user.php 37 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This script displays a list of the users of the current course.
  5. * Course admins can change user permissions, subscribe and unsubscribe users...
  6. *
  7. * - show users registered in courses;
  8. *
  9. * @author Roan Embrechts
  10. * @author Julio Montoya Armas, Several fixes
  11. * @package chamilo.user
  12. */
  13. $use_anonymous = true;
  14. require_once '../inc/global.inc.php';
  15. $current_course_tool = TOOL_USER;
  16. $this_section = SECTION_COURSES;
  17. // notice for unauthorized people.
  18. api_protect_course_script(true);
  19. global $_configuration;
  20. if (!api_is_platform_admin(true)) {
  21. if (!api_is_course_admin() && !api_is_coach()) {
  22. if (api_get_course_setting('allow_user_view_user_list') == 0) {
  23. api_not_allowed(true);
  24. }
  25. }
  26. }
  27. /* Constants and variables */
  28. $course_code = Database::escape_string(api_get_course_id());
  29. $sessionId = api_get_session_id();
  30. $is_western_name_order = api_is_western_name_order();
  31. $sort_by_first_name = api_sort_by_first_name();
  32. $course_info = api_get_course_info();
  33. $user_id = api_get_user_id();
  34. $courseCode = $course_info['code'];
  35. $courseId = $course_info['real_id'];
  36. //Can't auto unregister from a session
  37. if (!empty($sessionId)) {
  38. $course_info['unsubscribe'] = 0;
  39. }
  40. /* Unregistering a user section */
  41. if (api_is_allowed_to_edit(null, true)) {
  42. if (isset($_POST['action'])) {
  43. switch ($_POST['action']) {
  44. case 'unsubscribe':
  45. // Make sure we don't unsubscribe current user from the course
  46. if (is_array($_POST['user'])) {
  47. $user_ids = array_diff($_POST['user'], array($user_id));
  48. if (count($user_ids) > 0) {
  49. CourseManager::unsubscribe_user($user_ids, $courseCode);
  50. $message = get_lang('UsersUnsubscribed');
  51. }
  52. }
  53. }
  54. }
  55. }
  56. // Getting extra fields that have the filter option "on"
  57. $extraField = new ExtraField('user');
  58. $extraFields = $extraField->get_all(array('filter = ?' => 1));
  59. $user_image_pdf_size = 80;
  60. if (api_is_allowed_to_edit(null, true)) {
  61. if (isset($_GET['action'])) {
  62. switch ($_GET['action']) {
  63. case 'set_tutor':
  64. $userId = isset($_GET['user_id']) ? intval($_GET['user_id']) : null;
  65. $isTutor = isset($_GET['is_tutor']) ? intval($_GET['is_tutor']) : 0;
  66. if (!empty($userId)) {
  67. if ($sessionId) {
  68. /*$res = SessionManager::set_coach_to_course_session(
  69. $userId,
  70. $sessionId,
  71. $courseCode,
  72. true
  73. );*/
  74. } else {
  75. /*if (!empty($_POST['promoteCourseAdmin']) && $_POST['promoteCourseAdmin']){
  76. $userProperties['status'] = 1;
  77. } else{
  78. $userProperties['status'] = 5;
  79. }
  80. if (!empty($_POST['promoteTutor']) && $_POST['promoteTutor']){
  81. $userProperties['tutor'] = 1;
  82. } else{
  83. $userProperties['tutor'] = 0;
  84. }*/
  85. CourseManager::updateUserCourseTutor(
  86. $userId,
  87. $courseId,
  88. $isTutor
  89. );
  90. }
  91. }
  92. break;
  93. case 'export':
  94. $table_course_user = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  95. $table_users = Database::get_main_table(TABLE_MAIN_USER);
  96. $is_western_name_order = api_is_western_name_order();
  97. $data = array();
  98. $a_users = array();
  99. $current_access_url_id = api_get_current_access_url_id();
  100. $extra_fields = UserManager::get_extra_user_data(
  101. api_get_user_id(),
  102. false,
  103. false,
  104. false,
  105. true
  106. );
  107. $extra_fields = array_keys($extra_fields);
  108. $select_email_condition = '';
  109. if (api_get_setting('show_email_addresses') == 'true') {
  110. $select_email_condition = ' user.email, ';
  111. if ($sort_by_first_name) {
  112. $a_users[0] = array(
  113. 'id',
  114. get_lang('FirstName'),
  115. get_lang('LastName'),
  116. get_lang('Username'),
  117. get_lang('Email'),
  118. get_lang('Phone'),
  119. get_lang('OfficialCode'),
  120. get_lang('Active')
  121. );
  122. } else {
