subscribe_user.php 32 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742
  1. <?php
  2. /* For licensing terms, see /license.txt*/
  3. /**
  4. * This script allows teachers to subscribe existing users
  5. * to their course.
  6. * @package chamilo.user
  7. */
  8. /**
  9. * Code
  10. */
  11. // name of the language file that needs to be included
  12. $language_file = array('registration','admin');
  13. require_once '../inc/global.inc.php';
  14. $current_course_tool = TOOL_USER;
  15. // the section (for the tabs)
  16. $this_section = SECTION_COURSES;
  17. // notice for unauthorized people.
  18. api_protect_course_script(true);
  19. // access restriction
  20. if (!api_is_allowed_to_edit()) {
  21. api_not_allowed(true);
  22. }
  23. $tool_name = get_lang("SubscribeUserToCourse");
  24. if ($_REQUEST['type']=='teacher') {
  25. $tool_name = get_lang("SubscribeUserToCourseAsTeacher");
  26. }
  27. //extra entries in breadcrumb
  28. $interbreadcrumb[] = array ("url" => "user.php", "name" => get_lang("ToolUser"));
  29. if ($_GET['keyword']) {
  30. $interbreadcrumb[] = array ("url" => "subscribe_user.php?type=".Security::remove_XSS($_GET['type']), "name" => $tool_name);
  31. $tool_name = get_lang('SearchResults');
  32. }
  33. Display :: display_header($tool_name, "User");
  34. // Build search-form
  35. echo '<div class="actions">';
  36. if (isset($_GET['keyword'])) {
  37. $actions .= '<a href="subscribe_user.php?type='.Security::remove_XSS($_REQUEST['type']).'">'.Display::return_icon('clean_group.gif').' '.get_lang('ClearSearchResults').'</a>';
  38. }
  39. if (isset($_GET['subscribe_user_filter_value']) AND !empty($_GET['subscribe_user_filter_value'])) {
  40. $actions .= '<a href="subscribe_user.php?type='.Security::remove_XSS($_REQUEST['type']).'">'.Display::return_icon('clean_group.gif').' '.get_lang('ClearFilterResults').'</a>';
  41. }
  42. if (api_get_setting('ProfilingFilterAddingUsers') == 'true') {
  43. display_extra_profile_fields_filter();
  44. }
  45. // Build search-form
  46. $form = new FormValidator('search_user', 'get', '', '', null, false);
  47. $renderer = & $form->defaultRenderer();
  48. $renderer->setElementTemplate('<span>{element}</span> ');
  49. $form->add_textfield('keyword', '', false);
  50. $form->addElement('hidden', 'type', Security::remove_XSS($_REQUEST['type']));
  51. $form->addElement('style_submit_button', 'submit', get_lang('SearchButton'), 'class="search"');
  52. $form->addElement('static', 'additionalactions', null, $actions);
  53. $form->display();
  54. echo '</div>';
  55. /*
  56. MAIN SECTION
  57. */
  58. $current_session_id = api_get_session_id();
  59. $list_register_user='';
  60. $list_not_register_user='';
  61. if (isset ($_REQUEST['register'])) {
  62. if (isset($_REQUEST['type']) && $_REQUEST['type']=='teacher') {
  63. if (!empty($current_session_id)) {
  64. $result_simple_sub = SessionManager::set_coach_to_course_session(intval($_REQUEST['user_id']), $current_session_id, $_course['sysCode']);
  65. } else {
  66. $result_simple_sub = CourseManager :: subscribe_user(intval($_REQUEST['user_id']), $_course['sysCode'],COURSEMANAGER);
  67. }
  68. } else {
  69. $result_simple_sub=CourseManager :: subscribe_user(intval($_REQUEST['user_id']), $_course['sysCode']);
  70. }
  71. $user_id_temp=$_SESSION['session_user_id'];
  72. if (is_array($user_id_temp)) {
  73. $counter = count($user_id_temp);
  74. for ($j=0; $j<$counter;$j++) {
  75. if ($user_id_temp[$j]==$_GET['user_id']) {
  76. if ($result_simple_sub) {
  77. Display::display_confirmation_message($_SESSION['session_user_name'][$j].' '.get_lang('AddedToCourse'));
  78. } else {
  79. Display::display_error_message($_SESSION['session_user_name'][$j].' '.get_lang('NotAddedToCourse'));
  80. }
  81. }
  82. }
  83. unset($_SESSION['session_user_id']);
  84. unset($_SESSION['session_user_name']);
  85. }
  86. }
  87. if (isset ($_POST['action'])) {
  88. switch ($_POST['action']) {
  89. case 'subscribe' :
  90. if (is_array($_POST['user'])) {
  91. foreach ($_POST['user'] as $index => $user_id) {
  92. $user_id=intval($user_id);
