index.php 34 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865
  1. <?php // $Id: index.php 22368 2009-07-24 23:25:57Z iflorespaz $
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2004-2009 Dokeos SPRL
  6. Copyright (c) 2003 Ghent University (UGent)
  7. Copyright (c) 2001 Universite catholique de Louvain (UCL)
  8. Copyright (c) various contributors
  9. For a full list of contributors, see "credits.txt".
  10. The full license can be read in "license.txt".
  11. This program is free software; you can redistribute it and/or
  12. modify it under the terms of the GNU General Public License
  13. as published by the Free Software Foundation; either version 2
  14. of the License, or (at your option) any later version.
  15. See the GNU General Public License for more details.
  16. Contact address: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium
  17. Mail: info@dokeos.com
  18. ==============================================================================
  19. */
  20. /**
  21. * @package dokeos.main
  22. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University, Refactoring
  23. * @version $Id: index.php 22368 2009-07-24 23:25:57Z iflorespaz $
  24. * @todo check the different @todos in this page and really do them
  25. * @todo check if the news management works as expected
  26. */
  27. // only this script should have this constant defined. This is used to activate the javascript that
  28. // gives the login name automatic focus in header.inc.html.
  29. /** @todo Couldn't this be done using the $HtmlHeadXtra array? */
  30. define('DOKEOS_HOMEPAGE', true);
  31. // the language file
  32. $language_file = array ('courses', 'index');
  33. /* Flag forcing the 'current course' reset, as we're not inside a course anymore */
  34. // maybe we should change this into an api function? an example: Coursemanager::unset();
  35. $cidReset = true;
  36. /*
  37. -----------------------------------------------------------
  38. Included libraries
  39. -----------------------------------------------------------
  40. */
  41. /** @todo make all the library files consistent, use filename.lib.php and not filename.lib.inc.php */
  42. require_once 'main/inc/global.inc.php';
  43. include_once api_get_path(LIBRARY_PATH).'course.lib.php';
  44. include_once api_get_path(LIBRARY_PATH).'debug.lib.inc.php';
  45. include_once api_get_path(LIBRARY_PATH).'events.lib.inc.php';
  46. include_once api_get_path(LIBRARY_PATH).'system_announcements.lib.php';
  47. include_once api_get_path(LIBRARY_PATH).'groupmanager.lib.php';
  48. include_once api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php';
  49. require_once 'main/chat/chat_functions.lib.php';
  50. $loginFailed = isset($_GET['loginFailed']) ? true : isset($loginFailed);
  51. $setting_show_also_closed_courses = api_get_setting('show_closed_courses') == 'true';
  52. // the section (for the tabs)
  53. $this_section = SECTION_CAMPUS;
  54. /*
  55. -----------------------------------------------------------
  56. Action Handling
  57. -----------------------------------------------------------
  58. */
  59. /** @todo Wouldn't it make more sense if this would be done in local.inc.php so that local.inc.php become the only place where authentication is done?
  60. * by doing this you could logout from any page instead of only from index.php. From the moment there is a logout=true in the url you will be logged out
  61. * this can be usefull when you are on an open course and you need to log in to edit something and you immediately want to check how anonymous users
  62. * will see it.
  63. */
  64. $my_user_id = api_get_user_id();
  65. if (!empty($_GET['logout'])) {
  66. logout();
  67. }
  68. /*
  69. -----------------------------------------------------------
  70. Table definitions
  71. -----------------------------------------------------------
  72. */
  73. $main_course_table = Database :: get_main_table(TABLE_MAIN_COURSE);
  74. $main_category_table = Database :: get_main_table(TABLE_MAIN_CATEGORY);
  75. $track_login_table = Database :: get_statistic_table(TABLE_STATISTIC_TRACK_E_LOGIN);
  76. /*
  77. -----------------------------------------------------------
  78. Constants and CONFIGURATION parameters
  79. -----------------------------------------------------------
  80. */
  81. /** @todo these configuration settings should move to the dokeos config settings */
  82. /** defines wether or not anonymous visitors can see a list of the courses on the Dokeos homepage that are open to the world */
  83. $_setting['display_courses_to_anonymous_users'] = 'true';
  84. /** @todo remove this piece of code because this is not used */
  85. if (isset($_user['user_id'])) {
  86. $nameTools = api_get_setting('siteName');
  87. }
  88. /*
  89. ==============================================================================
  90. LOGIN
  91. ==============================================================================
  92. */
  93. /**
  94. * @todo This piece of code should probably move to local.inc.php where the actual login / logout procedure is handled.
  95. * @todo consider removing this piece of code because does nothing.
  96. */
  97. if (isset($_GET['submitAuth']) && $_GET['submitAuth'] == 1) {
  98. // nice lie!!!
  99. echo 'Attempted breakin - sysadmins notified.';
  100. session_destroy();
  101. die();
  102. }
  103. //Delete session neccesary for legal terms
  104. if (api_get_setting('allow_terms_conditions')=='true') {
  105. unset($_SESSION['update_term_and_condition']);
  106. unset($_SESSION['info_current_user']);
  107. }
  108. /**
  109. * @todo This piece of code should probably move to local.inc.php where the actual login procedure is handled.
