message.lib.php 55 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315
  1. <?php
  2. /* For licensing terms, see /dokeos_license.txt */
  3. /**
  4. ==============================================================================
  5. * This class provides methods for messages management.
  6. * Include/require it in your code to use its features.
  7. *
  8. * @package dokeos.library
  9. ==============================================================================
  10. */
  11. require_once api_get_path(LIBRARY_PATH).'online.inc.php';
  12. require_once api_get_path(LIBRARY_PATH).'fileUpload.lib.php';
  13. require_once api_get_path(LIBRARY_PATH).'fileDisplay.lib.php';
  14. require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php';
  15. require_once api_get_path(LIBRARY_PATH).'group_portal_manager.lib.php';
  16. /*
  17. * @todo use constants!
  18. */
  19. define('MESSAGE_STATUS_NEW', '0');
  20. define('MESSAGE_STATUS_UNREAD', '1');
  21. //2 ??
  22. define('MESSAGE_STATUS_DELETED', '3');
  23. define('MESSAGE_STATUS_OUTBOX', '4');
  24. define('MESSAGE_STATUS_INVITATION_PENDING', '5');
  25. define('MESSAGE_STATUS_INVITATION_ACCEPTED','6');
  26. define('MESSAGE_STATUS_INVITATION_DENIED', '7');
  27. class MessageManager
  28. {
  29. public static function get_online_user_list($current_user_id) {
  30. $min=30;
  31. global $_configuration;
  32. $userlist = WhoIsOnline($current_user_id,$_configuration['statistics_database'],$min);
  33. foreach($userlist as $row) {
  34. $receiver_id = $row[0];
  35. $online_user_list[$receiver_id] = GetFullUserName($receiver_id).($current_user_id==$receiver_id?("&nbsp;(".get_lang('Myself').")"):(""));
  36. }
  37. return $online_user_list;
  38. }
  39. /**
  40. * Displays info stating that the message is sent successfully.
  41. */
  42. public static function display_success_message($uid) {
  43. global $charset;
  44. if ($_SESSION['social_exist']===true) {
  45. $redirect="#remote-tab-2";
  46. if (api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool')=='true') {
  47. $success=get_lang('MessageSentTo').
  48. "&nbsp;<b>".
  49. GetFullUserName($uid).
  50. "</b>";
  51. }else {
  52. $success=get_lang('MessageSentTo').
  53. "&nbsp;<b>".
  54. GetFullUserName($uid).
  55. "</b>";
  56. }
  57. } else {
  58. $success=get_lang('MessageSentTo').
  59. "&nbsp;<b>".
  60. GetFullUserName($uid).
  61. "</b>";
  62. }
  63. Display::display_confirmation_message(api_xml_http_response_encode($success), false);
  64. }
  65. /**
  66. * Displays the wysiwyg html editor.
  67. */
  68. public static function display_html_editor_area($name, $resp) {
  69. api_disp_html_area($name, get_lang('TypeYourMessage'), '', '', null, array('ToolbarSet' => 'Messages', 'Width' => '95%', 'Height' => '250'));
  70. }
  71. /**
  72. * Get the new messages for the current user from the database.
  73. */
  74. public static function get_new_messages() {
  75. $table_message = Database::get_main_table(TABLE_MESSAGE);
  76. if (!api_get_user_id()) {
  77. return false;
  78. }
  79. $i=0;
  80. $query = "SELECT * FROM $table_message WHERE user_receiver_id=".api_get_user_id()." AND msg_status=".MESSAGE_STATUS_UNREAD;
  81. $result = Database::query($query,__FILE__,__LINE__);
  82. $i = Database::num_rows($result);
  83. return $i;
  84. }
  85. /**
  86. * Get the list of user_ids of users who are online.
  87. */
  88. public static function users_connected_by_id() {
  89. global $_configuration, $_user;
  90. $minute=30;
  91. $user_connect = WhoIsOnline($_user['user_id'],$_configuration['statistics_database'],$minute);
  92. for ($i=0; $i<count($user_connect); $i++) {
  93. $user_id_list[$i]=$user_connect[$i][0];
  94. }
  95. return $user_id_list;
  96. }
  97. /**
  98. * Gets the total number of messages, used for the inbox sortable table
  99. */
  100. public static function get_number_of_messages () {
  101. $table_message = Database::get_main_table(TABLE_MESSAGE);
  102. $sql_query = "SELECT COUNT(*) as number_messages FROM $table_message WHERE msg_status IN (0,1) AND user_receiver_id=".api_get_user_id();
  103. $sql_result = Database::query($sql_query,__FILE__,__LINE__);
  104. $result = Database::fetch_array($sql_result);
  105. return $result['number_messages'];
  106. }
  107. /**
  108. * Gets information about some messages, used for the inbox sortable table
  109. * @param int $from
  110. * @param int $number_of_items
  111. * @param string $direction
  112. */
  113. public static function get_message_data ($from, $number_of_items, $column, $direction) {
  114. global $charset;
  115. $from = intval($from);
  116. $number_of_items = intval($number_of_items);
  117. $column = intval($column);
  118. if (!in_array($direction, array('ASC', 'DESC')))
  119. $direction = 'ASC';
  120. $table_message = Database::get_main_table(TABLE_MESSAGE);
  121. $request=api_is_xml_http_request();
  122. $sql_query = "SELECT id as col0, user_sender_id as col1, title as col2, send_date as col3, msg_status as col4 FROM $table_message " .
  123. "WHERE user_receiver_id=".api_get_user_id()." AND msg_status IN (0,1)" .
  124. "ORDER BY send_date desc, col$column $direction LIMIT $from,$number_of_items";
  125. $sql_result = Database::query($sql_query,__FILE__,__LINE__);
  126. $i = 0;
  127. $message_list = array ();
  128. while ($result = Database::fetch_row($sql_result)) {
  129. if ($request===true) {
  130. $message[0] = '<input type="checkbox" value='.$result[0].' name="id[]">';
  131. } else {
  132. $message[0] = ($result[0]);
  133. }
  134. if ($request===true) {
  135. if($result[4]==0) {
  136. $message[1] = Display::return_icon('mail_open.png',get_lang('AlreadyReadMessage'));//Message already read
  137. } else {
  138. $message[1] = Display::return_icon('mail.png',get_lang('UnReadMessage'));//Message without reading
  139. }
  140. $message[2] = '<a onclick="get_action_url_and_show_messages(1,'.$result[0].')" href="javascript:void(0)">'.GetFullUserName($result[1]).'</a>';
  141. $message[3] = '<a onclick="get_action_url_and_show_messages(1,'.$result[0].')" href="javascript:void(0)">'.str_replace("\\","",$result[2]).'</a>';
  142. $message[5] = '<a onclick="reply_to_messages(\'show\','.$result[0].',\'\')" href="javascript:void(0)">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a>'.
  143. '&nbsp;&nbsp;<a onclick="delete_one_message('.$result[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  144. } else {
  145. if($result[4]==1) {
  146. $class = 'class = "unread"';
  147. } else {
  148. $class = 'class = "read"';
  149. }
  150. $link = '';
  151. if ($_GET['f']=='social') {
  152. $link = '&f=social';
  153. }
  154. $message[2] = '<a '.$class.' href="view_message.php?id='.$result[0].$link.'">'.GetFullUserName(($result[1])).'</a>';;
  155. $message[3] = '<a '.$class.' href="view_message.php?id='.$result[0].$link.'">'.$result[2].'</a>';
  156. $message[5] = '<a href="new_message.php?re_id='.$result[0].'&f='.Security::remove_XSS($_GET['f']).'">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a>'.