  93. if(isset($_REQUEST['type']) && $_REQUEST['type']=='teacher') {
  94. if (!empty($current_session_id)) {
  95. $is_suscribe[] = SessionManager::set_coach_to_course_session($user_id, $current_session_id, $_course['sysCode']);
  96. } else {
  97. $is_suscribe[] = CourseManager::subscribe_user($user_id, $_course['sysCode'],COURSEMANAGER);
  98. }
  99. } else {
  100. $is_suscribe[]=CourseManager::subscribe_user($user_id, $_course['sysCode']);
  101. }
  102. $is_suscribe_user_id[]=$user_id;
  103. }
  104. }
  105. $user_id_temp=$_SESSION['session_user_id'];
  106. $user_name_temp=$_SESSION['session_user_name'];
  107. unset($_SESSION['session_user_id']);
  108. unset($_SESSION['session_user_name']);
  109. $counter=0;
  110. $is_suscribe_counter=count($is_suscribe_user_id);
  111. $list_register_user='';
  112. //if ($$is_suscribe_counter!=1) {
  113. for ($i=0; $i<$is_suscribe_counter;$i++) {
  114. for ($j=0; $j<count($user_id_temp);$j++) {
  115. if ($is_suscribe_user_id[$i]==$user_id_temp[$j]) {
  116. if ($is_suscribe[$i]) {
  117. $list_register_user.=" - ".$user_name_temp[$j].'<br/>';
  118. $temp_unique_user=$user_name_temp[$j];
  119. $counter++;
  120. } else {
  121. $list_not_register_user.=" - ".$user_name_temp[$j].'<br/>';
  122. }
  123. }
  124. }
  125. }
  126. //} else {
  127. //$list_register_user=$temp_unique_user; // only 1 user register
  128. //}
  129. if (!empty($list_register_user)) {
  130. if ($is_suscribe_counter==1) {
  131. $register_user_message=$temp_unique_user.' '.get_lang('AddedToCourse');
  132. Display::display_confirmation_message($register_user_message,false);
  133. } else {
  134. $register_user_message='<br />'.get_lang('UsersRegistered').'<br/><br />'.$list_register_user;
  135. Display::display_confirmation_message($register_user_message,false);
  136. }
  137. }
  138. if (!empty($list_not_register_user)) {
  139. $not_register_user_message='<br />'.get_lang('UsersNotRegistered').'<br/><br /><br />'.$list_not_register_user;
  140. Display::display_error_message($not_register_user_message,false);
  141. }
  142. break;
  143. }
  144. }
  145. if (!empty($_SESSION['session_user_id'])) {
  146. unset($_SESSION['session_user_id']);
  147. }
  148. if (!empty($_SESSION['session_user_name'])) {
  149. unset($_SESSION['session_user_name']);
  150. }
  151. $is_western_name_order = api_is_western_name_order();
  152. $sort_by_first_name = api_sort_by_first_name();
  153. // Build table
  154. $table = new SortableTable('subscribe_users', 'get_number_of_users', 'get_user_data', ($is_western_name_order xor $sort_by_first_name) ? 3 : 2);
  155. $parameters['keyword'] = Security::remove_XSS($_REQUEST['keyword']);
  156. $parameters ['type'] = Security::remove_XSS($_REQUEST['type']);
  157. $table->set_additional_parameters($parameters);
  158. $col = 0;
  159. $table->set_header($col ++, '', false);
  160. $table->set_header($col ++, get_lang('OfficialCode'));
  161. if (api_is_western_name_order()) {
  162. $table->set_header($col ++, get_lang('FirstName'));
  163. $table->set_header($col ++, get_lang('LastName'));
  164. } else {
  165. $table->set_header($col ++, get_lang('LastName'));
  166. $table->set_header($col ++, get_lang('FirstName'));
  167. }
  168. if (api_get_setting('show_email_addresses') == 'true') {
  169. $table->set_header($col ++, get_lang('Email'));
  170. $table->set_column_filter($col -1, 'email_filter');
  171. }
  172. $table->set_header($col ++, get_lang('Active'),false);
  173. $table->set_column_filter($col -1, 'active_filter');
  174. $table->set_header($col ++, get_lang('Actions'), false);
  175. $table->set_column_filter($col -1, 'reg_filter');
  176. $table->set_form_actions(array ('subscribe' => get_lang('reg')), 'user');
  177. if (!empty($_POST['keyword'])) {
  178. $keyword_name=Security::remove_XSS($_POST['keyword']);
  179. echo '<br/>'.get_lang('SearchResultsFor').' <span style="font-style: italic ;"> '.$keyword_name.' </span><br>';
  180. }
  181. // Display table
  182. $table->display();
  183. Display::display_footer();
  184. /* SHOW LIST OF USERS */
  185. /**
  186. * * Get the users to display on the current page.