  123. $a_users[0] = array(
  124. 'id',
  125. get_lang('LastName'),
  126. get_lang('FirstName'),
  127. get_lang('Username'),
  128. get_lang('Email'),
  129. get_lang('Phone'),
  130. get_lang('OfficialCode'),
  131. get_lang('Active')
  132. );
  133. }
  134. } else {
  135. if ($sort_by_first_name) {
  136. $a_users[0] = array(
  137. 'id',
  138. get_lang('FirstName'),
  139. get_lang('LastName'),
  140. get_lang('Username'),
  141. get_lang('Phone'),
  142. get_lang('OfficialCode'),
  143. get_lang('Active')
  144. );
  145. } else {
  146. $a_users[0] = array(
  147. 'id',
  148. get_lang('LastName'),
  149. get_lang('FirstName'),
  150. get_lang('Username'),
  151. get_lang('Phone'),
  152. get_lang('OfficialCode'),
  153. get_lang('Active')
  154. );
  155. }
  156. }
  157. $legal = '';
  158. if (isset($course_info['activate_legal']) AND $course_info['activate_legal'] == 1) {
  159. $legal = ', legal_agreement';
  160. $a_users[0][] = get_lang('LegalAgreementAccepted');
  161. }
  162. if ($_GET['type'] == 'pdf') {
  163. $select_email_condition = ' user.email, ';
  164. if ($is_western_name_order) {
  165. $a_users[0] = array(
  166. '#',
  167. get_lang('UserPicture'),
  168. get_lang('OfficialCode'),
  169. get_lang('FirstName') . ', ' . get_lang('LastName'),
  170. get_lang('Email'),
  171. get_lang('Phone')
  172. );
  173. } else {
  174. $a_users[0] = array(
  175. '#',
  176. get_lang('UserPicture'),
  177. get_lang('OfficialCode'),
  178. get_lang('LastName') . ', ' . get_lang('FirstName'),
  179. get_lang('Email'),
  180. get_lang('Phone')
  181. );
  182. }
  183. }
  184. $a_users[0] = array_merge($a_users[0], $extra_fields);
  185. // users subscribed to the course through a session.
  186. if (api_get_session_id()) {
  187. $table_session_course_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  188. $sql = "SELECT DISTINCT
  189. user.user_id, ".($is_western_name_order ? "user.firstname, user.lastname" : "user.lastname, user.firstname").",
  190. user.username,
  191. $select_email_condition
  192. phone,
  193. user.official_code,
  194. active
  195. $legal
  196. FROM $table_session_course_user as session_course_user, $table_users as user ";
  197. if (api_is_multiple_url_enabled()) {
  198. $sql .= ' , '.Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER).' au ';
  199. }
  200. $sql .=" WHERE c_id = '$courseId' AND session_course_user.user_id = user.user_id ";
  201. $sql .= ' AND session_id = '.$sessionId;
  202. if (api_is_multiple_url_enabled()) {
  203. $sql .= " AND user.user_id = au.user_id AND access_url_id = $current_access_url_id ";
  204. }
  205. //only users no coaches/teachers
  206. $sql .= " AND session_course_user.status = 0 ";
  207. $sql .= $sort_by_first_name ? ' ORDER BY user.firstname, user.lastname' : ' ORDER BY user.lastname, user.firstname';
  208. $rs = Database::query($sql);
  209. $counter = 1;
  210. while ($user = Database:: fetch_array($rs, 'ASSOC')) {
  211. if (isset($user['legal_agreement'])) {
  212. if ($user['legal_agreement'] == 1) {
  213. $user['legal_agreement'] = get_lang('Yes');
  214. } else {
  215. $user['legal_agreement'] = get_lang('No');
  216. }
  217. }
  218. $extra_fields = UserManager::get_extra_user_data(
  219. $user['user_id'],
  220. false,
  221. false,
  222. false,
  223. true
  224. );
  225. if (!empty($extra_fields)) {
  226. foreach($extra_fields as $key => $extra_value) {
  227. $user[$key] = $extra_value;
  228. }
  229. }
  230. $data[] = $user;
  231. if ($_GET['type'] == 'pdf') {
  232. $user_info = api_get_user_info($user['user_id']);
  233. $user_image = Display::img($user_info['avatar'], null, array('width' => $user_image_pdf_size.'px'));
  234. if ($is_western_name_order) {
  235. $user_pdf = array(
  236. $counter,
  237. $user_image,
  238. $user['official_code'],
  239. $user['firstname'] . ', ' . $user['lastname'],
  240. $user['email'],
  241. $user['phone']
  242. );
  243. } else {
  244. $user_pdf = array(
  245. $counter,
  246. $user_image,
  247. $user['official_code'],
  248. $user['lastname'] . ', ' . $user['firstname'],
