new_message.php 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * @package chamilo.messages
  5. */
  6. /**
  7. * This script shows a compose area (wysiwyg editor if supported, otherwise
  8. * a simple textarea) where the user can type a message.
  9. * There are three modes
  10. * - standard: type a message, select a user to send it to, press send
  11. * - reply on message (when pressing reply when viewing a message)
  12. * - send to specific user (when pressing send message in the who is online list)
  13. */
  14. /* INIT SECTION */
  15. // name of the language file that needs to be included
  16. $language_file= array('messages','userInfo', 'admin');
  17. $cidReset = true;
  18. require_once '../inc/global.inc.php';
  19. api_block_anonymous_users();
  20. if (api_get_setting('allow_message_tool') !='true' ){
  21. api_not_allowed();
  22. }
  23. require_once api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php';
  24. require_once api_get_path(LIBRARY_PATH).'group_portal_manager.lib.php';
  25. require_once api_get_path(LIBRARY_PATH).'message.lib.php';
  26. $nameTools = api_xml_http_response_encode(get_lang('Messages'));
  27. /* Constants and variables */
  28. $htmlHeadXtra[]='
  29. <script language="javascript">
  30. function validate(form,list) {
  31. if(list.selectedIndex<0) {
  32. alert("Please select someone to send the message to.")
  33. return false
  34. } else {
  35. return true
  36. }
  37. }
  38. </script>';
  39. $htmlHeadXtra[] = '<script src="'.api_get_path(WEB_LIBRARY_PATH).'javascript/tag/jquery.fcbkcomplete.js" type="text/javascript" language="javascript"></script>';
  40. $htmlHeadXtra[] = '<link href="'.api_get_path(WEB_LIBRARY_PATH).'javascript/tag/style.css" rel="stylesheet" type="text/css" />';
  41. $htmlHeadXtra[] = '<script type="text/javascript">
  42. $(document).ready(function () {
  43. $("#users").fcbkcomplete({
  44. json_url: "'.api_get_path(WEB_AJAX_PATH).'message.ajax.php?a=find_users",
  45. cache: false,
  46. filter_case: false,
  47. filter_hide: true,
  48. complete_text:"'.get_lang('StartToType').'",
  49. firstselected: true,
  50. //onremove: "testme",
  51. onselect:"check_users",
  52. filter_selected: true,
  53. newel: true
  54. });
  55. });
  56. function check_users() {
  57. //selecting only selected users
  58. $("#users option:selected").each(function() {
  59. var user_id = $(this).val();
  60. if (user_id != "" ) {
  61. $.ajax({
  62. url: "'.api_get_path(WEB_AJAX_PATH).'user_manager.ajax.php?a=user_id_exists",
  63. data: "user_id="+user_id,
  64. success: function(return_value) {
  65. if (return_value == 0 ) {
  66. alert("'.get_lang('UserDoesNotExist').'");
  67. //Deleting select option tag
  68. $("#users option[value="+user_id+"]").remove();
  69. //Deleting holder
  70. $(".holder li").each(function () {
  71. if ($(this).attr("rel") == user_id) {
  72. $(this).remove();
  73. }
  74. });
  75. }
  76. },
  77. });
  78. }
  79. });
  80. }
  81. var counter_image = 1;
  82. /*
  83. function remove_image_form(id_elem1) {
  84. var elem1 = document.getElementById(id_elem1);
  85. elem1.parentNode.removeChild(elem1);
  86. }
  87. */
  88. function add_image_form() {
  89. // Multiple filepaths for image form
  90. var filepaths = document.getElementById("filepaths");
  91. if (document.getElementById("filepath_"+counter_image)) {
  92. counter_image = counter_image + 1;
  93. } else {
  94. counter_image = counter_image;
  95. }
  96. var elem1 = document.createElement("div");
  97. elem1.setAttribute("id","filepath_"+counter_image);
  98. filepaths.appendChild(elem1);
  99. id_elem1 = "filepath_"+counter_image;
  100. id_elem1 = "\'"+id_elem1+"\'";
  101. //document.getElementById("filepath_"+counter_image).innerHTML = "<input type=\"file\" name=\"attach_"+counter_image+"\" size=\"20\" />&nbsp;<a href=\"javascript:remove_image_form("+id_elem1+")\"><img src=\"'.api_get_path(WEB_CODE_PATH).'img/delete.gif\"></a>";
  102. document.getElementById("filepath_"+counter_image).innerHTML = "<input type=\"file\" name=\"attach_"+counter_image+"\" size=\"20\" />&nbsp;<input type=\"text\" name=\"legend[]\" size=\"20\" />";
  103. if (filepaths.childNodes.length == 6) {
  104. var link_attach = document.getElementById("link-more-attach");
  105. if (link_attach) {
  106. link_attach.innerHTML="";
  107. }
  108. }
  109. }
  110. </script>
  111. <style>
  112. div.row div.label {
  113. width:15%;
  114. }
  115. div.row div.formw {
  116. width:80%;
  117. }
  118. </style>';
  119. $nameTools = get_lang('ComposeMessage');
  120. /* FUNCTIONS */
  121. /**
  122. * Shows the compose area + a list of users to select from.