  187. */
  188. function get_number_of_users() {
  189. global $_configuration;
  190. // Database table definition
  191. $user_table = Database::get_main_table(TABLE_MAIN_USER);
  192. $course_user_table = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  193. $tbl_session_rel_course_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  194. $table_user_field_values = Database::get_main_table(TABLE_MAIN_USER_FIELD_VALUES);
  195. if (isset($_REQUEST['type']) && $_REQUEST['type']=='teacher') {
  196. if (api_get_session_id() != 0) {
  197. $sql = "SELECT COUNT(u.user_id)
  198. FROM $user_table u
  199. LEFT JOIN $tbl_session_rel_course_user cu on u.user_id = cu.id_user and course_code='".api_get_course_id()."' AND id_session ='".api_get_session_id()."'
  200. WHERE cu.id_user IS NULL AND u.status=1 AND (u.official_code <> 'ADMIN' OR u.official_code IS NULL) ";
  201. if ($_configuration['multiple_access_urls']) {
  202. $url_access_id = api_get_current_access_url_id();
  203. if ($url_access_id !=-1) {
  204. $tbl_url_rel_user = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  205. $sql = "SELECT COUNT(u.user_id) FROM $user_table u
  206. LEFT JOIN $tbl_session_rel_course_user cu on u.user_id = cu.id_user and course_code='".api_get_course_id()."' AND id_session ='".api_get_session_id()."'
  207. INNER JOIN $tbl_url_rel_user as url_rel_user
  208. ON (url_rel_user.user_id = u.user_id)
  209. WHERE cu.id_user IS NULL AND access_url_id= $url_access_id AND u.status=1 AND (u.official_code <> 'ADMIN' OR u.official_code IS NULL) ";
  210. }
  211. }
  212. } else {
  213. $sql = "SELECT COUNT(u.user_id) FROM $user_table u LEFT JOIN $course_user_table cu on u.user_id = cu.user_id and course_code='".api_get_course_id()."'
  214. WHERE cu.user_id IS NULL AND u.status<>".DRH." ";
  215. if ($_configuration['multiple_access_urls']) {
  216. $url_access_id = api_get_current_access_url_id();
  217. if ($url_access_id !=-1) {
  218. $tbl_url_rel_user = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  219. $sql = "SELECT COUNT(u.user_id) FROM $user_table u
  220. LEFT JOIN $course_user_table cu on u.user_id = cu.user_id AND course_code='".api_get_course_id()."'
  221. INNER JOIN $tbl_url_rel_user as url_rel_user
  222. ON (url_rel_user.user_id = u.user_id)
  223. WHERE cu.user_id IS NULL AND u.status<>".DRH." AND access_url_id= $url_access_id ";
  224. }
  225. }
  226. }
  227. } else {
  228. // students
  229. if (api_get_session_id() != 0) {
  230. $sql = "SELECT COUNT(u.user_id)
  231. FROM $user_table u
  232. LEFT JOIN $tbl_session_rel_course_user cu on u.user_id = cu.id_user and course_code='".api_get_course_id()."' AND id_session ='".api_get_session_id()."'
  233. WHERE cu.id_user IS NULL AND u.status<>".DRH." AND (u.official_code <> 'ADMIN' OR u.official_code IS NULL) ";
  234. if ($_configuration['multiple_access_urls']) {
  235. $url_access_id = api_get_current_access_url_id();
  236. if ($url_access_id !=-1) {
  237. $tbl_url_rel_user = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  238. $sql = "SELECT COUNT(u.user_id)
  239. FROM $user_table u
  240. LEFT JOIN $tbl_session_rel_course_user cu on u.user_id = cu.id_user and course_code='".api_get_course_id()."' AND id_session ='".api_get_session_id()."'