  249. $user['email'],
  250. $user['phone']
  251. );
  252. }
  253. $a_users[] = $user_pdf;
  254. } else {
  255. $a_users[] = $user;
  256. }
  257. $counter++;
  258. }
  259. }
  260. if ($sessionId == 0) {
  261. // users directly subscribed to the course
  262. $table_course_user = Database :: get_main_table(TABLE_MAIN_COURSE_USER);
  263. $sql = "SELECT DISTINCT
  264. user.user_id, ".($is_western_name_order ? "user.firstname, user.lastname" : "user.lastname, user.firstname").",
  265. user.username,
  266. $select_email_condition
  267. phone,
  268. user.official_code,
  269. active $legal
  270. FROM $table_course_user as course_user, $table_users as user ";
  271. if (api_is_multiple_url_enabled()) {
  272. $sql .= ' , '.Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER).' au ';
  273. }
  274. $sql .= " WHERE
  275. c_id = '$courseId' AND
  276. course_user.relation_type<>".COURSE_RELATION_TYPE_RRHH." AND
  277. course_user.user_id = user.user_id ";
  278. if (api_is_multiple_url_enabled()) {
  279. $sql .= " AND user.user_id = au.user_id AND access_url_id = $current_access_url_id ";
  280. }
  281. //only users no teachers/coaches
  282. $sql .= " AND course_user.status = 5 ";
  283. $sql .= ($sort_by_first_name ? " ORDER BY user.firstname, user.lastname" : " ORDER BY user.lastname, user.firstname");
  284. $rs = Database::query($sql);
  285. $counter = 1;
  286. while ($user = Database::fetch_array($rs, 'ASSOC')) {
  287. if (isset($user['legal_agreement'])) {
  288. if ($user['legal_agreement'] == 1) {
  289. $user['legal_agreement'] = get_lang('Yes');
  290. } else {
  291. $user['legal_agreement'] = get_lang('No');
  292. }
  293. }
  294. $extra_fields = UserManager::get_extra_user_data(
  295. $user['user_id'],
  296. false,
  297. false,
  298. false,
  299. true
  300. );
  301. if (!empty($extra_fields)) {
  302. foreach ($extra_fields as $key => $extra_value) {
  303. $user[$key] = $extra_value;
  304. }
  305. }
  306. if ($_GET['type'] == 'pdf') {
  307. $user_info = api_get_user_info($user['user_id']);
  308. $user_image = Display::img(
  309. $user_info['avatar'],
  310. null,
  311. array('width' => $user_image_pdf_size.'px')
  312. );
  313. if ($is_western_name_order) {
  314. $user_pdf = array(
  315. $counter,
  316. $user_image,
  317. $user['official_code'],
  318. $user['firstname'] . ', ' . $user['lastname'],
  319. $user['email'],
  320. $user['phone']
  321. );
  322. } else {
  323. $user_pdf = array(
  324. $counter,
  325. $user_image,
  326. $user['official_code'],
  327. $user['lastname'] . ', ' . $user['firstname'],
  328. $user['email'],
  329. $user['phone']
  330. );
  331. }
  332. $a_users[] = $user_pdf;
  333. } else {
  334. $a_users[] = $user;
  335. }
  336. $data[] = $user;
  337. $counter++;
  338. }
  339. }
  340. switch ($_GET['type']) {
  341. case 'csv' :
  342. Export::arrayToCsv($a_users);
  343. exit;
  344. case 'xls' :
  345. Export::arrayToXls($a_users);
  346. exit;
  347. case 'pdf' :
  348. $header_attributes = array(
  349. array('style' => 'width:10px'),
  350. array('style' => 'width:30px'),
  351. array('style' => 'width:50px'),
  352. array('style' => 'width:500px'),
  353. );
  354. $params = array(
  355. 'add_signatures' => false,
  356. 'filename' => get_lang('UserList'),
  357. 'pdf_title' => get_lang('StudentList'),
  358. 'header_attributes' => $header_attributes
  359. );
  360. Export::export_table_pdf($a_users, $params);
  361. exit;
  362. }
  363. }
  364. }
  365. } // end if allowed to edit
  366. if (api_is_allowed_to_edit(null, true)) {
  367. // Unregister user from course
  368. if (isset($_REQUEST['unregister']) && $_REQUEST['unregister']) {
  369. if (isset($_GET['user_id']) && is_numeric($_GET['user_id']) &&
  370. ($_GET['user_id'] != $_user['user_id'] || api_is_platform_admin())
  371. ) {
  372. $user_id = intval($_GET['user_id']);
  373. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  374. $tbl_session_rel_course = Database::get_main_table(TABLE_MAIN_SESSION_COURSE);
  375. $tbl_session_rel_user = Database::get_main_table(TABLE_MAIN_SESSION_USER);
