userLog.php 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. // TODO: Is this file deprecated?
  4. /**
  5. * @package chamilo.tracking
  6. * @todo clean code - structure is unclear and difficult to modify
  7. */
  8. /* INIT SECTION */
  9. $uInfo = $_REQUEST['uInfo'];
  10. $view = $_REQUEST['view'];
  11. // name of the language file that needs to be included
  12. $language_file = 'tracking';
  13. // Including the global initialization file
  14. require_once '../inc/global.inc.php';
  15. // the section (for the tabs)
  16. $this_section = "session_my_space";
  17. // variables
  18. $user_id = api_get_user_id();
  19. $course_id = api_get_course_id();
  20. //YW Hack security to quick fix RolesRights bug
  21. $is_allowed = true;
  22. /* Libraries */
  23. require_once api_get_path(LIBRARY_PATH).'statsUtils.lib.inc.php';
  24. require_once api_get_path(LIBRARY_PATH).'course.lib.php';
  25. require_once api_get_path(SYS_CODE_PATH).'resourcelinker/resourcelinker.inc.php';
  26. require_once api_get_path(SYS_CODE_PATH).'exercice/hotpotatoes.lib.php';
  27. /* Header */
  28. /*
  29. $interbreadcrumb[]= array ("url"=>"../group/group.php", "name"=> get_lang('BredCrumpGroups'));
  30. $interbreadcrumb[]= array ("url"=>"../group/group_space.php?gidReq=$_gid", "name"=> get_lang('BredCrumpGroupSpace'));
  31. */
  32. if(isset($uInfo)) {
  33. $interbreadcrumb[]= array ('url'=>'../user/userInfo.php?uInfo='.Security::remove_XSS($uInfo), "name"=> api_ucfirst(get_lang('Users')));
  34. }
  35. $nameTools = get_lang('ToolName');
  36. $htmlHeadXtra[] = "<style type='text/css'>
  37. /*<![CDATA[*/
  38. .secLine {background-color : #E6E6E6;}
  39. .content {padding-left : 15px;padding-right : 15px; }
  40. .specialLink{color : #0000FF;}
  41. /*]]>*/
  42. </style>
  43. <style media='print' type='text/css'>
  44. /*<![CDATA[*/
  45. td {border-bottom: thin dashed gray;}
  46. /*]]>*/
  47. </style>";
  48. Display::display_header($nameTools,"Tracking");
  49. /* Constants and variables */
  50. $is_allowedToTrack = $is_courseAdmin;
  51. $is_course_member = CourseManager::is_user_subscribed_in_real_or_linked_course($user_id, $course_id);
  52. // Database Table Definitions
  53. $TABLECOURSUSER = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  54. $TABLEUSER = Database::get_main_table(TABLE_MAIN_USER);
  55. $tbl_session_course_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  56. $tbl_session = Database::get_main_table(TABLE_MAIN_SESSION);
  57. $TABLECOURSE_GROUPSUSER = Database::get_course_table(TABLE_GROUP_USER);
  58. if(api_get_setting('use_session_mode') == "true") {
  59. $sql = "SELECT 1
  60. FROM $tbl_session_course_user AS session_course_user
  61. INNER JOIN $tbl_session AS session
  62. ON session_course_user.id_session = session.id
  63. AND ((date_start<=NOW()
  64. AND date_end>=NOW())
  65. OR (date_start='0000-00-00' AND date_end='0000-00-00'))
  66. WHERE id_session='".$_SESSION['id_session']."' AND course_code='$_cid'";
  67. //echo $sql;
  68. $result=Database::query($sql);
  69. if(!Database::num_rows($result)){
  70. $disabled = true;
  71. }
  72. }
  73. $tbl_learnpath_main = Database::get_course_table(TABLE_LP_MAIN);
  74. $tbl_learnpath_item = Database::get_course_table(TABLE_LP_ITEM);
  75. $tbl_learnpath_view = Database::get_course_table(TABLE_LP_VIEW);
  76. $tbl_learnpath_item_view = Database::get_course_table(TABLE_LP_ITEM_VIEW);
  77. $documentPath=api_get_path(SYS_COURSE_PATH).$_course['path'].'/document';
  78. // The variables for the days and the months
  79. $DaysShort = api_get_week_days_short();
  80. $DaysLong = api_get_week_days_long();
  81. $MonthsLong = api_get_months_long();
  82. $MonthsShort = api_get_months_short();
  83. //$is_allowedToTrack = $is_groupTutor; // allowed to track only user of one group
