message.lib.php 52 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This class provides methods for messages management.
  5. * Include/require it in your code to use its features.
  6. *
  7. * @package chamilo.library
  8. */
  9. require_once api_get_path(LIBRARY_PATH).'online.inc.php';
  10. require_once api_get_path(LIBRARY_PATH).'fileUpload.lib.php';
  11. require_once api_get_path(LIBRARY_PATH).'fileDisplay.lib.php';
  12. require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php';
  13. require_once api_get_path(LIBRARY_PATH).'group_portal_manager.lib.php';
  14. require_once api_get_path(LIBRARY_PATH).'sortabletable.class.php';
  15. /*
  16. * @todo use constants!
  17. */
  18. define('MESSAGE_STATUS_NEW', '0');
  19. define('MESSAGE_STATUS_UNREAD', '1');
  20. //2 ??
  21. define('MESSAGE_STATUS_DELETED', '3');
  22. define('MESSAGE_STATUS_OUTBOX', '4');
  23. define('MESSAGE_STATUS_INVITATION_PENDING', '5');
  24. define('MESSAGE_STATUS_INVITATION_ACCEPTED','6');
  25. define('MESSAGE_STATUS_INVITATION_DENIED', '7');
  26. class MessageManager
  27. {
  28. public static function get_online_user_list($current_user_id) {
  29. $min=30;
  30. global $_configuration;
  31. $userlist = who_is_online($current_user_id,$_configuration['statistics_database'],$min);
  32. foreach($userlist as $row) {
  33. $receiver_id = $row[0];
  34. $online_user_list[$receiver_id] = GetFullUserName($receiver_id).($current_user_id==$receiver_id?("&nbsp;(".get_lang('Myself').")"):(""));
  35. }
  36. return $online_user_list;
  37. }
  38. /**
  39. * Displays info stating that the message is sent successfully.
  40. */
  41. public static function display_success_message($uid) {
  42. global $charset;
  43. if ($_SESSION['social_exist']===true) {
  44. $redirect="#remote-tab-2";
  45. if (api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool')=='true') {
  46. $success=get_lang('MessageSentTo').
  47. "&nbsp;<b>".
  48. GetFullUserName($uid).
  49. "</b>";
  50. }else {
  51. $success=get_lang('MessageSentTo').
  52. "&nbsp;<b>".
  53. GetFullUserName($uid).
  54. "</b>";
  55. }
  56. } else {
  57. $success=get_lang('MessageSentTo').
  58. "&nbsp;<b>".
  59. GetFullUserName($uid).
  60. "</b>";
  61. }
  62. Display::display_confirmation_message(api_xml_http_response_encode($success), false);
  63. }
  64. /**
  65. * Displays the wysiwyg html editor.
  66. */
  67. public static function display_html_editor_area($name, $resp) {
  68. api_disp_html_area($name, get_lang('TypeYourMessage'), '', '', null, array('ToolbarSet' => 'Messages', 'Width' => '95%', 'Height' => '250'));
  69. }
  70. /**
  71. * Get the new messages for the current user from the database.
  72. */
  73. public static function get_new_messages() {
  74. $table_message = Database::get_main_table(TABLE_MESSAGE);
  75. if (!api_get_user_id()) {
  76. return false;
  77. }
  78. $i=0;
  79. $query = "SELECT * FROM $table_message WHERE user_receiver_id=".api_get_user_id()." AND msg_status=".MESSAGE_STATUS_UNREAD;
  80. $result = Database::query($query);
  81. $i = Database::num_rows($result);
  82. return $i;
  83. }
  84. /**
  85. * Get the list of user_ids of users who are online.
  86. */
  87. public static function users_connected_by_id() {
  88. global $_configuration, $_user;
  89. $minute=30;
  90. $user_connect = who_is_online($_user['user_id'],$_configuration['statistics_database'],$minute);
  91. for ($i=0; $i<count($user_connect); $i++) {
  92. $user_id_list[$i]=$user_connect[$i][0];
  93. }
  94. return $user_id_list;
  95. }
  96. /**
  97. * Gets the total number of messages, used for the inbox sortable table
  98. */
  99. public static function get_number_of_messages ($unread = false) {
  100. $table_message = Database::get_main_table(TABLE_MESSAGE);
  101. $condition_msg_status = '';
  102. if ($unread) {
  103. $condition_msg_status = ' msg_status = '.MESSAGE_STATUS_UNREAD.' ';
  104. } else {
  105. $condition_msg_status = ' msg_status IN('.MESSAGE_STATUS_NEW.','.MESSAGE_STATUS_UNREAD.') ';
  106. }
  107. $sql_query = "SELECT COUNT(*) as number_messages FROM $table_message WHERE $condition_msg_status AND user_receiver_id=".api_get_user_id();
  108. $sql_result = Database::query($sql_query);
  109. $result = Database::fetch_array($sql_result);
  110. return $result['number_messages'];
  111. }
  112. /**
  113. * Gets information about some messages, used for the inbox sortable table
  114. * @param int $from
  115. * @param int $number_of_items
  116. * @param string $direction
  117. */
  118. public static function get_message_data ($from, $number_of_items, $column, $direction) {
  119. global $charset;
  120. $from = intval($from);
  121. $number_of_items = intval($number_of_items);
  122. //forcing this order
  123. if (!isset($direction)) {
  124. $column = 3;
  125. $direction = 'DESC';
  126. } else {
  127. $column = intval($column);
  128. if (!in_array($direction, array('ASC', 'DESC')))
  129. $direction = 'ASC';
  130. }
  131. $table_message = Database::get_main_table(TABLE_MESSAGE);
  132. $request=api_is_xml_http_request();
  133. $sql_query = "SELECT id as col0, user_sender_id as col1, title as col2, send_date as col3, msg_status as col4 FROM $table_message " .
  134. " WHERE user_receiver_id=".api_get_user_id()." AND msg_status IN (0,1)" .
  135. " ORDER BY col$column $direction LIMIT $from,$number_of_items";
  136. $sql_result = Database::query($sql_query);
  137. $i = 0;
  138. $message_list = array ();
  139. while ($result = Database::fetch_row($sql_result)) {
  140. if ($request===true) {
  141. $message[0] = '<input type="checkbox" value='.$result[0].' name="id[]">';
  142. } else {
  143. $message[0] = ($result[0]);
  144. }
  145. $result[2] = Security::remove_XSS($result[2]);
  146. $result[2] = cut($result[2],80,true);
  147. if ($request===true) {
  148. /*if($result[4]==0) {
  149. $message[1] = Display::return_icon('mail_open.png',get_lang('AlreadyReadMessage'));//Message already read
  150. } else {
  151. $message[1] = Display::return_icon('mail.png',get_lang('UnReadMessage'));//Message without reading
  152. }*/
  153. $message[1] = '<a onclick="get_action_url_and_show_messages(1,'.$result[0].')" href="javascript:void(0)">'.GetFullUserName($result[1]).'</a>';
  154. $message[2] = '<a onclick="get_action_url_and_show_messages(1,'.$result[0].')" href="javascript:void(0)">'.str_replace("\\","",$result[2]).'</a>';
  155. $message[4] = '<a onclick="reply_to_messages(\'show\','.$result[0].',\'\')" href="javascript:void(0)">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a>'.