  110. * @todo check if this code is used. I think this code is never executed because after clicking the submit button
  111. * the code does the stuff in local.inc.php and then redirects to index.php or user_portal.php depending
  112. * on api_get_setting('page_after_login')
  113. */
  114. if (!empty($_POST['submitAuth'])) {
  115. // the user is already authenticated, we now find the last login of the user.
  116. if (isset ($_user['user_id'])) {
  117. $sql_last_login = "SELECT UNIX_TIMESTAMP(login_date)
  118. FROM $track_login_table
  119. WHERE login_user_id = '".$_user['user_id']."'
  120. ORDER BY login_date DESC LIMIT 1";
  121. $result_last_login = Database::query($sql_last_login, __FILE__, __LINE__);
  122. if (!$result_last_login) {
  123. if (Database::num_rows($result_last_login) > 0) {
  124. $user_last_login_datetime = Database::fetch_array($result_last_login);
  125. $user_last_login_datetime = $user_last_login_datetime[0];
  126. api_session_register('user_last_login_datetime');
  127. }
  128. }
  129. mysql_free_result($result_last_login);
  130. //event_login();
  131. if (api_is_platform_admin()) {
  132. // decode all open event informations and fill the track_c_* tables
  133. include api_get_path(LIBRARY_PATH).'stats.lib.inc.php';
  134. decodeOpenInfos();
  135. }
  136. }
  137. } // end login -- if ($_POST['submitAuth'])
  138. else {
  139. // only if login form was not sent because if the form is sent the user was already on the page.
  140. event_open();
  141. }
  142. // the header
  143. Display::display_header(get_lang('Homepage'));
  144. /*
  145. ==============================================================================
  146. MAIN CODE
  147. ==============================================================================
  148. */
  149. echo '<div class="maincontent" id="content">';
  150. // Plugins for loginpage_main AND campushomepage_main
  151. if (!api_get_user_id()) {
  152. api_plugin('loginpage_main');
  153. } else {
  154. api_plugin('campushomepage_main');
  155. }
  156. $home = 'home/';
  157. if ($_configuration['multiple_access_urls']) {
  158. $access_url_id = api_get_current_access_url_id();
  159. if ($access_url_id != -1){
  160. $url_info = api_get_access_url($access_url_id);
  161. // "http://" and the final "/" replaced
  162. $url = substr($url_info['url'], 7, strlen($url_info['url']) - 8);
  163. $clean_url = replace_dangerous_char($url);
  164. $clean_url = str_replace('/', '-', $clean_url);
  165. $clean_url = $clean_url.'/';
  166. $home_old = 'home/';
  167. $home= 'home/'.$clean_url;
  168. }
  169. }
  170. // Including the page for the news
  171. $page_included = false;
  172. if (!empty($_GET['include']) && preg_match('/^[a-zA-Z0-9_-]*\.html$/', $_GET['include'])) {
  173. include './'.$home.$_GET['include'];
  174. $page_included = true;
  175. } else {
  176. if (!empty($_SESSION['user_language_choice'])) {
  177. $user_selected_language = $_SESSION['user_language_choice'];
  178. } elseif (!empty($_SESSION['_user']['language'])) {
  179. $user_selected_language = $_SESSION['_user']['language'];
  180. } else {
  181. $user_selected_language = api_get_setting('platformLanguage');
  182. }
  183. if (!file_exists($home.'home_news_'.$user_selected_language.'.html')) {
  184. if (file_exists($home.'home_top.html')) {
  185. $home_top_temp = file($home.'home_top.html');
  186. } else {
  187. $home_top_temp = file($home_old.'home_top.html');
  188. }
  189. $home_top_temp = implode('', $home_top_temp);
  190. } else {
  191. if (file_exists($home.'home_top_'.$user_selected_language.'.html')) {
  192. $home_top_temp = file_get_contents($home.'home_top_'.$user_selected_language.'.html');
  193. } else {
  194. $home_top_temp = file_get_contents($home.'home_top.html');
  195. }
  196. }
  197. if(trim($home_top_temp)=='') {
  198. $home_top_temp = get_lang('PortalHomepageDefaultIntroduction');
  199. }
  200. $open = str_replace('{rel_path}', api_get_path(REL_PATH), $home_top_temp);
  201. echo $open;
  202. }
  203. // Display System announcements
  204. $announcement = isset($_GET['announcement']) ? $_GET['announcement'] : -1;
  205. $announcement = intval($announcement);
  206. if (isset($_user['user_id'])) {
  207. $visibility = api_is_allowed_to_create_course() ? VISIBLE_TEACHER : VISIBLE_STUDENT;
  208. SystemAnnouncementManager :: display_announcements($visibility, $announcement);
  209. } else {
  210. SystemAnnouncementManager :: display_announcements(VISIBLE_GUEST, $announcement);
  211. }
  212. // Display courses and category list
  213. if (!$page_included) {
  214. if (api_get_setting('display_categories_on_homepage') == 'true') {
  215. echo '<div class="home_cats">';
  216. display_anonymous_course_list();
