user.php 39 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This script displays a list of the users of the current course.
  5. * Course admins can change user permissions, subscribe and unsubscribe users...
  6. *
  7. * - show users registered in courses;
  8. *
  9. * @author Roan Embrechts
  10. * @author Julio Montoya Armas, Several fixes
  11. * @package chamilo.user
  12. */
  13. $use_anonymous = true;
  14. require_once __DIR__.'/../inc/global.inc.php';
  15. $current_course_tool = TOOL_USER;
  16. $this_section = SECTION_COURSES;
  17. // notice for unauthorized people.
  18. api_protect_course_script(true);
  19. if (!api_is_platform_admin(true)) {
  20. if (!api_is_course_admin() && !api_is_coach()) {
  21. if (api_get_course_setting('allow_user_view_user_list') == 0) {
  22. api_not_allowed(true);
  23. }
  24. }
  25. }
  26. /* Constants and variables */
  27. $course_code = Database::escape_string(api_get_course_id());
  28. $sessionId = api_get_session_id();
  29. $is_western_name_order = api_is_western_name_order();
  30. $sort_by_first_name = api_sort_by_first_name();
  31. $course_info = api_get_course_info();
  32. $user_id = api_get_user_id();
  33. $_user = api_get_user_info();
  34. $courseCode = $course_info['code'];
  35. $courseId = $course_info['real_id'];
  36. $type = isset($_REQUEST['type']) ? intval($_REQUEST['type']) : STUDENT;
  37. //Can't auto unregister from a session
  38. if (!empty($sessionId)) {
  39. $course_info['unsubscribe'] = 0;
  40. }
  41. /* Unregistering a user section */
  42. if (api_is_allowed_to_edit(null, true)) {
  43. if (isset($_POST['action'])) {
  44. switch ($_POST['action']) {
  45. case 'unsubscribe':
  46. // Make sure we don't unsubscribe current user from the course
  47. if (is_array($_POST['user'])) {
  48. $user_ids = array_diff($_POST['user'], array($user_id));
  49. if (count($user_ids) > 0) {
  50. CourseManager::unsubscribe_user($user_ids, $courseCode);
  51. Display::addFlash(
  52. Display::return_message(get_lang('UsersUnsubscribed'))
  53. );
  54. }
  55. }
  56. }
  57. }
  58. }
  59. // Getting extra fields that have the filter option "on"
  60. $extraField = new ExtraField('user');
  61. $extraFields = $extraField->get_all(array('filter = ?' => 1));
  62. $user_image_pdf_size = 80;
  63. if (api_is_allowed_to_edit(null, true)) {
  64. if (isset($_GET['action'])) {
  65. switch ($_GET['action']) {
  66. case 'set_tutor':
  67. $userId = isset($_GET['user_id']) ? intval($_GET['user_id']) : null;
  68. $isTutor = isset($_GET['is_tutor']) ? intval($_GET['is_tutor']) : 0;
  69. $userInfo = api_get_user_info($userId);
  70. if (!empty($userId)) {
  71. if (!$sessionId) {
  72. if ($userInfo['status'] != INVITEE) {
  73. CourseManager::updateUserCourseTutor(
  74. $userId,
  75. $courseId,
  76. $isTutor
  77. );
  78. Display::addFlash(Display::return_message(get_lang('Updated')));
  79. } else {
  80. Display::addFlash(Display::return_message(get_lang('InviteesCantBeTutors'), 'error'));
  81. }
  82. }
  83. }
  84. break;
  85. case 'export':
  86. $table_course_user = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  87. $table_users = Database::get_main_table(TABLE_MAIN_USER);
  88. $is_western_name_order = api_is_western_name_order();
  89. $data = array();
  90. $a_users = array();
  91. $current_access_url_id = api_get_current_access_url_id();
  92. $extra_fields = UserManager::get_extra_user_data(
  93. api_get_user_id(),
  94. false,
  95. false,
  96. false,
  97. true
  98. );
  99. $extra_fields = array_keys($extra_fields);
  100. $select_email_condition = '';
  101. if (api_get_setting('show_email_addresses') == 'true') {
  102. $select_email_condition = ' user.email, ';
  103. if ($sort_by_first_name) {
  104. $a_users[0] = array(
  105. 'id',
  106. get_lang('FirstName'),
  107. get_lang('LastName'),
  108. get_lang('Username'),
  109. get_lang('Email'),
  110. get_lang('Phone'),
  111. get_lang('OfficialCode'),
  112. get_lang('Active')
  113. );
  114. } else {
  115. $a_users[0] = array(
  116. 'id',
  117. get_lang('LastName'),
  118. get_lang('FirstName'),
  119. get_lang('Username'),
  120. get_lang('Email'),
  121. get_lang('Phone'),
