message.lib.php 62 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This class provides methods for messages management.
  5. * Include/require it in your code to use its features.
  6. *
  7. * @package chamilo.library
  8. */
  9. /**
  10. * Code
  11. */
  12. /**
  13. * Class
  14. * @package chamilo.library
  15. */
  16. class MessageManager
  17. {
  18. public static function get_online_user_list($current_user_id)
  19. {
  20. //@todo this is a bad idea to parse all users online
  21. $count = Online::who_is_online_count();
  22. $userlist = Online::who_is_online(0, $count, null, null, 30, true);
  23. $online_user_list = array();
  24. foreach ($userlist as $user_id) {
  25. $userInfo = api_get_user_info($user_id);
  26. $online_user_list[$user_id] = $userInfo['complete_name'].($current_user_id == $user_id ? ("&nbsp;(".get_lang(
  27. 'Myself'
  28. ).")") : (""));
  29. }
  30. return $online_user_list;
  31. }
  32. /**
  33. * Get the new messages for the current user from the database.
  34. */
  35. public static function get_new_messages()
  36. {
  37. $table_message = Database::get_main_table(TABLE_MESSAGE);
  38. if (!api_get_user_id()) {
  39. return false;
  40. }
  41. $query = "SELECT count(id) as count FROM $table_message
  42. WHERE user_receiver_id = ".api_get_user_id()." AND msg_status = ".MESSAGE_STATUS_UNREAD;
  43. $result = Database::query($query);
  44. if (Database::num_rows($result)) {
  45. $result = Database::fetch_array($result);
  46. return $result['count'];
  47. }
  48. return 0;
  49. }
  50. /**
  51. * Get the list of user_ids of users who are online.
  52. */
  53. public static function users_connected_by_id()
  54. {
  55. $count = Online::who_is_online_count();
  56. $user_connect = Online::who_is_online(0, $count, null, null, 30, true);
  57. $user_id_list = array();
  58. for ($i = 0; $i < count($user_connect); $i++) {
  59. $user_id_list[$i] = $user_connect[$i][0];
  60. }
  61. return $user_id_list;
  62. }
  63. /**
  64. * Gets the total number of messages, used for the inbox sortable table
  65. */
  66. public static function get_number_of_messages($unread = false)
  67. {
  68. $table_message = Database::get_main_table(TABLE_MESSAGE);
  69. $condition_msg_status = '';
  70. if ($unread) {
  71. $condition_msg_status = ' msg_status = '.MESSAGE_STATUS_UNREAD.' ';
  72. } else {
  73. $condition_msg_status = ' msg_status IN('.MESSAGE_STATUS_NEW.','.MESSAGE_STATUS_UNREAD.') ';
  74. }
  75. $sql_query = "SELECT COUNT(*) as number_messages FROM $table_message WHERE $condition_msg_status AND user_receiver_id=".api_get_user_id(
  76. );
  77. $sql_result = Database::query($sql_query);
  78. $result = Database::fetch_array($sql_result);
  79. return $result['number_messages'];
  80. }
  81. /**
  82. * Gets information about some messages, used for the inbox sortable table
  83. * @param int $from
  84. * @param int $number_of_items
  85. * @param string $direction
  86. */
  87. public static function get_message_data($from, $number_of_items, $column, $direction)
  88. {
  89. global $charset;
  90. $from = intval($from);
  91. $number_of_items = intval($number_of_items);
  92. //forcing this order
  93. if (!isset($direction)) {
  94. $column = 3;
  95. $direction = 'DESC';
  96. } else {
  97. $column = intval($column);
  98. if (!in_array($direction, array('ASC', 'DESC'))) {
  99. $direction = 'ASC';
  100. }
  101. }
  102. $table_message = Database::get_main_table(TABLE_MESSAGE);
  103. $sql_query = "SELECT id as col0, user_sender_id as col1, title as col2, send_date as col3, msg_status as col4 FROM $table_message ".
  104. " WHERE user_receiver_id=".api_get_user_id()." AND msg_status IN (0,1)".
  105. " ORDER BY col$column $direction LIMIT $from,$number_of_items";
  106. $sql_result = Database::query($sql_query);
  107. $i = 0;
  108. $message_list = array();
  109. while ($result = Database::fetch_row($sql_result)) {
  110. $message[0] = $result[0];
  111. $result[2] = Security::remove_XSS($result[2], STUDENT, true);
  112. $result[2] = Text::cut($result[2], 80, true);
  113. if ($result[4] == 1) {
  114. $class = 'class = "unread"';
  115. } else {
  116. $class = 'class = "read"';
  117. }
  118. $link = '';
  119. if (isset($_GET['f']) && $_GET['f'] == 'social') {
  120. $link = '&f=social';
  121. }
  122. $userInfo = api_get_user_info($result[1]);
  123. $message[1] = '<a '.$class.' href="view_message.php?id='.$result[0].$link.'">'.$result[2].'</a><br />'.$userInfo['complete_name'];
  124. $message[3] = '<a href="new_message.php?re_id='.$result[0].$link.'">'.Display::return_icon(
  125. 'message_reply.png',
  126. get_lang('ReplyToMessage')
  127. ).'</a>'.
  128. '&nbsp;&nbsp;<a onclick="javascript:if(!confirm('."'".addslashes(
  129. api_htmlentities(get_lang('ConfirmDeleteMessage'))
  130. )."'".')) return false;" href="inbox.php?action=deleteone&id='.$result[0].$link.'">'.Display::return_icon(
  131. 'delete.png',
  132. get_lang('DeleteMessage')
  133. ).'</a>';
  134. $message[2] = api_convert_and_format_date($result[3], DATE_TIME_FORMAT_LONG); //date stays the same
  135. foreach ($message as $key => $value) {
  136. $message[$key] = api_xml_http_response_encode($value);
  137. }
  138. $message_list[] = $message;
  139. $i++;
  140. }
  141. return $message_list;
  142. }
  143. /**
  144. * Sends a message to a user/group
  145. *
  146. * @param int receiver user id
  147. * @param string subject
  148. * @param string content
  149. * @param array attachment files array($_FILES) (optional)
  150. * @param array comments about attachment files (optional)
  151. * @param int group id (optional)
  152. * @param int parent id (optional)
  153. * @param int message id for updating the message (optional)
  154. * @param int sender id (optional) the default value is the current user_id
  155. * @return bool
  156. */
  157. public static function send_message(
  158. $receiver_user_id,
  159. $subject,
  160. $content,
  161. $file_attachments = array(),
  162. $file_comments = array(),
  163. $group_id = 0,
  164. $parent_id = 0,
  165. $edit_message_id = 0,
  166. $topic_id = 0,
  167. $sender_id = null
  168. ) {
  169. $table_message = Database::get_main_table(TABLE_MESSAGE);
  170. $group_id = intval($group_id);
  171. $receiver_user_id = intval($receiver_user_id);
  172. $parent_id = intval($parent_id);
  173. $edit_message_id = intval($edit_message_id);
  174. $topic_id = intval($topic_id);
  175. //Saving the user id for the chamilo inbox, if the sender is null we asume that the current user is the one that sent the message
  176. if (empty($sender_id)) {
  177. $user_sender_id = api_get_user_id();
  178. } else {
  179. $user_sender_id = intval($sender_id);
  180. }
  181. $total_filesize = 0;
  182. if (is_array($file_attachments)) {
  183. foreach ($file_attachments as $file_attach) {
  184. $total_filesize += $file_attach['size'];
  185. }
  186. }
  187. // validating fields
  188. if (empty($subject) && empty($group_id)) {
  189. return get_lang('YouShouldWriteASubject');
  190. } else {
  191. if ($total_filesize > intval(api_get_setting('message_max_upload_filesize'))) {
  192. return sprintf(
  193. get_lang("FilesSizeExceedsX"),
  194. Text::format_file_size(api_get_setting('message_max_upload_filesize'))
  195. );
  196. }
  197. }
  198. $inbox_last_id = null;
  199. //Just in case we replace the and \n and \n\r while saving in the DB
  200. $content = str_replace(array("\n", "\n\r"), '<br />', $content);
  201. $now = api_get_utc_datetime();
  202. if (!empty($receiver_user_id) || !empty($group_id)) {
  203. // message for user friend
  204. $clean_subject = Database::escape_string($subject);
  205. $clean_content = Database::escape_string($content);
  206. //message in inbox for user friend
  207. //@todo it's possible to edit a message? yes, only for groups
  208. if ($edit_message_id) {
  209. $query = " UPDATE $table_message SET update_date = '".$now."', content = '$clean_content' WHERE id = '$edit_message_id' ";
  210. $result = Database::query($query);
  211. $inbox_last_id = $edit_message_id;
  212. } else {
  213. $query = "INSERT INTO $table_message(user_sender_id, user_receiver_id, msg_status, send_date, title, content, group_id, parent_id, update_date ) ".
