new_message.php 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * @package chamilo.messages
  5. */
  6. /**
  7. * This script shows a compose area (wysiwyg editor if supported, otherwise
  8. * a simple textarea) where the user can type a message.
  9. * There are three modes
  10. * - standard: type a message, select a user to send it to, press send
  11. * - reply on message (when pressing reply when viewing a message)
  12. * - send to specific user (when pressing send message in the who is online list)
  13. */
  14. /* INIT SECTION */
  15. // name of the language file that needs to be included
  16. $language_file= array('messages','userInfo', 'admin');
  17. $cidReset = true;
  18. require_once '../inc/global.inc.php';
  19. require_once api_get_path(LIBRARY_PATH).'mail.lib.inc.php';
  20. api_block_anonymous_users();
  21. if (api_get_setting('allow_message_tool') !='true') {
  22. api_not_allowed();
  23. }
  24. require_once api_get_path(LIBRARY_PATH).'group_portal_manager.lib.php';
  25. $nameTools = api_xml_http_response_encode(get_lang('Messages'));
  26. /* Constants and variables */
  27. $htmlHeadXtra[]='
  28. <script language="javascript">
  29. function validate(form,list) {
  30. if(list.selectedIndex<0) {
  31. alert("Please select someone to send the message to.")
  32. return false
  33. } else {
  34. return true
  35. }
  36. }
  37. </script>';
  38. $htmlHeadXtra[] = '<script src="'.api_get_path(WEB_LIBRARY_PATH).'javascript/tag/jquery.fcbkcomplete.js" type="text/javascript" language="javascript"></script>';
  39. $htmlHeadXtra[] = '<link href="'.api_get_path(WEB_LIBRARY_PATH).'javascript/tag/style.css" rel="stylesheet" type="text/css" />';
  40. $htmlHeadXtra[] = '<script type="text/javascript">
  41. $(document).ready(function () {
  42. $("#users").fcbkcomplete({
  43. json_url: "'.api_get_path(WEB_AJAX_PATH).'message.ajax.php?a=find_users",
  44. cache: false,
  45. filter_case: false,
  46. filter_hide: true,
  47. complete_text:"'.get_lang('StartToType').'",
  48. firstselected: true,
  49. //onremove: "testme",
  50. onselect:"check_users",
  51. filter_selected: true,
  52. newel: true
  53. });
  54. });
  55. function check_users() {
  56. //selecting only selected users
  57. $("#users option:selected").each(function() {
  58. var user_id = $(this).val();
  59. if (user_id != "" ) {
  60. $.ajax({
  61. url: "'.api_get_path(WEB_AJAX_PATH).'user_manager.ajax.php?a=user_id_exists",
  62. data: "user_id="+user_id,
  63. success: function(return_value) {
  64. if (return_value == 0 ) {
  65. alert("'.get_lang('UserDoesNotExist').'");
  66. //Deleting select option tag
  67. $("#users option[value="+user_id+"]").remove();
  68. //Deleting holder
  69. $(".holder li").each(function () {
  70. if ($(this).attr("rel") == user_id) {
  71. $(this).remove();
  72. }
  73. });
  74. }
  75. },
  76. });
  77. }
  78. });
  79. }
  80. var counter_image = 1;
  81. /*
  82. function remove_image_form(id_elem1) {
  83. var elem1 = document.getElementById(id_elem1);
  84. elem1.parentNode.removeChild(elem1);
  85. }
  86. */
  87. function add_image_form() {
  88. // Multiple filepaths for image form
  89. var filepaths = document.getElementById("filepaths");
  90. if (document.getElementById("filepath_"+counter_image)) {
  91. counter_image = counter_image + 1;
  92. } else {
  93. counter_image = counter_image;
  94. }
  95. var elem1 = document.createElement("div");
  96. elem1.setAttribute("id","filepath_"+counter_image);
  97. filepaths.appendChild(elem1);
  98. id_elem1 = "filepath_"+counter_image;
  99. id_elem1 = "\'"+id_elem1+"\'";
  100. //document.getElementById("filepath_"+counter_image).innerHTML = "<input type=\"file\" name=\"attach_"+counter_image+"\" size=\"20\" />&nbsp;<a href=\"javascript:remove_image_form("+id_elem1+")\"><img src=\"'.api_get_path(WEB_CODE_PATH).'img/delete.gif\"></a>";
  101. document.getElementById("filepath_"+counter_image).innerHTML = "<input type=\"file\" name=\"attach_"+counter_image+"\" size=\"20\" />&nbsp;<input type=\"text\" name=\"legend[]\" size=\"20\" />";
  102. if (filepaths.childNodes.length == 6) {
  103. var link_attach = document.getElementById("link-more-attach");
  104. if (link_attach) {
  105. link_attach.innerHTML="";
  106. }
  107. }
  108. }
  109. </script>';
  110. $nameTools = get_lang('ComposeMessage');
  111. /* FUNCTIONS */
  112. /**
  113. * Shows the compose area + a list of users to select from.
