message.class.php 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453
  1. <?php
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2004-2009 Dokeos SPRL
  6. Copyright (c) Julio Montoya <gugli100@gmail.com>
  7. For a full list of contributors, see "credits.txt".
  8. The full license can be read in "license.txt".
  9. This program is free software; you can redistribute it and/or
  10. modify it under the terms of the GNU General Public License
  11. as published by the Free Software Foundation; either version 2
  12. of the License, or (at your option) any later version.
  13. See the GNU General Public License for more details.
  14. Contact address: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium
  15. Mail: info@dokeos.com
  16. ==============================================================================
  17. */
  18. require_once api_get_path(LIBRARY_PATH).'/main_api.lib.php';
  19. require_once api_get_path(LIBRARY_PATH).'/online.inc.php';
  20. class MessageManager {
  21. function MessageManager() {
  22. }
  23. public static function get_online_user_list($current_user_id) {
  24. $min=30;
  25. global $_configuration;
  26. $userlist = WhoIsOnline($current_user_id,$_configuration['statistics_database'],$min);
  27. foreach($userlist as $row) {
  28. $receiver_id = $row[0];
  29. $online_user_list[$receiver_id] = GetFullUserName($receiver_id).($current_user_id==$receiver_id?("&nbsp;(".get_lang('Myself').")"):(""));
  30. }
  31. return $online_user_list;
  32. }
  33. /**
  34. * Displays info stating that the message is sent successfully.
  35. */
  36. public static function display_success_message($uid) {
  37. global $charset;
  38. if ($_SESSION['social_exist']===true) {
  39. $redirect="#remote-tab-2";
  40. if (api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool')=='true') {
  41. $success=get_lang('MessageSentTo').
  42. "&nbsp;<b>".
  43. GetFullUserName($uid).
  44. "</b>".
  45. "<br><a href=\"".
  46. "../social/index.php$redirect\">".
  47. get_lang('BackToInbox').
  48. "</a>";
  49. }else {
  50. $success= get_lang('MessageSentTo').
  51. "&nbsp;<b>".
  52. GetFullUserName($uid).
  53. "</b>".
  54. "<br><a href=\"".
  55. "../social/index.php$redirect\">".
  56. get_lang('BackToInbox').
  57. "</a>";
  58. }
  59. } else {
  60. $success= get_lang('MessageSentTo').
  61. "&nbsp;<b>".
  62. GetFullUserName($uid).
  63. "</b>".
  64. "<br><a href=\"".
  65. "inbox.php\">".
  66. get_lang('BackToInbox').
  67. "</a>";
  68. }
  69. Display::display_confirmation_message(api_xml_http_response_encode($success), false);
  70. }
  71. /**
  72. * Displays the wysiwyg html editor.
  73. */
  74. public static function display_html_editor_area($name,$resp) {
  75. api_disp_html_area($name, get_lang('TypeYourMessage'), '', '100%');
  76. }
  77. /**
  78. * Get the new messages for the current user from the database.
  79. */
  80. public static function get_new_messages() {
  81. $table_message = Database::get_main_table(TABLE_MESSAGE);
  82. if (!api_get_user_id()) {
  83. return false;
  84. }
  85. $i=0;
  86. $query = "SELECT * FROM $table_message WHERE user_receiver_id=".api_get_user_id()." AND msg_status=1";
  87. $result = api_sql_query($query,__FILE__,__LINE__);
  88. $i = Database::num_rows($result);
  89. return $i;
  90. }
  91. /**
  92. * Get the list of user_ids of users who are online.
  93. */
  94. public static function users_connected_by_id() {
  95. global $_configuration, $_user;
  96. $minute=30;
  97. $user_connect = WhoIsOnline($_user['user_id'],$_configuration['statistics_database'],$minute);
  98. for ($i=0; $i<count($user_connect); $i++) {
  99. $user_id_list[$i]=$user_connect[$i][0];
  100. }
  101. return $user_id_list;
  102. }
  103. /**
  104. * Gets the total number of messages, used for the inbox sortable table
  105. */
  106. public static function get_number_of_messages () {
  107. $table_message = Database::get_main_table(TABLE_MESSAGE);
  108. $sql_query = "SELECT COUNT(*) as number_messages FROM $table_message WHERE msg_status IN (0,1) AND user_receiver_id=".api_get_user_id();
  109. $sql_result = api_sql_query($sql_query,__FILE__,__LINE__);
  110. $result = Database::fetch_array($sql_result);
  111. return $result['number_messages'];
  112. }
  113. /**
  114. * Gets information about some messages, used for the inbox sortable table
  115. * @param int $from
  116. * @param int $number_of_items
  117. * @param string $direction
  118. */
  119. public static function get_message_data ($from, $number_of_items, $column, $direction) {
  120. global $charset;
  121. $table_message = Database::get_main_table(TABLE_MESSAGE);
  122. $request=api_is_xml_http_request();
  123. $sql_query = "SELECT id as col0, user_sender_id as col1, title as col2, send_date as col3, msg_status as col4 FROM $table_message " .
