blog.php 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459
  1. <?php
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2004 Dokeos S.A.
  6. Copyright (c) 2003 University of Ghent (UGent)
  7. Copyright (c) 2001 Universite catholique de Louvain (UCL)
  8. Copyright (c) various contributors
  9. For a full list of contributors, see "credits.txt".
  10. The full license can be read in "license.txt".
  11. This program is free software; you can redistribute it and/or
  12. modify it under the terms of the GNU General Public License
  13. as published by the Free Software Foundation; either version 2
  14. of the License, or (at your option) any later version.
  15. See the GNU General Public License for more details.
  16. Contact: Dokeos, 181 rue Royale, B-1000 Brussels, Belgium, info@dokeos.com
  17. ==============================================================================
  18. BLOG HOMEPAGE
  19. This file takes care of all blog navigation and displaying.
  20. @package dokeos.blogs
  21. ==============================================================================
  22. */
  23. /*
  24. ==============================================================================
  25. INIT
  26. ==============================================================================
  27. */
  28. // name of the language file that needs to be included
  29. $language_file = "blog";
  30. $blog_id = intval($_GET['blog_id']);
  31. include ('../inc/global.inc.php');
  32. //session
  33. if(isset($_GET['id_session']))
  34. $_SESSION['id_session'] = $_GET['id_session'];
  35. require_once (api_get_path(LIBRARY_PATH)."/display.lib.php");
  36. require_once (api_get_path(LIBRARY_PATH)."/text.lib.php");
  37. require_once (api_get_path(LIBRARY_PATH)."/blog.lib.php");
  38. require_once (api_get_path(LIBRARY_PATH)."/fckeditor.lib.php");
  39. $nameTools = get_lang("blogs");
  40. $DaysShort = array (get_lang("SundayShort"), get_lang("MondayShort"), get_lang("TuesdayShort"), get_lang("WednesdayShort"), get_lang("ThursdayShort"), get_lang("FridayShort"), get_lang("SaturdayShort"));
  41. $DaysLong = array (get_lang("SundayLong"), get_lang("MondayLong"), get_lang("TuesdayLong"), get_lang("WednesdayLong"), get_lang("ThursdayLong"), get_lang("FridayLong"), get_lang("SaturdayLong"));
  42. $MonthsLong = array (get_lang("JanuaryLong"), get_lang("FebruaryLong"), get_lang("MarchLong"), get_lang("AprilLong"), get_lang("MayLong"), get_lang("JuneLong"), get_lang("JulyLong"), get_lang("AugustLong"), get_lang("SeptemberLong"), get_lang("OctoberLong"), get_lang("NovemberLong"), get_lang("DecemberLong"));
  43. $current_page = $_GET['action'];
  44. /*
  45. ==============================================================================
  46. PROCESSING
  47. ==============================================================================
  48. */
  49. if ($_POST['new_post_submit'])
  50. {
  51. Blog :: create_post(mysql_real_escape_string($_POST['post_title']), mysql_real_escape_string($_POST['post_full_text']), $blog_id);
  52. }
  53. if ($_POST['edit_post_submit'])
  54. {
  55. Blog :: edit_post(mysql_real_escape_string($_POST['post_id']), mysql_real_escape_string($_POST['post_title']), mysql_real_escape_string($_POST['post_full_text']), $blog_id);
  56. }
  57. if ($_POST['new_comment_submit'])
  58. {
  59. Blog :: create_comment(mysql_real_escape_string($_POST['comment_title']), mysql_real_escape_string($_POST['comment_text']), $blog_id, mysql_real_escape_string($_GET['post_id']), mysql_real_escape_string($_POST['comment_parent_id']));
  60. }