  376. $sql = 'SELECT user.user_id
  377. FROM '.$tbl_user.' user
  378. INNER JOIN '.$tbl_session_rel_user.' reluser
  379. ON user.user_id = reluser.user_id AND reluser.relation_type<>'.SESSION_RELATION_TYPE_RRHH.'
  380. INNER JOIN '.$tbl_session_rel_course.' rel_course
  381. ON rel_course.session_id = reluser.session_id
  382. WHERE
  383. user.user_id = "'.$user_id.'" AND
  384. rel_course.c_id = "'.$courseId.'"';
  385. $result = Database::query($sql);
  386. $row = Database::fetch_array($result, 'ASSOC');
  387. if ($row['user_id'] == $user_id || $row['user_id'] == "") {
  388. CourseManager::unsubscribe_user($_GET['user_id'], $courseCode);
  389. $message = get_lang('UserUnsubscribed');
  390. } else {
  391. $message = get_lang('ThisStudentIsSubscribeThroughASession');
  392. }
  393. }
  394. }
  395. } else {
  396. // If student can unsubscribe
  397. if (isset($_REQUEST['unregister']) && $_REQUEST['unregister'] == 'yes') {
  398. if ($course_info['unsubscribe'] == 1) {
  399. $user_id = api_get_user_id();
  400. CourseManager::unsubscribe_user($user_id, $course_info['code']);
  401. header('Location: '.api_get_path(WEB_PATH).'user_portal.php');
  402. exit;
  403. }
  404. }
  405. }
  406. if (!$is_allowed_in_course) {
  407. api_not_allowed(true);
  408. }
  409. // Statistics
  410. Event::event_access_tool(TOOL_USER);
  411. /**
  412. * Get the users to display on the current page.
  413. */
  414. function get_number_of_users()
  415. {
  416. $counter = 0;
  417. $sessionId = api_get_session_id();
  418. $courseCode = api_get_course_id();
  419. $active = isset($_GET['active']) ? $_GET['active'] : null;
  420. if (!empty($sessionId)) {
  421. $a_course_users = CourseManager::get_user_list_from_course_code(
  422. $courseCode,
  423. $sessionId,
  424. null,
  425. null,
  426. null,
  427. null,
  428. false,
  429. false,
  430. null,
  431. null,
  432. null,
  433. $active
  434. );
  435. } else {
  436. $a_course_users = CourseManager::get_user_list_from_course_code(
  437. $courseCode,
  438. 0,
  439. null,
  440. null,
  441. null,
  442. null,
  443. false,
  444. false,
  445. null,
  446. null,
  447. null,
  448. $active
  449. );
  450. }
  451. foreach ($a_course_users as $o_course_user) {
  452. if ((isset($_GET['keyword']) &&
  453. searchUserKeyword(
  454. $o_course_user['firstname'],
  455. $o_course_user['lastname'],
  456. $o_course_user['username'],
  457. $o_course_user['official_code'],
  458. $_GET['keyword']
  459. )
  460. ) || !isset($_GET['keyword']) || empty($_GET['keyword'])
  461. ) {
  462. $counter++;
  463. }
  464. }
  465. return $counter;
  466. }
  467. /**
  468. * @param string $firstname
  469. * @param string $lastname
  470. * @param string $username
  471. * @param string $official_code
  472. * @param $keyword
  473. * @return bool
  474. */
  475. function searchUserKeyword($firstname, $lastname, $username, $official_code, $keyword) {
  476. if (
  477. api_strripos($firstname, $keyword) !== false ||
  478. api_strripos($lastname, $keyword) !== false ||
  479. api_strripos($username, $keyword) !== false ||
  480. api_strripos($official_code, $keyword) !== false
  481. ) {
  482. return true;
  483. } else {
  484. return false;
  485. }
  486. }
  487. /**
  488. * Get the users to display on the current page.