  217. echo '</div>';
  218. }
  219. }
  220. echo '</div>';
  221. // display right menu: language form, login section + useful weblinks
  222. echo '<div class="menu" id="menu">';
  223. display_anonymous_right_menu();
  224. echo '</div>';
  225. /*
  226. ==============================================================================
  227. FOOTER
  228. ==============================================================================
  229. */
  230. Display :: display_footer();
  231. /**
  232. * This function handles the logout and is called whenever there is a $_GET['logout']
  233. *
  234. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  235. */
  236. function logout()
  237. {
  238. global $_configuration, $extAuthSource;
  239. // variable initialisation
  240. $query_string = '';
  241. if (!empty($_SESSION['user_language_choice'])) {
  242. $query_string = '?language='.$_SESSION['user_language_choice'];
  243. }
  244. // Database table definition
  245. $tbl_track_login = Database :: get_statistic_table(TABLE_STATISTIC_TRACK_E_LOGIN);
  246. // selecting the last login of the user
  247. $uid = intval($_GET['uid']);
  248. $sql_last_connection = "SELECT login_id, login_date FROM $tbl_track_login WHERE login_user_id='$uid' ORDER BY login_date DESC LIMIT 0,1";
  249. $q_last_connection = Database::query($sql_last_connection, __FILE__, __LINE__);
  250. if (Database::num_rows($q_last_connection) > 0) {
  251. $i_id_last_connection = Database::result($q_last_connection, 0, 'login_id');
  252. }
  253. if (!isset($_SESSION['login_as'])) {
  254. $current_date = date('Y-m-d H:i:s', time());
  255. $s_sql_update_logout_date = "UPDATE $tbl_track_login SET logout_date='".$current_date."' WHERE login_id='$i_id_last_connection'";
  256. Database::query($s_sql_update_logout_date, __FILE__, __LINE__);
  257. }
  258. LoginDelete($uid, $_configuration['statistics_database']); //from inc/lib/online.inc.php - removes the "online" status
  259. //the following code enables the use of an external logout function.
  260. //example: define a $extAuthSource['ldap']['logout']="file.php" in configuration.php
  261. // then a function called ldap_logout() inside that file
  262. // (using *authent_name*_logout as the function name) and the following code
  263. // will find and execute it
  264. $uinfo = api_get_user_info($uid);
  265. if (($uinfo['auth_source'] != PLATFORM_AUTH_SOURCE) && is_array($extAuthSource)) {
  266. if (is_array($extAuthSource[$uinfo['auth_source']])) {
  267. $subarray = $extAuthSource[$uinfo['auth_source']];
  268. if (!empty($subarray['logout']) && file_exists($subarray['logout'])) {
  269. include_once ($subarray['logout']);
  270. $logout_function = $uinfo['auth_source'].'_logout';
  271. if (function_exists($logout_function)) {
  272. $logout_function($uinfo);
  273. }
  274. }
  275. }
  276. }
  277. exit_of_chat($uid);
  278. api_session_destroy();
  279. header("Location: index.php$query_string");
  280. exit();
  281. }
  282. /**
  283. * This function checks if there are courses that are open to the world in the platform course categories (=faculties)
  284. *
  285. * @param unknown_type $category
  286. * @return boolean
  287. */
  288. function category_has_open_courses($category) {
  289. global $setting_show_also_closed_courses;
  290. $user_identified = (api_get_user_id() > 0 && !api_is_anonymous());
  291. $main_course_table = Database :: get_main_table(TABLE_MAIN_COURSE);
  292. $sql_query = "SELECT * FROM $main_course_table WHERE category_code='$category'";
  293. $sql_result = Database::query($sql_query, __FILE__, __LINE__);
  294. while ($course = Database::fetch_array($sql_result)) {
  295. if (!$setting_show_also_closed_courses) {
  296. if ((api_get_user_id() > 0
  297. && $course['visibility'] == COURSE_VISIBILITY_OPEN_PLATFORM)
  298. || ($course['visibility'] == COURSE_VISIBILITY_OPEN_WORLD)) {
  299. return true; //at least one open course
  300. }
  301. } else {
  302. if (isset($course['visibility'])){
  303. return true; //at least one course (does not matter weither it's open or not because $setting_show_also_closed_courses = true
  304. }
  305. }
  306. }
  307. return false;
  308. }
  309. function display_create_course_link() {
  310. echo "<li><a href=\"main/create_course/add_course.php\">".get_lang("CourseCreate")."</a></li>";
  311. }
  312. function display_edit_course_list_links() {
  313. echo "<li><a href=\"main/auth/courses.php\">".get_lang("CourseManagement")."</a></li>";
  314. }
  315. /**
  316. * Displays the right-hand menu for anonymous users:
  317. * login form, useful links, help section
  318. * Warning: function defines globals
  319. * @version 1.0.1
  320. * @todo does $_plugins need to be global?
