viewforum.php 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495
  1. <?php
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2004-2008 Dokeos SPRL
  6. Copyright (c) 2003 Ghent University (UGent)
  7. Copyright (c) 2001 Universite catholique de Louvain (UCL)
  8. Copyright (c) various contributors
  9. For a full list of contributors, see "credits.txt".
  10. The full license can be read in "license.txt".
  11. This program is free software; you can redistribute it and/or
  12. modify it under the terms of the GNU General Public License
  13. as published by the Free Software Foundation; either version 2
  14. of the License, or (at your option) any later version.
  15. See the GNU General Public License for more details.
  16. Contact address: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium
  17. Mail: info@dokeos.com
  18. ==============================================================================
  19. */
  20. /**
  21. * These files are a complete rework of the forum. The database structure is
  22. * based on phpBB but all the code is rewritten. A lot of new functionalities
  23. * are added:
  24. * - forum categories and forums can be sorted up or down, locked or made invisible
  25. * - consistent and integrated forum administration
  26. * - forum options: are students allowed to edit their post?
  27. * moderation of posts (approval)
  28. * reply only forums (students cannot create new threads)
  29. * multiple forums per group
  30. * - sticky messages
  31. * - new view option: nested view
  32. * - quoting a message
  33. *
  34. * @Author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  35. * @Copyright Ghent University
  36. * @Copyright Patrick Cool
  37. *
  38. * @package dokeos.forum
  39. */
  40. // name of the language file that needs to be included
  41. $language_file = array (
  42. 'forum',
  43. 'group'
  44. );
  45. // including the global dokeos file
  46. require '../inc/global.inc.php';
  47. // notice for unauthorized people.
  48. api_protect_course_script(true);
  49. // the section (tabs)
  50. $this_section=SECTION_COURSES;
  51. // including additional library scripts
  52. require_once (api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php');
  53. include_once (api_get_path(LIBRARY_PATH).'groupmanager.lib.php');
  54. $nameTools=get_lang('Forum');
  55. //are we in a lp ?
  56. $origin = '';
  57. $origin_string='';
  58. if (isset($_GET['origin'])) {
  59. $origin = Security::remove_XSS($_GET['origin']);
  60. $origin_string = '&origin='.$origin;
  61. }
  62. /*
  63. -----------------------------------------------------------
  64. Including necessary files
  65. -----------------------------------------------------------
  66. */
  67. require 'forumconfig.inc.php';
  68. require_once 'forumfunction.inc.php';
  69. $userid=api_get_user_id();
  70. $userinf=api_get_user_info($userid);
  71. /*
  72. ==============================================================================
  73. MAIN DISPLAY SECTION
  74. ==============================================================================
  75. */
  76. /*
  77. -----------------------------------------------------------
  78. Retrieving forum and forum categorie information
  79. -----------------------------------------------------------
  80. */
  81. // we are getting all the information about the current forum and forum category.
  82. // note pcool: I tried to use only one sql statement (and function) for this
  83. // but the problem is that the visibility of the forum AND forum cateogory are stored in the item_property table
  84. $my_forum_group=isset($_GET['gidReq'])?$_GET['gidReq']:'';
  85. $my_forum=isset($_GET['forum'])?$_GET['forum']:'';
  86. $val=GroupManager::user_has_access($userid,$my_forum_group,GROUP_TOOL_FORUM);
  87. if(!empty($my_forum_group)){
  88. if (api_is_allowed_to_edit(false,true) || $val==true) {
  89. $current_forum=get_forum_information($my_forum); // note: this has to be validated that it is an existing forum.
  90. $current_forum_category=get_forumcategory_information($current_forum['forum_category']);
  91. }
  92. } else {
  93. $result=get_forum_information($my_forum);
  94. if($result['forum_of_group']==0){
  95. $current_forum=get_forum_information($my_forum); // note: this has to be validated that it is an existing forum.
