viewthread_nested.inc.php 9.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  5. * @author Julio Montoya <gugli100@gmail.com> UI Improvements + lots of bugfixes
  6. * @copyright Ghent University
  7. * @package chamilo.forum
  8. */
  9. require_once api_get_path(SYS_CODE_PATH).'forum/forumfunction.inc.php';
  10. // Are we in a lp ?
  11. $origin = '';
  12. if(isset($_GET['origin'])) {
  13. $origin = Security::remove_XSS($_GET['origin']);
  14. }
  15. //delete attachment file
  16. if ((isset($_GET['action']) && $_GET['action']=='delete_attach') && isset($_GET['id_attach'])) {
  17. delete_attachment(0,$_GET['id_attach']);
  18. }
  19. $rows=get_posts($_GET['thread']); // Note: This has to be cleaned first.
  20. $rows=calculate_children($rows);
  21. $count=0;
  22. $clean_forum_id = intval($_GET['forum']);
  23. $clean_thread_id = intval($_GET['thread']);
  24. $group_id = api_get_group_id();
  25. foreach ($rows as $post) {
  26. // The style depends on the status of the message: approved or not.
  27. if ($post['visible']=='0') {
  28. $titleclass='forum_message_post_title_2_be_approved';
  29. $messageclass='forum_message_post_text_2_be_approved';
  30. $leftclass='forum_message_left_2_be_approved';
  31. } else {
  32. $titleclass='forum_message_post_title';
  33. $messageclass='forum_message_post_text';
  34. $leftclass='forum_message_left';
  35. }
  36. $indent=$post['indent_cnt']*'20';
  37. echo "<div style=\"margin-left: ".$indent."px;\">";
  38. echo "<table width=\"100%\" class=\"post\" cellspacing=\"5\" border=\"0\">";
  39. echo "<tr>";
  40. echo "<td rowspan=\"3\" class=\"$leftclass\">";
  41. if ($post['user_id']=='0') {
  42. $name=$post['poster_name'];
  43. } else {
  44. $name=api_get_person_name($post['firstname'], $post['lastname']);
  45. }
  46. if (api_get_course_setting('allow_user_image_forum')) {
  47. echo '<br />'.display_user_image($post['user_id'],$name,$origin).'<br />';
  48. }
  49. echo display_user_link($post['user_id'], $name, $origin).'<br />';
  50. echo api_convert_and_format_date($post['post_date']).'<br /><br />';
  51. // get attach id
  52. $attachment_list=get_attachment($post['post_id']);
  53. $id_attach = !empty($attachment_list)?$attachment_list['id']:'';
  54. // The user who posted it can edit his thread only if the course admin allowed this in the properties of the forum
  55. // The course admin him/herself can do this off course always
  56. //if (($current_forum['allow_edit']==1 AND $post['user_id']==$_user['user_id']) or (api_is_allowed_to_edit(false,true) && !(api_is_course_coach() && $current_forum['session_id']!=$_SESSION['id_session']))) {
  57. if (GroupManager::is_tutor_of_group(api_get_user_id(), $group_id) OR ($current_forum['allow_edit']==1 AND $row['user_id']==$_user['user_id']) or (api_is_allowed_to_edit(false,true) && !(api_is_course_coach() && $current_forum['session_id']!=$_SESSION['id_session']))) {
  58. echo "<a href=\"editpost.php?".api_get_cidreq()."&amp;gidReq=".Security::remove_XSS($_GET['gidReq'])."&amp;forum=".$clean_forum_id."&amp;thread=".$clean_thread_id."&amp;origin=".$origin."&amp;post=".$post['post_id']."&amp;id_attach=".$id_attach."\">".Display::return_icon('edit.png',get_lang('Edit'), array(), 22)."</a>";
  59. }
  60. if (GroupManager::is_tutor_of_group(api_get_user_id(), $group_id) OR api_is_allowed_to_edit(false,true) && !(api_is_course_coach() && $current_forum['session_id']!=$_SESSION['id_session'])) {
  61. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&amp;gidReq=".Security::remove_XSS($_GET['gidReq'])."&amp;forum=".$clean_forum_id."&amp;thread=".$clean_thread_id."&amp;action=delete&amp;content=post&amp;id=".$post['post_id']."\" onclick=\"javascript:if(!confirm('".addslashes(api_htmlentities(get_lang('DeletePost'), ENT_QUOTES))."')) return false;\">".Display::return_icon('delete.png',get_lang('Delete'), array(), 22)."</a>";
  62. }
  63. if (api_is_allowed_to_edit(false,true) && !(api_is_course_coach() && $current_forum['session_id']!=$_SESSION['id_session'])) {
  64. display_visible_invisible_icon('post', $post['post_id'], $post['visible'],array('forum'=>$clean_forum_id,'thread'=>$clean_thread_id ));
  65. echo "";
  66. if ($count>0) {
  67. echo "<a href=\"viewthread.php?".api_get_cidreq()."&amp;gidReq=".Security::remove_XSS($_GET['gidReq'])."&amp;forum=".$clean_forum_id."&amp;thread=".$clean_thread_id."&amp;action=move&amp;origin=".$origin."&amp;post=".$post['post_id']."\">".Display::return_icon('move.png',get_lang('MovePost'), array(),22)."</a>";
  68. }
  69. }
  70. $userinf=api_get_user_info($post['user_id']);
  71. $user_status=api_get_status_of_user_in_course($post['user_id'],api_get_course_id());
  72. if (api_is_allowed_to_edit(null,true)) {
  73. if ($count>0 && $user_status!=1) {
