viewthread.php 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304
  1. <?php
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2004-2008 Dokeos SPRL
  6. Copyright (c) 2003 Ghent University (UGent)
  7. Copyright (c) 2001 Universite catholique de Louvain (UCL)
  8. Copyright (c) various contributors
  9. For a full list of contributors, see "credits.txt".
  10. The full license can be read in "license.txt".
  11. This program is free software; you can redistribute it and/or
  12. modify it under the terms of the GNU General Public License
  13. as published by the Free Software Foundation; either version 2
  14. of the License, or (at your option) any later version.
  15. See the GNU General Public License for more details.
  16. Contact address: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium
  17. Mail: info@dokeos.com
  18. ==============================================================================
  19. */
  20. /**
  21. * @Author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  22. * @Copyright Ghent University
  23. * @Copyright Patrick Cool
  24. *
  25. * @package dokeos.forum
  26. */
  27. // name of the language file that needs to be included
  28. $language_file = array (
  29. 'forum',
  30. 'group'
  31. );
  32. // including the global dokeos file
  33. require '../inc/global.inc.php';
  34. // the section (tabs)
  35. $this_section=SECTION_COURSES;
  36. // notice for unauthorized people.
  37. api_protect_course_script(true);
  38. // including additional library scripts
  39. require_once (api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php');
  40. require_once (api_get_path(LIBRARY_PATH).'groupmanager.lib.php');
  41. //require_once (api_get_path(LIBRARY_PATH).'resourcelinker.lib.php');
  42. $nameTools=get_lang('Forum');
  43. /*
  44. -----------------------------------------------------------
  45. Including necessary files
  46. -----------------------------------------------------------
  47. */
  48. require 'forumconfig.inc.php';
  49. require_once 'forumfunction.inc.php';
  50. //are we in a lp ?
  51. $origin = '';
  52. if (isset($_GET['origin'])) {
  53. $origin = Security::remove_XSS($_GET['origin']);
  54. }
  55. /*
  56. ==============================================================================
  57. MAIN DISPLAY SECTION
  58. ==============================================================================
  59. */
  60. /*
  61. -----------------------------------------------------------
  62. Retrieving forum and forum categorie information
  63. -----------------------------------------------------------
  64. */
  65. // we are getting all the information about the current forum and forum category.
  66. // note pcool: I tried to use only one sql statement (and function) for this
  67. // but the problem is that the visibility of the forum AND forum cateogory are stored in the item_property table
  68. $current_thread=get_thread_information($_GET['thread']); // note: this has to be validated that it is an existing thread
  69. $current_forum=get_forum_information($current_thread['forum_id']); // note: this has to be validated that it is an existing forum.
  70. $current_forum_category=get_forumcategory_information($current_forum['forum_category']);
  71. $whatsnew_post_info=$_SESSION['whatsnew_post_info'];
  72. /*
  73. -----------------------------------------------------------
  74. Header and Breadcrumbs
  75. -----------------------------------------------------------
  76. */
  77. if (!empty($_GET['gradebook']) && $_GET['gradebook']=='view' ) {
  78. $_SESSION['gradebook']=Security::remove_XSS($_GET['gradebook']);
  79. $gradebook= $_SESSION['gradebook'];
  80. } /*elseif (empty($_GET['gradebook'])) {
  81. unset($_SESSION['gradebook']);
  82. $gradebook= '';
  83. } */
  84. if (!empty($gradebook) && $gradebook=='view') {
  85. $interbreadcrumb[] = array (
  86. 'url' => '../gradebook/' . $_SESSION['gradebook_dest'],
  87. 'name' => get_lang('Gradebook')
  88. );
  89. }
  90. if (!empty($_SESSION['toolgroup'])) {
  91. $_clean['toolgroup']=(int)$_SESSION['toolgroup'];
  92. $group_properties = GroupManager :: get_group_properties($_clean['toolgroup']);
  93. $interbreadcrumb[] = array("url"=>"../group/group.php", "name" => get_lang('Groups'));
  94. $interbreadcrumb[] = array("url"=>"../group/group_space.php?gidReq=".$_SESSION['toolgroup'], "name"=> get_lang('GroupSpace').' ('.$group_properties['name'].')');
  95. $interbreadcrumb[] = array("url"=>"viewforum.php?forum=".Security::remove_XSS($_GET['forum'])."&amp;gidReq=".$_SESSION['toolgroup']."&amp;origin=".$origin."&amp;search=".Security::remove_XSS(urlencode($my_search)),"name" => prepare4display($current_forum['forum_title']));
  96. $interbreadcrumb[] = array("url"=>"viewthread.php?forum=".Security::remove_XSS($_GET['forum'])."&gradebook=".$gradebook."&amp;thread=".Security::remove_XSS($_GET['thread']),"name" => prepare4display($current_thread['thread_title']));
  97. Display :: display_header('');
  98. api_display_tool_title($nameTools);
  99. } else {
  100. $my_search=isset($_GET['search']) ? $_GET['search'] : '';
  101. if ($origin=='learnpath') {
  102. include(api_get_path(INCLUDE_PATH).'reduced_header.inc.php');
  103. } else {
  104. $interbreadcrumb[]=array("url" => "index.php?gradebook=$gradebook&search=".Security::remove_XSS(urlencode($my_search)),"name" => $nameTools);
  105. $interbreadcrumb[]=array("url" => "viewforumcategory.php?forumcategory=".$current_forum_category['cat_id']."&amp;origin=".$origin."&amp;search=".Security::remove_XSS(urlencode($my_search)),"name" => prepare4display($current_forum_category['cat_title']));
  106. $interbreadcrumb[]=array("url" => "viewforum.php?forum=".Security::remove_XSS($_GET['forum'])."&amp;origin=".$origin."&amp;search=".Security::remove_XSS(urlencode($my_search)),"name" => prepare4display($current_forum['forum_title']));
  107. $message = isset($message) ? $message : '';
  108. // the last element of the breadcrumb navigation is already set in interbreadcrumb, so give empty string
  109. Display :: display_header('');
  110. api_display_tool_title($nameTools);
