announcements.php 56 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445
  1. <?php //$Id: announcements.php 22259 2009-07-20 18:56:45Z ivantcholakov $
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2004-2008 Dokeos SPRL
  6. Copyright (c) 2003 Ghent University (UGent)
  7. Copyright (c) 2001 Universite catholique de Louvain (UCL)
  8. Copyright (c) various contributors
  9. For a full list of contributors, see "credits.txt".
  10. The full license can be read in "license.txt".
  11. This program is free software; you can redistribute it and/or
  12. modify it under the terms of the GNU General Public License
  13. as published by the Free Software Foundation; either version 2
  14. of the License, or (at your option) any later version.
  15. See the GNU General Public License for more details.
  16. Contact address: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium
  17. Mail: info@dokeos.com
  18. ==============================================================================
  19. */
  20. /**
  21. ==============================================================================
  22. * @author Frederik Vermeire <frederik.vermeire@pandora.be>, UGent Internship
  23. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University: code cleaning
  24. * @abstract The task of the internship was to integrate the 'send messages to specific users' with the
  25. * Announcements tool and also add the resource linker here. The database also needed refactoring
  26. * as there was no title field (the title was merged into the content field)
  27. * @package dokeos.announcements
  28. * @todo make AWACS out of the configuration settings
  29. * @todo this file is 1200+ lines without any functions -> needs to be split into
  30. * multiple functions
  31. ==============================================================================
  32. */
  33. /*
  34. ==============================================================================
  35. INIT SECTION
  36. ==============================================================================
  37. */
  38. // name of the language file that needs to be included
  39. $language_file[] = 'announcements';
  40. $language_file[] = 'group';
  41. $language_file[] = 'survey';
  42. // use anonymous mode when accessing this course tool
  43. $use_anonymous = true;
  44. // setting the global file that gets the general configuration, the databases, the languages, ...
  45. include('../inc/global.inc.php');
  46. $this_section=SECTION_COURSES;
  47. $nameTools = get_lang('Announcement');
  48. //session
  49. if(isset($_GET['id_session'])) {
  50. $_SESSION['id_session'] = Security::remove_XSS($_GET['id_session']);
  51. }
  52. /* ------------ ACCESS RIGHTS ------------ */
  53. // notice for unauthorized people.
  54. api_protect_course_script();
  55. /*
  56. -----------------------------------------------------------
  57. Constants and variables
  58. -----------------------------------------------------------
  59. */
  60. // Configuration settings
  61. $display_announcement_list = true;
  62. $display_form = false;
  63. $display_title_list = true;
  64. // Maximum title messages to display
  65. $maximum = '12';
  66. // Length of the titles
  67. $length = '36';
  68. // Database Table Definitions
  69. $tbl_course_user = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  70. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  71. $tbl_courses = Database::get_main_table(TABLE_MAIN_COURSE);
  72. $tbl_sessions = Database::get_main_table(TABLE_MAIN_SESSION);
  73. $tbl_session_course_user= Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  74. $tbl_group = Database::get_course_table(TABLE_GROUP);
  75. $tbl_groupUser = Database::get_course_table(TABLE_GROUP_USER);
  76. $tbl_announcement = Database::get_course_table(TABLE_ANNOUNCEMENT);
  77. $tbl_item_property = Database::get_course_table(TABLE_ITEM_PROPERTY);
  78. /*
  79. -----------------------------------------------------------
  80. Resource linker
  81. -----------------------------------------------------------
  82. */
  83. $_SESSION['source_type']="Ad_Valvas";
  84. include('../resourcelinker/resourcelinker.inc.php');
  85. if (!empty($_POST['addresources'])) // When the "Add Resource" button is clicked we store all the form data into a session
  86. {
  87. include('announcements.inc.php');
  88. $form_elements= array ('emailTitle'=>stripslashes($emailTitle), 'newContent'=>stripslashes($newContent), 'id'=>$id, 'to'=>$selectedform, 'emailoption'=>$email_ann);
  89. $_SESSION['formelements']=$form_elements;
  90. if($id) // this is to correctly handle edits
  91. {
  92. $action="edit";
  93. }else
  94. {
  95. $action="add";
  96. }
  97. // ============== //
  98. // 7 = Ad_Valvas //
  99. // ============== //
  100. if($surveyid)
  101. {
  102. header("Location: ../resourcelinker/resourcelinker.php?source_id=7&action=$action&id=$id&originalresource=no&publish_survey=$surveyid&db_name=$db_name&cidReq=$cidReq");
  103. exit;
  104. }
  105. else
  106. {
  107. header("Location: ../resourcelinker/resourcelinker.php?source_id=7&action=$action&id=$id&originalresource=no");
  108. exit;
  109. }
  110. exit;
  111. }
  112. /*
  113. -----------------------------------------------------------
  114. Tracking
  115. -----------------------------------------------------------
  116. */
  117. event_access_tool(TOOL_ANNOUNCEMENT);
  118. /*
  119. -----------------------------------------------------------
  120. Libraries
  121. -----------------------------------------------------------
  122. */
  123. require_once(api_get_path(LIBRARY_PATH).'groupmanager.lib.php');
  124. require_once('announcements.inc.php');
  125. require_once(api_get_path(INCLUDE_PATH).'lib/mail.lib.inc.php');
  126. require_once(api_get_path(INCLUDE_PATH).'conf/mail.conf.php');
  127. require_once(api_get_path(LIBRARY_PATH).'debug.lib.inc.php');
  128. require_once(api_get_path(LIBRARY_PATH).'tracking.lib.php');
  129. require_once(api_get_path(LIBRARY_PATH) . '/fckeditor/fckeditor.php');
  130. /*
  131. -----------------------------------------------------------
  132. POST TO
  133. -----------------------------------------------------------
  134. */
  135. $safe_emailTitle = $_POST['emailTitle'];
  136. $safe_newContent = $_POST['newContent'];
  137. if (!empty($_POST['To']))
  138. {
  139. $display_form = true;
  140. $form_elements= array ('emailTitle'=>$safe_emailTitle, 'newContent'=>$safe_newContent, 'id'=>$_POST['id'], 'emailoption'=>$_POST['email_ann']);
  141. $_SESSION['formelements']=$form_elements;
  142. $form_elements = $_SESSION['formelements'];
  143. $title_to_modify = $form_elements["emailTitle"];
  144. $content_to_modify = $form_elements["newContent"];
  145. $announcement_to_modify = $form_elements["id"];
  146. }
  147. /*
  148. -----------------------------------------------------------
  149. Show/hide user/group form
  150. -----------------------------------------------------------
  151. */
  152. $setting_select_groupusers=true;
  153. if (empty($_POST['To']) and !$_SESSION['select_groupusers'])
  154. {
  155. $_SESSION['select_groupusers']="hide";
  156. }
  157. $select_groupusers_status=$_SESSION['select_groupusers'];
  158. if (!empty($_POST['To']) and ($select_groupusers_status=="hide"))
  159. {
  160. $_SESSION['select_groupusers']="show";
  161. }
  162. if (!empty($_POST['To']) and ($select_groupusers_status=="show"))
  163. {
  164. $_SESSION['select_groupusers']="hide";
  165. }
  166. /*
  167. -----------------------------------------------------------
  168. Action handling
  169. -----------------------------------------------------------
  170. */
  171. // display the form
  172. if (((!empty($_GET['action']) && $_GET['action'] == 'add') && $_GET['origin'] == "") || (!empty($_GET['action']) && $_GET['action'] == 'edit') || !empty($_POST['To']))
  173. {
  174. $display_form = true;
  175. }
  176. // clear all resources
  177. if ((empty($originalresource) || ($originalresource!=='no')) and (!empty($action) && $action=='add'))
  178. {
  179. $_SESSION['formelements']=null;
  180. //unset($_SESSION['formelements']);
  181. unset_session_resources();
  182. }
  183. /*
  184. -----------------------------------------------------------
  185. Javascript
  186. -----------------------------------------------------------
  187. */
  188. $htmlHeadXtra[] = to_javascript();
  189. /*
  190. -----------------------------------------------------------
  191. Filter user/group
  192. -----------------------------------------------------------
  193. */
  194. if(!empty($_GET['toolgroup'])){