  61. if ($_POST['new_task_submit'])
  62. {
  63. Blog :: create_task($blog_id, mysql_real_escape_string($_POST['task_name']), mysql_real_escape_string($_POST['task_description']), mysql_real_escape_string($_POST['chkArticleDelete']), mysql_real_escape_string($_POST['chkArticleEdit']), mysql_real_escape_string($_POST['chkCommentsDelete']), mysql_real_escape_string($_POST['task_color']));
  64. }
  65. if ($_POST['edit_task_submit'])
  66. {
  67. Blog :: edit_task(mysql_real_escape_string($_POST['blog_id']), mysql_real_escape_string($_POST['task_id']), mysql_real_escape_string($_POST['task_name']), mysql_real_escape_string($_POST['task_description']), mysql_real_escape_string($_POST['chkArticleDelete']), mysql_real_escape_string($_POST['chkArticleEdit']), mysql_real_escape_string($_POST['chkCommentsDelete']), mysql_real_escape_string($_POST['task_color']));
  68. }
  69. if ($_POST['assign_task_submit'])
  70. {
  71. Blog :: assign_task($blog_id, mysql_real_escape_string($_POST['task_user_id']), mysql_real_escape_string($_POST['task_task_id']), mysql_real_escape_string($_POST['task_year'])."-".mysql_real_escape_string($_POST['task_month'])."-".mysql_real_escape_string($_POST['task_day']));
  72. }
  73. if ($_POST['assign_task_edit_submit'])
  74. {
  75. Blog :: edit_assigned_task($blog_id, mysql_real_escape_string($_POST['task_user_id']), mysql_real_escape_string($_POST['task_task_id']), mysql_real_escape_string($_POST['task_year'])."-".mysql_real_escape_string($_POST['task_month'])."-".mysql_real_escape_string($_POST['task_day']), mysql_real_escape_string($_POST['old_user_id']), mysql_real_escape_string($_POST['old_task_id']), mysql_real_escape_string($_POST['old_target_date']));
  76. }
  77. if ($_POST['new_task_execution_submit'])
  78. {
  79. Blog :: create_comment(mysql_real_escape_string($_POST['comment_title']), mysql_real_escape_string($_POST['comment_text']), $blog_id, mysql_real_escape_string($_GET['post_id']), mysql_real_escape_string($_POST['comment_parent_id']), mysql_real_escape_string($_POST['task_id']));
  80. }
  81. if ($_POST['register'])
  82. {
  83. foreach ($_POST['user'] as $index => $user_id)
  84. {
  85. Blog :: set_user_subscribed(mysql_real_escape_string($_GET['blog_id']), mysql_real_escape_string($user_id));
  86. }
  87. }
  88. if ($_POST['unregister'])
  89. {
  90. foreach ($_POST['user'] as $index => $user_id)
  91. {
  92. Blog :: set_user_unsubscribed(mysql_real_escape_string($_GET['blog_id']), mysql_real_escape_string($user_id));
  93. }
  94. }
  95. if ($_GET['register'])
  96. {
  97. Blog :: set_user_subscribed(mysql_real_escape_string($_GET['blog_id']), mysql_real_escape_string($_GET['user_id']));
  98. $flag = 1;
  99. }
  100. if ($_GET['unregister'])
  101. {
  102. Blog :: set_user_unsubscribed(mysql_real_escape_string($_GET['blog_id']), mysql_real_escape_string($_GET['user_id']));
  103. }
  104. if ($_GET['action'] == 'manage_tasks')
  105. {
  106. if ($_GET['do'] == 'delete')
  107. Blog :: delete_task($blog_id, mysql_real_escape_string($_GET['task_id']));
  108. if ($_GET['do'] == 'delete_assignment')
  109. Blog :: delete_assigned_task($blog_id, mysql_real_escape_string($_GET['assignment_id']));
  110. }
  111. if ($_GET['action'] == 'view_post')
  112. {
  113. $task_id = (isset ($_GET['task_id']) && is_numeric($_GET['task_id'])) ? $_GET['task_id'] : 0;
  114. if ($_GET['do'] == 'delete_comment')
  115. {
  116. if (api_is_allowed_to_edit('BLOG_'.$blog_id, 'article_comments_delete', $task_id))
  117. {
  118. Blog :: delete_comment($blog_id, mysql_real_escape_string($_GET['comment_id']));
