_GET['course'])) {
  78. $courseController->move_course(
  79. $_GET['move'],
  80. $_GET['course'],
  81. $_GET['category']
  82. );
  83. }
  84. if (isset($_GET['category']) && !isset($_GET['course'])) {
  85. $courseController->move_category($_GET['move'], $_GET['category']);
  86. }
  87. }
  88. // We are moving the course of the user to a different user defined course category (=Sort My Courses).
  89. if (isset($_POST['submit_change_course_category'])) {
  90. if ($ctok == $_POST['sec_token']) {
  91. $courseController->change_course_category(
  92. $_POST['course_2_edit_category'],
  93. $_POST['course_categories']
  94. );
  95. }
  96. }
  97. // We edit course category
  98. if (isset($_POST['submit_edit_course_category']) &&
  99. isset($_POST['title_course_category']) &&
  100. strlen(trim($_POST['title_course_category'])) > 0
  101. ) {
  102. if ($ctok == $_POST['sec_token']) {
  103. $courseController->edit_course_category(
  104. $_POST['title_course_category'],
  105. $_POST['edit_course_category']
  106. );
  107. }
  108. }
  109. // we are deleting a course category
  110. if ($action == 'deletecoursecategory' && isset($_GET['id'])) {
  111. if ($ctok == $_GET['sec_token']) {
  112. $get_id_cat = intval($_GET['id']);
  113. $courseController->delete_course_category($get_id_cat);
  114. }
  115. }
  116. // We are creating a new user defined course category (= Create Course Category).
  117. if (isset($_POST['create_course_category']) &&
  118. isset($_POST['title_course_category']) &&
  119. strlen(trim($_POST['title_course_category'])) > 0
  120. ) {
  121. if ($ctok == $_POST['sec_token']) {
  122. $courseController->addCourseCategory($_POST['title_course_category']);
  123. }
  124. }
  125. // search courses
  126. if (isset($_REQUEST['search_course'])) {
  127. if ($ctok == $_REQUEST['sec_token']) {
  128. $courseController->search_courses(
  129. $searchTerm,
  130. null,
  131. null,
  132. null,
  133. $limit,
  134. true
  135. );
  136. exit;
  137. }
  138. }
  139. // Subscribe user to course
  140. if (isset($_REQUEST['subscribe_course'])) {
  141. if ($ctok == $_GET['sec_token']) {
  142. $courseController->subscribe_user(
  143. $_GET['subscribe_course'],
  144. $searchTerm,
  145. $categoryCode
  146. );
  147. }
  148. }
  149. // We are unsubscribing from a course (=Unsubscribe from course).
  150. if (isset($_GET['unsubscribe'])) {
  151. if ($ctok == $_GET['sec_token']) {
  152. $courseController->unsubscribe_user_from_course(
  153. $_GET['unsubscribe'],
  154. $searchTerm,
  155. $categoryCode
  156. );
  157. }
  158. }
  159. // We are unsubscribing from a course (=Unsubscribe from course).
