create_draw.php 4.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This file allows creating new svg and png documents with an online editor.
  5. *
  6. * @package chamilo.document
  7. *
  8. * @author Juan Carlos Ra�a Trabado
  9. * @since 25/september/2010
  10. */
  11. /* INIT SECTION */
  12. // Name of the language file that needs to be included
  13. $language_file = array('document');
  14. require_once '../inc/global.inc.php';
  15. $_SESSION['whereami'] = 'document/createdraw';
  16. $this_section = SECTION_COURSES;
  17. require_once api_get_path(SYS_CODE_PATH).'document/document.inc.php';
  18. require_once api_get_path(LIBRARY_PATH).'groupmanager.lib.php';
  19. $nameTools = get_lang('Draw');
  20. api_protect_course_script();
  21. api_block_anonymous_users();
  22. if (!isset($_GET['id'])) {
  23. api_not_allowed(true);
  24. }
  25. $document_data = DocumentManager::get_document_data_by_id($_GET['id'], api_get_course_id());
  26. $document_id = $document_data['id'];
  27. $dir = $document_data['path'];
  28. /* Constants and variables */
  29. //path for svg-edit save
  30. $_SESSION['draw_dir'] = Security::remove_XSS($dir);
  31. if ($_SESSION['draw_dir']=='/'){
  32. $_SESSION['draw_dir']='';
  33. }
  34. $dir = isset($dir) ? Security::remove_XSS($dir) : Security::remove_XSS($_POST['dir']);
  35. $is_allowed_to_edit = api_is_allowed_to_edit(null, true);
  36. // Please, do not modify this dirname formatting
  37. if (strstr($dir, '..')) {
  38. $dir = '/';
  39. }
  40. if ($dir[0] == '.') {
  41. $dir = substr($dir, 1);
  42. }
  43. if ($dir[0] != '/') {
  44. $dir = '/'.$dir;
  45. }
  46. if ($dir[strlen($dir) - 1] != '/') {
  47. $dir .= '/';
  48. }
  49. $filepath = api_get_path(SYS_COURSE_PATH).$_course['path'].'/document'.$dir;
  50. if (!is_dir($filepath)) {
  51. $filepath = api_get_path(SYS_COURSE_PATH).$_course['path'].'/document/';
  52. $dir = '/';
  53. }
  54. //groups //TODO: clean
  55. if (isset ($_SESSION['_gid']) && $_SESSION['_gid'] != 0) {
  56. $req_gid = '&amp;gidReq='.$_SESSION['_gid'];
  57. $interbreadcrumb[] = array ("url" => "../group/group_space.php?gidReq=".$_SESSION['_gid'], "name" => get_lang('GroupSpace'));
  58. $noPHP_SELF = true;
  59. $to_group_id = $_SESSION['_gid'];
  60. $group = GroupManager :: get_group_properties($to_group_id);
  61. $path = explode('/', $dir);
  62. if ('/'.$path[1] != $group['directory']) {
  63. api_not_allowed(true);
  64. }
  65. }
  66. $interbreadcrumb[] = array ("url" => "./document.php?id=".$parent_id.$req_gid, "name" => get_lang('Documents'));
  67. if (!$is_allowed_in_course) {
  68. api_not_allowed(true);
  69. }
  70. if (!($is_allowed_to_edit || $_SESSION['group_member_with_upload_rights'] || is_my_shared_folder(api_get_user_id(), Security::remove_XSS($dir), api_get_session_id()))) {
  71. api_not_allowed(true);
  72. }
  73. /* Header */
  74. event_access_tool(TOOL_DOCUMENT);
  75. $display_dir = $dir;
  76. if (isset ($group)) {
  77. $display_dir = explode('/', $dir);
  78. unset ($display_dir[0]);
  79. unset ($display_dir[1]);
  80. $display_dir = implode('/', $display_dir);
  81. }
  82. // Interbreadcrumb for the current directory root path
  83. // Copied from document.php
  84. $dir_array = explode('/', $dir);
  85. $array_len = count($dir_array);
  86. /*
  87. TODO:check and delete this code
  88. if (!$is_certificate_mode) {
  89. if ($array_len > 1) {
  90. if (empty($_SESSION['_gid'])) {
  91. $url_dir = 'document.php?&curdirpath=/';
  92. $interbreadcrumb[] = array('url' => $url_dir, 'name' => get_lang('HomeDirectory'));
  93. }
  94. }
  95. }
  96. */
  97. $dir_acum = '';
  98. for ($i = 0; $i < $array_len; $i++) {
  99. $url_dir = 'document.php?&curdirpath='.$dir_acum.$dir_array[$i];
  100. //Max char 80
  101. $url_to_who = cut($dir_array[$i],80);
  102. if ($is_certificate_mode) {
  103. $interbreadcrumb[] = array('url' => $url_dir.'&selectcat='.Security::remove_XSS($_GET['selectcat']), 'name' => $url_to_who);
  104. } else {
  105. $interbreadcrumb[] = array('url' => $url_dir, 'name' => $url_to_who);
  106. }
  107. $dir_acum .= $dir_array[$i].'/';
  108. }
  109. Display :: display_header($nameTools, 'Doc');
  110. echo '<div class="actions">';
  111. echo '<a href="document.php?id='.$document_id.'">'.Display::return_icon('back.png',get_lang('BackTo').' '.get_lang('DocumentsOverview'),'','32').'</a>';
  112. echo '</div>';
  113. if (api_browser_support('svg')){
  114. //automatic loading the course language
  115. $svgedit_code_translation_table = array('' => 'en', 'pt' => 'pt-Pt', 'sr' => 'sr_latn');
  116. $langsvgedit = api_get_language_isocode();
  117. $langsvgedit = isset($svgedit_code_translation_table[$langsvgedit]) ? $svgedit_code_translation_table[$langsvgedit] : $langsvgedit;
  118. $langsvgedit = file_exists(api_get_path(LIBRARY_PATH).'svg-edit/locale/lang.'.$langsvgedit.'.js') ? $langsvgedit : 'en';
  119. //editor
  120. echo '<iframe style=\'height: 550px; width: 100%;\' scrolling=\'no\' frameborder=\'0\' src=\''.api_get_path(WEB_LIBRARY_PATH).'svg-edit/svg-editor.php?lang='.$langsvgedit.'\'>';
  121. echo '</iframe>';
  122. } else {
  123. Display::display_error_message(get_lang('BrowserDontSupportsSVG'));
  124. }
  125. Display :: display_footer();