  122. get_lang('OfficialCode'),
  123. get_lang('Active')
  124. );
  125. }
  126. } else {
  127. if ($sort_by_first_name) {
  128. $a_users[0] = array(
  129. 'id',
  130. get_lang('FirstName'),
  131. get_lang('LastName'),
  132. get_lang('Username'),
  133. get_lang('Phone'),
  134. get_lang('OfficialCode'),
  135. get_lang('Active')
  136. );
  137. } else {
  138. $a_users[0] = array(
  139. 'id',
  140. get_lang('LastName'),
  141. get_lang('FirstName'),
  142. get_lang('Username'),
  143. get_lang('Phone'),
  144. get_lang('OfficialCode'),
  145. get_lang('Active')
  146. );
  147. }
  148. }
  149. $legal = '';
  150. if (isset($course_info['activate_legal']) && $course_info['activate_legal'] == 1) {
  151. $legal = ', legal_agreement';
  152. $a_users[0][] = get_lang('LegalAgreementAccepted');
  153. }
  154. if ($_GET['format'] == 'pdf') {
  155. $select_email_condition = ' user.email, ';
  156. if ($is_western_name_order) {
  157. $a_users[0] = array(
  158. '#',
  159. get_lang('UserPicture'),
  160. get_lang('OfficialCode'),
  161. get_lang('FirstName') . ', ' . get_lang('LastName'),
  162. get_lang('Email'),
  163. get_lang('Phone')
  164. );
  165. } else {
  166. $a_users[0] = array(
  167. '#',
  168. get_lang('UserPicture'),
  169. get_lang('OfficialCode'),
  170. get_lang('LastName') . ', ' . get_lang('FirstName'),
  171. get_lang('Email'),
  172. get_lang('Phone')
  173. );
  174. }
  175. }
  176. $a_users[0] = array_merge($a_users[0], $extra_fields);
  177. // users subscribed to the course through a session.
  178. if (api_get_session_id()) {
  179. $table_session_course_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  180. $sql = "SELECT DISTINCT
  181. user.user_id, ".($is_western_name_order ? "user.firstname, user.lastname" : "user.lastname, user.firstname").",
  182. user.username,
  183. $select_email_condition
  184. phone,
  185. user.official_code,
  186. active
  187. $legal
  188. FROM $table_session_course_user as session_course_user,
  189. $table_users as user ";
  190. if (api_is_multiple_url_enabled()) {
  191. $sql .= ' , '.Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER).' au ';
  192. }
  193. $sql .=" WHERE c_id = '$courseId' AND session_course_user.user_id = user.user_id ";
  194. $sql .= ' AND session_id = '.$sessionId;
  195. if (api_is_multiple_url_enabled()) {
  196. $sql .= " AND user.user_id = au.user_id AND access_url_id = $current_access_url_id ";
  197. }
  198. // only users no coaches/teachers
  199. if ($type == COURSEMANAGER) {
  200. $sql .= " AND session_course_user.status = 2 ";
  201. } else {
  202. $sql .= " AND session_course_user.status = 0 ";
  203. }
  204. $sql .= $sort_by_first_name ? ' ORDER BY user.firstname, user.lastname' : ' ORDER BY user.lastname, user.firstname';
  205. $rs = Database::query($sql);
  206. $counter = 1;
  207. while ($user = Database:: fetch_array($rs, 'ASSOC')) {
  208. if (isset($user['legal_agreement'])) {
  209. if ($user['legal_agreement'] == 1) {
  210. $user['legal_agreement'] = get_lang('Yes');
  211. } else {
  212. $user['legal_agreement'] = get_lang('No');
  213. }
  214. }
  215. $extra_fields = UserManager::get_extra_user_data(
  216. $user['user_id'],
  217. false,
  218. false,
  219. false,
  220. true
  221. );
  222. if (!empty($extra_fields)) {
  223. foreach ($extra_fields as $key => $extra_value) {
  224. $user[$key] = $extra_value;
  225. }
  226. }
  227. $data[] = $user;
  228. if ($_GET['format'] == 'pdf') {
  229. $user_info = api_get_user_info($user['user_id']);
  230. $user_image = '<img src="'.$user_info['avatar'].'" width ="'.$user_image_pdf_size.'px" />';
  231. if ($is_western_name_order) {
  232. $user_pdf = array(
  233. $counter,
  234. $user_image,
  235. $user['official_code'],
  236. $user['firstname'] . ', ' . $user['lastname'],
  237. $user['email'],
  238. $user['phone']
  239. );
  240. } else {
  241. $user_pdf = array(
  242. $counter,
  243. $user_image,
  244. $user['official_code'],
  245. $user['lastname'] . ', ' . $user['firstname'],
  246. $user['email'],
  247. $user['phone']
  248. );
  249. }
  250. $a_users[] = $user_pdf;
  251. } else {
  252. $a_users[] = $user;
  253. }
  254. $counter++;
  255. }
  256. }
