introductionSection.inc.php 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * The INTRODUCTION MICRO MODULE is used to insert and edit
  5. * an introduction section on a Chamilo Module. It can be inserted on any
  6. * Chamilo Module, provided a connection to a course Database is already active.
  7. *
  8. * The introduction content are stored on a table called "introduction"
  9. * in the course Database. Each module introduction has an Id stored on
  10. * the table. It is this id that can make correspondance to a specific module.
  11. *
  12. * 'introduction' table description
  13. * id : int
  14. * intro_text :text
  15. *
  16. *
  17. * usage :
  18. *
  19. * $moduleId = XX // specifying the module Id
  20. * include(moduleIntro.inc.php);
  21. *
  22. * @package chamilo.include
  23. */
  24. /* Constants and variables */
  25. $TBL_INTRODUCTION = Database::get_course_table(TABLE_TOOL_INTRO);
  26. $intro_editAllowed = $is_allowed_to_edit;
  27. $session_id = api_get_session_id();
  28. $introduction_section = '';
  29. global $charset;
  30. $intro_cmdEdit = empty($_GET['intro_cmdEdit']) ? '' : $_GET['intro_cmdEdit'];
  31. $intro_cmdUpdate = isset($_POST['intro_cmdUpdate']);
  32. $intro_cmdDel = empty($_GET['intro_cmdDel']) ? '' : $_GET['intro_cmdDel'];
  33. $intro_cmdAdd = empty($_GET['intro_cmdAdd']) ? '' : $_GET['intro_cmdAdd'];
  34. $courseId = api_get_course_id();
  35. if (!empty($courseId)) {
  36. $form = new FormValidator('introduction_text', 'post', api_get_self().'?'.api_get_cidreq());
  37. } else {
  38. $form = new FormValidator('introduction_text');
  39. }
  40. $renderer =& $form->defaultRenderer();
  41. $renderer->setElementTemplate('<div style="width: 80%; margin: 0px auto; padding-bottom: 10px; ">{element}</div>');
  42. $toolbar_set = 'Introduction';
  43. $width = '100%';
  44. $height = '300';
  45. // The global variable $fck_attribute has been deprecated. It stays here for supporting old external code.
  46. global $fck_attribute;
  47. if (is_array($fck_attribute)) {
  48. if (isset($fck_attribute['ToolbarSet'])) {
  49. $toolbar_set = $fck_attribute['ToolbarSet'];
  50. }
  51. if (isset($fck_attribute['Width'])) {
  52. $toolbar_set = $fck_attribute['Width'];
  53. }
  54. if (isset($fck_attribute['Height'])) {
  55. $toolbar_set = $fck_attribute['Height'];
  56. }
  57. }
  58. if (is_array($editor_config)) {
  59. if (!isset($editor_config['ToolbarSet'])) {
  60. $editor_config['ToolbarSet'] = $toolbar_set;
  61. }
  62. if (!isset($editor_config['Width'])) {
  63. $editor_config['Width'] = $width;
  64. }
  65. if (!isset($editor_config['Height'])) {
  66. $editor_config['Height'] = $height;
  67. }
  68. } else {
  69. $editor_config = array('ToolbarSet' => $toolbar_set, 'Width' => $width, 'Height' => $height);
  70. }
  71. $form->add_html_editor('intro_content', null, null, false, $editor_config);
  72. $form->addElement('style_submit_button', 'intro_cmdUpdate', get_lang('SaveIntroText'), 'class="save"');
  73. /* INTRODUCTION MICRO MODULE - COMMANDS SECTION (IF ALLOWED) */
  74. $course_id = api_get_course_int_id();
  75. if ($intro_editAllowed) {
  76. $moduleId = Database::escape_string($moduleId);
  77. /* Replace command */
  78. if ($intro_cmdUpdate) {
  79. if ($form->validate()) {
  80. $form_values = $form->exportValues();
  81. $intro_content = Security::remove_XSS(stripslashes(api_html_entity_decode($form_values['intro_content'])), COURSEMANAGERLOWSECURITY);
  82. if (!empty($intro_content)) {
  83. $sql = "REPLACE $TBL_INTRODUCTION SET c_id = $course_id, id='$moduleId',intro_text='".Database::escape_string($intro_content)."', session_id='".intval($session_id)."'";
  84. Database::query($sql);
  85. $introduction_section .= Display::return_message(get_lang('IntroductionTextUpdated'),'confirmation', false);
  86. } else {
  87. $intro_cmdDel = true; // got to the delete command
  88. }
  89. } else {
  90. $intro_cmdEdit = true;
  91. }
  92. }
  93. /* Delete Command */
  94. if ($intro_cmdDel) {
  95. Database::query("DELETE FROM $TBL_INTRODUCTION WHERE c_id = $course_id AND id='".$moduleId."' AND session_id='".intval($session_id)."'");
  96. $introduction_section .= Display::return_message(get_lang('IntroductionTextDeleted'), 'confirmation');
  97. }
  98. }
  99. /* INTRODUCTION MICRO MODULE - DISPLAY SECTION */
  100. /* Retrieves the module introduction text, if exist */
  101. /* @todo use a lib to query the $TBL_INTRODUCTION table */
  102. // Getting course intro
  103. $intro_content = null;
  104. $sql = "SELECT intro_text FROM $TBL_INTRODUCTION
  105. WHERE c_id = $course_id AND id='".Database::escape_string($moduleId)."' AND session_id = 0";
  106. $intro_dbQuery = Database::query($sql);
  107. if (Database::num_rows($intro_dbQuery) > 0) {
  108. $intro_dbResult = Database::fetch_array($intro_dbQuery);
  109. $intro_content = $intro_dbResult['intro_text'];
  110. }
  111. // Getting session intro
  112. if (!empty($session_id)) {
  113. $sql = "SELECT intro_text FROM $TBL_INTRODUCTION
  114. WHERE c_id = $course_id AND id='".Database::escape_string($moduleId)."' AND session_id = '".intval($session_id)."'";
  115. $intro_dbQuery = Database::query($sql);
  116. $introSessionContent = null;
  117. if (Database::num_rows($intro_dbQuery) > 0) {
  118. $intro_dbResult = Database::fetch_array($intro_dbQuery);
  119. $introSessionContent = $intro_dbResult['intro_text'];
  120. }
  121. // If the course session intro exists replace it.
