index.php 7.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * @package chamilo.main
  5. */
  6. use \ChamiloSession as Session;
  7. define('CHAMILO_HOMEPAGE', true);
  8. $language_file = array('courses', 'index', 'userInfo');
  9. /* Flag forcing the 'current course' reset, as we're not inside a course anymore. */
  10. // Maybe we should change this into an api function? an example: CourseManager::unset();
  11. $cidReset = true;
  12. require_once 'main/inc/global.inc.php';
  13. require_once api_get_path(LIBRARY_PATH).'userportal.lib.php';
  14. require_once 'main/chat/chat_functions.lib.php';
  15. // The section (for the tabs).
  16. $this_section = SECTION_CAMPUS;
  17. $header_title = null;
  18. if (!api_is_anonymous()) {
  19. $header_title = " ";
  20. }
  21. $htmlHeadXtra[] = api_get_jquery_libraries_js(array('bxslider'));
  22. $htmlHeadXtra[] ='
  23. <script type="text/javascript">
  24. $(document).ready(function(){
  25. $("#slider").bxSlider({
  26. infiniteLoop : true,
  27. auto : true,
  28. pager : true,
  29. autoHover : true,
  30. pause : 10000
  31. });
  32. });
  33. </script>';
  34. $controller = new IndexManager($header_title);
  35. //Actions
  36. $loginFailed = isset($_GET['loginFailed']) ? true : isset($loginFailed);
  37. if (!empty($_GET['logout'])) {
  38. $controller->logout();
  39. }
  40. /* Table definitions */
  41. /* Constants and CONFIGURATION parameters */
  42. /** @todo these configuration settings should move to the Chamilo config settings. */
  43. /** Defines wether or not anonymous visitors can see a list of the courses on the Chamilo homepage that are open to the world. */
  44. $_setting['display_courses_to_anonymous_users'] = 'true';
  45. /* LOGIN */
  46. /**
  47. * Registers in the track_e_default table (view in important activities in admin
  48. * interface) a possible attempted break in, sending auth data through get.
  49. * @todo This piece of code should probably move to local.inc.php where the actual login / logout procedure is handled. The real use of this code block should be seriously considered as well. This form should just use a security token and get done with it.
  50. */
  51. if (isset($_GET['submitAuth']) && $_GET['submitAuth'] == 1) {
  52. $i = api_get_anonymous_id();
  53. Event::addEvent(LOG_ATTEMPTED_FORCED_LOGIN, 'tried_hacking_get', $_SERVER['REMOTE_ADDR'].(empty($_POST['login'])?'':'/'.$_POST['login']),null,$i);
  54. echo 'Attempted breakin - sysadmins notified.';
  55. session_destroy();
  56. die();
  57. }
  58. // Delete session neccesary for legal terms
  59. if (api_get_setting('allow_terms_conditions') == 'true') {
  60. unset($_SESSION['term_and_condition']);
  61. }
  62. //If we are not logged in and customapages activated
  63. if (!api_get_user_id() && CustomPages::enabled()) {
  64. if (Request::get('loggedout')) {
  65. CustomPages::display(CustomPages::LOGGED_OUT);
  66. } else {
  67. CustomPages::display(CustomPages::INDEX_UNLOGGED);
  68. }
  69. }
  70. /**
  71. * @todo This piece of code should probably move to local.inc.php where the actual login procedure is handled.
  72. * @todo Check if this code is used. I think this code is never executed because after clicking the submit button
  73. * the code does the stuff in local.inc.php and then redirects to index.php or user_portal.php depending
  74. * on api_get_setting('page_after_login').
  75. */
  76. if (!empty($_POST['submitAuth'])) {
  77. // The user has been already authenticated, we are now to find the last login of the user.