  156. '&nbsp;&nbsp;<a onclick="delete_one_message('.$result[0].')" href="javascript:void(0)" >'.Display::return_icon('delete.png',get_lang('DeleteMessage')).'</a>';
  157. } else {
  158. if($result[4]==1) {
  159. $class = 'class = "unread"';
  160. } else {
  161. $class = 'class = "read"';
  162. }
  163. $link = '';
  164. if ($_GET['f']=='social') {
  165. $link = '&f=social';
  166. }
  167. $message[1] = '<a '.$class.' href="view_message.php?id='.$result[0].$link.'">'.GetFullUserName(($result[1])).'</a>';;
  168. $message[2] = '<a '.$class.' href="view_message.php?id='.$result[0].$link.'">'.$result[2].'</a>';
  169. $message[4] = '<a href="new_message.php?re_id='.$result[0].'&f='.Security::remove_XSS($_GET['f']).'">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a>'.
  170. '&nbsp;&nbsp;<a delete_one_message('.$result[0].') href="inbox.php?action=deleteone&id='.$result[0].'&f='.Security::remove_XSS($_GET['f']).'">'.Display::return_icon('delete.png',get_lang('DeleteMessage')).'</a>';
  171. }
  172. $message[3] = $result[3]; //date stays the same
  173. foreach($message as $key => $value) {
  174. $message[$key] = api_xml_http_response_encode($value);
  175. }
  176. $message_list[] = $message;
  177. $i++;
  178. }
  179. return $message_list;
  180. }
  181. /**
  182. * Sends a message to a user/group
  183. *
  184. * @param int receiver user id
  185. * @param string subject
  186. * @param string content
  187. * @param array attachment files array($_FILES) (optional)
  188. * @param array comments about attachment files (optional)
  189. * @param int group id (optional)
  190. * @param int parent id (optional)
  191. * @param int message id for updating the message (optional)
  192. * @param bool sent an email or not (@todo)
  193. * @return bool
  194. */
  195. public static function send_message ($receiver_user_id, $subject, $content, $file_attachments = array(), $file_comments = array(), $group_id = 0, $parent_id = 0, $edit_message_id = 0, $sent_email = false) {
  196. global $charset;
  197. $table_message = Database::get_main_table(TABLE_MESSAGE);
  198. $group_id = intval($group_id);
  199. $receiver_user_id = intval($receiver_user_id);
  200. $parent_id = intval($parent_id);
  201. $edit_message_id = intval($edit_message_id);
  202. $user_sender_id = api_get_user_id();
  203. $total_filesize = 0;
  204. if (is_array($file_attachments)) {
  205. foreach ($file_attachments as $file_attach) {
  206. $total_filesize += $file_attach['size'];
  207. }
  208. }
  209. // validating fields
  210. if (empty($subject)) {
  211. return get_lang('YouShouldWriteASubject');
  212. } else if ($total_filesize > intval(api_get_setting('message_max_upload_filesize'))) {
  213. return sprintf(get_lang("FilesSizeExceedsX"),format_file_size(api_get_setting('message_max_upload_filesize')));
  214. }
  215. if (!empty($receiver_user_id) || !empty($group_id)) {
  216. // message for user friend
  217. $subject = Database::escape_string($subject);
  218. $content = Database::escape_string($content);
  219. //message in inbox for user friend
  220. //@todo is possible to edit a message??????????
  221. if ($edit_message_id) {
  222. $query = " UPDATE $table_message SET update_date = '".api_get_utc_datetime()."', title = '$subject', content = '$content' WHERE id = '$edit_message_id' ";
  223. $result = Database::query($query);
  224. $inbox_last_id = $edit_message_id;
  225. } else {
  226. $query = "INSERT INTO $table_message(user_sender_id, user_receiver_id, msg_status, send_date, title, content, group_id, parent_id, update_date ) ".
  227. " VALUES ('$user_sender_id', '$receiver_user_id', '1', '".api_get_utc_datetime()."','$subject','$content','$group_id','$parent_id', '".api_get_utc_datetime()."')";
  228. $result = Database::query($query);
  229. $inbox_last_id = Database::insert_id();
  230. }
  231. // Save attachment file for inbox messages
  232. if (is_array($file_attachments)) {
  233. $i = 0;
  234. foreach ($file_attachments as $file_attach) {
  235. if ($file_attach['error'] == 0) {
  236. self::save_message_attachment_file($file_attach,$file_comments[$i],$inbox_last_id,null,$receiver_user_id,$group_id);
  237. }
  238. $i++;
  239. }
  240. }
  241. if (empty($group_id)) {
  242. //message in outbox for user friend or group
  243. $sql = "INSERT INTO $table_message (user_sender_id, user_receiver_id, msg_status, send_date, title, content, group_id, parent_id, update_date ) ".
  244. " VALUES ('$user_sender_id', '$receiver_user_id', '4', '".api_get_utc_datetime()."','$subject','$content', '$group_id', '$parent_id', '".api_get_utc_datetime()."')";
  245. $rs = Database::query($sql);
  246. $outbox_last_id = Database::insert_id();
  247. // save attachment file for outbox messages
  248. if (is_array($file_attachments)) {
  249. $o = 0;
  250. foreach ($file_attachments as $file_attach) {
  251. if ($file_attach['error'] == 0) {
  252. self::save_message_attachment_file($file_attach,$file_comments[$o],$outbox_last_id,$user_sender_id);
  253. }
  254. $o++;
  255. }
  256. }
  257. }
  258. //Load user settings
  259. require_once api_get_path(LIBRARY_PATH).'notification.lib.php';
  260. $notification = new Notification();
  261. if (empty($group_id)) {
  262. $user_id = $receiver_user_id;
  263. $notification->save_message_notifications(array($user_id), $subject,$content);
  264. } else {
  265. $user_list = GroupPortalManager::get_users_by_group($group_id);
  266. $new_user_list = array();
  267. foreach($user_list as $user_data) {
  268. $new_user_list []= $user_data['user_id'];
  269. }
  270. $notification->save_group_notifications($new_user_list, $subject,$content);
  271. }
  272. return $result;
  273. } else {
  274. return get_lang('UserDoesNotExist');
  275. }
  276. }
  277. /**
  278. * Update parent ids for other receiver user from current message in groups
  279. * @author Christian Fasanando Flores
  280. * @param int parent id
  281. * @param int receiver user id
  282. * @param int message id
  283. * @return void
  284. */
  285. public static function update_parent_ids_from_reply($parent_id,$receiver_user_id,$message_id) {
  286. $table_message = Database::get_main_table(TABLE_MESSAGE);
  287. $parent_id = intval($parent_id);
  288. $receiver_user_id = intval($receiver_user_id);
  289. $message_id = intval($message_id);
  290. // first get data from message id (parent)
  291. $sql_message= "SELECT * FROM $table_message WHERE id = '$parent_id'";
  292. $rs_message = Database::query($sql_message);
  293. $row_message= Database::fetch_array($rs_message);
  294. // get message id from data found early for other receiver user
  295. $sql_msg_id = " SELECT id FROM $table_message WHERE user_sender_id ='{$row_message[user_sender_id]}'
  296. AND title='{$row_message[title]}' AND content='{$row_message[content]}' AND group_id='{$row_message[group_id]}' AND user_receiver_id='$receiver_user_id'";
  297. $rs_msg_id = Database::query($sql_msg_id);
  298. $row = Database::fetch_array($rs_msg_id);
  299. // update parent_id for other user receiver