  74. $current_qualify_thread=show_qualify('1',$_GET['cidReq'],$_GET['forum'],$post['user_id'],$_GET['thread']);
  75. echo "<a href=\"forumqualify.php?".api_get_cidreq()."&amp;gidReq=".Security::remove_XSS($_GET['gidReq'])."&amp;forum=".$clean_forum_id."&amp;thread=".$clean_thread_id."&amp;action=list&amp;post=".$post['post_id']."&amp;user=".$post['user_id']."&amp;user_id=".$post['user_id']."&amp;origin=".$origin."&amp;idtextqualify=".$current_qualify_thread."\" >".Display::return_icon('new_test_small.gif',get_lang('Qualify'))."</a>";
  76. }
  77. }
  78. //echo '<br /><br />';
  79. //if (($current_forum_category['locked']==0 AND $current_forum['locked']==0 AND $current_thread['locked']==0) OR api_is_allowed_to_edit())
  80. if ($current_forum_category['locked']==0 AND $current_forum['locked']==0 AND $current_thread['locked']==0 OR api_is_allowed_to_edit(false,true)) {
  81. if ($_user['user_id'] OR ($current_forum['allow_anonymous']==1 AND !$_user['user_id'])) {
  82. if (!api_is_anonymous() && api_is_allowed_to_session_edit(false,true)) {
  83. echo '<a href="reply.php?'.api_get_cidreq().'&amp;gidReq='.Security::remove_XSS($_GET['gidReq']).'&amp;forum='.$clean_forum_id.'&amp;thread='.$clean_thread_id.'&amp;post='.$post['post_id'].'&amp;action=replymessage&amp;origin='. $origin .'">'.Display :: return_icon('message_reply_forum.png', get_lang('ReplyToMessage'))."</a>";
  84. echo '<a href="reply.php?'.api_get_cidreq().'&amp;gidReq='.Security::remove_XSS($_GET['gidReq']).'&amp;forum='.$clean_forum_id.'&amp;thread='.$clean_thread_id.'&amp;post='.$post['post_id'].'&amp;action=quote&amp;origin='. $origin .'">'.Display :: return_icon('quote.gif', get_lang('QuoteMessage'))."</a>";
  85. }
  86. }
  87. } else {
  88. if ($current_forum_category['locked']==1) {
  89. echo get_lang('ForumcategoryLocked').'<br />';
  90. }
  91. if ($current_forum['locked']==1) {
  92. echo get_lang('ForumLocked').'<br />';
  93. }
  94. if ($current_thread['locked']==1) {
  95. echo get_lang('ThreadLocked').'<br />';
  96. }
  97. }
  98. echo "</td>";
  99. // note: this can be removed here because it will be displayed in the tree
  100. if (isset($whatsnew_post_info[$current_forum['forum_id']][$current_thread['thread_id']][$post['post_id']]) and !empty($whatsnew_post_info[$current_forum['forum_id']][$current_thread['thread_id']][$post['post_id']]) and !empty($whatsnew_post_info[$_GET['forum']][$post['thread_id']])) {
  101. $post_image=Display::return_icon('forumpostnew.gif');
  102. } else {
  103. $post_image=Display::return_icon('forumpost.gif');
  104. }
  105. if ($post['post_notification']=='1' AND $post['poster_id']==$_user['user_id']) {
  106. $post_image.=Display::return_icon('forumnotification.gif',get_lang('YouWillBeNotified'));
  107. }
  108. // The post title
  109. echo "<td class=\"$titleclass\">".prepare4display($post['post_title'])."</td>";
  110. echo "</tr>";
  111. // The post message
  112. echo "<tr>";
  113. echo "<td class=\"$messageclass\">".prepare4display($post['post_text'])."</td>";
  114. echo "</tr>";
  115. // The check if there is an attachment
  116. $attachment_list=get_attachment($post['post_id']);
  117. if (!empty($attachment_list)) {
  118. echo '<tr><td height="50%">';
  119. $realname=$attachment_list['path'];
  120. $user_filename=$attachment_list['filename'];
  121. echo Display::return_icon('attachment.gif',get_lang('Attachment'));
  122. echo '<a href="download.php?file=';
  123. echo $realname;
  124. echo ' "> '.$user_filename.' </a>';
  125. echo '<span class="forum_attach_comment" >'.$attachment_list['comment'].'</span>';
  126. if (($current_forum['allow_edit']==1 AND $post['user_id']==$_user['user_id']) or (api_is_allowed_to_edit(false,true) && !(api_is_course_coach() && $current_forum['session_id']!=$_SESSION['id_session']))) {
  127. echo '&nbsp;&nbsp;<a href="'.api_get_self().'?'.api_get_cidreq().'&amp;gidReq='.Security::remove_XSS($_GET['gidReq']).'&amp;origin='.Security::remove_XSS($_GET['origin']).'&amp;action=delete_attach&amp;id_attach='.$attachment_list['id'].'&amp;forum='.$clean_forum_id.'&amp;thread='.$clean_thread_id.'" onclick="javascript:if(!confirm(\''.addslashes(api_htmlentities(get_lang('ConfirmYourChoice'), ENT_QUOTES)).'\')) return false;">'.Display::return_icon('delete.gif',get_lang('Delete')).'</a><br />';
  128. }
  129. echo '</td></tr>';
  130. }
  131. // The post has been displayed => it can be removed from the what's new array
  132. unset($whatsnew_post_info[$current_forum['forum_id']][$current_thread['thread_id']][$row['post_id']]);
  133. unset($_SESSION['whatsnew_post_info'][$current_forum['forum_id']][$current_thread['thread_id']][$row['post_id']]);
  134. echo "</table>";
  135. echo "</div>";
  136. $count++;
  137. }