  114. */
  115. function show_compose_to_any ($user_id) {
  116. $online_user_list = MessageManager::get_online_user_list($user_id);
  117. $default['user_list'] = 0;
  118. $online_user_list=null;
  119. manage_form($default, $online_user_list);
  120. }
  121. function show_compose_reply_to_message($message_id, $receiver_id) {
  122. global $charset;
  123. $table_message = Database::get_main_table(TABLE_MESSAGE);
  124. $query = "SELECT user_sender_id FROM $table_message WHERE user_receiver_id=".intval($receiver_id)." AND id='".intval($message_id)."';";
  125. $result = Database::query($query);
  126. $row = Database::fetch_array($result,'ASSOC');
  127. if (!isset($row['user_sender_id'])) {
  128. echo get_lang('InvalidMessageId');
  129. exit;
  130. }
  131. $pre_html = '<div class="row">
  132. <div class="label">'.get_lang('SendMessageTo').': </div>
  133. <div class="formw">';
  134. $post = '</div></div>';
  135. $multi_select = '<select id="users" name="users">
  136. </select>';
  137. echo $pre_html.'<strong>'.GetFullUserName($row['user_sender_id']).'</strong>'.$post;
  138. $default['users'] = array($row['user_sender_id']);
  139. manage_form($default);
  140. }
  141. function show_compose_to_user ($receiver_id) {
  142. global $charset;
  143. echo get_lang('To').':&nbsp;<strong>'. GetFullUserName($receiver_id).'</strong>';
  144. $default['title'] = api_xml_http_response_encode(get_lang('EnterTitle'));
  145. $default['users'] = array($receiver_id);
  146. manage_form($default);
  147. }
  148. function manage_form ($default, $select_from_user_list = null) {
  149. $table_message = Database::get_main_table(TABLE_MESSAGE);
  150. $group_id = isset($_REQUEST['group_id']) ? intval($_REQUEST['group_id']) : null;
  151. $message_id = isset($_GET['message_id']) ? intval($_GET['message_id']) : null;
  152. $param_f = isset($_GET['f']) ? Security::remove_XSS($_GET['f']):'';
  153. $form = new FormValidator('compose_message',null,api_get_self().'?f='.$param_f,null,array('enctype'=>'multipart/form-data'));
  154. if (empty($group_id)) {
  155. if (isset($select_from_user_list)) {
  156. $form->add_textfield('id_text_name', get_lang('SendMessageTo'),true,array('size' => 40,'id'=>'id_text_name','onkeyup'=>'send_request_and_search()','autocomplete'=>'off','style'=>'padding:0px'));
  157. $form->addRule('id_text_name', get_lang('ThisFieldIsRequired'), 'required');
  158. $form->addElement('html','<div id="id_div_search" style="padding:0px" class="message-select-box" >&nbsp;</div>');
  159. $form->addElement('hidden','user_list',0,array('id'=>'user_list'));
  160. } else {
  161. if (empty($default['users'])) {
  162. //the magic should be here
  163. $pre_html = '<div class="row">
  164. <div class="label">'.get_lang('SendMessageTo').'</div>
  165. <div class="formw">';
  166. $post = '</div></div>';
  167. $multi_select = '<select id="users" name="users">
  168. </select>';
  169. $form->addElement('html',$pre_html.$multi_select.$post );
  170. } else {
  171. $form->addElement('hidden','hidden_user',$default['users'][0],array('id'=>'hidden_user'));
  172. }
  173. }
  174. } else {
  175. $group_info = GroupPortalManager::get_group_data($group_id);
  176. $form->addElement('html','<div class="row"><div class="label">'.get_lang('ToGroup').'</div><div class="formw">'.api_xml_http_response_encode($group_info['name']).'</div></div>');
  177. $form->addElement('hidden','group_id',$group_id);
  178. $form->addElement('hidden','parent_id',$message_id);
  179. }
  180. $form->add_textfield('title', get_lang('Subject'),true ,array('size' => 54));
  181. $form->add_html_editor('content', get_lang('Message'), false, false, array('ToolbarSet' => 'Messages', 'Width' => '95%', 'Height' => '250'));