  157. '&nbsp;&nbsp;<a delete_one_message('.$result[0].') href="inbox.php?action=deleteone&id='.$result[0].'&f='.Security::remove_XSS($_GET['f']).'">'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  158. }
  159. $message[4] = ($result[3]); //date stays the same
  160. foreach($message as $key => $value) {
  161. $message[$key] = api_xml_http_response_encode($value);
  162. }
  163. $message_list[] = $message;
  164. $i++;
  165. }
  166. return $message_list;
  167. }
  168. /**
  169. * save message for social network
  170. * @param int receiver user id
  171. * @param string subject
  172. * @param string content
  173. * @param array attachment files array($_FILES) (optional)
  174. * @param array comments about attachment files (optional)
  175. * @param int group id (optional)
  176. * @param int parent id (optional)
  177. * @param int message id for updating the message (optional)
  178. * @return bool
  179. */
  180. public static function send_message ($receiver_user_id, $subject, $content, $file_attachments = array(), $file_comments = array(), $group_id = 0, $parent_id = 0, $edit_message_id = 0) {
  181. global $charset;
  182. $table_message = Database::get_main_table(TABLE_MESSAGE);
  183. $group_id = intval($group_id);
  184. $receiver_user_id = intval($receiver_user_id);
  185. $parent_id = intval($parent_id);
  186. $user_sender_id = api_get_user_id();
  187. $total_filesize = 0;
  188. if (is_array($file_attachments)) {
  189. foreach ($file_attachments as $file_attach) {
  190. $total_filesize += $file_attach['size'];
  191. }
  192. }
  193. // validating fields
  194. if (empty($subject)) {
  195. return get_lang('YouShouldWriteASubject');
  196. } else if ($total_filesize > intval(api_get_setting('message_max_upload_filesize'))) {
  197. return sprintf(get_lang("FilesSizeExceedsX"),format_file_size(api_get_setting('message_max_upload_filesize')));
  198. }
  199. if (!empty($receiver_user_id) || !empty($group_id)) {
  200. // message for user friend
  201. $subject = api_convert_encoding($subject,$charset);
  202. $subject = Database::escape_string($subject);
  203. $content = api_convert_encoding($content,$charset);
  204. $content = Database::escape_string($content);
  205. //useless query
  206. //echo $sql = "SELECT COUNT(*) as count FROM $table_message WHERE user_sender_id = ".$user_sender_id." AND user_receiver_id='$receiver_user_id' AND title = '$title' AND content ='$content' AND group_id = '$group_id' AND parent_id = '$parent_id'";
  207. //$res_exist = Database::query($sql,__FILE__,__LINE__);
  208. //$row_exist = Database::fetch_array($res_exist,'ASSOC');
  209. //We should ALWAYS sent emails
  210. //if ($row_exist['count'] == 0) {
  211. //message in inbox for user friend
  212. if ($edit_message_id) {
  213. $query = " UPDATE $table_message SET update_date = '".date('Y-m-d H:i:s')."', title = '$subject', content = '$content' WHERE id = '$edit_message_id' ";
  214. $result = Database::query($query,__FILE__,__LINE__);
  215. $inbox_last_id = $edit_message_id;
  216. } else {
  217. $query = "INSERT INTO $table_message(user_sender_id, user_receiver_id, msg_status, send_date, title, content, group_id, parent_id, update_date ) ".
  218. " VALUES ('$user_sender_id', '$receiver_user_id', '1', '".date('Y-m-d H:i:s')."','$subject','$content','$group_id','$parent_id', '".date('Y-m-d H:i:s')."')";
  219. $result = Database::query($query,__FILE__,__LINE__);
  220. $inbox_last_id = Database::insert_id();
  221. }
  222. // save attachment file for inbox messages
  223. if (is_array($file_attachments)) {
  224. $i = 0;
  225. foreach ($file_attachments as $file_attach) {
  226. if ($file_attach['error'] == 0) {
  227. self::save_message_attachment_file($file_attach,$file_comments[$i],$inbox_last_id,null,$receiver_user_id,$group_id);
  228. }
  229. $i++;
  230. }
  231. }
  232. if (empty($group_id)) {
  233. //message in outbox for user friend or group
  234. $sql = "INSERT INTO $table_message(user_sender_id, user_receiver_id, msg_status, send_date, title, content, group_id, parent_id, update_date ) ".
  235. " VALUES ('$user_sender_id', '$receiver_user_id', '4', '".date('Y-m-d H:i:s')."','$subject','$content', '$group_id', '$parent_id', '".date('Y-m-d H:i:s')."')";
  236. $rs = Database::query($sql,__FILE__,__LINE__);
  237. $outbox_last_id = Database::insert_id();
  238. // save attachment file for outbox messages
  239. if (is_array($file_attachments)) {
  240. $o = 0;
  241. foreach ($file_attachments as $file_attach) {
  242. if ($file_attach['error'] == 0) {
  243. self::save_message_attachment_file($file_attach,$file_comments[$o],$outbox_last_id,$user_sender_id);
  244. }
  245. $o++;
  246. }
  247. }
  248. }
  249. return $result;
  250. }
  251. return false;
  252. }
  253. /**
  254. * Update parent ids for other receiver user from current message in groups
  255. * @author Christian Fasanando Flores
  256. * @param int parent id
  257. * @param int receiver user id
  258. * @param int message id
  259. * @return void
  260. */
  261. public static function update_parent_ids_from_reply($parent_id,$receiver_user_id,$message_id) {
  262. $table_message = Database::get_main_table(TABLE_MESSAGE);
  263. $parent_id = intval($parent_id);
  264. $receiver_user_id = intval($receiver_user_id);
  265. $message_id = intval($message_id);
  266. // first get data from message id (parent)
  267. $sql_message= "SELECT * FROM $table_message WHERE id = '$parent_id'";
  268. $rs_message = Database::query($sql_message,__FILE__,__LINE__);
  269. $row_message= Database::fetch_array($rs_message);
  270. // get message id from data found early for other receiver user
  271. $sql_msg_id = " SELECT id FROM $table_message WHERE user_sender_id ='{$row_message[user_sender_id]}'
  272. AND title='{$row_message[title]}' AND content='{$row_message[content]}' AND group_id='{$row_message[group_id]}' AND user_receiver_id='$receiver_user_id'";
  273. $rs_msg_id = Database::query($sql_msg_id,__FILE__,__LINE__);
  274. $row = Database::fetch_array($rs_msg_id);
  275. // update parent_id for other user receiver
  276. $sql_upd = "UPDATE $table_message SET parent_id = '{$row[id]}' WHERE id = '$message_id'";
  277. Database::query($sql_upd,__FILE__,__LINE__);
  278. }
  279. public static function delete_message_by_user_receiver ($user_receiver_id,$id) {
  280. $table_message = Database::get_main_table(TABLE_MESSAGE);
  281. if ($id != strval(intval($id))) return false;
  282. $user_receiver_id = intval($user_receiver_id);
  283. $id = Database::escape_string($id);
  284. $sql="SELECT * FROM $table_message WHERE id=".$id." AND msg_status<>4;";
  285. $rs=Database::query($sql,__FILE__,__LINE__);
  286. if (Database::num_rows($rs) > 0 ) {
  287. $row = Database::fetch_array($rs);
  288. // delete attachment file
  289. $res = self::delete_message_attachment_file($id,$user_receiver_id);
  290. // delete message
  291. $query = "UPDATE $table_message SET msg_status=3 WHERE user_receiver_id=".$user_receiver_id." AND id=".$id;
  292. //$query = "DELETE FROM $table_message WHERE user_receiver_id=".Database::escape_string($user_receiver_id)." AND id=".$id;
  293. $result = Database::query($query,__FILE__,__LINE__);
  294. return $result;
  295. } else {
  296. return false;
  297. }
  298. }
  299. /**
  300. * Set status deleted
  301. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  302. * @param integer
  303. * @param integer
  304. * @return array
  305. */
  306. public static function delete_message_by_user_sender ($user_sender_id,$id) {
  307. if ($id != strval(intval($id))) return false;
  308. $table_message = Database::get_main_table(TABLE_MESSAGE);
  309. $id = intval($id);
  310. $user_sender_id = intval($user_sender_id);
  311. $sql="SELECT * FROM $table_message WHERE id='$id'";
  312. $rs=Database::query($sql,__FILE__,__LINE__);
  313. if (Database::num_rows($rs) > 0 ) {
  314. $row = Database::fetch_array($rs);
  315. // delete attachment file
  316. $res = self::delete_message_attachment_file($id,$user_sender_id);
  317. // delete message
  318. $query = "UPDATE $table_message SET msg_status=3 WHERE user_sender_id='$user_sender_id' AND id='$id'";
  319. //$query = "DELETE FROM $table_message WHERE user_sender_id='$user_sender_id' AND id='$id'";
  320. $result = Database::query($query,__FILE__,__LINE__);
  321. return $result;
  322. }
  323. return false;
  324. }
  325. /**
  326. * Saves a message attachment files
  327. * @param array $_FILES['name']
  328. * @param string a comment about the uploaded file
  329. * @param int message id
  330. * @param int receiver user id (optional)
  331. * @param int sender user id (optional)
  332. * @param int group id (optional)
  333. * @return void
  334. */
  335. public static function save_message_attachment_file($file_attach,$file_comment,$message_id,$receiver_user_id=0,$sender_user_id=0,$group_id=0) {
  336. $tbl_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  337. // Try to add an extension to the file if it hasn't one
  338. $new_file_name = add_ext_on_mime(stripslashes($file_attach['name']), $file_attach['type']);
  339. // user's file name
  340. $file_name =$file_attach['name'];
  341. if (!filter_extension($new_file_name)) {
  342. Display :: display_error_message(get_lang('UplUnableToSaveFileFilteredExtension'));
  343. } else {
  344. $new_file_name = uniqid('');
  345. $message_user_id = '';
  346. if (!empty($receiver_user_id)) {
  347. $message_user_id = $receiver_user_id;
  348. } else {
  349. $message_user_id = $sender_user_id;
  350. }
  351. // User-reserved directory where photos have to be placed.