  300. $sql_upd = "UPDATE $table_message SET parent_id = '{$row[id]}' WHERE id = '$message_id'";
  301. Database::query($sql_upd);
  302. }
  303. public static function delete_message_by_user_receiver ($user_receiver_id,$id) {
  304. $table_message = Database::get_main_table(TABLE_MESSAGE);
  305. if ($id != strval(intval($id))) return false;
  306. $user_receiver_id = intval($user_receiver_id);
  307. $id = Database::escape_string($id);
  308. $sql="SELECT * FROM $table_message WHERE id=".$id." AND msg_status<>4;";
  309. $rs=Database::query($sql);
  310. if (Database::num_rows($rs) > 0 ) {
  311. $row = Database::fetch_array($rs);
  312. // delete attachment file
  313. $res = self::delete_message_attachment_file($id,$user_receiver_id);
  314. // delete message
  315. $query = "UPDATE $table_message SET msg_status=3 WHERE user_receiver_id=".$user_receiver_id." AND id=".$id;
  316. //$query = "DELETE FROM $table_message WHERE user_receiver_id=".Database::escape_string($user_receiver_id)." AND id=".$id;
  317. $result = Database::query($query);
  318. return $result;
  319. } else {
  320. return false;
  321. }
  322. }
  323. /**
  324. * Set status deleted
  325. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  326. * @param integer
  327. * @param integer
  328. * @return array
  329. */
  330. public static function delete_message_by_user_sender ($user_sender_id,$id) {
  331. if ($id != strval(intval($id))) return false;
  332. $table_message = Database::get_main_table(TABLE_MESSAGE);
  333. $id = intval($id);
  334. $user_sender_id = intval($user_sender_id);
  335. $sql="SELECT * FROM $table_message WHERE id='$id'";
  336. $rs=Database::query($sql);
  337. if (Database::num_rows($rs) > 0 ) {
  338. $row = Database::fetch_array($rs);
  339. // delete attachment file
  340. $res = self::delete_message_attachment_file($id,$user_sender_id);
  341. // delete message
  342. $query = "UPDATE $table_message SET msg_status=3 WHERE user_sender_id='$user_sender_id' AND id='$id'";
  343. //$query = "DELETE FROM $table_message WHERE user_sender_id='$user_sender_id' AND id='$id'";
  344. $result = Database::query($query);
  345. return $result;
  346. }
  347. return false;
  348. }
  349. /**
  350. * Saves a message attachment files
  351. * @param array $_FILES['name']
  352. * @param string a comment about the uploaded file
  353. * @param int message id
  354. * @param int receiver user id (optional)
  355. * @param int sender user id (optional)
  356. * @param int group id (optional)
  357. * @return void
  358. */
  359. public static function save_message_attachment_file($file_attach,$file_comment,$message_id,$receiver_user_id=0,$sender_user_id=0,$group_id=0) {
  360. $tbl_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  361. // Try to add an extension to the file if it hasn't one
  362. $new_file_name = add_ext_on_mime(stripslashes($file_attach['name']), $file_attach['type']);
  363. // user's file name
  364. $file_name =$file_attach['name'];
  365. if (!filter_extension($new_file_name)) {
  366. Display :: display_error_message(get_lang('UplUnableToSaveFileFilteredExtension'));
  367. } else {
  368. $new_file_name = uniqid('');
  369. $message_user_id = '';
  370. if (!empty($receiver_user_id)) {
  371. $message_user_id = $receiver_user_id;
  372. } else {
  373. $message_user_id = $sender_user_id;
  374. }
  375. // User-reserved directory where photos have to be placed.
  376. if (!empty($group_id)) {
  377. $path_user_info = GroupPortalManager::get_group_picture_path_by_id($group_id, 'system', true);
  378. } else {
  379. $path_user_info = UserManager::get_user_picture_path_by_id($message_user_id, 'system', true);
  380. }
  381. $path_message_attach = $path_user_info['dir'].'message_attachments/';
  382. // If this directory does not exist - we create it.
  383. if (!file_exists($path_message_attach)) {
  384. @mkdir($path_message_attach, api_get_permissions_for_new_directories(), true);
  385. }
  386. $new_path=$path_message_attach.$new_file_name;
  387. if (is_uploaded_file($file_attach['tmp_name'])) {
  388. $result= @copy($file_attach['tmp_name'], $new_path);
  389. }
  390. $safe_file_comment= Database::escape_string($file_comment);
  391. $safe_file_name = Database::escape_string($file_name);
  392. $safe_new_file_name = Database::escape_string($new_file_name);
  393. // Storing the attachments if any
  394. $sql="INSERT INTO $tbl_message_attach(filename,comment, path,message_id,size)
  395. VALUES ( '$safe_file_name', '$safe_file_comment', '$safe_new_file_name' , '$message_id', '".$file_attach['size']."' )";
  396. $result=Database::query($sql);
  397. }
  398. }
  399. /**
  400. * Delete message attachment files (logically updating the row with a suffix _DELETE_id)
  401. * @param int message id
  402. * @param int message user id (receiver user id or sender user id)
  403. * @param int group id (optional)
  404. * @return void
  405. */
  406. public static function delete_message_attachment_file($message_id,$message_uid,$group_id=0) {
  407. $message_id = intval($message_id);
  408. $message_uid = intval($message_uid);
  409. $table_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  410. $sql= "SELECT * FROM $table_message_attach WHERE message_id = '$message_id'";
  411. $rs = Database::query($sql);
  412. $new_paths = array();
  413. while ($row = Database::fetch_array($rs)) {
  414. $path = $row['path'];
  415. $attach_id = $row['id'];
  416. $new_path = $path.'_DELETED_'.$attach_id;
  417. if (!empty($group_id)) {
  418. $path_user_info = GroupPortalManager::get_group_picture_path_by_id($group_id, 'system', true);
  419. } else {
  420. $path_user_info = UserManager::get_user_picture_path_by_id($message_uid, 'system', true);
  421. }
  422. $path_message_attach = $path_user_info['dir'].'message_attachments/';
  423. if (is_file($path_message_attach.$path)) {
  424. if(rename($path_message_attach.$path, $path_message_attach.$new_path)) {
  425. $sql_upd = "UPDATE $table_message_attach set path='$new_path' WHERE id ='$attach_id'";
  426. $rs_upd = Database::query($sql_upd);
  427. }
  428. }
  429. }
  430. }
  431. /**
  432. * update messages by user id and message id
  433. * @param int user id
  434. * @param int message id
  435. * @return resource
  436. */
  437. public static function update_message ($user_id, $message_id) {
  438. if ($message_id != strval(intval($message_id)) || $user_id != strval(intval($user_id))) return false;
  439. $table_message = Database::get_main_table(TABLE_MESSAGE);
  440. $query = "UPDATE $table_message SET msg_status = '0' WHERE msg_status<>4 AND user_receiver_id=".intval($user_id)." AND id='".intval($message_id)."'";
  441. $result = Database::query($query);
  442. }
  443. /**
  444. * get messages by user id and message id
  445. * @param int user id
  446. * @param int message id
  447. * @return array
  448. */
  449. public static function get_message_by_user ($user_id,$message_id) {
  450. if ($message_id != strval(intval($message_id)) || $user_id != strval(intval($user_id))) return false;
