message.class.php 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466
  1. <?php
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2004-2009 Dokeos SPRL
  6. Copyright (c) Julio Montoya <gugli100@gmail.com>
  7. For a full list of contributors, see "credits.txt".
  8. The full license can be read in "license.txt".
  9. This program is free software; you can redistribute it and/or
  10. modify it under the terms of the GNU General Public License
  11. as published by the Free Software Foundation; either version 2
  12. of the License, or (at your option) any later version.
  13. See the GNU General Public License for more details.
  14. Contact address: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium
  15. Mail: info@dokeos.com
  16. ==============================================================================
  17. */
  18. require_once api_get_path(LIBRARY_PATH).'/main_api.lib.php';
  19. require_once api_get_path(LIBRARY_PATH).'/online.inc.php';
  20. class MessageManager
  21. {
  22. function MessageManager() {
  23. }
  24. public static function get_online_user_list($current_user_id) {
  25. $min=30;
  26. global $_configuration;
  27. $userlist = WhoIsOnline($current_user_id,$_configuration['statistics_database'],$min);
  28. foreach($userlist as $row) {
  29. $receiver_id = $row[0];
  30. $online_user_list[$receiver_id] = GetFullUserName($receiver_id).($current_user_id==$receiver_id?("&nbsp;(".get_lang('Myself').")"):(""));
  31. }
  32. return $online_user_list;
  33. }
  34. /**
  35. * Displays info stating that the message is sent successfully.
  36. */
  37. public static function display_success_message($uid) {
  38. global $charset;
  39. if ($_SESSION['social_exist']===true) {
  40. $redirect="#remote-tab-2";
  41. if (api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool')=='true') {
  42. $success=get_lang('MessageSentTo').
  43. "&nbsp;<b>".
  44. GetFullUserName($uid).
  45. "</b>";
  46. }else {
  47. $success=get_lang('MessageSentTo').
  48. "&nbsp;<b>".
  49. GetFullUserName($uid).
  50. "</b>";
  51. }
  52. } else {
  53. $success=get_lang('MessageSentTo').
  54. "&nbsp;<b>".
  55. GetFullUserName($uid).
  56. "</b>";
  57. }
  58. Display::display_confirmation_message(api_xml_http_response_encode($success), false);
  59. }
  60. /**
  61. * Displays the wysiwyg html editor.
  62. */
  63. public static function display_html_editor_area($name, $resp) {
  64. api_disp_html_area($name, get_lang('TypeYourMessage'), '', '', null, array('ToolbarSet' => 'Messages', 'Width' => '95%', 'Height' => '250'));
  65. }
  66. /**
  67. * Get the new messages for the current user from the database.
  68. */
  69. public static function get_new_messages() {
  70. $table_message = Database::get_main_table(TABLE_MESSAGE);
  71. if (!api_get_user_id()) {
  72. return false;
  73. }
  74. $i=0;
  75. $query = "SELECT * FROM $table_message WHERE user_receiver_id=".api_get_user_id()." AND msg_status=1";
  76. $result = api_sql_query($query,__FILE__,__LINE__);
  77. $i = Database::num_rows($result);
  78. return $i;
  79. }
  80. /**
  81. * Get the list of user_ids of users who are online.