  96. $current_forum_category=get_forumcategory_information($current_forum['forum_category']);
  97. }
  98. }
  99. /*
  100. -----------------------------------------------------------
  101. Header and Breadcrumbs
  102. -----------------------------------------------------------
  103. */
  104. $my_search=isset($_GET['search'])?$_GET['search']:'';
  105. $my_action=isset($_GET['action'])?$_GET['action']:'';
  106. if (isset($_SESSION['gradebook'])){
  107. $gradebook= $_SESSION['gradebook'];
  108. }
  109. if (!empty($gradebook) && $gradebook=='view') {
  110. $interbreadcrumb[]= array (
  111. 'url' => '../gradebook/'.$_SESSION['gradebook_dest'],
  112. 'name' => get_lang('Gradebook')
  113. );
  114. }
  115. if (!empty($_GET['gidReq'])) {
  116. $toolgroup = Database::escape_string($_GET['gidReq']);
  117. api_session_register('toolgroup');
  118. }
  119. if (!empty($_SESSION['toolgroup'])) {
  120. $_clean['toolgroup']=(int)$_SESSION['toolgroup'];
  121. $group_properties = GroupManager :: get_group_properties($_clean['toolgroup']);
  122. $interbreadcrumb[] = array ("url" => "../group/group.php", "name" => get_lang('Groups'));
  123. $interbreadcrumb[] = array ("url"=>"../group/group_space.php?gidReq=".$_SESSION['toolgroup'], "name"=> get_lang('GroupSpace').' ('.$group_properties['name'].')');
  124. //$interbreadcrumb[]=array("url" => "index.php?search=".Security::remove_XSS($my_search),"name" => $nameTools);
  125. //$interbreadcrumb[]=array("url" => "viewforumcategory.php?forumcategory=".$current_forum_category['cat_id']."&amp;search=".Security::remove_XSS(urlencode($my_search)),"name" => prepare4display($current_forum_category['cat_title']));
  126. $interbreadcrumb[]=array("url" => "#","name" => prepare4display(Security::remove_XSS($current_forum['forum_title'])));
  127. //viewforum.php?forum=".Security::remove_XSS($my_forum)."&amp;origin=".$origin."&amp;gidReq=".$_SESSION['toolgroup']."&amp;search=".Security::remove_XSS(urlencode($my_search)),
  128. } else {
  129. $interbreadcrumb[]=array("url" => "index.php?gradebook=$gradebook&search=".Security::remove_XSS($my_search),"name" => $nameTools);
  130. $interbreadcrumb[]=array("url" => "viewforumcategory.php?forumcategory=".$current_forum_category['cat_id']."&amp;search=".Security::remove_XSS(urlencode($my_search)),"name" => prepare4display(Security::remove_XSS($current_forum_category['cat_title'])));
  131. $interbreadcrumb[]=array("url" => "#","name" => prepare4display(Security::remove_XSS($current_forum['forum_title'])));
  132. //viewforum.php?forum=".Security::remove_XSS($my_forum)."&amp;origin=".$origin."&amp;search=".Security::remove_XSS(urlencode($my_search))
  133. }
  134. if ($origin=='learnpath') {
  135. include(api_get_path(INCLUDE_PATH).'reduced_header.inc.php');
  136. } else {
  137. // the last element of the breadcrumb navigation is already set in interbreadcrumb, so give empty string
  138. Display :: display_header('');
  139. //api_display_tool_title($nameTools);
  140. }
  141. /*
  142. -----------------------------------------------------------
  143. Actions
  144. -----------------------------------------------------------
  145. */
  146. $table_link = Database :: get_main_table(TABLE_MAIN_GRADEBOOK_LINK);
  147. // Change visibility of a forum or a forum category