  124. "WHERE user_receiver_id=".api_get_user_id()." AND msg_status IN (0,1)" .
  125. "ORDER BY send_date desc, col$column $direction LIMIT $from,$number_of_items";
  126. $sql_result = api_sql_query($sql_query,__FILE__,__LINE__);
  127. $i = 0;
  128. $message_list = array ();
  129. while ($result = Database::fetch_row($sql_result)) {
  130. if ($request===true) {
  131. $message[0] = '<input type="checkbox" value='.$result[0].' name="id[]">';
  132. } else {
  133. $message[0] = ($result[0]);
  134. }
  135. if ($request===true) {
  136. if($result[4]==0)
  137. {
  138. $message[1] = Display::return_icon('mail_open.png',get_lang('AlreadyReadMessage'));//Message already read
  139. }
  140. else
  141. {
  142. $message[1] = Display::return_icon('mail.png',get_lang('UnReadMessage'));//Message without reading
  143. }
  144. $message[2] = '<a onclick="get_action_url_and_show_messages(1,'.$result[0].')" href="javascript:void(0)">'.GetFullUserName($result[1]).'</a>';
  145. $message[3] = '<a onclick="get_action_url_and_show_messages(1,'.$result[0].')" href="javascript:void(0)">'.str_replace("\\","",$result[2]).'</a>';
  146. $message[5] = '<a onclick="reply_to_messages(\'show\','.$result[0].',\'\')" href="javascript:void(0)">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a>'.
  147. '&nbsp;&nbsp;<a onclick="delete_one_message('.$result[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  148. } else {
  149. $message[2] = '<a href="view_message.php?id='.$result[0].'">'.GetFullUserName(($result[1])).'</a>';;
  150. $message[3] = '<a href="view_message.php?id='.$result[0].'">'.$result[2].'</a>';
  151. $message[5] = '<a href="new_message.php?re_id='.$result[0].'">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a>'.
  152. '&nbsp;&nbsp;<a delete_one_message('.$result[0].') href="#inbox.php?action=deleteone&id='.$result[0].'">'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  153. }
  154. $message[4] = ($result[3]); //date stays the same
  155. foreach($message as $key => $value) {
  156. $message[$key] = api_xml_http_response_encode($value);
  157. }
  158. $message_list[] = $message;
  159. $i++;
  160. }
  161. return $message_list;
  162. }
  163. public static function send_message ($receiver_user_id, $title, $content) {
  164. global $charset;
  165. $table_message = Database::get_main_table(TABLE_MESSAGE);
  166. $title = api_convert_encoding($title,$charset,'UTF-8');
  167. $content = api_convert_encoding($content,$charset,'UTF-8');
  168. //message in inbox
  169. $sql = "SELECT COUNT(*) as count FROM $table_message WHERE user_sender_id = ".api_get_user_id()." AND user_receiver_id='".Database::escape_string($receiver_user_id)."' AND title = '".Database::escape_string($title)."' AND content ='".Database::escape_string($content)."' ";
  170. $res_exist = api_sql_query($sql,__FILE__,__LINE__);
  171. $row_exist = Database::fetch_array($res_exist,'ASSOC');
  172. if ($row_exist['count'] ==0) {
  173. $query = "INSERT INTO $table_message(user_sender_id, user_receiver_id, msg_status, send_date, title, content ) ".
  174. " VALUES (".
  175. "'".api_get_user_id()."', '".Database::escape_string($receiver_user_id)."', '1', '".date('Y-m-d H:i:s')."','".Database::escape_string($title)."','".Database::escape_string($content)."'".
  176. ")";
  177. //message in outbox
  178. $sql = "INSERT INTO $table_message(user_sender_id, user_receiver_id, msg_status, send_date, title, content ) ".
  179. " VALUES (".
  180. "'".api_get_user_id()."', '".Database::escape_string($receiver_user_id)."', '4', '".date('Y-m-d H:i:s')."','".Database::escape_string($title)."','".Database::escape_string($content)."'".