  82. */
  83. public static function users_connected_by_id() {
  84. global $_configuration, $_user;
  85. $minute=30;
  86. $user_connect = WhoIsOnline($_user['user_id'],$_configuration['statistics_database'],$minute);
  87. for ($i=0; $i<count($user_connect); $i++) {
  88. $user_id_list[$i]=$user_connect[$i][0];
  89. }
  90. return $user_id_list;
  91. }
  92. /**
  93. * Gets the total number of messages, used for the inbox sortable table
  94. */
  95. public static function get_number_of_messages () {
  96. $table_message = Database::get_main_table(TABLE_MESSAGE);
  97. $sql_query = "SELECT COUNT(*) as number_messages FROM $table_message WHERE msg_status IN (0,1) AND user_receiver_id=".api_get_user_id();
  98. $sql_result = api_sql_query($sql_query,__FILE__,__LINE__);
  99. $result = Database::fetch_array($sql_result);
  100. return $result['number_messages'];
  101. }
  102. /**
  103. * Gets information about some messages, used for the inbox sortable table
  104. * @param int $from
  105. * @param int $number_of_items
  106. * @param string $direction
  107. */
  108. public static function get_message_data ($from, $number_of_items, $column, $direction) {
  109. global $charset;
  110. $from = intval($from);
  111. $number_of_items = intval($number_of_items);
  112. $column = intval($column);
  113. if (!in_array($direction, array('ASC', 'DESC')))
  114. $direction = 'ASC';
  115. $table_message = Database::get_main_table(TABLE_MESSAGE);
  116. $request=api_is_xml_http_request();
  117. $sql_query = "SELECT id as col0, user_sender_id as col1, title as col2, send_date as col3, msg_status as col4 FROM $table_message " .
  118. "WHERE user_receiver_id=".api_get_user_id()." AND msg_status IN (0,1)" .
  119. "ORDER BY send_date desc, col$column $direction LIMIT $from,$number_of_items";
  120. $sql_result = api_sql_query($sql_query,__FILE__,__LINE__);
  121. $i = 0;
  122. $message_list = array ();
  123. while ($result = Database::fetch_row($sql_result)) {
  124. if ($request===true) {
  125. $message[0] = '<input type="checkbox" value='.$result[0].' name="id[]">';
  126. } else {
  127. $message[0] = ($result[0]);
  128. }
  129. if ($request===true) {
  130. if($result[4]==0)
  131. {
  132. $message[1] = Display::return_icon('mail_open.png',get_lang('AlreadyReadMessage'));//Message already read
  133. }
  134. else
  135. {
  136. $message[1] = Display::return_icon('mail.png',get_lang('UnReadMessage'));//Message without reading
  137. }
  138. $message[2] = '<a onclick="get_action_url_and_show_messages(1,'.$result[0].')" href="javascript:void(0)">'.GetFullUserName($result[1]).'</a>';
  139. $message[3] = '<a onclick="get_action_url_and_show_messages(1,'.$result[0].')" href="javascript:void(0)">'.str_replace("\\","",$result[2]).'</a>';
  140. $message[5] = '<a onclick="reply_to_messages(\'show\','.$result[0].',\'\')" href="javascript:void(0)">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a>'.
  141. '&nbsp;&nbsp;<a onclick="delete_one_message('.$result[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  142. } else {
  143. $message[2] = '<a href="view_message.php?id='.$result[0].'">'.GetFullUserName(($result[1])).'</a>';;
  144. $message[3] = '<a href="view_message.php?id='.$result[0].'">'.$result[2].'</a>';
  145. $message[5] = '<a href="new_message.php?re_id='.$result[0].'">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a>'.
  146. '&nbsp;&nbsp;<a delete_one_message('.$result[0].') href="#inbox.php?action=deleteone&id='.$result[0].'">'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  147. }
  148. $message[4] = ($result[3]); //date stays the same
  149. foreach($message as $key => $value) {
  150. $message[$key] = api_xml_http_response_encode($value);
  151. }
  152. $message_list[] = $message;
  153. $i++;
  154. }
  155. return $message_list;
  156. }
  157. public static function send_message ($receiver_user_id, $title, $content) {
  158. global $charset;
  159. if (is_numeric($receiver_user_id)) {
  160. $table_message = Database::get_main_table(TABLE_MESSAGE);
  161. $title = api_convert_encoding($title,$charset,'UTF-8');
  162. $content = api_convert_encoding($content,$charset,'UTF-8');
  163. //message in inbox
  164. $sql = "SELECT COUNT(*) as count FROM $table_message WHERE user_sender_id = ".api_get_user_id()." AND user_receiver_id='".Database::escape_string($receiver_user_id)."' AND title = '".Database::escape_string($title)."' AND content ='".Database::escape_string($content)."' ";
  165. $res_exist = api_sql_query($sql,__FILE__,__LINE__);
  166. $row_exist = Database::fetch_array($res_exist,'ASSOC');
  167. if ($row_exist['count'] ==0) {
  168. $query = "INSERT INTO $table_message(user_sender_id, user_receiver_id, msg_status, send_date, title, content ) ".