  257. if ($sessionId == 0) {
  258. // users directly subscribed to the course
  259. $table_course_user = Database :: get_main_table(TABLE_MAIN_COURSE_USER);
  260. $sql = "SELECT DISTINCT
  261. user.user_id, ".($is_western_name_order ? "user.firstname, user.lastname" : "user.lastname, user.firstname").",
  262. user.username,
  263. $select_email_condition
  264. phone,
  265. user.official_code,
  266. active $legal
  267. FROM $table_course_user as course_user, $table_users as user ";
  268. if (api_is_multiple_url_enabled()) {
  269. $sql .= ' , '.Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER).' au ';
  270. }
  271. $sql .= " WHERE
  272. c_id = '$courseId' AND
  273. course_user.relation_type <> ".COURSE_RELATION_TYPE_RRHH." AND
  274. course_user.user_id = user.user_id ";
  275. if (api_is_multiple_url_enabled()) {
  276. $sql .= " AND user.user_id = au.user_id AND access_url_id = $current_access_url_id ";
  277. }
  278. // only users no teachers/coaches
  279. if ($type == COURSEMANAGER) {
  280. $sql .= " AND course_user.status = 1 ";
  281. } else {
  282. $sql .= " AND course_user.status = 5 ";
  283. }
  284. $sql .= ($sort_by_first_name ? " ORDER BY user.firstname, user.lastname" : " ORDER BY user.lastname, user.firstname");
  285. $rs = Database::query($sql);
  286. $counter = 1;
  287. while ($user = Database::fetch_array($rs, 'ASSOC')) {
  288. if (isset($user['legal_agreement'])) {
  289. if ($user['legal_agreement'] == 1) {
  290. $user['legal_agreement'] = get_lang('Yes');
  291. } else {
  292. $user['legal_agreement'] = get_lang('No');
  293. }
  294. }
  295. $extra_fields = UserManager::get_extra_user_data(
  296. $user['user_id'],
  297. false,
  298. false,
  299. false,
  300. true
  301. );
  302. if (!empty($extra_fields)) {
  303. foreach ($extra_fields as $key => $extra_value) {
  304. $user[$key] = $extra_value;
  305. }
  306. }
  307. if ($_GET['format'] == 'pdf') {
  308. $user_info = api_get_user_info($user['user_id']);
  309. $user_image = '<img src="'.$user_info['avatar'].'" width ="'.$user_image_pdf_size.'px" />';
  310. if ($is_western_name_order) {
  311. $user_pdf = array(
  312. $counter,
  313. $user_image,
  314. $user['official_code'],
  315. $user['firstname'] . ', ' . $user['lastname'],
  316. $user['email'],
  317. $user['phone']
  318. );
  319. } else {
  320. $user_pdf = array(
  321. $counter,
  322. $user_image,
  323. $user['official_code'],
  324. $user['lastname'] . ', ' . $user['firstname'],
  325. $user['email'],
  326. $user['phone']
  327. );
  328. }
  329. $a_users[] = $user_pdf;
  330. } else {
  331. $a_users[] = $user;
  332. }
  333. $data[] = $user;
  334. $counter++;
  335. }
  336. }
  337. $fileName = get_lang('StudentList');
  338. $pdfTitle = get_lang('StudentList');
  339. if ($type == COURSEMANAGER) {
  340. $fileName = get_lang('Teachers');
  341. $pdfTitle = get_lang('Teachers');
  342. }
  343. switch ($_GET['format']) {
  344. case 'csv':
  345. Export::arrayToCsv($a_users, $fileName);
  346. exit;
  347. case 'xls':
  348. Export::arrayToXls($a_users, $fileName);
  349. exit;
  350. case 'pdf':
  351. $header_attributes = array(
  352. array('style' => 'width:10px'),
  353. array('style' => 'width:30px'),
  354. array('style' => 'width:50px'),
  355. array('style' => 'width:500px')
  356. );
  357. $params = array(
  358. 'add_signatures' => false,
  359. 'filename' => $fileName,
  360. 'pdf_title' => $pdfTitle,
  361. 'header_attributes' => $header_attributes
  362. );
  363. Export::export_table_pdf($a_users, $params);
  364. exit;
  365. }
  366. }
  367. }
  368. } // end if allowed to edit
  369. if (api_is_allowed_to_edit(null, true)) {
  370. // Unregister user from course
  371. if (isset($_REQUEST['unregister']) && $_REQUEST['unregister']) {
  372. if (isset($_GET['user_id']) && is_numeric($_GET['user_id']) &&
  373. ($_GET['user_id'] != $_user['user_id'] || api_is_platform_admin())
  374. ) {
  375. $user_id = intval($_GET['user_id']);
  376. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  377. $tbl_session_rel_course = Database::get_main_table(TABLE_MAIN_SESSION_COURSE);
  378. $tbl_session_rel_user = Database::get_main_table(TABLE_MAIN_SESSION_USER);
