index.php 6.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. // @todo change root .htaccess
  4. header('Location: web/app_dev.php');
  5. exit;
  6. use ChamiloSession as Session;
  7. /**
  8. * @package chamilo.main
  9. */
  10. define('CHAMILO_HOMEPAGE', true);
  11. define('CHAMILO_LOAD_WYSIWYG', false);
  12. /* Flag forcing the 'current course' reset, as we're not inside a course anymore. */
  13. // Maybe we should change this into an api function? an example: CourseManager::unset();
  14. $cidReset = true;
  15. require_once 'main/inc/global.inc.php';
  16. //require_once 'main/auth/external_login/facebook.inc.php';
  17. // The section (for the tabs).
  18. $this_section = SECTION_CAMPUS;
  19. $header_title = null;
  20. if (!api_is_anonymous()) {
  21. $header_title = ' ';
  22. }
  23. $controller = new IndexManager($header_title);
  24. //Actions
  25. $loginFailed = isset($_GET['loginFailed']) ? true : isset($loginFailed);
  26. if (!empty($_GET['logout'])) {
  27. $redirect = !empty($_GET['no_redirect']) ? false : true;
  28. $controller->logout($redirect);
  29. }
  30. /**
  31. * Registers in the track_e_default table (view in important activities in admin
  32. * interface) a possible attempted break in, sending auth data through get.
  33. * @todo This piece of code should probably move to local.inc.php where the actual login / logout procedure is handled. The real use of this code block should be seriously considered as well. This form should just use a security token and get done with it.
  34. */
  35. if (isset($_GET['submitAuth']) && $_GET['submitAuth'] == 1) {
  36. $i = api_get_anonymous_id();
  37. Event::addEvent(
  38. LOG_ATTEMPTED_FORCED_LOGIN,
  39. 'tried_hacking_get',
  40. $_SERVER['REMOTE_ADDR'].(empty($_POST['login'])?'':'/'.$_POST['login']),
  41. null,
  42. $i
  43. );
  44. echo 'Attempted breakin - sysadmins notified.';
  45. session_destroy();
  46. die();
  47. }
  48. // Delete session item necessary to check for legal terms
  49. if (api_get_setting('allow_terms_conditions') === 'true') {
  50. Session::erase('term_and_condition');
  51. }
  52. //If we are not logged in and customapages activated
  53. if (!api_get_user_id() && CustomPages::enabled()) {
  54. if (Request::get('loggedout')) {
  55. CustomPages::display(CustomPages::LOGGED_OUT);
  56. } else {
  57. CustomPages::display(CustomPages::INDEX_UNLOGGED);
  58. }
  59. }
  60. /**
  61. * @todo This piece of code should probably move to local.inc.php where the actual login procedure is handled.
  62. * @todo Check if this code is used. I think this code is never executed because after clicking the submit button
  63. * the code does the stuff in local.inc.php and then redirects to index.php or user_portal.php depending
  64. * on api_get_setting('page_after_login').
  65. */
  66. if (!empty($_POST['submitAuth'])) {
  67. // The user has been already authenticated, we are now to find the last login of the user.
  68. if (isset ($_user['user_id'])) {
  69. $track_login_table = Database :: get_main_table(TABLE_STATISTIC_TRACK_E_LOGIN);
  70. $sql = "SELECT UNIX_TIMESTAMP(login_date)
  71. FROM $track_login_table
  72. WHERE login_user_id = '".$_user['user_id']."'
  73. ORDER BY login_date DESC LIMIT 1";
  74. $result_last_login = Database::query($sql);
  75. if (!$result_last_login) {
  76. if (Database::num_rows($result_last_login) > 0) {
  77. $user_last_login_datetime = Database::fetch_array($result_last_login);
  78. $user_last_login_datetime = $user_last_login_datetime[0];
  79. Session::write('user_last_login_datetime', $user_last_login_datetime);
  80. }
  81. }
  82. }
  83. } else {
  84. // Only if login form was not sent because if the form is sent the user was already on the page.
  85. Event::event_open();
  86. }
  87. if (api_get_setting('display_categories_on_homepage') === 'true') {
  88. $controller->tpl->assign('course_category_block', $controller->return_courses_in_categories());
  89. }
  90. $controller->set_login_form();
  91. //@todo move this inside the IndexManager
  92. if (!api_is_anonymous()) {
  93. $controller->tpl->assign('profile_block', $controller->return_profile_block());
  94. $controller->tpl->assign('user_image_block', $controller->return_user_image_block());
  95. if (api_is_platform_admin()) {
  96. $controller->tpl->assign('course_block', $controller->return_course_block());
  97. } else {
  98. $controller->tpl->assign('teacher_block', $controller->return_teacher_link());
  99. }
  100. }
  101. $hot_courses = '';
  102. $announcements_block = '';
  103. // Display the Site Use Cookie Warning Validation
  104. $useCookieValidation = api_get_setting('cookie_warning');
  105. if ($useCookieValidation === 'true') {
  106. if (isset($_POST['acceptCookies'])) {
  107. api_set_site_use_cookie_warning_cookie();
  108. } else if (!api_site_use_cookie_warning_cookie_exist()) {
  109. if (Template::isToolBarDisplayedForUser()) {
  110. $controller->tpl->assign('toolBarDisplayed', true);
  111. } else {
  112. $controller->tpl->assign('toolBarDisplayed', false);
  113. }
  114. $controller->tpl->assign('displayCookieUsageWarning', true);
  115. }
  116. }
  117. // When loading a chamilo page do not include the hot courses and news
  118. if (!isset($_REQUEST['include'])) {
  119. if (api_get_setting('show_hot_courses') == 'true') {
  120. $hot_courses = $controller->return_hot_courses();
  121. }
  122. $announcements_block = $controller->return_announcements();
  123. }
  124. $controller->tpl->assign('hot_courses', $hot_courses);
  125. $controller->tpl->assign('announcements_block', $announcements_block);
  126. $controller->tpl->assign('home_page_block', $controller->return_home_page());
  127. $controller->tpl->assign('navigation_course_links', $controller->return_navigation_links());
  128. $controller->tpl->assign('notice_block', $controller->return_notice());
  129. //$controller->tpl->assign('main_navigation_block', $controller->return_navigation_links());
  130. $controller->tpl->assign('help_block', $controller->return_help());
  131. if (api_is_platform_admin() || api_is_drh()) {
  132. $controller->tpl->assign('skills_block', $controller->return_skills_links());
  133. }
  134. if (api_is_anonymous()) {
  135. $controller->tpl->setLoginBodyClass();
  136. }
  137. // direct login to course
  138. if (isset($_GET['firstpage'])) {
  139. api_set_firstpage_parameter($_GET['firstpage']);
  140. // if we are already logged, go directly to course
  141. if (api_user_is_login()) {
  142. echo "<script>self.location.href='index.php?firstpage=".Security::remove_XSS($_GET['firstpage'])."'</script>";
  143. }
  144. } else {
  145. api_delete_firstpage_parameter();
  146. }
  147. $controller->tpl->display_two_col_template();