  123. */
  124. function show_compose_to_any ($user_id) {
  125. $online_user_list = MessageManager::get_online_user_list($user_id);
  126. $default['user_list'] = 0;
  127. $online_user_list=null;
  128. manage_form($default, $online_user_list);
  129. }
  130. function show_compose_reply_to_message ($message_id, $receiver_id) {
  131. global $charset;
  132. $table_message = Database::get_main_table(TABLE_MESSAGE);
  133. $query = "SELECT user_sender_id FROM $table_message WHERE user_receiver_id=".intval($receiver_id)." AND id='".intval($message_id)."';";
  134. $result = Database::query($query);
  135. $row = Database::fetch_array($result,'ASSOC');
  136. if (!isset($row['user_sender_id'])) {
  137. echo get_lang('InvalidMessageId');
  138. die();
  139. }
  140. $pre_html = '<div class="row">
  141. <div class="label">'.get_lang('SendMessageTo').'</div>
  142. <div class="formw">';
  143. $post = '</div></div>';
  144. $multi_select = '<select id="users" name="users">
  145. </select>';
  146. echo $pre_html.'<strong>'.GetFullUserName($row['user_sender_id']).'</strong>'.$post;
  147. //echo get_lang('To').':&nbsp;<strong>'. GetFullUserName($row['user_sender_id']).'</strong>';
  148. //$default['title'] = get_lang('EnterTitle');
  149. $default['users'] = array($row['user_sender_id']);
  150. manage_form($default);
  151. }
  152. function show_compose_to_user ($receiver_id) {
  153. global $charset;
  154. echo get_lang('To').':&nbsp;<strong>'. GetFullUserName($receiver_id).'</strong>';
  155. $default['title'] = api_xml_http_response_encode(get_lang('EnterTitle'));
  156. $default['users'] = array($receiver_id);
  157. manage_form($default);
  158. }
  159. function manage_form ($default, $select_from_user_list = null) {
  160. global $charset;
  161. $table_message = Database::get_main_table(TABLE_MESSAGE);
  162. $group_id = intval($_REQUEST['group_id']);
  163. $message_id = intval($_GET['message_id']);
  164. $param_f = isset($_GET['f'])?Security::remove_XSS($_GET['f']):'';
  165. $form = new FormValidator('compose_message',null,api_get_self().'?f='.$param_f,null,array('enctype'=>'multipart/form-data'));
  166. if (empty($group_id)) {
  167. if (isset($select_from_user_list)) {
  168. $form->add_textfield('id_text_name', get_lang('SendMessageTo'),true,array('size' => 40,'id'=>'id_text_name','onkeyup'=>'send_request_and_search()','autocomplete'=>'off','style'=>'padding:0px'));
  169. $form->addRule('id_text_name', get_lang('ThisFieldIsRequired'), 'required');
  170. $form->addElement('html','<div id="id_div_search" style="padding:0px" class="message-select-box" >&nbsp;</div>');
  171. $form->addElement('hidden','user_list',0,array('id'=>'user_list'));
  172. } else {
  173. if (empty($default['users'])) {
  174. //the magic should be here
  175. $pre_html = '<div class="row">
  176. <div class="label">'.get_lang('SendMessageTo').'</div>
  177. <div class="formw">';
  178. $post = '</div></div>';
  179. $multi_select = '<select id="users" name="users">
  180. </select>';
  181. $form->addElement('html',$pre_html.$multi_select.$post );
  182. } else {
  183. $form->addElement('hidden','hidden_user',$default['users'][0],array('id'=>'hidden_user'));
  184. }
  185. }
  186. } else {
  187. $group_info = GroupPortalManager::get_group_data($group_id);
  188. $form->addElement('html','<div class="row"><div class="label">'.get_lang('ToGroup').'</div><div class="formw">'.api_xml_http_response_encode($group_info['name']).'</div></div>');
  189. $form->addElement('hidden','group_id',$group_id);
  190. $form->addElement('hidden','parent_id',$message_id);
  191. }
  192. $form->add_textfield('title', get_lang('Subject'),true ,array('size' => 54));
  193. $form->add_html_editor('content', get_lang('Message'), false, false, array('ToolbarSet' => 'Messages', 'Width' => '95%', 'Height' => '250'));
  194. //$form->addElement('textarea','content', get_lang('Message'), array('cols' => 75,'rows'=>8));
  195. if (isset($_GET['re_id'])) {
  196. $message_reply_info = MessageManager::get_message_by_id($_GET['re_id']);