  148. if (($my_action=='invisible' OR $my_action=='visible') AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(false,true) && api_is_allowed_to_session_edit(false,true)) {
  149. $message=change_visibility($_GET['content'], $_GET['id'],$_GET['action']);// note: this has to be cleaned first
  150. }
  151. // locking and unlocking
  152. if (($my_action=='lock' OR $my_action=='unlock') AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(false,true) && api_is_allowed_to_session_edit(false,true)) {
  153. $message=change_lock_status($_GET['content'], $_GET['id'],$my_action);// note: this has to be cleaned first
  154. }
  155. // deleting
  156. if ($my_action=='delete' AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(false,true) && api_is_allowed_to_session_edit(false,true)) {
  157. $message=delete_forum_forumcategory_thread($_GET['content'],$_GET['id']); // note: this has to be cleaned first
  158. //delete link
  159. $sql_link='DELETE FROM '.$table_link.' WHERE ref_id='.Database::escape_string(Security::remove_XSS($_GET['id'])).' and type=5 and course_code="'.api_get_course_id().'";';
  160. Database::query($sql_link);
  161. }
  162. // moving
  163. if ($my_action=='move' and isset($_GET['thread']) AND api_is_allowed_to_edit(false,true) && api_is_allowed_to_session_edit(false,true)) {
  164. $message=move_thread_form();
  165. }
  166. // notification
  167. if ($my_action == 'notify' AND isset($_GET['content']) AND isset($_GET['id']) && api_is_allowed_to_session_edit(false,true)) {
  168. $return_message = set_notification($_GET['content'],$_GET['id']);
  169. Display :: display_confirmation_message($return_message,false);
  170. }
  171. // student list
  172. if ($my_action == 'liststd' AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(null,true)) {
  173. switch($_GET['list']) {
  174. case "qualify":
  175. $student_list=get_thread_users_qualify($_GET['id']);
  176. $nrorow3 =-2;
  177. break;
  178. case "notqualify":
  179. $student_list=get_thread_users_not_qualify($_GET['id']);
  180. $nrorow3 =-2;
  181. break;
  182. default:
  183. $student_list=get_thread_users_details($_GET['id']);
  184. $nrorow3 = Database::num_rows($student_list);
  185. break;
  186. }
  187. $table_list = '<p><br /><h3>'.get_lang('ThreadUsersList').'&nbsp;:'.get_name_thread_by_id($_GET['id']).'</h3>';
  188. if ($nrorow3>0 || $nrorow3==-2) {
  189. $url = 'cidReq='.Security::remove_XSS($_GET['cidReq']).'&forum='.Security::remove_XSS($my_forum).'&action='.Security::remove_XSS($_GET['action']).'&content='.Security::remove_XSS($_GET['content'],STUDENT).'&id='.Security::remove_XSS($_GET['id']);
  190. $table_list.= '<br />
  191. <div style="width:50%">
  192. <table class="data_table" border="0">
  193. <tr>
  194. <th height="22"><a href="viewforum.php?'.$url.'&origin='.$origin.'&list=all">'.get_lang('AllStudents').'</a></th>
  195. <th><a href="viewforum.php?'.$url.'&origin='.$origin.'&list=qualify">'.get_lang('StudentsQualified').'</a></th>
  196. <th><a href="viewforum.php?'.$url.'&origin='.$origin.'&list=notqualify">'.get_lang('StudentsNotQualified').'</a></th>
  197. </tr>
  198. </table></div>
  199. <div style="border:1px solid gray; width:99%; margin-top:5px; padding:4px; float:left">
  200. ';
  201. $icon_qualify = 'blog_new.gif';
  202. $table_list.= '<center><br /><table class="data_table" style="width:50%">';
  203. // The column headers (to do: make this sortable)