  321. */
  322. function display_anonymous_right_menu() {
  323. global $loginFailed, $_plugins, $_user, $menu_navigation;
  324. $platformLanguage = api_get_setting('platformLanguage');
  325. if (!($_user['user_id']) || api_is_anonymous($_user['user_id']) ) { // only display if the user isn't logged in
  326. api_display_language_form(true);
  327. echo '<br />';
  328. display_login_form();
  329. if ($loginFailed) {
  330. echo '<br />';
  331. handle_login_failed();
  332. }
  333. if (api_get_setting('allow_lostpassword') == 'true' || api_get_setting('allow_registration') == 'true') {
  334. echo '<div class="menusection"><span class="menusectioncaption">'.get_lang('MenuUser').'</span><ul class="menulist">';
  335. if (api_get_setting('allow_registration') <> 'false') {
  336. echo '<li><a href="main/auth/inscription.php">'.get_lang('Reg').'</a></li>';
  337. }
  338. if (api_get_setting('allow_lostpassword') == 'true') {
  339. display_lost_password_info();
  340. }
  341. echo '</ul></div>';
  342. }
  343. if (api_number_of_plugins('loginpage_menu') > 0) {
  344. echo '<div class="note" style="background: none">';
  345. api_plugin('loginpage_menu');
  346. echo '</div>';
  347. }
  348. }
  349. // My Account section
  350. if (isset($_SESSION['_user']['user_id']) && $_SESSION['_user']['user_id'] != 0) {
  351. // tabs that are deactivated are added here
  352. $show_menu = false;
  353. $show_create_link = false;
  354. $show_course_link = false;
  355. $display_add_course_link = api_is_allowed_to_create_course() && ($_SESSION["studentview"] != "studentenview");
  356. if ($display_add_course_link) {
  357. //display_create_course_link();
  358. $show_menu = true;
  359. $show_create_link = true;
  360. }
  361. if (api_is_platform_admin() || api_is_course_admin() || api_is_allowed_to_create_course()) {
  362. $show_menu = true;
  363. $show_course_link = true;
  364. } else {
  365. if (api_get_setting('allow_students_to_browse_courses') == 'true') {
  366. $show_menu = true;
  367. $show_course_link = true;
  368. }
  369. }
  370. if ($show_menu){
  371. echo "<div class=\"menusection\">";
  372. echo "<span class=\"menusectioncaption\">".get_lang("MenuUser")."</span>";
  373. echo "<ul class=\"menulist\">";
  374. if ($show_create_link) {
  375. display_create_course_link();
  376. }
  377. if ($show_course_link) {
  378. display_edit_course_list_links();
  379. }
  380. echo "</ul>";
  381. echo "</div>";
  382. }
  383. //deleting the myprofile link
  384. if (api_get_setting('allow_social_tool') == true) {
  385. unset($menu_navigation['myprofile']);
  386. }
  387. if (!empty($menu_navigation)) {
  388. echo "<div class=\"menusection\">";
  389. echo "<span class=\"menusectioncaption\">".get_lang("MainNavigation")."</span>";
  390. echo "<ul class=\"menulist\">";
  391. foreach ($menu_navigation as $section => $navigation_info) {
  392. $current = $section == $GLOBALS['this_section'] ? ' id="current"' : '';
  393. echo '<li'.$current.'>';
  394. echo '<a href="'.$navigation_info['url'].'" target="_self">'.$navigation_info['title'].'</a>';
  395. echo '</li>';
  396. echo "\n";
  397. }
  398. echo "</ul>";
  399. echo '</div>';
  400. }
  401. }
  402. // help section
  403. /*** hide right menu "general" and other parts on anonymous right menu *****/
  404. $user_selected_language = api_get_interface_language();
  405. global $home, $home_old;
  406. if (!isset($user_selected_language)) {
  407. $user_selected_language = $platformLanguage;
  408. }
  409. if (!file_exists($home.'home_menu_'.$user_selected_language.'.html') && file_exists($home.'home_menu.html') && file_get_contents($home.'home_menu.html') != '') {
  410. echo "<div class=\"menusection\">", "<span class=\"menusectioncaption\">".get_lang("MenuGeneral")."</span>";
  411. echo "<ul class=\"menulist\">";
  412. if (file_exists($home.'home_menu.html')) {
  413. include ($home.'home_menu.html');
  414. } else {
  415. include ($home_old.'home_menu.html');
  416. }
  417. echo '</ul>';
  418. echo '</div>';
  419. }
  420. elseif(file_exists($home.'home_menu_'.$user_selected_language.'.html') && file_get_contents($home.'home_menu_'.$user_selected_language.'.html') != '') {
  421. echo "<div class=\"menusection\">", "<span class=\"menusectioncaption\">".get_lang("MenuGeneral")."</span>";
  422. echo "<ul class=\"menulist\">";
  423. include ($home.'home_menu_'.$user_selected_language.'.html');
  424. echo '</ul>';
  425. echo '</div>';
  426. }
  427. if ($_user['user_id'] && api_number_of_plugins('campushomepage_menu') > 0) {
  428. echo '<div class="note" style="background: none">';
  429. api_plugin('campushomepage_menu');
  430. echo '</div>';
  431. }
  432. // includes for any files to be displayed below anonymous right menu
  433. if (!file_exists($home.'home_notice_'.$user_selected_language.'.html') && file_exists($home.'home_notice.html') && file_get_contents($home.'home_notice.html') != '') {
  434. echo '<div class="note">';
  435. if (file_exists($home.'home_notice.html')) {
  436. include ($home.'home_notice.html');
  437. } else {
  438. include ($home_old.'home_notice.html');
  439. }
  440. echo '</div>';
  441. }
  442. elseif(file_exists($home.'home_notice_'.$user_selected_language.'.html') && file_get_contents($home.'home_notice_'.$user_selected_language.'.html') != '') {
  443. echo '<div class="note">';
  444. include($home.'home_notice_'.$user_selected_language.'.html');
  445. echo '</div>';
  446. }
  447. }
  448. /**
  449. * Reacts on a failed login:
  450. * displays an explanation with
  451. * a link to the registration form.
