gradebook_functions_users.inc.php 5.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * Various user related functions
  5. * @author Julio Montoya <gugli100@gmail.com> adding security functions
  6. * @package chamilo.gradebook
  7. */
  8. /**
  9. * returns users within a course given by param
  10. * @param $course_id
  11. */
  12. function get_users_in_course($course_id) {
  13. $tbl_course_user = Database :: get_main_table(TABLE_MAIN_COURSE_USER);
  14. $tbl_session_course_user = Database :: get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  15. $tbl_user = Database :: get_main_table(TABLE_MAIN_USER);
  16. $order_clause = api_sort_by_first_name() ? ' ORDER BY firstname, lastname ASC' : ' ORDER BY lastname, firstname ASC';
  17. $current_session = api_get_session_id();
  18. $course_id = Database::escape_string($course_id);
  19. if (!empty($current_session)) {
  20. $sql = "SELECT user.user_id, user.username, lastname, firstname, official_code
  21. FROM $tbl_session_course_user as scru, $tbl_user as user
  22. WHERE scru.id_user=user.user_id
  23. AND scru.status=0
  24. AND scru.course_code='$course_id' AND id_session ='$current_session' $order_clause ";
  25. } else {
  26. $sql = 'SELECT user.user_id, user.username, lastname, firstname, official_code
  27. FROM '.$tbl_course_user.' as course_rel_user, '.$tbl_user.' as user
  28. WHERE course_rel_user.user_id=user.user_id AND
  29. course_rel_user.status='.STUDENT.' AND
  30. course_rel_user.course_code = "'.$course_id.'" '.$order_clause;
  31. }
  32. $result = Database::query($sql);
  33. return get_user_array_from_sql_result($result);
  34. }
  35. function get_user_array_from_sql_result($result) {
  36. $a_students = array();
  37. while ($user = Database::fetch_array($result)) {
  38. if (!array_key_exists($user['user_id'], $a_students)) {
  39. $a_current_student = array ();
  40. $a_current_student[] = $user['user_id'];
  41. $a_current_student[] = $user['username'];
  42. $a_current_student[] = $user['lastname'];
  43. $a_current_student[] = $user['firstname'];
  44. $a_current_student[] = $user['official_code'];
  45. $a_students['STUD'.$user['user_id']] = $a_current_student;
  46. }
  47. }
  48. return $a_students;
  49. }
  50. function get_all_users ($evals = array(), $links = array()) {
  51. $coursecodes = array();
  52. $users = array();
  53. foreach ($evals as $eval) {
  54. $coursecode = $eval->get_course_code();
  55. // evaluation in course
  56. if (isset($coursecode) && !empty($coursecode)) {
  57. if (!array_key_exists($coursecode,$coursecodes)) {
  58. $coursecodes[$coursecode] = '1';
  59. $users = array_merge($users, get_users_in_course($coursecode));
  60. }
  61. } else {// course independent evaluation
  62. $tbl_user = Database :: get_main_table(TABLE_MAIN_USER);
  63. $tbl_res = Database :: get_main_table(TABLE_MAIN_GRADEBOOK_RESULT);
  64. $sql = 'SELECT user.user_id,lastname, firstname, user.official_code
  65. FROM '.$tbl_res.' as res, '.$tbl_user.' as user
  66. WHERE res.evaluation_id = '.intval($eval->get_id())
  67. .' AND res.user_id = user.user_id';
  68. $result = Database::query($sql);
  69. $users = array_merge($users, get_user_array_from_sql_result($result));
  70. }
  71. }
  72. foreach ($links as $link) {
  73. // links are always in a course
  74. $coursecode = $link->get_course_code();
  75. if (!array_key_exists($coursecode,$coursecodes)) {
  76. $coursecodes[$coursecode] = '1';
  77. $users = array_merge($users, get_users_in_course($coursecode));
  78. }
  79. }
  80. unset ($coursecodes);
  81. return $users;
  82. }
  83. /**
  84. * Search students matching a given last name and/or first name
  85. * @author Bert Steppé
  86. */
  87. function find_students($mask= '') {
  88. // students shouldn't be here // don't search if mask empty
  89. if (!api_is_allowed_to_edit() || empty ($mask)) {
  90. return null;
  91. }
  92. $mask = Database::escape_string($mask);
  93. $tbl_user= Database :: get_main_table(TABLE_MAIN_USER);
  94. $tbl_cru= Database :: get_main_table(TABLE_MAIN_COURSE_USER);
  95. $sql= 'SELECT DISTINCT user.user_id, user.lastname, user.firstname, user.email, user.official_code ' . ' FROM ' . $tbl_user . ' user';
  96. if (!api_is_platform_admin()) {
  97. $sql .= ', ' . $tbl_cru . ' cru';
  98. }
  99. $sql .= ' WHERE user.status = ' . STUDENT;
  100. $sql .= ' AND (user.lastname LIKE '."'%" . $mask . "%'";
  101. $sql .= ' OR user.firstname LIKE '."'%" . $mask . "%')";
  102. if (!api_is_platform_admin()) {
  103. $sql .= ' AND user.user_id = cru.user_id AND cru.relation_type<>'.COURSE_RELATION_TYPE_RRHH.' ' . ' AND cru.course_code in' . ' (SELECT course_code' . ' FROM ' . $tbl_cru . ' WHERE user_id = ' . api_get_user_id() . ' AND status = ' . COURSEMANAGER . ')';
  104. }
  105. $sql .= ' ORDER BY lastname';
  106. $result= Database::query($sql);
  107. $db_users= Database::store_result($result);
  108. return $db_users;
  109. }
  110. /**
  111. * Get user information from a given id
  112. * @param int $userid The userid
  113. * @deprecated replace this function with the api_get_user_info()
  114. * @return array All user information as an associative array
  115. */
  116. function get_user_info_from_id($userid) {
  117. $user_table= Database :: get_main_table(TABLE_MAIN_USER);
  118. $sql= 'SELECT * FROM ' . $user_table . ' WHERE user_id=' . intval($userid);
  119. $res= Database::query($sql);
  120. $user= Database::fetch_array($res, 'ASSOC');
  121. return $user;
  122. }