  197. $form->addElement('hidden','re_id',Security::remove_XSS($_GET['re_id']));
  198. $form->addElement('hidden','save_form','save_form');
  199. //adding reply mail
  200. $user_reply_info = UserManager::get_user_info_by_id($message_reply_info['user_sender_id']);
  201. $default['content']='<p></p>'.sprintf(get_lang('XWroteY'),api_get_person_name($user_reply_info['firstname'],$user_reply_info['lastname']), api_html_entity_decode($message_reply_info['content'],ENT_QUOTES,$charset));
  202. }
  203. if (empty($group_id)) {
  204. $form->addElement('html','<div class="row"><div class="label">'.get_lang('FilesAttachment').'</div><div class="formw">
  205. <span id="filepaths">
  206. <div id="filepath_1">
  207. <input type="file" name="attach_1" size="20" />
  208. <input type="text" name="legend[]" size="20" />
  209. </div></span></div></div>');
  210. $form->addElement('html','<div class="row"><div class="formw"><span id="link-more-attach"><a href="javascript://" onclick="return add_image_form()">'.get_lang('AddOneMoreFile').'</a></span>&nbsp;('.sprintf(get_lang('MaximunFileSizeX'),format_file_size(api_get_setting('message_max_upload_filesize'))).')</div></div>');
  211. }
  212. $form->addElement('style_submit_button','compose',api_xml_http_response_encode(get_lang('SendMessage')),'class="save"');
  213. $form->setRequiredNote('<span class="form_required">*</span> <small>'.get_lang('ThisFieldIsRequired').'</small>');
  214. if (!empty($group_id) && !empty($message_id)) {
  215. $message_info = MessageManager::get_message_by_id($message_id);
  216. $default['title']=get_lang('Re:').api_html_entity_decode($message_info['title'],ENT_QUOTES,$charset);
  217. }
  218. $form->setDefaults($default);
  219. if ($form->validate()) {
  220. $check = Security::check_token('post');
  221. if ($check) {
  222. $values = $default;
  223. $user_list = $values['users'];
  224. $file_comments = $_POST['legend'];
  225. $title = $values['title'];
  226. $content = $values['content'];
  227. $group_id = $values['group_id'];
  228. $parent_id = $values['parent_id'];
  229. if (is_array($user_list) && count($user_list)> 0) {
  230. //all is well, send the message
  231. foreach ($user_list as $user) {
  232. $res = MessageManager::send_message($user, $title, $content, $_FILES, $file_comments, $group_id, $parent_id);
  233. if ($res) {
  234. if (is_string($res)) {
  235. Display::display_error_message($res);
  236. } else {
  237. MessageManager::display_success_message($user);
  238. }
  239. }
  240. }
  241. } else {
  242. Display::display_error_message('ErrorSendingMessage');
  243. }
  244. }
  245. Security::clear_token();
  246. } else {
  247. $token = Security::get_token();
  248. $form->addElement('hidden','sec_token');
  249. $form->setConstants(array('sec_token' => $token));
  250. $form->display();
  251. }
  252. }
  253. /* MAIN SECTION */
  254. if ($_GET['f']=='social') {
  255. $this_section = SECTION_SOCIAL;
  256. $interbreadcrumb[]= array ('url' => api_get_path(WEB_PATH).'main/social/home.php','name' => get_lang('Social'));
  257. } else {
  258. $this_section = SECTION_MYPROFILE;
  259. $interbreadcrumb[]= array ('url' => api_get_path(WEB_PATH).'main/auth/profile.php','name' => get_lang('Profile'));
  260. //$interbreadcrumb[]= array ('url' => '#','name' => get_lang('ComposeMessage'));
  261. }
  262. Display::display_header(get_lang('ComposeMessage'));
  263. $group_id = intval($_REQUEST['group_id']);
  264. if ($group_id != 0) {
  265. echo '<div class=actions>';
  266. echo '<a href="'.api_get_path(WEB_PATH).'main/social/groups.php?id='.$group_id.'">'.Display::return_icon('back.png',api_xml_http_response_encode(get_lang('ComposeMessage'))).api_xml_http_response_encode(get_lang('BackToGroup')).'</a>';
  267. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/new_message.php?group_id='.$group_id.'">'.Display::return_icon('message_new.png',api_xml_http_response_encode(get_lang('ComposeMessage'))).api_xml_http_response_encode(get_lang('ComposeMessage')).'</a>';
  268. echo '</div>';
  269. } else {
  270. if ($_GET['f']=='social') {
  271. } else {