  352. if (!empty($group_id)) {
  353. $path_user_info = GroupPortalManager::get_group_picture_path_by_id($group_id, 'system', true);
  354. } else {
  355. $path_user_info = UserManager::get_user_picture_path_by_id($message_user_id, 'system', true);
  356. }
  357. $path_message_attach = $path_user_info['dir'].'message_attachments/';
  358. // If this directory does not exist - we create it.
  359. if (!file_exists($path_message_attach)) {
  360. $perm = api_get_setting('permissions_for_new_directories');
  361. $perm = octdec(!empty($perm) ? $perm : '0770');
  362. @mkdir($path_message_attach, $perm, true);
  363. }
  364. $new_path=$path_message_attach.$new_file_name;
  365. if (is_uploaded_file($file_attach['tmp_name'])) {
  366. $result= @copy($file_attach['tmp_name'], $new_path);
  367. }
  368. $safe_file_comment= Database::escape_string($file_comment);
  369. $safe_file_name = Database::escape_string($file_name);
  370. $safe_new_file_name = Database::escape_string($new_file_name);
  371. // Storing the attachments if any
  372. $sql="INSERT INTO $tbl_message_attach(filename,comment, path,message_id,size)
  373. VALUES ( '$safe_file_name', '$safe_file_comment', '$safe_new_file_name' , '$message_id', '".$file_attach['size']."' )";
  374. $result=Database::query($sql, __LINE__, __FILE__);
  375. }
  376. }
  377. /**
  378. * Delete message attachment files (logically updating the row with a suffix _DELETE_id)
  379. * @param int message id
  380. * @param int message user id (receiver user id or sender user id)
  381. * @param int group id (optional)
  382. * @return void
  383. */
  384. public static function delete_message_attachment_file($message_id,$message_uid,$group_id=0) {
  385. $message_id = intval($message_id);
  386. $message_uid = intval($message_uid);
  387. $table_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  388. $sql= "SELECT * FROM $table_message_attach WHERE message_id = '$message_id'";
  389. $rs = Database::query($sql,__FILE__,__LINE__);
  390. $new_paths = array();
  391. while ($row = Database::fetch_array($rs)) {
  392. $path = $row['path'];
  393. $attach_id = $row['id'];
  394. $new_path = $path.'_DELETED_'.$attach_id;
  395. if (!empty($group_id)) {
  396. $path_user_info = GroupPortalManager::get_group_picture_path_by_id($group_id, 'system', true);
  397. } else {
  398. $path_user_info = UserManager::get_user_picture_path_by_id($message_uid, 'system', true);
  399. }
  400. $path_message_attach = $path_user_info['dir'].'message_attachments/';
  401. if (is_file($path_message_attach.$path)) {
  402. if(rename($path_message_attach.$path, $path_message_attach.$new_path)) {
  403. $sql_upd = "UPDATE $table_message_attach set path='$new_path' WHERE id ='$attach_id'";
  404. $rs_upd = Database::query($sql_upd,__FILE__,__LINE__);
  405. }
  406. }
  407. }
  408. }
  409. /**
  410. * update messages by user id and message id
  411. * @param int user id
  412. * @param int message id
  413. * @return resource
  414. */
  415. public static function update_message ($user_id, $message_id) {
  416. if ($message_id != strval(intval($message_id)) || $user_id != strval(intval($user_id))) return false;
  417. $table_message = Database::get_main_table(TABLE_MESSAGE);
  418. $query = "UPDATE $table_message SET msg_status = '0' WHERE msg_status<>4 AND user_receiver_id=".intval($user_id)." AND id='".intval($message_id)."'";
  419. $result = Database::query($query,__FILE__,__LINE__);
  420. }
  421. /**
  422. * get messages by user id and message id
  423. * @param int user id
  424. * @param int message id
  425. * @return array
  426. */
  427. public static function get_message_by_user ($user_id,$message_id) {
  428. if ($message_id != strval(intval($message_id)) || $user_id != strval(intval($user_id))) return false;
  429. $table_message = Database::get_main_table(TABLE_MESSAGE);
  430. $query = "SELECT * FROM $table_message WHERE user_receiver_id=".intval($user_id)." AND id='".intval($message_id)."'";
  431. $result = Database::query($query,__FILE__,__LINE__);
  432. return $row = Database::fetch_array($result);
  433. }
  434. /**
  435. * get messages by group id
  436. * @param int group id
  437. * @return array
  438. */
  439. public static function get_messages_by_group($group_id) {
  440. if ($group_id != strval(intval($group_id))) return false;
  441. $table_message = Database::get_main_table(TABLE_MESSAGE);
  442. $current_uid = api_get_user_id();
  443. $group_id = intval($group_id);
  444. $query = "SELECT * FROM $table_message WHERE group_id=$group_id AND msg_status <> ".MESSAGE_STATUS_OUTBOX." ORDER BY id";
  445. $rs = Database::query($query,__FILE__,__LINE__);
  446. $data = array();
  447. if (Database::num_rows($rs) > 0) {
  448. while ($row = Database::fetch_array($rs)) {
  449. $data[] = $row;
  450. }
  451. }
  452. return $data;
  453. }
  454. /**
  455. * get messages by parent id optionally with limit
  456. * @param int parent id
  457. * @param int group id (optional)
  458. * @param int offset (optional)
  459. * @param int limit (optional)
  460. * @return array
  461. */
  462. public static function get_messages_by_parent($parent_id,$group_id = '',$offset = 0,$limit = 0) {
  463. if ($parent_id != strval(intval($parent_id))) return false;
  464. $table_message = Database::get_main_table(TABLE_MESSAGE);
  465. $current_uid = api_get_user_id();
  466. $parent_id = intval($parent_id);
  467. $condition_group_id = "";
  468. if ($group_id !== '') {
  469. $group_id = intval($group_id);
  470. $condition_group_id = " AND group_id = '$group_id' ";
  471. }
  472. $condition_limit = "";
  473. if ($offset && $limit) {
  474. $offset = ($offset - 1) * $limit;
  475. $condition_limit = " LIMIT $offset,$limit ";
  476. }
  477. $query = "SELECT * FROM $table_message WHERE parent_id='$parent_id' AND msg_status <> ".MESSAGE_STATUS_OUTBOX." $condition_group_id ORDER BY send_date DESC $condition_limit ";
  478. $rs = Database::query($query,__FILE__,__LINE__);
  479. $data = array();
  480. if (Database::num_rows($rs) > 0) {
  481. while ($row = Database::fetch_array($rs)) {
  482. $data[$row['id']] = $row;
  483. }
  484. }
  485. return $data;
  486. }
  487. /**
  488. * Gets information about if exist messages
  489. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  490. * @param integer
  491. * @param integer
  492. * @return boolean
  493. */
  494. public static function exist_message ($user_id, $id) {
  495. if ($id != strval(intval($id)) || $user_id != strval(intval($user_id))) return false;
  496. $table_message = Database::get_main_table(TABLE_MESSAGE);
  497. $query = "SELECT id FROM $table_message WHERE user_receiver_id=".Database::escape_string($user_id)." AND id='".Database::escape_string($id)."'";
  498. $result = Database::query($query,__FILE__,__LINE__);
  499. $num = Database::num_rows($result);
  500. if ($num>0)
  501. return true;
  502. else
  503. return false;
  504. }
  505. /**
  506. * Gets information about messages sent
  507. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  508. * @param integer
  509. * @param integer
  510. * @param string
  511. * @return array
  512. */
  513. public static function get_message_data_sent ($from, $number_of_items, $column, $direction) {
  514. global $charset;
  515. $from = intval($from);
  516. $number_of_items = intval($number_of_items);
  517. $column = intval($column);
  518. if (!in_array($direction, array('ASC', 'DESC')))
  519. $direction = 'ASC';
  520. $table_message = Database::get_main_table(TABLE_MESSAGE);
  521. $request=api_is_xml_http_request();
  522. $sql_query = "SELECT id as col0, user_sender_id as col1, title as col2, send_date as col3, user_receiver_id as col4, msg_status as col5 FROM $table_message " .