  241. INNER JOIN $tbl_url_rel_user as url_rel_user
  242. ON (url_rel_user.user_id = u.user_id)
  243. WHERE cu.id_user IS NULL AND u.status<>".DRH." AND access_url_id= $url_access_id AND (u.official_code <> 'ADMIN' OR u.official_code IS NULL) ";
  244. }
  245. }
  246. } else {
  247. $sql = "SELECT COUNT(u.user_id)
  248. FROM $user_table u
  249. LEFT JOIN $course_user_table cu on u.user_id = cu.user_id and course_code='".$_SESSION['_course']['id']."'";
  250. // we change the SQL when we have a filter
  251. if (isset($_GET['subscribe_user_filter_value']) AND !empty($_GET['subscribe_user_filter_value']) AND api_get_setting('ProfilingFilterAddingUsers') == 'true'){
  252. $field_identification = explode('*',$_GET['subscribe_user_filter_value']);
  253. $sql .= "
  254. LEFT JOIN $table_user_field_values field_values
  255. ON field_values.user_id = u.user_id
  256. WHERE cu.user_id IS NULL AND u.status<>".DRH."
  257. AND field_values.field_id = '".Database::escape_string($field_identification[0])."'
  258. AND field_values.field_value = '".Database::escape_string($field_identification[1])."'";
  259. } else {
  260. $sql .= "WHERE cu.user_id IS NULL AND u.status<>".DRH." ";
  261. }
  262. if (isset($_configuration['multiple_access_urls']) && $_configuration['multiple_access_urls']) {
  263. $url_access_id = api_get_current_access_url_id();
  264. if ($url_access_id !=-1) {
  265. $tbl_url_rel_user = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  266. $sql = "SELECT COUNT(u.user_id)
  267. FROM $user_table u
  268. LEFT JOIN $course_user_table cu on u.user_id = cu.user_id and course_code='".$_SESSION['_course']['id']."'
  269. INNER JOIN $tbl_url_rel_user as url_rel_user
  270. ON (url_rel_user.user_id = u.user_id)
  271. WHERE cu.user_id IS NULL AND access_url_id= $url_access_id AND u.status<>".DRH." ";
  272. }
  273. }
  274. }
  275. }
  276. // when there is a keyword then we are searching and we have to change the SQL statement
  277. if (isset ($_GET['keyword']) AND !empty($_GET['keyword'])) {
  278. $keyword = Database::escape_string(trim($_REQUEST['keyword']));
  279. $sql .= " AND (firstname LIKE '%".$keyword."%' OR lastname LIKE '%".$keyword."%' OR email LIKE '%".$keyword."%' OR username LIKE '%".$keyword."%' OR official_code LIKE '%".$keyword."%')";
  280. // we also want to search for users who have something in their profile fields that matches the keyword
  281. if (api_get_setting('ProfilingFilterAddingUsers') == 'true') {
  282. $additional_users = search_additional_profile_fields($keyword);
  283. }
  284. // getting all the users of the course (to make sure that we do not display users that are already in the course)
  285. if (!empty($_SESSION["id_session"])) {
  286. $a_course_users = CourseManager :: get_user_list_from_course_code($_SESSION['_course']['id'], $_SESSION['id_session']);
  287. } else {
  288. $a_course_users = CourseManager :: get_user_list_from_course_code($_SESSION['_course']['id'], 0);
  289. }
  290. foreach ($a_course_users as $user_id=>$course_user) {
  291. $users_of_course[] = $course_user['user_id'];
  292. }
  293. }
  294. $sql .=" AND u.status <> ".ANONYMOUS." ";
  295. $res = Database::query($sql);
  296. $count_user = 0;
  297. if ($res) {
  298. $row = Database::fetch_row($res);
  299. $count_user = $row[0];
  300. }
  301. /* @todo seems not to be used
  302. // we add 1 for every additional user (a user where the keyword matches one of the additional profile fields)
  303. // that is not yet in the course and not yet in the search result
  304. if (isset ($_REQUEST['keyword']) AND api_get_setting('ProfilingFilterAddingUsers') == 'true') {
  305. foreach($additional_users as $additional_user_key=>$additional_user_value){
  306. if (!in_array($additional_user_key,$users) AND !in_array($additional_user_key,$users_of_course)){
  307. $result++;
  308. }
  309. }
  310. }
  311. */
  312. return $count_user;
  313. }
  314. /**
  315. * Get the users to display on the current page.
  316. */
  317. function get_user_data($from, $number_of_items, $column, $direction) {
  318. global $_course, $_configuration;
  319. $url_access_id = api_get_current_access_url_id();
  320. $course_code = api_get_course_id();
  321. $session_id = api_get_session_id();
  322. // Database table definitions
  323. $user_table = Database::get_main_table(TABLE_MAIN_USER);
  324. $course_user_table = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  325. $tbl_session_rel_course_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  326. $table_user_field_values = Database::get_main_table(TABLE_MAIN_USER_FIELD_VALUES);
  327. $tbl_url_rel_user = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  328. // adding teachers
  329. $is_western_name_order = api_is_western_name_order();
  330. if (api_get_setting('show_email_addresses') == 'true') {
  331. $select_fields = "u.user_id AS col0,
  332. u.official_code AS col1,
  333. ".($is_western_name_order
  334. ? "u.firstname AS col2,
  335. u.lastname AS col3,"
  336. : "u.lastname AS col2,
  337. u.firstname AS col3,")."
