123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435 |
- <?php
- /* For licensing terms, see /license.txt */
- /**
- * These files are a complete rework of the forum. The database structure is
- * based on phpBB but all the code is rewritten. A lot of new functionalities
- * are added:
- * - forum categories and forums can be sorted up or down, locked or made invisible
- * - consistent and integrated forum administration
- * - forum options: are students allowed to edit their post?
- * moderation of posts (approval)
- * reply only forums (students cannot create new threads)
- * multiple forums per group
- * - sticky messages
- * - new view option: nested view
- * - quoting a message
- *
- * @Author Patrick Cool <patrick.cool@UGent.be>, Ghent University
- * @Copyright Ghent University
- * @Copyright Patrick Cool
- *
- * @package chamilo.forum
- */
- // Language files that need to be included.
- $language_file = array('forum', 'group');
- // Including the global initialization file.
- require_once '../inc/global.inc.php';
- // Notification for unauthorized people.
- api_protect_course_script(true);
- // The section (tabs).
- $this_section = SECTION_COURSES;
- // Including additional library scripts.
- require_once api_get_path(LIBRARY_PATH).'groupmanager.lib.php';
- $nameTools = get_lang('ToolForum');
- // Are we in a lp ?
- $origin = '';
- $origin_string = '';
- if (isset($_GET['origin'])) {
- $origin = Security::remove_XSS($_GET['origin']);
- $origin_string = '&origin='.$origin;
- }
- /* Including necessary files */
- require 'forumconfig.inc.php';
- require_once 'forumfunction.inc.php';
- $userid = api_get_user_id();
- $userinf = api_get_user_info($userid);
- /* MAIN DISPLAY SECTION */
- /* Retrieving forum and forum category information */
- // We are getting all the information about the current forum and forum category.
- // Note pcool: I tried to use only one sql statement (and function) for this,
- // but the problem is that the visibility of the forum AND forum cateogory are stored in the item_property table.
- //$my_forum_group = isset($_GET['gidReq']) ? $_GET['gidReq'] : '';
- $group_id = api_get_group_id();
- $my_forum = isset($_GET['forum']) ? $_GET['forum'] : '';
- $val = GroupManager::user_has_access($userid, $group_id, GROUP_TOOL_FORUM);
- if (!empty($group_id)) {
- if (api_is_allowed_to_edit(false, true) || $val || GroupManager::is_tutor_of_group(api_get_user_id(), $group_id)) {
- $current_forum = get_forum_information($my_forum); // Note: This has to be validated that it is an existing forum.
- $current_forum_category = get_forumcategory_information($current_forum['forum_category']);
- }
- } else {
- $result = get_forum_information($my_forum);
- if ($result['forum_of_group'] == 0) {
- $current_forum = get_forum_information($my_forum); // Note: This has to be validated that it is an existing forum.
- $current_forum_category = get_forumcategory_information($current_forum['forum_category']);
- }
- }
- /* Header and Breadcrumbs */
- $my_search = isset($_GET['search']) ? $_GET['search'] : '';
- $my_action = isset($_GET['action']) ? $_GET['action'] : '';
- if (isset($_SESSION['gradebook'])){
- $gradebook = $_SESSION['gradebook'];
- }
- if (!empty($gradebook) && $gradebook == 'view') {
- $interbreadcrumb[] = array (
- 'url' => '../gradebook/'.$_SESSION['gradebook_dest'],
- 'name' => get_lang('ToolGradebook')
- );
- }
- if (!empty($_GET['gidReq'])) {
- $toolgroup = Database::escape_string($_GET['gidReq']);
- api_session_register('toolgroup');
- }
- if ($origin == 'group') {
- $_clean['toolgroup'] = (int)$_SESSION['toolgroup'];
- $group_properties = GroupManager :: get_group_properties($_clean['toolgroup']);
- $interbreadcrumb[] = array('url' => '../group/group.php', 'name' => get_lang('Groups'));
- $interbreadcrumb[] = array('url'=>'../group/group_space.php?gidReq='.$_SESSION['toolgroup'], 'name'=> get_lang('GroupSpace').' '.$group_properties['name']);
- $interbreadcrumb[] = array('url' => '#', 'name' => get_lang('Forum').' '.Security::remove_XSS($current_forum['forum_title']));
- } else {
- $interbreadcrumb[] = array('url' => 'index.php?gradebook='.$gradebook.'&search='.Security::remove_XSS($my_search), 'name' => get_lang('ForumCategories'));
- $interbreadcrumb[] = array('url' => 'viewforumcategory.php?forumcategory='.$current_forum_category['cat_id'].'&search='.Security::remove_XSS(urlencode($my_search)), 'name' => prepare4display($current_forum_category['cat_title']));
- $interbreadcrumb[] = array('url' => '#', 'name' => Security::remove_XSS($current_forum['forum_title']));
- }
- if ($origin == 'learnpath') {
- include api_get_path(INCLUDE_PATH).'reduced_header.inc.php';
- } else {
- // The last element of the breadcrumb navigation is already set in interbreadcrumb, so give empty string.