  523. "WHERE user_sender_id=".api_get_user_id()." AND msg_status=".MESSAGE_STATUS_OUTBOX." " .
  524. "ORDER BY col$column $direction LIMIT $from,$number_of_items";
  525. $sql_result = Database::query($sql_query,__FILE__,__LINE__);
  526. $i = 0;
  527. $message_list = array ();
  528. while ($result = Database::fetch_row($sql_result)) {
  529. if ($request===true) {
  530. $message[0] = '<input type="checkbox" value='.$result[0].' name="out[]">';
  531. } else {
  532. $message[0] = ($result[0]);
  533. }
  534. $class = 'class = "read"';
  535. if ($request===true) {
  536. if ($result[5]==4) {
  537. $message[1] = Display::return_icon('mail_send.png',get_lang('MessageSent'));//Message Sent
  538. }
  539. $message[2] = '<a onclick="show_sent_message('.$result[0].')" href="javascript:void(0)">'.GetFullUserName($result[4]).'</a>';
  540. $message[3] = '<a onclick="show_sent_message('.$result[0].')" href="javascript:void(0)">'.str_replace("\\","",$result[2]).'</a>';
  541. $message[5] = '&nbsp;&nbsp;<a onclick="delete_one_message_outbox('.$result[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  542. } else {
  543. $link = '';
  544. if ($_GET['f']=='social') {
  545. $link = '&f=social';
  546. }
  547. $message[2] = '<a '.$class.' onclick="show_sent_message ('.$result[0].')" href="../messages/view_message.php?id_send='.$result[0].$link.'">'.GetFullUserName($result[4]).'</a>';
  548. $message[3] = '<a '.$class.' onclick="show_sent_message ('.$result[0].')" href="../messages/view_message.php?id_send='.$result[0].$link.'">'.$result[2].'</a>';
  549. $message[5] = '<a href="outbox.php?action=deleteone&id='.$result[0].'&f='.Security::remove_XSS($_GET['f']).'" onclick="javascript:if(!confirm('."'".addslashes(api_htmlentities(get_lang('ConfirmDeleteMessage')))."'".')) return false;">'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  550. }
  551. $message[4] = $result[3]; //date stays the same
  552. foreach($message as $key => $value) {
  553. $message[$key] = $value;
  554. }
  555. $message_list[] = $message;
  556. $i++;
  557. }
  558. return $message_list;
  559. }
  560. /**
  561. * Gets information about number messages sent
  562. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  563. * @param void
  564. * @return integer
  565. */
  566. public static function get_number_of_messages_sent () {
  567. $table_message = Database::get_main_table(TABLE_MESSAGE);
  568. $sql_query = "SELECT COUNT(*) as number_messages FROM $table_message WHERE msg_status=".MESSAGE_STATUS_OUTBOX." AND user_sender_id=".api_get_user_id();
  569. $sql_result = Database::query($sql_query,__FILE__,__LINE__);
  570. $result = Database::fetch_array($sql_result);
  571. return $result['number_messages'];
  572. }
  573. /**
  574. * display message box in the inbox
  575. * @param int the message id
  576. * @param string inbox or outbox strings are available
  577. * @return string html with the message content
  578. */
  579. public static function show_message_box($message_id, $source = 'inbox') {
  580. $table_message = Database::get_main_table(TABLE_MESSAGE);
  581. $tbl_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  582. $message_id = intval($message_id);
  583. if ($source == 'outbox') {
  584. if (isset($message_id) && is_numeric($message_id)) {
  585. $query = "SELECT * FROM $table_message WHERE user_sender_id=".api_get_user_id()." AND id=".$message_id." AND msg_status=4;";
  586. $result = Database::query($query,__FILE__,__LINE__);
  587. $path = 'outbox.php';
  588. }
  589. } else {
  590. if (is_numeric($message_id) && !empty($message_id)) {
  591. $query = "UPDATE $table_message SET msg_status = '".MESSAGE_STATUS_NEW."' WHERE user_receiver_id=".api_get_user_id()." AND id='".$message_id."';";
  592. $result = Database::query($query,__FILE__,__LINE__);
  593. $query = "SELECT * FROM $table_message WHERE msg_status<>4 AND user_receiver_id=".api_get_user_id()." AND id='".$message_id."';";
  594. $result = Database::query($query,__FILE__,__LINE__);
  595. }
  596. $path='inbox.php';
  597. }
  598. $row = Database::fetch_array($result);
  599. // get file attachments by message id
  600. $files_attachments = self::get_links_message_attachment_files($message_id,$source);
  601. $user_con = self::users_connected_by_id();
  602. $band=0;
  603. $reply='';
  604. for ($i=0;$i<count($user_con);$i++)
  605. if ($row[1]==$user_con[$i])
  606. $band=1;
  607. $message_content = '
  608. <table class="message_view_table" >
  609. <tr>
  610. <td width=10>&nbsp; </td>
  611. <td vAlign=top width="100%">
  612. <table>
  613. <tr>
  614. <td width="100%">
  615. <h1>'.str_replace("\\","",$row[5]).'</h1>
  616. </td>
  617. <tr>';
  618. if (api_get_setting('allow_social_tool') == 'true') {
  619. $user_image = '';
  620. /* @todo add user image
  621. $user_image = UserManager::get_user_picture_path_by_id($row[1],'web', true,false);
  622. $user_image = UserManager::get_picture_user($row[1], $user_image['file'],'40');
  623. $user_image = '<img src="'.$user_image['file'].'" style="'.$user_image['style'].'" >';
  624. */
  625. if ($source == 'outbox') {
  626. $message_content .='<td>'.get_lang('From').' '.$user_image.'<a href="'.api_get_path(WEB_PATH).'main/social/profile.php?u='.$row[1].'">'.GetFullUserName($row[1]).'</a> '.api_strtolower(get_lang('To')).'&nbsp;<b>'.GetFullUserName($row[2]).'</b> </TD>';
  627. } else {
  628. $message_content .='<td>'.get_lang('From').' '.$user_image.'<a href="'.api_get_path(WEB_PATH).'main/social/profile.php?u='.$row[1].'">'.GetFullUserName($row[1]).'</a> '.api_strtolower(get_lang('To')).'&nbsp;<b>'.get_lang('Me').'</b> </TD>';
  629. }
  630. } else {
  631. if ($source == 'outbox') {
  632. $message_content .='<td>'.get_lang('From').'&nbsp;'.GetFullUserName($row[1]).'</b> '.api_strtolower(get_lang('To')).' <b>'.GetFullUserName($row[2]).'</b> </TD>';
  633. } else {
  634. $message_content .='<td>'.get_lang('From').'&nbsp;'.GetFullUserName($row[1]).'</b> '.api_strtolower(get_lang('To')).' <b>'.get_lang('Me').'</b> </TD>';
  635. }
  636. }
  637. $message_content .='</tr>
  638. <tr>
  639. <td>'.get_lang('Date').'&nbsp; '.$row[4].'</TD>
  640. </tr>
  641. </tr>
  642. </table>
  643. <br />
  644. <table height=209 width="100%" bgColor=#ffffff>
  645. <TBODY>
  646. <TR>
  647. <TD vAlign=top class="view-message-content">'.str_replace("\\","",$row[6]).'</TD>
  648. </TR>
  649. </TBODY>
  650. </table>
  651. <div id="message-attach">'.(!empty($files_attachments)?implode('&nbsp;|&nbsp;',$files_attachments):'').'</div>
  652. <DIV class=HT style="PADDING-BOTTOM: 5px">';
  653. $social_link = '';