  338. u.email AS col4,
  339. u.active AS col5,
  340. u.user_id AS col6";
  341. } else {
  342. $select_fields = "u.user_id AS col0,
  343. u.official_code AS col1,
  344. ".($is_western_name_order
  345. ? "u.firstname AS col2,
  346. u.lastname AS col3,"
  347. : "u.lastname AS col2,
  348. u.firstname AS col3,")."
  349. u.active AS col4,
  350. u.user_id AS col5";
  351. }
  352. if (isset($_REQUEST['type']) && $_REQUEST['type'] == 'teacher') {
  353. // adding a teacher through a session
  354. if (!empty($session_id)) {
  355. $sql = "SELECT $select_fields
  356. FROM $user_table u
  357. LEFT JOIN $tbl_session_rel_course_user cu on u.user_id = cu.id_user AND course_code='".$course_code."' AND id_session ='".$session_id."'
  358. INNER JOIN $tbl_url_rel_user as url_rel_user ON (url_rel_user.user_id = u.user_id) ";
  359. // applying the filter of the additional user profile fields
  360. if (isset($_GET['subscribe_user_filter_value']) AND !empty($_GET['subscribe_user_filter_value']) AND api_get_setting('ProfilingFilterAddingUsers') == 'true') {
  361. $field_identification = explode('*',$_GET['subscribe_user_filter_value']);
  362. $sql .= "
  363. LEFT JOIN $table_user_field_values field_values
  364. ON field_values.user_id = u.user_id
  365. WHERE cu.id_user IS NULL AND u.status=1 AND (u.official_code <> 'ADMIN' OR u.official_code IS NULL)
  366. AND field_values.field_id = '".Database::escape_string($field_identification[0])."'
  367. AND field_values.field_value = '".Database::escape_string($field_identification[1])."'";
  368. } else {
  369. $sql .= "WHERE cu.id_user IS NULL AND u.status=1 AND (u.official_code <> 'ADMIN' OR u.official_code IS NULL) ";
  370. }
  371. $sql .= " AND access_url_id= $url_access_id";
  372. } else {
  373. // adding a teacher NOT through a session
  374. $sql = "SELECT $select_fields
  375. FROM $user_table u
  376. LEFT JOIN $course_user_table cu on u.user_id = cu.user_id and course_code = '".$course_code."'";
  377. // applying the filter of the additional user profile fields
  378. if (isset($_GET['subscribe_user_filter_value']) AND !empty($_GET['subscribe_user_filter_value']) AND api_get_setting('ProfilingFilterAddingUsers') == 'true'){
  379. $field_identification = explode('*',$_GET['subscribe_user_filter_value']);
  380. $sql .= "
  381. LEFT JOIN $table_user_field_values field_values
  382. ON field_values.user_id = u.user_id
  383. WHERE cu.user_id IS NULL AND u.status<>".DRH."
  384. AND field_values.field_id = '".Database::escape_string($field_identification[0])."'
  385. AND field_values.field_value = '".Database::escape_string($field_identification[1])."'";
  386. } else {
  387. $sql .= "WHERE cu.user_id IS NULL AND u.status<>".DRH." ";
  388. }
  389. // adding a teacher NOT trough a session on a portal with multiple URLs
  390. if ($_configuration['multiple_access_urls']) {
  391. if ($url_access_id !=-1) {
  392. $sql = "SELECT $select_fields
  393. FROM $user_table u
  394. LEFT JOIN $course_user_table cu on u.user_id = cu.user_id and course_code='".$course_code."'
  395. INNER JOIN $tbl_url_rel_user as url_rel_user ON (url_rel_user.user_id = u.user_id) ";
  396. // applying the filter of the additional user profile fields
  397. if (isset($_GET['subscribe_user_filter_value']) AND !empty($_GET['subscribe_user_filter_value']) AND api_get_setting('ProfilingFilterAddingUsers') == 'true'){
  398. $field_identification = explode('*',$_GET['subscribe_user_filter_value']);
  399. $sql .= "
