settings.php 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * With this tool you can easily adjust non critical configuration settings.
  5. * Non critical means that changing them will not result in a broken campus.
  6. *
  7. * @author Patrick Cool
  8. * @author Julio Montoya - Multiple URL site
  9. * @package chamilo.admin
  10. */
  11. // Resetting the course id.
  12. $cidReset = true;
  13. require_once '../inc/global.inc.php';
  14. require_once 'settings.lib.php';
  15. // Setting the section (for the tabs).
  16. $this_section = SECTION_PLATFORM_ADMIN;
  17. $_SESSION['this_section'] = $this_section;
  18. // Access restrictions.
  19. api_protect_admin_script();
  20. // Settings to avoid
  21. $settings_to_avoid = array(
  22. 'use_session_mode' => 'true',
  23. 'gradebook_enable' => 'false',
  24. // ON by default - now we have this option when we create a course
  25. 'example_material_course_creation' => 'true'
  26. );
  27. $convert_byte_to_mega_list = array(
  28. 'dropbox_max_filesize',
  29. 'message_max_upload_filesize',
  30. 'default_document_quotum',
  31. 'default_group_quotum'
  32. );
  33. if (isset($_POST['style'])) {
  34. Display::$preview_style = $_POST['style'];
  35. }
  36. // Database table definitions.
  37. $table_settings_current = Database :: get_main_table(TABLE_MAIN_SETTINGS_CURRENT);
  38. // Setting breadcrumbs.
  39. $interbreadcrumb[] = array('url' => 'index.php', 'name' => get_lang('PlatformAdmin'));
  40. // Setting the name of the tool.
  41. $tool_name = get_lang('PlatformConfigSettings');
  42. if (empty($_GET['category'])) {
  43. $_GET['category'] = 'Platform';
  44. }
  45. $watermark_deleted = false;
  46. if (isset($_GET['delete_watermark'])) {
  47. $watermark_deleted = PDF::delete_watermark();
  48. Display::addFlash(Display::return_message(get_lang('FileDeleted')));
  49. }
  50. if (isset($_GET['action']) && $_GET['action'] == 'delete_grading') {
  51. $id = intval($_GET['id']);
  52. api_delete_setting_option($id);
  53. }
  54. $form_search = new FormValidator(
  55. 'search_settings',
  56. 'get',
  57. api_get_self(),
  58. null,
  59. array(),
  60. FormValidator::LAYOUT_INLINE
  61. );
  62. $form_search->addElement('text', 'search_field');
  63. $form_search->addElement('hidden', 'category', 'search_setting');
  64. $form_search->addButtonSearch(get_lang('Search'), 'submit_button');
  65. $form_search->setDefaults(
  66. array('search_field' => isset($_REQUEST['search_field']) ? $_REQUEST['search_field'] : null)
  67. );
  68. $form_search_html = $form_search->returnForm();
  69. $url_id = api_get_current_access_url_id();
  70. $settings = null;
  71. /**
  72. * @param string $category
  73. * @return array
  74. */
  75. function get_settings($category = '')
  76. {
  77. $url_id = api_get_current_access_url_id();
  78. $settings_by_access_list = array();
  79. if ($url_id == 1) {
  80. $settings = api_get_settings($category, 'group', $url_id);
  81. } else {
  82. $url_info = api_get_access_url($url_id);
  83. if ($url_info['active'] == 1) {
  84. $categoryToSearch = $category;
  85. if ($category == 'search_setting') {
  86. $categoryToSearch = '';
  87. }
  88. // The default settings of Chamilo
  89. $settings = api_get_settings($categoryToSearch, 'group', 1, 0);
  90. // The settings that are changeable from a particular site.
  91. $settings_by_access = api_get_settings($categoryToSearch, 'group', $url_id, 1);
  92. foreach ($settings_by_access as $row) {
  93. if (empty($row['variable'])) {
  94. $row['variable'] = 0;
  95. }
  96. if (empty($row['subkey'])) {
  97. $row['subkey'] = 0;
  98. }
  99. if (empty($row['category'])) {
  100. $row['category'] = 0;
  101. }
  102. // One more validation if is changeable.
