settings.php 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * With this tool you can easily adjust non critical configuration settings.
  5. * Non critical means that changing them will not result in a broken campus.
  6. *
  7. * @author Patrick Cool
  8. * @author Julio Montoya - Multiple URL site
  9. * @package chamilo.admin
  10. */
  11. /* INIT SECTION */
  12. // Language files that need to be included.
  13. if (isset($_GET['category']) && $_GET['category'] == 'Templates') {
  14. $language_file = array('admin', 'document');
  15. } else if(isset($_GET['category']) && $_GET['category'] == 'Gradebook') {
  16. $language_file = array('admin', 'gradebook');
  17. } else {
  18. $language_file = array('admin', 'document');
  19. }
  20. $language_file[] = 'tracking';
  21. // Resetting the course id.
  22. $cidReset = true;
  23. // Including some necessary library files.
  24. require_once '../inc/global.inc.php';
  25. require_once api_get_path(LIBRARY_PATH).'fileUpload.lib.php';
  26. require_once 'settings.lib.php';
  27. // Setting the section (for the tabs).
  28. $this_section = SECTION_PLATFORM_ADMIN;
  29. $_SESSION['this_section'] = $this_section;
  30. // Access restrictions.
  31. api_protect_admin_script();
  32. // Settings to avoid
  33. $settings_to_avoid = array(
  34. 'use_session_mode' => 'true',
  35. 'gradebook_enable' => 'false',
  36. 'example_material_course_creation' => 'true' // ON by default - now we have this option when we create a course
  37. );
  38. $convert_byte_to_mega_list = array('dropbox_max_filesize', 'message_max_upload_filesize', 'default_document_quotum', 'default_group_quotum');
  39. // Submit stylesheets.
  40. if (isset($_POST['submit_stylesheets'])) {
  41. $message = store_stylesheets();
  42. header("Location: ".api_get_self()."?category=Stylesheets");
  43. exit;
  44. }
  45. if (isset($_POST['style'])) {
  46. Display::$preview_style = $_POST['style'];
  47. }
  48. // Database table definitions.
  49. $table_settings_current = Database :: get_main_table(TABLE_MAIN_SETTINGS_CURRENT);
  50. // Setting breadcrumbs.
  51. $interbreadcrumb[] = array('url' => 'index.php', 'name' => get_lang('PlatformAdmin'));
  52. // Setting the name of the tool.
  53. $tool_name = get_lang('PlatformConfigSettings');
  54. if (empty($_GET['category'])) {
  55. $_GET['category'] = 'Platform';
  56. }
  57. $watermark_deleted = false;
  58. if (isset($_GET['delete_watermark'])) {
  59. $watermark_deleted = PDF::delete_watermark();
  60. }
  61. if (isset($_GET['action']) && $_GET['action'] == 'delete_grading') {
  62. $id = intval($_GET['id']);
  63. api_delete_setting_option($id);
  64. }
  65. $form_search = new FormValidator('search_settings', 'get', api_get_self() , null, array('class'=>'well form-inline'));
  66. $form_search->addElement('text', 'search_field');
  67. $form_search->addElement('hidden', 'category', 'search_setting');
  68. $form_search->addElement('style_submit_button', 'submit_button', get_lang('Search'), 'value="submit_button", class="search"');
  69. $form_search->setDefaults(array('search_field' => (isset($_REQUEST['search_field'])?$_REQUEST['search_field']:null)));
  70. $form_search_html = $form_search->return_form();
  71. $url_id = api_get_current_access_url_id();
  72. $settings = null;
  73. function get_settings($category = null) {
  74. $url_id = api_get_current_access_url_id();
  75. $settings_by_access_list = array();
  76. if ($url_id == 1) {
  77. $settings = api_get_settings($category, 'group', $url_id);
  78. } else {
  79. $url_info = api_get_access_url($url_id);
  80. if ($url_info['active'] == 1) {
  81. // The default settings of Chamilo
  82. $settings = api_get_settings($category, 'group', 1, 0);
  83. // The settings that are changeable from a particular site.
  84. $settings_by_access = api_get_settings($category, 'group', $url_id, 1);
  85. foreach ($settings_by_access as $row) {
  86. if (empty($row['variable']))
  87. $row['variable'] = 0;
  88. if (empty($row['subkey']))
  89. $row['subkey'] = 0;
  90. if (empty($row['category']))
  91. $row['category'] = 0;
  92. // One more validation if is changeable.