  379. $sql = 'SELECT user.user_id
  380. FROM '.$tbl_user.' user
  381. INNER JOIN '.$tbl_session_rel_user.' reluser
  382. ON user.user_id = reluser.user_id AND reluser.relation_type<>'.SESSION_RELATION_TYPE_RRHH.'
  383. INNER JOIN '.$tbl_session_rel_course.' rel_course
  384. ON rel_course.session_id = reluser.session_id
  385. WHERE
  386. user.user_id = "'.$user_id.'" AND
  387. rel_course.c_id = "'.$courseId.'"';
  388. $result = Database::query($sql);
  389. $row = Database::fetch_array($result, 'ASSOC');
  390. if ($row['user_id'] == $user_id || $row['user_id'] == "") {
  391. CourseManager::unsubscribe_user($_GET['user_id'], $courseCode);
  392. Display::addFlash(Display::return_message(get_lang('UserUnsubscribed')));
  393. } else {
  394. Display::addFlash(Display::return_message(get_lang('ThisStudentIsSubscribeThroughASession')));
  395. }
  396. }
  397. }
  398. } else {
  399. // If student can unsubscribe
  400. if (isset($_REQUEST['unregister']) && $_REQUEST['unregister'] == 'yes') {
  401. if ($course_info['unsubscribe'] == 1) {
  402. $user_id = api_get_user_id();
  403. CourseManager::unsubscribe_user($user_id, $course_info['code']);
  404. header('Location: '.api_get_path(WEB_PATH).'user_portal.php');
  405. exit;
  406. }
  407. }
  408. }
  409. // $is_allowed_in_course is first defined in local.inc.php
  410. if (!api_is_allowed_in_course()) {
  411. api_not_allowed(true);
  412. }
  413. // Statistics
  414. Event::event_access_tool(TOOL_USER);
  415. /**
  416. * Get the users to display on the current page.
  417. */
  418. function get_number_of_users()
  419. {
  420. $counter = 0;
  421. $sessionId = api_get_session_id();
  422. $courseCode = api_get_course_id();
  423. $active = isset($_GET['active']) ? $_GET['active'] : null;
  424. $type = isset($_REQUEST['type']) ? intval($_REQUEST['type']) : STUDENT;
  425. if (empty($sessionId)) {
  426. $status = $type;
  427. } else {
  428. if ($type == COURSEMANAGER) {
  429. $status = 2;
  430. } else {
  431. $status = 0;
  432. }
  433. }
  434. if (!empty($sessionId)) {
  435. $a_course_users = CourseManager::get_user_list_from_course_code(
  436. $courseCode,
  437. $sessionId,
  438. null,
  439. null,
  440. $status,
  441. null,
  442. false,
  443. false,
  444. null,
  445. null,
  446. null,
  447. $active
  448. );
  449. } else {
  450. $a_course_users = CourseManager::get_user_list_from_course_code(
  451. $courseCode,
  452. 0,
  453. null,
  454. null,
  455. $status,
  456. null,
  457. false,
  458. false,
  459. null,
  460. null,
  461. null,
  462. $active
  463. );
  464. }
  465. foreach ($a_course_users as $o_course_user) {
  466. if ((isset($_GET['keyword']) &&
  467. searchUserKeyword(
  468. $o_course_user['firstname'],
  469. $o_course_user['lastname'],
  470. $o_course_user['username'],
  471. $o_course_user['official_code'],
  472. $_GET['keyword']
  473. )
  474. ) || !isset($_GET['keyword']) || empty($_GET['keyword'])
  475. ) {
  476. $counter++;
  477. }
  478. }
  479. return $counter;
  480. }
  481. /**
  482. * @param string $firstname
  483. * @param string $lastname
  484. * @param string $username
  485. * @param string $official_code
  486. * @param $keyword
  487. * @return bool
  488. */
  489. function searchUserKeyword($firstname, $lastname, $username, $official_code, $keyword) {
  490. if (
  491. api_strripos($firstname, $keyword) !== false ||
  492. api_strripos($lastname, $keyword) !== false ||
  493. api_strripos($username, $keyword) !== false ||
  494. api_strripos($official_code, $keyword) !== false
  495. ) {
  496. return true;
  497. } else {
  498. return false;
  499. }
  500. }
  501. /**
  502. * Get the users to display on the current page.