  204. $table_list.= '<tr >';
  205. $table_list.= '<th height="24">'.get_lang('NamesAndLastNames').'</th>';
  206. if ($_GET['list']=='qualify') {
  207. $table_list.= '<th>'.get_lang('Qualification').'</th>';
  208. }
  209. if (api_is_allowed_to_edit(null,true)) {
  210. $table_list.= '<th>'.get_lang('Qualify').'</th>';
  211. }
  212. $table_list.= '</tr>';
  213. $max_qualify=show_qualify('2',$_GET['cidReq'],$my_forum,$userid,$_GET['id']);
  214. $counter_stdlist=0;
  215. if (Database::num_rows($student_list)>0) {
  216. while ($row_student_list=Database::fetch_array($student_list)) {
  217. if ($counter_stdlist%2==0) {
  218. $class_stdlist="row_odd";
  219. } else {
  220. $class_stdlist="row_even";
  221. }
  222. $name_user_theme = api_get_person_name($row_student_list['firstname'], $row_student_list['lastname']);
  223. $table_list.= '<tr class="$class_stdlist"><td><a href="../user/userInfo.php?uInfo='.$row_student_list['user_id'].'&tipo=sdtlist&'.api_get_cidreq().'&forum='.Security::remove_XSS($my_forum).$origin_string.'">'.$name_user_theme.'</a></td>';
  224. if ($_GET['list']=='qualify') {
  225. $table_list.= '<td>'.$row_student_list['qualify'].'/'.$max_qualify.'</td>';
  226. }
  227. if (api_is_allowed_to_edit(null,true)) {
  228. $current_qualify_thread=show_qualify('1',$_GET['cidReq'],$my_forum,$row_student_list['user_id'],$_GET['id']);
  229. $table_list.= '<td><a href="forumqualify.php?'.api_get_cidreq().'&forum='.Security::remove_XSS($my_forum).'&thread='.Security::remove_XSS($_GET['id']).'&user='.$row_student_list['user_id'].'&user_id='.$row_student_list['user_id'].'&idtextqualify='.$current_qualify_thread.'&origin='.$origin.'">'.icon('../img/'.$icon_qualify,get_lang('Qualify')).'</a></td></tr>';
  230. }
  231. $counter_stdlist++;
  232. }
  233. } else {
  234. if ($_GET['list']=='qualify'){
  235. $table_list.='<tr><td colspan="2">'.get_lang('ThereIsNotQualifiedLearners').'</td></tr>';
  236. } else {
  237. $table_list.='<tr><td colspan="2">'.get_lang('ThereIsNotUnqualifiedLearners').'</td></tr>';
  238. }
  239. }
  240. $table_list.= '</table></center>';
  241. $table_list .= '<br /></div>';
  242. } else {
  243. $table_list .= get_lang('NoParticipation');
  244. }
  245. }
  246. /*
  247. -----------------------------------------------------------
  248. Is the user allowed here?
  249. -----------------------------------------------------------
  250. */
  251. // if the user is not a course administrator and the forum is hidden
  252. // then the user is not allowed here.
  253. if (!api_is_allowed_to_edit(false,true) AND ($current_forum_category['visibility']==0 OR $current_forum['visibility']==0)) {
  254. forum_not_allowed_here();
  255. }
  256. if ($origin == 'learnpath') {
  257. echo '<div style="height:15px">&nbsp;</div>';
  258. }
  259. /*
  260. -----------------------------------------------------------
  261. Display the action messages
  262. -----------------------------------------------------------
  263. */
  264. if (!empty($message)) {
  265. Display :: display_confirmation_message($message);
  266. }
  267. /*
  268. -----------------------------------------------------------
  269. Action Links
  270. -----------------------------------------------------------
  271. */
  272. if ($origin!='learnpath') {
  273. echo '<div class="actions">';