  452. *
  453. * @version 1.0.1
  454. */
  455. function handle_login_failed() {
  456. if (!isset($_GET['error'])) {
  457. $message = get_lang("InvalidId");
  458. if (api_is_self_registration_allowed()) {
  459. $message = get_lang("InvalidForSelfRegistration");
  460. }
  461. } else {
  462. switch ($_GET['error']) {
  463. case '':
  464. $message = get_lang('InvalidId');
  465. if (api_is_self_registration_allowed()) {
  466. $message = get_lang('InvalidForSelfRegistration');
  467. }
  468. break;
  469. case 'account_expired':
  470. $message = get_lang('AccountExpired');
  471. break;
  472. case 'account_inactive':
  473. $message = get_lang('AccountInactive');
  474. break;
  475. case 'user_password_incorrect':
  476. $message = get_lang('InvalidId');
  477. break;
  478. case 'access_url_inactive':
  479. $message = get_lang('AccountURLInactive');
  480. break;
  481. }
  482. }
  483. echo "<div id=\"login_fail\">".$message."</div>";
  484. }
  485. /**
  486. * Adds a form to let users login
  487. * @version 1.1
  488. */
  489. function display_login_form() {
  490. $form = new FormValidator('formLogin');
  491. $form->addElement('text', 'login', get_lang('UserName'), array('size' => 17));
  492. $form->addElement('password', 'password', get_lang('Pass'), array('size' => 17));
  493. $form->addElement('style_submit_button','submitAuth', get_lang('langEnter'), array('class' => 'login'));
  494. $renderer =& $form->defaultRenderer();
  495. $renderer->setElementTemplate('<div><label>{label}</label></div><div>{element}</div>');
  496. $form->display();
  497. if (api_get_setting('openid_authentication') == 'true') {
  498. include_once 'main/auth/openid/login.php';
  499. echo '<div>'.openid_form().'</div>';
  500. }
  501. }
  502. /**
  503. * Displays a link to the lost password section
  504. */
  505. function display_lost_password_info() {
  506. echo "<li><a href=\"main/auth/lostPassword.php\">".get_lang("LostPassword")."</a></li>";
  507. }
  508. /**
  509. * Display list of courses in a category.
  510. * (for anonymous users)
  511. *
  512. * @version 1.1
  513. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University - refactoring and code cleaning
  514. */
  515. function display_anonymous_course_list() {
  516. $ctok = $_SESSION['sec_token'];
  517. $stok = Security::get_token();
  518. //init
  519. $user_identified = (api_get_user_id() > 0 && !api_is_anonymous());
  520. $web_course_path = api_get_path(WEB_COURSE_PATH);
  521. $category = Database::escape_string($_GET['category']);
  522. global $setting_show_also_closed_courses;
  523. // Database table definitions
  524. $main_course_table = Database :: get_main_table(TABLE_MAIN_COURSE);
  525. $main_category_table = Database :: get_main_table(TABLE_MAIN_CATEGORY);
  526. $platformLanguage = api_get_setting('platformLanguage');
  527. //get list of courses in category $category
  528. $sql_get_course_list = "SELECT * FROM $main_course_table cours
  529. WHERE category_code = '".Database::escape_string($_GET["category"])."'
  530. ORDER BY title, UPPER(visual_code)";
  531. //showing only the courses of the current access_url_id
  532. global $_configuration;
  533. if ($_configuration['multiple_access_urls'] == true) {
  534. $url_access_id = api_get_current_access_url_id();
  535. if ($url_access_id !=-1) {
  536. $tbl_url_rel_course = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_COURSE);
  537. $sql_get_course_list = "SELECT * FROM $main_course_table as course INNER JOIN $tbl_url_rel_course as url_rel_course
  538. ON (url_rel_course.course_code=course.code)
  539. WHERE access_url_id = $url_access_id AND category_code = '".Database::escape_string($_GET["category"])."' ORDER BY title, UPPER(visual_code)";
  540. }
  541. }
  542. //removed: AND cours.visibility='".COURSE_VISIBILITY_OPEN_WORLD."'