  654. if ($_GET['f'] == 'social') {
  655. $social_link = 'f=social';
  656. }
  657. if ($source == 'outbox') {
  658. $message_content .= '<a href="outbox.php?'.$social_link.'">'.Display::return_icon('back.png',get_lang('ReturnToOutbox')).get_lang('ReturnToOutbox').'</a> &nbsp';
  659. } else {
  660. $message_content .= '<a href="inbox.php?'.$social_link.'">'.Display::return_icon('back.png',get_lang('ReturnToInbox')).get_lang('ReturnToInbox').'</a> &nbsp';
  661. $message_content .= '<a href="new_message.php?re_id='.$message_id.'&'.$social_link.'">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).get_lang('ReplyToMessage').'</a> &nbsp';
  662. }
  663. $message_content .= '<a href="inbox.php?action=deleteone&id='.$message_id.'&'.$social_link.'" >'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).''.get_lang('DeleteMessage').'</a>&nbsp';
  664. $message_content .='</DIV></TD>
  665. <TD width=10></TD>
  666. </TR>
  667. </table>';
  668. return $message_content;
  669. }
  670. /**
  671. * display message box sent showing it into outbox
  672. * @return void
  673. */
  674. public static function show_message_box_sent () {
  675. global $charset;
  676. $table_message = Database::get_main_table(TABLE_MESSAGE);
  677. $tbl_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  678. $message_id = '';
  679. if (is_numeric($_GET['id_send'])) {
  680. $query = "SELECT * FROM $table_message WHERE user_sender_id=".api_get_user_id()." AND id=".intval(Database::escape_string($_GET['id_send']))." AND msg_status=4;";
  681. $result = Database::query($query,__FILE__,__LINE__);
  682. $message_id = intval($_GET['id_send']);
  683. }
  684. $path='outbox.php';
  685. // get file attachments by message id
  686. $files_attachments = self::get_links_message_attachment_files($message_id,'outbox');
  687. $row = Database::fetch_array($result);
  688. $user_con = self::users_connected_by_id();
  689. $band=0;
  690. $reply='';
  691. for ($i=0;$i<count($user_con);$i++)
  692. if ($row[1]==$user_con[$i])
  693. $band=1;
  694. echo '<div class=actions>';
  695. echo '<a onclick="close_and_open_outbox()" href="javascript:void(0)">'.Display::return_icon('folder_up.gif',api_xml_http_response_encode(get_lang('BackToOutbox'))).api_xml_http_response_encode(get_lang('BackToOutbox')).'</a>';
  696. echo '<a onclick="delete_one_message_outbox('.$row[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',api_xml_http_response_encode(get_lang('DeleteMessage'))).api_xml_http_response_encode(get_lang('DeleteMessage')).'</a>';
  697. echo '</div><br />';
  698. echo '
  699. <table class="message_view_table" >
  700. <TR>
  701. <TD width=10>&nbsp; </TD>
  702. <TD vAlign=top width="100%">
  703. <TABLE>
  704. <TR>
  705. <TD width="100%">
  706. <TR> <h1>'.str_replace("\\","",api_xml_http_response_encode($row[5])).'</h1></TR>
  707. </TD>
  708. <TR>
  709. <TD>'.api_xml_http_response_encode(get_lang('From').'&nbsp;<b>'.GetFullUserName($row[1]).'</b> '.api_strtolower(get_lang('To')).'&nbsp; <b>'.GetFullUserName($row[2])).'</b> </TD>
  710. </TR>
  711. <TR>
  712. <TD >'.api_xml_http_response_encode(get_lang('Date').'&nbsp; '.$row[4]).'</TD>
  713. </TR>
  714. </TR>
  715. </TABLE>
  716. <br />
  717. <TABLE height=209 width="100%" bgColor=#ffffff>
  718. <TBODY>
  719. <TR>
  720. <TD vAlign=top>'.str_replace("\\","",api_xml_http_response_encode($row[6])).'</TD>
  721. </TR>
  722. </TBODY>
  723. </TABLE>
  724. <div id="message-attach">'.(!empty($files_attachments)?implode('&nbsp;|&nbsp;',$files_attachments):'').'</div>
  725. <DIV class=HT style="PADDING-BOTTOM: 5px"> </DIV></TD>
  726. <TD width=10>&nbsp;</TD>
  727. </TR>
  728. </TABLE>';
  729. }
  730. /**
  731. * get user id by user email
  732. * @param string $user_email
  733. * @return int user id
  734. */
  735. public static function get_user_id_by_email ($user_email) {
  736. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  737. $sql='SELECT user_id FROM '.$tbl_user.' WHERE email="'.Database::escape_string($user_email).'";';
  738. $rs=Database::query($sql,__FILE__,__LINE__);
  739. $row=Database::fetch_array($rs,'ASSOC');
  740. if (isset($row['user_id'])) {
  741. return $row['user_id'];
  742. } else {
  743. return null;
  744. }
  745. }
  746. /**
  747. * Displays messages of a group with nested view
  748. * @param int group id
  749. */
  750. public static function display_messages_for_group($group_id) {
  751. $rows = self::get_messages_by_group($group_id);
  752. $rows = self::calculate_children($rows);
  753. $group_info = GroupPortalManager::get_group_data($group_id);
  754. $current_user_id = api_get_user_id();
  755. $count=0;
  756. $html = '';
  757. if (is_array($rows) && count($rows)> 0) {
  758. // prepare array for topics with its items
  759. $topics = array();
  760. $x = 0;
  761. foreach ($rows as $index=>$value) {
  762. if (empty($value['parent_id'])) {
  763. $x = $index;
  764. $topics[$x] = $value;
  765. } else {
  766. $topics[$x]['items'][] = $value;
  767. }
  768. }
  769. uasort($topics,array('MessageManager','order_desc_date'));
  770. // pager
  771. $page = isset($_GET['page_nr'])?intval($_GET['page_nr']):1;
  772. $total_topics = count($topics);
  773. $topics_per_page = 5;
  774. $pager = self::get_pager_for_message_group($group_id,$page,$total_topics,$topics_per_page);
  775. // topics and items
  776. $parents = array_keys(self::get_messages_by_parent(0,$group_id,$page,$topics_per_page));
  777. $html .= '<div id="boxmyGroupMessages">';
  778. $html .= ' <div class="pager">
  779. <table width="690px">
  780. <tr><td style="width:25%">&nbsp;</td><td style="text-align:center">'.$pager['details'].'</td><td style="text-align:right;width:25%">'.$pager['links'].'</td></tr></table></div>';
  781. foreach ($topics as $index => $topic) {
  782. if (!in_array($index,$parents)) continue;
  783. // topics
  784. $indent = 0;
  785. $user_sender_info = UserManager::get_user_info_by_id($topic['user_sender_id']);
  786. $files_attachments = self::get_links_message_attachment_files($topic['id']);
  787. $name = api_get_person_name($user_sender_info['firstname'], $user_sender_info['lastname']);
  788. $html .= '<div class="groupPost" >';
  789. $html .= '<div>'.Display::return_icon('content-post-group1.jpg').'</div>';
  790. $html .= '<div class="contentPostGroup">';
  791. $html .= '<a href="#" class="head" id="head_'.$topic['id'].'">
  792. <span class="message-group-title-topic">'.((isset($_GET['div_id']) && $_GET['div_id'] == 'content_'.$topic['id'])?Display::return_icon('div_hide.gif',get_lang('Hide'),array('style'=>'vertical-align: middle')):