  182. //$form->addElement('textarea','content', get_lang('Message'), array('cols' => 75,'rows'=>8));
  183. if (isset($_GET['re_id'])) {
  184. $message_reply_info = MessageManager::get_message_by_id($_GET['re_id']);
  185. $form->addElement('hidden','re_id', intval($_GET['re_id']));
  186. $form->addElement('hidden','save_form','save_form');
  187. //adding reply mail
  188. $user_reply_info = UserManager::get_user_info_by_id($message_reply_info['user_sender_id']);
  189. $default['content'] = '<br />'.sprintf(get_lang('XWroteY'), api_get_person_name($user_reply_info['firstname'], $user_reply_info['lastname']), Security::filter_terms($message_reply_info['content']));
  190. }
  191. if (empty($group_id)) {
  192. $form->addElement('html','<div class="row"><div class="label">'.get_lang('FilesAttachment').'</div><div class="formw">
  193. <span id="filepaths">
  194. <div id="filepath_1">
  195. <input type="file" name="attach_1" size="20" />
  196. <input type="text" name="legend[]" size="20" />
  197. </div></span></div></div>');
  198. $form->addElement('html','<div class="row"><div class="label"></div><div class="formw"><span id="link-more-attach"><a href="javascript://" onclick="return add_image_form()">'.get_lang('AddOneMoreFile').'</a></span>&nbsp;('.sprintf(get_lang('MaximunFileSizeX'),format_file_size(api_get_setting('message_max_upload_filesize'))).')</div></div>');
  199. }
  200. $form->addElement('style_submit_button','compose',api_xml_http_response_encode(get_lang('SendMessage')),'class="save"');
  201. $form->setRequiredNote('<span class="form_required">*</span> <small>'.get_lang('ThisFieldIsRequired').'</small>');
  202. if (!empty($group_id) && !empty($message_id)) {
  203. $message_info = MessageManager::get_message_by_id($message_id);
  204. $default['title'] = get_lang('Re:').$message_info['title'];
  205. }
  206. $form->setDefaults($default);
  207. if ($form->validate()) {
  208. $check = Security::check_token('post');
  209. if ($check) {
  210. $user_list = $default['users'];
  211. $file_comments = $_POST['legend'];
  212. $title = $default['title'];
  213. $content = $default['content'];
  214. $group_id = $default['group_id'];
  215. $parent_id = $default['parent_id'];
  216. if (is_array($user_list) && count($user_list)> 0) {
  217. //all is well, send the message
  218. foreach ($user_list as $user) {
  219. $res = MessageManager::send_message($user, $title, $content, $_FILES, $file_comments, $group_id, $parent_id);
  220. if ($res) {
  221. if (is_string($res)) {
  222. Display::display_error_message($res);
  223. } else {
  224. MessageManager::display_success_message($user);
  225. }
  226. }
  227. }
  228. } else {
  229. Display::display_error_message('ErrorSendingMessage');
  230. }
  231. }
  232. Security::clear_token();
  233. } else {
  234. $token = Security::get_token();
  235. $form->addElement('hidden','sec_token');
  236. $form->setConstants(array('sec_token' => $token));
  237. $form->display();
  238. }
  239. }
  240. /* MAIN SECTION */
  241. if ($_GET['f']=='social') {
  242. $this_section = SECTION_SOCIAL;
  243. $interbreadcrumb[]= array ('url' => api_get_path(WEB_PATH).'main/social/home.php','name' => get_lang('Social'));
  244. } else {
  245. $this_section = SECTION_MYPROFILE;
  246. $interbreadcrumb[]= array ('url' => api_get_path(WEB_PATH).'main/auth/profile.php','name' => get_lang('Profile'));
  247. //$interbreadcrumb[]= array ('url' => '#','name' => get_lang('ComposeMessage'));
  248. }
  249. Display::display_header(get_lang('ComposeMessage'));
  250. $group_id = isset($_REQUEST['group_id']) ? intval($_REQUEST['group_id']) : null;