  195. if($_GET['toolgroup'] == strval(intval($_GET['toolgroup']))){ //check is integer
  196. $toolgroup = $_GET['toolgroup'];
  197. $_SESSION['select_groupusers'] = 'hide';
  198. }else{
  199. $toolgroup = 0;
  200. }
  201. api_session_register("toolgroup");
  202. }
  203. /*
  204. -----------------------------------------------------------
  205. Sessions
  206. -----------------------------------------------------------
  207. */
  208. $ctok = $_SESSION['sec_token'];
  209. $stok = Security::get_token();
  210. if (!empty($_SESSION['formelements']) and !empty($_GET['originalresource']) and $_GET['originalresource'] == 'no')
  211. {
  212. $form_elements = $_SESSION['formelements'];
  213. $title_to_modify = $form_elements['emailTitle'];
  214. $content_to_modify = $form_elements['newContent'];
  215. $announcement_to_modify = $form_elements['id'];
  216. $to = $form_elements['to'];
  217. //load_edit_users('announcement',$announcement_to_modify);
  218. $email_ann = $form_elements['emailoption'];
  219. }
  220. if(!empty($_GET['remind_inactive']))
  221. {
  222. $to[] = 'USER:'.intval($_GET['remind_inactive']);
  223. }
  224. /*
  225. -----------------------------------------------------------
  226. Survey
  227. -----------------------------------------------------------
  228. */
  229. $surveyid = 0;
  230. if(!empty($_REQUEST['publish_survey']))
  231. {
  232. $surveyid=Database::escape_string(Security::remove_XSS($_REQUEST['publish_survey']));
  233. }
  234. $cidReq=Database::escape_string($_REQUEST['cidReq']);
  235. if($surveyid)
  236. {
  237. $db_name=Database::escape_string($_REQUEST['db_name']);
  238. $sql_temp = "SELECT * FROM $db_name.survey WHERE survey_id='$surveyid'";
  239. $res_temp = api_sql_query($sql_temp, __FILE__, __LINE__);
  240. $obj=@Database::fetch_object($res_temp);
  241. $template=$obj->template;
  242. }
  243. if (!empty($_SESSION['toolgroup'])){
  244. $_clean['toolgroup']=(int)$_SESSION['toolgroup'];
  245. $group_properties = GroupManager :: get_group_properties($_clean['toolgroup']);
  246. $interbreadcrumb[] = array ("url" => "../group/group.php", "name" => get_lang('Groups'));
  247. $interbreadcrumb[] = array ("url"=>"../group/group_space.php?gidReq=".$_SESSION['toolgroup'], "name"=> get_lang('GroupSpace').' ('.$group_properties['name'].')');
  248. } else {
  249. if($surveyid) {
  250. $interbreadcrumb[] = array ("url" => "../survey/survey_list.php?cidReq=$cidReq", "name" => get_lang('Survey'));
  251. $nameTools = get_lang('PublishSurvey');
  252. }else {
  253. $nameTools = get_lang('Announcement');
  254. $nameTools12 = get_lang('PublishSurvey');
  255. }
  256. }
  257. /*
  258. -----------------------------------------------------------
  259. Learning path & css
  260. -----------------------------------------------------------
  261. */
  262. // showing the header if we are not in the learning path, if we are in
  263. // the learning path, we do not include the banner so we have to explicitly
  264. // include the stylesheet, which is normally done in the header
  265. if (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath')
  266. {
  267. //we are not in the learning path
  268. Display::Display_header($nameTools,"Announcements");
  269. }
  270. else
  271. {
  272. //we are in the learning path, only display central data and change css
  273. $display_title_list = false;
  274. $display_announcement_list = false;
  275. $display_specific_announcement = true;
  276. $announcement_id = $_REQUEST['ann_id'];
  277. ?> <link rel="stylesheet" type="text/css" href="<?php echo $clarolineRepositoryWeb ?>css/default.css">
  278. <!-- css file for announcements -->
  279. <link href="../css/announcements.css" rel="stylesheet" type="text/css">
  280. <?php
  281. }
  282. // inserting an anchor (top) so one can jump back to the top of the page
  283. echo "<a name=\"top\"></a>";
  284. /*=============================================
  285. ACTION HANDLING
  286. =============================================*/
  287. if (api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  288. /*
  289. -----------------------------------------------------------
  290. Change visibility of announcement
  291. -----------------------------------------------------------
  292. */
  293. // $_GET['isStudentView']<>"false" is added to prevent that the visibility
  294. // is changed after you do the following:
  295. // change visibility -> studentview -> course manager view
  296. if (!isset($_GET['isStudentView']) || $_GET['isStudentView']!='false')
  297. {
  298. if (isset($_GET['id']) AND $_GET['id'] AND isset($_GET['action']) AND $_GET['action']=="showhide")
  299. {
  300. $id=intval(addslashes($_GET['id']));
  301. if(!api_is_course_coach() || api_is_element_in_the_session(TOOL_ANNOUNCEMENT, $id))
  302. {
  303. if ($ctok == $_GET['sec_token']) {
  304. change_visibility_announcement(TOOL_ANNOUNCEMENT,$id);
  305. $message = get_lang("VisibilityChanged");
  306. }
  307. }
  308. }
  309. }
  310. /*
  311. -----------------------------------------------------------
  312. Delete announcement
  313. -----------------------------------------------------------
  314. */
  315. if (!empty($_GET['action']) AND $_GET['action']=='delete' AND isset($_GET['id'])) {
  316. //api_sql_query("DELETE FROM $tbl_announcement WHERE id='$delete'",__FILE__,__LINE__);
  317. $id=intval(addslashes($_GET['id']));
  318. if (!api_is_course_coach() || api_is_element_in_the_session(TOOL_ANNOUNCEMENT, $id)) {
  319. // tooledit : visibility = 2 : only visibile for platform administrator
  320. if ($ctok == $_GET['sec_token']) {
  321. api_sql_query("UPDATE $tbl_item_property SET visibility='2' WHERE tool='".TOOL_ANNOUNCEMENT."' and ref='".$id."'",__FILE__,__LINE__);
  322. delete_added_resource("Ad_Valvas", $delete);
  323. $id = null;
  324. $emailTitle = null;
  325. $newContent = null;
  326. $message = get_lang("AnnouncementDeleted");
  327. }
  328. }
  329. }
  330. /*
  331. -----------------------------------------------------------
  332. Delete all announcements
  333. -----------------------------------------------------------
  334. */
  335. if (!empty($_GET['action']) and $_GET['action']=='delete_all') {
  336. //api_sql_query("DELETE FROM $tbl_announcement",__FILE__,__LINE__);
  337. if(api_is_allowed_to_edit()) {
  338. api_sql_query("UPDATE $tbl_item_property SET visibility='2' WHERE tool='".TOOL_ANNOUNCEMENT."'",__FILE__,__LINE__);
  339. delete_all_resources_type("Ad_Valvas");
  340. $id = null;
  341. $emailTitle = null;
  342. $newContent = null;
  343. $message = get_lang("AnnouncementDeletedAll");
  344. }
  345. }
  346. /*
  347. -----------------------------------------------------------
  348. Modify announcement
  349. -----------------------------------------------------------
  350. */
  351. if (!empty($_GET['action']) and $_GET['action']=='modify' AND isset($_GET['id'])) {
  352. $display_form = true;
  353. // RETRIEVE THE CONTENT OF THE ANNOUNCEMENT TO MODIFY
  354. $id = intval(addslashes($_GET['id']));
  355. if (!api_is_course_coach() || api_is_element_in_the_session(TOOL_ANNOUNCEMENT, $id)) {
  356. $sql="SELECT * FROM $tbl_announcement WHERE id='$id'";
  357. $result = api_sql_query($sql,__FILE__,__LINE__);
  358. $myrow = Database::fetch_array($result);
  359. if ($myrow) {
  360. $announcement_to_modify = $myrow['id'];
  361. $content_to_modify = $myrow['content'];
  362. $title_to_modify = $myrow['title'];
  363. if ($originalresource!=="no") {
  364. //unset_session_resources();
  365. edit_added_resources("Ad_Valvas", $announcement_to_modify);
  366. $to=load_edit_users("announcement", $announcement_to_modify);
  367. }
  368. $display_announcement_list = false;
  369. }
  370. if ($to=="everyone" OR !empty($_SESSION['toolgroup']))
  371. {
  372. $_SESSION['select_groupusers']="hide";
  373. }
  374. else
  375. {
  376. $_SESSION['select_groupusers']="show";
  377. }
  378. }
  379. }
  380. /*
  381. -----------------------------------------------------------
  382. Move announcement up/down
  383. -----------------------------------------------------------
  384. */
  385. if ($ctok == $_GET['sec_token']) {
  386. if (!empty($_GET['down'])) {
  387. $thisAnnouncementId = intval($_GET['down']);
  388. $sortDirection = "DESC";
  389. }
  390. if (!empty($_GET['up'])) {
  391. $thisAnnouncementId = intval($_GET['up']);
  392. $sortDirection = "ASC";
  393. }
  394. }
  395. if (!empty($sortDirection)) {
  396. if (!in_array(trim(strtoupper($sortDirection)), array('ASC', 'DESC'))) {
  397. $sortDirection='ASC';
  398. }
  399. $my_sql = "SELECT announcement.id, announcement.display_order " .