  181. ")";
  182. $rs = api_sql_query($sql,__FILE__,__LINE__);
  183. $result = api_sql_query($query,__FILE__,__LINE__);
  184. return $result;
  185. }
  186. return false;
  187. }
  188. public static function delete_message_by_user_receiver ($user_receiver_id,$id) {
  189. $table_message = Database::get_main_table(TABLE_MESSAGE);
  190. $sql="SELECT COUNT(*) as count FROM $table_message WHERE id=".$id." AND msg_status<>4;";
  191. $rs=api_sql_query($sql,__FILE__,__LINE__);
  192. $row=Database::fetch_array($rs,'ASSOC');
  193. if ($row['count']==1) {
  194. $query = "DELETE FROM $table_message " .
  195. "WHERE user_receiver_id=".Database::escape_string($user_receiver_id)." AND id=".Database::escape_string($id);
  196. $result = api_sql_query($query,__FILE__,__LINE__);
  197. return $result;
  198. } else {
  199. return false;
  200. }
  201. }
  202. /**
  203. * Set status deleted
  204. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  205. * @param integer
  206. * @param integer
  207. * @return array
  208. */
  209. public static function delete_message_by_user_sender ($user_sender_id,$id) {
  210. $table_message = Database::get_main_table(TABLE_MESSAGE);
  211. $query = "DELETE FROM $table_message " .
  212. "WHERE user_sender_id=".Database::escape_string($user_sender_id)." AND id=".Database::escape_string($id);
  213. $result = api_sql_query($query,__FILE__,__LINE__);
  214. return $result;
  215. }
  216. public static function update_message ($user_id, $id) {
  217. $table_message = Database::get_main_table(TABLE_MESSAGE);
  218. $query = "UPDATE $table_message SET msg_status = '0' WHERE msg_status<>4 AND user_receiver_id=".Database::escape_string($user_id)." AND id='".Database::escape_string($id)."'";
  219. $result = api_sql_query($query,__FILE__,__LINE__);
  220. }
  221. public static function get_message_by_user ($user_id,$id) {
  222. $table_message = Database::get_main_table(TABLE_MESSAGE);
  223. $query = "SELECT * FROM $table_message WHERE user_receiver_id=".Database::escape_string($user_id)." AND id='".Database::escape_string($id)."'";
  224. $result = api_sql_query($query,__FILE__,__LINE__);
  225. return $row = Database::fetch_array($result);
  226. }
  227. /**
  228. * Gets information about if exist messages
  229. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  230. * @param integer
  231. * @param integer
  232. * @return boolean
  233. */
  234. public static function exist_message ($user_id, $id) {
  235. $table_message = Database::get_main_table(TABLE_MESSAGE);
  236. $query = "SELECT id FROM $table_message WHERE user_receiver_id=".Database::escape_string($user_id)." AND id='".Database::escape_string($id)."'";
  237. $result = api_sql_query($query,__FILE__,__LINE__);
  238. $num = Database::num_rows($result);
  239. if ($num>0)
  240. return true;
  241. else
  242. return false;
  243. }
  244. /**
  245. * Gets information about messages sent
  246. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  247. * @param integer
  248. * @param integer
  249. * @param string
  250. * @return array
  251. */
  252. public static function get_message_data_sent ($from, $number_of_items, $column, $direction) {
  253. global $charset;
  254. $table_message = Database::get_main_table(TABLE_MESSAGE);
  255. $request=api_is_xml_http_request();
  256. $sql_query = "SELECT id as col0, user_sender_id as col1, title as col2, send_date as col3, user_receiver_id as col4, msg_status as col5 FROM $table_message " .
  257. "WHERE user_sender_id=".api_get_user_id()." AND msg_status=4 " .