  400. LEFT JOIN $table_user_field_values field_values
  401. ON field_values.user_id = u.user_id
  402. WHERE cu.user_id IS NULL AND u.status<>".DRH."
  403. AND field_values.field_id = '".Database::escape_string($field_identification[0])."'
  404. AND field_values.field_value = '".Database::escape_string($field_identification[1])."'";
  405. } else {
  406. $sql .= "WHERE cu.user_id IS NULL AND u.status<>".DRH." AND access_url_id= $url_access_id ";
  407. }
  408. }
  409. }
  410. }
  411. } else {
  412. // adding a student
  413. if (!empty($session_id)) {
  414. $sql = "SELECT $select_fields
  415. FROM $user_table u
  416. LEFT JOIN $tbl_session_rel_course_user cu ON u.user_id = cu.id_user AND course_code='".$course_code."' AND id_session ='".$session_id."' ";
  417. if (isset($_configuration['multiple_access_urls']) && $_configuration['multiple_access_urls']) {
  418. $sql .= " INNER JOIN $tbl_url_rel_user as url_rel_user ON (url_rel_user.user_id = u.user_id) ";
  419. }
  420. // applying the filter of the additional user profile fields
  421. if (isset($_GET['subscribe_user_filter_value']) AND !empty($_GET['subscribe_user_filter_value'])){
  422. $field_identification = explode('*',$_GET['subscribe_user_filter_value']);
  423. $sql .= "
  424. LEFT JOIN $table_user_field_values field_values
  425. ON field_values.user_id = u.user_id
  426. WHERE cu.id_user IS NULL AND u.status<>".DRH." AND (u.official_code <> 'ADMIN' OR u.official_code IS NULL)
  427. AND field_values.field_id = '".Database::escape_string($field_identification[0])."'
  428. AND field_values.field_value = '".Database::escape_string($field_identification[1])."'";
  429. } else {
  430. $sql .= "WHERE cu.id_user IS NULL AND u.status<>".DRH." AND (u.official_code <> 'ADMIN' OR u.official_code IS NULL) ";
  431. }
  432. if (isset($_configuration['multiple_access_urls']) && $_configuration['multiple_access_urls']) {
  433. $sql .= "AND access_url_id = $url_access_id";
  434. }
  435. } else {
  436. $sql = "SELECT $select_fields
  437. FROM $user_table u
  438. LEFT JOIN $course_user_table cu on u.user_id = cu.user_id and course_code='".$course_code."'";
  439. // applying the filter of the additional user profile fields
  440. if (isset($_GET['subscribe_user_filter_value']) AND !empty($_GET['subscribe_user_filter_value'])){
  441. $field_identification = explode('*',$_GET['subscribe_user_filter_value']);
  442. $sql .= "
  443. LEFT JOIN $table_user_field_values field_values
  444. ON field_values.user_id = u.user_id
  445. WHERE cu.user_id IS NULL AND u.status<>".DRH."
  446. AND field_values.field_id = '".Database::escape_string($field_identification[0])."'
  447. AND field_values.field_value = '".Database::escape_string($field_identification[1])."'";
  448. } else {
  449. $sql .= "WHERE cu.user_id IS NULL AND u.status<>".DRH." ";
  450. }
  451. //showing only the courses of the current Chamilo access_url_id
  452. if (isset($_configuration['multiple_access_urls']) && $_configuration['multiple_access_urls']) {
  453. if ($url_access_id !=-1) {
  454. $sql = "SELECT $select_fields
  455. FROM $user_table u
  456. LEFT JOIN $course_user_table cu on u.user_id = cu.user_id and course_code='".$course_code."'
  457. INNER JOIN $tbl_url_rel_user as url_rel_user
  458. ON (url_rel_user.user_id = u.user_id) ";
  459. // applying the filter of the additional user profile fields
  460. if (isset($_GET['subscribe_user_filter_value']) AND !empty($_GET['subscribe_user_filter_value']) AND api_get_setting('ProfilingFilterAddingUsers') == 'true'){
  461. $field_identification = explode('*',$_GET['subscribe_user_filter_value']);
  462. $sql .= "