  400. "FROM $tbl_announcement announcement, " .
  401. "$tbl_item_property itemproperty " .
  402. "WHERE itemproperty.ref=announcement.id " .
  403. "AND itemproperty.tool='".TOOL_ANNOUNCEMENT."' " .
  404. "AND itemproperty.visibility<>2 " .
  405. "ORDER BY display_order $sortDirection";
  406. $result = api_sql_query($my_sql,__FILE__,__LINE__);
  407. while (list ($announcementId, $announcementOrder) = Database::fetch_row($result)) {
  408. // STEP 2 : FOUND THE NEXT ANNOUNCEMENT ID AND ORDER.
  409. // COMMIT ORDER SWAP ON THE DB
  410. if (isset ($thisAnnouncementOrderFound) && $thisAnnouncementOrderFound == true) {
  411. $nextAnnouncementId = $announcementId;
  412. $nextAnnouncementOrder = $announcementOrder;
  413. api_sql_query("UPDATE $tbl_announcement " .
  414. "SET display_order = '$nextAnnouncementOrder' " .
  415. "WHERE id = '$thisAnnouncementId'",__FILE__,__LINE__);
  416. api_sql_query("UPDATE $tbl_announcement " .
  417. "SET display_order = '$thisAnnouncementOrder' " .
  418. "WHERE id = '$nextAnnouncementId.'",__FILE__,__LINE__);
  419. break;
  420. }
  421. // STEP 1 : FIND THE ORDER OF THE ANNOUNCEMENT
  422. if ($announcementId == $thisAnnouncementId) {
  423. $thisAnnouncementOrder = $announcementOrder;
  424. $thisAnnouncementOrderFound = true;
  425. }
  426. }
  427. // show message
  428. $message = get_lang('AnnouncementMoved');
  429. }
  430. /*
  431. -----------------------------------------------------------
  432. Submit announcement
  433. -----------------------------------------------------------
  434. */
  435. //if (api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  436. $emailTitle=(!empty($_POST['emailTitle'])?$safe_emailTitle:'');
  437. $newContent=(!empty($_POST['newContent'])?$safe_newContent:'');
  438. $submitAnnouncement=isset($_POST['submitAnnouncement'])?$_POST['submitAnnouncement']:0;
  439. $id = 0;
  440. if (!empty($_POST['id'])) {
  441. $id=intval($_POST['id']);
  442. }
  443. if ($submitAnnouncement && empty($emailTitle)) {
  444. $error_message = get_lang('TitleIsRequired');
  445. $content_to_modify = $newContent;
  446. } else if ($submitAnnouncement) {
  447. if (isset($id)&&$id) {
  448. // there is an Id => the announcement already exists => update mode
  449. if ($ctok == $_POST['sec_token']) {
  450. $edit_id = edit_advalvas_item($id,$emailTitle,$newContent,$_POST['selectedform']);
  451. if (!$delete) {
  452. update_added_resources("Ad_Valvas", $id);
  453. }
  454. $message = get_lang('AnnouncementModified');
  455. }
  456. } else {
  457. //insert mode
  458. if ($ctok == $_POST['sec_token']) {
  459. if (!$surveyid) {
  460. $result = api_sql_query("SELECT MAX(display_order) FROM $tbl_announcement WHERE session_id=".intval($_SESSION['id_session'])." OR session_id=0",__FILE__,__LINE__);
  461. list($orderMax) = Database::fetch_row($result);
  462. $order = $orderMax + 1;
  463. if (!empty($_SESSION['toolgroup'])) {
  464. $insert_id=store_advalvas_group_item($safe_emailTitle,$safe_newContent,$order,array('GROUP:'.$_SESSION['toolgroup']),$_POST['selectedform']);
  465. } else {
  466. $insert_id=store_advalvas_item($safe_emailTitle,$safe_newContent,$order,$_POST['selectedform']);
  467. }
  468. store_resources($_SESSION['source_type'],$insert_id);
  469. $_SESSION['select_groupusers']="hide";
  470. $message = get_lang('AnnouncementAdded');
  471. }
  472. /*============================================================
  473. MAIL WHEN USER COMES FROM SURVEY
  474. ======================================================= */
  475. if ($_POST['emailsAdd']) {
  476. $to_email_address =$_POST['emailsAdd'];
  477. $to_email_to = explode(',', $to_email_address);
  478. $to_email = array_unique($to_email_to);
  479. $db_name = $_REQUEST['db_name'];
  480. for ($i=0;$i<count($to_email);$i++) {
  481. $to= trim($to_email[$i]);
  482. $db_name = $_REQUEST['db_name'];
  483. $newContentone=str_replace("#page#","choose_language.php",$newContent);
  484. $newContenttwo=str_replace("#temp#",$template,$newContentone);
  485. $newContentthree=str_replace("#sid#",$surveyid,$newContenttwo);
  486. $newContentfour=str_replace("#mail#",$to,$newContentthree);
  487. $newContentfive=str_replace("#db_name#",$db_name,$newContentfour);
  488. $newContentsix=str_replace("#uid#","",$newContentfive);
  489. if (eregi('^[0-9a-z_\.-]+@(([0-9]{1,3}\.){3}[0-9]{1,3}|([0-9a-z][0-9a-z-]*[0-9a-z]\.)+[a-z]{2,3})$', $to )) {
  490. $subject=stripslashes($emailTitle);
  491. $message=stripslashes($newContentsix);
  492. $sender_name = api_get_person_name($_SESSION['_user']['lastName'], $_SESSION['_user']['firstName'], null, PERSON_NAME_EMAIL_ADDRESS);
  493. $email = $_SESSION['_user']['mail'];
  494. $headers="From:$sender_name\r\nReply-to: $email\r\nContent-type: text/html; charset=iso-8859-15";
  495. //@mail($to,$subject,$message,$headers);
  496. //api_send_mail($to,$subject,$message,$headers);
  497. api_mail('',$to,$subject,$message,$sender_name,$email,$headers);
  498. $sql_date="SELECT * FROM $db_name.survey WHERE survey_id='$surveyid'";
  499. $res_date=api_sql_query($sql_date, __FILE__, __LINE__);
  500. $obj_date=Database::fetch_object($res_date);
  501. $end_date=$obj_date->avail_till;
  502. $table_reminder = Database :: get_main_table(TABLE_MAIN_SURVEY_REMINDER); // TODO: To be checked. TABLE_MAIN_SURVEY_REMINDER has not been defined.