  122. if (!empty($introSessionContent)) {
  123. $intro_content = $introSessionContent;
  124. }
  125. }
  126. /* Determines the correct display */
  127. if ($intro_cmdEdit || $intro_cmdAdd) {
  128. $intro_dispDefault = false;
  129. $intro_dispForm = true;
  130. $intro_dispCommand = false;
  131. } else {
  132. $intro_dispDefault = true;
  133. $intro_dispForm = false;
  134. if ($intro_editAllowed) {
  135. $intro_dispCommand = true;
  136. } else {
  137. $intro_dispCommand = false;
  138. }
  139. }
  140. /* Executes the display */
  141. // display thematic advance inside a postit
  142. if ($intro_dispForm) {
  143. $default['intro_content'] = $intro_content;
  144. $form->setDefaults($default);
  145. $introduction_section .= '<div id="courseintro" style="width: 98%">';
  146. $introduction_section .= $form->return_form();
  147. $introduction_section .= '</div>';
  148. }
  149. $thematic_description_html = '';
  150. if ($tool == TOOL_COURSE_HOMEPAGE && !isset($_GET['intro_cmdEdit'])) {
  151. $thematic = new Thematic();
  152. if (api_get_course_setting('display_info_advance_inside_homecourse') == '1') {
  153. $information_title = get_lang('InfoAboutLastDoneAdvance');
  154. $last_done_advance = $thematic->get_last_done_thematic_advance();
  155. $thematic_advance_info = $thematic->get_thematic_advance_list($last_done_advance);
  156. } else if(api_get_course_setting('display_info_advance_inside_homecourse') == '2') {
  157. $information_title = get_lang('InfoAboutNextAdvanceNotDone');
  158. $next_advance_not_done = $thematic->get_next_thematic_advance_not_done();
  159. $thematic_advance_info = $thematic->get_thematic_advance_list($next_advance_not_done);
  160. } else if(api_get_course_setting('display_info_advance_inside_homecourse') == '3') {
  161. $information_title = get_lang('InfoAboutLastDoneAdvanceAndNextAdvanceNotDone');
  162. $last_done_advance = $thematic->get_last_done_thematic_advance();
  163. $next_advance_not_done = $thematic->get_next_thematic_advance_not_done();
  164. $thematic_advance_info = $thematic->get_thematic_advance_list($last_done_advance);
  165. $thematic_advance_info2 = $thematic->get_thematic_advance_list($next_advance_not_done);
  166. }
  167. if (!empty($thematic_advance_info)) {
  168. $thematic_advance = get_lang('CourseThematicAdvance').'&nbsp;'.$thematic->get_total_average_of_thematic_advances().'%';
  169. if (api_is_allowed_to_edit(null, true)) {
  170. //$thematic_advance = '<a href="'.api_get_path(WEB_CODE_PATH).'course_progress/index.php?action=thematic_details&'.api_get_cidreq().'">'.get_lang('CourseThematicAdvance').'&nbsp;'.$thematic->get_total_average_of_thematic_advances().'%</a>';
  171. }
  172. $thematic_info = $thematic->get_thematic_list($thematic_advance_info['thematic_id']);
  173. $thematic_advance_info['start_date'] = api_get_local_time($thematic_advance_info['start_date']);
  174. $thematic_advance_info['start_date'] = api_format_date($thematic_advance_info['start_date'], DATE_TIME_FORMAT_LONG);
  175. $thematic_description_html = '<div class="thematic-postit">
  176. <div class="thematic-postit-top"><h3><a class="thematic-postit-head" style="" href="#"> '.$thematic_advance.'</h3></a></div>
  177. <div class="thematic-postit-center" style="display:none">';
  178. $thematic_description_html .= '<div><strong>'.$thematic_info['title'].'</strong></div>';
  179. $thematic_description_html .= '<div style="font-size:8pt;"><strong>'.$thematic_advance_info['start_date'].'</strong></div>';
  180. $thematic_description_html .= '<div>'.$thematic_advance_info['content'].'</div>';
  181. $thematic_description_html .= '<div>'.get_lang('DurationInHours').' : '.$thematic_advance_info['duration'].'</div>';
  182. if (!empty($thematic_advance_info2)){
  183. $thematic_info2 = $thematic->get_thematic_list($thematic_advance_info2['thematic_id']);