  272. echo '<div class=actions>';
  273. if (api_get_setting('allow_social_tool') == 'true' && api_get_setting('allow_message_tool') == 'true') {
  274. echo '<a href="'.api_get_path(WEB_PATH).'main/social/profile.php">'.Display::return_icon('shared_profile.png', get_lang('ViewSharedProfile')).'&nbsp;'.get_lang('ViewSharedProfile').'</a>';
  275. }
  276. if (api_get_setting('allow_message_tool') == 'true') {
  277. // echo '<a href="'.api_get_path(WEB_PATH).'main/messages/inbox.php">'.Display::return_icon('inbox.png').' '.get_lang('Messages').'</a>';
  278. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/new_message.php">'.Display::return_icon('message_new.png',get_lang('ComposeMessage')).get_lang('ComposeMessage').'</a>';
  279. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/inbox.php">'.Display::return_icon('inbox.png',get_lang('Inbox')).get_lang('Inbox').'</a>';
  280. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/outbox.php">'.Display::return_icon('outbox.png',get_lang('Outbox')).get_lang('Outbox').'</a>';
  281. }
  282. //echo '<a href="'.api_get_path(WEB_PATH).'main/auth/profile.php?type=reduced">'.Display::return_icon('edit.gif', get_lang('EditNormalProfile')).'&nbsp;'.get_lang('EditNormalProfile').'</a>';
  283. echo '</div>';
  284. }
  285. }
  286. echo '<div id="social-content">';
  287. $id_content_right = '';
  288. //LEFT COLUMN
  289. if (api_get_setting('allow_social_tool') != 'true') {
  290. $id_content_right = 'inbox';
  291. /* echo '<div id="inbox-menu" class="actions">';
  292. echo '<ul>';
  293. echo '<li><a href="'.api_get_path(WEB_PATH).'main/messages/new_message.php">'.Display::return_icon('message_new.png',get_lang('ComposeMessage')).get_lang('ComposeMessage').'</a>'.'</li>';
  294. echo '<li><a href="'.api_get_path(WEB_PATH).'main/messages/inbox.php">'.Display::return_icon('inbox.png',get_lang('Inbox')).get_lang('Inbox').'</a>'.'</li>';
  295. echo '<li><a href="'.api_get_path(WEB_PATH).'main/messages/outbox.php">'.Display::return_icon('outbox.png',get_lang('Outbox')).get_lang('Outbox').'</a>'.'</li>';
  296. echo '</ul>';
  297. echo '</div>';*/
  298. } else {
  299. require_once api_get_path(LIBRARY_PATH).'social.lib.php';
  300. echo '<div id="social-content-left">';
  301. //this include the social menu div
  302. SocialManager::show_social_menu('messages');
  303. echo '</div>';
  304. $id_content_right = 'social-content-right';
  305. }
  306. echo '<div id="'.$id_content_right.'">';
  307. //MAIN CONTENT
  308. if (api_get_setting('allow_social_tool') == 'true') {
  309. echo '<div class="actions">';
  310. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/inbox.php?f=social">'.Display::return_icon('back.png', get_lang('Back'), array(), 32).'</a>';
  311. echo '</div>';
  312. }
  313. if (!isset($_POST['compose'])) {
  314. if(isset($_GET['re_id'])) {
  315. show_compose_reply_to_message($_GET['re_id'], api_get_user_id());
  316. } elseif(isset($_GET['send_to_user'])) {
  317. show_compose_to_user($_GET['send_to_user']);
  318. } else {
  319. show_compose_to_any($_user['user_id']);
  320. }
  321. } else {
  322. $restrict = false;
  323. if (isset($_POST['users'])) {
  324. $restrict = true;
  325. } elseif (isset($_POST['group_id'])) {
  326. $restrict = true;
  327. } elseif(isset($_POST['hidden_user'])) {
  328. $restrict = true;
  329. }
  330. $default['title'] = $_POST['title'];
  331. $default['content'] = $_POST['content'];
  332. // comes from a reply button
  333. if (isset($_GET['re_id'])) {
  334. manage_form($default);
  335. } else {
  336. // post
  337. if ($restrict) {
  338. if (!isset($_POST['group_id'])) {
  339. $default['users'] = $_POST['users'];
  340. } else {
  341. $default['group_id'] = $_POST['group_id'];
  342. }
  343. if (isset($_POST['hidden_user'])) {
  344. $default['users'] = array($_POST['hidden_user']);
  345. }
  346. manage_form($default);
  347. } else {
  348. Display::display_error_message(get_lang('ErrorSendingMessage'));
  349. }
  350. }
  351. }
  352. echo '</div>';
  353. echo '</div>';
  354. /* FOOTER */
  355. Display::display_footer();