  214. "VALUES ('$user_sender_id', '$receiver_user_id', '1', '".$now."','$clean_subject','$clean_content','$group_id','$parent_id', '".$now."')";
  215. $result = Database::query($query);
  216. $inbox_last_id = Database::insert_id();
  217. }
  218. // Save attachment file for inbox messages
  219. if (is_array($file_attachments)) {
  220. $i = 0;
  221. foreach ($file_attachments as $file_attach) {
  222. if ($file_attach['error'] == 0) {
  223. self::save_message_attachment_file(
  224. $file_attach,
  225. $file_comments[$i],
  226. $inbox_last_id,
  227. null,
  228. $receiver_user_id,
  229. $group_id
  230. );
  231. }
  232. $i++;
  233. }
  234. }
  235. if (empty($group_id)) {
  236. //message in outbox for user friend or group
  237. $sql = "INSERT INTO $table_message (user_sender_id, user_receiver_id, msg_status, send_date, title, content, group_id, parent_id, update_date ) ".
  238. " VALUES ('$user_sender_id', '$receiver_user_id', '4', '".$now."','$clean_subject','$clean_content', '$group_id', '$parent_id', '".$now."')";
  239. Database::query($sql);
  240. $outbox_last_id = Database::insert_id();
  241. // save attachment file for outbox messages
  242. if (is_array($file_attachments)) {
  243. $o = 0;
  244. foreach ($file_attachments as $file_attach) {
  245. if ($file_attach['error'] == 0) {
  246. self::save_message_attachment_file(
  247. $file_attach,
  248. $file_comments[$o],
  249. $outbox_last_id,
  250. $user_sender_id
  251. );
  252. }
  253. $o++;
  254. }
  255. }
  256. }
  257. //Load user settings
  258. $notification = new Notification();
  259. $sender_info = array();
  260. if (empty($group_id)) {
  261. if (!empty($user_sender_id)) {
  262. $sender_info = api_get_user_info($user_sender_id);
  263. }
  264. $notification->save_notification(
  265. Notification::NOTIFICATION_TYPE_MESSAGE,
  266. array($receiver_user_id),
  267. $subject,
  268. $content,
  269. $sender_info
  270. );
  271. } else {
  272. $group_info = GroupPortalManager::get_group_data($group_id);
  273. $group_info['topic_id'] = $topic_id;
  274. $group_info['msg_id'] = $inbox_last_id;
  275. $user_list = GroupPortalManager::get_users_by_group($group_id, false, array(), 0, 1000);
  276. //Adding more sens to the message group
  277. $subject = sprintf(get_lang('ThereIsANewMessageInTheGroupX'), $group_info['name']);
  278. $new_user_list = array();
  279. foreach ($user_list as $user_data) {
  280. $new_user_list[] = $user_data['user_id'];
  281. }
  282. $group_info = array('group_info' => $group_info, 'user_info' => $sender_info);
  283. $notification->save_notification(
  284. NOTIFICATION_TYPE_GROUP,
  285. $new_user_list,
  286. $subject,
  287. $content,
  288. $group_info
  289. );
  290. }
  291. return $inbox_last_id;
  292. }
  293. return false;
  294. }
  295. /**
  296. * A handy way to send message
  297. */
  298. public static function send_message_simple($receiver_user_id, $subject, $message, $sender_id = null)
  299. {
  300. return MessageManager::send_message(
  301. $receiver_user_id,
  302. $subject,
  303. $message,
  304. null,
  305. null,
  306. null,
  307. null,
  308. null,
  309. null,
  310. $sender_id
  311. );
  312. }
  313. /**
  314. * Update parent ids for other receiver user from current message in groups
  315. * @author Christian Fasanando Flores
  316. * @param int parent id
  317. * @param int receiver user id
  318. * @param int message id
  319. * @return void
  320. */
  321. public static function update_parent_ids_from_reply($parent_id, $receiver_user_id, $message_id)
  322. {
  323. $table_message = Database::get_main_table(TABLE_MESSAGE);
  324. $parent_id = intval($parent_id);
  325. $receiver_user_id = intval($receiver_user_id);
  326. $message_id = intval($message_id);
  327. // first get data from message id (parent)
  328. $sql_message = "SELECT * FROM $table_message WHERE id = '$parent_id'";
  329. $rs_message = Database::query($sql_message);
  330. $row_message = Database::fetch_array($rs_message);
  331. // get message id from data found early for other receiver user
  332. $sql_msg_id = " SELECT id FROM $table_message WHERE user_sender_id ='{$row_message[user_sender_id]}'
  333. AND title='{$row_message[title]}' AND content='{$row_message[content]}' AND group_id='{$row_message[group_id]}' AND user_receiver_id='$receiver_user_id'";
  334. $rs_msg_id = Database::query($sql_msg_id);
  335. $row = Database::fetch_array($rs_msg_id);
  336. // update parent_id for other user receiver
  337. $sql_upd = "UPDATE $table_message SET parent_id = '{$row[id]}' WHERE id = '$message_id'";
  338. Database::query($sql_upd);
  339. }
  340. public static function delete_message_by_user_receiver($user_receiver_id, $id)
  341. {
  342. $table_message = Database::get_main_table(TABLE_MESSAGE);
  343. if ($id != strval(intval($id))) {
  344. return false;
  345. }
  346. $user_receiver_id = intval($user_receiver_id);
  347. $id = Database::escape_string($id);
  348. $sql = "SELECT * FROM $table_message WHERE id=".$id." AND msg_status<>4;";
  349. $rs = Database::query($sql);
  350. if (Database::num_rows($rs) > 0) {
  351. $row = Database::fetch_array($rs);
  352. // delete attachment file
  353. $res = self::delete_message_attachment_file($id, $user_receiver_id);
  354. // delete message
  355. $query = "UPDATE $table_message SET msg_status=3 WHERE user_receiver_id=".$user_receiver_id." AND id=".$id;
  356. //$query = "DELETE FROM $table_message WHERE user_receiver_id=".Database::escape_string($user_receiver_id)." AND id=".$id;
  357. $result = Database::query($query);
  358. return $result;
  359. } else {
  360. return false;
  361. }
  362. }
  363. /**
  364. * Set status deleted
  365. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  366. * @param integer
  367. * @param integer
  368. * @return array
  369. */
  370. public static function delete_message_by_user_sender($user_sender_id, $id)
  371. {
  372. if ($id != strval(intval($id))) {
  373. return false;
  374. }
  375. $table_message = Database::get_main_table(TABLE_MESSAGE);
  376. $id = intval($id);
  377. $user_sender_id = intval($user_sender_id);
  378. $sql = "SELECT * FROM $table_message WHERE id='$id'";
  379. $rs = Database::query($sql);
  380. if (Database::num_rows($rs) > 0) {
  381. $row = Database::fetch_array($rs);
  382. // delete attachment file
  383. $res = self::delete_message_attachment_file($id, $user_sender_id);
  384. // delete message
  385. $query = "UPDATE $table_message SET msg_status=3 WHERE user_sender_id='$user_sender_id' AND id='$id'";
  386. //$query = "DELETE FROM $table_message WHERE user_sender_id='$user_sender_id' AND id='$id'";
  387. $result = Database::query($query);
  388. return $result;
  389. }
  390. return false;
  391. }
  392. /**
  393. * Saves a message attachment files
  394. * @param array $_FILES['name']
  395. * @param string a comment about the uploaded file
  396. * @param int message id
  397. * @param int receiver user id (optional)
  398. * @param int sender user id (optional)
  399. * @param int group id (optional)
  400. * @return void
  401. */
  402. public static function save_message_attachment_file(
  403. $file_attach,
  404. $file_comment,
  405. $message_id,
  406. $receiver_user_id = 0,
  407. $sender_user_id = 0,
  408. $group_id = 0
  409. ) {
  410. $tbl_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  411. // Try to add an extension to the file if it hasn't one
  412. $new_file_name = FileManager::add_ext_on_mime(stripslashes($file_attach['name']), $file_attach['type']);
  413. // user's file name
  414. $file_name = $file_attach['name'];
  415. if (!FileManager::filter_extension($new_file_name)) {
  416. Display :: display_error_message(get_lang('UplUnableToSaveFileFilteredExtension'));
  417. } else {
  418. $new_file_name = uniqid('');
  419. $message_user_id = '';
  420. if (!empty($receiver_user_id)) {
  421. $message_user_id = $receiver_user_id;
  422. } else {
  423. $message_user_id = $sender_user_id;
  424. }
  425. // User-reserved directory where photos have to be placed.