  463. LEFT JOIN $table_user_field_values field_values
  464. ON field_values.user_id = u.user_id
  465. WHERE cu.user_id IS NULL AND u.status<>".DRH."
  466. AND field_values.field_id = '".Database::escape_string($field_identification[0])."'
  467. AND field_values.field_value = '".Database::escape_string($field_identification[1])."' AND access_url_id= $url_access_id ";
  468. } else {
  469. $sql .= "WHERE cu.user_id IS NULL AND u.status<>".DRH." AND access_url_id= $url_access_id ";
  470. }
  471. }
  472. }
  473. }
  474. }
  475. // adding additional WHERE statements to the SQL for the search functionality
  476. if (isset ($_REQUEST['keyword'])) {
  477. $keyword = Database::escape_string(trim($_REQUEST['keyword']));
  478. $sql .= " AND (firstname LIKE '%".$keyword."%' OR lastname LIKE '%".$keyword."%' OR email LIKE '%".$keyword."%' OR username LIKE '%".$keyword."%' OR official_code LIKE '%".$keyword."%')";
  479. if (api_get_setting('ProfilingFilterAddingUsers') == 'true') {
  480. // we also want to search for users who have something in their profile fields that matches the keyword
  481. $additional_users = search_additional_profile_fields($keyword);
  482. }
  483. // getting all the users of the course (to make sure that we do not display users that are already in the course)
  484. if (!empty($session_id)) {
  485. $a_course_users = CourseManager :: get_user_list_from_course_code($course_code, $session_id);
  486. } else {
  487. $a_course_users = CourseManager :: get_user_list_from_course_code($course_code, 0);
  488. }
  489. foreach ($a_course_users as $user_id=>$course_user) {
  490. $users_of_course[] = $course_user['user_id'];
  491. }
  492. }
  493. $sql .=" AND u.status != ".ANONYMOUS." ";
  494. // Sorting and pagination (used by the sortable table)
  495. $sql .= " ORDER BY col$column $direction ";
  496. $sql .= " LIMIT $from,$number_of_items";
  497. $res = Database::query($sql);
  498. $users = array ();
  499. while ($user = Database::fetch_row($res)) {
  500. $users[] = $user;
  501. $_SESSION['session_user_id'][] = $user[0];
  502. if ($is_western_name_order) {
  503. $_SESSION['session_user_name'][] = api_get_person_name($user[2], $user[3]);
  504. } else {
  505. $_SESSION['session_user_name'][] = api_get_person_name($user[3], $user[2]);
  506. }
  507. }
  508. // adding additional users based on the search on the additional profile fields
  509. if (isset ($_REQUEST['keyword'])){
  510. if (is_array($additional_users)) {
  511. foreach($additional_users as $additional_user_key=>$additional_user_value){
  512. if (!in_array($additional_user_key, $_SESSION['session_user_id']) AND !in_array($additional_user_key,$users_of_course)){
  513. $users[]= array($additional_user_value['col0'],$additional_user_value['col1'],$additional_user_value['col2'].'*',$additional_user_value['col3'].'*',$additional_user_value['col4'],$additional_user_value['col5'], $additional_user_value['col6']);
  514. }
  515. }
  516. }
  517. }
  518. return $users;
  519. }
  520. /**
  521. * Returns a mailto-link
  522. * @param string $email An email-address
  523. * @return string HTML-code with a mailto-link
  524. */
  525. function email_filter($email) {
  526. return Display :: encrypted_mailto_link($email, $email);
  527. }
  528. /**
  529. * Build the reg-column of the table
  530. * @param int $user_id The user id
  531. * @return string Some HTML-code
  532. */
  533. function reg_filter($user_id) {
  534. if(isset($_REQUEST['type']) && $_REQUEST['type']=='teacher') $type='teacher'; else $type='student';
  535. $result = '<a class="btn btn-small btn-primary" href="'.api_get_self().'?register=yes&type='.$type.'&user_id='.$user_id.'">'.get_lang("reg").'</a>';
  536. return $result;
  537. }
  538. /**
  539. * Build the active-column of the table to lock or unlock a certain user
  540. * lock = the user can no longer use this account
  541. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  542. * @param int $active the current state of the account
  543. * @param int $user_id The user id
  544. * @param string $url_params
  545. * @return string Some HTML-code with the lock/unlock button
  546. */
  547. function active_filter($active, $url_params, $row) {
  548. global $_user;
  549. if ($active=='1') {
  550. $action='AccountActive';
  551. $image='accept';
  552. }
  553. if ($active=='0') {
  554. $action='AccountInactive';
  555. $image='error';
  556. }
  557. if ($row['0']<>$_user['user_id']) { // you cannot lock yourself out otherwise you could disable all the accounts including your own => everybody is locked out and nobody can change it anymore.
  558. $result = '<center>'.Display::return_icon($image.'.png', get_lang(ucfirst($action)), array('border'=>'0', 'style'=>'vertical-align: middle;') , 16).'</center>';
  559. }
  560. return $result;
  561. }
  562. /**
  563. * Search the additional user profile fields defined by the platform administrator in
  564. * platform administration > profiling for a given keyword.
  565. * We not only search in the predefined options but also in the input fields wherer
  566. * the user can enter some text.