  503. if ($_REQUEST['reminder']=="1") {
  504. $time=getdate();
  505. $time = $time['yday'];
  506. $time = $time+7;
  507. $sql_insert="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$to','".addslashes($subject)."','".addslashes($message)."','1','$time','$end_date')";
  508. api_sql_query($sql_insert, __FILE__, __LINE__);
  509. } else if ($_REQUEST['reminder']=="2") {
  510. $time=getdate();
  511. $time = $time['yday'];
  512. $time = $time+14;
  513. $sql_insert="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$to','".addslashes($subject)."','".addslashes($message)."','1','$time','$end_date')";
  514. api_sql_query($sql_insert, __FILE__, __LINE__);
  515. } else if($_REQUEST['reminder']=="3") {
  516. $time=getdate();
  517. $time = $time['yday'];
  518. $time = $time+30;
  519. $sql_insert="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$to','".addslashes($subject)."','".addslashes($message)."','1','$time','$end_date')";
  520. api_sql_query($sql_insert, __FILE__, __LINE__);
  521. }
  522. }
  523. }
  524. }
  525. /*===================================================================
  526. MAIL FUNCTION
  527. ===================================================================*/
  528. if ($_POST['email_ann'] && empty($_POST['onlyThoseMails'])) {
  529. $sent_to=sent_to("announcement", $insert_id);
  530. $userlist = $sent_to['users'];
  531. $grouplist = $sent_to['groups'];
  532. // groepen omzetten in users
  533. if ($grouplist) {
  534. $grouplist = "'".implode("', '",$grouplist)."'"; //protect individual elements with surrounding quotes
  535. $sql = "SELECT user_id
  536. FROM $tbl_groupUser gu
  537. WHERE gu.group_id IN (".$grouplist.")";
  538. $groupMemberResult = api_sql_query($sql,__FILE__,__LINE__);
  539. if ($groupMemberResult) {
  540. while ($u = Database::fetch_array($groupMemberResult)) {
  541. $userlist [] = $u ['user_id']; // complete the user id list ...
  542. }
  543. }
  544. }
  545. if (is_array($userlist)) {
  546. $userlist = "'".implode("', '", array_unique($userlist) )."'";
  547. // send to the created 'userlist'
  548. $sqlmail = "SELECT user_id, lastname, firstname, email
  549. FROM $tbl_user
  550. WHERE user_id IN (".$userlist.")";
  551. } else if (empty($_POST['not_selected_form'])) {
  552. if(empty($_SESSION['id_session']) || api_get_setting('use_session_mode')=='false') {
  553. // send to everybody
  554. $sqlmail = "SELECT user.user_id, user.email, user.lastname, user.firstname
  555. FROM $tbl_course_user, $tbl_user
  556. WHERE course_code='".Database::escape_string($_course['sysCode'])."'
  557. AND course_rel_user.user_id = user.user_id";
  558. } else {
  559. $sqlmail = "SELECT user.user_id, user.email, user.lastname, user.firstname
  560. FROM $tbl_user
  561. INNER JOIN $tbl_session_course_user
  562. ON $tbl_user.user_id = $tbl_session_course_user.id_user
  563. AND $tbl_session_course_user.course_code = '".$_course['id']."'
  564. AND $tbl_session_course_user.id_session = ".intval($_SESSION['id_session']);
  565. }
  566. }
  567. if ($sqlmail!='') {
  568. $result = api_sql_query($sqlmail,__FILE__,__LINE__);
  569. /*=================================================================================
  570. send email one by one to avoid antispam
  571. =================================================================================*/
  572. $db_name = Database::get_course_table(TABLE_MAIN_SURVEY);
  573. while ($myrow = Database::fetch_array($result)) {
  574. /* Header : Bericht van uw lesgever - GES ($_cid)
  575. Body : John Doe (prenom + nom) <john_doe@hotmail.com> (email)
  576. Morgen geen les!! (emailTitle)
  577. Morgen is er geen les, de les wordt geschrapt wegens vergadering (newContent)
  578. */
  579. $emailSubject = "[" . $_course['official_code'] . "] " . $emailTitle;
  580. if ($surveyid) {
  581. $newContentone=str_replace("#page#","choose_language.php",$newContent);
  582. $newContenttwo=str_replace("#temp#",$template,$newContentone);
  583. $newContentthree=str_replace("#sid#",$surveyid,$newContenttwo);
  584. $newContentfour=str_replace("#mail#",$myrow["email"],$newContentthree);
  585. $newContentfive=str_replace("#db_name#",$db_name,$newContentfour);
  586. $newContentsix=str_replace("#uid#",$myrow["user_id"],$newContentfive);
  587. $message=stripslashes($newContentsix);
  588. $sender_name = api_get_person_name($_SESSION['_user']['lastName'], $_SESSION['_user']['firstName'], null, PERSON_NAME_EMAIL_ADDRESS);
  589. $email = $_SESSION['_user']['mail'];
  590. $headers="From:$sender_name\r\nReply-to: $email\r\nContent-type: text/html; charset=iso-8859-15";
  591. //@mail($myrow["email"],stripslashes($emailTitle),$message,$headers);
  592. api_mail('',$myrow["email"],stripslashes($emailTitle),$message,$sender_name,$email);
  593. } else {
  594. // intro of the email: receiver name and subject
  595. $mail_body = api_get_person_name($myrow["lastname"], $myrow["firstname"], null, PERSON_NAME_EMAIL_ADDRESS)."<br />\n".stripslashes($emailTitle)."<br />";
  596. // make a change for absolute url
  597. $newContent = str_replace('src=\"../../','src=\"'.api_get_path(WEB_PATH).'', $newContent);
  598. // main part of the email
  599. $mail_body .= trim(stripslashes($newContent));
  600. // signature of email: sender name and course URL after -- line
  601. $mail_body .= "<br />-- <br />";
  602. $mail_body .= api_get_person_name($_user['firstName'], $_user['lastName'], null, PERSON_NAME_EMAIL_ADDRESS)." \n";
  603. $mail_body .= "<br /> \n<a href=\"".api_get_path(WEB_COURSE_PATH).$_course['id']."\">";
  604. $mail_body .= $_course['official_code'].' '.$_course['name'] . "</a>";
  605. //set the charset and use it for the encoding of the email - small fix, not really clean (should check the content encoding origin first)
  606. //here we use the encoding used for the webpage where the text is encoded (ISO-8859-1 in this case)
  607. //$to_email_address =$_POST['emailsAdd'];
  608. //$mail_body;
  609. $headers = array();
  610. if (empty($charset)) { $charset='ISO-8859-1';}
  611. $headers['Content-Type'] = 'text/html';
  612. $headers['charset'] = $charset;
  613. $mailid=$myrow["email"];
  614. $newmail = api_mail_html(api_get_person_name($myrow["lastname"], $myrow["firstname"], null, PERSON_NAME_EMAIL_ADDRESS), $myrow["email"], stripslashes($emailSubject), $mail_body, api_get_person_name($_SESSION['_user']['lastName'], $_SESSION['_user']['firstName'], null, PERSON_NAME_EMAIL_ADDRESS), $_SESSION['_user']['mail'],$headers);
  615. }
  616. $sql_date="SELECT * FROM $db_name WHERE survey_id='$surveyid'";
  617. $res_date=api_sql_query($sql_date, __FILE__, __LINE__);
  618. $obj_date=Database::fetch_object($res_date);
  619. $end_date=$obj_date->avail_till;
  620. $table_reminder = Database :: get_main_table(TABLE_MAIN_SURVEY_REMINDER); // TODO: To be checked. TABLE_MAIN_SURVEY_REMINDER has not been defined.