  489. */
  490. function get_user_data($from, $number_of_items, $column, $direction)
  491. {
  492. global $origin;
  493. global $is_western_name_order;
  494. global $extraFields;
  495. $course_info = api_get_course_info();
  496. $sessionId = api_get_session_id();
  497. $course_code = $course_info['code'];
  498. $a_users = array();
  499. // limit
  500. if (!isset($_GET['keyword']) || empty($_GET['keyword'])) {
  501. $limit = 'LIMIT '.intval($from).','.intval($number_of_items);
  502. }
  503. if (!in_array($direction, array('ASC', 'DESC'))) {
  504. $direction = 'ASC';
  505. }
  506. switch ($column) {
  507. case 2: //official code
  508. $order_by = 'ORDER BY user.official_code '.$direction;
  509. break;
  510. case 3:
  511. if ($is_western_name_order) {
  512. $order_by = 'ORDER BY user.firstname '.$direction.', user.lastname '.$direction;
  513. } else {
  514. $order_by = 'ORDER BY user.lastname '.$direction.', user.firstname '.$direction;
  515. }
  516. break;
  517. case 4:
  518. if ($is_western_name_order) {
  519. $order_by = 'ORDER BY user.lastname '.$direction.', user.firstname '.$direction;
  520. } else {
  521. $order_by = 'ORDER BY user.firstname '.$direction.', user.lastname '.$direction;
  522. }
  523. break;
  524. case 5: //username
  525. $order_by = 'ORDER BY user.username '.$direction;
  526. break;
  527. default:
  528. if ($is_western_name_order) {
  529. $order_by = 'ORDER BY user.lastname '.$direction.', user.firstname '.$direction;
  530. } else {
  531. $order_by = 'ORDER BY user.firstname '.$direction.', user.lastname '.$direction;
  532. }
  533. break;
  534. }
  535. $active = isset($_GET['active']) ? $_GET['active'] : null;
  536. $a_course_users = CourseManager :: get_user_list_from_course_code(
  537. $course_code,
  538. $sessionId,
  539. $limit,
  540. $order_by,
  541. null,
  542. null,
  543. false,
  544. false,
  545. null,
  546. array(),
  547. array(),
  548. $active
  549. );
  550. foreach ($a_course_users as $user_id => $o_course_user) {
  551. if ((
  552. isset($_GET['keyword']) &&
  553. searchUserKeyword(
  554. $o_course_user['firstname'],
  555. $o_course_user['lastname'],
  556. $o_course_user['username'],
  557. $o_course_user['official_code'],
  558. $_GET['keyword'])
  559. ) || !isset($_GET['keyword']) || empty($_GET['keyword'])
  560. ) {
  561. $groupsNameList = GroupManager::getAllGroupPerUserSubscription($user_id);
  562. $temp = array();
  563. if (api_is_allowed_to_edit(null, true)) {
  564. $userInfo = api_get_user_info($user_id);
  565. $photo = '<img src="'.$userInfo['avatar_small'].'" alt="'.$userInfo['complete_name'].'" title="'.$userInfo['complete_name'].'" />';
  566. $temp[] = $user_id;
  567. $temp[] = $photo;
  568. $temp[] = $o_course_user['official_code'];
  569. if ($is_western_name_order) {
  570. $temp[] = $o_course_user['firstname'];
  571. $temp[] = $o_course_user['lastname'];
  572. } else {
  573. $temp[] = $o_course_user['lastname'];
  574. $temp[] = $o_course_user['firstname'];
  575. }
  576. $temp[] = $o_course_user['username'];
  577. // Groups.