  93. if ($row['access_url_changeable'] == 1)
  94. $settings_by_access_list[ $row['variable'] ] [ $row['subkey'] ] [ $row['category'] ] = $row;
  95. else
  96. $settings_by_access_list[ $row['variable'] ] [ $row['subkey'] ] [ $row['category'] ] = array();
  97. }
  98. }
  99. }
  100. if (isset($category) && $category== 'search_setting') {
  101. if (!empty($_REQUEST['search_field'])) {
  102. $settings = search_setting($_REQUEST['search_field']);
  103. }
  104. }
  105. return array('settings' => $settings, 'settings_by_access_list' => $settings_by_access_list);
  106. }
  107. // Build the form.
  108. if (!empty($_GET['category']) && !in_array($_GET['category'], array('Plugins', 'stylesheets', 'Search'))) {
  109. $my_category = isset($_GET['category']) ? $_GET['category'] : null;
  110. $settings_array = get_settings($my_category);
  111. $settings = $settings_array['settings'];
  112. $settings_by_access_list = $settings_array['settings_by_access_list'];
  113. $form = generate_settings_form($settings, $settings_by_access_list);
  114. $message = array();
  115. if ($form->validate()) {
  116. $values = $form->exportValues();
  117. $mark_all = false;
  118. $un_mark_all = false;
  119. if ($_configuration['multiple_access_urls']) {
  120. if (isset($values['buttons_in_action_right']) && isset($values['buttons_in_action_right']['mark_all'])) {
  121. $mark_all = true;
  122. }
  123. if (isset($values['buttons_in_action_right']) && isset($values['buttons_in_action_right']['unmark_all'])) {
  124. $un_mark_all = true;
  125. }
  126. }
  127. if ($mark_all || $un_mark_all) {
  128. if (api_is_global_platform_admin()) {
  129. $locked_settings = api_get_locked_settings();
  130. foreach ($values as $key => $value) {
  131. if (!in_array($key, $locked_settings)) {
  132. $changeable = 0;
  133. if ($mark_all) {
  134. $changeable = 1;
  135. }
  136. $params = array('variable = ?' => array($key));
  137. $data = api_get_settings_params($params);
  138. if (!empty($data)) {
  139. foreach ($data as $item) {
  140. $params = array('id' =>$item['id'], 'access_url_changeable' => $changeable);
  141. api_set_setting_simple($params);
  142. }
  143. }
  144. }
  145. }
  146. //Reload settings
  147. $settings_array = get_settings($my_category);
  148. $settings = $settings_array['settings'];
  149. $settings_by_access_list = $settings_array['settings_by_access_list'];
  150. $form = generate_settings_form($settings, $settings_by_access_list);
  151. }
  152. }
  153. $pdf_export_watermark_path = $_FILES['pdf_export_watermark_path'];
  154. if (isset($pdf_export_watermark_path) && !empty($pdf_export_watermark_path['name'])) {
  155. $pdf_export_watermark_path_result = PDF::upload_watermark($pdf_export_watermark_path['name'], $pdf_export_watermark_path['tmp_name']);
  156. if ($pdf_export_watermark_path_result) {
  157. $message['confirmation'][] = get_lang('UplUploadSucceeded');
  158. } else {
  159. $message['warning'][] = get_lang('UplUnableToSaveFile').' '.get_lang('Folder').': '.api_get_path(SYS_CODE_PATH).'default_course_document/images';
  160. }
  161. unset($update_values['pdf_export_watermark_path']);
  162. }
  163. // Set true for allow_message_tool variable if social tool is actived
  164. foreach ($convert_byte_to_mega_list as $item) {
  165. if (isset($values[$item])) {
  166. $values[$item] = round($values[$item]*1024*1024);
  167. }
  168. }
  169. if ($values['allow_social_tool'] == 'true') {
  170. $values['allow_message_tool'] = 'true';
  171. }
  172. // The first step is to set all the variables that have type=checkbox of the category
  173. // to false as the checkbox that is unchecked is not in the $_POST data and can
  174. // therefore not be set to false.