  503. */
  504. function get_user_data($from, $number_of_items, $column, $direction)
  505. {
  506. global $is_western_name_order;
  507. global $extraFields;
  508. $type = isset($_REQUEST['type']) ? intval($_REQUEST['type']) : STUDENT;
  509. $course_info = api_get_course_info();
  510. $sessionId = api_get_session_id();
  511. $course_code = $course_info['code'];
  512. $a_users = array();
  513. $limit = null;
  514. // limit
  515. if (!isset($_GET['keyword']) || empty($_GET['keyword'])) {
  516. $limit = 'LIMIT '.intval($from).','.intval($number_of_items);
  517. }
  518. if (!in_array($direction, array('ASC', 'DESC'))) {
  519. $direction = 'ASC';
  520. }
  521. switch ($column) {
  522. case 2: //official code
  523. $order_by = 'ORDER BY user.official_code '.$direction;
  524. break;
  525. case 3:
  526. if ($is_western_name_order) {
  527. $order_by = 'ORDER BY user.firstname '.$direction.', user.lastname '.$direction;
  528. } else {
  529. $order_by = 'ORDER BY user.lastname '.$direction.', user.firstname '.$direction;
  530. }
  531. break;
  532. case 4:
  533. if ($is_western_name_order) {
  534. $order_by = 'ORDER BY user.lastname '.$direction.', user.firstname '.$direction;
  535. } else {
  536. $order_by = 'ORDER BY user.firstname '.$direction.', user.lastname '.$direction;
  537. }
  538. break;
  539. case 5: //username
  540. $order_by = 'ORDER BY user.username '.$direction;
  541. break;
  542. default:
  543. if ($is_western_name_order) {
  544. $order_by = 'ORDER BY user.lastname '.$direction.', user.firstname '.$direction;
  545. } else {
  546. $order_by = 'ORDER BY user.firstname '.$direction.', user.lastname '.$direction;
  547. }
  548. break;
  549. }
  550. $active = isset($_GET['active']) ? $_GET['active'] : null;
  551. if (empty($sessionId)) {
  552. $status = $type;
  553. } else {
  554. if ($type == COURSEMANAGER) {
  555. $status = 2;
  556. } else {
  557. $status = 0;
  558. }
  559. }
  560. $a_course_users = CourseManager :: get_user_list_from_course_code(
  561. $course_code,
  562. $sessionId,
  563. $limit,
  564. $order_by,
  565. $status,
  566. null,
  567. false,
  568. false,
  569. null,
  570. array(),
  571. array(),
  572. $active
  573. );
  574. foreach ($a_course_users as $user_id => $o_course_user) {
  575. if ((
  576. isset($_GET['keyword']) &&
  577. searchUserKeyword(
  578. $o_course_user['firstname'],
  579. $o_course_user['lastname'],
  580. $o_course_user['username'],
  581. $o_course_user['official_code'],
  582. $_GET['keyword'])
  583. ) || !isset($_GET['keyword']) || empty($_GET['keyword'])
  584. ) {
  585. $groupsNameList = GroupManager::getAllGroupPerUserSubscription($user_id);
  586. $groupsNameListParsed = [];
  587. if (!empty($groupsNameList)) {
  588. $groupsNameListParsed = array_column($groupsNameList, 'name');
  589. }
  590. $temp = array();
  591. if (api_is_allowed_to_edit(null, true)) {
  592. $userInfo = api_get_user_info($user_id);
  593. $photo = Display::img($userInfo['avatar_small'], $userInfo['complete_name'], [], false);
  594. $temp[] = $user_id;
  595. $temp[] = $photo;
  596. $temp[] = $o_course_user['official_code'];
  597. if ($is_western_name_order) {
  598. $temp[] = $o_course_user['firstname'];
  599. $temp[] = $o_course_user['lastname'];
  600. } else {
  601. $temp[] = $o_course_user['lastname'];
  602. $temp[] = $o_course_user['firstname'];
  603. }
  604. $temp[] = $o_course_user['username'];
  605. // Groups.
  606. $temp[] = implode(', ', $groupsNameListParsed);
  607. // Status
  608. $default_status = get_lang('Student');
  609. if ((isset($o_course_user['status_rel']) && $o_course_user['status_rel'] == 1) ||
  610. (isset($o_course_user['status_session']) && $o_course_user['status_session'] == 2)
  611. ) {
  612. $default_status = get_lang('CourseManager');
  613. } elseif (isset($o_course_user['is_tutor']) && $o_course_user['is_tutor'] == 1) {
  614. $default_status = get_lang('Tutor');
  615. }
  616. $temp[] = $default_status;
  617. // Active
  618. $temp[] = $o_course_user['active'];
  619. if (!empty($extraFields)) {
  620. foreach ($extraFields as $extraField) {
  621. $extraFieldValue = new ExtraFieldValue('user');
  622. $data = $extraFieldValue->get_values_by_handler_and_field_id(
  623. $user_id,
  624. $extraField['id']
  625. );
  626. $temp[] = $data['value'];
  627. }
  628. }
  629. // User id for actions
  630. $temp[] = $user_id;
  631. $temp['is_tutor'] = isset($o_course_user['is_tutor']) ? $o_course_user['is_tutor'] : '';
  632. $temp['user_status_in_course'] = isset($o_course_user['status_rel']) ? $o_course_user['status_rel'] : '';
  633. } else {
  634. $userInfo = api_get_user_info($user_id);
  635. $userPicture = $userInfo['avatar'];
  636. $photo= '<img src="'.$userPicture.'" alt="'.$userInfo['complete_name'].'" width="22" height="22" title="'.$userInfo['complete_name'].'" />';
  637. $temp[] = $user_id;
  638. $temp[] = $photo;
  639. $temp[] = $o_course_user['official_code'];
  640. if ($is_western_name_order) {
  641. $temp[] = $o_course_user['firstname'];
  642. $temp[] = $o_course_user['lastname'];
  643. } else {
  644. $temp[] = $o_course_user['lastname'];
  645. $temp[] = $o_course_user['firstname'];
  646. }
  647. $temp[] = $o_course_user['username'];
  648. // Group.