  258. "ORDER BY col$column $direction LIMIT $from,$number_of_items";
  259. $sql_result = api_sql_query($sql_query,__FILE__,__LINE__);
  260. $i = 0;
  261. $message_list = array ();
  262. while ($result = Database::fetch_row($sql_result)) {
  263. if ($request===true) {
  264. $message[0] = '<input type="checkbox" value='.$result[0].' name="out[]">';
  265. } else {
  266. $message[0] = ($result[0]);
  267. }
  268. if ($request===true) {
  269. if ($result[5]==4)
  270. {
  271. $message[1] = Display::return_icon('mail_send.png',get_lang('MessageSent'));//Message Sent
  272. }
  273. $message[2] = '<a onclick="show_sent_message('.$result[0].')" href="javascript:void(0)">'.GetFullUserName($result[4]).'</a>';
  274. $message[3] = '<a onclick="show_sent_message('.$result[0].')" href="javascript:void(0)">'.str_replace("\\","",$result[2]).'</a>';
  275. $message[5] = '&nbsp;&nbsp;<a onclick="delete_one_message_outbox('.$result[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  276. } else {
  277. $message[2] = '<a onclick="show_sent_message ('.$result[0].')" href="#../messages/view_message.php?id_send='.$result[0].'">'.GetFullUserName($result[4]).'</a>';
  278. $message[3] = '<a onclick="show_sent_message ('.$result[0].')" href="#../messages/view_message.php?id_send='.$result[0].'">'.$result[2].'</a>';
  279. $message[5] = '<a href="new_message.php?re_id='.$result[0].'">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a>'.
  280. '&nbsp;&nbsp;<a href="outbox.php?action=deleteone&id='.$result[0].'" onclick="javascript:if(!confirm('."'".addslashes(api_htmlentities(get_lang('ConfirmDeleteMessage')))."'".')) return false;">'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  281. }
  282. $message[4] = $result[3]; //date stays the same
  283. foreach($message as $key => $value) {
  284. $message[$key] = api_xml_http_response_encode($value);
  285. }
  286. $message_list[] = $message;
  287. $i++;
  288. }
  289. return $message_list;
  290. }
  291. /**
  292. * Gets information about number messages sent
  293. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  294. * @param void
  295. * @return integer
  296. */
  297. public static function get_number_of_messages_sent () {
  298. $table_message = Database::get_main_table(TABLE_MESSAGE);
  299. $sql_query = "SELECT COUNT(*) as number_messages FROM $table_message WHERE msg_status=4 AND user_sender_id=".api_get_user_id();
  300. $sql_result = api_sql_query($sql_query,__FILE__,__LINE__);
  301. $result = Database::fetch_array($sql_result);
  302. return $result['number_messages'];
  303. }
  304. public static function show_message_box () {
  305. global $charset;
  306. $table_message = Database::get_main_table(TABLE_MESSAGE);
  307. if (isset($_GET['id_send'])) {
  308. $query = "SELECT * FROM $table_message WHERE user_sender_id=".api_get_user_id()." AND id=".$_GET['id_send']." AND msg_status=4;";
  309. $result = api_sql_query($query,__FILE__,__LINE__);
  310. $path='outbox.php';
  311. } else {
  312. $query = "UPDATE $table_message SET msg_status = '0' WHERE user_receiver_id=".api_get_user_id()." AND id='".Database::escape_string($_GET['id'])."';";
  313. $result = api_sql_query($query,__FILE__,__LINE__);
  314. $query = "SELECT * FROM $table_message WHERE msg_status<>4 AND user_receiver_id=".api_get_user_id()." AND id='".Database::escape_string($_GET['id'])."';";
  315. $result = api_sql_query($query,__FILE__,__LINE__);
  316. $path='inbox.php';
  317. }
  318. $row = Database::fetch_array($result);
  319. $user_con = self::users_connected_by_id();
  320. $band=0;
  321. $reply='';
  322. for ($i=0;$i<count($user_con);$i++)
  323. if ($row[1]==$user_con[$i])
  324. $band=1;
  325. if ($band==1 && !isset($_GET['id_send'])) {
  326. $reply = '<a onclick="reply_to_messages(\'show\','.$_GET['id'].',\'\')" href="javascript:void(0)">'.Display::return_icon('message_reply.png',api_xml_http_response_encode(get_lang('ReplyToMessage'))).api_xml_http_response_encode(get_lang('ReplyToMessage')).'</a>';
  327. }
  328. echo '<div class=actions>';