  793. Display::return_icon('div_show.gif',get_lang('Show'),array('style'=>'vertical-align: middle'))).'
  794. '.$topic['title'].'</span>';
  795. $html .= '</a>';
  796. if ($topic['send_date']!=$topic['update_date']) {
  797. if (!empty($topic['update_date']) && $topic['update_date'] != '0000-00-00 00:00:00' ) {
  798. $html .= '<span> ('.get_lang('LastUpdate').' '.date_to_str_ago($topic['update_date']).')</span>';
  799. }
  800. } else {
  801. $html .= '<span> ('.get_lang('Created').' '.date_to_str_ago($topic['send_date']).')</span>';
  802. }
  803. $html .= '<div id="content_'.$topic['id'].'" >';
  804. $html .= '<a name="content_'.$topic['id'].'"></a>';
  805. $html.= '<div style="margin-bottom:10px">';
  806. $html.= '<div id="message-reply-link" style="margin-right:10px">
  807. <a href="'.api_get_path(WEB_CODE_PATH).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.$current_user_id.'&group_id='.$group_id.'&message_id='.$topic['id'].'&action=reply_message_group&div_id=content_'.$topic['id'].'&page_nr='.Security::remove_XSS($_GET['page_nr']).'&page_item_nr='.Security::remove_XSS($_GET['page_item_nr']).'" class="thickbox" title="'.get_lang('Reply').'">'.Display :: return_icon('forumthread_new.gif', get_lang('Reply')).'</a>';
  808. if ($topic['user_sender_id'] == $current_user_id) {
  809. $html.= '&nbsp;&nbsp;<a href="'.api_get_path(WEB_CODE_PATH).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.$current_user_id.'&group_id='.$group_id.'&message_id='.$topic['id'].'&action=edit_message_group&div_id=content_'.$topic['id'].'&page_nr='.Security::remove_XSS($_GET['page_nr']).'&page_item_nr='.Security::remove_XSS($_GET['page_item_nr']).'" class="thickbox" title="'.get_lang('Edit').'">'.Display :: return_icon('edit.gif', get_lang('Edit')).'</a>';
  810. }
  811. $html.= '</div>';
  812. $html.= '<br />';
  813. $html.= '<div class="message-group-author">'.get_lang('From').'&nbsp;<a href="'.api_get_path(WEB_PATH).'main/social/profile.php?u='.$topic['user_sender_id'].'">'.$name.'&nbsp;</a></div>';
  814. $html.= '<div class="message-group-content">'.$topic['content'].'</div>';
  815. $html.= '<div class="message-attach">'.(!empty($files_attachments)?implode('&nbsp;|&nbsp;',$files_attachments):'').'</div>';
  816. $html.= '</div>';
  817. // items
  818. if (is_array($topic['items'])) {
  819. // pager items
  820. $page_item = isset($_GET['page_item_nr'])?intval($_GET['page_item_nr']):1;
  821. $total_items = count($topic['items']);
  822. $items_per_page = 3;
  823. $div_content = 'content_'.$topic['id'];
  824. $pager_items = self::get_pager_for_message_group($group_id,$page_item,$total_items,$items_per_page,true,$div_content);
  825. $html .= ' <div class="pager">
  826. <table width="100%">
  827. <tr><td style="width:25%">&nbsp;</td><td style="text-align:center">'.$pager_items['details'].'</td><td style="text-align:right;width:25%">'.$pager_items['links'].'</td></tr></table></div>';
  828. $topic_slice['items'] = array_slice($topic['items'],($page_item-1)*($items_per_page),$items_per_page);
  829. foreach ($topic_slice['items'] as $item) {
  830. $indent = $item['indent_cnt']*'15';
  831. $user_sender_info = UserManager::get_user_info_by_id($item['user_sender_id']);
  832. $files_attachments = self::get_links_message_attachment_files($item['id']);
  833. $name = api_get_person_name($user_sender_info['firstname'], $user_sender_info['lastname']);
  834. //$html.= '<div class="message-item" style="margin-left: '.$indent.'px;">';
  835. $html.= '<div id="contentPostReply" >';
  836. $html .= '<div>'.Display::return_icon('content-post-reply01.jpg').'</div>';
  837. $html .= '<div class="contentPostReplybg">';
  838. $html.= '<div id="message-reply-link">
  839. <a href="'.api_get_path(WEB_CODE_PATH).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.api_get_user_id().'&group_id='.$group_id.'&message_id='.$item['id'].'&action=reply_message_group&div_id=content_'.$topic['id'].'&page_nr='.Security::remove_XSS($_GET['page_nr']).'&page_item_nr='.Security::remove_XSS($_GET['page_item_nr']).'" class="thickbox" title="'.get_lang('Reply').'">'.Display :: return_icon('forumthread_new.gif', get_lang('Reply')).'</a>';
  840. if ($item['user_sender_id'] == $current_user_id) {
  841. $html.= '&nbsp;&nbsp;<a href="'.api_get_path(WEB_CODE_PATH).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.$current_user_id.'&group_id='.$group_id.'&message_id='.$item['id'].'&action=edit_message_group&div_id=content_'.$topic['id'].'&page_nr='.Security::remove_XSS($_GET['page_nr']).'&page_item_nr='.Security::remove_XSS($_GET['page_item_nr']).'" class="thickbox" title="'.get_lang('Edit').'">'.Display :: return_icon('edit.gif', get_lang('Edit')).'</a>';
  842. }
  843. $html.= '</div>';
  844. $html.= '<div class="message-group-title">'.$item['title'].'&nbsp;</div>';
  845. $html.= '<div class="message-group-author">'.get_lang('From').'&nbsp;<a href="'.api_get_path(WEB_PATH).'main/social/profile.php?u='.$item['user_sender_id'].'">'.$name.'&nbsp;</a></div>';
  846. $html.= '<div class="message-group-content">'.$item['content'].'</div>';
  847. if ($item['send_date'] != $item['update_date']) {
  848. if (!empty($item['update_date']) && $item['update_date'] != '0000-00-00 00:00:00' ) {
  849. $html .= '<span class="message-group-date"> '.get_lang('LastUpdate').' '.date_to_str_ago($item['update_date']).'</span>';
  850. }
  851. } else {
  852. $html .= '<span class="message-group-date"> '.get_lang('Created').' '.date_to_str_ago($item['send_date']).'</span>';
  853. }
  854. $html.= '<div class="message-attach">'.(!empty($files_attachments)?implode('&nbsp;|&nbsp;',$files_attachments):'').'</div>';
  855. $html.= '</div>';
  856. $html.= '</div>';
  857. }
  858. /*
  859. // pager items
  860. $html .= ' <div class="pager">
  861. <table width="100%">
  862. <tr><td style="width:25%">&nbsp;</td><td>&nbsp;</td><td style="text-align:right;width:25%">'.$pager_items['links'].'</td></tr></table></div>';
  863. */
  864. }
  865. $html .= '</div>';
  866. $html .= '</div>';
  867. $html .= '</div>';
  868. }
  869. $html .= '</div>';
  870. /*
  871. // pager
  872. $html .= ' <div class="pager">
  873. <table width="700px">
  874. <tr><td style="width:25%">&nbsp;</td><td>&nbsp;</td><td style="text-align:right;width:25%">'.$pager['links'].'</td></tr></table></div>';
  875. */
  876. }
  877. return $html;
  878. }
  879. /**
  880. * Get pager for messages of group
  881. * @param int group id
  882. * @param int current page
  883. * @param int total rows
  884. * @param int rows per page
  885. * @return array pager with details and links
  886. */
  887. public static function get_pager_for_message_group($group_id,$page,$num_rows,$rows_per_page,$pager_items = false,$div_content='') {
  888. $link = '';
  889. $details = '';
  890. $pager = array();
  891. $group_id = intval($group_id);