  451. $table_message = Database::get_main_table(TABLE_MESSAGE);
  452. $query = "SELECT * FROM $table_message WHERE user_receiver_id=".intval($user_id)." AND id='".intval($message_id)."'";
  453. $result = Database::query($query);
  454. return $row = Database::fetch_array($result);
  455. }
  456. /**
  457. * get messages by group id
  458. * @param int group id
  459. * @return array
  460. */
  461. public static function get_messages_by_group($group_id) {
  462. if ($group_id != strval(intval($group_id))) return false;
  463. $table_message = Database::get_main_table(TABLE_MESSAGE);
  464. $current_uid = api_get_user_id();
  465. $group_id = intval($group_id);
  466. $query = "SELECT * FROM $table_message WHERE group_id=$group_id AND msg_status <> ".MESSAGE_STATUS_OUTBOX." ORDER BY id";
  467. $rs = Database::query($query);
  468. $data = array();
  469. if (Database::num_rows($rs) > 0) {
  470. while ($row = Database::fetch_array($rs)) {
  471. $data[] = $row;
  472. }
  473. }
  474. return $data;
  475. }
  476. /**
  477. * get messages by parent id optionally with limit
  478. * @param int parent id
  479. * @param int group id (optional)
  480. * @param int offset (optional)
  481. * @param int limit (optional)
  482. * @return array
  483. */
  484. public static function get_messages_by_parent($parent_id,$group_id = '',$offset = 0,$limit = 0) {
  485. if ($parent_id != strval(intval($parent_id))) return false;
  486. $table_message = Database::get_main_table(TABLE_MESSAGE);
  487. $current_uid = api_get_user_id();
  488. $parent_id = intval($parent_id);
  489. $condition_group_id = "";
  490. if ($group_id !== '') {
  491. $group_id = intval($group_id);
  492. $condition_group_id = " AND group_id = '$group_id' ";
  493. }
  494. $condition_limit = "";
  495. if ($offset && $limit) {
  496. $offset = ($offset - 1) * $limit;
  497. $condition_limit = " LIMIT $offset,$limit ";
  498. }
  499. $query = "SELECT * FROM $table_message WHERE parent_id='$parent_id' AND msg_status <> ".MESSAGE_STATUS_OUTBOX." $condition_group_id ORDER BY send_date DESC $condition_limit ";
  500. $rs = Database::query($query);
  501. $data = array();
  502. if (Database::num_rows($rs) > 0) {
  503. while ($row = Database::fetch_array($rs)) {
  504. $data[$row['id']] = $row;
  505. }
  506. }
  507. return $data;
  508. }
  509. /**
  510. * Gets information about if exist messages
  511. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  512. * @param integer
  513. * @param integer
  514. * @return boolean
  515. */
  516. public static function exist_message ($user_id, $id) {
  517. if ($id != strval(intval($id)) || $user_id != strval(intval($user_id))) return false;
  518. $table_message = Database::get_main_table(TABLE_MESSAGE);
  519. $query = "SELECT id FROM $table_message WHERE user_receiver_id=".Database::escape_string($user_id)." AND id='".Database::escape_string($id)."'";
  520. $result = Database::query($query);
  521. $num = Database::num_rows($result);
  522. if ($num>0)
  523. return true;
  524. else
  525. return false;
  526. }
  527. /**
  528. * Gets information about messages sent
  529. * @param integer
  530. * @param integer
  531. * @param string
  532. * @return array
  533. */
  534. public static function get_message_data_sent ($from, $number_of_items, $column, $direction) {
  535. global $charset;
  536. $from = intval($from);
  537. $number_of_items = intval($number_of_items);
  538. if (!isset($direction)) {
  539. $column = 3;
  540. $direction = 'DESC';
  541. } else {
  542. $column = intval($column);
  543. if (!in_array($direction, array('ASC', 'DESC')))
  544. $direction = 'ASC';
  545. }
  546. $table_message = Database::get_main_table(TABLE_MESSAGE);
  547. $request=api_is_xml_http_request();
  548. $sql_query = "SELECT id as col0, user_sender_id as col1, title as col2, send_date as col3, user_receiver_id as col4, msg_status as col5 FROM $table_message " .
  549. "WHERE user_sender_id=".api_get_user_id()." AND msg_status=".MESSAGE_STATUS_OUTBOX." " .
  550. "ORDER BY col$column $direction LIMIT $from,$number_of_items";
  551. $sql_result = Database::query($sql_query);
  552. $i = 0;
  553. $message_list = array ();
  554. while ($result = Database::fetch_row($sql_result)) {
  555. if ($request===true) {
  556. $message[0] = '<input type="checkbox" value='.$result[0].' name="out[]">';
  557. } else {
  558. $message[0] = ($result[0]);
  559. }
  560. $class = 'class = "read"';
  561. $result[2] = Security::remove_XSS($result[2]);
  562. if ($request===true) {
  563. $message[1] = '<a onclick="show_sent_message('.$result[0].')" href="javascript:void(0)">'.GetFullUserName($result[4]).'</a>';
  564. $message[2] = '<a onclick="show_sent_message('.$result[0].')" href="javascript:void(0)">'.str_replace("\\","",$result[2]).'</a>';
  565. $message[3] = $result[3]; //date stays the same
  566. $message[4] = '&nbsp;&nbsp;<a onclick="delete_one_message_outbox('.$result[0].')" href="javascript:void(0)" >'.Display::return_icon('delete.png',get_lang('DeleteMessage')).'</a>';
  567. } else {
  568. $link = '';
  569. if ($_GET['f']=='social') {
  570. $link = '&f=social';
  571. }
  572. $message[1] = '<a '.$class.' onclick="show_sent_message ('.$result[0].')" href="../messages/view_message.php?id_send='.$result[0].$link.'">'.GetFullUserName($result[4]).'</a>';
  573. $message[2] = '<a '.$class.' onclick="show_sent_message ('.$result[0].')" href="../messages/view_message.php?id_send='.$result[0].$link.'">'.$result[2].'</a>';
  574. $message[3] = $result[3]; //date stays the same
  575. $message[4] = '<a href="outbox.php?action=deleteone&id='.$result[0].'&f='.Security::remove_XSS($_GET['f']).'" onclick="javascript:if(!confirm('."'".addslashes(api_htmlentities(get_lang('ConfirmDeleteMessage')))."'".')) return false;">'.Display::return_icon('delete.png',get_lang('DeleteMessage')).'</a>';
  576. }
  577. foreach($message as $key => $value) {
  578. $message[$key] = $value;
  579. }
  580. $message_list[] = $message;
  581. $i++;
  582. }
  583. return $message_list;
  584. }
  585. /**
  586. * Gets information about number messages sent
  587. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  588. * @param void
  589. * @return integer
  590. */
  591. public static function get_number_of_messages_sent () {
  592. $table_message = Database::get_main_table(TABLE_MESSAGE);
  593. $sql_query = "SELECT COUNT(*) as number_messages FROM $table_message WHERE msg_status=".MESSAGE_STATUS_OUTBOX." AND user_sender_id=".api_get_user_id();
  594. $sql_result = Database::query($sql_query);
  595. $result = Database::fetch_array($sql_result);
  596. return $result['number_messages'];
  597. }
  598. /**
  599. * display message box in the inbox
  600. * @param int the message id
  601. * @param string inbox or outbox strings are available
  602. * @return string html with the message content
  603. */
  604. public static function show_message_box($message_id, $source = 'inbox') {
  605. $table_message = Database::get_main_table(TABLE_MESSAGE);