  578. $groupsNameListParsed = [];
  579. if (!empty($groupsNameList)) {
  580. $groupsNameListParsed = array_column($groupsNameList, 'name');
  581. }
  582. $temp[] = implode(', ', $groupsNameListParsed);
  583. // Status
  584. $default_status = get_lang('Student');
  585. if ((isset($o_course_user['status_rel']) && $o_course_user['status_rel'] == 1) ||
  586. (isset($o_course_user['status_session']) && $o_course_user['status_session'] == 2)
  587. ) {
  588. $default_status = get_lang('CourseManager');
  589. } elseif (isset($o_course_user['is_tutor']) && $o_course_user['is_tutor'] == 1) {
  590. $default_status = get_lang('Tutor');
  591. }
  592. $temp[] = $default_status;
  593. // Active
  594. $temp[] = $o_course_user['active'];
  595. if (!empty($extraFields)) {
  596. foreach ($extraFields as $extraField) {
  597. $extraFieldValue = new ExtraFieldValue('user');
  598. $data = $extraFieldValue->get_values_by_handler_and_field_id(
  599. $user_id,
  600. $extraField['id']
  601. );
  602. $temp[] = $data['value'];
  603. }
  604. }
  605. // User id for actions
  606. $temp[] = $user_id;
  607. $temp['is_tutor'] = isset($o_course_user['is_tutor']) ? $o_course_user['is_tutor'] : '';
  608. $temp['user_status_in_course'] = isset($o_course_user['status_rel']) ? $o_course_user['status_rel'] : '';
  609. } else {
  610. $userInfo = api_get_user_info($user_id);
  611. $userPicture = $userInfo['avatar'];
  612. $photo= '<img src="'.$userPicture.'" alt="'.$userInfo['complete_name'].'" width="22" height="22" title="'.$userInfo['complete_name'].'" />';
  613. $temp[] = $user_id;
  614. $temp[] = $photo;
  615. $temp[] = $o_course_user['official_code'];
  616. if ($is_western_name_order) {
  617. $temp[] = $o_course_user['firstname'];
  618. $temp[] = $o_course_user['lastname'];
  619. } else {
  620. $temp[] = $o_course_user['lastname'];
  621. $temp[] = $o_course_user['firstname'];
  622. }
  623. $temp[] = $o_course_user['username'];
  624. // Group.
  625. $temp[] = implode(', ', $groupsNameList);
  626. if ($course_info['unsubscribe'] == 1) {
  627. //User id for actions
  628. $temp[] = $user_id;
  629. }
  630. }
  631. $a_users[$user_id] = $temp;
  632. }
  633. }
  634. return $a_users;
  635. }
  636. /**
  637. * Build the active-column of the table to lock or unlock a certain user
  638. * lock = the user can no longer use this account
  639. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  640. * @param int $active the current state of the account
  641. * @param int $user_id The user id
  642. * @param string $urlParams
  643. *
  644. * @return string Some HTML-code with the lock/unlock button
  645. */
  646. function active_filter($active, $urlParams, $row)
  647. {
  648. $userId = api_get_user_id();
  649. $action = '';
  650. $image = '';
  651. if ($active == '1') {
  652. $action = 'AccountActive';
  653. $image = 'accept';
  654. }
  655. if ($active == '0') {
  656. $action = 'AccountInactive';
  657. $image = 'error';
  658. }
  659. $result = '';
  660. /* you cannot lock yourself out otherwise you could disable all the accounts including your own => everybody is
  661. locked out and nobody can change it anymore.*/
  662. if ($row[count($row)-1] <> $userId) {
  663. $result = '<center><img src="../img/icons/16/'.$image.'.png" border="0" style="vertical-align: middle;" alt="'.get_lang(ucfirst($action)).'" title="'.get_lang(ucfirst($action)).'"/></center>';
  664. }
  665. return $result;
  666. }
  667. /**
  668. * Build the modify-column of the table
  669. * @param int $user_id The user id
  670. * @return string Some HTML-code
  671. */
  672. function modify_filter($user_id, $row, $data)
  673. {
  674. global $origin, $is_allowed_to_track, $charset;
  675. $user_id = $data[0];
  676. $course_info = $_course = api_get_course_info();
  677. $current_user_id = api_get_user_id();
  678. $sessionId = api_get_session_id();
  679. $result = "";
  680. if ($is_allowed_to_track) {
  681. $result .= '<a href="../mySpace/myStudents.php?'.api_get_cidreq().'&student='.$user_id.'&amp;details=true&amp;course='.$_course['id'].'&amp;origin=user_course&amp;id_session='.api_get_session_id().'" title="'.get_lang('Tracking').'" >
  682. <img border="0" alt="'.get_lang('Tracking').'" src="../img/icons/22/stats.png" />
  683. </a>';
  684. }
  685. // If platform admin, show the login_as icon (this drastically shortens
  686. // time taken by support to test things out)
  687. if (api_is_platform_admin()) {
  688. $result .= ' <a href="'.api_get_path(WEB_CODE_PATH).'admin/user_list.php?action=login_as&amp;user_id='.$user_id.'&amp;sec_token='.$_SESSION['sec_token'].'">'.