  251. if ($group_id != 0) {
  252. echo '<div class=actions>';
  253. echo '<a href="'.api_get_path(WEB_PATH).'main/social/groups.php?id='.$group_id.'">'.Display::return_icon('back.png',api_xml_http_response_encode(get_lang('ComposeMessage'))).api_xml_http_response_encode(get_lang('BackToGroup')).'</a>';
  254. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/new_message.php?group_id='.$group_id.'">'.Display::return_icon('message_new.png',api_xml_http_response_encode(get_lang('ComposeMessage'))).api_xml_http_response_encode(get_lang('ComposeMessage')).'</a>';
  255. echo '</div>';
  256. } else {
  257. if ($_GET['f']=='social') {
  258. } else {
  259. echo '<div class=actions>';
  260. if (api_get_setting('allow_social_tool') == 'true' && api_get_setting('allow_message_tool') == 'true') {
  261. echo '<a href="'.api_get_path(WEB_PATH).'main/social/profile.php">'.Display::return_icon('shared_profile.png', get_lang('ViewSharedProfile')).'&nbsp;'.get_lang('ViewSharedProfile').'</a>';
  262. }
  263. if (api_get_setting('allow_message_tool') == 'true') {
  264. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/new_message.php">'.Display::return_icon('message_new.png',get_lang('ComposeMessage')).get_lang('ComposeMessage').'</a>';
  265. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/inbox.php">'.Display::return_icon('inbox.png',get_lang('Inbox')).get_lang('Inbox').'</a>';
  266. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/outbox.php">'.Display::return_icon('outbox.png',get_lang('Outbox')).get_lang('Outbox').'</a>';
  267. }
  268. echo '</div>';
  269. }
  270. }
  271. echo '<div id="social-content">';
  272. $id_content_right = '';
  273. //LEFT COLUMN
  274. if (api_get_setting('allow_social_tool') != 'true') {
  275. $id_content_right = 'inbox';
  276. } else {
  277. echo '<div id="social-content-left">';
  278. //this include the social menu div
  279. SocialManager::show_social_menu('messages');
  280. echo '</div>';
  281. $id_content_right = 'social-content-right';
  282. }
  283. echo '<div id="'.$id_content_right.'">';
  284. //MAIN CONTENT
  285. if (api_get_setting('allow_social_tool') == 'true') {
  286. echo '<div class="actions">';
  287. echo '<a href="'.api_get_path(WEB_PATH).'main/messages/inbox.php?f=social">'.Display::return_icon('back.png', get_lang('Back'), array(), 32).'</a>';
  288. echo '</div>';
  289. }
  290. if (!isset($_POST['compose'])) {
  291. if(isset($_GET['re_id'])) {
  292. show_compose_reply_to_message($_GET['re_id'], api_get_user_id());
  293. } elseif(isset($_GET['send_to_user'])) {
  294. show_compose_to_user($_GET['send_to_user']);
  295. } else {
  296. show_compose_to_any($_user['user_id']);
  297. }
  298. } else {
  299. $restrict = false;
  300. if (isset($_POST['users'])) {
  301. $restrict = true;
  302. } elseif (isset($_POST['group_id'])) {
  303. $restrict = true;
  304. } elseif(isset($_POST['hidden_user'])) {
  305. $restrict = true;
  306. }
  307. $default['title'] = $_POST['title'];
  308. $default['content'] = $_POST['content'];
  309. // comes from a reply button
  310. if (isset($_GET['re_id'])) {
  311. manage_form($default);
  312. } else {
  313. // post
  314. if ($restrict) {
  315. if (!isset($_POST['group_id'])) {
  316. $default['users'] = $_POST['users'];
  317. } else {
  318. $default['group_id'] = $_POST['group_id'];
  319. }
  320. if (isset($_POST['hidden_user'])) {
  321. $default['users'] = array($_POST['hidden_user']);
  322. }
  323. manage_form($default);
  324. } else {
  325. Display::display_error_message(get_lang('ErrorSendingMessage'));
  326. }
  327. }
  328. }
  329. echo '</div>';
  330. echo '</div>';
  331. /* FOOTER */
  332. Display::display_footer();