  103. if ($row['access_url_changeable'] == 1) {
  104. $settings_by_access_list[$row['variable']][$row['subkey']][$row['category']] = $row;
  105. } else {
  106. $settings_by_access_list[$row['variable']][$row['subkey']][$row['category']] = array();
  107. }
  108. }
  109. }
  110. }
  111. if (isset($category) && $category == 'search_setting') {
  112. if (!empty($_REQUEST['search_field'])) {
  113. $settings = searchSetting($_REQUEST['search_field']);
  114. }
  115. }
  116. return array(
  117. 'settings' => $settings,
  118. 'settings_by_access_list' => $settings_by_access_list
  119. );
  120. }
  121. // Build the form.
  122. if (!empty($_GET['category']) &&
  123. !in_array($_GET['category'], array('Plugins', 'stylesheets', 'Search'))
  124. ) {
  125. $my_category = isset($_GET['category']) ? $_GET['category'] : null;
  126. $settings_array = get_settings($my_category);
  127. $settings = $settings_array['settings'];
  128. $settings_by_access_list = $settings_array['settings_by_access_list'];
  129. $form = generateSettingsForm($settings, $settings_by_access_list);
  130. if ($form->validate()) {
  131. $values = $form->exportValues();
  132. $mark_all = false;
  133. $un_mark_all = false;
  134. if (api_is_multiple_url_enabled()) {
  135. if (isset($values['buttons_in_action_right']) &&
  136. isset($values['buttons_in_action_right']['mark_all'])
  137. ) {
  138. $mark_all = true;
  139. }
  140. if (isset($values['buttons_in_action_right']) &&
  141. isset($values['buttons_in_action_right']['unmark_all'])
  142. ) {
  143. $un_mark_all = true;
  144. }
  145. }
  146. if ($mark_all || $un_mark_all) {
  147. if (api_is_global_platform_admin()) {
  148. $locked_settings = api_get_locked_settings();
  149. foreach ($values as $key => $value) {
  150. if (!in_array($key, $locked_settings)) {
  151. $changeable = 0;
  152. if ($mark_all) {
  153. $changeable = 1;
  154. }
  155. $params = array('variable = ?' => array($key));
  156. $data = api_get_settings_params($params);
  157. if (!empty($data)) {
  158. foreach ($data as $item) {
  159. $params = array(
  160. 'id' => $item['id'],
  161. 'access_url_changeable' => $changeable,
  162. );
  163. api_set_setting_simple($params);
  164. }
  165. }
  166. }
  167. }
  168. //Reload settings
  169. $settings_array = get_settings($my_category);
  170. $settings = $settings_array['settings'];
  171. $settings_by_access_list = $settings_array['settings_by_access_list'];
  172. $form = generateSettingsForm(
  173. $settings,
  174. $settings_by_access_list
  175. );
  176. }
  177. }
  178. if (!empty($_FILES['pdf_export_watermark_path'])) {
  179. $pdf_export_watermark_path = $_FILES['pdf_export_watermark_path'];
  180. }
  181. if (isset($pdf_export_watermark_path) && !empty($pdf_export_watermark_path['name'])) {
  182. $pdf_export_watermark_path_result = PDF::upload_watermark(
  183. $pdf_export_watermark_path['name'],
  184. $pdf_export_watermark_path['tmp_name']
  185. );
  186. if ($pdf_export_watermark_path_result) {
  187. Display::addFlash(Display::return_message(get_lang('UplUploadSucceeded')));
  188. } else {
  189. $message = get_lang('UplUnableToSaveFile').' '.get_lang('Folder').': '.api_get_path(SYS_CODE_PATH).'default_course_document/images';
  190. Display::addFlash(Display::return_message($message), 'warning');
  191. }
  192. unset($update_values['pdf_export_watermark_path']);
  193. }
  194. // Set true for allow_message_tool variable if social tool is actived
  195. foreach ($convert_byte_to_mega_list as $item) {
  196. if (isset($values[$item])) {
  197. $values[$item] = round($values[$item]*1024*1024);
  198. }
  199. }
  200. if (isset($values['allow_social_tool']) && $values['allow_social_tool'] == 'true') {
  201. $values['allow_message_tool'] = 'true';
  202. }
  203. foreach ($settings as $item) {
  204. $key = $item['variable'];
  205. if (in_array($key, $settings_to_avoid)) {
  206. continue;
  207. }
  208. if ($key == 'search_field' || $key == 'submit_fixed_in_bottom') {
  209. continue;
  210. }
  211. $key = Database::escape_string($key);
  212. $sql = "UPDATE $table_settings_current
  213. SET selected_value = 'false'
  214. WHERE
  215. variable = '".$key."' AND
  216. access_url = ".intval($url_id)." AND
  217. type IN ('checkbox', 'radio') ";
  218. $res = Database::query($sql);
  219. }
  220. // Save the settings.