  274. if (empty($_SESSION['toolgroup'])){
  275. echo '<span style="float:right;">'.search_link().'</span>';
  276. }
  277. echo '<a href="index.php">'.Display::return_icon('back.png',get_lang('BackToForumOverview')).' '.get_lang('BackToForumOverview').'</a>';
  278. // The link should appear when
  279. // 1. the course admin is here
  280. // 2. the course member is here and new threads are allowed
  281. // 3. a visitor is here and new threads AND allowed AND anonymous posts are allowed
  282. if (api_is_allowed_to_edit(false,true) OR ($current_forum['allow_new_threads']==1 AND isset($_user['user_id'])) OR ($current_forum['allow_new_threads']==1 AND !isset($_user['user_id']) AND $current_forum['allow_anonymous']==1)) {
  283. if ($current_forum['locked'] <> 1 AND $current_forum['locked'] <> 1) {
  284. if (!api_is_anonymous()) {
  285. if ($my_forum==strval(intval($my_forum))) {
  286. echo '<a href="newthread.php?'.api_get_cidreq().'&forum='.Security::remove_XSS($my_forum).$origin_string.'">'.Display::return_icon('forumthread_new.gif',get_lang('NewTopic')).' '.get_lang('NewTopic').'</a>';
  287. } else {
  288. $my_forum=strval(intval($my_forum));
  289. echo '<a href="newthread.php?'.api_get_cidreq().'&forum='.$my_forum.$origin_string.'">'.Display::return_icon('forumthread_new.gif',get_lang('NewTopic')).' '.get_lang('NewTopic').'</a>';
  290. }
  291. }
  292. } else {
  293. echo get_lang('ForumLocked');
  294. }
  295. }
  296. echo '</div>';
  297. }
  298. /*
  299. -----------------------------------------------------------
  300. Display
  301. -----------------------------------------------------------
  302. */
  303. echo "<table class=\"data_table\" >\n";
  304. // the current forum
  305. if ($origin != 'learnpath') {
  306. echo "\t<tr>\n\t\t<th align=\"left\" colspan=\"7\">";
  307. echo '<span class="forum_title">'.prepare4display(Security::remove_XSS($current_forum['forum_title'])).'</span>';
  308. if (!empty ($current_forum['forum_comment'])) {
  309. echo '<br><span class="forum_description">'.prepare4display(Security::remove_XSS($current_forum['forum_comment'],STUDENT)).'</span>';
  310. }
  311. if (!empty ($current_forum_category['cat_title'])) {
  312. echo '<br /><span class="forum_low_description">'.prepare4display(Security::remove_XSS($current_forum_category['cat_title']))."</span><br />";
  313. }
  314. echo "</th>\n";
  315. echo "\t</tr>\n";
  316. }
  317. echo "</th>\n";
  318. echo "\t</tr>\n";
  319. // The column headers (to do: make this sortable)
  320. echo "\t<tr class=\"forum_threadheader\">\n";
  321. echo "\t\t<td></td>\n";
  322. echo "\t\t<td>".get_lang('Title')."</td>\n";
  323. echo "\t\t<td>".get_lang('Replies')."</td>\n";
  324. echo "\t\t<td>".get_lang('Views')."</td>\n";
  325. echo "\t\t<td>".get_lang('Author')."</td>\n";
  326. echo "\t\t<td>".get_lang('LastPost')."</td>\n";
  327. echo "\t\t<td>".get_lang('Actions')."</td>\n";
  328. echo "\t</tr>\n";
  329. // getting al the threads
  330. $threads=get_threads($my_forum); // note: this has to be cleaned first
  331. $whatsnew_post_info=isset($_SESSION['whatsnew_post_info'])?$_SESSION['whatsnew_post_info']:null;
  332. $counter=0;
  333. if(is_array($threads)) {
  334. foreach ($threads as $row) {
  335. // thread who have no replies yet and the only post is invisible should not be displayed to students.