  111. }
  112. }
  113. /*
  114. -----------------------------------------------------------
  115. Is the user allowed here?
  116. -----------------------------------------------------------
  117. */
  118. // if the user is not a course administrator and the forum is hidden
  119. // then the user is not allowed here.
  120. if (!api_is_allowed_to_edit(false,true) AND ($current_forum['visibility']==0 OR $current_thread['visibility']==0)) {
  121. forum_not_allowed_here();
  122. }
  123. /*
  124. -----------------------------------------------------------
  125. Actions
  126. -----------------------------------------------------------
  127. */
  128. $my_action = isset($_GET['action']) ? $_GET['action'] : '';
  129. if ($my_action=='delete' AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(false,true)) {
  130. $message=delete_post($_GET['id']); // note: this has to be cleaned first
  131. }
  132. if (($my_action=='invisible' OR $my_action=='visible') AND isset($_GET['id']) AND api_is_allowed_to_edit(false,true)) {
  133. $message=approve_post($_GET['id'],$_GET['action']); // note: this has to be cleaned first
  134. }
  135. if ($my_action=='move' AND isset($_GET['post'])) {
  136. $message=move_post_form();
  137. }
  138. /*
  139. -----------------------------------------------------------
  140. Display the action messages
  141. -----------------------------------------------------------
  142. */
  143. $my_message = isset($message) ? $message : '';
  144. if ($my_message) {
  145. Display :: display_confirmation_message(get_lang($my_message));
  146. }
  147. if ($my_message<>'PostDeletedSpecial') {
  148. // in this case the first and only post of the thread is removed
  149. // this increases the number of times the thread has been viewed
  150. increase_thread_view($_GET['thread']);
  151. /*
  152. -----------------------------------------------------------
  153. Action Links
  154. -----------------------------------------------------------
  155. */
  156. if ($origin=='learnpath') {
  157. echo '<div style="height:15px">&nbsp;</div>';
  158. }
  159. echo '<div class="actions">';
  160. echo '<span style="float:right;">'.search_link().'</span>';
  161. if ($origin != 'learnpath') {
  162. echo '<a href="index.php?gradebook='.$gradebook.'">'.Display::return_icon('back.png',get_lang('BackToForumOverview')).' '.get_lang('BackToForumOverview').'</a>';
  163. echo '<a href="viewforum.php?&forum='.Security::remove_XSS($_GET['forum']).'&amp;gidReq='.$_SESSION['toolgroup'].'">'.Display::return_icon('forum.gif',get_lang('BackToForum')).' '.get_lang('BackToForum').'</a>';
  164. }
  165. // the reply to thread link should only appear when the forum_category is not locked AND the forum is not locked AND the thread is not locked.
  166. // if one of the three levels is locked then the link should not be displayed
  167. if ($current_forum_category['locked']==0 AND $current_forum['locked']==0 AND $current_thread['locked']==0 OR api_is_allowed_to_edit(false,true)) {
  168. // The link should only appear when the user is logged in or when anonymous posts are allowed.
