courses.php 7.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * Template (front controller in MVC pattern) used for distpaching
  5. * to the controllers depend on the current action
  6. * @author Christian Fasanando <christian1827@gmail.com> - Beeznest
  7. * @package chamilo.auth
  8. */
  9. // Names of the language file that needs to be included.
  10. $language_file = array ('courses', 'registration');
  11. // Delete the globals['_cid'], we don't need it here.
  12. $cidReset = true; // Flag forcing the 'current course' reset
  13. // including files
  14. require_once '../inc/global.inc.php';
  15. $ctok = Security::get_existing_token();
  16. require_once api_get_path(LIBRARY_PATH).'auth.lib.php';
  17. require_once api_get_path(LIBRARY_PATH).'app_view.php';
  18. require_once 'courses_controller.php';
  19. require_once api_get_path(LIBRARY_PATH).'mail.lib.inc.php';
  20. if (api_get_setting('show_courses_descriptions_in_catalog') == 'true') {
  21. $htmlHeadXtra[] = '
  22. <script>
  23. $(document).ready(function() {
  24. $(\'.ajax\').live(\'click\', function() {
  25. var url = this.href;
  26. var dialog = $("#dialog");
  27. if ($("#dialog").length == 0) {
  28. dialog = $(\'<div id="dialog" style="display:hidden"></div>\').appendTo(\'body\');
  29. }
  30. // load remote content
  31. dialog.load(
  32. url,
  33. {},
  34. function(responseText, textStatus, XMLHttpRequest) {
  35. dialog.dialog({
  36. modal : true,
  37. width : 540,
  38. height : 400
  39. });
  40. });
  41. //prevent the browser to follow the link
  42. return false;
  43. });
  44. });
  45. </script>';
  46. }
  47. // Get Limit data
  48. $limit = getLimitArray();
  49. // Section for the tabs.
  50. $this_section = SECTION_COURSES;
  51. // Access rights: anonymous users can't do anything useful here.
  52. api_block_anonymous_users();
  53. $user_can_view_page = false;
  54. //For students
  55. if (api_get_setting('allow_students_to_browse_courses') == 'false') {
  56. $user_can_view_page = false;
  57. } else {
  58. $user_can_view_page = true;
  59. }
  60. //For teachers/admins
  61. if (api_is_platform_admin() || api_is_course_admin() || api_is_allowed_to_create_course()) {
  62. $user_can_view_page = true;
  63. }
  64. // filter actions
  65. $actions = array(
  66. 'sortmycourses',
  67. 'createcoursecategory',
  68. 'subscribe',
  69. 'deletecoursecategory',
  70. 'display_courses',
  71. 'display_random_courses',
  72. 'subscribe_user_with_password',
  73. 'display_sessions'
  74. );
  75. $action = CoursesAndSessionsCatalog::is(CATALOG_SESSIONS) ? 'display_sessions' : 'display_random_courses';
  76. if (isset($_GET['action']) && in_array($_GET['action'], $actions)) {
  77. $action = Security::remove_XSS($_GET['action']);
  78. } else {
  79. // Nothing to do
  80. }
  81. $nameTools = getCourseCatalogNameTools($action);
  82. if (empty($nameTools)) {
  83. $nameTools = get_lang('CourseManagement');
  84. } else {
  85. if (!in_array($action, array('sortmycourses', 'createcoursecategory', 'display_random_courses', 'display_courses', 'subscribe'))) {
  86. $interbreadcrumb[] = array('url' => api_get_path(WEB_CODE_PATH).'auth/courses.php', 'name' => get_lang('CourseManagement'));
  87. }
  88. if ($action == 'createcoursecategory') {
  89. $interbreadcrumb[] = array('url' => api_get_path(WEB_CODE_PATH).'auth/courses.php?action=sortmycourses', 'name' => get_lang('SortMyCourses'));
  90. }
  91. $interbreadcrumb[] = array('url' => '#', 'name' => $nameTools);
  92. }
  93. // course description controller object
  94. $courses_controller = new CoursesController();
  95. // We are moving a course or category of the user up/down the list (=Sort My Courses).