  606. $tbl_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  607. $message_id = intval($message_id);
  608. if ($source == 'outbox') {
  609. if (isset($message_id) && is_numeric($message_id)) {
  610. $query = "SELECT * FROM $table_message WHERE user_sender_id=".api_get_user_id()." AND id=".$message_id." AND msg_status=4;";
  611. $result = Database::query($query);
  612. $path = 'outbox.php';
  613. }
  614. } else {
  615. if (is_numeric($message_id) && !empty($message_id)) {
  616. $query = "UPDATE $table_message SET msg_status = '".MESSAGE_STATUS_NEW."' WHERE user_receiver_id=".api_get_user_id()." AND id='".$message_id."';";
  617. $result = Database::query($query);
  618. $query = "SELECT * FROM $table_message WHERE msg_status<>4 AND user_receiver_id=".api_get_user_id()." AND id='".$message_id."';";
  619. $result = Database::query($query);
  620. }
  621. $path='inbox.php';
  622. }
  623. $row = Database::fetch_array($result);
  624. // get file attachments by message id
  625. $files_attachments = self::get_links_message_attachment_files($message_id,$source);
  626. $user_con = self::users_connected_by_id();
  627. $band=0;
  628. $reply='';
  629. for ($i=0;$i<count($user_con);$i++)
  630. if ($row[1]==$user_con[$i])
  631. $band=1;
  632. $row[5] = Security::remove_XSS($row[5]);
  633. $message_content = '
  634. <table>
  635. <tr>
  636. <td width=10>&nbsp; </td>
  637. <td vAlign=top width="100%">
  638. <table>
  639. <tr>
  640. <td width="100%">
  641. <h1>'.str_replace("\\","",$row[5]).'</h1>
  642. </td>
  643. <tr>';
  644. if (api_get_setting('allow_social_tool') == 'true') {
  645. $user_image = '';
  646. /* @todo add user image
  647. $user_image = UserManager::get_user_picture_path_by_id($row[1],'web', true,false);
  648. $user_image = UserManager::get_picture_user($row[1], $user_image['file'],'40');
  649. $user_image = '<img src="'.$user_image['file'].'" style="'.$user_image['style'].'" >';
  650. */
  651. if ($source == 'outbox') {
  652. $message_content .='<td>'.get_lang('From').' '.$user_image.'<a href="'.api_get_path(WEB_PATH).'main/social/profile.php?u='.$row[1].'">'.GetFullUserName($row[1]).'</a> '.api_strtolower(get_lang('To')).'&nbsp;<b>'.GetFullUserName($row[2]).'</b> </TD>';
  653. } else {
  654. $message_content .='<td>'.get_lang('From').' '.$user_image.'<a href="'.api_get_path(WEB_PATH).'main/social/profile.php?u='.$row[1].'">'.GetFullUserName($row[1]).'</a> '.api_strtolower(get_lang('To')).'&nbsp;<b>'.get_lang('Me').'</b> </TD>';
  655. }
  656. } else {
  657. if ($source == 'outbox') {
  658. $message_content .='<td>'.get_lang('From').'&nbsp;'.GetFullUserName($row[1]).'</b> '.api_strtolower(get_lang('To')).' <b>'.GetFullUserName($row[2]).'</b> </TD>';
  659. } else {
  660. $message_content .='<td>'.get_lang('From').'&nbsp;'.GetFullUserName($row[1]).'</b> '.api_strtolower(get_lang('To')).' <b>'.get_lang('Me').'</b> </TD>';
  661. }
  662. }
  663. $message_content .='</tr>
  664. <tr>
  665. <td>'.get_lang('Date').'&nbsp; '.$row[4].'</td>
  666. </tr>
  667. </tr>
  668. </table>
  669. <br />
  670. <table height=209 width="100%">
  671. <tr>
  672. <td vAlign=top class="view-message-content">'.str_replace("\\","",$row[6]).'</td>
  673. </tr>
  674. </table>
  675. <div id="message-attach">'.(!empty($files_attachments)?implode('&nbsp;|&nbsp;',$files_attachments):'').'</div>
  676. <div style="padding-bottom: 5px">';
  677. $social_link = '';
  678. if ($_GET['f'] == 'social') {
  679. $social_link = 'f=social';
  680. }
  681. if ($source == 'outbox') {
  682. $message_content .= '<a href="outbox.php?'.$social_link.'">'.Display::return_icon('back.png',get_lang('ReturnToOutbox')).'</a> &nbsp';
  683. } else {
  684. $message_content .= '<a href="inbox.php?'.$social_link.'">'.Display::return_icon('back.png',get_lang('ReturnToInbox')).'</a> &nbsp';
  685. $message_content .= '<a href="new_message.php?re_id='.$message_id.'&'.$social_link.'">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a> &nbsp';
  686. }
  687. $message_content .= '<a href="inbox.php?action=deleteone&id='.$message_id.'&'.$social_link.'" >'.Display::return_icon('delete.png',get_lang('DeleteMessage')).'</a>&nbsp';
  688. $message_content .='</div></td>
  689. <td width=10></td>
  690. </tr>
  691. </table>';
  692. return $message_content;
  693. }
  694. /**
  695. * display message box sent showing it into outbox
  696. * @return void
  697. */
  698. public static function show_message_box_sent () {
  699. global $charset;
  700. $table_message = Database::get_main_table(TABLE_MESSAGE);
  701. $tbl_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  702. $message_id = '';
  703. if (is_numeric($_GET['id_send'])) {
  704. $query = "SELECT * FROM $table_message WHERE user_sender_id=".api_get_user_id()." AND id=".intval(Database::escape_string($_GET['id_send']))." AND msg_status=4;";
  705. $result = Database::query($query);
  706. $message_id = intval($_GET['id_send']);
  707. }
  708. $path='outbox.php';
  709. // get file attachments by message id
  710. $files_attachments = self::get_links_message_attachment_files($message_id,'outbox');
  711. $row = Database::fetch_array($result);
  712. $user_con = self::users_connected_by_id();
  713. $band=0;
  714. $reply='';
  715. for ($i=0;$i<count($user_con);$i++)
  716. if ($row[1]==$user_con[$i])
  717. $band=1;
  718. echo '<div class=actions>';
  719. echo '<a onclick="close_and_open_outbox()" href="javascript:void(0)">'.Display::return_icon('folder_up.gif',api_xml_http_response_encode(get_lang('BackToOutbox'))).api_xml_http_response_encode(get_lang('BackToOutbox')).'</a>';
  720. echo '<a onclick="delete_one_message_outbox('.$row[0].')" href="javascript:void(0)" >'.Display::return_icon('delete.png',api_xml_http_response_encode(get_lang('DeleteMessage'))).api_xml_http_response_encode(get_lang('DeleteMessage')).'</a>';
  721. echo '</div><br />';
  722. echo '
  723. <table class="message_view_table" >
  724. <TR>
  725. <TD width=10>&nbsp; </TD>
  726. <TD vAlign=top width="100%">
  727. <TABLE>
  728. <TR>
  729. <TD width="100%">
  730. <TR> <h1>'.str_replace("\\","",api_xml_http_response_encode($row[5])).'</h1></TR>
  731. </TD>
  732. <TR>
  733. <TD>'.api_xml_http_response_encode(get_lang('From').'&nbsp;<b>'.GetFullUserName($row[1]).'</b> '.api_strtolower(get_lang('To')).'&nbsp; <b>'.GetFullUserName($row[2])).'</b> </TD>
  734. </TR>
  735. <TR>
  736. <TD >'.api_xml_http_response_encode(get_lang('Date').'&nbsp; '.$row[4]).'</TD>
  737. </TR>
  738. </TR>
  739. </TABLE>
  740. <br />
  741. <TABLE height=209 width="100%" bgColor=#ffffff>
  742. <TBODY>
  743. <TR>
  744. <TD vAlign=top>'.str_replace("\\","",api_xml_http_response_encode($row[6])).'</TD>
  745. </TR>
  746. </TBODY>
  747. </TABLE>
  748. <div id="message-attach">'.(!empty($files_attachments)?implode('&nbsp;|&nbsp;',$files_attachments):'').'</div>
  749. <DIV class=HT style="PADDING-BOTTOM: 5px"> </DIV></TD>
  750. <TD width=10>&nbsp;</TD>
  751. </TR>
  752. </TABLE>';
  753. }
  754. /**
  755. * get user id by user email