  543. $sql_result_courses = Database::query($sql_get_course_list, __FILE__, __LINE__);
  544. while ($course_result = Database::fetch_array($sql_result_courses)) {
  545. $course_list[] = $course_result;
  546. }
  547. $platform_visible_courses = '';
  548. // $setting_show_also_closed_courses
  549. if($user_identified) {
  550. if ($setting_show_also_closed_courses) {
  551. $platform_visible_courses = '';
  552. } else {
  553. $platform_visible_courses = " AND (t3.visibility='".COURSE_VISIBILITY_OPEN_WORLD."' OR t3.visibility='".COURSE_VISIBILITY_OPEN_PLATFORM."' )";
  554. }
  555. } else {
  556. if ($setting_show_also_closed_courses) {
  557. $platform_visible_courses = '';
  558. } else {
  559. $platform_visible_courses = " AND (t3.visibility='".COURSE_VISIBILITY_OPEN_WORLD."' )";
  560. }
  561. }
  562. $sqlGetSubCatList = "
  563. SELECT t1.name,t1.code,t1.parent_id,t1.children_count,COUNT(DISTINCT t3.code) AS nbCourse
  564. FROM $main_category_table t1
  565. LEFT JOIN $main_category_table t2 ON t1.code=t2.parent_id
  566. LEFT JOIN $main_course_table t3 ON (t3.category_code=t1.code $platform_visible_courses)
  567. WHERE t1.parent_id ". (empty ($category) ? "IS NULL" : "='$category'")."
  568. GROUP BY t1.name,t1.code,t1.parent_id,t1.children_count ORDER BY t1.tree_pos, t1.name";
  569. //showing only the category of courses of the current access_url_id
  570. global $_configuration;
  571. if ($_configuration['multiple_access_urls'] == true) {
  572. $url_access_id = api_get_current_access_url_id();
  573. if ($url_access_id != -1) {
  574. $tbl_url_rel_course = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_COURSE);
  575. $sqlGetSubCatList = "
  576. SELECT t1.name,t1.code,t1.parent_id,t1.children_count,COUNT(DISTINCT t3.code) AS nbCourse
  577. FROM $main_category_table t1
  578. LEFT JOIN $main_category_table t2 ON t1.code=t2.parent_id
  579. LEFT JOIN $main_course_table t3 ON (t3.category_code=t1.code $platform_visible_courses)
  580. INNER JOIN $tbl_url_rel_course as url_rel_course
  581. ON (url_rel_course.course_code=t3.code)
  582. WHERE access_url_id = $url_access_id AND t1.parent_id ".(empty($category) ? "IS NULL" : "='$category'")."
  583. GROUP BY t1.name,t1.code,t1.parent_id,t1.children_count ORDER BY t1.tree_pos, t1.name";
  584. }
  585. }
  586. $resCats = Database::query($sqlGetSubCatList, __FILE__, __LINE__);
  587. $thereIsSubCat = false;
  588. if (Database::num_rows($resCats) > 0) {
  589. $htmlListCat = "<h4 style=\"margin-top: 0px;\">".get_lang("CatList")."</h4>"."<ul>";
  590. while ($catLine = Database::fetch_array($resCats)) {
  591. if ($catLine['code'] != $category) {
  592. $category_has_open_courses = category_has_open_courses($catLine['code']);
  593. if ($category_has_open_courses) {
  594. //the category contains courses accessible to anonymous visitors
  595. $htmlListCat .= "<li>";
  596. $htmlListCat .= "<a href=\"".api_get_self()."?category=".$catLine['code']."\">".$catLine['name']."</a>";
  597. if (api_get_setting('show_number_of_courses') == 'true') {
  598. $htmlListCat .= " (".$catLine['nbCourse']." ".get_lang("Courses").")";
  599. }
  600. $htmlListCat .= "</li>\n";
  601. $thereIsSubCat = true;
  602. } elseif ($catLine['children_count'] > 0) {
  603. //the category has children, subcategories
  604. $htmlListCat .= "<li>";
  605. $htmlListCat .= "<a href=\"".api_get_self()."?category=".$catLine['code']."\">".$catLine['name']."</a>";
  606. $htmlListCat .= "</li>\n";
  607. $thereIsSubCat = true;