  169. if ($_user['user_id'] OR ($current_forum['allow_anonymous']==1 AND !$_user['user_id'])) {
  170. //reply link
  171. if (!api_is_anonymous() && api_is_allowed_to_session_edit(false,true)) {
  172. echo '<a href="reply.php?'.api_get_cidreq().'&forum='.Security::remove_XSS($_GET['forum']).'&amp;thread='.Security::remove_XSS($_GET['thread']).'&amp;action=replythread&origin='.$origin.'">'.Display::return_icon('forumthread_new.gif',get_lang('ReplyToThread')).get_lang('ReplyToThread').'</a>';
  173. }
  174. //new thread link
  175. if ((api_is_allowed_to_edit(false,true) && !(api_is_course_coach() && $current_forum['session_id']!=$_SESSION['id_session'])) OR ($current_forum['allow_new_threads']==1 AND isset($_user['user_id'])) OR ($current_forum['allow_new_threads']==1 AND !isset($_user['user_id']) AND $current_forum['allow_anonymous']==1)) {
  176. if ($current_forum['locked'] <> 1 AND $current_forum['locked'] <> 1) {
  177. echo '&nbsp;&nbsp;';
  178. /* if ( isset($_GET['gradebook']) && $_GET['gradebook']!=""){
  179. $info_thread=get_thread_information($_GET['thread']);
  180. echo '<a href="newthread.php?'.api_get_cidreq().'&forum='.$info_thread['forum_id'].'&origin='.$origin.'&gradebook='.Security::remove_XSS($_GET['gradebook']).'">'.Display::return_icon('forumthread_new.gif', get_lang('NewTopic')).' '.get_lang('NewTopic').'</a>';
  181. } else {
  182. echo '<a href="newthread.php?'.api_get_cidreq().'&forum='.Security::remove_XSS($_GET['forum']).'&origin='.$origin.'">'.Display::return_icon('forumthread_new.gif', get_lang('NewTopic')).' '.get_lang('NewTopic').'</a>';
  183. } */
  184. } else {
  185. echo get_lang('ForumLocked');
  186. }
  187. }
  188. }
  189. }
  190. // the different views of the thread
  191. if ($origin != 'learnpath') {
  192. $my_url = '<a href="viewthread.php?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($_GET['forum']).'&amp;origin='.$origin.'&amp;gradebook='.$gradebook.'&amp;thread='.Security::remove_XSS($_GET['thread']).'&amp;search='.Security::remove_XSS(urlencode($my_search));
  193. echo $my_url.'&amp;view=flat&origin='.$origin.'&amp;gradebook='.$gradebook.'">'.Display::return_icon('forum_listview.gif',get_lang('FlatView')).get_lang('FlatView').'</a>';
  194. echo $my_url.'&amp;view=threaded&origin='.$origin.'&amp;gradebook='.$gradebook.'">'.Display::return_icon('forum_threadedview.gif',get_lang('ThreadedView')).get_lang('ThreadedView').'</a>';
  195. echo $my_url.'&amp;view=nested&origin='.$origin.'&amp;gradebook='.$gradebook.'">'.Display::return_icon('forum_nestedview.gif',get_lang('NestedView')).get_lang('NestedView').'</a>';
  196. }
  197. $my_url = null;
  198. echo '</div>&nbsp;';
  199. /*
  200. -----------------------------------------------------------
  201. Display Forum Category and the Forum information
  202. -----------------------------------------------------------
  203. */
  204. if (!isset($_SESSION['view'])) {
  205. $viewmode=$current_forum['default_view'];
  206. } else {
  207. $viewmode=$_SESSION['view'];
  208. }
  209. $viewmode_whitelist=array('flat', 'threaded', 'nested');
  210. if (isset($_GET['view']) and in_array($_GET['view'],$viewmode_whitelist)) {
  211. $viewmode=$_GET['view'];
  212. $_SESSION['view']=$viewmode;
  213. }
  214. if(empty($viewmode)) {
  215. $viewmode = 'flat';
  216. }
  217. /*
  218. -----------------------------------------------------------
  219. Display Forum Category and the Forum information
  220. -----------------------------------------------------------
  221. */
  222. // we are getting all the information about the current forum and forum category.
  223. // note pcool: I tried to use only one sql statement (and function) for this
  224. // but the problem is that the visibility of the forum AND forum cateogory are stored in the item_property table
  225. echo "<table class=\"data_table\" width='100%'>\n";
  226. // the thread
  227. echo "\t<tr>\n\t\t<th style=\"padding-left:5px;\" align=\"left\" colspan=\"6\">";
  228. echo '<span class="forum_title">'.prepare4display($current_thread['thread_title']).'</span><br />';
  229. if ($origin!='learnpath') {
  230. echo '<span class="forum_low_description">'.prepare4display($current_forum_category['cat_title']).' - ';
  231. }
  232. echo prepare4display($current_forum['forum_title']).'<br />';
  233. echo "</th>\n";
  234. echo "\t</tr>\n";
  235. echo '<span>'.prepare4display(isset($current_thread['thread_comment'])?$current_thread['thread_comment']:'').'</span>';
  236. echo "</table>";
  237. switch ($viewmode) {
  238. case 'flat':
  239. include_once('viewthread_flat.inc.php');
  240. break;
  241. case 'threaded':
  242. include_once('viewthread_threaded.inc.php');
  243. break;
  244. case 'nested':
  245. include_once('viewthread_nested.inc.php');
  246. break;
  247. default:
  248. include_once('viewthread_flat.inc.php');
  249. break;
  250. }
  251. } // if ($message<>'PostDeletedSpecial') // in this case the first and only post of the thread is removed
  252. /*
  253. ==============================================================================
  254. FOOTER
  255. ==============================================================================
  256. */
  257. if ($origin!='learnpath') {
  258. Display :: display_footer();
  259. }