  84. //$is_allowedToTrackEverybodyInCourse = $is_allowed[EDIT_RIGHT]; // allowed to track all students in course
  85. //YW hack security to fix RolesRights bug
  86. $is_allowedToTrack = true; // allowed to track only user of one group
  87. $is_allowedToTrackEverybodyInCourse = $is_allowedToTrack; // allowed to track all students in course
  88. /* MAIN SECTION */
  89. ?>
  90. <h3>
  91. <?php echo $nameTools ?>
  92. </h3>
  93. <h4>
  94. <?php echo get_lang('StatsOfUser'); ?>
  95. </h4>
  96. <table width="100%" cellpadding="2" cellspacing="3" border="0">
  97. <?php
  98. // check if uid is tutor of this group
  99. if( ( $is_allowedToTrack || $is_allowedToTrackEverybodyInCourse )) {
  100. if(!$uInfo && !isset($uInfo) ) {
  101. /*
  102. * Display list of user of this group
  103. */
  104. echo "<h4>".get_lang('ListStudents')."</h4>";
  105. if( $is_allowedToTrackEverybodyInCourse ) {
  106. // if user can track everybody : list user of course
  107. if(api_get_setting('use_session_mode')) {
  108. $sql = "SELECT count(user_id)
  109. FROM $TABLECOURSUSER
  110. WHERE course_code = '".Database::escape_string($_cid)."' AND relation_type<>".COURSE_RELATION_TYPE_RRHH."";
  111. } else {
  112. $sql = "SELECT count(id_user)
  113. FROM $tbl_session_course_user
  114. WHERE course_code = '".Database::escape_string($_cid)."'";
  115. }
  116. } else {
  117. // if user can only track one group : list users of this group
  118. $sql = "SELECT count(user)
  119. FROM $TABLECOURSE_GROUPSUSER
  120. WHERE group_id = '".Database::escape_string($_gid)."'";
  121. }
  122. $userGroupNb = getOneResult($sql);
  123. $step = 25; // number of student per page
  124. if ($userGroupNb > $step) {
  125. if(!isset($offset)) {
  126. $offset=0;
  127. }
  128. $next = $offset + $step;
  129. $previous = $offset - $step;
  130. $navLink = "<table width='100%' border='0'>\n"
  131. ."<tr>\n"
  132. ."<td align='left'>";
  133. if ($previous >= 0) {
  134. $navLink .= "<a href='".api_get_self()."?offset=$previous'>&lt;&lt; ".get_lang('PreviousPage')."</a>";
  135. }
  136. $navLink .= "</td>\n"
  137. ."<td align='right'>";
  138. if ($next < $userGroupNb) {
  139. $navLink .= "<a href='".api_get_self()."?offset=$next'>".get_lang('NextPage')." &gt;&gt;</a>";
  140. }
  141. $navLink .= "</td>\n"
  142. ."</tr>\n"
  143. ."</table>\n";
  144. } else {
  145. $offset = 0;
  146. }
  147. echo $navLink;
  148. if (!settype($offset, 'integer') || !settype($step, 'integer')) die('Offset or step variables are not integers.'); //sanity check of integer vars
  149. if( $is_allowedToTrackEverybodyInCourse ) {
  150. // list of users in this course
  151. $sql = "SELECT u.user_id, u.firstname,u.lastname
  152. FROM $TABLECOURSUSER cu , $TABLEUSER u
  153. WHERE cu.user_id = u.user_id AND cu.relation_type<>".COURSE_RELATION_TYPE_RRHH."
  154. AND cu.course_code = '".Database::escape_string($_cid)."'
  155. LIMIT $offset,$step";
  156. }
  157. else
  158. {
  159. // list of users of this group
  160. $sql = "SELECT u.user_id, u.firstname,u.lastname
  161. FROM $TABLECOURSE_GROUPSUSER gu , $TABLEUSER u
  162. WHERE gu.user_id = u.user_id
  163. AND gu.group_id = '".Database::escape_string($_gid)."'
  164. LIMIT $offset,$step";
  165. }
  166. $list_users = getManyResults3Col($sql);
  167. echo "<table width='100%' cellpadding='2' cellspacing='1' border='0'>\n"
  168. ."<tr align='center' valign='top' bgcolor='#E6E6E6'>\n"
  169. ."<td align='left'>",get_lang('UserName'),"</td>\n"
  170. ."</tr>\n";
  171. for($i = 0 ; $i < sizeof($list_users) ; $i++) {
  172. echo "<tr valign='top' align='center'>\n"
  173. ."<td align='left'>"
  174. ."<a href='".api_get_self()."?uInfo=",$list_users[$i][0],"'>"
  175. .$list_users[$i][1]," ",$list_users[$i][2]
  176. ."</a>".