  649. $temp[] = implode(', ', $groupsNameListParsed);
  650. if ($course_info['unsubscribe'] == 1) {
  651. //User id for actions
  652. $temp[] = $user_id;
  653. }
  654. }
  655. $a_users[$user_id] = $temp;
  656. }
  657. }
  658. return $a_users;
  659. }
  660. /**
  661. * Build the active-column of the table to lock or unlock a certain user
  662. * lock = the user can no longer use this account
  663. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  664. * @param int $active the current state of the account
  665. * @param int $user_id The user id
  666. * @param string $urlParams
  667. *
  668. * @return string Some HTML-code with the lock/unlock button
  669. */
  670. function active_filter($active, $urlParams, $row)
  671. {
  672. $userId = api_get_user_id();
  673. $action = '';
  674. $image = '';
  675. if ($active == '1') {
  676. $action = 'AccountActive';
  677. $image = 'accept';
  678. }
  679. if ($active == '0') {
  680. $action = 'AccountInactive';
  681. $image = 'error';
  682. }
  683. $result = '';
  684. /* you cannot lock yourself out otherwise you could disable all the accounts including your own => everybody is
  685. locked out and nobody can change it anymore.*/
  686. if ($row[0] <> $userId) {
  687. $result = '<center><img src="'.Display::returnIconPath($image.'.png', 16).'" border="0" alt="'.get_lang(ucfirst($action)).'" title="'.get_lang(ucfirst($action)).'"/></center>';
  688. }
  689. return $result;
  690. }
  691. /**
  692. * Build the modify-column of the table
  693. * @param int $user_id The user id
  694. * @return string Some HTML-code
  695. */
  696. function modify_filter($user_id, $row, $data)
  697. {
  698. global $is_allowed_to_track, $charset;
  699. $user_id = $data[0];
  700. $userInfo = api_get_user_info($user_id);
  701. $isInvitee = $userInfo['status'] == INVITEE ? true : false;
  702. $course_info = $_course = api_get_course_info();
  703. $current_user_id = api_get_user_id();
  704. $sessionId = api_get_session_id();
  705. $type = isset($_REQUEST['type']) ? intval($_REQUEST['type']) : STUDENT;
  706. $result = '';
  707. if ($is_allowed_to_track) {
  708. $result .= '<a href="../mySpace/myStudents.php?'.api_get_cidreq().'&student='.$user_id.'&details=true&course='.$_course['id'].'&origin=user_course&id_session='.api_get_session_id().'" title="'.get_lang('Tracking').'">
  709. '.Display::return_icon('stats.png', get_lang('Tracking')).'
  710. </a>';
  711. }
  712. // If platform admin, show the login_as icon (this drastically shortens
  713. // time taken by support to test things out)
  714. if (api_is_platform_admin()) {
  715. $result .= ' <a href="'.api_get_path(WEB_CODE_PATH).'admin/user_list.php?action=login_as&user_id='.$user_id.'&sec_token='.$_SESSION['sec_token'].'">'.
  716. Display::return_icon('login_as.gif', get_lang('LoginAs')).'</a>&nbsp;&nbsp;';
  717. }
  718. if (api_is_allowed_to_edit(null, true)) {
  719. if (empty($sessionId)) {
  720. $isTutor = isset($data['is_tutor']) ? intval($data['is_tutor']) : 0;
  721. $isTutor = empty($isTutor) ? 1 : 0;
  722. $text = get_lang('RemoveTutorStatus');
  723. if ($isTutor) {
  724. $text = get_lang('SetTutor');
  725. }
  726. if ($isInvitee) {
  727. $disabled = 'disabled';
  728. } else {
  729. $disabled = '';
  730. }
  731. if ($data['user_status_in_course'] == STUDENT) {
  732. $result .= Display::url(
  733. $text,
  734. 'user.php?'.api_get_cidreq().'&action=set_tutor&is_tutor='.$isTutor.'&user_id='.$user_id.'&type='.$type,
  735. array('class' => 'btn btn-default '.$disabled)
  736. ).'&nbsp;';
  737. }
  738. }
  739. // edit
  740. if (api_get_setting('allow_user_course_subscription_by_course_admin') === 'true' or api_is_platform_admin()) {
  741. // unregister
  742. if ($user_id != $current_user_id || api_is_platform_admin()) {
  743. $result .= '<a class="btn btn-small btn-danger" href="'.api_get_self().'?'.api_get_cidreq().'&type='.$type.'&unregister=yes&user_id='.$user_id.'" title="'.get_lang('Unreg').' " onclick="javascript:if(!confirm(\''.addslashes(api_htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset)).'\')) return false;">'.