  426. if (!empty($group_id)) {
  427. $path_user_info = GroupPortalManager::get_group_picture_path_by_id($group_id, 'system', true);
  428. } else {
  429. $path_user_info = UserManager::get_user_picture_path_by_id($message_user_id, 'system', true);
  430. }
  431. $path_message_attach = $path_user_info['dir'].'message_attachments/';
  432. // If this directory does not exist - we create it.
  433. if (!file_exists($path_message_attach)) {
  434. @mkdir($path_message_attach, api_get_permissions_for_new_directories(), true);
  435. }
  436. $new_path = $path_message_attach.$new_file_name;
  437. if (is_uploaded_file($file_attach['tmp_name'])) {
  438. $result = @copy($file_attach['tmp_name'], $new_path);
  439. }
  440. $safe_file_comment = Database::escape_string($file_comment);
  441. $safe_file_name = Database::escape_string($file_name);
  442. $safe_new_file_name = Database::escape_string($new_file_name);
  443. // Storing the attachments if any
  444. $sql = "INSERT INTO $tbl_message_attach(filename,comment, path,message_id,size)
  445. VALUES ( '$safe_file_name', '$safe_file_comment', '$safe_new_file_name' , '$message_id', '".$file_attach['size']."' )";
  446. $result = Database::query($sql);
  447. }
  448. }
  449. /**
  450. * Delete message attachment files (logically updating the row with a suffix _DELETE_id)
  451. * @param int message id
  452. * @param int message user id (receiver user id or sender user id)
  453. * @param int group id (optional)
  454. * @return void
  455. */
  456. public static function delete_message_attachment_file($message_id, $message_uid, $group_id = 0)
  457. {
  458. $message_id = intval($message_id);
  459. $message_uid = intval($message_uid);
  460. $table_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  461. $sql = "SELECT * FROM $table_message_attach WHERE message_id = '$message_id'";
  462. $rs = Database::query($sql);
  463. $new_paths = array();
  464. while ($row = Database::fetch_array($rs)) {
  465. $path = $row['path'];
  466. $attach_id = $row['id'];
  467. $new_path = $path.'_DELETED_'.$attach_id;
  468. if (!empty($group_id)) {
  469. $path_user_info = GroupPortalManager::get_group_picture_path_by_id($group_id, 'system', true);
  470. } else {
  471. $path_user_info = UserManager::get_user_picture_path_by_id($message_uid, 'system', true);
  472. }
  473. $path_message_attach = $path_user_info['dir'].'message_attachments/';
  474. if (is_file($path_message_attach.$path)) {
  475. if (rename($path_message_attach.$path, $path_message_attach.$new_path)) {
  476. $sql_upd = "UPDATE $table_message_attach set path='$new_path' WHERE id ='$attach_id'";
  477. $rs_upd = Database::query($sql_upd);
  478. }
  479. }
  480. }
  481. }
  482. /**
  483. * update messages by user id and message id
  484. * @param int user id
  485. * @param int message id
  486. * @return resource
  487. */
  488. public static function update_message($user_id, $message_id)
  489. {
  490. if ($message_id != strval(intval($message_id)) || $user_id != strval(intval($user_id))) {
  491. return false;
  492. }
  493. $table_message = Database::get_main_table(TABLE_MESSAGE);
  494. $query = "UPDATE $table_message SET msg_status = '0' WHERE msg_status<>4 AND user_receiver_id=".intval(
  495. $user_id
  496. )." AND id='".intval($message_id)."'";
  497. $result = Database::query($query);
  498. }
  499. /**
  500. * get messages by user id and message id
  501. * @param int user id
  502. * @param int message id
  503. * @return array
  504. */
  505. public static function get_message_by_user($user_id, $message_id)
  506. {
  507. if ($message_id != strval(intval($message_id)) || $user_id != strval(intval($user_id))) {
  508. return false;
  509. }
  510. $table_message = Database::get_main_table(TABLE_MESSAGE);
  511. $query = "SELECT * FROM $table_message WHERE user_receiver_id=".intval($user_id)." AND id='".intval(
  512. $message_id
  513. )."'";
  514. $result = Database::query($query);
  515. return $row = Database::fetch_array($result);
  516. }
  517. /**
  518. * get messages by group id
  519. * @param int group id
  520. * @return array
  521. */
  522. public static function get_messages_by_group($group_id)
  523. {
  524. if ($group_id != strval(intval($group_id))) {
  525. return false;
  526. }
  527. $table_message = Database::get_main_table(TABLE_MESSAGE);
  528. $group_id = intval($group_id);
  529. $query = "SELECT * FROM $table_message WHERE group_id= $group_id AND msg_status NOT IN ('".MESSAGE_STATUS_OUTBOX."', '".MESSAGE_STATUS_DELETED."') ORDER BY id";
  530. $rs = Database::query($query);
  531. $data = array();
  532. if (Database::num_rows($rs) > 0) {
  533. while ($row = Database::fetch_array($rs, 'ASSOC')) {
  534. $data[] = $row;
  535. }
  536. }
  537. return $data;
  538. }
  539. /**
  540. * get messages by group id
  541. * @param int group id
  542. * @return array
  543. */
  544. public static function get_messages_by_group_by_message($group_id, $message_id)
  545. {
  546. if ($group_id != strval(intval($group_id))) {
  547. return false;
  548. }
  549. $table_message = Database::get_main_table(TABLE_MESSAGE);
  550. $group_id = intval($group_id);
  551. $query = "SELECT * FROM $table_message WHERE group_id = $group_id AND msg_status NOT IN ('".MESSAGE_STATUS_OUTBOX."', '".MESSAGE_STATUS_DELETED."') ORDER BY id ";
  552. $rs = Database::query($query);
  553. $data = array();
  554. $parents = array();
  555. if (Database::num_rows($rs) > 0) {
  556. while ($row = Database::fetch_array($rs, 'ASSOC')) {
  557. if ($message_id == $row['parent_id'] || in_array($row['parent_id'], $parents)) {
  558. $parents[] = $row['id'];
  559. $data[] = $row;
  560. }
  561. }
  562. }
  563. return $data;
  564. }
  565. /**
  566. * get messages by parent id optionally with limit
  567. * @param int parent id
  568. * @param int group id (optional)
  569. * @param int offset (optional)