  892. $page = intval($page);
  893. $num_rows = intval($num_rows);
  894. $first_page = 1;
  895. $last_page = ceil($num_rows/$rows_per_page);
  896. // get details
  897. if ($page == $first_page) {
  898. $details = $page.' - '.($page*$rows_per_page).' / '.$num_rows;
  899. } else if ($page > $first_page && $page < $last_page) {
  900. $details = ((($page-1)*$rows_per_page)+1).' - '.($page*$rows_per_page).' / '.$num_rows;
  901. } else {
  902. $details = ((($page-1)*$rows_per_page)+1).' - '.($num_rows).' / '.$num_rows;
  903. }
  904. $pager['details'] = $details;
  905. // get links for pager
  906. $href = api_get_path(WEB_CODE_PATH).'social/groups.php?id='.$group_id;
  907. if ($pager_items) {
  908. $page_topic = isset($_GET['page_nr'])?intval($_GET['page_nr']):1;
  909. $param_name_page_nr = '&page_nr='.$page_topic.'&div_id='.$div_content.'&page_item_nr=';
  910. } else {
  911. $param_name_page_nr = '&page_nr=';
  912. }
  913. if ($page > 1) {
  914. $link .= '<a title="'.get_lang('FirstPage').'" href="'.$href.$param_name_page_nr.$first_page.'">';
  915. $link .= Display::return_icon('first.png',get_lang('FirstPage'),array('style'=>'vertical-align: middle'));
  916. $link .= '</a>';
  917. $link .= '<a title="'.get_lang('PreviousPage').'" href="'.$href.$param_name_page_nr.($page-1).'">';
  918. $link .= Display::return_icon('prev.png',get_lang('PreviousPage'),array('style'=>'vertical-align: middle'));
  919. $link .= '</a>';
  920. }
  921. $link .= $page.'/'.$last_page;
  922. if ($page < $last_page) {
  923. $link .= '<a title="'.get_lang('NextPage').'" href="'.$href.$param_name_page_nr.($page+1).'">';
  924. $link .= Display::return_icon('next.png',get_lang('NextPage'),array('style'=>'vertical-align: middle'));
  925. $link .= '</a>';
  926. $link .= '<a title="'.get_lang('LastPage').'" href="'.$href.$param_name_page_nr.$last_page.'">';
  927. $link .= Display::return_icon('last.png',get_lang('PreviousPage'),array('style'=>'vertical-align: middle'));
  928. $link .= '</a>';
  929. }
  930. $pager['links'] = $link;
  931. return $pager;
  932. }
  933. /**
  934. * Add children to messages by id is used for nested view messages
  935. * @param array rows of messages
  936. * @return array new list adding the item children
  937. */
  938. public static function calculate_children($rows) {
  939. foreach($rows as $row) {
  940. $rows_with_children[$row["id"]]=$row;
  941. $rows_with_children[$row["parent_id"]]["children"][]=$row["id"];
  942. }
  943. $rows=$rows_with_children;
  944. $sorted_rows=array(0=>array());
  945. self::message_recursive_sort($rows, $sorted_rows);
  946. unset($sorted_rows[0]);
  947. return $sorted_rows;
  948. }
  949. /**
  950. * Sort recursively the messages, is used for for nested view messages
  951. * @param array original rows of messages
  952. * @param array list recursive of messages
  953. * @param int seed for calculate the indent
  954. * @param int indent for nested view
  955. * @return void
  956. */
  957. public static function message_recursive_sort($rows, &$messages, $seed=0, $indent=0) {
  958. if($seed>0) {
  959. $messages[$rows[$seed]["id"]]=$rows[$seed];
  960. $messages[$rows[$seed]["id"]]["indent_cnt"]=$indent;
  961. $indent++;
  962. }
  963. if(isset($rows[$seed]["children"])) {
  964. foreach($rows[$seed]["children"] as $child) {
  965. self::message_recursive_sort($rows, $messages, $child, $indent);
  966. }
  967. }
  968. }
  969. /**
  970. * Sort date by desc from a multi-dimensional array
  971. * @param array1 first array to compare
  972. * @param array2 second array to compare
  973. * @return bool
  974. */
  975. public function order_desc_date($array1,$array2) {
  976. return strcmp($array2['send_date'],$array1['send_date']);
  977. }
  978. /**
  979. * Get array of links (download) for message attachment files
  980. * @param int message id
  981. * @param string type message list (inbox/outbox)
  982. * @return array
  983. */
  984. public static function get_links_message_attachment_files($message_id,$type='') {
  985. $tbl_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  986. $message_id = intval($message_id);
  987. // get file attachments by message id
  988. $links_attach_file = array();
  989. if (!empty($message_id)) {
  990. $sql = "SELECT * FROM $tbl_message_attach WHERE message_id = '$message_id'";
  991. $rs_file = Database::query($sql,__FILE__,__LINE__);
  992. if (Database::num_rows($rs_file) > 0) {
  993. $attach_icon = Display::return_icon('attachment.gif');
  994. $archiveURL=api_get_path(WEB_CODE_PATH).'messages/download.php?type='.$type.'&file=';
  995. while ($row_file = Database::fetch_array($rs_file)) {
  996. $archiveFile= $row_file['path'];
  997. $filename = $row_file['filename'];
  998. $filesize = format_file_size($row_file['size']);
  999. $filecomment= $row_file['comment'];
  1000. $links_attach_file[] = $attach_icon.'&nbsp;<a href="'.$archiveURL.$archiveFile.'">'.$filename.'</a>&nbsp;('.$filesize.')'.(!empty($filecomment)?'&nbsp;-&nbsp;'.$filecomment:'');
  1001. }
  1002. }
  1003. }
  1004. return $links_attach_file;
  1005. }
  1006. /**
  1007. * Get message list by id
  1008. * @param int message id
  1009. * @return array
  1010. */
  1011. public static function get_message_by_id($message_id) {
  1012. $tbl_message = Database::get_main_table(TABLE_MESSAGE);
  1013. $message_id = intval($message_id);
  1014. $sql = "SELECT * FROM $tbl_message WHERE id = '$message_id'";
  1015. $res = Database::query($sql, __FILE__, __LINE__);
  1016. $item = array();
  1017. if (Database::num_rows($res)>0) {
  1018. $item = Database::fetch_array($res,'ASSOC');
  1019. }
  1020. return $item;
  1021. }
  1022. }
  1023. //@todo this functions should be in the message class
  1024. function inbox_display() {
  1025. global $charset;
  1026. // $charset = api_get_setting('platform_charset');
  1027. $table_message = Database::get_main_table(TABLE_MESSAGE);
  1028. $request=api_is_xml_http_request();
  1029. if ($_SESSION['social_exist']===true) {
  1030. $redirect="#remote-tab-2";
  1031. if (api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool')=='true') {
  1032. $success= get_lang('SelectedMessagesDeleted');
  1033. } else {
  1034. $success= get_lang('SelectedMessagesDeleted');
  1035. }
  1036. } else {
  1037. $success= get_lang('SelectedMessagesDeleted');
  1038. }
  1039. if (isset ($_REQUEST['action'])) {
  1040. switch ($_REQUEST['action']) {
  1041. case 'delete' :
  1042. $number_of_selected_messages = count($_POST['id']);
  1043. foreach ($_POST['id'] as $index => $message_id) {
  1044. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $message_id);
  1045. }
  1046. Display::display_normal_message(api_xml_http_response_encode($success),false);
  1047. break;
  1048. case 'deleteone' :
  1049. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $_GET['id']);