  329. echo '<a onclick="close_div_show(\'div_content_messages\')" href="javascript:void(0)">'.Display::return_icon('folder_up.gif',api_xml_http_response_encode(get_lang('BackToInbox'))).api_xml_http_response_encode(get_lang('BackToInbox')).'</a>';
  330. echo $reply;
  331. echo '<a onclick="delete_one_message('.$row[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',api_xml_http_response_encode(get_lang('DeleteMessage'))).''.api_xml_http_response_encode(get_lang('DeleteMessage')).'</a>';
  332. echo '</div><br />';
  333. echo '
  334. <table class="message_view_table" >
  335. <TR>
  336. <TD width=10>&nbsp; </TD>
  337. <TD vAlign=top width="100%">
  338. <TABLE>
  339. <TR>
  340. <TD width="100%">
  341. <TR> <h1>'.str_replace("\\","",api_xml_http_response_encode($row[5])).'</h1></TR>
  342. </TD>
  343. <TR>
  344. <TD>'.api_xml_http_response_encode(get_lang('From').'&nbsp;<b>'.GetFullUserName($row[1]).'</b> '.api_strtolower(get_lang('To')).'&nbsp; <b>'.GetFullUserName($row[2])).'</b> </TD>
  345. </TR>
  346. <TR>
  347. <TD >'.api_xml_http_response_encode(get_lang('Date').'&nbsp; '.$row[4]).'</TD>
  348. </TR>
  349. </TR>
  350. </TABLE>
  351. <br />
  352. <TABLE height=209 width="100%" bgColor=#ffffff>
  353. <TBODY>
  354. <TR>
  355. <TD vAlign=top>'.str_replace("\\","",api_xml_http_response_encode($row[6])).'</TD>
  356. </TR>
  357. </TBODY>
  358. </TABLE>
  359. <DIV class=HT style="PADDING-BOTTOM: 5px"> </DIV></TD>
  360. <TD width=10>&nbsp;</TD>
  361. </TR>
  362. </TABLE>';
  363. }
  364. public static function show_message_box_sent () {
  365. global $charset;
  366. $table_message = Database::get_main_table(TABLE_MESSAGE);
  367. $query = "SELECT * FROM $table_message WHERE user_sender_id=".api_get_user_id()." AND id=".$_GET['id_send']." AND msg_status=4;";
  368. $result = api_sql_query($query,__FILE__,__LINE__);
  369. $path='outbox.php';
  370. $row = Database::fetch_array($result);
  371. $user_con = self::users_connected_by_id();
  372. $band=0;
  373. $reply='';
  374. for ($i=0;$i<count($user_con);$i++)
  375. if ($row[1]==$user_con[$i])
  376. $band=1;
  377. echo '<div class=actions>';
  378. echo '<a onclick="close_and_open_outbox()" href="javascript:void(0)">'.Display::return_icon('folder_up.gif',api_xml_http_response_encode(get_lang('BackToOutbox'))).api_xml_http_response_encode(get_lang('BackToOutbox')).'</a>';
  379. echo '<a onclick="delete_one_message_outbox('.$row[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',api_xml_http_response_encode(get_lang('DeleteMessage'))).api_xml_http_response_encode(get_lang('DeleteMessage')).'</a>';
  380. echo '</div><br />';
  381. echo '
  382. <table class="message_view_table" >
  383. <TR>
  384. <TD width=10>&nbsp; </TD>
  385. <TD vAlign=top width="100%">
  386. <TABLE>
  387. <TR>
  388. <TD width="100%">
  389. <TR> <h1>'.str_replace("\\","",api_xml_http_response_encode($row[5])).'</h1></TR>
  390. </TD>
  391. <TR>
  392. <TD>'.api_xml_http_response_encode(get_lang('From').'&nbsp;<b>'.GetFullUserName($row[1]).'</b> '.api_strtolower(get_lang('To')).'&nbsp; <b>'.GetFullUserName($row[2])).'</b> </TD>
  393. </TR>
  394. <TR>
  395. <TD >'.api_xml_http_response_encode(get_lang('Date').'&nbsp; '.$row[4]).'</TD>
  396. </TR>
  397. </TR>
  398. </TABLE>
  399. <br />
  400. <TABLE height=209 width="100%" bgColor=#ffffff>
  401. <TBODY>
  402. <TR>
  403. <TD vAlign=top>'.str_replace("\\","",api_xml_http_response_encode($row[6])).'</TD>
  404. </TR>
  405. </TBODY>
  406. </TABLE>
  407. <DIV class=HT style="PADDING-BOTTOM: 5px"> </DIV></TD>
  408. <TD width=10>&nbsp;</TD>
  409. </TR>
  410. </TABLE>';
  411. }
  412. /**
  413. * get user id by user email
  414. * @param string $user_email
  415. * @return int user id
  416. */
  417. public static function get_user_id_by_email ($user_email) {
  418. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  419. $sql='SELECT user_id FROM '.$tbl_user.' WHERE email="'.Database::escape_string($user_email).'";';
  420. $rs=api_sql_query($sql,__FILE__,__LINE__);
  421. $row=Database::fetch_array($rs,'ASSOC');
  422. if (isset($row['user_id'])) {
  423. return $row['user_id'];
  424. } else {
  425. return null;
  426. }
  427. }
  428. }
  429. ?>