  570. * @param int limit (optional)
  571. * @return array
  572. */
  573. public static function get_messages_by_parent($parent_id, $group_id = '', $offset = 0, $limit = 0)
  574. {
  575. if ($parent_id != strval(intval($parent_id))) {
  576. return false;
  577. }
  578. $table_message = Database::get_main_table(TABLE_MESSAGE);
  579. $current_uid = api_get_user_id();
  580. $parent_id = intval($parent_id);
  581. $condition_group_id = "";
  582. if ($group_id !== '') {
  583. $group_id = intval($group_id);
  584. $condition_group_id = " AND group_id = '$group_id' ";
  585. }
  586. $condition_limit = "";
  587. if ($offset && $limit) {
  588. $offset = ($offset - 1) * $limit;
  589. $condition_limit = " LIMIT $offset,$limit ";
  590. }
  591. $query = "SELECT * FROM $table_message WHERE parent_id='$parent_id' AND msg_status <> ".MESSAGE_STATUS_OUTBOX." $condition_group_id ORDER BY send_date DESC $condition_limit ";
  592. $rs = Database::query($query);
  593. $data = array();
  594. if (Database::num_rows($rs) > 0) {
  595. while ($row = Database::fetch_array($rs)) {
  596. $data[$row['id']] = $row;
  597. }
  598. }
  599. return $data;
  600. }
  601. /**
  602. * Gets information about if exist messages
  603. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  604. * @param integer
  605. * @param integer
  606. * @return boolean
  607. */
  608. public static function exist_message($user_id, $id)
  609. {
  610. if ($id != strval(intval($id)) || $user_id != strval(intval($user_id))) {
  611. return false;
  612. }
  613. $table_message = Database::get_main_table(TABLE_MESSAGE);
  614. $query = "SELECT id FROM $table_message WHERE user_receiver_id=".Database::escape_string(
  615. $user_id
  616. )." AND id='".Database::escape_string($id)."'";
  617. $result = Database::query($query);
  618. $num = Database::num_rows($result);
  619. if ($num > 0) {
  620. return true;
  621. } else {
  622. return false;
  623. }
  624. }
  625. /**
  626. * Gets information about messages sent
  627. * @param integer
  628. * @param integer
  629. * @param string
  630. * @return array
  631. */
  632. public static function get_message_data_sent($from, $number_of_items, $column, $direction)
  633. {
  634. global $charset;
  635. $from = intval($from);
  636. $number_of_items = intval($number_of_items);
  637. if (!isset($direction)) {
  638. $column = 3;
  639. $direction = 'DESC';
  640. } else {
  641. $column = intval($column);
  642. if (!in_array($direction, array('ASC', 'DESC'))) {
  643. $direction = 'ASC';
  644. }
  645. }
  646. $table_message = Database::get_main_table(TABLE_MESSAGE);
  647. $request = api_is_xml_http_request();
  648. $sql_query = "SELECT id as col0, user_sender_id as col1, title as col2, send_date as col3, user_receiver_id as col4, msg_status as col5 FROM $table_message ".
  649. "WHERE user_sender_id=".api_get_user_id()." AND msg_status=".MESSAGE_STATUS_OUTBOX." ".
  650. "ORDER BY col$column $direction LIMIT $from,$number_of_items";
  651. $sql_result = Database::query($sql_query);
  652. $i = 0;
  653. $message_list = array();
  654. while ($result = Database::fetch_row($sql_result)) {
  655. if ($request === true) {
  656. $message[0] = '<input type="checkbox" value='.$result[0].' name="out[]">';
  657. } else {
  658. $message[0] = ($result[0]);
  659. }
  660. $class = 'class = "read"';
  661. $result[2] = Security::remove_XSS($result[2]);
  662. $userInfo = api_get_user_info($result[4]);
  663. if ($request === true) {
  664. $message[1] = '<a onclick="show_sent_message('.$result[0].')" href="javascript:void(0)">'.$userInfo['complete_name'].'</a>';
  665. $message[2] = '<a onclick="show_sent_message('.$result[0].')" href="javascript:void(0)">'.str_replace(
  666. "\\",
  667. "",
  668. $result[2]
  669. ).'</a>';
  670. $message[3] = api_convert_and_format_date($result[3], DATE_TIME_FORMAT_LONG); //date stays the same
  671. $message[4] = '&nbsp;&nbsp;<a onclick="delete_one_message_outbox('.$result[0].')" href="javascript:void(0)" >'.Display::return_icon(
  672. 'delete.png',
  673. get_lang('DeleteMessage')
  674. ).'</a>';
  675. } else {
  676. $link = '';
  677. if ($_GET['f'] == 'social') {
  678. $link = '&f=social';
  679. }
  680. $message[1] = '<a '.$class.' onclick="show_sent_message ('.$result[0].')" href="../messages/view_message.php?id_send='.$result[0].$link.'">'.$result[2].'</a><br />'.$userInfo['complete_name'];
  681. $message[2] = api_convert_and_format_date($result[3], DATE_TIME_FORMAT_LONG); //date stays the same
  682. $message[3] = '<a href="outbox.php?action=deleteone&id='.$result[0].'&f='.Security::remove_XSS(
  683. $_GET['f']
  684. ).'" onclick="javascript:if(!confirm('."'".addslashes(
  685. api_htmlentities(get_lang('ConfirmDeleteMessage'))
  686. )."'".')) return false;" >'.Display::return_icon('delete.png', get_lang('DeleteMessage')).'</a>';
  687. }
  688. foreach ($message as $key => $value) {
  689. $message[$key] = $value;
  690. }
  691. $message_list[] = $message;
  692. $i++;
  693. }
  694. return $message_list;
  695. }
  696. /**
  697. * Gets information about number messages sent
  698. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  699. * @param void
  700. * @return integer
  701. */
  702. public static function get_number_of_messages_sent()
  703. {
  704. $table_message = Database::get_main_table(TABLE_MESSAGE);
  705. $sql_query = "SELECT COUNT(*) as number_messages FROM $table_message WHERE msg_status=".MESSAGE_STATUS_OUTBOX." AND user_sender_id=".api_get_user_id(
  706. );
  707. $sql_result = Database::query($sql_query);
  708. $result = Database::fetch_array($sql_result);
  709. return $result['number_messages'];
  710. }
  711. /**
  712. * display message box in the inbox
  713. * @param int the message id
  714. * @param string inbox or outbox strings are available
  715. * @todo replace numbers with letters in the $row array pff...