  621. if ($_REQUEST['reminder']=="1") {
  622. $time=getdate();
  623. $time = $time['yday'];
  624. $time = $time+7;
  625. $sql="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$mailid','".addslashes($emailSubject)."','".addslashes($mail_body)."','1','$time','$end_date')";
  626. api_sql_query($sql, __FILE__, __LINE__);
  627. } else if ($_REQUEST['reminder']=="2") {
  628. $time=getdate();
  629. $time = $time['yday'];
  630. $time = $time+14;
  631. $sql="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$mailid','".addslashes($emailSubject)."','".addslashes($mail_body)."','1','$time','$end_date')";
  632. api_sql_query($sql, __FILE__, __LINE__);
  633. } else if ($_REQUEST['reminder']=="3") {
  634. $time=getdate();
  635. $time = $time['yday'];
  636. $time = $time+30;
  637. $sql="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$mailid','".addslashes($emailSubject)."','".addslashes($mail_body)."','1','$time','$end_date')";
  638. api_sql_query($sql, __FILE__, __LINE__);
  639. }
  640. }
  641. update_mail_sent($insert_id);
  642. $message = $added_and_sent;
  643. }
  644. } // $email_ann*/
  645. } // end condition token
  646. } // isset
  647. // UNSET VARIABLES
  648. unset_session_resources();
  649. unset($form_elements);
  650. $_SESSION['formelements']=null;
  651. $newContent = null;
  652. $emailTitle = null;
  653. unset($emailTitle);
  654. unset($newContent);
  655. unset($content_to_modify);
  656. unset($title_to_modify);
  657. if($_REQUEST['publish_survey']) {
  658. $surveyid=$_REQUEST['surveyid'];
  659. $cidReq = $_REQUEST['cidReq'];
  660. ?>
  661. <script>
  662. window.location.href="../survey/survey_list.php?<?php echo api_get_cidreq(); ?>&published=published&surveyid=<?php echo Security::remove_XSS($_REQUEST['publish_survey']); ?>";
  663. </script>
  664. <?php
  665. }
  666. } // if $submit Announcement
  667. }
  668. /*====================================================
  669. Tool introduction
  670. ====================================================*/
  671. if (empty($_GET['origin']) || $_GET['origin'] !== 'learnpath') {
  672. //api_display_tool_title($nameTools);
  673. Display::display_introduction_section(TOOL_ANNOUNCEMENT);
  674. }
  675. /*
  676. ==============================================================================
  677. MAIN SECTION
  678. ==============================================================================
  679. */
  680. /* DISPLAY LEFT COLUMN */
  681. if(api_is_allowed_to_edit(false,true)) {
  682. // check teacher status
  683. if (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath') {
  684. $sql="SELECT
  685. announcement.*, toolitemproperties.*
  686. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  687. WHERE announcement.id = toolitemproperties.ref
  688. AND toolitemproperties.tool='announcement'
  689. AND toolitemproperties.visibility<>'2'
  690. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  691. GROUP BY toolitemproperties.ref
  692. ORDER BY display_order DESC
  693. LIMIT 0,$maximum";
  694. }
  695. } else {
  696. // students only get to see the visible announcements
  697. if (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath') {
  698. $group_memberships=GroupManager::get_group_ids($_course['dbName'], $_user['user_id']);
  699. if ((api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  700. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR ( toolitemproperties.to_user_id='".$_user['user_id']."'" .
  701. "OR toolitemproperties.to_group_id IN (0, ".implode(", ", $group_memberships)."))) ";
  702. } else {
  703. $cond_user_id = " AND ( toolitemproperties.to_user_id='".$_user['user_id']."'" .
  704. "OR toolitemproperties.to_group_id IN (0, ".implode(", ", $group_memberships).")) ";
  705. }
  706. // the user is member of several groups => display personal announcements AND his group announcements AND the general announcements
  707. if (is_array($group_memberships) && count($group_memberships)>0) {
  708. $sql="SELECT
  709. announcement.*, toolitemproperties.*
  710. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  711. WHERE announcement.id = toolitemproperties.ref
  712. AND toolitemproperties.tool='announcement'
  713. AND toolitemproperties.visibility='1'
  714. $cond_user_id
  715. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  716. GROUP BY toolitemproperties.ref
  717. ORDER BY display_order DESC
  718. LIMIT 0,$maximum";
  719. } else {
  720. // the user is not member of any group
  721. // this is an identified user => show the general announcements AND his personal announcements
  722. if ($_user['user_id']) {
  723. if ((api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  724. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR ( toolitemproperties.to_user_id='".$_user['user_id']."' OR toolitemproperties.to_group_id='0')) ";
  725. } else {
  726. $cond_user_id = " AND ( toolitemproperties.to_user_id='".$_user['user_id']."' OR toolitemproperties.to_group_id='0') ";
  727. }
  728. $sql="SELECT
  729. announcement.*, toolitemproperties.*
  730. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  731. WHERE announcement.id = toolitemproperties.ref
  732. AND toolitemproperties.tool='announcement'
  733. AND toolitemproperties.visibility='1'
  734. $cond_user_id
  735. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  736. GROUP BY toolitemproperties.ref
  737. ORDER BY display_order DESC
  738. LIMIT 0,$maximum";
  739. } else {
  740. if (api_get_course_setting('allow_user_edit_announcement')) {
  741. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR toolitemproperties.to_group_id='0') ";
  742. } else {
  743. $cond_user_id = " AND toolitemproperties.to_group_id='0' ";
  744. }
  745. // the user is not identiefied => show only the general announcements
  746. $sql="SELECT
  747. announcement.*, toolitemproperties.*
  748. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  749. WHERE announcement.id = toolitemproperties.ref
  750. AND toolitemproperties.tool='announcement'
  751. AND toolitemproperties.visibility='1'
  752. AND toolitemproperties.to_group_id='0'
  753. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  754. GROUP BY toolitemproperties.ref
  755. ORDER BY display_order DESC
  756. LIMIT 0,$maximum";
  757. }
  758. }
  759. }
  760. }
  761. $result = api_sql_query($sql,__FILE__,__LINE__);
  762. $announcement_number = Database::num_rows($result);
  763. /*----------------------------------------------------
  764. ADD ANNOUNCEMENT / DELETE ALL
  765. ----------------------------------------------------*/
  766. if (!$surveyid) {
  767. $show_actions = false;
  768. if ((api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) and (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath')) {
  769. echo '<div class="actions">';
  770. echo "<a href='".api_get_self()."?".api_get_cidreq()."&action=add&origin=".(empty($_GET['origin'])?'':$_GET['origin'])."'>".Display::return_icon('announce_add.gif',get_lang('AddAnnouncement')).get_lang('AddAnnouncement')."</a>";
  771. $show_actions = true;
  772. }