  608. }
  609. /************************************************************************
  610. end changed code to eliminate the (0 courses) after empty categories
  611. ************************************************************************/
  612. elseif (api_get_setting('show_empty_course_categories') == 'true') {
  613. $htmlListCat .= "<li>";
  614. $htmlListCat .= $catLine['name'];
  615. $htmlListCat .= "</li>\n";
  616. $thereIsSubCat = true;
  617. } //else don't set thereIsSubCat to true to avoid printing things if not requested
  618. } else {
  619. $htmlTitre = "<p>";
  620. if (api_get_setting('show_back_link_on_top_of_tree') == 'true') {
  621. $htmlTitre .= "<a href=\"".api_get_self()."\">"."&lt;&lt; ".get_lang("BackToHomePage")."</a>";
  622. }
  623. if (!is_null($catLine['parent_id']) || (api_get_setting('show_back_link_on_top_of_tree') <> 'true' && !is_null($catLine['code']))) {
  624. $htmlTitre .= "<a href=\"".api_get_self()."?category=".$catLine['parent_id']."\">"."&lt;&lt; ".get_lang('Up')."</a>";
  625. }
  626. $htmlTitre .= "</p>\n";
  627. if ($category != "" && !is_null($catLine['code'])) {
  628. $htmlTitre .= "<h3>".$catLine['name']."</h3>\n";
  629. } else {
  630. $htmlTitre .= "<h3>".get_lang("Categories")."</h3>\n";
  631. }
  632. }
  633. }
  634. $htmlListCat .= "</ul>\n";
  635. }
  636. echo $htmlTitre;
  637. if ($thereIsSubCat) {
  638. echo $htmlListCat;
  639. }
  640. while ($categoryName = Database::fetch_array($resCats)) {
  641. echo "<h3>", $categoryName['name'], "</h3>\n";
  642. }
  643. $numrows = Database::num_rows($sql_result_courses);
  644. $courses_list_string = '';
  645. $courses_shown = 0;
  646. if ($numrows > 0) {
  647. if ($thereIsSubCat) {
  648. $courses_list_string .= "<hr size=\"1\" noshade=\"noshade\">\n";
  649. }
  650. $courses_list_string .= "<h4 style=\"margin-top: 0px;\">".get_lang("CourseList")."</h4>\n"."<ul>\n";
  651. if (api_get_user_id()) {
  652. $courses_of_user = get_courses_of_user(api_get_user_id());
  653. }
  654. foreach ($course_list as $course) {
  655. // $setting_show_also_closed_courses
  656. if ($setting_show_also_closed_courses == false) {
  657. // if we do not show the closed courses
  658. // we only show the courses that are open to the world (to everybody)
  659. // and the courses that are open to the platform (if the current user is a registered user
  660. if( ($user_identified && $course['visibility'] == COURSE_VISIBILITY_OPEN_PLATFORM) || ($course['visibility'] == COURSE_VISIBILITY_OPEN_WORLD)) {
  661. $courses_shown++;
  662. $courses_list_string .= "<li>\n";
  663. $courses_list_string .= "<a href=\"".$web_course_path.$course['directory']."/\">".$course['title']."</a><br />";
  664. if (api_get_setting('display_coursecode_in_courselist') == 'true') {
  665. $courses_list_string .= $course['visual_code'];
  666. }
  667. if (api_get_setting('display_coursecode_in_courselist') == 'true' && api_get_setting('display_teacher_in_courselist') == 'true') {
  668. $courses_list_string .= ' - ';
  669. }
  670. if (api_get_setting('display_teacher_in_courselist') == 'true') {
  671. $courses_list_string .= $course['tutor_name'];
  672. }
  673. if (api_get_setting('show_different_course_language') == 'true' && $course['course_language'] != api_get_setting('platformLanguage')) {
  674. $courses_list_string .= ' - '.$course['course_language'];
  675. }
  676. $courses_list_string .= "</li>\n";
  677. }
  678. }
  679. // we DO show the closed courses.