  716. * @return string html with the message content
  717. */
  718. public static function show_message_box($message_id, $source = 'inbox')
  719. {
  720. $table_message = Database::get_main_table(TABLE_MESSAGE);
  721. $message_id = intval($message_id);
  722. if ($source == 'outbox') {
  723. if (isset($message_id) && is_numeric($message_id)) {
  724. $query = "SELECT * FROM $table_message WHERE user_sender_id=".api_get_user_id(
  725. )." AND id=".$message_id." AND msg_status=4;";
  726. $result = Database::query($query);
  727. $path = 'outbox.php';
  728. }
  729. } else {
  730. if (is_numeric($message_id) && !empty($message_id)) {
  731. $query = "UPDATE $table_message SET msg_status = '".MESSAGE_STATUS_NEW."' WHERE user_receiver_id=".api_get_user_id(
  732. )." AND id='".$message_id."';";
  733. $result = Database::query($query);
  734. $query = "SELECT * FROM $table_message WHERE msg_status<>4 AND user_receiver_id=".api_get_user_id(
  735. )." AND id='".$message_id."';";
  736. $result = Database::query($query);
  737. }
  738. $path = 'inbox.php';
  739. }
  740. $row = Database::fetch_array($result, 'ASSOC');
  741. $user_sender_id = $row['user_sender_id'];
  742. // get file attachments by message id
  743. $files_attachments = self::get_links_message_attachment_files($message_id, $source);
  744. $user_con = self::users_connected_by_id();
  745. $band = 0;
  746. for ($i = 0; $i < count($user_con); $i++) {
  747. if ($user_sender_id == $user_con[$i]) {
  748. $band = 1;
  749. }
  750. }
  751. $title = Security::remove_XSS($row['title'], STUDENT, true);
  752. $content = Security::remove_XSS($row['content'], STUDENT, true);
  753. $from_user = UserManager::get_user_info_by_id($user_sender_id);
  754. $name = api_get_person_name($from_user['firstname'], $from_user['lastname']);
  755. $user_image = UserManager::get_picture_user($row['user_sender_id'], $from_user['picture_uri'], 80);
  756. $user_image = Display::img($user_image['file'], $name, array('title' => $name));
  757. $message_content = Display::page_subheader(str_replace("\\", "", $title));
  758. if (api_get_setting('allow_social_tool') == 'true') {
  759. $message_content .= $user_image.' ';
  760. }
  761. if (api_get_setting('allow_social_tool') == 'true') {
  762. $userInfo = api_get_user_info($row[2]);
  763. if ($source == 'outbox') {
  764. $message_content .= get_lang('From').': <a href="'.api_get_path(
  765. WEB_PATH
  766. ).'main/social/profile.php?u='.$user_sender_id.'">'.$name.'</a> '.api_strtolower(
  767. get_lang('To')
  768. ).'&nbsp;<b>'.$userInfo['complete_name'].'</b>';
  769. } else {
  770. $message_content .= get_lang('From').' <a href="'.api_get_path(
  771. WEB_PATH
  772. ).'main/social/profile.php?u='.$user_sender_id.'">'.$name.'</a> '.api_strtolower(
  773. get_lang('To')
  774. ).'&nbsp;<b>'.get_lang('Me').'</b>';
  775. }
  776. } else {
  777. $userInfo = api_get_user_info($row['user_receiver_id']);
  778. if ($source == 'outbox') {
  779. $message_content .= get_lang('From').':&nbsp;'.$name.'</b> '.api_strtolower(
  780. get_lang('To')
  781. ).' <b>'.$userInfo['complete_name'].'</b>';
  782. } else {
  783. $message_content .= get_lang('From').':&nbsp;'.$name.'</b> '.api_strtolower(
  784. get_lang('To')
  785. ).' <b>'.get_lang('Me').'</b>';
  786. }
  787. }
  788. $message_content .= ' '.get_lang('Date').': '.api_get_local_time($row['send_date']);
  789. $message_content .= '<br />';
  790. $message_content .= '<br />';
  791. $message_content .= str_replace("\\", "", $content);
  792. $message_content .= '<br />';
  793. $message_content .= '<div id="message-attach">'.(!empty($files_attachments) ? implode(
  794. '<br />',
  795. $files_attachments
  796. ) : '').'</div>
  797. ';
  798. $social_link = '';
  799. if ($_GET['f'] == 'social') {
  800. $social_link = 'f=social';
  801. }
  802. if ($source == 'outbox') {
  803. $message_content .= '<a href="outbox.php?'.$social_link.'">'.Display::return_icon(
  804. 'back.png',
  805. get_lang('ReturnToOutbox')
  806. ).'</a> &nbsp';
  807. } else {
  808. $message_content .= '<a href="inbox.php?'.$social_link.'">'.Display::return_icon(
  809. 'back.png',
  810. get_lang('ReturnToInbox')
  811. ).'</a> &nbsp';
  812. $message_content .= '<a href="new_message.php?re_id='.$message_id.'&'.$social_link.'">'.Display::return_icon(
  813. 'message_reply.png',
  814. get_lang('ReplyToMessage')
  815. ).'</a> &nbsp';
  816. }
  817. $message_content .= '<a href="inbox.php?action=deleteone&id='.$message_id.'&'.$social_link.'" >'.Display::return_icon(
  818. 'delete.png',
  819. get_lang('DeleteMessage')
  820. ).'</a>&nbsp';
  821. return $message_content;
  822. }
  823. /**
  824. * get user id by user email
  825. * @param string $user_email
  826. * @return int user id
  827. */
  828. public static function get_user_id_by_email($user_email)
  829. {
  830. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  831. $sql = 'SELECT user_id FROM '.$tbl_user.' WHERE email="'.Database::escape_string($user_email).'";';
  832. $rs = Database::query($sql);
  833. $row = Database::fetch_array($rs, 'ASSOC');
  834. if (isset($row['user_id'])) {
  835. return $row['user_id'];
  836. } else {
  837. return null;
  838. }
  839. }
  840. /**
  841. * Displays messages of a group with nested view
  842. * @param int group id
  843. */
  844. public static function display_messages_for_group($group_id)
  845. {
  846. global $my_group_role;
  847. $rows = self::get_messages_by_group($group_id);
  848. $topics_per_page = 10;
  849. $html_messages = '';
  850. $query_vars = array('id' => $group_id, 'topics_page_nr' => 0);
  851. if (is_array($rows) && count($rows) > 0) {
  852. // prepare array for topics with its items
  853. $topics = array();
  854. $x = 0;
  855. foreach ($rows as $index => $value) {
  856. if (empty($value['parent_id'])) {
  857. $topics[$value['id']] = $value;
  858. }
  859. }
  860. $new_topics = array();
  861. foreach ($topics as $id => $value) {
  862. $rows = null;
  863. $rows = self::get_messages_by_group_by_message($group_id, $value['id']);
  864. if (!empty($rows)) {
  865. $count = count(self::calculate_children($rows, $value['id']));
  866. } else {
  867. $count = 0;
  868. }
  869. $value['count'] = $count;
  870. $new_topics[$id] = $value;
  871. }
  872. //$new_topics = sort_column($new_topics,'count');
  873. $param_names = array_keys($_GET);
  874. $array_html = array();
  875. foreach ($new_topics as $index => $topic) {
  876. $html = '';
  877. // topics
  878. //$indent = 0;
  879. $user_sender_info = UserManager::get_user_info_by_id($topic['user_sender_id']);
  880. //$files_attachments = self::get_links_message_attachment_files($topic['id']);
  881. $name = api_get_person_name($user_sender_info['firstname'], $user_sender_info['lastname']);
  882. $html .= '<div class="row">';
  883. $items = $topic['count'];
  884. $reply_label = ($items == 1) ? get_lang('GroupReply') : get_lang('GroupReplies');
  885. $html .= '<div class="span1">';
  886. $html .= Display::div(
  887. Display::tag('span', $items).$reply_label,
  888. array('class' => 'group_discussions_replies')
  889. );
  890. $html .= '</div>';
  891. $topic['title'] = trim($topic['title']);
  892. if (empty($topic['title'])) {
