upload.php 4.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. use ChamiloSession as Session;
  4. $language_file = array('exercice', 'document', 'admin', 'gradebook');
  5. require_once '../inc/global.inc.php';
  6. $current_course_tool = TOOL_STUDENTPUBLICATION;
  7. api_protect_course_script(true);
  8. // Including necessary files
  9. require_once 'work.lib.php';
  10. $this_section = SECTION_COURSES;
  11. $work_id = isset($_REQUEST['id']) ? intval($_REQUEST['id']) : null;
  12. $is_allowed_to_edit = api_is_allowed_to_edit();
  13. $course_id = api_get_course_int_id();
  14. $user_id = api_get_user_id();
  15. $userInfo = api_get_user_info();
  16. $session_id = api_get_session_id();
  17. $course_code = api_get_course_id();
  18. $course_info = api_get_course_info();
  19. $group_id = api_get_group_id();
  20. if (empty($work_id)) {
  21. api_not_allowed(true);
  22. }
  23. $workInfo = get_work_data_by_id($work_id);
  24. if (empty($workInfo)) {
  25. api_not_allowed(true);
  26. }
  27. if ($workInfo['active'] != 1) {
  28. api_not_allowed(true);
  29. }
  30. allowOnlySubscribedUser($user_id, $work_id, $course_id);
  31. $is_course_member = CourseManager::is_user_subscribed_in_real_or_linked_course($user_id, $course_code, $session_id);
  32. $is_course_member = $is_course_member || api_is_platform_admin();
  33. if ($is_course_member == false || api_is_invitee()) {
  34. api_not_allowed(true);
  35. }
  36. $check = Security::check_token('post');
  37. $token = Security::get_token();
  38. $student_can_edit_in_session = api_is_allowed_to_session_edit(false, true);
  39. // @todo add an option to allow/block multiple attempts.
  40. /*
  41. if (!empty($workInfo) && !empty($workInfo['qualification'])) {
  42. $count = get_work_count_by_student($user_id, $work_id);
  43. if ($count >= 1) {
  44. Display::display_header();
  45. if (api_get_course_setting('student_delete_own_publication') == '1') {
  46. Display::display_warning_message(get_lang('CantUploadDeleteYourPaperFirst'));
  47. } else {
  48. Display::display_warning_message(get_lang('YouAlreadySentAPaperYouCantUpload'));
  49. }
  50. Display::display_footer();
  51. exit;
  52. }
  53. }*/
  54. $homework = get_work_assignment_by_id($workInfo['id']);
  55. $validationStatus = getWorkDateValidationStatus($homework);
  56. $interbreadcrumb[] = array('url' => api_get_path(WEB_CODE_PATH).'work/work.php?'.api_get_cidreq(), 'name' => get_lang('StudentPublications'));
  57. $interbreadcrumb[] = array('url' => api_get_path(WEB_CODE_PATH).'work/work_list.php?'.api_get_cidreq().'&id='.$work_id, 'name' => $workInfo['title']);
  58. $interbreadcrumb[] = array('url' => '#', 'name' => get_lang('UploadADocument'));
  59. $form = new FormValidator('form', 'POST', api_get_self()."?".api_get_cidreq()."&id=".$work_id, '', array('enctype' => "multipart/form-data"));
  60. setWorkUploadForm($form, $workInfo['allow_text_assignment']);
  61. $form->addElement('hidden', 'id', $work_id);
  62. $form->addElement('hidden', 'sec_token', $token);
  63. $error_message = null;
  64. $succeed = false;
  65. if ($form->validate()) {
  66. if ($student_can_edit_in_session && $check) {
  67. $values = $form->getSubmitValues();
  68. // Process work
  69. $error_message = processWorkForm(
  70. $workInfo,
  71. $values,
  72. $course_info,
  73. $session_id,
  74. $group_id,
  75. $user_id
  76. );
  77. $script = 'work_list.php';
  78. if ($is_allowed_to_edit) {
  79. $script = 'work_list_all.php';
  80. }
  81. if (!empty($error_message)) {
  82. Session::write('error_message', $error_message);
  83. }
  84. header('Location: '.api_get_path(WEB_CODE_PATH).'work/'.$script.'?'.api_get_cidreq().'&id='.$work_id);
  85. exit;
  86. } else {
  87. // Bad token or can't add works
  88. $error_message = Display::return_message(get_lang('IsNotPosibleSaveTheDocument'), 'error');
  89. }
  90. }
  91. $htmlHeadXtra[] = to_javascript_work();
  92. Display :: display_header(null);
  93. if (!empty($work_id)) {
  94. echo $validationStatus['message'];
  95. if ($is_allowed_to_edit) {
  96. if (api_resource_is_locked_by_gradebook($work_id, LINK_STUDENTPUBLICATION)) {
  97. echo Display::display_warning_message(get_lang('ResourceLockedByGradebook'));
  98. } else {
  99. $form->display();
  100. }
  101. } elseif ($student_can_edit_in_session && $validationStatus['has_ended'] == false) {
  102. $form->display();
  103. } else {
  104. Display::display_error_message(get_lang('ActionNotAllowed'));
  105. }
  106. } else {
  107. Display::display_error_message(get_lang('ActionNotAllowed'));
  108. }
  109. Display :: display_footer();