  680. // the course is accessible if (link to the course homepage)
  681. // 1. the course is open to the world (doesn't matter if the user is logged in or not): $course['visibility'] == COURSE_VISIBILITY_OPEN_WORLD)
  682. // 2. the user is logged in and the course is open to the world or open to the platform: ($user_identified && $course['visibility'] == COURSE_VISIBILITY_OPEN_PLATFORM)
  683. // 3. the user is logged in and the user is subscribed to the course and the course visibility is not COURSE_VISIBILITY_CLOSED
  684. // 4. the user is logged in and the user is course admin of te course (regardless of the course visibility setting)
  685. // 5. the user is the platform admin api_is_platform_admin()
  686. //
  687. else {
  688. $courses_shown++;
  689. $courses_list_string .= "<li>\n";
  690. if ($course['visibility'] == COURSE_VISIBILITY_OPEN_WORLD
  691. || ($user_identified && $course['visibility'] == COURSE_VISIBILITY_OPEN_PLATFORM)
  692. || ($user_identified && key_exists($course['code'], $courses_of_user) && $course['visibility'] != COURSE_VISIBILITY_CLOSED)
  693. || $courses_of_user[$course['code']]['status'] == '1'
  694. || api_is_platform_admin()) {
  695. $courses_list_string .= "<a href=\"".$web_course_path.$course['directory']."/\">";
  696. }
  697. $courses_list_string .= $course['title'];
  698. if ($course['visibility'] == COURSE_VISIBILITY_OPEN_WORLD
  699. || ($user_identified && $course['visibility'] == COURSE_VISIBILITY_OPEN_PLATFORM)
  700. || ($user_identified && key_exists($course['code'], $courses_of_user) && $course['visibility'] != COURSE_VISIBILITY_CLOSED)
  701. || $courses_of_user[$course['code']]['status'] == '1'
  702. || api_is_platform_admin()) {
  703. $courses_list_string .= "</a><br />";
  704. }
  705. if (api_get_setting('display_coursecode_in_courselist') == 'true') {
  706. $courses_list_string .= $course['visual_code'];
  707. }
  708. if (api_get_setting('display_coursecode_in_courselist') == 'true' && api_get_setting('display_teacher_in_courselist') == 'true') {
  709. $courses_list_string .= ' - ';
  710. }
  711. if (api_get_setting('display_teacher_in_courselist') == 'true') {
  712. $courses_list_string .= $course['tutor_name'];
  713. }
  714. if (api_get_setting('show_different_course_language') == 'true' && $course['course_language'] != api_get_setting('platformLanguage')) {
  715. $courses_list_string .= ' - '.$course['course_language'];
  716. }
  717. if (api_get_setting('show_different_course_language') == 'true' && $course['course_language'] != api_get_setting('platformLanguage')) {
  718. $courses_list_string .= ' - '.$course['course_language'];
  719. }
  720. // We display a subscription link if
  721. // 1. it is allowed to register for the course and if the course is not already in the courselist of the user and if the user is identiefied
  722. // 2
  723. if ($user_identified && !key_exists($course['code'], $courses_of_user)) {
  724. if ($course['subscribe'] == '1') {
  725. $courses_list_string .= "<form action=\"main/auth/courses.php?action=subscribe&category=".$_GET['category']."\" method=\"post\">";
  726. $courses_list_string .= '<input type="hidden" name="sec_token" value="'.$stok.'">';
  727. $courses_list_string .= "<input type=\"hidden\" name=\"subscribe\" value=\"".$course['code']."\" />";
  728. $courses_list_string .= "<input type=\"image\" name=\"unsub\" src=\"main/img/enroll.gif\" alt=\"".get_lang("Subscribe")."\" />".get_lang("Subscribe")."</form>";
  729. } else {
  730. $courses_list_string .= '<br />'.get_lang("SubscribingNotAllowed");
  731. }
  732. }
  733. $courses_list_string .= "</li>\n";
  734. }
  735. }
  736. $courses_list_string .= "</ul>\n";
  737. } else {
  738. // echo "<blockquote>",get_lang('_No_course_publicly_available'),"</blockquote>\n";
  739. }
  740. if ($courses_shown > 0) { //only display the list of courses and categories if there was more than
  741. // 0 courses visible to the world (we're in the anonymous list here)
  742. echo $courses_list_string;
  743. }
  744. if ($category != '') {
  745. echo "<p>", "<a href=\"".api_get_self()."\"> ", Display :: return_icon('back.png', get_lang('BackToHomePage')), get_lang("BackToHomePage"), "</a>", "</p>\n";
  746. }
  747. }
  748. /**
  749. * retrieves all the courses that the user has already subscribed to
  750. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University, Belgium
  751. * @param int $user_id: the id of the user
  752. * @return array an array containing all the information of the courses of the given user
  753. */
  754. function get_courses_of_user($user_id) {
  755. $table_course = Database::get_main_table(TABLE_MAIN_COURSE);
  756. $table_course_user = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  757. // Secondly we select the courses that are in a category (user_course_cat <> 0) and sort these according to the sort of the category
  758. $user_id = intval($user_id);
  759. $sql_select_courses = "SELECT course.code k, course.visual_code vc, course.subscribe subscr, course.unsubscribe unsubscr,
  760. course.title i, course.tutor_name t, course.db_name db, course.directory dir, course_rel_user.status status,
  761. course_rel_user.sort sort, course_rel_user.user_course_cat user_course_cat
  762. FROM $table_course course,
  763. $table_course_user course_rel_user
  764. WHERE course.code = course_rel_user.course_code
  765. AND course_rel_user.user_id = '".$user_id."'
  766. ORDER BY course_rel_user.sort ASC";
  767. $result = Database::query($sql_select_courses, __FILE__, __LINE__);
  768. while ($row = Database::fetch_array($result)) {
  769. // we only need the database name of the course
  770. $courses[$row['k']] = array('db' => $row['db'], 'code' => $row['k'], 'visual_code' => $row['vc'], 'title' => $row['i'], 'directory' => $row['dir'], 'status' => $row['status'], 'tutor' => $row['t'], 'subscribe' => $row['subscr'], 'unsubscribe' => $row['unsubscr'], 'sort' => $row['sort'], 'user_course_category' => $row['user_course_cat']);
  771. }
  772. return $courses;
  773. }