  221. $keys = array();
  222. foreach ($values as $key => $value) {
  223. if (strcmp($key, 'MAX_FILE_SIZE') === 0) {
  224. continue;
  225. }
  226. if (in_array($key, $settings_to_avoid)) {
  227. continue;
  228. }
  229. // Avoid form elements which have nothing to do with settings
  230. if ($key == 'search_field' || $key == 'submit_fixed_in_bottom') {
  231. continue;
  232. }
  233. // Treat gradebook values in separate function.
  234. //if (strpos($key, 'gradebook_score_display_custom_values') === false) {
  235. if (!is_array($value)) {
  236. $old_value = api_get_setting($key);
  237. switch ($key) {
  238. case 'header_extra_content':
  239. file_put_contents(api_get_path(SYS_PATH).api_get_home_path().'/header_extra_content.txt', $value);
  240. $value = api_get_home_path().'/header_extra_content.txt';
  241. break;
  242. case 'footer_extra_content':
  243. file_put_contents(api_get_path(SYS_PATH).api_get_home_path().'/footer_extra_content.txt', $value);
  244. $value = api_get_home_path().'/footer_extra_content.txt';
  245. break;
  246. case 'InstitutionUrl':
  247. case 'course_validation_terms_and_conditions_url':
  248. // URL validation for some settings.
  249. $value = trim(Security::remove_XSS($value));
  250. if ($value != '') {
  251. // Here we accept absolute URLs only.
  252. if (strpos($value, '://') === false) {
  253. $value = 'http://'.$value;
  254. }
  255. if (!api_valid_url($value, true)) {
  256. // If the new (non-empty) URL value is invalid, then the old URL value stays.
  257. $value = $old_value;
  258. }
  259. }
  260. // If the new URL value is empty, then it will be stored (i.e. the setting will be deleted).
  261. break;
  262. case 'emailAdministrator':
  263. // Validation against e-mail address for some settings.
  264. $value = trim(Security::remove_XSS($value));
  265. if ($value != '' && !api_valid_email($value)) {
  266. // If the new (non-empty) e-mail address is invalid, then the old e-mail address stays.
  267. // If the new e-mail address is empty, then it will be stored (i.e. the setting will be deleted).
  268. $value = $old_value;
  269. }
  270. break;
  271. }
  272. if ($old_value != $value) {
  273. $keys[] = $key;
  274. }
  275. $result = api_set_setting($key, $value, null, null, $url_id);
  276. } else {
  277. $sql = "SELECT subkey FROM $table_settings_current
  278. WHERE variable = '$key'";
  279. $res = Database::query($sql);
  280. while ($row_subkeys = Database::fetch_array($res)) {
  281. // If subkey is changed:
  282. if ((isset($value[$row_subkeys['subkey']]) && api_get_setting($key, $row_subkeys['subkey']) == 'false') ||
  283. (!isset($value[$row_subkeys['subkey']]) && api_get_setting($key, $row_subkeys['subkey']) == 'true')
  284. ) {
  285. $keys[] = $key;
  286. break;
  287. }
  288. }
  289. foreach ($value as $subkey => $subvalue) {
  290. $result = api_set_setting($key, 'true', $subkey, null, $url_id);
  291. }
  292. }
  293. }
  294. // Add event configuration settings category to the system log.