  773. if (api_is_allowed_to_edit() && $announcement_number > 1) {
  774. if (!$show_actions)
  775. echo '<div class="actions">';
  776. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&action=delete_all\" onclick=\"javascript:if(!confirm('".get_lang("ConfirmYourChoice")."')) return false;\">".Display::return_icon('valvesdelete.gif',get_lang('AnnouncementDeleteAll')).get_lang('AnnouncementDeleteAll')."</a>\n"; } // if announcementNumber > 1
  777. if ($show_actions)
  778. echo '</div>';
  779. }
  780. if (empty($_GET['origin']) OR $_GET['origin'] !== 'learnpath') {
  781. echo "\n\n<table width=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n";
  782. echo "\t<tr>\n";
  783. echo "\t\t<td width=\"20%\" valign=\"top\">\n";
  784. }
  785. /*----------------------------------------------------
  786. ANNOUNCEMENTS LIST
  787. ----------------------------------------------------*/
  788. if (!$surveyid) {
  789. if ($display_title_list == true) {
  790. echo "\t\t\t<table>\n";
  791. while ($myrow = Database::fetch_array($result)) {
  792. $title = $myrow['title'];
  793. $title = Security::remove_XSS($title);
  794. echo "\t\t\t\t<tr>\n";
  795. echo "\t\t\t\t\t<td width=\"15%\">\n";
  796. if ($myrow['visibility']==0) {
  797. $class="class=\"invisible\"";
  798. } else {
  799. $class="";
  800. }
  801. echo "\t\t\t\t\t\t<a style=\"text-decoration:none\" href=\"announcements.php?".api_get_cidreq()."#".$myrow['id']."\" ".$class.">" . api_trunc_str($title,$length) . "</a>\n";
  802. echo "\t\t\t\t\t</td>\n\t\t\t\t</tr>\n";
  803. }
  804. echo "\t\t\t</table>\n";
  805. } // end $display_title_list == true
  806. }
  807. if (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath') {
  808. echo "\t\t</td>\n";
  809. echo "\t\t<td width=\"20\" background=\"../img/verticalruler.gif\">&nbsp;</td>\n";
  810. // START RIGHT PART
  811. echo "\t\t<td valign=\"top\">\n";
  812. }
  813. /*=======================================
  814. DISPLAY ACTION MESSAGE
  815. =======================================*/
  816. if (isset($message) && $message == true) {
  817. Display::display_confirmation_message($message);
  818. $display_announcement_list = true;
  819. $display_form = false;
  820. }
  821. if (!empty($error_message)) {
  822. Display::display_error_message($error_message);
  823. $display_announcement_list = false;
  824. $display_form = true;
  825. }
  826. /*==================================================================================
  827. DISPLAY FORM
  828. ==================================================================================*/
  829. if ($display_form == true) {
  830. $content_to_modify=stripslashes($content_to_modify);
  831. $title_to_modify=stripslashes($title_to_modify);
  832. // DISPLAY ADD ANNOUNCEMENT COMMAND
  833. echo '<form method="post" name="f1" action="'.api_get_self().'?publish_survey='.Security::remove_XSS($surveyid).'&id='.Security::remove_XSS($_GET['id']).'&db_name='.$db_name.'&cidReq='.Security::remove_XSS($_GET['cidReq']).'" style="margin:0px;">'."\n";
  834. if (empty($_GET['id'])) {
  835. $form_name = get_lang('AddAnnouncement');
  836. } else {
  837. $form_name = get_lang('ModifyAnnouncement');
  838. }
  839. echo '<div class="row"><div class="form_header">'.$form_name.'</div></div>';
  840. //this variable defines if the course administrator can send a message to a specific user / group or not
  841. if (empty($_SESSION['toolgroup'])) {
  842. echo ' <div class="row">
  843. <div class="label">'.
  844. Display::return_icon('group.gif', get_lang('ModifyRecipientList'), array ('align' => 'absmiddle')).'<a href="#" onclick="if(document.getElementById(\'recipient_list\').style.display==\'none\') document.getElementById(\'recipient_list\').style.display=\'block\'; else document.getElementById(\'recipient_list\').style.display=\'none\';">'.get_lang('SentTo').'</a>
  845. </div>
  846. <div class="formw">';
  847. if (isset($_GET['id']) && is_array($to)) {
  848. echo '&nbsp;';
  849. } elseif (isset($_GET['remind_inactive'])) {
  850. $email_ann = '1';
  851. $_SESSION['select_groupusers']="show";
  852. $content_to_modify = sprintf(get_lang('RemindInactiveLearnersMailContent'),api_get_setting('siteName'), 7);
  853. $title_to_modify = sprintf(get_lang('RemindInactiveLearnersMailSubject'),api_get_setting('siteName'));
  854. } elseif (isset($_GET['remindallinactives']) && $_GET['remindallinactives']=='true') {
  855. $since = isset($_GET['since']) ? intval($_GET['since']) : 6;
  856. $to = Tracking :: get_inactives_students_in_course($_course['id'],$since, $_SESSION['id_session']);
  857. foreach($to as &$user) {
  858. $user = 'USER:'.$user;
  859. }
  860. $_SESSION['select_groupusers']="show";
  861. $email_ann = '1';
  862. $content_to_modify = sprintf(get_lang('RemindInactiveLearnersMailContent'),api_get_setting('siteName'),$since);
  863. $title_to_modify = sprintf(get_lang('RemindInactiveLearnersMailSubject'),api_get_setting('siteName'));
  864. } else {
  865. echo get_lang("Everybody");
  866. }
  867. show_to_form($to);
  868. echo ' </div>
  869. </div>';
  870. if (!isset($announcement_to_modify) ) $announcement_to_modify ='';
  871. if ($announcement_to_modify=='') {
  872. ($email_ann=='1')?$checked='checked':$checked='';
  873. echo ' <div class="row">
  874. <div class="label">
  875. <input class="checkbox" type="checkbox" value="1" name="email_ann" checked>
  876. </div>
  877. <div class="formw">'.get_lang('EmailOption').'
  878. </div>
  879. </div>';
  880. }
  881. } else {
  882. if (!isset($announcement_to_modify) ) {
  883. $announcement_to_modify ="";
  884. }
  885. if ($announcement_to_modify=='') {
  886. ($email_ann=='1' || !empty($surveyid))?$checked='checked':$checked='';
  887. echo '<div class="row">
  888. <div class="label">
  889. <input class="checkbox" type="checkbox" value="1" name="email_ann" '.$checked.'>
  890. </div>
  891. <div class="formw">'.
  892. get_lang('EmailOption').': '.get_lang('MyGroup').'&nbsp;&nbsp;<a href="#" onclick="if(document.getElementById(\'recipient_list\').style.display==\'none\') document.getElementById(\'recipient_list\').style.display=\'block\'; else document.getElementById(\'recipient_list\').style.display=\'none\';">'.get_lang('ModifyRecipientList').'</a>';
  893. show_to_form_group($_SESSION['toolgroup']);
  894. echo '</div></div>';
  895. }
  896. }
  897. if ($surveyid) {
  898. echo ' <div class="row">
  899. <div class="label">
  900. '.get_lang('EmailAddress').'
  901. </div>
  902. <div class="formw">
  903. <input type="text" name="emailsAdd" value="'.Security::remove_XSS($emails_add).'" size="52">(Comma separated for multiple)
  904. </div>
  905. </div>';
  906. echo ' <div class="row">
  907. <div class="label">
  908. '.get_lang('OnlyThoseAddresses').'
  909. </div>
  910. <div class="formw">
  911. <input type="checkbox" name="onlyThoseMails">
  912. </div>
  913. </div>';
  914. }
  915. // the announcement title
  916. echo ' <div class="row">
  917. <div id="msg_error" style="display:none;color:red;margin-left:20%"></div>
  918. <div class="label">
  919. <span class="form_required">*</span> '.get_lang('EmailTitle').'