  78. if (isset ($_user['user_id'])) {
  79. $track_login_table = Database :: get_main_table(TABLE_STATISTIC_TRACK_E_LOGIN);
  80. $sql_last_login = "SELECT UNIX_TIMESTAMP(login_date)
  81. FROM $track_login_table
  82. WHERE login_user_id = '".$_user['user_id']."'
  83. ORDER BY login_date DESC LIMIT 1";
  84. $result_last_login = Database::query($sql_last_login);
  85. if (!$result_last_login) {
  86. if (Database::num_rows($result_last_login) > 0) {
  87. $user_last_login_datetime = Database::fetch_array($result_last_login);
  88. $user_last_login_datetime = $user_last_login_datetime[0];
  89. Session::write('user_last_login_datetime',$user_last_login_datetime);
  90. }
  91. }
  92. Database::free_result($result_last_login);
  93. //Event::event_login();
  94. if (api_is_platform_admin()) {
  95. // decode all open event informations and fill the track_c_* tables
  96. include api_get_path(LIBRARY_PATH).'stats.lib.inc.php';
  97. decodeOpenInfos();
  98. }
  99. }
  100. // End login -- if ($_POST['submitAuth'])
  101. } else {
  102. // Only if login form was not sent because if the form is sent the user was already on the page.
  103. Event::event_open();
  104. }
  105. if (api_get_setting('display_categories_on_homepage') == 'true') {
  106. $controller->tpl->assign('course_category_block', $controller->return_courses_in_categories());
  107. }
  108. // Facebook connexion, if activated
  109. if (api_is_facebook_auth_activated() && !api_get_user_id()) {
  110. facebook_connect();
  111. }
  112. $controller->set_login_form();
  113. //@todo move this inside the IndexManager
  114. if (!api_is_anonymous()) {
  115. $controller->tpl->assign('profile_block', $controller->return_profile_block());
  116. $controller->tpl->assign('user_image_block', $controller->return_user_image_block());
  117. if (api_is_platform_admin()) {
  118. $controller->tpl->assign('course_block', $controller->return_course_block());
  119. } else {
  120. $controller->tpl->assign('teacher_block', $controller->return_teacher_link());
  121. }
  122. }
  123. $hot_courses = null;
  124. $announcements_block = null;
  125. // Display the Site Use Cookie Warning Validation
  126. $useCookieValidation = api_get_configuration_value('cookie_warning');
  127. if ($useCookieValidation) {
  128. if (isset($_POST['acceptCookies'])) {
  129. api_set_site_use_cookie_warning_cookie();
  130. } else if (!api_site_use_cookie_warning_cookie_exist()) {
  131. if (Template::isToolBarDisplayedForUser()) {
  132. $controller->tpl->assign('toolBarDisplayed', true);
  133. } else {
  134. $controller->tpl->assign('toolBarDisplayed', false);
  135. }
  136. $controller->tpl->assign('displayCookieUsageWarning', true);
  137. }
  138. }
  139. // When loading a chamilo page do not include the hot courses and news
  140. if (!isset($_REQUEST['include'])) {
  141. if (api_get_setting('show_hot_courses') == 'true') {
  142. $hot_courses = $controller->return_hot_courses();
  143. }
  144. $announcements_block = $controller->return_announcements();
  145. }
  146. $controller->tpl->assign('hot_courses', $hot_courses);
  147. $controller->tpl->assign('announcements_block', $announcements_block);
  148. $controller->tpl->assign('home_page_block', $controller->return_home_page());
  149. $controller->tpl->assign('navigation_course_links', $controller->return_navigation_links());
  150. $controller->tpl->assign('notice_block', $controller->return_notice());
  151. $controller->tpl->assign('main_navigation_block', $controller->return_navigation_links());
  152. $controller->tpl->assign('help_block', $controller->return_help());
  153. if (api_is_platform_admin() || api_is_drh()) {
  154. $controller->tpl->assign('skills_block', $controller->return_skills_links());
  155. }
  156. if (api_is_anonymous()) {
  157. $controller->tpl->setLoginBodyClass();
  158. }
  159. // direct login to course
  160. if (isset($_GET['firstpage'])) {
  161. api_set_firstpage_parameter($_GET['firstpage']);
  162. // if we are already logged, go directly to course
  163. if (api_user_is_login()) {
  164. echo "<script type='text/javascript'>self.location.href='index.php?firstpage=".Security::remove_XSS($_GET['firstpage'])."'</script>";
  165. }
  166. } else {
  167. api_delete_firstpage_parameter();
  168. }
  169. $controller->tpl->display_two_col_template();