  177. "</td>\n";
  178. }
  179. echo "</table>\n";
  180. echo $navLink;
  181. } else {
  182. // if uInfo is set
  183. /*
  184. * Informations about student uInfo
  185. */
  186. // these checks exists for security reasons, neither a prof nor a tutor can see statistics of a user from
  187. // another course, or group
  188. if( $is_allowedToTrackEverybodyInCourse ) {
  189. // check if user is in this course
  190. $tracking_is_accepted = $is_course_member;
  191. $tracked_user_info = Database::get_user_info_from_id($uInfo);
  192. } else {
  193. // check if user is in the group of this tutor
  194. $sql = "SELECT u.firstname,u.lastname, u.email
  195. FROM $TABLECOURSE_GROUPSUSER gu , $TABLEUSER u
  196. WHERE gu.user_id = u.user_id
  197. AND gu.group_id = '".Database::escape_string($_gid)."'
  198. AND u.user_id = '".Database::escape_string($uInfo)."'";
  199. $query = Database::query($sql);
  200. $tracked_user_info = @Database::fetch_assoc($query);
  201. if(is_array($tracked_user_info)) $tracking_is_accepted = true;
  202. }
  203. if ($tracking_is_accepted) {
  204. $tracked_user_info['email'] == '' ? $mail_link = get_lang('NoEmail') : $mail_link = Display::encrypted_mailto_link($tracked_user_info['email']);
  205. echo "<tr><td>";
  206. echo get_lang('informationsAbout').' :';
  207. echo "<ul>\n"
  208. ."<li>".get_lang('FirstName')." : ".$tracked_user_info['firstname']."</li>\n"
  209. ."<li>".get_lang('LastName')." : ".$tracked_user_info['lastname']."</li>\n"
  210. ."<li>".get_lang('Email')." : ".$mail_link."</li>\n"
  211. ."</ul>";
  212. echo "</td></tr>\n";
  213. // show all : number of 1 is equal to or bigger than number of categories
  214. // show none : number of 0 is equal to or bigger than number of categories
  215. echo "<tr>
  216. <td>
  217. [<a href='".api_get_self()."?uInfo=".Security::remove_XSS($uInfo)."&view=1111111'>".get_lang('ShowAll')."</a>]
  218. [<a href='".api_get_self()."?uInfo=".Security::remove_XSS($uInfo)."&view=0000000'>".get_lang('ShowNone')."</a>]".
  219. //"||[<a href='".api_get_self()."'>".get_lang('BackToList')."</a>]".
  220. "</td>
  221. </tr>
  222. ";
  223. if(!isset($view))
  224. {
  225. $view ='0000000';
  226. }
  227. //Logins
  228. TrackingUserLog::display_login_tracking_info($view, $uInfo, $_cid);
  229. //Exercise results
  230. TrackingUserLog::display_exercise_tracking_info($view, $uInfo, $_cid);
  231. //Student publications uploaded
  232. TrackingUserLog::display_student_publications_tracking_info($view, $uInfo, $_cid);
  233. //Links usage
  234. TrackingUserLog::display_links_tracking_info($view, $uInfo, $_cid);
  235. //Documents downloaded
  236. TrackingUserLog::display_document_tracking_info($view, $uInfo, $_cid);
  237. } else {
  238. echo get_lang('ErrorUserNotInGroup');
  239. }
  240. /*
  241. * Scorm contents and Learning Path
  242. */
  243. if(substr($view,5,1) == '1') {
  244. $new_view = substr_replace($view,'0',5,1);
  245. echo "<tr>
  246. <td valign='top'>
  247. <font color='#0000FF'>-&nbsp;&nbsp;&nbsp;</font><b>".get_lang('ScormAccess')."</b>&nbsp;&nbsp;&nbsp;[<a href='".api_get_self()."?view=".Security::remove_XSS($new_view)."&uInfo=".Security::remove_XSS($uInfo)."'>".get_lang('Close')."</a>]&nbsp;&nbsp;&nbsp;[<a href='userLogCSV.php?".api_get_cidreq()."&uInfo=".Security::remove_XSS($_GET['uInfo'])."&view=000001'>".get_lang('ExportAsCSV')."</a>]