  893. $topic['title'] = get_lang('Untitled');
  894. }
  895. $html .= '<div class="span4">';
  896. $html .= Display::tag(
  897. 'h4',
  898. Display::url(
  899. Security::remove_XSS($topic['title'], STUDENT, true),
  900. 'group_topics.php?id='.$group_id.'&topic_id='.$topic['id']
  901. )
  902. );
  903. if ($my_group_role == GROUP_USER_PERMISSION_ADMIN || $my_group_role == GROUP_USER_PERMISSION_MODERATOR) {
  904. $actions = '<br />'.Display::url(
  905. get_lang('Delete'),
  906. api_get_path(
  907. WEB_CODE_PATH
  908. ).'social/group_topics.php?action=delete&id='.$group_id.'&topic_id='.$topic['id'],
  909. array('class' => 'btn')
  910. );
  911. }
  912. $date = '';
  913. if ($topic['send_date'] != $topic['update_date']) {
  914. if (!empty($topic['update_date']) && $topic['update_date'] != '0000-00-00 00:00:00') {
  915. $date .= '<div class="message-group-date" > <i>'.get_lang('LastUpdate').' '.date_to_str_ago(
  916. $topic['update_date']
  917. ).'</i></div>';
  918. }
  919. } else {
  920. $date .= '<div class="message-group-date"> <i>'.get_lang('Created').' '.date_to_str_ago(
  921. $topic['send_date']
  922. ).'</i></div>';
  923. }
  924. $html .= $date.$actions;
  925. $html .= '</div>';
  926. $image_path = UserManager::get_user_picture_path_by_id($topic['user_sender_id'], 'web', false, true);
  927. $image_repository = $image_path['dir'];
  928. $existing_image = $image_path['file'];
  929. $user_info = '<td valign="top"><a href="'.api_get_path(
  930. WEB_PATH
  931. ).'main/social/profile.php?u='.$topic['user_sender_id'].'">'.$name.'&nbsp;</a>';
  932. $user_info .= '<div class="message-group-author"><img src="'.$image_repository.$existing_image.'" alt="'.$name.'" width="32" height="32" title="'.$name.'" /></div>';
  933. $user_info .= '</td>';
  934. $html .= '<div class="span2">';
  935. $html .= $user_info;
  936. $html .= '</div>';
  937. $html .= '</div>'; //rounded_div
  938. $array_html[] = array($html);
  939. }
  940. // grids for items and topics with paginations
  941. $html_messages .= Display::return_sortable_grid(
  942. 'topics',
  943. array(),
  944. $array_html,
  945. array('hide_navigation' => false, 'per_page' => $topics_per_page),
  946. $query_vars,
  947. false,
  948. array(true, true, true, false),
  949. false
  950. );
  951. }
  952. return $html_messages;
  953. }
  954. /**
  955. * Displays messages of a group with nested view
  956. * @param int group id
  957. */
  958. public static function display_message_for_group($group_id, $topic_id, $is_member, $message_id)
  959. {
  960. global $my_group_role;
  961. $main_message = self::get_message_by_id($topic_id);
  962. if (empty($main_message)) {
  963. return false;
  964. }
  965. $rows = self::get_messages_by_group_by_message($group_id, $topic_id);
  966. $rows = self::calculate_children($rows, $topic_id);
  967. $current_user_id = api_get_user_id();
  968. $items_per_page = 50;
  969. $query_vars = array('id' => $group_id, 'topic_id' => $topic_id, 'topics_page_nr' => 0);
  970. // Main message
  971. $user_link = '';
  972. $links = '';
  973. $main_content = '';
  974. $items_page_nr = null;
  975. $html = '';
  976. $delete_button = '';
  977. if (api_is_platform_admin()) {
  978. $delete_button = Display::url(
  979. Display::return_icon('delete.png', get_lang('Delete'), array(), ICON_SIZE_SMALL),
  980. 'group_topics.php?action=delete&id='.$group_id.'&topic_id='.$topic_id
  981. );
  982. }
  983. $html .= Display::page_subheader(Security::remove_XSS($main_message['title'].$delete_button, STUDENT, true));
  984. $user_sender_info = UserManager::get_user_info_by_id($main_message['user_sender_id']);
  985. $files_attachments = self::get_links_message_attachment_files($main_message['id']);
  986. $name = api_get_person_name($user_sender_info['firstname'], $user_sender_info['lastname']);
  987. $topic_page_nr = isset($_GET['topics_page_nr']) ? intval($_GET['topics_page_nr']) : null;
  988. $links .= '<div id="message-reply-link">';
  989. if (($my_group_role == GROUP_USER_PERMISSION_ADMIN || $my_group_role == GROUP_USER_PERMISSION_MODERATOR) || $main_message['user_sender_id'] == $current_user_id) {
  990. $links .= '<a href="'.api_get_path(
  991. WEB_CODE_PATH
  992. ).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.$current_user_id.'&group_id='.$group_id.'&message_id='.$main_message['id'].'&action=edit_message_group&anchor_topic=topic_'.$main_message['id'].'&topics_page_nr='.$topic_page_nr.'&items_page_nr='.$items_page_nr.'&topic_id='.$main_message['id'].'" class="group_message_popup" title="'.get_lang(
  993. 'Edit'
  994. ).'">';
  995. $links .= Display :: return_icon('edit.png', get_lang('Edit'), array(), ICON_SIZE_SMALL).'</a>';
  996. }
  997. $links .= '&nbsp;&nbsp;<a href="'.api_get_path(
  998. WEB_CODE_PATH
  999. ).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.api_get_user_id(
  1000. ).'&group_id='.$group_id.'&message_id='.$main_message['id'].'&action=reply_message_group&anchor_topic=topic_'.$main_message['id'].'&topics_page_nr='.$topic_page_nr.'&items_page_nr='.$items_page_nr.'&topic_id='.$main_message['id'].'" class="group_message_popup" title="'.get_lang(
  1001. 'Reply'
  1002. ).'">';
  1003. $links .= Display :: return_icon('talk.png', get_lang('Reply')).'</a>';
  1004. $links .= '</div>';
  1005. $image_path = UserManager::get_user_picture_path_by_id($main_message['user_sender_id'], 'web', false, true);
  1006. $image_repository = $image_path['dir'];
  1007. $existing_image = $image_path['file'];
  1008. $main_content .= '<div class="message-group-author"><img src="'.$image_repository.$existing_image.'" alt="'.$name.'" width="32" height="32" title="'.$name.'" /></div>';
  1009. $user_link = '<a href="'.api_get_path(
  1010. WEB_PATH
  1011. ).'main/social/profile.php?u='.$main_message['user_sender_id'].'">'.$name.'&nbsp;</a>';
  1012. $date = '';
  1013. if ($main_message['send_date'] != $main_message['update_date']) {
  1014. if (!empty($main_message['update_date']) && $main_message['update_date'] != '0000-00-00 00:00:00') {
  1015. $date = '<div class="message-group-date"> '.get_lang('LastUpdate').' '.date_to_str_ago(
  1016. $main_message['update_date']
  1017. ).'</div>';
  1018. }
  1019. } else {
  1020. $date = '<div class="message-group-date"> '.get_lang('Created').' '.date_to_str_ago(
  1021. $main_message['send_date']
  1022. ).'</div>';
  1023. }
  1024. $attachment = '<div class="message-attach">'.(!empty($files_attachments) ? implode(
  1025. '<br />',
  1026. $files_attachments
  1027. ) : '').'</div>';
  1028. $main_content .= '<div class="message-group-content">'.$links.$user_link.' '.$date.$main_message['content'].$attachment.'</div>';
  1029. $main_content = Security::remove_XSS($main_content, STUDENT, true);
  1030. $html .= Display::div(
  1031. Display::div(
  1032. Display::div(
  1033. $main_content,
  1034. array('class' => 'group_social_sub_item', 'style' => 'background-color:#fff;')
  1035. ),
  1036. array('class' => 'group_social_item')
  1037. ),
  1038. array('class' => 'group_social_grid')
  1039. );
  1040. $topic_id = $main_message['id'];
  1041. if (is_array($rows) && count($rows) > 0) {
  1042. $topics = $rows;
  1043. $array_html_items = array();
  1044. foreach ($topics as $index => $topic) {
  1045. if (empty($topic['id'])) {