  119. }
  120. else
  121. {
  122. $error = true;
  123. $message = get_lang('ActionNotAllowed');
  124. }
  125. }
  126. if ($_GET['do'] == 'delete_article')
  127. {
  128. if (api_is_allowed_to_edit('BLOG_'.$blog_id, 'article_delete', $task_id))
  129. {
  130. Blog :: delete_post($blog_id, mysql_real_escape_string($_GET['article_id']));
  131. $current_page = ''; // Article is gone, go to blog home
  132. }
  133. else
  134. {
  135. $error = true;
  136. $message = get_lang('ActionNotAllowed');
  137. }
  138. }
  139. if ($_GET['do'] == 'rate')
  140. {
  141. if ($_GET['type'] == 'post')
  142. {
  143. if (api_is_allowed_to_edit('BLOG_'.$blog_id, 'article_rate'))
  144. {
  145. Blog :: add_rating('post', $blog_id, mysql_real_escape_string($_GET['post_id']), mysql_real_escape_string($_GET['rating']));
  146. }
  147. }
  148. if ($_GET['type'] == 'comment')
  149. {
  150. if (api_is_allowed_to_edit('BLOG_'.$blog_id, 'article_comments_add'))
  151. {
  152. Blog :: add_rating('comment', $blog_id, mysql_real_escape_string($_GET['comment_id']), mysql_real_escape_string($_GET['rating']));
  153. }
  154. }
  155. }
  156. }
  157. /*
  158. ==============================================================================
  159. DISPLAY
  160. ==============================================================================
  161. */
  162. $htmlHeadXtra[] = "<script src=\"tbl_change.js\" type=\"text/javascript\" language=\"javascript\"></script>";
  163. // Set bredcrumb
  164. switch ($current_page)
  165. {
  166. case "new_post" :
  167. $nameTools = get_lang('NewPost');
  168. $interbreadcrumb[] = array ("url" => "blog.php?blog_id=$blog_id", "name" => Blog :: get_blog_title($blog_id));
  169. Display :: display_header($nameTools, 'blogs');
  170. break;
  171. case "manage_tasks" :
  172. $nameTools = get_lang('TaskManager');
  173. $interbreadcrumb[] = array ("url" => "blog.php?blog_id=$blog_id", "name" => Blog :: get_blog_title($blog_id));
  174. Display :: display_header($nameTools, 'blogs');
  175. break;
  176. case "manage_members" :
  177. $nameTools = get_lang('MemberManager');
  178. $interbreadcrumb[] = array ("url" => "blog.php?blog_id=$blog_id", "name" => Blog :: get_blog_title($blog_id));
  179. Display :: display_header($nameTools, 'blogs');
  180. break;
  181. case "manage_rights" :
  182. $nameTools = get_lang('RightsManager');
  183. $interbreadcrumb[] = array ("url" => "blog.php?blog_id=$blog_id", "name" => Blog :: get_blog_title($blog_id));
  184. Display :: display_header($nameTools, 'blogs');
  185. break;
  186. case "view_search_result" :
  187. $nameTools = get_lang('SearchResults');
  188. $interbreadcrumb[] = array ("url" => "blog.php?blog_id=$blog_id", "name" => Blog :: get_blog_title($blog_id));
  189. Display :: display_header($nameTools, 'blogs');
  190. break;
  191. case "execute_task" :
  192. $nameTools = get_lang('ExecuteThisTask');
  193. $interbreadcrumb[] = array ("url" => "blog.php?blog_id=$blog_id", "name" => Blog :: get_blog_title($blog_id));
  194. Display :: display_header($nameTools, 'blogs');
  195. break;
  196. default :
  197. $nameTools = Blog :: get_blog_title($blog_id);
  198. Display :: display_header($nameTools, 'blogs');
  199. }
  200. //Display::display_header($nameTools,'Blogs');
  201. ?>
  202. <span class="blog_title"><?php echo Blog::get_blog_title($blog_id) ?></span><br />
  203. <span class="blog_subtitle"><?php echo Blog::get_blog_subtitle($blog_id) ?></span>
  204. <br /><br />
  205. <table width="100%">
  206. <tr>
  207. <td width="220" class="blog_left" valign="top">