  175. // This, however, also means that if the process breaks on the third of five checkboxes, the others
  176. // will be set to false.
  177. //$r = api_set_settings_category($my_category, 'false', $_configuration['access_url'], array('checkbox', 'radio'));
  178. //This is a more accurate way of updating to false the checkboxes and radios the settings
  179. //var_dump($settings);exit;
  180. /*
  181. foreach ($values as $key => $value) {
  182. if (in_array($key, $settings_to_avoid)) { continue; }
  183. if ($key == 'search_field' or $key == 'submit_fixed_in_bottom') { continue; }
  184. $key = Database::escape_string($key);
  185. $sql = "UPDATE $table_settings_current SET selected_value = 'false' WHERE variable = '".$key."' AND access_url = ".intval($url_id)." AND type IN ('checkbox', 'radio') ";
  186. $res = Database::query($sql);
  187. }*/
  188. foreach ($settings as $item) {
  189. $key = $item['variable'];
  190. if (in_array($key, $settings_to_avoid)) { continue; }
  191. if ($key == 'search_field' or $key == 'submit_fixed_in_bottom') { continue; }
  192. $key = Database::escape_string($key);
  193. $sql = "UPDATE $table_settings_current SET selected_value = 'false' WHERE variable = '".$key."' AND access_url = ".intval($url_id)." AND type IN ('checkbox', 'radio') ";
  194. $res = Database::query($sql);
  195. }
  196. /*foreach($settings_to_avoid as $key => $value) {
  197. api_set_setting($key, $value, null, null, $_configuration['access_url']);
  198. }*/
  199. // Save the settings.
  200. $keys = array();
  201. foreach ($values as $key => $value) {
  202. if (in_array($key, $settings_to_avoid)) { continue; }
  203. // Avoid form elements which have nothing to do with settings
  204. if ($key == 'search_field' or $key == 'submit_fixed_in_bottom') { continue; }
  205. // Treat gradebook values in separate function.
  206. //if (strpos($key, 'gradebook_score_display_custom_values') === false) {
  207. if (!is_array($value)) {
  208. $old_value = api_get_setting($key);
  209. switch ($key) {
  210. case 'header_extra_content':
  211. file_put_contents(api_get_path(SYS_PATH).api_get_home_path().'/header_extra_content.txt', $value);
  212. $value = api_get_home_path().'/header_extra_content.txt';
  213. break;
  214. case 'footer_extra_content':
  215. file_put_contents(api_get_path(SYS_PATH).api_get_home_path().'/footer_extra_content.txt', $value);
  216. $value = api_get_home_path().'/footer_extra_content.txt';
  217. break;
  218. // URL validation for some settings.
  219. case 'InstitutionUrl':
  220. case 'course_validation_terms_and_conditions_url':
  221. $value = trim(Security::remove_XSS($value));
  222. if ($value != '') {
  223. // Here we accept absolute URLs only.
  224. if (strpos($value, '://') === false) {
  225. $value = 'http://'.$value;
  226. }
  227. if (!api_valid_url($value, true)) {
  228. // If the new (non-empty) URL value is invalid, then the old URL value stays.
  229. $value = $old_value;
  230. }
  231. }
  232. // If the new URL value is empty, then it will be stored (i.e. the setting will be deleted).
  233. break;
  234. // Validation against e-mail address for some settings.
  235. case 'emailAdministrator':
  236. $value = trim(Security::remove_XSS($value));
  237. if ($value != '' && !api_valid_email($value)) {
  238. // If the new (non-empty) e-mail address is invalid, then the old e-mail address stays.
  239. // If the new e-mail address is empty, then it will be stored (i.e. the setting will be deleted).
  240. $value = $old_value;
  241. }
  242. break;
  243. }
  244. if ($old_value != $value) $keys[] = $key;
  245. $result = api_set_setting($key, $value, null, null, $url_id);
  246. } else {
  247. $sql = "SELECT subkey FROM $table_settings_current WHERE variable = '$key'";
  248. $res = Database::query($sql);
  249. while ($row_subkeys = Database::fetch_array($res)) {
  250. // If subkey is changed:
  251. if ((isset($value[$row_subkeys['subkey']]) && api_get_setting($key, $row_subkeys['subkey']) == 'false') ||
  252. (!isset($value[$row_subkeys['subkey']]) && api_get_setting($key, $row_subkeys['subkey']) == 'true')) {
  253. $keys[] = $key;
  254. break;
  255. }
  256. }
  257. foreach ($value as $subkey => $subvalue) {
  258. $result = api_set_setting($key, 'true', $subkey, null, $url_id);
  259. }
  260. }
  261. }
  262. // Add event configuration settings category to the system log.