  1046. continue;
  1047. }
  1048. $items_page_nr = isset($_GET['items_'.$topic['id'].'_page_nr']) ? intval(
  1049. $_GET['items_'.$topic['id'].'_page_nr']
  1050. ) : null;
  1051. $user_link = '';
  1052. $links = '';
  1053. $html_items = '';
  1054. $user_sender_info = UserManager::get_user_info_by_id($topic['user_sender_id']);
  1055. $files_attachments = self::get_links_message_attachment_files($topic['id']);
  1056. $name = api_get_person_name($user_sender_info['firstname'], $user_sender_info['lastname']);
  1057. $links .= '<div id="message-reply-link">';
  1058. if (($my_group_role == GROUP_USER_PERMISSION_ADMIN || $my_group_role == GROUP_USER_PERMISSION_MODERATOR) || $topic['user_sender_id'] == $current_user_id) {
  1059. $links .= '<a href="'.api_get_path(
  1060. WEB_CODE_PATH
  1061. ).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.$current_user_id.'&group_id='.$group_id.'&message_id='.$topic['id'].'&action=edit_message_group&anchor_topic=topic_'.$topic_id.'&topics_page_nr='.$topic_page_nr.'&items_page_nr='.$items_page_nr.'&topic_id='.$topic_id.'" class="group_message_popup" title="'.get_lang(
  1062. 'Edit'
  1063. ).'">'.Display :: return_icon('edit.png', get_lang('Edit'), array(), ICON_SIZE_SMALL).'</a>';
  1064. }
  1065. $links .= '&nbsp;&nbsp;<a href="'.api_get_path(
  1066. WEB_CODE_PATH
  1067. ).'social/message_for_group_form.inc.php?view_panel=1&height=390&width=610&&user_friend='.api_get_user_id(
  1068. ).'&group_id='.$group_id.'&message_id='.$topic['id'].'&action=reply_message_group&anchor_topic=topic_'.$topic_id.'&topics_page_nr='.$topic_page_nr.'&items_page_nr='.$items_page_nr.'&topic_id='.$topic_id.'" class="group_message_popup" title="'.get_lang(
  1069. 'Reply'
  1070. ).'">';
  1071. $links .= Display :: return_icon('talk.png', get_lang('Reply')).'</a>';
  1072. $links .= '</div>';
  1073. $image_path = UserManager::get_user_picture_path_by_id($topic['user_sender_id'], 'web', false, true);
  1074. $image_repository = $image_path['dir'];
  1075. $existing_image = $image_path['file'];
  1076. $html_items .= '<div class="message-group-author"><img src="'.$image_repository.$existing_image.'" alt="'.$name.'" width="32" height="32" title="'.$name.'" /></div>';
  1077. $user_link = '<a href="'.api_get_path(
  1078. WEB_PATH
  1079. ).'main/social/profile.php?u='.$topic['user_sender_id'].'">'.$name.'&nbsp;</a>';
  1080. $date = '';
  1081. if ($topic['send_date'] != $topic['update_date']) {
  1082. if (!empty($topic['update_date']) && $topic['update_date'] != '0000-00-00 00:00:00') {
  1083. $date = '<div class="message-group-date"> '.get_lang('LastUpdate').' '.date_to_str_ago(
  1084. $topic['update_date']
  1085. ).'</div>';
  1086. }
  1087. } else {
  1088. $date = '<div class="message-group-date"> '.get_lang('Created').' '.date_to_str_ago(
  1089. $topic['send_date']
  1090. ).'</div>';
  1091. }
  1092. $attachment = '<div class="message-attach">'.(!empty($files_attachments) ? implode(
  1093. '<br />',
  1094. $files_attachments
  1095. ) : '').'</div>';
  1096. $html_items .= '<div class="message-group-content">'.$links.$user_link.' '.$date.Security::remove_XSS(
  1097. $topic['content'],
  1098. STUDENT,
  1099. true
  1100. ).$attachment.'</div>';
  1101. $base_padding = 20;
  1102. if ($topic['indent_cnt'] == 0) {
  1103. $indent = $base_padding;
  1104. } else {
  1105. $indent = intval($topic['indent_cnt']) * $base_padding + $base_padding;
  1106. }
  1107. $class = 'group_social_sub_item';
  1108. if (isset($message_id) && $message_id == $topic['id']) {
  1109. $class .= ' group_social_sub_item_highlight';
  1110. }
  1111. $html_items = Display::div($html_items, array('class' => $class, 'id' => 'msg_'.$topic['id']));
  1112. $html_items = Display::div($html_items, array('class' => '', 'style' => 'margin-left:'.$indent.'px'));
  1113. $array_html_items[] = array($html_items);
  1114. }
  1115. // grids for items with paginations
  1116. $options = array('hide_navigation' => false, 'per_page' => $items_per_page);
  1117. $visibility = array(true, true, true, false);
  1118. $style_class = array(
  1119. 'item' => array('class' => 'group_social_item'),
  1120. 'main' => array('class' => 'group_social_grid')
  1121. );
  1122. if (!empty($array_html_items)) {
  1123. $html .= Display::return_sortable_grid(
  1124. 'items_'.$topic['id'],
  1125. array(),
  1126. $array_html_items,
  1127. $options,
  1128. $query_vars,
  1129. null,
  1130. $visibility,
  1131. false,
  1132. $style_class
  1133. );
  1134. }
  1135. }
  1136. return $html;
  1137. }
  1138. /**
  1139. * Add children to messages by id is used for nested view messages
  1140. * @param array rows of messages
  1141. * @return array new list adding the item children
  1142. */
  1143. public static function calculate_children($rows, $first_seed)
  1144. {
  1145. $rows_with_children = array();
  1146. foreach ($rows as $row) {
  1147. $rows_with_children[$row["id"]] = $row;
  1148. $rows_with_children[$row["parent_id"]]["children"][] = $row["id"];
  1149. }
  1150. $rows = $rows_with_children;
  1151. $sorted_rows = array(0 => array());
  1152. self::message_recursive_sort($rows, $sorted_rows, $first_seed);
  1153. unset($sorted_rows[0]);
  1154. return $sorted_rows;
  1155. }
  1156. /**
  1157. * Sort recursively the messages, is used for for nested view messages
  1158. * @param array original rows of messages
  1159. * @param array list recursive of messages
  1160. * @param int seed for calculate the indent
  1161. * @param int indent for nested view
  1162. * @return void
  1163. */
  1164. public static function message_recursive_sort($rows, &$messages, $seed = 0, $indent = 0)
  1165. {
  1166. if ($seed > 0 && isset($rows[$seed]["id"])) {
  1167. $messages[$rows[$seed]["id"]] = $rows[$seed];
  1168. $messages[$rows[$seed]["id"]]["indent_cnt"] = $indent;
  1169. $indent++;
  1170. }
  1171. if (isset($rows[$seed]["children"])) {
  1172. foreach ($rows[$seed]["children"] as $child) {
  1173. self::message_recursive_sort($rows, $messages, $child, $indent);
  1174. }
  1175. }
  1176. }
  1177. /**
  1178. * Sort date by desc from a multi-dimensional array
  1179. * @param array1 first array to compare
  1180. * @param array2 second array to compare
  1181. * @return bool
  1182. */
  1183. public function order_desc_date($array1, $array2)
  1184. {
  1185. return strcmp($array2['send_date'], $array1['send_date']);
  1186. }
  1187. /**
  1188. * Get array of links (download) for message attachment files
  1189. * @param int message id
  1190. * @param string type message list (inbox/outbox)
  1191. * @return array
  1192. */
  1193. public static function get_links_message_attachment_files($message_id, $type = '')
  1194. {
  1195. $tbl_message_attach = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
  1196. $message_id = intval($message_id);
  1197. // get file attachments by message id
  1198. $links_attach_file = array();
  1199. if (!empty($message_id)) {
  1200. $sql = "SELECT * FROM $tbl_message_attach WHERE message_id = '$message_id'";
  1201. $rs_file = Database::query($sql);
  1202. if (Database::num_rows($rs_file) > 0) {
  1203. $attach_icon = Display::return_icon('attachment.gif', '');
  1204. $archiveURL = api_get_path(WEB_CODE_PATH).'messages/download.php?type='.$type.'&file=';