  184. $thematic_advance_info2['start_date'] = api_get_local_time($thematic_advance_info2['start_date']);
  185. $thematic_advance_info2['start_date'] = api_format_date($thematic_advance_info2['start_date'], DATE_TIME_FORMAT_LONG);
  186. $thematic_description_html .= '<div><strong>'.$thematic_info2['title'].'</strong></div>';
  187. $thematic_description_html .= '<div style="font-size:8pt;"><strong>'.$thematic_advance_info2['start_date'].'</strong></div>';
  188. $thematic_description_html .= '<div>'.$thematic_advance_info2['content'].'</div>';
  189. $thematic_description_html .= '<div>'.get_lang('DurationInHours').' : '.$thematic_advance_info2['duration'].'</div>';
  190. $thematic_description_html .= '<br />';
  191. }
  192. $thematic_description_html .= '</div>
  193. <div class="thematic-postit-bottom"></div>
  194. </div>';
  195. }
  196. }
  197. $introduction_section .= '<div class="row course-tools-intro"><div class="span12">';
  198. $introduction_section .= $thematic_description_html;
  199. $introduction_section .= '</div>';
  200. $introduction_section .= '<div class="home-course-intro span12"><div class="page-course">';
  201. if ($intro_dispDefault) {
  202. $intro_content = $intro_content;
  203. if (!empty($intro_content)) {
  204. $introduction_section.='<div class="page-course-intro">';
  205. $introduction_section .= $intro_content;
  206. $introduction_section.='</div>';
  207. }
  208. }
  209. $introduction_section .= '</div></div>';
  210. if ($intro_dispCommand) {
  211. if (empty($intro_content)) {
  212. // Displays "Add intro" commands
  213. $introduction_section .= '<div id="courseintro_empty">';
  214. if (!empty ($GLOBALS['_cid'])) {
  215. $introduction_section .= "<a href=\"".api_get_self()."?".api_get_cidreq()."&amp;intro_cmdAdd=1\">";
  216. $introduction_section .= Display::return_icon('introduction_add.gif', get_lang('AddIntro')).' ';
  217. $introduction_section .= "</a>";
  218. } else {
  219. $introduction_section .= "<a href=\"".api_get_self()."?intro_cmdAdd=1\">\n".get_lang('AddIntro')."</a>";
  220. }
  221. $introduction_section .= "</div>";
  222. } else {
  223. // Displays "edit intro && delete intro" commands
  224. $introduction_section .= '<div id="courseintro_empty">';
  225. if (!empty ($GLOBALS['_cid'])) {
  226. $introduction_section .= "<a href=\"".api_get_self()."?".api_get_cidreq()."&amp;intro_cmdEdit=1\">".Display::return_icon('edit.png',get_lang('Modify'),'',ICON_SIZE_SMALL)."</a>";
  227. $introduction_section .= "<a href=\"".api_get_self()."?".api_get_cidreq()."&amp;intro_cmdDel=1\" onclick=\"javascript:if(!confirm('".addslashes(api_htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset))."')) return false;\">".Display::return_icon('delete.png',get_lang('Delete'),'',ICON_SIZE_SMALL)."</a>";
  228. } else {
  229. $introduction_section .= "<a href=\"".api_get_self()."?intro_cmdEdit=1\">".Display::return_icon('edit.png',get_lang('Modify'),'',ICON_SIZE_SMALL)."</a>";
  230. $introduction_section .= "<a href=\"".api_get_self()."?intro_cmdDel=1\" onclick=\"javascript:if(!confirm('".addslashes(api_htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset))."')) return false;\">".Display::return_icon('delete.png',get_lang('Delete'),'',ICON_SIZE_SMALL)."</a>";
  231. }
  232. $introduction_section .= "</div>";
  233. // Fix for chrome XSS filter for videos in iframes - BT#7930
  234. $browser = api_get_navigator();
  235. if (strpos($introduction_section, '<iframe') !== false && $browser['name'] == 'Chrome') {
  236. header('X-XSS-Protection: 0');
  237. }
  238. }
  239. }
  240. $introduction_section .= '</div>';
  241. $browser = api_get_navigator();
  242. if (strpos($introduction_section, '<iframe') !== false && $browser['name'] == 'Chrome') {
  243. header("X-XSS-Protection: 0");
  244. }