  169. " VALUES (".
  170. "'".api_get_user_id()."', '".Database::escape_string($receiver_user_id)."', '1', '".date('Y-m-d H:i:s')."','".Database::escape_string($title)."','".Database::escape_string($content)."'".
  171. ")";
  172. //message in outbox
  173. $sql = "INSERT INTO $table_message(user_sender_id, user_receiver_id, msg_status, send_date, title, content ) ".
  174. " VALUES (".
  175. "'".api_get_user_id()."', '".Database::escape_string($receiver_user_id)."', '4', '".date('Y-m-d H:i:s')."','".Database::escape_string($title)."','".Database::escape_string($content)."'".
  176. ")";
  177. $rs = api_sql_query($sql,__FILE__,__LINE__);
  178. $result = api_sql_query($query,__FILE__,__LINE__);
  179. return $result;
  180. }
  181. } else {
  182. return false;
  183. }
  184. return false;
  185. }
  186. public static function delete_message_by_user_receiver ($user_receiver_id,$id) {
  187. $table_message = Database::get_main_table(TABLE_MESSAGE);
  188. $id = Database::escape_string($id);
  189. $sql="SELECT COUNT(*) as count FROM $table_message WHERE id=".$id." AND msg_status<>4;";
  190. $rs=api_sql_query($sql,__FILE__,__LINE__);
  191. $row=Database::fetch_array($rs,'ASSOC');
  192. if ($row['count']==1) {
  193. $query = "DELETE FROM $table_message " .
  194. "WHERE user_receiver_id=".Database::escape_string($user_receiver_id)." AND id=".$id;
  195. $result = api_sql_query($query,__FILE__,__LINE__);
  196. return $result;
  197. } else {
  198. return false;
  199. }
  200. }
  201. /**
  202. * Set status deleted
  203. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  204. * @param integer
  205. * @param integer
  206. * @return array
  207. */
  208. public static function delete_message_by_user_sender ($user_sender_id,$id) {
  209. $table_message = Database::get_main_table(TABLE_MESSAGE);
  210. $query = "DELETE FROM $table_message " .
  211. "WHERE user_sender_id=".Database::escape_string($user_sender_id)." AND id=".Database::escape_string($id);
  212. $result = api_sql_query($query,__FILE__,__LINE__);
  213. return $result;
  214. }
  215. public static function update_message ($user_id, $id) {
  216. $table_message = Database::get_main_table(TABLE_MESSAGE);
  217. $query = "UPDATE $table_message SET msg_status = '0' WHERE msg_status<>4 AND user_receiver_id=".Database::escape_string($user_id)." AND id='".Database::escape_string($id)."'";
  218. $result = api_sql_query($query,__FILE__,__LINE__);
  219. }
  220. public static function get_message_by_user ($user_id,$id) {
  221. $table_message = Database::get_main_table(TABLE_MESSAGE);
  222. $query = "SELECT * FROM $table_message WHERE user_receiver_id=".Database::escape_string($user_id)." AND id='".Database::escape_string($id)."'";
  223. $result = api_sql_query($query,__FILE__,__LINE__);
  224. return $row = Database::fetch_array($result);
  225. }
  226. /**
  227. * Gets information about if exist messages