  689. Display::return_icon('login_as.gif', get_lang('LoginAs')).'</a>&nbsp;&nbsp;';
  690. }
  691. if (api_is_allowed_to_edit(null, true)) {
  692. if (empty($sessionId)) {
  693. $isTutor = isset($data['is_tutor']) ? intval($data['is_tutor']) : 0;
  694. $isTutor = empty($isTutor) ? 1 : 0;
  695. $disabled = '';
  696. if ($data['user_status_in_course'] == COURSEMANAGER) {
  697. $disabled = 'disabled';
  698. }
  699. $result .= Display::url(
  700. get_lang('SetTutor'),
  701. 'user.php?'.api_get_cidreq().'&action=set_tutor&is_tutor='.$isTutor.'&user_id='.$user_id,
  702. array('class' => 'btn btn-default '.$disabled)
  703. ).'&nbsp;';
  704. }
  705. // edit
  706. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true' or api_is_platform_admin()) {
  707. // unregister
  708. if ($user_id != $current_user_id || api_is_platform_admin()) {
  709. $result .= '<a class="btn btn-small btn-danger" href="'.api_get_self().'?'.api_get_cidreq().'&unregister=yes&amp;user_id='.$user_id.'" title="'.get_lang('Unreg').' " onclick="javascript:if(!confirm(\''.addslashes(api_htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset)).'\')) return false;">'.get_lang('Unreg').'</a>&nbsp;';
  710. } else {
  711. //$result .= Display::return_icon('unsubscribe_course_na.png', get_lang('Unreg'),'',ICON_SIZE_SMALL).'</a>&nbsp;';
  712. }
  713. }
  714. } else {
  715. // Show buttons for unsubscribe
  716. if ($course_info['unsubscribe'] == 1) {
  717. if ($user_id == $current_user_id) {
  718. $result .= '<a class="btn btn-small btn-danger" href="'.api_get_self().'?'.api_get_cidreq().'&unregister=yes&amp;user_id='.$user_id.'" title="'.get_lang('Unreg').' " onclick="javascript:if(!confirm(\''.addslashes(api_htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset)).'\')) return false;">'.get_lang('Unreg').'</a>&nbsp;';
  719. }
  720. }
  721. }
  722. return $result;
  723. }
  724. function hide_field()
  725. {
  726. return null;
  727. }
  728. $default_column = 3;
  729. $table = new SortableTable('user_list', 'get_number_of_users', 'get_user_data', $default_column);
  730. $parameters['keyword'] = isset($_GET['keyword']) ? Security::remove_XSS($_GET['keyword']) : null;
  731. $parameters['sec_token'] = Security::get_token();
  732. $table->set_additional_parameters($parameters);
  733. $header_nr = 0;
  734. $indexList = array();
  735. $table->set_header($header_nr++, '', false);
  736. $indexList['photo'] = $header_nr;
  737. $table->set_header($header_nr++, get_lang('Photo'), false);
  738. $table->set_header($header_nr++, get_lang('OfficialCode'));
  739. $indexList['official_code'] = $header_nr;
  740. if ($is_western_name_order) {
  741. $indexList['firstname'] = $header_nr;
  742. $table->set_header($header_nr++, get_lang('FirstName'));
  743. $indexList['lastname'] = $header_nr;
  744. $table->set_header($header_nr++, get_lang('LastName'));
  745. } else {
  746. $indexList['lastname'] = $header_nr;
  747. $table->set_header($header_nr++, get_lang('LastName'));
  748. $indexList['firstname'] = $header_nr;
  749. $table->set_header($header_nr++, get_lang('FirstName'));
  750. }
  751. $indexList['username'] = $header_nr;
  752. $table->set_header($header_nr++, get_lang('LoginName'));
  753. $indexList['groups'] = $header_nr;
  754. $table->set_header($header_nr++, get_lang('GroupSingle'), false);
  755. if (api_is_allowed_to_edit(null, true) && api_get_setting('allow_user_course_subscription_by_course_admin') == 'true') {
  756. } else {
  757. $table->set_column_filter(0, 'hide_field');
  758. }
  759. $hideFields = api_get_configuration_value('hide_user_field_from_list');
  760. if (!empty($hideFields)) {
  761. foreach ($hideFields as $fieldToHide) {
  762. if (isset($indexList[$fieldToHide])) {
  763. $table->setHideColumn($indexList[$fieldToHide]);
  764. }
  765. }
  766. }
  767. if (api_is_allowed_to_edit(null, true)) {
  768. $table->set_header($header_nr++, get_lang('Status'), false);