  263. $user_id = api_get_user_id();
  264. $category = $_GET['category'];
  265. event_system(LOG_CONFIGURATION_SETTINGS_CHANGE, LOG_CONFIGURATION_SETTINGS_CATEGORY, $category, api_get_utc_datetime(), $user_id);
  266. // Add event configuration settings variable to the system log.
  267. if (is_array($keys) && count($keys) > 0) {
  268. foreach ($keys as $variable) {
  269. if (in_array($key, $settings_to_avoid)) { continue; }
  270. event_system(LOG_CONFIGURATION_SETTINGS_CHANGE, LOG_CONFIGURATION_SETTINGS_VARIABLE, $variable, api_get_utc_datetime(), $user_id);
  271. }
  272. }
  273. }
  274. }
  275. $htmlHeadXtra[] = '<script>
  276. var hide_icon = "'.api_get_path(WEB_IMG_PATH).'shared_setting_na.png";
  277. var show_icon = "'.api_get_path(WEB_IMG_PATH).'shared_setting.png";
  278. var url = "'.api_get_path(WEB_AJAX_PATH).'admin.ajax.php?a=update_changeable_setting";
  279. $(function() {
  280. $(".share_this_setting").on("click", function() {
  281. var my_img = $(this).find("img");
  282. var link = $(this);
  283. $.ajax({
  284. url: url,
  285. data: { changeable: $(this).attr("data_status"), id: $(this).attr("data_to_send") },
  286. success: function(data) {
  287. if (data == 1) {
  288. if (link.attr("data_status") == 1) {
  289. my_img.attr("src", show_icon);
  290. link.attr("data_status", 0);
  291. } else {
  292. my_img.attr("src", hide_icon);
  293. link.attr("data_status", 1);
  294. }
  295. }
  296. }
  297. });
  298. });
  299. });
  300. </script>';
  301. // Including the header (banner).
  302. Display :: display_header($tool_name);
  303. // The action images.
  304. $action_images['platform'] = 'platform.png';
  305. $action_images['course'] = 'course.png';
  306. $action_images['session'] = 'session.png';
  307. $action_images['tools'] = 'tools.png';
  308. $action_images['user'] = 'user.png';
  309. $action_images['gradebook'] = 'gradebook.png';
  310. $action_images['ldap'] = 'ldap.png';
  311. $action_images['cas'] = 'user_access.png';
  312. $action_images['security'] = 'security.png';
  313. $action_images['languages'] = 'languages.png';
  314. $action_images['tuning'] = 'tuning.png';
  315. $action_images['templates'] = 'template.png';
  316. $action_images['search'] = 'search.png';
  317. $action_images['editor'] = 'html_editor.png';
  318. $action_images['timezones'] = 'timezone.png';
  319. $action_images['extra'] = 'wizard.png';
  320. $action_images['tracking'] = 'statistics.png';
  321. $action_images['gradebook'] = 'gradebook.png';
  322. $action_images['search'] = 'search.png';
  323. $action_images['stylesheets'] = 'stylesheets.png';
  324. $action_images['templates'] = 'template.png';
  325. $action_images['plugins'] = 'plugins.png';
  326. $action_images['shibboleth'] = 'shibboleth.png';
  327. $action_images['facebook'] = 'facebook.png';
  328. $action_array = array();
  329. $resultcategories = array();
  330. $resultcategories[] = array('category' => 'Platform');
  331. $resultcategories[] = array('category' => 'Course');
  332. $resultcategories[] = array('category' => 'Session');
  333. $resultcategories[] = array('category' => 'Languages');
  334. $resultcategories[] = array('category' => 'User');
  335. $resultcategories[] = array('category' => 'Tools');
  336. $resultcategories[] = array('category' => 'Editor');
  337. $resultcategories[] = array('category' => 'Security');
  338. $resultcategories[] = array('category' => 'Tuning');
  339. $resultcategories[] = array('category' => 'Gradebook');
  340. $resultcategories[] = array('category' => 'Timezones');
  341. $resultcategories[] = array('category' => 'Tracking');