- Display :: display_header('');
- //api_display_tool_title($nameTools);
- }
- /* Actions */
- $table_link = Database :: get_main_table(TABLE_MAIN_GRADEBOOK_LINK);
- // Change visibility of a forum or a forum category.
- if (($my_action == 'invisible' OR $my_action=='visible') AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(false, true) && api_is_allowed_to_session_edit(false, true)) {
- $message = change_visibility($_GET['content'], $_GET['id'], $_GET['action']); // Note: This has to be cleaned first.
- }
- // Locking and unlocking.
- if (($my_action == 'lock' OR $my_action == 'unlock') AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(false, true) && api_is_allowed_to_session_edit(false, true)) {
- $message = change_lock_status($_GET['content'], $_GET['id'], $my_action); // Note: This has to be cleaned first.
- }
- // Deleting.
- if ($my_action == 'delete' AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(false, true) && api_is_allowed_to_session_edit(false, true)) {
- $message = delete_forum_forumcategory_thread($_GET['content'], $_GET['id']); // Note: This has to be cleaned first.
- // Delete link
-
- /*$sql_link = 'DELETE FROM '.$table_link.' WHERE ref_id='.intval($_GET['id']).' and type=5 and course_code="'.api_get_course_id().'";';
- Database::query($sql_link);*/
- require_once api_get_path(SYS_CODE_PATH).'gradebook/lib/gradebook_functions.inc.php';
- $link_id = is_resource_in_course_gradebook(api_get_course_id(), 5 , intval($_GET['id']), api_get_session_id());
- if ($link_id !== false) {
- remove_resource_from_course_gradebook($link_id);
- }
- }
- // Moving.
- if ($my_action == 'move' AND isset($_GET['thread']) AND api_is_allowed_to_edit(false, true) && api_is_allowed_to_session_edit(false, true)) {
- $message = move_thread_form();
- }
- // Notification.