  769. $table->set_header($header_nr++, get_lang('Active'), false);
  770. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true') {
  771. $table->set_column_filter(9, 'active_filter');
  772. } else {
  773. $table->set_column_filter(9, 'active_filter');
  774. }
  775. foreach ($extraFields as $extraField) {
  776. $table->set_header($header_nr++, $extraField['display_text'], false);
  777. }
  778. // Actions column
  779. $table->set_header($header_nr++, get_lang('Action'), false);
  780. $table->set_column_filter($header_nr-1, 'modify_filter');
  781. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true') {
  782. $table->set_form_actions(array('unsubscribe' => get_lang('Unreg')), 'user');
  783. }
  784. } else {
  785. if ($course_info['unsubscribe'] == 1) {
  786. $table->set_header($header_nr++, get_lang('Action'), false);
  787. $table->set_column_filter($header_nr-1, 'modify_filter');
  788. }
  789. }
  790. /* Header */
  791. if (isset($origin) && $origin == 'learnpath') {
  792. Display::display_reduced_header();
  793. } else {
  794. if (isset($_GET['keyword']) && !empty($_GET['keyword'])) {
  795. $interbreadcrumb[] = array ("url" => "user.php", "name" => get_lang("Users"));
  796. $tool_name = get_lang('SearchResults');
  797. } else {
  798. $tool_name = get_lang('Users');
  799. $origin = 'users';
  800. }
  801. Display::display_header($tool_name, "User");
  802. }
  803. /* Setting the permissions for this page */
  804. $is_allowed_to_track = ($is_courseAdmin || $is_courseTutor);
  805. // Tool introduction
  806. Display::display_introduction_section(TOOL_USER, 'left');
  807. $actions = '';
  808. if (api_is_allowed_to_edit(null, true)) {
  809. echo '<div class="actions">';
  810. $actions .= '<a href="user.php?'.api_get_cidreq().'&action=export&amp;type=csv">'.
  811. Display::return_icon('export_csv.png', get_lang('ExportAsCSV'),'',ICON_SIZE_MEDIUM).'</a> ';
  812. $actions .= '<a href="user.php?'.api_get_cidreq().'&action=export&amp;type=xls">'.
  813. Display::return_icon('export_excel.png', get_lang('ExportAsXLS'),'',ICON_SIZE_MEDIUM).'</a> ';
  814. if (api_get_setting('allow_user_course_subscription_by_course_admin') == 'true' ||
  815. api_is_platform_admin()
  816. ) {
  817. $actions .= '<a href="user_import.php?'.api_get_cidreq().'&action=import">'.
  818. Display::return_icon('import_csv.png', get_lang('ImportUsersToACourse'),'',ICON_SIZE_MEDIUM).'</a> ';
  819. }
  820. $actions .= '<a href="user.php?'.api_get_cidreq().'&action=export&type=pdf">'.
  821. Display::return_icon('pdf.png', get_lang('ExportToPDF'),'',ICON_SIZE_MEDIUM).'</a> ';
  822. /*$actions .= "<a href=\"../group/group.php?".api_get_cidreq()."\">".
  823. Display::return_icon('group.png', get_lang("GroupUserManagement"),'',ICON_SIZE_MEDIUM)."</a>";*/
  824. $allowTutors = api_get_setting('allow_tutors_to_assign_students_to_session');
  825. if (api_is_allowed_to_edit() && $allowTutors == 'true') {
  826. $actions .= ' <a class="btn btn-default" href="session_list.php?'.api_get_cidreq().'">'.get_lang('Sessions').'</a>';
  827. }
  828. // Build search-form
  829. $form = new FormValidator('search_user', 'get', '', '', null, FormValidator::LAYOUT_INLINE);
  830. $form->addText('keyword', '', false);
  831. $form->addButtonSearch(get_lang('SearchButton'));
  832. $form->display();
  833. echo $actions;
  834. echo '</div>';
  835. }
  836. echo UserManager::getUserSubscriptionTab(1);
  837. if (isset($message)) {
  838. Display::display_confirmation_message($message);
  839. }
  840. $table->display();
  841. if (!empty($_GET['keyword']) && !empty($_GET['submit'])) {
  842. $keyword_name = Security::remove_XSS($_GET['keyword']);
  843. echo '<br/>'.get_lang('SearchResultsFor').' <span style="font-style: italic ;"> '.$keyword_name.' </span><br>';
  844. }
  845. if ($origin != 'learnpath') {
  846. Display::display_footer();
  847. }