  228. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  229. * @param integer
  230. * @param integer
  231. * @return boolean
  232. */
  233. public static function exist_message ($user_id, $id) {
  234. $table_message = Database::get_main_table(TABLE_MESSAGE);
  235. $query = "SELECT id FROM $table_message WHERE user_receiver_id=".Database::escape_string($user_id)." AND id='".Database::escape_string($id)."'";
  236. $result = api_sql_query($query,__FILE__,__LINE__);
  237. $num = Database::num_rows($result);
  238. if ($num>0)
  239. return true;
  240. else
  241. return false;
  242. }
  243. /**
  244. * Gets information about messages sent
  245. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  246. * @param integer
  247. * @param integer
  248. * @param string
  249. * @return array
  250. */
  251. public static function get_message_data_sent ($from, $number_of_items, $column, $direction) {
  252. global $charset;
  253. $from = intval($from);
  254. $number_of_items = intval($number_of_items);
  255. $column = intval($column);
  256. if (!in_array($direction, array('ASC', 'DESC')))
  257. $direction = 'ASC';
  258. $table_message = Database::get_main_table(TABLE_MESSAGE);
  259. $request=api_is_xml_http_request();
  260. $sql_query = "SELECT id as col0, user_sender_id as col1, title as col2, send_date as col3, user_receiver_id as col4, msg_status as col5 FROM $table_message " .
  261. "WHERE user_sender_id=".api_get_user_id()." AND msg_status=4 " .
  262. "ORDER BY col$column $direction LIMIT $from,$number_of_items";
  263. $sql_result = api_sql_query($sql_query,__FILE__,__LINE__);
  264. $i = 0;
  265. $message_list = array ();
  266. while ($result = Database::fetch_row($sql_result)) {
  267. if ($request===true) {
  268. $message[0] = '<input type="checkbox" value='.$result[0].' name="out[]">';
  269. } else {
  270. $message[0] = ($result[0]);
  271. }
  272. if ($request===true) {
  273. if ($result[5]==4)
  274. {
  275. $message[1] = Display::return_icon('mail_send.png',get_lang('MessageSent'));//Message Sent
  276. }
  277. $message[2] = '<a onclick="show_sent_message('.$result[0].')" href="javascript:void(0)">'.GetFullUserName($result[4]).'</a>';
  278. $message[3] = '<a onclick="show_sent_message('.$result[0].')" href="javascript:void(0)">'.str_replace("\\","",$result[2]).'</a>';
  279. $message[5] = '&nbsp;&nbsp;<a onclick="delete_one_message_outbox('.$result[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  280. } else {
  281. $message[2] = '<a onclick="show_sent_message ('.$result[0].')" href="#../messages/view_message.php?id_send='.$result[0].'">'.GetFullUserName($result[4]).'</a>';
  282. $message[3] = '<a onclick="show_sent_message ('.$result[0].')" href="#../messages/view_message.php?id_send='.$result[0].'">'.$result[2].'</a>';
  283. $message[5] = '<a href="new_message.php?re_id='.$result[0].'">'.Display::return_icon('message_reply.png',get_lang('ReplyToMessage')).'</a>'.