- if ($my_action == 'notify' AND isset($_GET['content']) AND isset($_GET['id']) && api_is_allowed_to_session_edit(false, true)) {
- $return_message = set_notification($_GET['content'], $_GET['id']);
- Display :: display_confirmation_message($return_message, false);
- }
- // Student list
- if ($my_action == 'liststd' AND isset($_GET['content']) AND isset($_GET['id']) AND api_is_allowed_to_edit(null, true)) {
- switch($_GET['list']) {
- case 'qualify':
- $student_list = get_thread_users_qualify($_GET['id'], api_get_course_int_id());
- $nrorow3 = -2;
- break;
- case 'notqualify':
- $student_list = get_thread_users_not_qualify($_GET['id'], api_get_course_int_id());
- $nrorow3 = -2;
- break;
- default:
- $student_list = get_thread_users_details($_GET['id'], api_get_course_int_id());
- $nrorow3 = Database::num_rows($student_list);
- break;
- }
- $table_list = '<p><br /><h3>'.get_lang('ThreadUsersList').': '.get_name_thread_by_id($_GET['id']).'</h3>';
- if ($nrorow3 > 0 || $nrorow3 == -2) {
- $url = 'cidReq='.Security::remove_XSS($_GET['cidReq']).'&forum='.Security::remove_XSS($my_forum).'&action='.Security::remove_XSS($_GET['action']).'&content='.Security::remove_XSS($_GET['content'],STUDENT).'&id='.Security::remove_XSS($_GET['id']);
- $table_list .= '<br />
- <div style="width:50%">
- <table class="data_table" border="0">
- <tr>
- <th height="22"><a href="viewforum.php?'.$url.'&origin='.$origin.'&list=all">'.get_lang('AllStudents').'</a></th>
- <th><a href="viewforum.php?'.$url.'&origin='.$origin.'&list=qualify">'.get_lang('StudentsQualified').'</a></th>
- <th><a href="viewforum.php?'.$url.'&origin='.$origin.'&list=notqualify">'.get_lang('StudentsNotQualified').'</a></th>
- </tr>
- </table></div>
- <div style="border:1px solid gray; width:99%; margin-top:5px; padding:4px; float:left">
- ';
- $icon_qualify = 'blog_new.gif';
- $table_list .= '<center><br /><table class="data_table" style="width:50%">';
- // The column headers (TODO: Make this sortable).
- $table_list .= '<tr >';
- $table_list .= '<th height="24">'.get_lang('NamesAndLastNames').'</th>';
- if ($_GET['list'] == 'qualify') {
- $table_list.= '<th>'.get_lang('Qualification').'</th>';
- }
- if (api_is_allowed_to_edit(null, true)) {
- $table_list.= '<th>'.get_lang('Qualify').'</th>';
- }
- $table_list .= '</tr>';
- $max_qualify = show_qualify('2', $_GET['cidReq'], $my_forum, $userid, $_GET['id']);
- $counter_stdlist = 0;
- if (Database::num_rows($student_list) > 0) {
- while ($row_student_list=Database::fetch_array($student_list)) {
- if ($counter_stdlist % 2 == 0) {
- $class_stdlist = 'row_odd';
- } else {
- $class_stdlist = 'row_even';
- }
- $name_user_theme = api_get_person_name($row_student_list['firstname'], $row_student_list['lastname']);
- $table_list .= '<tr class="'.$class_stdlist.'"><td><a href="../user/userInfo.php?uInfo='.$row_student_list['user_id'].'&tipo=sdtlist&'.api_get_cidreq().'&gidReq='.Security::remove_XSS($_GET['gidReq']).'&forum='.Security::remove_XSS($my_forum).$origin_string.'">'.$name_user_theme.'</a></td>';
- if ($_GET['list'] == 'qualify') {
- $table_list .= '<td>'.$row_student_list['qualify'].'/'.$max_qualify.'</td>';
- }
- if (api_is_allowed_to_edit(null, true)) {
- $current_qualify_thread = show_qualify('1', $_GET['cidReq'], $my_forum, $row_student_list['user_id'], $_GET['id']);
- $table_list .= '<td><a href="forumqualify.php?'.api_get_cidreq().'&gidReq='.Security::remove_XSS($_GET['gidReq']).'&forum='.Security::remove_XSS($my_forum).'&thread='.Security::remove_XSS($_GET['id']).'&user='.$row_student_list['user_id'].'&user_id='.$row_student_list['user_id'].'&idtextqualify='.$current_qualify_thread.'&origin='.$origin.'">'.Display::return_icon($icon_qualify, get_lang('Qualify')).'</a></td></tr>';
- }
- $counter_stdlist++;
- }
- } else {
- if ($_GET['list'] == 'qualify') {
- $table_list .= '<tr><td colspan="2">'.get_lang('ThereIsNotQualifiedLearners').'</td></tr>';
- } else {
- $table_list .= '<tr><td colspan="2">'.get_lang('ThereIsNotUnqualifiedLearners').'</td></tr>';
- }
- }
- $table_list .= '</table></center>';
- $table_list .= '<br /></div>';
- } else {
- $table_list .= get_lang('NoParticipation');
- }
- }
- /* Is the user allowed here? */
- // If the user is not a course administrator and the forum is hidden
- // then the user is not allowed here.