  336. if (api_is_allowed_to_edit(false,true) OR !($row['thread_replies']=='0' AND $row['visible']=='0')) {
  337. if($counter%2==0) {
  338. $class="row_odd";
  339. } else {
  340. $class="row_even";
  341. }
  342. echo "\t<tr class=\"$class\">\n";
  343. echo "\t\t<td>";
  344. $my_whatsnew_post_info=isset($whatsnew_post_info[$my_forum][$row['thread_id']])?$whatsnew_post_info[$my_forum][$row['thread_id']]:null;
  345. if (is_array($my_whatsnew_post_info) and !empty($my_whatsnew_post_info)) {
  346. echo icon('../img/forumthread.gif');
  347. } else {
  348. echo icon('../img/forumthread.gif');
  349. }
  350. if ($row['thread_sticky']==1) {
  351. echo icon('../img/exclamation.gif');
  352. }
  353. echo "</td>\n";
  354. echo "\t\t<td>";
  355. echo "<a href=\"viewthread.php?".api_get_cidreq()."&gradebook=".Security::remove_XSS($_GET['gradebook'])."&forum=".Security::remove_XSS($my_forum)."&amp;origin=".$origin."&amp;thread=".$row['thread_id'].$origin_string."&amp;search=".Security::remove_XSS(urlencode($my_search))."\" ".class_visible_invisible($row['visibility']).">".prepare4display(Security::remove_XSS($row['thread_title']))."</a></td>\n";
  356. echo "\t\t<td>".$row['thread_replies']."</td>\n";
  357. if ($row['user_id']=='0') {
  358. $name=prepare4display($row['thread_poster_name']);
  359. } else {
  360. $name=api_get_person_name($row['firstname'], $row['lastname']);
  361. }
  362. echo "\t\t<td>".$row['thread_views']."</td>\n";
  363. if ($row['last_poster_user_id']=='0') {
  364. $name=$row['poster_name'];
  365. } else {
  366. $name=api_get_person_name($row['last_poster_firstname'], $row['last_poster_lastname']);
  367. }
  368. if($origin != 'learnpath') {
  369. echo "\t\t<td>".display_user_link($row['user_id'], api_get_person_name($row['firstname'], $row['lastname']))."</td>\n";
  370. } else {
  371. echo "\t\t<td>".api_get_person_name($row['firstname'], $row['lastname'])."</td>\n";
  372. }
  373. // if the last post is invisible and it is not the teacher who is looking then we have to find the last visible post of the thread
  374. if (($row['visible']=='1' OR api_is_allowed_to_edit(false,true)) && $origin!='learnpath') {
  375. $last_post=$row['thread_date']." ".get_lang('By').' '.display_user_link($row['last_poster_user_id'], $name);
  376. } elseif ($origin!='learnpath') {
  377. $last_post_sql="SELECT post.*, user.firstname, user.lastname FROM $table_posts post, $table_users user WHERE post.poster_id=user.user_id AND visible='1' AND thread_id='".$row['thread_id']."' ORDER BY post_id DESC";
  378. $last_post_result=Database::query($last_post_sql, __FILE__, __LINE__);
  379. $last_post_row=Database::fetch_array($last_post_result);
  380. $name=api_get_person_name($last_post_row['firstname'], $last_post_row['lastname']);
  381. $last_post=$last_post_row['post_date']." ".get_lang('By').' '.display_user_link($last_post_row['poster_id'], $name);
  382. } else {
  383. $last_post_sql="SELECT post.*, user.firstname, user.lastname FROM $table_posts post, $table_users user WHERE post.poster_id=user.user_id AND visible='1' AND thread_id='".$row['thread_id']."' ORDER BY post_id DESC";
  384. $last_post_result=Database::query($last_post_sql, __FILE__, __LINE__);
  385. $last_post_row=Database::fetch_array($last_post_result);
  386. $name=api_get_person_name($last_post_row['firstname'], $last_post_row['lastname']);
  387. $last_post=$last_post_row['post_date']." ".get_lang('By').' '.$name;
  388. }
  389. echo "\t\t<td>".$last_post."</td>\n";