  756. * @param string $user_email
  757. * @return int user id
  758. */
  759. public static function get_user_id_by_email ($user_email) {
  760. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  761. $sql='SELECT user_id FROM '.$tbl_user.' WHERE email="'.Database::escape_string($user_email).'";';
  762. $rs=Database::query($sql);
  763. $row=Database::fetch_array($rs,'ASSOC');
  764. if (isset($row['user_id'])) {
  765. return $row['user_id'];
  766. } else {
  767. return null;
  768. }
  769. }
  770. /**
  771. * Displays messages of a group with nested view
  772. * @param int group id
  773. */
  774. public static function display_messages_for_group($group_id) {
  775. global $my_group_role;
  776. $rows = self::get_messages_by_group($group_id);
  777. $rows = self::calculate_children($rows);
  778. $group_info = GroupPortalManager::get_group_data($group_id);
  779. $current_user_id = api_get_user_id();
  780. $topics_per_page = 5;
  781. $items_per_page = 3;
  782. $count_items = 0;
  783. $html_messages = '';
  784. $query_vars = array('id'=>$group_id,'topics_page_nr'=>0);
  785. if (is_array($rows) && count($rows)> 0) {
  786. // prepare array for topics with its items
  787. $topics = array();
  788. $x = 0;
  789. foreach ($rows as $index=>$value) {
  790. if (empty($value['parent_id'])) {
  791. $x = $index;
  792. $topics[$x] = $value;
  793. } else {
  794. $topics[$x]['items'][] = $value;
  795. }
  796. }
  797. uasort($topics,array('MessageManager','order_desc_date'));
  798. $param_names = array_keys($_GET);
  799. $array_html = array();
  800. foreach ($topics as $index => $topic) {
  801. $html = '';
  802. // topics
  803. $indent = 0;
  804. $user_sender_info = UserManager::get_user_info_by_id($topic['user_sender_id']);
  805. $files_attachments = self::get_links_message_attachment_files($topic['id']);
  806. $name = api_get_person_name($user_sender_info['firstname'], $user_sender_info['lastname']);
  807. $html .= '<div class="social-box-container2" >';
  808. $html .= '<div>'.Display::return_icon('content-post-group1.jpg',get_lang('Theme')).'</div>';
  809. $html .= '<div class="social-box-content2">';
  810. $html .= '<a href="#" class="head" id="head_'.$topic['id'].'">';
  811. $html .= '<span class="message-group-title-topic">'.(((isset($_GET['anchor_topic']) && $_GET['anchor_topic'] == 'topic_'.$topic['id']) || in_array('items_'.$topic['id'].'_page_nr',$param_names))?Display::return_icon('div_hide.gif',get_lang('Hide'),array('style'=>'vertical-align: middle')):
  812. Display::return_icon('div_show.gif',get_lang('Show'),array('style'=>'vertical-align: middle'))).'
  813. '.Security::remove_XSS($topic['title']).'</span>';
  814. $html .= '</a>';
  815. if ($topic['send_date']!=$topic['update_date']) {
  816. if (!empty($topic['update_date']) && $topic['update_date'] != '0000-00-00 00:00:00' ) {
  817. $html .= '<span class="message-group-date" > ('.get_lang('LastUpdate').' '.date_to_str_ago($topic['update_date']).')</span>';
  818. }
  819. } else {
  820. $html .= '<span class="message-group-date" > ('.get_lang('Created').' '.date_to_str_ago($topic['send_date']).')</span>';
  821. }
  822. $html .= '<div id="topic_'.$topic['id'].'" >';
  823. $html .= '<a name="topic_'.$topic['id'].'"></a>';
  824. $html.= '<div style="margin-bottom:10px">';
  825. $html.= '<div id="message-reply-link" style="margin-right:10px">
  826. <a href="'.api_get_path(WEB_CODE_PATH).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.$current_user_id.'&group_id='.$group_id.'&message_id='.$topic['id'].'&action=reply_message_group&anchor_topic=topic_'.$topic['id'].'&topics_page_nr='.intval($_GET['topics_page_nr']).'&items_page_nr='.intval($_GET['items_page_nr']).'" class="thickbox" title="'.get_lang('Reply').'">'.Display :: return_icon('talk.png', get_lang('Reply')).'</a>';
  827. if (($my_group_role == GROUP_USER_PERMISSION_ADMIN || $my_group_role == GROUP_USER_PERMISSION_MODERATOR) || $topic['user_sender_id'] == $current_user_id) {
  828. $html.= '&nbsp;&nbsp;<a href="'.api_get_path(WEB_CODE_PATH).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.$current_user_id.'&group_id='.$group_id.'&message_id='.$topic['id'].'&action=edit_message_group&anchor_topic=topic_'.$topic['id'].'&topics_page_nr='.intval($_GET['topics_page_nr']).'&items_page_nr='.intval($_GET['items_page_nr']).'" class="thickbox" title="'.get_lang('Edit').'">'.Display :: return_icon('edit.gif', get_lang('Edit')).'</a>';
  829. }
  830. $html.= '</div>';
  831. $html.= '<br />';
  832. $image_path = UserManager::get_user_picture_path_by_id($topic['user_sender_id'], 'web', false, true); $image_repository = $image_path['dir'];
  833. $existing_image = $image_path['file'];
  834. $html.= '<div class="message-group-author"><img src="'.$image_repository.$existing_image.'" alt="'.$name.'" width="44" height="44" title="'.$name.'" />&nbsp;<a href="'.api_get_path(WEB_PATH).'main/social/profile.php?u='.$topic['user_sender_id'].'">'.$name.'&nbsp;</a></div>';
  835. $html.= '<div class="message-group-content">'.$topic['content'].'</div>';
  836. $html.= '<div class="message-attach">'.(!empty($files_attachments)?implode('&nbsp;|&nbsp;',$files_attachments):'').'</div>';
  837. $html.= '</div>';
  838. // items
  839. if (is_array($topic['items'])) {
  840. $items_page_nr = intval($_GET['items_'.$topic['id'].'_page_nr']);
  841. $array_html_items = array();
  842. foreach ($topic['items'] as $item) {
  843. $html_items = '';
  844. //$indent = $item['indent_cnt']*'15';
  845. $user_sender_info = UserManager::get_user_info_by_id($item['user_sender_id']);
  846. $files_attachments = self::get_links_message_attachment_files($item['id']);
  847. $name = api_get_person_name($user_sender_info['firstname'], $user_sender_info['lastname']);
  848. $html_items.= '<div class="social-box-container3" >';
  849. $html_items .= '<div>'.Display::return_icon('content-post-reply01.jpg',get_lang('Message')).'</div>';
  850. $html_items .= '<div class="social-box-content3">';
  851. $html_items.= '<div id="message-reply-link">';
  852. $html_items.= '<a href="'.api_get_path(WEB_CODE_PATH).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.api_get_user_id().'&group_id='.$group_id.'&message_id='.$item['id'].'&action=reply_message_group&anchor_topic=topic_'.$topic['id'].'&topics_page_nr='.intval($_GET['topics_page_nr']).'&items_page_nr='.intval($items_page_nr).'&topic_id='.$topic['id'].'" class="thickbox" title="'.get_lang('Reply').'">'.Display :: return_icon('talk.png', get_lang('Reply')).'</a>';
  853. if (($my_group_role == GROUP_USER_PERMISSION_ADMIN || $my_group_role == GROUP_USER_PERMISSION_MODERATOR) || $item['user_sender_id'] == $current_user_id) {
  854. $html_items.= '&nbsp;&nbsp;<a href="'.api_get_path(WEB_CODE_PATH).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.$current_user_id.'&group_id='.$group_id.'&message_id='.$item['id'].'&action=edit_message_group&anchor_topic=topic_'.$topic['id'].'&topics_page_nr='.intval($_GET['topics_page_nr']).'&items_page_nr='.intval($items_page_nr).'&topic_id='.$topic['id'].'" class="thickbox" title="'.get_lang('Edit').'">'.Display :: return_icon('edit.gif', get_lang('Edit')).'</a>';