  96. if (isset($_GET['move'])) {
  97. if (isset($_GET['course'])) {
  98. if ($ctok == $_GET['sec_token']) {
  99. $courses_controller->move_course($_GET['move'], $_GET['course'], $_GET['category']);
  100. }
  101. }
  102. if (isset($_GET['category']) && !$_GET['course']) {
  103. if ($ctok == $_GET['sec_token']) {
  104. $courses_controller->move_category($_GET['move'], $_GET['category']);
  105. }
  106. }
  107. }
  108. // We are moving the course of the user to a different user defined course category (=Sort My Courses).
  109. if (isset($_POST['submit_change_course_category'])) {
  110. if ($ctok == $_POST['sec_token']) {
  111. $courses_controller->change_course_category($_POST['course_2_edit_category'], $_POST['course_categories']);
  112. }
  113. }
  114. // We edit course category
  115. if (isset($_POST['submit_edit_course_category']) && isset($_POST['title_course_category']) && strlen(trim($_POST['title_course_category'])) > 0) {
  116. if ($ctok == $_POST['sec_token']) {
  117. $courses_controller->edit_course_category($_POST['title_course_category'], $_POST['edit_course_category']);
  118. }
  119. }
  120. // we are deleting a course category
  121. if ($action == 'deletecoursecategory' && isset($_GET['id'])) {
  122. if ($ctok == $_GET['sec_token']) {
  123. $get_id_cat = intval($_GET['id']);
  124. $courses_controller->delete_course_category($get_id_cat);
  125. }
  126. }
  127. // We are creating a new user defined course category (= Create Course Category).
  128. if (isset($_POST['create_course_category']) && isset($_POST['title_course_category']) && strlen(trim($_POST['title_course_category'])) > 0) {
  129. if ($ctok == $_POST['sec_token']) {
  130. $courses_controller->add_course_category($_POST['title_course_category']);
  131. }
  132. }
  133. // search courses
  134. if (isset($_REQUEST['search_course'])) {
  135. //echo "<p><strong>".get_lang('SearchResultsFor')." ".api_htmlentities($_POST['search_term'], ENT_QUOTES, api_get_system_encoding())."</strong><br />";
  136. if ($ctok == $_REQUEST['sec_token']) {
  137. $courses_controller->search_courses($_REQUEST['search_term'], null, null, null, $limit);
  138. }
  139. }
  140. // Subscribe user to course
  141. if (isset($_REQUEST['subscribe_course'])) {
  142. if ($ctok == $_GET['sec_token']) {
  143. $courses_controller->subscribe_user($_GET['subscribe_course'], $_GET['search_term'], $_GET['category_code']);
  144. }
  145. }
  146. // We are unsubscribing from a course (=Unsubscribe from course).
  147. if (isset($_GET['unsubscribe'])) {
  148. if ($ctok == $_GET['sec_token']) {
  149. $courses_controller->unsubscribe_user_from_course($_GET['unsubscribe'], $_GET['search_term'], $_GET['category_code']);
  150. //$message = remove_user_from_course($_user['user_id'], $_POST['unsubscribe']);
  151. }
  152. }
  153. // We are unsubscribing from a course (=Unsubscribe from course).
  154. if (isset($_POST['unsubscribe'])) {
  155. if ($ctok == $_POST['sec_token']) {
  156. $courses_controller->unsubscribe_user_from_course($_POST['unsubscribe']);
  157. //$message = remove_user_from_course($_user['user_id'], $_POST['unsubscribe']);
  158. }
  159. }
  160. switch ($action) {
  161. case 'subscribe_user_with_password':
  162. $courses_controller->subscribe_user($_POST['subscribe_user_with_password'], $_POST['search_term'], $_POST['category_code']);
  163. exit;
  164. break;
  165. case 'createcoursecategory':
  166. $courses_controller->categories_list($action);
  167. break;
  168. case 'deletecoursecategory':
  169. $courses_controller->courses_list($action);
  170. break;
  171. case 'sortmycourses':
  172. $courses_controller->courses_list($action);
  173. break;
  174. case 'subscribe':
  175. $courses_controller->courses_categories($action, $_GET['category_code'], null, null, null, $limit);
  176. break;
  177. case 'display_random_courses':
  178. if ($user_can_view_page) {
  179. $courses_controller->courses_categories($action);
  180. } else {
  181. api_not_allowed();
  182. }
  183. break;
  184. case 'display_courses':
  185. $courses_controller->courses_categories($action, $_GET['category_code'], null, null, null, $limit);
  186. break;
  187. case 'display_sessions':
  188. $courses_controller->sessionsList($action, $nameTools, $limit);
  189. break;
  190. }