  390. echo "\t\t<td>";
  391. // get attach id
  392. $attachment_list=get_attachment($row['post_id']);
  393. $id_attach = !empty($attachment_list)?$attachment_list['id']:'';
  394. $sql_post_id="SELECT post_id FROM $table_posts WHERE post_title='".Database::escape_string($row['thread_title'])."'";
  395. $result_post_id=Database::query($sql_post_id, __FILE__, __LINE__);
  396. $row_post_id=Database::fetch_array($result_post_id);
  397. if ($origin != 'learnpath') {
  398. if (api_is_allowed_to_edit(false,true) && !(api_is_course_coach() && $current_forum['session_id']!=$_SESSION['id_session'])) {
  399. echo "<a href=\"editpost.php?".api_get_cidreq()."&forum=".Security::remove_XSS($my_forum)."&amp;thread=".Security::remove_XSS($row['thread_id'])."&amp;post=".$row_post_id['post_id']."&amp;gidReq=".$_SESSION['toolgroup']."&origin=".$origin."&id_attach=".$id_attach."\">".icon('../img/edit.gif',get_lang('Edit'))."</a>\n";
  400. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&forum=".Security::remove_XSS($my_forum)."&amp;action=delete&amp;content=thread&amp;gidReq=".$_SESSION['toolgroup']."&amp;id=".$row['thread_id'].$origin_string."\" onclick=\"javascript:if(!confirm('".addslashes(api_htmlentities(get_lang("DeleteCompleteThread"),ENT_QUOTES,$charset))."')) return false;\">".icon('../img/delete.gif',get_lang('Delete'))."</a>";
  401. display_visible_invisible_icon('thread', $row['thread_id'], $row['visibility'], array("forum"=>$my_forum,'origin'=>$origin,"gidReq"=>$_SESSION['toolgroup']));
  402. display_lock_unlock_icon('thread',$row['thread_id'], $row['locked'], array("forum"=>$my_forum,'origin'=>$origin,"gidReq"=>$_SESSION['toolgroup']));
  403. echo "<a href=\"viewforum.php?".api_get_cidreq()."&forum=".Security::remove_XSS($my_forum)."&amp;action=move&amp;gidReq=".$_SESSION['toolgroup']."&amp;thread=".$row['thread_id'].$origin_string."\">".icon('../img/deplacer_fichier.gif',get_lang('MoveThread'))."</a>";
  404. }
  405. }
  406. $iconnotify = 'send_mail.gif';
  407. if (is_array(isset($_SESSION['forum_notification']['thread'])?$_SESSION['forum_notification']['thread']:null)) {
  408. if (in_array($row['thread_id'],$_SESSION['forum_notification']['thread'])) {
  409. $iconnotify = 'send_mail_checked.gif';
  410. }
  411. }
  412. $icon_liststd = 'group.gif';
  413. if (!api_is_anonymous() && api_is_allowed_to_session_edit(false,true)) {
  414. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&amp;forum=".Security::remove_XSS($my_forum)."&origin=".$origin."&amp;action=notify&amp;content=thread&amp;gidReq=".$_SESSION['toolgroup']."&amp;id=".$row['thread_id']."\">".icon('../img/'.$iconnotify,get_lang('NotifyMe'))."</a>";
  415. }
  416. if (api_is_allowed_to_edit(null,true) && $origin != 'learnpath') {
  417. echo '<a href="'.api_get_self().'?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($my_forum).'&origin='.$origin.'&amp;action=liststd&amp;content=thread&amp;gidReq='.$_SESSION['toolgroup'].'&amp;id='.$row['thread_id'].'">'.icon('../img/'.$icon_liststd,get_lang('StudentList')).'</a>';
  418. }
  419. echo "</td>\n";
  420. echo "\t</tr>\n";
  421. }
  422. $counter++;
  423. }
  424. }
  425. echo "</table>";
  426. echo isset($table_list)?$table_list:'';
  427. /*
  428. ==============================================================================
  429. FOOTER
  430. ==============================================================================
  431. */
  432. if ($origin != 'learnpath') {
  433. Display :: display_footer();
  434. }