access_url_edit_users_to_url.php 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469
  1. <?php
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2009 Dokeos SPRL
  6. Copyright (c) 2009 Julio Montoya Armas <gugli100@gmail.com>
  7. For a full list of contributors, see "credits.txt".
  8. The full license can be read in "license.txt".
  9. This program is free software; you can redistribute it and/or
  10. modify it under the terms of the GNU General Public License
  11. as published by the Free Software Foundation; either version 2
  12. of the License, or (at your option) any later version.
  13. See the GNU General Public License for more details.
  14. Contact: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium, info@dokeos.com
  15. ==============================================================================
  16. */
  17. /**
  18. ==============================================================================
  19. * @package dokeos.admin
  20. ==============================================================================
  21. */
  22. // name of the language file that needs to be included
  23. $language_file='admin';
  24. // resetting the course id
  25. $cidReset=true;
  26. // including some necessary dokeos files
  27. require('../inc/global.inc.php');
  28. require_once (api_get_path(LIBRARY_PATH).'urlmanager.lib.php');
  29. require_once ('../inc/lib/xajax/xajax.inc.php');
  30. $xajax = new xajax();
  31. //$xajax->debugOn();
  32. $xajax -> registerFunction ('search_users');
  33. // setting the section (for the tabs)
  34. $this_section = SECTION_PLATFORM_ADMIN;
  35. // Access restrictions
  36. api_protect_admin_script();
  37. if (!$_configuration['multiple_access_urls'])
  38. header('Location: index.php');
  39. // Database Table Definitions
  40. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  41. $tbl_access_url_rel_user = Database :: get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  42. $tbl_access_url = Database :: get_main_table(TABLE_MAIN_ACCESS_URL);
  43. // setting breadcrumbs
  44. $tool_name = get_lang('EditUsersToURL');
  45. $interbreadcrumb[] = array ('url' => 'index.php', 'name' => get_lang('PlatformAdmin'));
  46. $interbreadcrumb[] = array ('url' => 'access_urls.php', 'name' => get_lang('MultipleAccessURLs'));
  47. $add_type = 'multiple';
  48. if(isset($_REQUEST['add_type']) && $_REQUEST['add_type']!=''){
  49. $add_type = Security::remove_XSS($_REQUEST['add_type']);
  50. }
  51. $access_url_id=1;
  52. if(isset($_REQUEST['access_url_id']) && $_REQUEST['access_url_id']!=''){
  53. $access_url_id = Security::remove_XSS($_REQUEST['access_url_id']);
  54. }
  55. function search_users($needle, $id)
  56. {
  57. global $tbl_user, $tbl_access_url_rel_user;
  58. $xajax_response = new XajaxResponse();
  59. $return = '';
  60. if(!empty($needle)) {
  61. // xajax send utf8 datas... datas in db can be non-utf8 datas
  62. $charset = api_get_setting('platform_charset');
  63. $needle = api_convert_encoding($needle, $charset, 'utf-8');
  64. $needle = Database::escape_string($needle);
  65. // search users where username or firstname or lastname begins likes $needle
  66. $order_clause = api_sort_by_first_name() ? ' ORDER BY firstname, lastname, username' : ' ORDER BY lastname, firstname, username';
  67. $sql = 'SELECT u.user_id, username, lastname, firstname FROM '.$tbl_user.' u
  68. WHERE (username LIKE "'.$needle.'%"
  69. OR firstname LIKE "'.$needle.'%"
  70. OR lastname LIKE "'.$needle.'%")'.
  71. $order_clause.