  855. }
  856. $html_items.= '</div>';
  857. //$html_items.= '<div class="message-group-title">'.Security::remove_XSS($item['title']).'&nbsp;</div>';
  858. $image_path = UserManager::get_user_picture_path_by_id($topic['user_sender_id'], 'web', false, true); $image_repository = $image_path['dir'];
  859. $existing_image = $image_path['file'];
  860. $html_items.= '<div class="message-group-author"><img src="'.$image_repository.$existing_image.'" alt="'.$name.'" width="32" height="32" title="'.$name.'" />&nbsp;<a href="'.api_get_path(WEB_PATH).'main/social/profile.php?u='.$item['user_sender_id'].'">'.$name.'&nbsp;</a></div>';
  861. $html_items.= '<div class="message-group-content">'.$item['content'].'</div>';
  862. if ($item['send_date'] != $item['update_date']) {
  863. if (!empty($item['update_date']) && $item['update_date'] != '0000-00-00 00:00:00' ) {
  864. $html_items .= '<div class="message-group-date"> '.get_lang('LastUpdate').' '.date_to_str_ago($item['update_date']).'</div>';
  865. }
  866. } else {
  867. $html_items .= '<div class="message-group-date"> '.get_lang('Created').' '.date_to_str_ago($item['send_date']).'</div>';
  868. }
  869. $html_items.= '<div class="message-attach">'.(!empty($files_attachments)?implode('&nbsp;|&nbsp;',$files_attachments):'').'</div>';
  870. $html_items.= '</div>';
  871. $html_items.= '</div>';
  872. $array_html_items[] = array($html_items);
  873. }
  874. // grids for items with paginations
  875. $html .= Display::return_sortable_grid('items_'.$topic['id'], array(), $array_html_items, array('hide_navigation'=>false, 'per_page' => $items_per_page), $query_vars, false, array(true, true, true,false), false);
  876. }
  877. $html .= '</div>';
  878. $html .= '</div>';
  879. $html .= '</div>';
  880. $array_html[] = array($html);
  881. }
  882. // grids for items and topics with paginations
  883. $html_messages .= '<div class="social-box-container2">';
  884. $html_messages .= Display::return_sortable_grid('topics', array(), $array_html, array('hide_navigation'=>false, 'per_page' => $topics_per_page), $query_vars, false, array(true, true, true,false), false);
  885. $html_messages .= '</div>';
  886. }
  887. return $html_messages;
  888. }
  889. /**
  890. * Add children to messages by id is used for nested view messages
  891. * @param array rows of messages
  892. * @return array new list adding the item children
  893. */
  894. public static function calculate_children($rows) {
  895. foreach($rows as $row) {
  896. $rows_with_children[$row["id"]]=$row;
  897. $rows_with_children[$row["parent_id"]]["children"][]=$row["id"];
  898. }
  899. $rows=$rows_with_children;
  900. $sorted_rows=array(0=>array());
  901. self::message_recursive_sort($rows, $sorted_rows);
  902. unset($sorted_rows[0]);
  903. return $sorted_rows;
  904. }
  905. /**
  906. * Sort recursively the messages, is used for for nested view messages
  907. * @param array original rows of messages
  908. * @param array list recursive of messages
  909. * @param int seed for calculate the indent
  910. * @param int indent for nested view
  911. * @return void
  912. */
  913. public static function message_recursive_sort($rows, &$messages, $seed=0, $indent=0) {
  914. if($seed>0) {
  915. $messages[$rows[$seed]["id"]]=$rows[$seed];
  916. $messages[$rows[$seed]["id"]]["indent_cnt"]=$indent;
  917. $indent++;
  918. }
  919. if(isset($rows[$seed]["children"])) {
  920. foreach($rows[$seed]["children"] as $child) {
  921. self::message_recursive_sort($rows, $messages, $child, $indent);
  922. }
  923. }
  924. }
  925. /**
  926. * Sort date by desc from a multi-dimensional array
  927. * @param array1 first array to compare
  928. * @param array2 second array to compare
  929. * @return bool
  930. */
  931. public function order_desc_date($array1,$array2) {
  932. return strcmp($array2['send_date'],$array1['send_date']);
  933. }
  934. /**
  935. * Get array of links (download) for message attachment files
  936. * @param int message id
  937. * @param string type message list (inbox/outbox)
  938. * @return array
  939. */
  940. public static function get_links_message_attachment_files($message_id,$type='') {
  941. $tbl_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  942. $message_id = intval($message_id);
  943. // get file attachments by message id
  944. $links_attach_file = array();
  945. if (!empty($message_id)) {
  946. $sql = "SELECT * FROM $tbl_message_attach WHERE message_id = '$message_id'";
  947. $rs_file = Database::query($sql);
  948. if (Database::num_rows($rs_file) > 0) {
  949. $attach_icon = Display::return_icon('attachment.gif');
  950. $archiveURL=api_get_path(WEB_CODE_PATH).'messages/download.php?type='.$type.'&file=';
  951. while ($row_file = Database::fetch_array($rs_file)) {
  952. $archiveFile= $row_file['path'];
  953. $filename = $row_file['filename'];
  954. $filesize = format_file_size($row_file['size']);
  955. $filecomment= $row_file['comment'];
  956. $links_attach_file[] = $attach_icon.'&nbsp;<a href="'.$archiveURL.$archiveFile.'">'.$filename.'</a>&nbsp;('.$filesize.')'.(!empty($filecomment)?'&nbsp;-&nbsp;<i>'.$filecomment.'</i>':'');
  957. }
  958. }
  959. }
  960. return $links_attach_file;
  961. }
  962. /**
  963. * Get message list by id
  964. * @param int message id
  965. * @return array
  966. */
  967. public static function get_message_by_id($message_id) {
  968. $tbl_message = Database::get_main_table(TABLE_MESSAGE);
  969. $message_id = intval($message_id);
  970. $sql = "SELECT * FROM $tbl_message WHERE id = '$message_id'";
  971. $res = Database::query($sql);
  972. $item = array();
  973. if (Database::num_rows($res)>0) {
  974. $item = Database::fetch_array($res,'ASSOC');
  975. }
  976. return $item;
  977. }
  978. }
  979. //@todo this functions should be in the message class
  980. function inbox_display() {
  981. global $charset;
  982. // $charset = api_get_system_encoding();
  983. $table_message = Database::get_main_table(TABLE_MESSAGE);
  984. $request=api_is_xml_http_request();
  985. if ($_SESSION['social_exist']===true) {
  986. if (api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool')=='true') {
  987. $success= get_lang('SelectedMessagesDeleted');
  988. } else {
  989. $success= get_lang('SelectedMessagesDeleted');
  990. }
  991. } else {
  992. $success= get_lang('SelectedMessagesDeleted');
  993. }
  994. if (isset ($_REQUEST['action'])) {
  995. switch ($_REQUEST['action']) {
  996. case 'delete' :
  997. $number_of_selected_messages = count($_POST['id']);
  998. foreach ($_POST['id'] as $index => $message_id) {
  999. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $message_id);
  1000. }
  1001. Display::display_normal_message(api_xml_http_response_encode($success),false);
  1002. break;
  1003. case 'deleteone' :
  1004. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $_GET['id']);
