message.ajax.php 3.1 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * Responses to AJAX calls
  5. */
  6. require_once '../global.inc.php';
  7. $action = $_GET['a'];
  8. switch ($action) {
  9. case 'find_users':
  10. if (api_is_anonymous()) {
  11. echo '';
  12. break;
  13. }
  14. $track_online_table = Database::get_statistic_table(TABLE_STATISTIC_TRACK_E_ONLINE);
  15. $tbl_my_user = Database :: get_main_table(TABLE_MAIN_USER);
  16. $tbl_my_user_friend = Database :: get_main_table(TABLE_MAIN_USER_REL_USER);
  17. $tbl_user = Database :: get_main_table(TABLE_MAIN_USER);
  18. $search = Database::escape_string($_REQUEST['tag']);
  19. $current_date = date('Y-m-d H:i:s',time());
  20. $user_id = api_get_user_id();
  21. $is_western_name_order = api_is_western_name_order();
  22. if (api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool') == 'true') {
  23. //all users
  24. if (api_get_setting('allow_send_message_to_all_platform_users') == 'true' || api_is_platform_admin() ) {
  25. $sql = 'SELECT DISTINCT u.user_id as id, '.($is_western_name_order ? 'concat(u.firstname," ",u.lastname," ","( ",u.email," )")' : 'concat(u.lastname," ",u.firstname," ","( ",u.email," )")').' as name
  26. FROM '.$tbl_user.' u
  27. WHERE u.status <> 6 AND u.user_id <>'.$user_id.' AND '.($is_western_name_order ? 'concat(u.firstname, " ", u.lastname)' : 'concat(u.lastname, " ", u.firstname)').' LIKE CONCAT("%","'.$search.'","%") ';
  28. } else {
  29. //only my contacts
  30. $sql = 'SELECT DISTINCT u.user_id as id, '.($is_western_name_order ? 'concat(u.firstname," ",u.lastname," ","( ",u.email," )")' : 'concat(u.lastname," ",u.firstname," ","( ",u.email," )")').' as name
  31. FROM '.$tbl_my_user_friend.' uf INNER JOIN '.$tbl_my_user.' AS u ON uf.friend_user_id = u.user_id ' .
  32. 'WHERE u.status <> 6 AND relation_type NOT IN('.USER_RELATION_TYPE_DELETED.', '.USER_RELATION_TYPE_RRHH.')
  33. AND uf.user_id = '.$user_id.' AND friend_user_id<>'.$user_id.'
  34. AND '.($is_western_name_order ? 'concat(u.firstname, " ", u.lastname)' : 'concat(u.lastname, " ", u.firstname)').' LIKE CONCAT("%","'.$search.'","%") ';
  35. }
  36. } elseif (api_get_setting('allow_social_tool')=='false' && api_get_setting('allow_message_tool')=='true') {
  37. $valid = api_get_setting('time_limit_whosonline');
  38. $sql='SELECT DISTINCT u.user_id as id, '.($is_western_name_order ? 'concat(u.firstname," ",u.lastname," ","( ",u.email," )")' : 'concat(u.lastname," ",u.firstname," ","( ",u.email," )")').' as name
  39. FROM '.$tbl_my_user.' u INNER JOIN '.$track_online_table.' t ON u.user_id=t.login_user_id
  40. WHERE DATE_ADD(login_date,INTERVAL "'.$valid.'" MINUTE) >= "'.$current_date.'" AND '.($is_western_name_order ? 'concat(u.firstname, " ", u.lastname)' : 'concat(u.lastname, " ", u.firstname)').' LIKE CONCAT("%","'.$search.'","%") ';
  41. }
  42. $sql .=' LIMIT 20';
  43. $result=Database::query($sql);
  44. if (Database::num_rows($result) > 0) {
  45. while ($row = Database::fetch_array($result,'ASSOC')) {
  46. $return[] = array('caption'=>$row['name'], 'value'=>$row['id']);
  47. }
  48. }
  49. echo json_encode($return);
  50. break;
  51. default:
  52. echo '';
  53. }
  54. exit;