  160. if (isset($_POST['unsubscribe'])) {
  161. if ($ctok == $_POST['sec_token']) {
  162. $courseController->unsubscribe_user_from_course($_POST['unsubscribe']);
  163. }
  164. }
  165. switch ($action) {
  166. case 'subscribe_user_with_password':
  167. $courseController->subscribe_user(
  168. isset($_POST['subscribe_user_with_password']) ? $_POST['subscribe_user_with_password'] : '',
  169. $searchTerm,
  170. isset($_POST['category_code']) ? $_POST['category_code'] : ''
  171. );
  172. header('Location: '.api_get_self());
  173. exit;
  174. break;
  175. case 'createcoursecategory':
  176. $courseController->categoryList($action);
  177. break;
  178. case 'deletecoursecategory':
  179. $courseController->courseList($action);
  180. break;
  181. case 'sortmycourses':
  182. $courseController->courseList($action);
  183. break;
  184. case 'subscribe':
  185. if (!$user_can_view_page) {
  186. api_not_allowed(true);
  187. }
  188. header('Location: '.api_get_self());
  189. exit;
  190. /* if (!CoursesAndSessionsCatalog::is(CATALOG_SESSIONS)) {
  191. $courseController->courses_categories(
  192. $action,
  193. $categoryCode,
  194. null,
  195. null,
  196. null,
  197. $limit
  198. );
  199. } else {
  200. header('Location: ' . api_get_self());
  201. exit;
  202. }*/
  203. break;
  204. case 'display_random_courses':
  205. if (!$user_can_view_page) {
  206. api_not_allowed(true);
  207. }
  208. $courseController->courses_categories($action);
  209. break;
  210. case 'display_courses':
  211. if (!$user_can_view_page) {
  212. api_not_allowed(true);
  213. }
  214. $courseController->courses_categories(
  215. $action,
  216. $categoryCode,
  217. null,
  218. null,
  219. null,
  220. $limit
  221. );
  222. break;
  223. case 'display_sessions':
  224. if (!$user_can_view_page) {
  225. api_not_allowed(true);
  226. }
  227. $courseController->sessionsList($action, $nameTools, $limit);
  228. break;
  229. case 'subscribe_to_session':
  230. if (!$user_can_view_page) {
  231. api_not_allowed(true);
  232. }
  233. $userId = api_get_user_id();
  234. $confirmed = isset($_GET['confirm']);
  235. $sessionId = intval($_GET['session_id']);
  236. if (empty($userId)) {
  237. api_not_allowed();
  238. exit;
  239. }
  240. if (!$confirmed) {
  241. $template = new Template(null, false, false, false, false, false);
  242. $template->assign('session_id', $sessionId);
  243. $layout = $template->get_template('auth/confirm_session_subscription.tpl');
  244. echo $template->fetch($layout);
  245. exit;
  246. }
  247. $registrationAllowed = api_get_setting('catalog_allow_session_auto_subscription');
  248. if ($registrationAllowed === 'true') {
  249. $entityManager = Database::getManager();
  250. $repository = $entityManager->getRepository('ChamiloCoreBundle:SequenceResource');
  251. $sequences = $repository->getRequirements(
  252. $sessionId,
  253. SequenceResource::SESSION_TYPE
  254. );
  255. if (count($sequences) > 0) {
  256. $requirementsData = SequenceResourceManager::checkRequirementsForUser(
  257. $sequences,
  258. SequenceResource::SESSION_TYPE,
  259. $userId
  260. );
  261. $continueWithSubscription = SequenceResourceManager::checkSequenceAreCompleted($requirementsData);
  262. if (!$continueWithSubscription) {
  263. header('Location: '.api_get_path(WEB_CODE_PATH).'auth/courses.php');
  264. exit;
  265. }
  266. }
  267. SessionManager::subscribeUsersToSession(
  268. $_GET['session_id'],
  269. [$userId],
  270. SESSION_VISIBLE_READ_ONLY,
  271. false
  272. );
  273. $coursesList = SessionManager::get_course_list_by_session_id($_GET['session_id']);
  274. $count = count($coursesList);
  275. $url = '';
  276. if ($count <= 0) {
  277. // no course in session -> return to catalog
  278. $url = api_get_path(WEB_CODE_PATH).'auth/courses.php';
  279. } elseif ($count == 1) {
  280. // only one course, so redirect directly to this course
  281. foreach ($coursesList as $course) {
  282. $url = api_get_path(WEB_COURSE_PATH).$course['directory'].'/index.php?id_session='.intval($_GET['session_id']);
  283. }
  284. } else {
  285. $url = api_get_path(WEB_CODE_PATH).'session/index.php?session_id='.intval($_GET['session_id']);
  286. }
  287. header('Location: '.$url);
  288. exit;
  289. }
  290. //else show error message?
  291. break;
  292. case 'search_tag':
  293. if (!$user_can_view_page) {
  294. api_not_allowed(true);
  295. }
  296. $courseController->sessionsListByCoursesTag($limit);
  297. break;
  298. case 'search_session':
  299. if (!$user_can_view_page) {
  300. api_not_allowed(true);
  301. }
  302. $courseController->sessionListBySearch($limit);
  303. break;
  304. }