  208. <?php
  209. $month = $_GET['month'] ? $_GET['month'] : (int) date('m');
  210. $year = $_GET['year'] ? $_GET['year'] : date('Y');
  211. Blog :: display_minimonthcalendar($month, $year, $blog_id);
  212. ?>
  213. <br />
  214. <table width="100%">
  215. <tr>
  216. <td class="blog_menu_title"><?php echo get_lang('ThisBlog') ?></td>
  217. </tr>
  218. <tr>
  219. <td class="blog_menu">
  220. <ul>
  221. <li><a href="<?php echo $_SERVER['PHP_SELF'] ?>?blog_id=<?php echo $blog_id ?>" title="<?php echo get_lang('Home') ?>"><?php echo get_lang('Home') ?></a></li>
  222. <?php if(api_is_allowed_to_edit('BLOG_'.$blog_id, 'article_add')) { ?><li><a href="<?php echo $_SERVER['PHP_SELF'] ?>?action=new_post&amp;blog_id=<?php echo $blog_id ?>" title="<?php echo get_lang('NewPost') ?>"><?php echo get_lang('NewPost') ?></a></li><?php } ?>
  223. <?php if(api_is_allowed_to_edit('BLOG_'.$blog_id, 'task_management')) { ?><li><a href="<?php echo $_SERVER['PHP_SELF'] ?>?action=manage_tasks&amp;blog_id=<?php echo $blog_id ?>" title="<?php echo get_lang('ManageTasks') ?>"><?php echo get_lang('TaskManager') ?></a></li> <?php } ?>
  224. <?php if(api_is_allowed_to_edit('BLOG_'.$blog_id, 'member_management')) { ?><li><a href="<?php echo $_SERVER['PHP_SELF'] ?>?action=manage_members&amp;blog_id=<?php echo $blog_id ?>" title="<?php echo get_lang('ManageMembers') ?>"><?php echo get_lang('MemberManager') ?></a></li><?php } ?>
  225. </ul>
  226. </td>
  227. </tr>
  228. </table>
  229. <br />
  230. <table width="100%">
  231. <tr>
  232. <td class="blog_menu_title"><?php echo get_lang('Search') ?></td>
  233. </tr>
  234. <tr>
  235. <td class="blog_menu">
  236. <form action="blog.php" method="get" enctype="multipart/form-data">
  237. <input type="hidden" name="blog_id" value="<?php echo $blog_id ?>" />
  238. <input type="hidden" name="action" value="view_search_result" />
  239. <input type="text" size="20" name="q" value="<?php echo (isset($_GET['q']) ? $_GET['q'] : ''); ?>" /><input type="submit" value="Go" />
  240. </form>
  241. </td>
  242. </tr>
  243. </table>
  244. <br />
  245. <table width="100%">
  246. <tr>
  247. <td class="blog_menu_title"><?php echo get_lang('MyTasks') ?></td>
  248. </tr>
  249. <tr>
  250. <td class="blog_menu">
  251. <?php Blog::get_personal_task_list(); ?>
  252. </td>
  253. </tr>
  254. </table>
  255. <!--
  256. <br />
  257. <table width="100%">
  258. <tr>
  259. <td class="blog_menu_title"><?php echo get_lang('FavoriteBlogs') ?></td>
  260. </tr>
  261. <tr>
  262. <td class="blog_menu">
  263. <ul>
  264. <li>Favorite 1</li>
  265. <li>Favorite 2</li>
  266. <li>Favorite 3</li>
  267. </ul>
  268. </td>
  269. </tr>
  270. </table>
  271. <br />
  272. <table width="100%">
  273. <tr>
  274. <td class="blog_menu_title"><?php echo get_lang('TopTen') ?></td>
  275. </tr>
  276. <tr>
  277. <td class="blog_menu">
  278. <ul>
  279. <li>Blog 1</li>
  280. <li>Blog 2</li>
  281. <li>Blog 3</li>
  282. </ul>
  283. </td>
  284. </tr>
  285. </table>
  286. -->
  287. </td>
  288. <td valign="top" class="blog_right">
  289. <?php
  290. if ($error)
  291. Display :: display_error_message($message);
  292. if ($flag == '1')
  293. {
  294. $current_page = "manage_tasks";
  295. Blog :: display_assign_task_form($blog_id);
  296. }
  297. $user_task = false;
  298. if (isset ($_GET['task_id']) && is_numeric($_GET['task_id']))
  299. $task_id = $_GET['task_id'];
  300. else
  301. {
  302. $task_id = 0;
  303. $tbl_blogs_tasks_rel_user = Database :: get_course_table(TABLE_BLOGS_TASKS_REL_USER);
  304. $sql = "