  744. get_lang('Unreg').'</a>&nbsp;';
  745. } else {
  746. //$result .= Display::return_icon('unsubscribe_course_na.png', get_lang('Unreg'),'',ICON_SIZE_SMALL).'</a>&nbsp;';
  747. }
  748. }
  749. } else {
  750. // Show buttons for unsubscribe
  751. if ($course_info['unsubscribe'] == 1) {
  752. if ($user_id == $current_user_id) {
  753. $result .= '<a class="btn btn-small btn-danger" href="'.api_get_self().'?'.api_get_cidreq().'&type='.$type.'&unregister=yes&user_id='.$user_id.'" title="'.get_lang('Unreg').' " onclick="javascript:if(!confirm(\''.addslashes(api_htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset)).'\')) return false;">'.
  754. get_lang('Unreg').'</a>&nbsp;';
  755. }
  756. }
  757. }
  758. return $result;
  759. }
  760. function hide_field()
  761. {
  762. return null;
  763. }
  764. $default_column = 3;
  765. $tableLabel = $type === STUDENT ? 'student' : 'teacher';
  766. $table = new SortableTable($tableLabel.'_list', 'get_number_of_users', 'get_user_data', $default_column);
  767. $parameters['keyword'] = isset($_GET['keyword']) ? Security::remove_XSS($_GET['keyword']) : null;
  768. $parameters['sec_token'] = Security::get_token();
  769. $parameters['id_session'] = api_get_session_id();
  770. $parameters['type'] = $type;
  771. $table->set_additional_parameters($parameters);
  772. $header_nr = 0;
  773. $indexList = array();
  774. $table->set_header($header_nr++, '', false);
  775. $indexList['photo'] = $header_nr;
  776. $table->set_header($header_nr++, get_lang('Photo'), false);
  777. $table->set_header($header_nr++, get_lang('OfficialCode'));
  778. $indexList['official_code'] = $header_nr;
  779. if ($is_western_name_order) {
  780. $indexList['firstname'] = $header_nr;
  781. $table->set_header($header_nr++, get_lang('FirstName'));
  782. $indexList['lastname'] = $header_nr;
  783. $table->set_header($header_nr++, get_lang('LastName'));
  784. } else {
  785. $indexList['lastname'] = $header_nr;
  786. $table->set_header($header_nr++, get_lang('LastName'));
  787. $indexList['firstname'] = $header_nr;
  788. $table->set_header($header_nr++, get_lang('FirstName'));
  789. }
  790. $indexList['username'] = $header_nr;
  791. $table->set_header($header_nr++, get_lang('LoginName'));
  792. $indexList['groups'] = $header_nr;
  793. $table->set_header($header_nr++, get_lang('GroupSingle'), false);
  794. /*
  795. if (api_is_allowed_to_edit(null, true) && api_get_setting('allow_user_course_subscription_by_course_admin') == 'true') {
  796. } else {
  797. $table->set_column_filter(0, 'hide_field');
  798. }
  799. */
  800. $hideFields = api_get_configuration_value('hide_user_field_from_list');
  801. if (!empty($hideFields)) {
  802. foreach ($hideFields as $fieldToHide) {
  803. if (isset($indexList[$fieldToHide])) {
  804. $table->setHideColumn($indexList[$fieldToHide]);
  805. }
  806. }
  807. }
  808. if (api_is_allowed_to_edit(null, true)) {
  809. $table->set_header($header_nr++, get_lang('Status'), false);
  810. $table->set_header($header_nr++, get_lang('Active'), false);
  811. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true') {
  812. $table->set_column_filter(8, 'active_filter');
  813. } else {
  814. $table->set_column_filter(8, 'active_filter');
  815. }
  816. foreach ($extraFields as $extraField) {
  817. $table->set_header($header_nr++, $extraField['display_text'], false);
  818. }
  819. // Actions column
  820. $table->set_header($header_nr++, get_lang('Action'), false);
  821. $table->set_column_filter($header_nr-1, 'modify_filter');
  822. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true') {
  823. $table->set_form_actions(array('unsubscribe' => get_lang('Unreg')), 'user');
  824. }
  825. } else {
  826. if ($course_info['unsubscribe'] == 1) {
  827. $table->set_header($header_nr++, get_lang('Action'), false);
  828. $table->set_column_filter($header_nr-1, 'modify_filter');