  284. '&nbsp;&nbsp;<a href="outbox.php?action=deleteone&id='.$result[0].'" onclick="javascript:if(!confirm('."'".addslashes(api_htmlentities(get_lang('ConfirmDeleteMessage')))."'".')) return false;">'.Display::return_icon('message_delete.png',get_lang('DeleteMessage')).'</a>';
  285. }
  286. $message[4] = $result[3]; //date stays the same
  287. foreach($message as $key => $value) {
  288. $message[$key] = api_xml_http_response_encode($value);
  289. }
  290. $message_list[] = $message;
  291. $i++;
  292. }
  293. return $message_list;
  294. }
  295. /**
  296. * Gets information about number messages sent
  297. * @author Isaac FLores Paz <isaac.flores@dokeos.com>
  298. * @param void
  299. * @return integer
  300. */
  301. public static function get_number_of_messages_sent () {
  302. $table_message = Database::get_main_table(TABLE_MESSAGE);
  303. $sql_query = "SELECT COUNT(*) as number_messages FROM $table_message WHERE msg_status=4 AND user_sender_id=".api_get_user_id();
  304. $sql_result = api_sql_query($sql_query,__FILE__,__LINE__);
  305. $result = Database::fetch_array($sql_result);
  306. return $result['number_messages'];
  307. }
  308. public static function show_message_box () {
  309. global $charset;
  310. $table_message = Database::get_main_table(TABLE_MESSAGE);
  311. if (isset($_GET['id_send']) && is_numeric($_GET['id_send'])) {
  312. $query = "SELECT * FROM $table_message WHERE user_sender_id=".api_get_user_id()." AND id=".Database::escape_string($_GET['id_send'])." AND msg_status=4;";
  313. $result = api_sql_query($query,__FILE__,__LINE__);
  314. $path='outbox.php';
  315. } else {
  316. if (is_numeric($_GET['id'])) {
  317. $query = "UPDATE $table_message SET msg_status = '0' WHERE user_receiver_id=".api_get_user_id()." AND id='".Database::escape_string($_GET['id'])."';";
  318. $result = api_sql_query($query,__FILE__,__LINE__);
  319. $query = "SELECT * FROM $table_message WHERE msg_status<>4 AND user_receiver_id=".api_get_user_id()." AND id='".Database::escape_string($_GET['id'])."';";
  320. $result = api_sql_query($query,__FILE__,__LINE__);
  321. }
  322. $path='inbox.php';
  323. }
  324. $row = Database::fetch_array($result);
  325. $user_con = self::users_connected_by_id();
  326. $band=0;
  327. $reply='';
  328. for ($i=0;$i<count($user_con);$i++)
  329. if ($row[1]==$user_con[$i])
  330. $band=1;
  331. if ($band==1 && !isset($_GET['id_send'])) {
  332. if (is_numeric($_GET['id'])) {
  333. $reply = '<a onclick="reply_to_messages(\'show\','.Security::remove_XSS($_GET['id']).',\'\')" href="javascript:void(0)">'.Display::return_icon('message_reply.png',api_xml_http_response_encode(get_lang('ReplyToMessage'))).api_xml_http_response_encode(get_lang('ReplyToMessage')).'</a>';
  334. }
  335. }
  336. echo '<div class=actions>';
  337. echo '<a onclick="close_div_show(\'div_content_messages\')" href="javascript:void(0)">'.Display::return_icon('folder_up.gif',api_xml_http_response_encode(get_lang('BackToInbox'))).api_xml_http_response_encode(get_lang('BackToInbox')).'</a>';
  338. echo $reply;
  339. echo '<a onclick="delete_one_message('.$row[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',api_xml_http_response_encode(get_lang('DeleteMessage'))).''.api_xml_http_response_encode(get_lang('DeleteMessage')).'</a>';
  340. echo '</div><br />';
  341. echo '
  342. <table class="message_view_table" >
  343. <TR>
  344. <TD width=10>&nbsp; </TD>
  345. <TD vAlign=top width="100%">
  346. <TABLE>
  347. <TR>
  348. <TD width="100%">
  349. <TR> <h1>'.str_replace("\\","",api_xml_http_response_encode($row[5])).'</h1></TR>