- if (!api_is_allowed_to_edit(false, true) AND ($current_forum_category['visibility'] == 0 OR $current_forum['visibility'] == 0)) {
- api_not_allowed();
- }
- if ($origin == 'learnpath') {
- echo '<div style="height:15px"> </div>';
- }
- /* Display the action messages */
- if (!empty($message)) {
- Display :: display_confirmation_message($message);
- }
- /* Action links */
- echo '<div class="actions">';
- if ($origin != 'learnpath') {
-
- if ($origin=='group') {
- echo '<a href="../group/group_space.php?'.api_get_cidreq().'&gidReq='.Security::remove_XSS($_GET['gidReq']).'&gradebook='.$gradebook.'">'.Display::return_icon('back.png',get_lang('BackTo').' '.get_lang('Groups'),'','32').'</a>';
- } else {
- echo '<span style="float:right;">'.search_link().'</span>';
- echo '<a href="index.php">'.Display::return_icon('back.png', get_lang('BackToForumOverview'), '', '32').'</a>';
- }
- }
- // The link should appear when
- // 1. the course admin is here
- // 2. the course member is here and new threads are allowed
- // 3. a visitor is here and new threads AND allowed AND anonymous posts are allowed
- if (api_is_allowed_to_edit(false, true) OR ($current_forum['allow_new_threads'] == 1 AND isset($_user['user_id'])) OR ($current_forum['allow_new_threads'] == 1 AND !isset($_user['user_id']) AND $current_forum['allow_anonymous'] == 1)) {
- if ($current_forum['locked'] <> 1 AND $current_forum['locked'] <> 1) {
- if (!api_is_anonymous()) {
- if ($my_forum == strval(intval($my_forum))) {
- echo '<a href="newthread.php?'.api_get_cidreq().'&gidReq='.Security::remove_XSS($_GET['gidReq']).'&forum='.Security::remove_XSS($my_forum).$origin_string.'">'.Display::return_icon('new_thread.png',get_lang('NewTopic'),'','32').'</a>';
- } else {
- $my_forum = strval(intval($my_forum));
- echo '<a href="newthread.php?'.api_get_cidreq().'&gidReq='.Security::remove_XSS($_GET['gidReq']).'&forum='.$my_forum.$origin_string.'">'.Display::return_icon('new_thread.png',get_lang('NewTopic'),'','32').'</a>';
- }
- }
- } else {
- echo get_lang('ForumLocked');
- }
- }
- echo '</div>';
- /* Display */
- echo '<table class="forum_table" >';
- // The current forum
- if ($origin != 'learnpath') {
- echo '<thead><tr><th class="forum_head" colspan="7">';
- if (!empty ($current_forum_category['cat_title'])) {
- //echo '<span class="forum_low_description">'.prepare4display($current_forum_category['cat_title'])."</span><br />";
- }
- echo '<span class="forum_title">'.prepare4display($current_forum['forum_title']).'</span>';
- if (!empty ($current_forum['forum_comment'])) {
- echo '<br /><span class="forum_description">'.prepare4display($current_forum['forum_comment']).'</span>';
- }
- echo '</th></tr></thead>';
- }
- // The column headers (TODO: Make this sortable).
- echo '<tr class="forum_threadheader">';
- echo '<td></td>';
- echo '<td>'.get_lang('Title').'</td>';
- echo '<td>'.get_lang('Replies').'</td>';
- echo '<td>'.get_lang('Views').'</td>';
- echo '<td>'.get_lang('Author').'</td>';
- echo '<td>'.get_lang('LastPost').'</td>';
- echo '<td>'.get_lang('Actions').'</td>';
- echo '</tr>';
- // Getting al the threads
- $threads = get_threads($my_forum); // Note: This has to be cleaned first.