  1005. Display::display_confirmation_message(api_xml_http_response_encode($success),false);
  1006. echo '<br />';
  1007. break;
  1008. }
  1009. }
  1010. // display sortable table with messages of the current user
  1011. //$table = new SortableTable('messages', 'get_number_of_messages_mask', 'get_message_data_mask', 3, get_number_of_messages_mask(),'DESC');
  1012. $table = new SortableTable('message_inbox', array('MessageManager','get_number_of_messages'), array('MessageManager','get_message_data'),3,20,'DESC');
  1013. $table->set_header(0, '', false,array ('style' => 'width:20px;'));
  1014. $title=api_xml_http_response_encode(get_lang('Title'));
  1015. $action=api_xml_http_response_encode(get_lang('Actions'));
  1016. $table->set_header(1,api_xml_http_response_encode(get_lang('From')),true);
  1017. $table->set_header(2,$title,true);
  1018. $table->set_header(3,api_xml_http_response_encode(get_lang('Date')),true, array('style' => 'width:150px;'));
  1019. $table->set_header(4,$action,false,array ('style' => 'width:70px;'));
  1020. if ($_REQUEST['f']=='social') {
  1021. $parameters['f'] = 'social';
  1022. $table->set_additional_parameters($parameters);
  1023. }
  1024. echo '<div id="div_content_table_data">';
  1025. if ($request===true) {
  1026. echo '<form name="form_send" id="form_send" action="" method="post">';
  1027. echo '<input type="hidden" name="action" value="delete" />';
  1028. $table->display();
  1029. echo '</form>';
  1030. if (get_number_of_messages_mask() > 0) {
  1031. echo '<a href="javascript:void(0)" onclick="selectall_cheks()">'.api_xml_http_response_encode(get_lang('SelectAll')).'</a>&nbsp;&nbsp;&nbsp;';
  1032. echo '<a href="javascript:void(0)" onclick="unselectall_cheks()">'.api_xml_http_response_encode(get_lang('UnSelectAll')).'</a>&nbsp;&nbsp;&nbsp;';
  1033. echo '<button class="save" name="delete" type="button" value="'.api_xml_http_response_encode(get_lang('DeleteSelectedMessages')).'" onclick="submit_form(\'inbox\')">'.api_xml_http_response_encode(get_lang('DeleteSelectedMessages')).'</button>';
  1034. }
  1035. } else {
  1036. $table->set_form_actions(array ('delete' => get_lang('DeleteSelectedMessages')));
  1037. $table->display();
  1038. }
  1039. echo '</div>';
  1040. }
  1041. function get_number_of_messages_mask() {
  1042. return MessageManager::get_number_of_messages();
  1043. }
  1044. function get_message_data_mask($from, $number_of_items, $column, $direction) {
  1045. $column='3';
  1046. $direction='DESC';
  1047. //non set by SortableTable ?
  1048. $number_of_items=get_number_of_messages_mask();
  1049. return MessageManager::get_message_data($from, $number_of_items, $column, $direction);
  1050. }
  1051. function outbox_display() {
  1052. $table_message = Database::get_main_table(TABLE_MESSAGE);
  1053. $request=api_is_xml_http_request();
  1054. global $charset;
  1055. $social_link = false;
  1056. if ($_REQUEST['f']=='social') {
  1057. $social_link ='f=social';
  1058. }
  1059. if ($_SESSION['social_exist']===true) {
  1060. if (api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool')=='true') {
  1061. $success= get_lang('SelectedMessagesDeleted')."&nbsp<br><a href=\""."../social/index.php?$social_link\">".get_lang('BackToOutbox')."</a>";
  1062. }else {
  1063. $success=get_lang('SelectedMessagesDeleted')."&nbsp<br><a href=\""."../social/index.php?$social_link\">".get_lang('BackToOutbox')."</a>";
  1064. }
  1065. } else {
  1066. $success= get_lang('SelectedMessagesDeleted').'&nbsp</b><br /><a href="outbox.php?'.$social_link.'">'.get_lang('BackToOutbox').'</a>';
  1067. }
  1068. if (isset ($_REQUEST['action'])) {
  1069. switch ($_REQUEST['action']) {
  1070. case 'delete' :
  1071. $number_of_selected_messages = count($_POST['id']);
  1072. if ($number_of_selected_messages!=0) {
  1073. foreach ($_POST['id'] as $index => $message_id) {
  1074. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $message_id);
  1075. }
  1076. }
  1077. Display::display_normal_message(api_xml_http_response_encode($success),false);
  1078. break;
  1079. case 'deleteone' :
  1080. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $_GET['id']);
  1081. Display::display_confirmation_message(api_xml_http_response_encode($success),false);
  1082. echo '<br/>';
  1083. break;
  1084. }
  1085. }
  1086. // display sortable table with messages of the current user
  1087. //$table = new SortableTable('messages', 'get_number_of_messages_send_mask', 'get_message_data_send_mask', 3, get_number_of_messages_send_mask(), 'DESC');
  1088. $table = new SortableTable('message_outbox', array('MessageManager','get_number_of_messages_sent'), array('MessageManager','get_message_data_sent'),3,20,'DESC');
  1089. $parameters['f'] = Security::remove_XSS($_GET['f']);
  1090. $table->set_additional_parameters($parameters);
  1091. $table->set_header(0, '', false,array ('style' => 'width:20px;'));
  1092. $title = api_xml_http_response_encode(get_lang('Title'));
  1093. $action= api_xml_http_response_encode(get_lang('Actions'));
  1094. $table->set_header(1, api_xml_http_response_encode(get_lang('To')),true);
  1095. $table->set_header(2, $title,true);
  1096. $table->set_header(3, api_xml_http_response_encode(get_lang('Date')),true,array ('style' => 'width:150px;'));
  1097. $table->set_header(4,$action, false,array ('style' => 'width:70px;'));
  1098. /*
  1099. if ($_REQUEST['f']=='social') {
  1100. $parameters['f'] = 'social';
  1101. $table->set_additional_parameters($parameters);
  1102. }
  1103. */
  1104. echo '<div id="div_content_table_data_sent">';
  1105. if ($request===true) {
  1106. echo '<form name="form_send_out" id="form_send_out" action="" method="post">';
  1107. echo '<input type="hidden" name="action" value="delete" />';
  1108. $table->display();
  1109. echo '</form>';
  1110. if (get_number_of_messages_send_mask() > 0) {
  1111. echo '<a href="javascript:void(0)" onclick="selectall_cheks()">'.api_xml_http_response_encode(get_lang('SelectAll')).'</a>&nbsp;&nbsp;&nbsp;';
  1112. echo '<a href="javascript:void(0)" onclick="unselectall_cheks()">'.api_xml_http_response_encode(get_lang('UnSelectAll')).'</a>&nbsp;&nbsp;&nbsp;';
  1113. echo '<button class="save" name="delete" type="button" value="'.api_xml_http_response_encode(get_lang('DeleteSelectedMessages')).'" onclick="submit_form(\'outbox\')">'.api_xml_http_response_encode(get_lang('DeleteSelectedMessages')).'</button>';
  1114. }
  1115. } else {
  1116. $table->set_form_actions(array ('delete' => get_lang('DeleteSelectedMessages')));
  1117. $table->display();
  1118. }
  1119. echo '</div>';
  1120. }
  1121. function get_number_of_messages_send_mask() {
  1122. return MessageManager::get_number_of_messages_sent();
  1123. }
  1124. function get_message_data_send_mask($from, $number_of_items, $column, $direction) {
  1125. $column='3';
  1126. $direction='desc';
  1127. //non set by SortableTable ?
  1128. $number_of_items=get_number_of_messages_send_mask();
  1129. return MessageManager::get_message_data_sent($from, $number_of_items, $column, $direction);
  1130. }
  1131. ?>