  305. SELECT COUNT(*) as `number`
  306. FROM ".$tbl_blogs_tasks_rel_user."
  307. WHERE
  308. `blog_id` = ".$blog_id." AND
  309. `user_id` = ".$_user['user_id']." AND
  310. `task_id` = ".$task_id;
  311. $result = api_sql_query($sql, __LINE__, __FILE__);
  312. $row = mysql_fetch_array($result, MYSQL_ASSOC);
  313. if ($row['number'] == 1)
  314. $user_task = true;
  315. }
  316. switch ($current_page)
  317. {
  318. case 'new_post' :
  319. if (api_is_allowed_to_edit('BLOG_'.$blog_id, 'article_add', $user_task ? $task_id : 0))
  320. {
  321. Blog :: display_form_new_post($blog_id);
  322. }
  323. else
  324. {
  325. api_not_allowed();
  326. }
  327. break;
  328. case 'view_post' :
  329. Blog :: display_post($blog_id, mysql_real_escape_string($_GET['post_id']));
  330. break;
  331. case 'edit_post' :
  332. $task_id = (isset ($_GET['task_id']) && is_numeric($_GET['task_id'])) ? $_GET['task_id'] : 0;
  333. if (api_is_allowed_to_edit('BLOG_'.$blog_id, 'article_edit', $task_id))
  334. Blog :: display_form_edit_post($blog_id, mysql_real_escape_string($_GET['post_id']));
  335. else
  336. api_not_allowed();
  337. break;
  338. case 'manage_members' :
  339. if (api_is_allowed_to_edit('BLOG_'.$blog_id, 'member_management'))
  340. {
  341. Blog :: display_form_user_subscribe($blog_id);
  342. echo '<br /><br />';
  343. Blog :: display_form_user_unsubscribe($blog_id);
  344. }
  345. else
  346. api_not_allowed();
  347. break;
  348. case 'manage_rights' :
  349. Blog :: display_form_user_rights($blog_id);
  350. break;
  351. case 'manage_tasks' :
  352. if (api_is_allowed_to_edit('BLOG_'.$blog_id, 'task_management'))
  353. {
  354. if ($_GET['do'] == 'add')
  355. {
  356. Blog :: display_new_task_form($blog_id);
  357. }
  358. if ($_GET['do'] == 'assign')
  359. {
  360. Blog :: display_assign_task_form($blog_id);
  361. }
  362. if ($_GET['do'] == 'edit')
  363. {
  364. Blog :: display_edit_task_form($blog_id, mysql_real_escape_string($_GET['task_id']));
  365. }
  366. if ($_GET['do'] == 'edit_assignment')
  367. {
  368. Blog :: display_edit_assigned_task_form($blog_id, mysql_real_escape_string($_GET['assignment_id']));
  369. }
  370. Blog :: display_task_list($blog_id);
  371. echo '<br /><br />';
  372. Blog :: display_assigned_task_list($blog_id);
  373. echo '<br /><br />';
  374. if (api_is_allowed_to_edit('BLOG_'.$blog_id, 'role_management'))
  375. {
  376. ?>
  377. <a href="<?php echo $_SERVER['PHP_SELF'] ?>?action=manage_rights&amp;blog_id=<?php echo $blog_id ?>" title="<?php echo get_lang('ManageRights') ?>"><?php echo get_lang('RightsManager') ?></a>
  378. <?php
  379. }
  380. }
  381. else
  382. api_not_allowed();
  383. break;
  384. case 'execute_task' :
  385. if (isset ($_GET['post_id']))
  386. Blog :: display_post($blog_id, mysql_real_escape_string($_GET['post_id']));
  387. else
  388. Blog :: display_select_task_post($blog_id, mysql_real_escape_string($_GET['task_id']));
  389. break;
  390. case 'view_search_result' :
  391. Blog :: display_search_results($blog_id, mysql_real_escape_string($_GET['q']));
  392. break;
  393. case '' :
  394. default :
  395. if (isset ($_GET['filter']) && !empty ($_GET['filter']))
  396. {
  397. Blog :: display_day_results($blog_id, mysql_real_escape_string($_GET['filter']));
  398. }
  399. else
  400. {
  401. Blog :: display_blog_posts($blog_id);
  402. }
  403. }
  404. ?>
  405. </td>
  406. </tr>
  407. </table>
  408. <?php
  409. // The footer is displayed only if we are not in the learnpath
  410. if ($_GET['origin'] != 'learnpath')
  411. {
  412. include ($includePath."/claro_init_footer.inc.php");
  413. }
  414. ?>