  72. ' LIMIT 11';
  73. $rs = api_sql_query($sql, __FILE__, __LINE__);
  74. $i=0;
  75. while ($user = Database :: fetch_array($rs)) {
  76. $i++;
  77. if ($i<=10) {
  78. $return .= '<a href="javascript: void(0);" onclick="javascript: add_user_to_url(\''.addslashes($user['user_id']).'\',\''.api_get_person_name(addslashes($user['firstname']), addslashes($user['lastname'])).' ('.addslashes($user['username']).')'.'\')">'.api_get_person_name($user['firstname'], $user['lastname']).' ('.$user['username'].')</a><br />';
  79. } else {
  80. $return .= '...<br />';
  81. }
  82. }
  83. }
  84. $xajax_response -> addAssign('ajax_list_users','innerHTML',api_utf8_encode($return));
  85. return $xajax_response;
  86. }
  87. $xajax -> processRequests();
  88. $htmlHeadXtra[] = $xajax->getJavascript('../inc/lib/xajax/');
  89. $htmlHeadXtra[] = '
  90. <script type="text/javascript">
  91. function add_user_to_url(code, content) {
  92. document.getElementById("user_to_add").value = "";
  93. document.getElementById("ajax_list_users").innerHTML = "";
  94. destination = document.getElementById("destination_users");
  95. destination.options[destination.length] = new Option(content,code);
  96. destination.selectedIndex = -1;
  97. sortOptions(destination.options);
  98. }
  99. function send() {
  100. if (document.formulaire.access_url_id.value!=0) {
  101. document.formulaire.form_sent.value=0;
  102. document.formulaire.add_type.value=\''.$add_type.'\';
  103. document.formulaire.submit();
  104. }
  105. }
  106. function remove_item(origin)
  107. {
  108. for(var i = 0 ; i<origin.options.length ; i++) {
  109. if(origin.options[i].selected) {
  110. origin.options[i]=null;
  111. i = i-1;
  112. }
  113. }
  114. }
  115. </script>';
  116. $form_sent=0;
  117. $errorMsg='';
  118. $UserList=$SessionList=array();
  119. $users=$sessions=array();
  120. if($_POST['form_sent']) {
  121. $form_sent=$_POST['form_sent'];
  122. $UserList=$_POST['sessionUsersList'];
  123. if(!is_array($UserList)) {
  124. $UserList=array();
  125. }
  126. if($form_sent == 1) {
  127. if ($access_url_id==0) {
  128. header('Location: access_url_edit_users_to_url.php?action=show_message&message='.get_lang('SelectURL'));
  129. }
  130. elseif(is_array($UserList) ) {
  131. UrlManager::update_urls_rel_user($UserList,$access_url_id);
  132. header('Location: access_urls.php?action=show_message&message='.get_lang('UsersWereEdited'));
  133. }
  134. }
  135. }
  136. Display::display_header($tool_name);
  137. echo '<div class="actions" style="height:22px;">';
  138. echo '<div style="float:right;">
  139. <a href="'.api_get_path(WEB_CODE_PATH).'admin/access_url_add_users_to_url.php">'.Display::return_icon('view_more_stats.gif',get_lang('AddUserToURL'),'').get_lang('AddUsersToURL').'</a>
  140. </div><br />';
  141. echo '</div>';
  142. api_display_tool_title($tool_name);
  143. if ($_GET['action'] == 'show_message')
  144. Display :: display_normal_message(Security::remove_XSS(stripslashes($_GET['message'])));
  145. $nosessionUsersList = $sessionUsersList = array();
  146. $ajax_search = $add_type == 'unique' ? true : false;
  147. if($ajax_search) {
  148. $Users=UrlManager::get_url_rel_user_data($access_url_id);
  149. foreach($Users as $user) {
  150. $sessionUsersList[$user['user_id']] = $user ;
  151. }
  152. } else {
  153. $Users=UrlManager::get_url_rel_user_data();
  154. foreach($Users as $user) {
  155. if($user['access_url_id'] == $access_url_id) {
  156. $sessionUsersList[$user['user_id']] = $user ;
  157. }
  158. }
  159. $order_clause = api_sort_by_first_name() ? ' ORDER BY firstname, lastname, username' : ' ORDER BY lastname, firstname, username';