  829. }
  830. }
  831. /* Header */
  832. if (isset($origin) && $origin == 'learnpath') {
  833. Display::display_reduced_header();
  834. } else {
  835. if (isset($_GET['keyword']) && !empty($_GET['keyword'])) {
  836. $interbreadcrumb[] = array(
  837. "url" => "user.php?".api_get_cidreq(),
  838. "name" => get_lang("Users"),
  839. );
  840. $tool_name = get_lang('SearchResults');
  841. } else {
  842. $tool_name = get_lang('Users');
  843. $origin = 'users';
  844. }
  845. Display::display_header($tool_name, "User");
  846. }
  847. /* Setting the permissions for this page */
  848. $is_allowed_to_track = ($is_courseAdmin || $is_courseTutor);
  849. // Tool introduction
  850. Display::display_introduction_section(TOOL_USER, 'left');
  851. $actions = '';
  852. $selectedTab = 1;
  853. if (api_is_allowed_to_edit(null, true)) {
  854. echo '<div class="actions">';
  855. switch ($type) {
  856. case STUDENT:
  857. $selectedTab = 1;
  858. $url = api_get_path(WEB_CODE_PATH).'user/subscribe_user.php?'.api_get_cidreq().'&type='.STUDENT;
  859. $icon = Display::url(
  860. Display::return_icon('add-user.png', get_lang('Add'), '', ICON_SIZE_MEDIUM),
  861. $url
  862. );
  863. break;
  864. case COURSEMANAGER:
  865. $selectedTab = 2;
  866. $url = api_get_path(WEB_CODE_PATH).'user/subscribe_user.php?'.api_get_cidreq().'&type='.COURSEMANAGER;
  867. $icon = Display::url(
  868. Display::return_icon('add-teacher.png', get_lang('Add'), '', ICON_SIZE_MEDIUM),
  869. $url
  870. );
  871. break;
  872. }
  873. echo '<div class="row">';
  874. echo '<div class="col-md-6">';
  875. echo $icon;
  876. $actions .= '<a href="user.php?'.api_get_cidreq().'&action=export&format=csv&type='.$type.'">'.
  877. Display::return_icon('export_csv.png', get_lang('ExportAsCSV'),'',ICON_SIZE_MEDIUM).'</a> ';
  878. $actions .= '<a href="user.php?'.api_get_cidreq().'&action=export&format=xls&type='.$type.'">'.
  879. Display::return_icon('export_excel.png', get_lang('ExportAsXLS'),'',ICON_SIZE_MEDIUM).'</a> ';
  880. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true' ||
  881. api_is_platform_admin()
  882. ) {
  883. $actions .= '<a href="user_import.php?'.api_get_cidreq().'&action=import">'.
  884. Display::return_icon('import_csv.png', get_lang('ImportUsersToACourse'),'',ICON_SIZE_MEDIUM).'</a> ';
  885. }
  886. $actions .= '<a href="user.php?'.api_get_cidreq().'&action=export&format=pdf&type='.$type.'">'.
  887. Display::return_icon('pdf.png', get_lang('ExportToPDF'),'',ICON_SIZE_MEDIUM).'</a> ';
  888. echo $actions;
  889. echo '</div>';
  890. echo '<div class="col-md-6">';
  891. echo '<div class="pull-right">';
  892. // Build search-form
  893. $form = new FormValidator(
  894. 'search_user',
  895. 'get',
  896. api_get_self().'?type='.$type,
  897. '',
  898. null,
  899. FormValidator::LAYOUT_INLINE
  900. );
  901. $form->addHidden('type', $type);
  902. $form->addText('keyword', '', false);
  903. $form->addElement('hidden', 'cidReq', api_get_course_id());
  904. $form->addButtonSearch(get_lang('SearchButton'));
  905. $form->display();
  906. echo '</div>';
  907. echo '</div>';
  908. echo '</div>';
  909. $allowTutors = api_get_setting('allow_tutors_to_assign_students_to_session');
  910. if (api_is_allowed_to_edit() && $allowTutors === 'true') {
  911. $actions .= ' <a class="btn btn-default" href="session_list.php?'.api_get_cidreq().'">'.
  912. get_lang('Sessions').'</a>';
  913. }
  914. echo '</div>';
  915. }
  916. echo UserManager::getUserSubscriptionTab($selectedTab);
  917. $table->display();
  918. if (!empty($_GET['keyword']) && !empty($_GET['submit'])) {
  919. $keyword_name = Security::remove_XSS($_GET['keyword']);
  920. echo '<br/>'.get_lang('SearchResultsFor').' <span style="font-style: italic ;"> '.$keyword_name.' </span><br>';
  921. }
  922. if (!isset($origin) || $origin != 'learnpath') {
  923. Display::display_footer();
  924. }