  342. $resultcategories[] = array('category' => 'Search');
  343. $resultcategories[] = array('category' => 'Stylesheets');
  344. $resultcategories[] = array('category' => 'Templates');
  345. $resultcategories[] = array('category' => 'Plugins');
  346. $resultcategories[] = array('category' => 'LDAP');
  347. $resultcategories[] = array('category' => 'CAS');
  348. $resultcategories[] = array('category' => 'Shibboleth');
  349. $resultcategories[] = array('category' => 'Facebook');
  350. foreach ($resultcategories as $row) {
  351. $url = array();
  352. $url['url'] = api_get_self()."?category=".$row['category'];
  353. $url['content'] = Display::return_icon($action_images[strtolower($row['category'])], api_ucfirst(get_lang($row['category'])),'',ICON_SIZE_MEDIUM);
  354. if (strtolower($row['category']) == strtolower($_GET['category'])) {
  355. $url['active'] = true;
  356. }
  357. $action_array[] = $url;
  358. }
  359. echo Display::actions($action_array);
  360. echo '<br />';
  361. echo $form_search_html;
  362. if ($watermark_deleted) {
  363. Display :: display_normal_message(get_lang('FileDeleted'));
  364. }
  365. // Displaying the message that the settings have been stored.
  366. if (isset($form) && $form->validate()) {
  367. Display::display_confirmation_message(get_lang('SettingsStored'));
  368. if (is_array($message)) {
  369. foreach($message as $type => $content) {
  370. foreach($content as $msg) {
  371. echo Display::return_message($msg, $type);
  372. }
  373. }
  374. }
  375. }
  376. if (!empty($_GET['category'])) {
  377. switch ($_GET['category']) {
  378. case 'Regions':
  379. handle_regions();
  380. break;
  381. case 'Plugins':
  382. // Displaying the extensions: Plugins.
  383. // This will be available to all the sites (access_urls).
  384. if (isset($_POST['submit_dashboard_plugins'])) {
  385. $affected_rows = DashboardManager::store_dashboard_plugins($_POST);
  386. if ($affected_rows) {
  387. // add event to system log
  388. $user_id = api_get_user_id();
  389. $category = $_GET['category'];
  390. event_system(LOG_CONFIGURATION_SETTINGS_CHANGE, LOG_CONFIGURATION_SETTINGS_CATEGORY, $category, api_get_utc_datetime(), $user_id);
  391. Display :: display_confirmation_message(get_lang('DashboardPluginsHaveBeenUpdatedSucesslly'));
  392. }
  393. }
  394. echo '<script>
  395. $(function(){
  396. $("#tabs").tabs();
  397. });
  398. </script>';
  399. echo '<div id="tabs">';
  400. echo '<ul>';
  401. echo '<li><a href="#tabs-1">'.get_lang('Plugins').'</a></li>';
  402. echo '<li><a href="#tabs-2">'.get_lang('DashboardPlugins').'</a></li>';
  403. echo '<li><a href="#tabs-3">'.get_lang('ConfigureExtensions').'</a></li>';
  404. echo '</ul>';
  405. echo '<div id="tabs-1">';
  406. handle_plugins();
  407. echo '</div>';
  408. echo '<div id="tabs-2">';
  409. DashboardManager::handle_dashboard_plugins();
  410. echo '</div>';
  411. echo '<div id="tabs-3">';
  412. handle_extensions();
  413. echo '</div>';
  414. echo '</div>';
  415. break;
  416. case 'Stylesheets':
  417. // Displaying the extensions: Stylesheets.
  418. handle_stylesheets();
  419. break;
  420. case 'Search':
  421. handle_search();
  422. break;
  423. case 'Templates':
  424. handle_templates();
  425. break;
  426. case 'search_setting':
  427. search_setting($_REQUEST['search_field']);
  428. if (isset($_REQUEST['search_field'])) {
  429. $form->display();
  430. }
  431. break;
  432. default:
  433. if (isset($form))
  434. $form->display();
  435. }
  436. }
  437. /* FOOTER */
  438. Display :: display_footer();