  160. $sql="SELECT u.user_id, lastname, firstname, username
  161. FROM $tbl_user u".
  162. $order_clause;
  163. $result=api_sql_query($sql,__FILE__,__LINE__);
  164. $Users=api_store_result($result);
  165. $user_list_leys = array_keys($sessionUsersList);
  166. foreach($Users as $user) {
  167. if (!in_array($user['user_id'],$user_list_leys))
  168. $nosessionUsersList[$user['user_id']] = $user ;
  169. }
  170. }
  171. if($add_type == 'multiple') {
  172. $link_add_type_unique = '<a href="'.api_get_self().'?add_type=unique&access_url_id='.$access_url_id.'">'.get_lang('SessionAddTypeUnique').'</a>';
  173. $link_add_type_multiple = get_lang('SessionAddTypeMultiple');
  174. } else {
  175. $link_add_type_unique = get_lang('SessionAddTypeUnique');
  176. $link_add_type_multiple = '<a href="'.api_get_self().'?add_type=multiple&access_url_id='.$access_url_id.'">'.get_lang('SessionAddTypeMultiple').'</a>';
  177. }
  178. $url_list = UrlManager::get_url_data();
  179. ?>
  180. <div style="text-align: left;">
  181. <?php echo $link_add_type_unique ?>&nbsp;|&nbsp;<?php echo $link_add_type_multiple ?>
  182. </div>
  183. <br /><br />
  184. <form name="formulaire" method="post" action="<?php echo api_get_self(); ?>" style="margin:0px;" <?php if($ajax_search){echo ' onsubmit="valide();"';}?> >
  185. <?php echo get_lang('SelectUrl').' : '; ?>
  186. <select name="access_url_id" onchange="javascript:send();">
  187. <option value="0"> <?php echo get_lang('SelectUrl')?></option>
  188. <?php
  189. $url_selected='';
  190. foreach ($url_list as $url_obj) {
  191. $checked = '';
  192. if (!empty($access_url_id)) {
  193. if ($url_obj['id']==$access_url_id) {
  194. $checked = 'selected=true';
  195. $url_selected= $url_obj[1];
  196. }
  197. }
  198. if ($url_obj['active']==1) {
  199. ?>
  200. <option <?php echo $checked;?> value="<?php echo $url_obj[0]; ?>"> <?php echo $url_obj[1]; ?></option>
  201. <?php
  202. }
  203. }
  204. ?>
  205. </select>
  206. <br /><br />
  207. <input type="hidden" name="form_sent" value="1" />
  208. <input type="hidden" name="add_type" value = "<?php echo $add_type ?>" />
  209. <?php
  210. if(!empty($errorMsg)) {
  211. Display::display_normal_message($errorMsg); //main API
  212. }
  213. ?>
  214. <table border="0" cellpadding="5" cellspacing="0" width="100%">
  215. <!-- Users -->
  216. <tr>
  217. <td align="center"><b><?php echo get_lang('UserListInPlatform') ?> :</b>
  218. </td>
  219. <td></td>
  220. <td align="center"><b><?php echo get_lang('UserListIn').' '.$url_selected; ?> :</b></td>
  221. </tr>
  222. <tr>
  223. <td align="center">
  224. <div id="content_source">
  225. <?php
  226. if($ajax_search) {
  227. ?>
  228. <input type="text" id="user_to_add" onkeyup="xajax_search_users(this.value,document.formulaire.access_url_id.options[document.formulaire.access_url_id.selectedIndex].value)" />
  229. <div id="ajax_list_users"></div>
  230. <?php
  231. } else {
  232. ?>
  233. <select id="origin_users" name="nosessionUsersList[]" multiple="multiple" size="15" style="width:300px;">
  234. <?php
  235. foreach($nosessionUsersList as $enreg) {
  236. ?>
  237. <option value="<?php echo $enreg['user_id']; ?>"><?php echo api_get_person_name($enreg['firstname'], $enreg['lastname']).' ('.$enreg['username'].')'; ?></option>
  238. $xajax -> processRequests();
  239. $htmlHeadXtra[] = $xajax->getJavascript('../inc/lib/xajax/');
  240. $htmlHeadXtra[] = '
  241. <script type="text/javascript">
  242. function add_user_to_url (code, content) {
  243. document.getElementById("user_to_add").value = "";
  244. document.getElementById("ajax_list_users").innerHTML = "";
  245. destination = document.getElementById("destination_users");
  246. destination.options[destination.length] = new Option(content,code);
  247. destination.selectedIndex = -1;
  248. sortOptions(destination.options);
  249. }
  250. function remove_item(origin)
  251. {
  252. for(var i = 0 ; i<origin.options.length ; i++) {
  253. if(origin.options[i].selected) {
  254. origin.options[i]=null;
  255. i = i-1;
  256. }
  257. }
  258. }
  259. </script>';
  260. <?php
  261. }
  262. unset($nosessionUsersList);
  263. ?>
  264. </select>
  265. <?php
  266. }
  267. ?>
  268. </div>
  269. </td>
  270. <td width="10%" valign="middle" align="center">
  271. <?php
  272. if($ajax_search) {
  273. ?>
  274. <input type="button" onclick="remove_item(document.getElementById('destination_users'))" value="<<" />
  275. <?php
  276. } else {
  277. ?>