  920. </div>
  921. <div class="formw">
  922. <input type="text" id="emailTitle" name="emailTitle" value="'.Security::remove_XSS($title_to_modify).'" size="60">
  923. </div>
  924. </div>';
  925. unset($title_to_modify);
  926. $title_to_modify = null;
  927. if (!isset($announcement_to_modify) ) $announcement_to_modify ="";
  928. if (!isset($content_to_modify) ) $content_to_modify ="";
  929. if (!isset($title_to_modify)) $title_to_modify = "";
  930. echo '<input type="hidden" name="id" value="'.$announcement_to_modify.'" />';
  931. if ($surveyid) {
  932. $content_to_modify='<br /><a href="'.api_get_path(WEB_CODE_PATH).'/survey/#page#?temp=#temp#&surveyid=#sid#&uid=#uid#&mail=#mail#&db_name=#db_name">'.get_lang('ClickHereToOpenSurvey').'</a><br />
  933. '.get_lang('OrCopyPasteUrl').' <br />
  934. '.api_get_path(WEB_CODE_PATH).'/survey/#page#?temp=#temp#&surveyid=#sid#&uid=#uid#&mail=#mail#&db_name=#db_name&nbsp;';
  935. }
  936. $oFCKeditor = new FCKeditor('newContent') ;
  937. $oFCKeditor->Width = '100%';
  938. $oFCKeditor->Height = '300';
  939. if(!api_is_allowed_to_edit()) {
  940. $oFCKeditor->ToolbarSet = "AnnouncementsStudent";
  941. } else {
  942. $oFCKeditor->ToolbarSet = "Announcements";
  943. }
  944. $oFCKeditor->Value = $content_to_modify;
  945. echo $oFCKeditor->CreateHtml();
  946. echo'<br />';
  947. if (empty($_SESSION['toolgroup'])) {
  948. echo '<input type="hidden" name="submitAnnouncement" value="OK">';
  949. echo '<input type="hidden" name="sec_token" value="'.$stok.'" />';
  950. echo '<button class="save" type="button" value="'.' '.get_lang('Send').' '.'" onclick="selectAll(this.form.elements[3],true)" >'.get_lang('ButtonPublishAnnouncement').'</button><br /><br />';
  951. } else {
  952. echo '<input type="hidden" name="submitAnnouncement" value="OK">';
  953. echo '<input type="hidden" name="sec_token" value="'.$stok.'" />';
  954. echo '<button class="save" type="button" value="'.' '.get_lang('Send').' '.'" onclick="selectAll(this.form.elements[4],true)" >'.get_lang('ButtonPublishAnnouncement').'</button><br /><br />';
  955. }
  956. echo '</form><br />';
  957. if ((isset($_GET['action']) && isset($_GET['id']) && is_array($to))||isset($_GET['remindallinactives'])||isset($_GET['remind_inactive'])) {
  958. echo '<script>document.getElementById(\'recipient_list\').style.display=\'block\';</script>';
  959. }
  960. } // displayform
  961. /*===============================================
  962. DISPLAY ANNOUNCEMENT LIST
  963. ===============================================*/
  964. if ($display_announcement_list && !$surveyid) {
  965. // by default we use the id of the current user. The course administrator can see the announcement of other users by using the user / group filter
  966. $user_id=$_user['user_id'];
  967. if (isset($_SESSION['user'])) {
  968. $user_id=$_SESSION['user'];
  969. }
  970. if (isset($_SESSION['group'])) {
  971. $group_id=$_SESSION['group'];
  972. }
  973. //$group_memberships=GroupManager::get_group_ids($_course['dbName'], $_user['user_id']);
  974. $group_memberships=GroupManager::get_group_ids($_course['dbName'],$_user['user_id']);
  975. if (api_is_allowed_to_edit(false,true)) {
  976. // A.1. you are a course admin with a USER filter
  977. // => see only the messages of this specific user + the messages of the group (s)he is member of.
  978. if (isset($_SESSION['user'])) {
  979. if (is_array($group_memberships) && count($group_memberships)>0) {
  980. $sql="SELECT
  981. announcement.*, toolitemproperties.*
  982. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  983. WHERE announcement.id = toolitemproperties.ref
  984. AND toolitemproperties.tool='announcement'
  985. AND (toolitemproperties.to_user_id=$user_id OR toolitemproperties.to_group_id IN (0, ".implode(", ", $group_memberships).") )
  986. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  987. ORDER BY display_order DESC";
  988. } else {
  989. $sql="SELECT
  990. announcement.*, toolitemproperties.*
  991. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  992. WHERE announcement.id = toolitemproperties.ref
  993. AND toolitemproperties.tool='announcement'
  994. AND (toolitemproperties.to_user_id=$user_id OR toolitemproperties.to_group_id='0')
  995. AND toolitemproperties.visibility='1'
  996. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  997. ORDER BY display_order DESC";
  998. }
  999. } elseif (isset($_SESSION['group'])) {
  1000. // A.2. you are a course admin with a GROUP filter
  1001. // => see only the messages of this specific group
  1002. $sql="SELECT
  1003. announcement.*, toolitemproperties.*
  1004. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1005. WHERE announcement.id = toolitemproperties.ref
  1006. AND toolitemproperties.tool='announcement'
  1007. AND (toolitemproperties.to_group_id=$group_id OR toolitemproperties.to_group_id='0')
  1008. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  1009. GROUP BY toolitemproperties.ref
  1010. ORDER BY display_order DESC";
  1011. } else {
  1012. // A.3 you are a course admin without any group or user filter
  1013. // A.3.a you are a course admin without user or group filter but WITH studentview
  1014. // => see all the messages of all the users and groups without editing possibilities
  1015. if (isset($isStudentView) and $isStudentView=="true") {
  1016. $sql="SELECT
  1017. announcement.*, toolitemproperties.*
  1018. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1019. WHERE announcement.id = toolitemproperties.ref
  1020. AND toolitemproperties.tool='announcement'
  1021. AND toolitemproperties.visibility='1'
  1022. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  1023. GROUP BY toolitemproperties.ref
  1024. ORDER BY display_order DESC";
  1025. } else {
  1026. // A.3.a you are a course admin without user or group filter and WTIHOUT studentview (= the normal course admin view)
  1027. // => see all the messages of all the users and groups with editing possibilities
  1028. $sql="SELECT
  1029. announcement.*, toolitemproperties.*
  1030. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1031. WHERE announcement.id = toolitemproperties.ref
  1032. AND toolitemproperties.tool='announcement'
  1033. AND (toolitemproperties.visibility='0' or toolitemproperties.visibility='1')
  1034. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  1035. GROUP BY toolitemproperties.ref
  1036. ORDER BY display_order DESC";
  1037. }
  1038. }
  1039. } else {
  1040. //STUDENT
  1041. if (is_array($group_memberships) && count($group_memberships)>0) {
  1042. if ((api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  1043. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR (toolitemproperties.to_user_id=$user_id OR toolitemproperties.to_group_id IN (0, ".implode(", ", $group_memberships).") )) ";
  1044. } else {
  1045. $cond_user_id = " AND (toolitemproperties.to_user_id=$user_id OR toolitemproperties.to_group_id IN (0, ".implode(", ", $group_memberships).")) ";
  1046. }
  1047. $sql="SELECT
  1048. announcement.*, toolitemproperties.*
  1049. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1050. WHERE announcement.id = toolitemproperties.ref
  1051. AND toolitemproperties.tool='announcement'
  1052. $cond_user_id
  1053. AND toolitemproperties.visibility='1'
  1054. ORDER BY display_order DESC";
  1055. } else {
  1056. if ($_user['user_id']) {