  295. $user_id = api_get_user_id();
  296. $category = $_GET['category'];
  297. Event::addEvent(
  298. LOG_CONFIGURATION_SETTINGS_CHANGE,
  299. LOG_CONFIGURATION_SETTINGS_CATEGORY,
  300. $category,
  301. api_get_utc_datetime(),
  302. $user_id
  303. );
  304. // Add event configuration settings variable to the system log.
  305. if (is_array($keys) && count($keys) > 0) {
  306. foreach ($keys as $variable) {
  307. if (in_array($key, $settings_to_avoid)) {
  308. continue;
  309. }
  310. Event::addEvent(
  311. LOG_CONFIGURATION_SETTINGS_CHANGE,
  312. LOG_CONFIGURATION_SETTINGS_VARIABLE,
  313. $variable,
  314. api_get_utc_datetime(),
  315. $user_id
  316. );
  317. }
  318. }
  319. Display::addFlash(Display::return_message(get_lang('Updated')));
  320. header('Location: '.api_get_self().'?category='.Security::remove_XSS($my_category));
  321. exit;
  322. }
  323. }
  324. $htmlHeadXtra[] = '<script>
  325. var hide_icon = "'.api_get_path(WEB_IMG_PATH).'/icons/32/shared_setting_na.png";
  326. var show_icon = "'.api_get_path(WEB_IMG_PATH).'/icons/32/shared_setting.png";
  327. var url = "'.api_get_path(WEB_AJAX_PATH).'admin.ajax.php?a=update_changeable_setting";
  328. $(function() {
  329. $(".share_this_setting").on("click", function() {
  330. var my_img = $(this).find("img");
  331. var link = $(this);
  332. $.ajax({
  333. url: url,
  334. data: {
  335. changeable: $(this).attr("data_status"),
  336. id: $(this).attr("data_to_send")
  337. },
  338. success: function(data) {
  339. if (data == 1) {
  340. if (link.attr("data_status") == 1) {
  341. my_img.attr("src", show_icon);
  342. link.attr("data_status", 0);
  343. } else {
  344. my_img.attr("src", hide_icon);
  345. link.attr("data_status", 1);
  346. }
  347. }
  348. }
  349. });
  350. });
  351. });
  352. </script>';
  353. // Including the header (banner).
  354. Display :: display_header($tool_name);
  355. // The action images.
  356. $action_images['platform'] = 'platform.png';
  357. $action_images['course'] = 'course.png';
  358. $action_images['session'] = 'session.png';
  359. $action_images['tools'] = 'tools.png';
  360. $action_images['user'] = 'user.png';
  361. $action_images['gradebook'] = 'gradebook.png';
  362. $action_images['ldap'] = 'ldap.png';
  363. $action_images['cas'] = 'cas.png';
  364. $action_images['security'] = 'security.png';
  365. $action_images['languages'] = 'languages.png';
  366. $action_images['tuning'] = 'tuning.png';
  367. $action_images['templates'] = 'template.png';
  368. $action_images['search'] = 'search.png';
  369. $action_images['editor'] = 'html_editor.png';
  370. $action_images['timezones'] = 'timezone.png';
  371. $action_images['extra'] = 'wizard.png';
  372. $action_images['tracking'] = 'statistics.png';
  373. $action_images['gradebook'] = 'gradebook.png';
  374. $action_images['search'] = 'search.png';
  375. $action_images['stylesheets'] = 'stylesheets.png';
  376. $action_images['templates'] = 'template.png';
  377. $action_images['plugins'] = 'plugins.png';
  378. $action_images['shibboleth'] = 'shibboleth.png';
  379. $action_images['facebook'] = 'facebook.png';
  380. $action_images['crons'] = 'crons.png';
  381. $action_images['webservices'] = 'webservices.png';
  382. $action_array = array();
  383. $resultcategories = array();
  384. $resultcategories[] = array('category' => 'Platform');
  385. $resultcategories[] = array('category' => 'Course');
  386. $resultcategories[] = array('category' => 'Session');
  387. $resultcategories[] = array('category' => 'Languages');
  388. $resultcategories[] = array('category' => 'User');
  389. $resultcategories[] = array('category' => 'Tools');
  390. $resultcategories[] = array('category' => 'Editor');