  248. </td>
  249. </tr>";
  250. $sql = "SELECT id, name FROM $tbl_learnpath_main";
  251. $result=Database::query($sql);
  252. $ar=Database::fetch_array($result);
  253. echo "<tr><td style='padding-left : 40px;padding-right : 40px;'>";
  254. echo "<table cellpadding='2' cellspacing='1' border='0' align='center'><tr>
  255. <td class='secLine'>
  256. &nbsp;".get_lang('ScormContentColumn')."&nbsp;
  257. </td>
  258. </tr>";
  259. if (is_array($ar)) {
  260. while ($ar['id'] != '') {
  261. $lp_title = stripslashes($ar['name']);
  262. echo "<tr><td>";
  263. echo "<a href='".api_get_self()."?view=".$view."&scormcontopen=".$ar['id']."&uInfo=".Security::remove_XSS($uInfo)."' class='specialLink'>$lp_title</a>";
  264. echo "</td></tr>";
  265. if ($ar['id']==$scormcontopen) { //have to list the students here
  266. $contentId=$ar['id'];
  267. $sql3 = "SELECT iv.status, iv.score, i.title, iv.total_time " .
  268. "FROM $tbl_learnpath_item i " .
  269. "INNER JOIN $tbl_learnpath_item_view iv ON i.id=iv.lp_item_id " .
  270. "INNER JOIN $tbl_learnpath_view v ON iv.lp_view_id=v.id " .
  271. "WHERE (v.user_id=".Database::escape_string($uInfo)." and v.lp_id=$contentId) ORDER BY v.id, i.id";
  272. $result3=Database::query($sql3);
  273. $ar3=Database::fetch_array($result3);
  274. if (is_array($ar3)) {
  275. echo "<tr><td>&nbsp;&nbsp;&nbsp;</td>
  276. <td class='secLine'>
  277. &nbsp;".get_lang('ScormTitleColumn')."&nbsp;
  278. </td>
  279. <td class='secLine'>
  280. &nbsp;".get_lang('ScormStatusColumn')."&nbsp;
  281. </td>
  282. <td class='secLine'>
  283. &nbsp;".get_lang('ScormScoreColumn')."&nbsp;
  284. </td>
  285. <td class='secLine'>
  286. &nbsp;".get_lang('ScormTimeColumn')."&nbsp;
  287. </td>
  288. </tr>";
  289. while ($ar3['status'] != '') {
  290. require_once '../newscorm/learnpathItem.class.php';
  291. $time = learnpathItem::get_scorm_time('php',$ar3['total_time']);
  292. echo "<tr><td>&nbsp;&nbsp;&nbsp;</td><td>";
  293. echo "$title</td><td align=right>{$ar3['status']}</td><td align=right>{$ar3['score']}</td><td align=right>$time</td>";
  294. echo "</tr>";
  295. $ar3=Database::fetch_array($result3);
  296. }
  297. } else {
  298. echo "<tr>";
  299. echo "<td colspan='3'><center>".get_lang('ScormNeverOpened')."</center></td>";
  300. echo"</tr>";
  301. }
  302. }
  303. $ar=Database::fetch_array($result);
  304. }
  305. } else {
  306. $noscorm=true;
  307. }
  308. if ($noscorm) {
  309. echo "<tr>";
  310. echo "<td colspan='3'><center>".get_lang('NoResult')."</center></td>";
  311. echo "</tr>";
  312. }
  313. echo "</table>";
  314. echo "</td></tr>";
  315. } else {
  316. $new_view = substr_replace($view,'1',5,1);
  317. echo "
  318. <tr>
  319. <td valign='top'>
  320. +<font color='#0000FF'>&nbsp;&nbsp;</font><a href='".api_get_self()."?view=".Security::remove_XSS($new_view)."&uInfo=".Security::remove_XSS($uInfo)."' class='specialLink'>".get_lang('ScormAccess')."</a>
  321. </td>
  322. </tr>
  323. ";
  324. }
  325. }
  326. } else {
  327. // not allowed
  328. api_not_allowed();
  329. }
  330. ?>
  331. </table>
  332. <?php
  333. Display::display_footer();