  278. <input type="button" onclick="moveItem(document.getElementById('origin_users'), document.getElementById('destination_users'))" value=">>" />
  279. <br /><br />
  280. <input type="button" onclick="moveItem(document.getElementById('destination_users'), document.getElementById('origin_users'))" value="<<" />
  281. <?php
  282. }
  283. ?>
  284. <br /><br /><br /><br /><br /><br />
  285. </td>
  286. <td align="center">
  287. <select id="destination_users" name="sessionUsersList[]" multiple="multiple" size="15" style="width:300px;">
  288. <?php
  289. foreach($sessionUsersList as $enreg) {
  290. ?>
  291. <option value="<?php echo $enreg['user_id']; ?>"><?php echo api_get_person_name($enreg['firstname'], $enreg['lastname']).' ('.$enreg['username'].')'; ?></option>
  292. <?php
  293. }
  294. unset($sessionUsersList);
  295. ?>
  296. </select></td>
  297. </tr>
  298. <tr>
  299. <td colspan="3" align="center">
  300. <br />
  301. <?php
  302. if(isset($_GET['add']))
  303. echo '<input type="button" value="'.get_lang('EditUsers').'" onclick="valide()" />';
  304. else
  305. echo '<input type="button" value="'.get_lang('EditUsers').'" onclick="valide()" />';
  306. ?>
  307. </td>
  308. </tr>
  309. </table>
  310. </form>
  311. <script type="text/javascript">
  312. <!--
  313. function moveItem(origin , destination) {
  314. for(var i = 0 ; i<origin.options.length ; i++) {
  315. if(origin.options[i].selected) {
  316. destination.options[destination.length] = new Option(origin.options[i].text,origin.options[i].value);
  317. origin.options[i]=null;
  318. i = i-1;
  319. }
  320. }
  321. destination.selectedIndex = -1;
  322. sortOptions(destination.options);
  323. }
  324. function sortOptions(options) {
  325. newOptions = new Array();
  326. for (i = 0 ; i<options.length ; i++)
  327. newOptions[i] = options[i];
  328. newOptions = newOptions.sort(mysort);
  329. options.length = 0;
  330. for(i = 0 ; i < newOptions.length ; i++)
  331. options[i] = newOptions[i];
  332. }
  333. function mysort(a, b) {
  334. if(a.text.toLowerCase() > b.text.toLowerCase()){
  335. return 1;
  336. }
  337. if(a.text.toLowerCase() < b.text.toLowerCase()){
  338. return -1;
  339. }
  340. return 0;
  341. }
  342. function valide(){
  343. var options = document.getElementById('destination_users').options;
  344. for (i = 0 ; i<options.length ; i++)
  345. options[i].selected = true;
  346. /*
  347. var options = document.getElementById('destination_classes').options;
  348. for (i = 0 ; i<options.length ; i++)
  349. options[i].selected = true;
  350. */
  351. document.forms.formulaire.submit();
  352. }
  353. function loadUsersInSelect(select){
  354. var xhr_object = null;
  355. if(window.XMLHttpRequest) // Firefox
  356. xhr_object = new XMLHttpRequest();
  357. else if(window.ActiveXObject) // Internet Explorer
  358. xhr_object = new ActiveXObject("Microsoft.XMLHTTP");
  359. else // XMLHttpRequest non supporté par le navigateur
  360. alert("Votre navigateur ne supporte pas les objets XMLHTTPRequest...");
  361. //xhr_object.open("GET", "loadUsersInSelect.ajax.php?id_session=<?php echo $id_session ?>&letter="+select.options[select.selectedIndex].text, false);
  362. xhr_object.open("POST", "loadUsersInSelect.ajax.php");
  363. xhr_object.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
  364. nosessionUsers = makepost(document.getElementById('origin_users'));
  365. sessionUsers = makepost(document.getElementById('destination_users'));
  366. nosessionClasses = makepost(document.getElementById('origin_classes'));
  367. sessionClasses = makepost(document.getElementById('destination_classes'));
  368. xhr_object.send("nosessionusers="+nosessionUsers+"&sessionusers="+sessionUsers+"&nosessionclasses="+nosessionClasses+"&sessionclasses="+sessionClasses);
  369. xhr_object.onreadystatechange = function() {
  370. if(xhr_object.readyState == 4) {
  371. document.getElementById('content_source').innerHTML = result = xhr_object.responseText;
  372. //alert(xhr_object.responseText);
  373. }
  374. }
  375. }
  376. function makepost(select){
  377. var options = select.options;
  378. var ret = "";
  379. for (i = 0 ; i<options.length ; i++)
  380. ret = ret + options[i].value +'::'+options[i].text+";;";
  381. return ret;
  382. }
  383. -->
  384. </script>
  385. <?php
  386. /*
  387. ==============================================================================
  388. FOOTER
  389. ==============================================================================
  390. */
  391. Display::display_footer();
  392. ?>