  1050. Display::display_confirmation_message(api_xml_http_response_encode($success),false);
  1051. echo '<br />';
  1052. break;
  1053. }
  1054. }
  1055. // display sortable table with messages of the current user
  1056. $table = new SortableTable('messages', 'get_number_of_messages_mask', 'get_message_data_mask', 3, get_number_of_messages_mask(),'DESC');
  1057. $table->set_header(0, '', false,array ('style' => 'width:20px;'));
  1058. $title=api_xml_http_response_encode(get_lang('Title'));
  1059. $action=api_xml_http_response_encode(get_lang('Actions'));
  1060. $table->set_header(1,api_xml_http_response_encode(get_lang('Status')),false,array('style' => 'width:30px;'));
  1061. $table->set_header(2,api_xml_http_response_encode(get_lang('From')),false);
  1062. $table->set_header(3,$title,false);
  1063. $table->set_header(4,api_xml_http_response_encode(get_lang('Date')),false,array('style' => 'width:150px;'));
  1064. $table->set_header(5,$action,false,array ('style' => 'width:100px;'));
  1065. if ($_REQUEST['f']=='social') {
  1066. $parameters['f'] = 'social';
  1067. $table->set_additional_parameters($parameters);
  1068. }
  1069. echo '<div id="div_content_table_data">';
  1070. if ($request===true) {
  1071. echo '<form name="form_send" id="form_send" action="" method="post">';
  1072. echo '<input type="hidden" name="action" value="delete" />';
  1073. $table->display();
  1074. echo '</form>';
  1075. if (get_number_of_messages_mask() > 0) {
  1076. echo '<a href="javascript:void(0)" onclick="selectall_cheks()">'.api_xml_http_response_encode(get_lang('SelectAll')).'</a>&nbsp;&nbsp;&nbsp;';
  1077. echo '<a href="javascript:void(0)" onclick="unselectall_cheks()">'.api_xml_http_response_encode(get_lang('UnSelectAll')).'</a>&nbsp;&nbsp;&nbsp;';
  1078. echo '<button class="save" name="delete" type="button" value="'.api_xml_http_response_encode(get_lang('DeleteSelectedMessages')).'" onclick="submit_form(\'inbox\')">'.api_xml_http_response_encode(get_lang('DeleteSelectedMessages')).'</button>';
  1079. }
  1080. } else {
  1081. $table->set_form_actions(array ('delete' => get_lang('DeleteSelectedMessages')));
  1082. $table->display();
  1083. }
  1084. echo '</div>';
  1085. }
  1086. function get_number_of_messages_mask() {
  1087. return MessageManager::get_number_of_messages();
  1088. }
  1089. function get_message_data_mask($from, $number_of_items, $column, $direction) {
  1090. $column='3';
  1091. $direction='desc';
  1092. //non set by SortableTable ?
  1093. $number_of_items=get_number_of_messages_mask();
  1094. return MessageManager::get_message_data($from, $number_of_items, $column, $direction);
  1095. }
  1096. function outbox_display() {
  1097. $table_message = Database::get_main_table(TABLE_MESSAGE);
  1098. $request=api_is_xml_http_request();
  1099. global $charset;
  1100. $social_link = false;
  1101. if ($_REQUEST['f']=='social') {
  1102. $social_link ='f=social';
  1103. }
  1104. if ($_SESSION['social_exist']===true) {
  1105. if (api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool')=='true') {
  1106. $success= get_lang('SelectedMessagesDeleted')."&nbsp<br><a href=\""."../social/index.php?$social_link\">".get_lang('BackToOutbox')."</a>";
  1107. }else {
  1108. $success=get_lang('SelectedMessagesDeleted')."&nbsp<br><a href=\""."../social/index.php?$social_link\">".get_lang('BackToOutbox')."</a>";
  1109. }
  1110. } else {
  1111. $success= get_lang('SelectedMessagesDeleted').'&nbsp</b><br /><a href="outbox.php?'.$social_link.'">'.get_lang('BackToOutbox').'</a>';
  1112. }
  1113. if (isset ($_REQUEST['action'])) {
  1114. switch ($_REQUEST['action']) {
  1115. case 'delete' :
  1116. $number_of_selected_messages = count($_POST['id']);
  1117. if ($number_of_selected_messages!=0) {
  1118. foreach ($_POST['id'] as $index => $message_id) {
  1119. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $message_id);
  1120. }
  1121. }
  1122. Display::display_normal_message(api_xml_http_response_encode($success),false);
  1123. break;
  1124. case 'deleteone' :
  1125. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $_GET['id']);
  1126. Display::display_confirmation_message(api_xml_http_response_encode($success),false);
  1127. echo '<br/>';
  1128. break;
  1129. }
  1130. }
  1131. // display sortable table with messages of the current user
  1132. $table = new SortableTable('messages', 'get_number_of_messages_send_mask', 'get_message_data_send_mask', 3, get_number_of_messages_send_mask(), 'DESC');
  1133. $title=api_xml_http_response_encode(get_lang('Title'));
  1134. $action=api_xml_http_response_encode(get_lang('Actions'));
  1135. $table->set_header(0, '', false,array ('style' => 'width:20px;'));
  1136. $table->set_header(1, api_xml_http_response_encode(get_lang('Status')),false,array ('style' => 'width:30px;'));
  1137. $table->set_header(2, api_xml_http_response_encode(get_lang('To')),false);
  1138. $table->set_header(3, $title,false);
  1139. $table->set_header(4, api_xml_http_response_encode(get_lang('Date')),false,array ('style' => 'width:150px;'));
  1140. $table->set_header(5,$action, false,array ('style' => 'width:100px;'));
  1141. if ($_REQUEST['f']=='social') {
  1142. $parameters['f'] = 'social';
  1143. $table->set_additional_parameters($parameters);
  1144. }
  1145. echo '<div id="div_content_table_data_sent">';
  1146. if ($request===true) {
  1147. echo '<form name="form_send_out" id="form_send_out" action="" method="post">';
  1148. echo '<input type="hidden" name="action" value="delete" />';
  1149. $table->display();
  1150. echo '</form>';
  1151. if (get_number_of_messages_send_mask() > 0) {
  1152. echo '<a href="javascript:void(0)" onclick="selectall_cheks()">'.api_xml_http_response_encode(get_lang('SelectAll')).'</a>&nbsp;&nbsp;&nbsp;';
  1153. echo '<a href="javascript:void(0)" onclick="unselectall_cheks()">'.api_xml_http_response_encode(get_lang('UnSelectAll')).'</a>&nbsp;&nbsp;&nbsp;';
  1154. echo '<button class="save" name="delete" type="button" value="'.api_xml_http_response_encode(get_lang('DeleteSelectedMessages')).'" onclick="submit_form(\'outbox\')">'.api_xml_http_response_encode(get_lang('DeleteSelectedMessages')).'</button>';
  1155. }
  1156. } else {
  1157. $table->set_form_actions(array ('delete' => get_lang('DeleteSelectedMessages')));
  1158. $table->display();
  1159. }
  1160. echo '</div>';
  1161. }
  1162. function get_number_of_messages_send_mask() {
  1163. return MessageManager::get_number_of_messages_sent();
  1164. }
  1165. function get_message_data_send_mask($from, $number_of_items, $column, $direction) {
  1166. $column='3';
  1167. $direction='desc';
  1168. //non set by SortableTable ?
  1169. $number_of_items=get_number_of_messages_send_mask();
  1170. return MessageManager::get_message_data_sent($from, $number_of_items, $column, $direction);
  1171. }
  1172. ?>