  350. </TD>
  351. <TR>
  352. <TD>'.api_xml_http_response_encode(get_lang('From').'&nbsp;<b>'.GetFullUserName($row[1]).'</b> '.api_strtolower(get_lang('To')).'&nbsp; <b>'.GetFullUserName($row[2])).'</b> </TD>
  353. </TR>
  354. <TR>
  355. <TD >'.api_xml_http_response_encode(get_lang('Date').'&nbsp; '.$row[4]).'</TD>
  356. </TR>
  357. </TR>
  358. </TABLE>
  359. <br />
  360. <TABLE height=209 width="100%" bgColor=#ffffff>
  361. <TBODY>
  362. <TR>
  363. <TD vAlign=top>'.str_replace("\\","",api_xml_http_response_encode($row[6])).'</TD>
  364. </TR>
  365. </TBODY>
  366. </TABLE>
  367. <DIV class=HT style="PADDING-BOTTOM: 5px"> </DIV></TD>
  368. <TD width=10>&nbsp;</TD>
  369. </TR>
  370. </TABLE>';
  371. }
  372. public static function show_message_box_sent () {
  373. global $charset;
  374. $table_message = Database::get_main_table(TABLE_MESSAGE);
  375. if (is_numeric($_GET['id_send'])) {
  376. $query = "SELECT * FROM $table_message WHERE user_sender_id=".api_get_user_id()." AND id=".Database::escape_string($_GET['id_send'])." AND msg_status=4;";
  377. $result = api_sql_query($query,__FILE__,__LINE__);
  378. }
  379. $path='outbox.php';
  380. $row = Database::fetch_array($result);
  381. $user_con = self::users_connected_by_id();
  382. $band=0;
  383. $reply='';
  384. for ($i=0;$i<count($user_con);$i++)
  385. if ($row[1]==$user_con[$i])
  386. $band=1;
  387. echo '<div class=actions>';
  388. echo '<a onclick="close_and_open_outbox()" href="javascript:void(0)">'.Display::return_icon('folder_up.gif',api_xml_http_response_encode(get_lang('BackToOutbox'))).api_xml_http_response_encode(get_lang('BackToOutbox')).'</a>';
  389. echo '<a onclick="delete_one_message_outbox('.$row[0].')" href="javascript:void(0)" >'.Display::return_icon('message_delete.png',api_xml_http_response_encode(get_lang('DeleteMessage'))).api_xml_http_response_encode(get_lang('DeleteMessage')).'</a>';
  390. echo '</div><br />';
  391. echo '
  392. <table class="message_view_table" >
  393. <TR>
  394. <TD width=10>&nbsp; </TD>
  395. <TD vAlign=top width="100%">
  396. <TABLE>
  397. <TR>
  398. <TD width="100%">
  399. <TR> <h1>'.str_replace("\\","",api_xml_http_response_encode($row[5])).'</h1></TR>
  400. </TD>
  401. <TR>
  402. <TD>'.api_xml_http_response_encode(get_lang('From').'&nbsp;<b>'.GetFullUserName($row[1]).'</b> '.api_strtolower(get_lang('To')).'&nbsp; <b>'.GetFullUserName($row[2])).'</b> </TD>
  403. </TR>
  404. <TR>
  405. <TD >'.api_xml_http_response_encode(get_lang('Date').'&nbsp; '.$row[4]).'</TD>
  406. </TR>
  407. </TR>
  408. </TABLE>
  409. <br />
  410. <TABLE height=209 width="100%" bgColor=#ffffff>
  411. <TBODY>
  412. <TR>
  413. <TD vAlign=top>'.str_replace("\\","",api_xml_http_response_encode($row[6])).'</TD>
  414. </TR>
  415. </TBODY>
  416. </TABLE>
  417. <DIV class=HT style="PADDING-BOTTOM: 5px"> </DIV></TD>
  418. <TD width=10>&nbsp;</TD>
  419. </TR>
  420. </TABLE>';
  421. }
  422. /**
  423. * get user id by user email
  424. * @param string $user_email
  425. * @return int user id
  426. */
  427. public static function get_user_id_by_email ($user_email) {
  428. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  429. $sql='SELECT user_id FROM '.$tbl_user.' WHERE email="'.Database::escape_string($user_email).'";';
  430. $rs=api_sql_query($sql,__FILE__,__LINE__);
  431. $row=Database::fetch_array($rs,'ASSOC');
  432. if (isset($row['user_id'])) {
  433. return $row['user_id'];
  434. } else {
  435. return null;
  436. }
  437. }
  438. }
  439. ?>