- $whatsnew_post_info = isset($_SESSION['whatsnew_post_info']) ? $_SESSION['whatsnew_post_info'] : null;
- $counter = 0;
- if (is_array($threads)) {
- foreach ($threads as $row) {
- // Thread who have no replies yet and the only post is invisible should not be displayed to students.
- if (api_is_allowed_to_edit(false, true) OR !($row['thread_replies'] == '0' AND $row['visible'] == '0')) {
- if ($counter % 2 == 0) {
- $class = 'row_odd';
- } else {
- $class = 'row_even';
- }
- echo "<tr class=\"$class\">";
- echo '<td>';
- $my_whatsnew_post_info = isset($whatsnew_post_info[$my_forum][$row['thread_id']]) ? $whatsnew_post_info[$my_forum][$row['thread_id']] : null;
- if (is_array($my_whatsnew_post_info) && !empty($my_whatsnew_post_info)) {
- echo Display::return_icon('forumthread.gif');
- } else {
- echo Display::return_icon('forumthread.gif');
- }
- if ($row['thread_sticky'] == 1) {
- echo Display::return_icon('exclamation.gif');
- }
- echo '</td>';
- echo '<td>';
- echo '<a href="viewthread.php?'.api_get_cidreq().'&gidReq='.Security::remove_XSS($_GET['gidReq']).'&gradebook='.Security::remove_XSS($_GET['gradebook']).'&forum='.Security::remove_XSS($my_forum).'&origin='.$origin.'&thread='.$row['thread_id'].$origin_string.'&search='.Security::remove_XSS(urlencode($my_search)).'" '.class_visible_invisible($row['visibility']).'>'.prepare4display($row['thread_title']).'</a></td>';
- echo '<td>'.$row['thread_replies'].'</td>';
- if ($row['user_id'] == '0') {
- $name = prepare4display($row['thread_poster_name']);
- } else {
- $name = api_get_person_name($row['firstname'], $row['lastname']);
- }
- echo '<td>'.$row['thread_views'].'</td>';
- if ($row['last_poster_user_id'] == '0') {
- $name = $row['poster_name'];
- } else {
- $name = api_get_person_name($row['last_poster_firstname'], $row['last_poster_lastname']);
- }
- if ($origin != 'learnpath') {
- echo '<td>'.display_user_link($row['user_id'], api_get_person_name($row['firstname'], $row['lastname'])).'</td>';
- } else {
- echo '<td>'.api_get_person_name($row['firstname'], $row['lastname']).'</td>';
- }
- // If the last post is invisible and it is not the teacher who is looking then we have to find the last visible post of the thread.
- if (($row['visible'] == '1' OR api_is_allowed_to_edit(false, true)) && $origin != 'learnpath') {
- $last_post = api_convert_and_format_date($row['thread_date']).' '.get_lang('By').' '.display_user_link($row['last_poster_user_id'], $name);
- } elseif ($origin != 'learnpath') {
- $last_post_sql = "SELECT post.*, user.firstname, user.lastname FROM $table_posts post, $table_users user WHERE post.poster_id=user.user_id AND visible='1' AND thread_id='".$row['thread_id']."' ORDER BY post_id DESC";
- $last_post_result = Database::query($last_post_sql);
- $last_post_row = Database::fetch_array($last_post_result);
- $name = api_get_person_name($last_post_row['firstname'], $last_post_row['lastname']);
- $last_post = api_convert_and_format_date($last_post_row['post_date']).' '.get_lang('By').' '.display_user_link($last_post_row['poster_id'], $name);
- } else {
- $last_post_sql = "SELECT post.*, user.firstname, user.lastname FROM $table_posts post, $table_users user WHERE post.poster_id=user.user_id AND visible='1' AND thread_id='".$row['thread_id']."' ORDER BY post_id DESC";
- $last_post_result = Database::query($last_post_sql);
- $last_post_row = Database::fetch_array($last_post_result);
- $name = api_get_person_name($last_post_row['firstname'], $last_post_row['lastname']);
- $last_post = api_convert_and_format_date($last_post_row['post_date']).' '.get_lang('By').' '.$name;
- }
- echo '<td>'.$last_post.'</td>';
- echo '<td>';
- // Get attachment id.