  391. $resultcategories[] = array('category' => 'Security');
  392. $resultcategories[] = array('category' => 'Tuning');
  393. $resultcategories[] = array('category' => 'Gradebook');
  394. $resultcategories[] = array('category' => 'Timezones');
  395. $resultcategories[] = array('category' => 'Tracking');
  396. $resultcategories[] = array('category' => 'Search');
  397. $resultcategories[] = array('category' => 'Stylesheets');
  398. $resultcategories[] = array('category' => 'Templates');
  399. $resultcategories[] = array('category' => 'Plugins');
  400. $resultcategories[] = array('category' => 'LDAP');
  401. $resultcategories[] = array('category' => 'CAS');
  402. $resultcategories[] = array('category' => 'Shibboleth');
  403. $resultcategories[] = array('category' => 'Facebook');
  404. $resultcategories[] = ['category' => 'Crons'];
  405. $resultcategories[] = ['category' => 'WebServices'];
  406. foreach ($resultcategories as $row) {
  407. $url = array();
  408. $url['url'] = api_get_self()."?category=".$row['category'];
  409. $url['content'] = Display::return_icon(
  410. $action_images[strtolower($row['category'])],
  411. api_ucfirst(get_lang($row['category'])),
  412. '',
  413. ICON_SIZE_MEDIUM
  414. );
  415. if (strtolower($row['category']) == strtolower($_GET['category'])) {
  416. $url['active'] = true;
  417. }
  418. $action_array[] = $url;
  419. }
  420. echo Display::actions($action_array);
  421. echo '<br />';
  422. echo $form_search_html;
  423. if (!empty($_GET['category'])) {
  424. switch ($_GET['category']) {
  425. case 'Regions':
  426. handleRegions();
  427. break;
  428. case 'Plugins':
  429. // Displaying the extensions: Plugins.
  430. // This will be available to all the sites (access_urls).
  431. $securityToken = isset($_GET['sec_token']) ? Security::remove_XSS($_GET['sec_token']) : null;
  432. if (isset($_POST['submit_dashboard_plugins']) && Security::check_token($securityToken)) {
  433. Security::clear_token();
  434. $affected_rows = DashboardManager::store_dashboard_plugins($_POST);
  435. if ($affected_rows) {
  436. // add event to system log
  437. $user_id = api_get_user_id();
  438. $category = $_GET['category'];
  439. Event::addEvent(
  440. LOG_CONFIGURATION_SETTINGS_CHANGE,
  441. LOG_CONFIGURATION_SETTINGS_CATEGORY,
  442. $category,
  443. api_get_utc_datetime(),
  444. $user_id
  445. );
  446. Display :: display_confirmation_message(get_lang('DashboardPluginsUpdatedSuccessfully'));
  447. }
  448. }
  449. echo '<script>
  450. $(function(){
  451. $("#tabs").tabs();
  452. });
  453. </script>';
  454. echo '<div id="tabs">';
  455. echo '<ul>';
  456. echo '<li><a href="#tabs-1">'.get_lang('Plugins').'</a></li>';
  457. echo '<li><a href="#tabs-2">'.get_lang('DashboardPlugins').'</a></li>';
  458. echo '<li><a href="#tabs-3">'.get_lang('ConfigureExtensions').'</a></li>';
  459. echo '</ul>';
  460. echo '<div id="tabs-1">';
  461. handlePlugins();
  462. echo '</div>';
  463. echo '<div id="tabs-2">';
  464. DashboardManager::handle_dashboard_plugins();
  465. echo '</div>';
  466. echo '<div id="tabs-3">';
  467. handleExtensions();
  468. echo '</div>';
  469. echo '</div>';
  470. break;
  471. case 'Stylesheets':
  472. // Displaying the extensions: Stylesheets.
  473. handleStylesheets();
  474. break;
  475. case 'Search':
  476. handleSearch();
  477. break;
  478. case 'Templates':
  479. handleTemplates();
  480. break;
  481. case 'search_setting':
  482. if (isset($_REQUEST['search_field'])) {
  483. searchSetting($_REQUEST['search_field']);
  484. $form->display();
  485. }
  486. break;
  487. default:
  488. if (isset($form)) {
  489. $form->display();
  490. }
  491. }
  492. }
  493. Display :: display_footer();