  567. *
  568. * For this we get the additional profile field options that match the (search) keyword,
  569. * then we find all the users who have entered the (search)keyword in a input field of the
  570. * additional profile fields or have chosen one of the matching predefined options
  571. *
  572. * @param string $keyword a keyword we are looking for in the additional profile fields
  573. * @return array $additional_users an array with the users who have an additional profile field that matches the keyword
  574. */
  575. function search_additional_profile_fields($keyword)
  576. {
  577. // database table definitions
  578. $table_user_field_options = Database :: get_main_table(TABLE_MAIN_USER_FIELD_OPTIONS);
  579. $table_user_field_values = Database::get_main_table(TABLE_MAIN_USER_FIELD_VALUES);
  580. $table_user = Database::get_main_table(TABLE_MAIN_USER);
  581. $table_course_user = Database :: get_main_table(TABLE_MAIN_COURSE_USER);
  582. $table_session_course_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  583. // getting the field option text that match this keyword (for radio buttons and checkboxes)
  584. $sql_profiling = "SELECT * FROM $table_user_field_options WHERE option_display_text LIKE '%".$keyword."%'";
  585. $result_profiling = Database::query($sql_profiling);
  586. while ($profiling_field_options = Database::fetch_array($result_profiling)) {
  587. $profiling_field_options_exact_values[] = $profiling_field_options;
  588. }
  589. foreach ($profiling_field_options_exact_values as $profilingkey=>$profilingvalue){
  590. $profiling_field_options_exact_values_sql .= "OR (field_id = '".$profilingvalue['field_id']."' AND field_value='".$profilingvalue['option_value']."') ";
  591. }
  592. // getting all the user ids of the users who have chosen on of the predefined fields that contain the keyword
  593. // or all the users who have entered the keyword in a free-form field
  594. $sql_profiling_values = "SELECT user.user_id as col0, user.official_code as col1, user.lastname as col2, user.firstname as col3, user.email as col4, user.active as col5, user.user_id as col6
  595. FROM $table_user user, $table_user_field_values user_values
  596. WHERE user.user_id = user_values.user_id
  597. AND ( field_value LIKE '%".$keyword."%'
  598. ".$profiling_field_options_exact_values_sql.")";
  599. $result_profiling_values = Database::query($sql_profiling_values);
  600. while ($profiled_users = Database::fetch_array($result_profiling_values)) {
  601. $additional_users[$profiled_users['col0']] = $profiled_users;
  602. }
  603. return $additional_users;
  604. }
  605. /**
  606. * This function displays a dropdown list with all the additional user profile fields defined by the platform administrator in
  607. * platform administration > profiling. Only the fields that have predefined fields are usefull for such a filter.
  608. *
  609. */
  610. function display_extra_profile_fields_filter() {
  611. // getting all the additional user profile fields
  612. $extra = UserManager::get_extra_fields(0,50,5,'ASC');
  613. $return='<option value="">'.get_lang('SelectFilter').'</option>';
  614. // looping through the additional user profile fields
  615. foreach($extra as $id => $field_details) {
  616. // $field_details[2] contains the type of the additional user profile field
  617. switch($field_details[2]) {
  618. // text fields cannot be used as a filter
  619. case UserManager::USER_FIELD_TYPE_TEXT:
  620. break;
  621. // text area fields cannot be used as a filter
  622. case UserManager::USER_FIELD_TYPE_TEXTAREA:
  623. break;
  624. case UserManager::USER_FIELD_TYPE_RADIO:
  625. case UserManager::USER_FIELD_TYPE_SELECT:
  626. case UserManager::USER_FIELD_TYPE_SELECT_MULTIPLE:
  627. $return .= '<optgroup label="'.$field_details[3].'">';
  628. foreach($field_details[9] as $option_id => $option_details) {
  629. if ($_GET['subscribe_user_filter_value'] == $field_details[0].'*'.$option_details[1]) {
  630. $selected = 'selected="selected"';
  631. } else {
  632. $selected = false;
  633. }
  634. $return .= '<option value="'.$field_details[0].'*'.$option_details[1].'" '.$selected.'>'.$option_details[2].'</option>';
  635. }
  636. $return .= '</optgroup>';
  637. break;
  638. }
  639. }
  640. echo '<form id="subscribe_user_filter" name="subscribe_user_filter" method="get" action="'.api_get_self().'?api_get_cidreq" style="float:left;">';
  641. echo ' <input type="hidden" name="type" id="type" value="'.Security::remove_XSS($_REQUEST['type']).'" />';
  642. echo '<select name="subscribe_user_filter_value" id="subscribe_user_filter_value">'.$return.'</select>';
  643. echo '<button type="submit" name="submit_filter" id="submit_filter" value="" class="search">'.get_lang('Filter').'</button>';
  644. echo '</form>';
  645. }