- $attachment_list = get_attachment($row['post_id']);
- $id_attach = !empty($attachment_list) ? $attachment_list['id'] : '';
- $sql_post_id = "SELECT post_id FROM $table_posts WHERE post_title='".Database::escape_string($row['thread_title'])."'";
- $result_post_id = Database::query($sql_post_id);
- $row_post_id = Database::fetch_array($result_post_id);
- if ($origin != 'learnpath') {
- if (api_is_allowed_to_edit(false, true) && !(api_is_course_coach() && $current_forum['session_id'] != $_SESSION['id_session'])) {
- echo '<a href="editpost.php?'.api_get_cidreq().'&forum='.Security::remove_XSS($my_forum).'&thread='.Security::remove_XSS($row['thread_id']).'&post='.$row_post_id['post_id'].'&gidReq='.$_SESSION['toolgroup'].'&origin='.$origin.'&id_attach='.$id_attach.'">'.Display::return_icon('edit.png', get_lang('Edit'), array(), 22).'</a>';
- echo '<a href="'.api_get_self().'?'.api_get_cidreq().'&forum='.Security::remove_XSS($my_forum).'&action=delete&content=thread&gidReq='.$_SESSION['toolgroup'].'&id='.$row['thread_id'].$origin_string."\" onclick=\"javascript:if(!confirm('".addslashes(api_htmlentities(get_lang('DeleteCompleteThread'), ENT_QUOTES))."')) return false;\">".Display::return_icon('delete.png', get_lang('Delete'), array(), 22).'</a>';
- display_visible_invisible_icon('thread', $row['thread_id'], $row['visibility'], array('forum' => $my_forum, 'origin' => $origin, 'gidReq' => $_SESSION['toolgroup']));
- display_lock_unlock_icon('thread', $row['thread_id'], $row['locked'], array('forum' => $my_forum, 'origin' => $origin, 'gidReq' => $_SESSION['toolgroup']));
- echo '<a href="viewforum.php?'.api_get_cidreq().'&forum='.Security::remove_XSS($my_forum).'&action=move&gidReq='.$_SESSION['toolgroup'].'&thread='.$row['thread_id'].$origin_string.'">'.Display::return_icon('move.png', get_lang('MoveThread'), array(), 22).'</a>';
- }
- }
- $iconnotify = 'send_mail.gif';
- if (is_array(isset($_SESSION['forum_notification']['thread']) ? $_SESSION['forum_notification']['thread'] : null)) {
- if (in_array($row['thread_id'], $_SESSION['forum_notification']['thread'])) {
- $iconnotify = 'send_mail_checked.gif';
- }
- }
- $icon_liststd = 'user.png';
- if (!api_is_anonymous() && api_is_allowed_to_session_edit(false, true)) {
- echo '<a href="'.api_get_self().'?'.api_get_cidreq().'&forum='.Security::remove_XSS($my_forum).'&origin='.$origin.'&action=notify&content=thread&gidReq='.$_SESSION['toolgroup'].'&id='.$row['thread_id'].'">'.Display::return_icon($iconnotify, get_lang('NotifyMe')).'</a>';
- }
- if (api_is_allowed_to_edit(null,true) && $origin != 'learnpath') {
- echo '<a href="'.api_get_self().'?'.api_get_cidreq().'&forum='.Security::remove_XSS($my_forum).'&origin='.$origin.'&action=liststd&content=thread&gidReq='.$_SESSION['toolgroup'].'&id='.$row['thread_id'].'">'.Display::return_icon($icon_liststd,get_lang('StudentList'), array(), 22).'</a>';
- }
- echo '</td></tr>';
- }
- $counter++;
- }
- }
- echo '</table>';
- echo isset($table_list) ? $table_list : '';
- /* FOOTER */
- if ($origin != 'learnpath') {
- Display :: display_footer();
- }
|