  1057. if ((api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  1058. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR (toolitemproperties.to_user_id='".$_user['user_id']."' OR toolitemproperties.to_group_id='0')) ";
  1059. } else {
  1060. $cond_user_id = " AND (toolitemproperties.to_user_id='".$_user['user_id']."' OR toolitemproperties.to_group_id='0') ";
  1061. }
  1062. $sql="SELECT
  1063. announcement.*, toolitemproperties.*
  1064. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1065. WHERE announcement.id = toolitemproperties.ref
  1066. AND toolitemproperties.tool='announcement'
  1067. $cond_user_id
  1068. AND toolitemproperties.visibility='1'
  1069. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  1070. ORDER BY display_order DESC";
  1071. } else {
  1072. if ((api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  1073. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR toolitemproperties.to_group_id='0' ) ";
  1074. } else {
  1075. $cond_user_id = " AND toolitemproperties.to_group_id='0' ";
  1076. }
  1077. $sql="SELECT
  1078. announcement.*, toolitemproperties.*
  1079. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1080. WHERE announcement.id = toolitemproperties.ref
  1081. AND toolitemproperties.tool='announcement'
  1082. $cond_user_id
  1083. AND toolitemproperties.visibility='1'
  1084. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")";
  1085. }
  1086. }
  1087. }
  1088. $result = api_sql_query($sql,__FILE__,__LINE__);
  1089. $num_rows = Database::num_rows($result);
  1090. /*=================================================
  1091. DISPLAY: NO ITEMS
  1092. =================================================*/
  1093. if ($num_rows == 0) {
  1094. echo get_lang('NoAnnouncements');;
  1095. }
  1096. $iterator = 1;
  1097. $bottomAnnouncement = $announcement_number;
  1098. echo "\t\t\t<table width=\"100%\" class=\"data_table\">\n";
  1099. $displayed=array();
  1100. while ($myrow = Database::fetch_array($result)) {
  1101. if (!in_array($myrow['id'], $displayed)) {
  1102. $title = $myrow['title'];
  1103. $content = $myrow['content'];
  1104. $content = make_clickable($content);
  1105. $content = text_filter($content);
  1106. /* DATE */
  1107. $last_post_datetime = $myrow['end_date'];
  1108. list($last_post_date, $last_post_time) = split(" ", $last_post_datetime);
  1109. list($year, $month, $day) = explode("-", $last_post_date);
  1110. list($hour, $min) = explode(":", $last_post_time);
  1111. $announceDate = mktime((int)$hour, (int)$min, 0, (int)$month, (int)$day, (int)$year);
  1112. // the styles
  1113. if ($myrow['visibility']=='0') {
  1114. $style='invisible';
  1115. } else {
  1116. $style = '';
  1117. }
  1118. echo "\t\t\t\t<tr class=\"".$style."\">";
  1119. /* THE ICONS */
  1120. echo "\t\t\t\t\t<th>\n";
  1121. // anchoring
  1122. echo "<a name=\"".(int)($myrow["id"])."\"></a>\n";
  1123. // User or group icon
  1124. if ($myrow['to_group_id']!== '0' and $myrow['to_group_id']!== 'NULL') {
  1125. echo "\t\t\t\t\t\t".Display::return_icon('group.gif', get_lang('AnnounceSentToUserSelection'))."\n";
  1126. }
  1127. // the email icon
  1128. if ($myrow['email_sent'] == '1') {
  1129. echo "\t\t\t\t\t\t".Display::return_icon('email.gif', get_lang('AnnounceSentByEmail'))."\n";
  1130. }
  1131. echo "\t\t\t\t\t</th>\n";
  1132. /* TITLE */
  1133. echo "\t\t\t\t\t<th>".Security::remove_XSS($title)."</th>\n";
  1134. echo "\t\t\t\t\t<th>" . get_lang("SentTo") . " : &nbsp; ";
  1135. $sent_to=sent_to("announcement", $myrow['id']);
  1136. $sent_to_form=sent_to_form($sent_to);
  1137. $user_info=api_get_user_info($myrow['insert_user_id']);
  1138. echo '&nbsp;&nbsp;&nbsp;'.get_lang('By').' : &nbsp;'.str_replace(' ', '&nbsp;', api_get_person_name($user_info['firstName'], $user_info['lastName']));
  1139. echo "\t\t\t\t\t</th>\n","\t\t\t\t</tr>\n";
  1140. echo "\t\t\t\t<tr class='row_odd'>\n\t\t\t\t\t<td class=\"announcements_datum\" colspan=\"3\">";
  1141. echo get_lang('AnnouncementPublishedOn')," : ",api_ucfirst(format_locale_date($dateFormatLong,strtotime($last_post_date)));
  1142. echo "</td>\n\t\t\t\t</tr>\n";
  1143. /* CONTENT */
  1144. echo "\t\t\t\t<tr class=\"$text_style\">\n\t\t\t\t\t<td colspan=\"3\">\n";
  1145. echo $content."\t\t\t\t\t</td>\n\t\t\t\t</tr>\n";
  1146. /* RESOURCES */
  1147. echo "<tr class='row_odd'>\n<td colspan=\"3\">\n";
  1148. if (check_added_resources("Ad_Valvas", $myrow["id"])) {
  1149. echo "<i>".get_lang('AddedResources')."</i><br />";
  1150. display_added_resources("Ad_Valvas", $myrow["id"]);
  1151. }
  1152. // we can edit if : we are the teacher OR the element belongs to the session we are coaching OR the option to allow users to edit is on
  1153. if (api_is_allowed_to_edit() OR (api_is_course_coach() && api_is_element_in_the_session(TOOL_ANNOUNCEMENT,$myrow['id'])) OR (api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  1154. /* SHOW MOD/DEL/VIS FUNCTIONS */
  1155. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&action=modify&id=".$myrow['id']."\">",
  1156. Display::return_icon('edit.gif', get_lang('Edit')),
  1157. "</a>";
  1158. if (api_is_allowed_to_edit(false,true)) {
  1159. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&action=delete&id=".$myrow['id']."&sec_token=".$stok."\" onclick=\"javascript:if(!confirm('".addslashes(api_htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset))."')) return false;\">",
  1160. Display::return_icon('delete.gif', get_lang('Delete')),
  1161. "</a>";
  1162. }
  1163. if ($myrow['visibility']==1) {
  1164. $image_visibility="visible";
  1165. $alt_visibility=get_lang('Hide');
  1166. } else {
  1167. $image_visibility="invisible";
  1168. $alt_visibility=get_lang('Visible');
  1169. }
  1170. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&origin=".(!empty($_GET['origin'])?Security::remove_XSS($_GET['origin']):'')."&action=showhide&id=".$myrow['id']."&sec_token=".$stok."\">".
  1171. Display::return_icon($image_visibility.'.gif', $alt_visibility)."</a>";
  1172. // DISPLAY MOVE UP COMMAND only if it is not the top announcement
  1173. if ($iterator != 1) {
  1174. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&up=".$myrow["id"]."&sec_token=".$stok."\">",
  1175. Display::return_icon('up.gif', get_lang('Up'))."</a>";
  1176. }
  1177. if ($iterator < $bottomAnnouncement) {
  1178. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&down=".$myrow["id"]."&sec_token=".$stok."\">".
  1179. Display::return_icon('down.gif', get_lang('Down'))."</a>";
  1180. }
  1181. echo "</td>\n</tr>\n";
  1182. $iterator ++;
  1183. } // is_allowed_to_edit
  1184. echo "<tr><td width=\"100%\" colspan=\"3\"><a href=\"#top\">".Display::return_icon('top.gif', get_lang('Top'))."</a></td></tr>";
  1185. }
  1186. $displayed[]=$myrow['id'];
  1187. } // end while ($myrow = Database::fetch_array($result))
  1188. echo "</table>";
  1189. } // end: if ($displayAnnoucementList)
  1190. echo "</table>";
  1191. if (!empty($display_specific_announcement)) display_announcement($announcement_id);
  1192. /*
  1193. ==============================================================================
  1194. FOOTER
  1195. ==============================================================================
  1196. */
  1197. if (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath') {
  1198. //we are not in learnpath tool
  1199. Display::display_footer();
  1200. }
  1201. ?>