  1205. while ($row_file = Database::fetch_array($rs_file)) {
  1206. $archiveFile = $row_file['path'];
  1207. $filename = $row_file['filename'];
  1208. $filesize = Text::format_file_size($row_file['size']);
  1209. $filecomment = $row_file['comment'];
  1210. $links_attach_file[] = $attach_icon.'&nbsp;<a href="'.$archiveURL.$archiveFile.'">'.$filename.'</a>&nbsp;('.$filesize.')'.(!empty($filecomment) ? '&nbsp;-&nbsp;<i>'.$filecomment.'</i>' : '');
  1211. }
  1212. }
  1213. }
  1214. return $links_attach_file;
  1215. }
  1216. /**
  1217. * Get message list by id
  1218. * @param int message id
  1219. * @return array
  1220. */
  1221. public static function get_message_by_id($message_id)
  1222. {
  1223. $tbl_message = Database::get_main_table(TABLE_MESSAGE);
  1224. $message_id = intval($message_id);
  1225. $sql = "SELECT * FROM $tbl_message WHERE id = '$message_id' AND msg_status <> '".MESSAGE_STATUS_DELETED."' ";
  1226. $res = Database::query($sql);
  1227. $item = array();
  1228. if (Database::num_rows($res) > 0) {
  1229. $item = Database::fetch_array($res, 'ASSOC');
  1230. }
  1231. return $item;
  1232. }
  1233. static function generate_message_form($id, $params = array())
  1234. {
  1235. $form = new FormValidator('send_message', null, 'post', null, array(
  1236. 'id' => $id.'_form',
  1237. 'class' => 'form-vertical'
  1238. ));
  1239. $form->addElement('text', 'subject', get_lang('Subject'), array('id' => 'subject_id', 'class' => 'span5'));
  1240. $form->addElement(
  1241. 'textarea',
  1242. 'content',
  1243. get_lang('Message'),
  1244. array('id' => 'content_id', 'rows' => '5', 'class' => 'span5')
  1245. );
  1246. $div = Display::div($form->return_form(), array('id' => $id.'_div', 'style' => 'display:none'));
  1247. return $div;
  1248. }
  1249. static function generate_invitation_form($id, $params = array())
  1250. {
  1251. $form = new FormValidator('send_invitation', null, 'post', null, array(
  1252. 'id' => $id.'_form',
  1253. 'class' => 'form-vertical'
  1254. ));
  1255. //$form->addElement('text', 'subject', get_lang('Subject'), array('id' => 'subject_id'));
  1256. $form->addElement(
  1257. 'textarea',
  1258. 'content',
  1259. get_lang('AddPersonalMessage'),
  1260. array('id' => 'content_invitation_id', 'rows' => '5', 'class' => 'span5')
  1261. );
  1262. $div = Display::div($form->return_form(), array('id' => $id.'_div', 'style' => 'display:none'));
  1263. return $div;
  1264. }
  1265. //@todo this functions should be in the message class
  1266. static function inbox_display()
  1267. {
  1268. $success = get_lang('SelectedMessagesDeleted');
  1269. $html = '';
  1270. if (isset($_REQUEST['action'])) {
  1271. switch ($_REQUEST['action']) {
  1272. case 'delete' :
  1273. $number_of_selected_messages = count($_POST['id']);
  1274. foreach ($_POST['id'] as $index => $message_id) {
  1275. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $message_id);
  1276. }
  1277. $html .= Display::return_message(api_xml_http_response_encode($success), 'normal', false);
  1278. break;
  1279. case 'deleteone' :
  1280. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $_GET['id']);
  1281. $html .= Display::return_message(api_xml_http_response_encode($success), 'confirmation', false);
  1282. break;
  1283. }
  1284. }
  1285. // display sortable table with messages of the current user
  1286. $table = new SortableTable('message_inbox', array(
  1287. 'MessageManager',
  1288. 'get_number_of_messages'
  1289. ), array(
  1290. 'MessageManager',
  1291. 'get_message_data'
  1292. ), 3, 20, 'DESC');
  1293. $table->set_header(0, '', false, array('style' => 'width:15px;'));
  1294. $table->set_header(1, get_lang('Messages'), false);
  1295. $table->set_header(2, get_lang('Date'), true, array('style' => 'width:180px;'));
  1296. $table->set_header(3, get_lang('Modify'), false, array('style' => 'width:70px;'));
  1297. if (isset($_REQUEST['f']) && $_REQUEST['f'] == 'social') {
  1298. $parameters['f'] = 'social';
  1299. $table->set_additional_parameters($parameters);
  1300. }
  1301. $table->set_form_actions(array('delete' => get_lang('DeleteSelectedMessages')));
  1302. $html .= $table->return_table();
  1303. return $html;
  1304. }
  1305. static function outbox_display()
  1306. {
  1307. $request = api_is_xml_http_request();
  1308. global $charset;
  1309. $social_link = false;
  1310. if ($_REQUEST['f'] == 'social') {
  1311. $social_link = 'f=social';
  1312. }
  1313. $success = get_lang('SelectedMessagesDeleted').'&nbsp</b><br /><a href="outbox.php?'.$social_link.'">'.get_lang(
  1314. 'BackToOutbox'
  1315. ).'</a>';
  1316. $html = null;
  1317. if (isset ($_REQUEST['action'])) {
  1318. switch ($_REQUEST['action']) {
  1319. case 'delete' :
  1320. $number_of_selected_messages = count($_POST['id']);
  1321. if ($number_of_selected_messages != 0) {
  1322. foreach ($_POST['id'] as $index => $message_id) {
  1323. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $message_id);
  1324. }
  1325. }
  1326. $html .= Display::return_message(api_xml_http_response_encode($success), 'normal', false);
  1327. break;
  1328. case 'deleteone' :
  1329. MessageManager::delete_message_by_user_receiver(api_get_user_id(), $_GET['id']);
  1330. $html .= Display::return_message(api_xml_http_response_encode($success), 'normal', false);
  1331. $html .= '<br/>';
  1332. break;
  1333. }
  1334. }
  1335. // display sortable table with messages of the current user
  1336. $table = new SortableTable('message_outbox', array(
  1337. 'MessageManager',
  1338. 'get_number_of_messages_sent'
  1339. ), array(
  1340. 'MessageManager',
  1341. 'get_message_data_sent'
  1342. ), 3, 20, 'DESC');
  1343. $parameters['f'] = Security::remove_XSS($_GET['f']);
  1344. $table->set_additional_parameters($parameters);
  1345. $table->set_header(0, '', false, array('style' => 'width:15px;'));
  1346. $table->set_header(1, get_lang('Messages'), false);
  1347. $table->set_header(2, get_lang('Date'), true, array('style' => 'width:160px;'));
  1348. $table->set_header(3, get_lang('Modify'), false, array('style' => 'width:70px;'));
  1349. $table->set_form_actions(array('delete' => get_lang('DeleteSelectedMessages')));
  1350. $html .= $table->return_table();
  1351. return $html;
  1352. }
  1353. }
  1354. function get_number_of_messages_mask()
  1355. {
  1356. return MessageManager::get_number_of_messages();
  1357. }
  1358. function get_message_data_mask($from, $number_of_items, $column, $direction)
  1359. {
  1360. $column = '3';
  1361. $direction = 'DESC';
  1362. //non set by SortableTable ?
  1363. $number_of_items = get_number_of_messages_mask();
  1364. return MessageManager::get_message_data($from, $number_of_items, $column, $direction);
  1365. }
  1366. function get_number_of_messages_send_mask()
  1367. {
  1368. return MessageManager::get_number_of_messages_sent();
  1369. }
  1370. function get_message_data_send_mask($from, $number_of_items, $column, $direction)
  1371. {
  1372. $column = '3';
  1373. $direction = 'desc';
  1374. //non set by SortableTable ?
  1375. $number_of_items = get_number_of_messages_send_mask();
  1376. return MessageManager::get_message_data_sent($from, $number_of_items, $column, $direction);
  1377. }