auth.lib.php 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This file contains a class used like library provides functions for auth tool. It's also used like model to courses_controller (MVC pattern)
  5. * @author Christian Fasanando <christian1827@gmail.com>
  6. * @package chamilo.auth
  7. */
  8. /**
  9. * Code
  10. */
  11. require_once api_get_path(LIBRARY_PATH).'tracking.lib.php';
  12. require_once api_get_path(LIBRARY_PATH).'course_category.lib.php';
  13. /**
  14. * Auth can be used to instanciate objects or as a library to manage courses
  15. * @package chamilo.auth
  16. */
  17. class Auth
  18. {
  19. /**
  20. * Constructor
  21. */
  22. public function __construct()
  23. {
  24. }
  25. /**
  26. * retrieves all the courses that the user has already subscribed to
  27. * @param int User id
  28. * @return array an array containing all the information of the courses of the given user
  29. */
  30. public function get_courses_of_user($user_id)
  31. {
  32. $TABLECOURS = Database::get_main_table(TABLE_MAIN_COURSE);
  33. $TABLECOURSUSER = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  34. $TABLE_COURSE_FIELD = Database::get_main_table(TABLE_MAIN_COURSE_FIELD);
  35. $TABLE_COURSE_FIELD_VALUE = Database::get_main_table(TABLE_MAIN_COURSE_FIELD_VALUES);
  36. // get course list auto-register
  37. $sql = "SELECT course_code FROM $TABLE_COURSE_FIELD_VALUE tcfv INNER JOIN $TABLE_COURSE_FIELD tcf ON " .
  38. " tcfv.field_id = tcf.id WHERE tcf.field_variable = 'special_course' AND tcfv.field_value = 1 ";
  39. $special_course_result = Database::query($sql);
  40. if (Database::num_rows($special_course_result) > 0) {
  41. $special_course_list = array();
  42. while ($result_row = Database::fetch_array($special_course_result)) {
  43. $special_course_list[] = '"' . $result_row['course_code'] . '"';
  44. }
  45. }
  46. $without_special_courses = '';
  47. if (!empty($special_course_list)) {
  48. $without_special_courses = ' AND course.code NOT IN (' . implode(',', $special_course_list) . ')';
  49. }
  50. // Secondly we select the courses that are in a category (user_course_cat<>0) and sort these according to the sort of the category
  51. $user_id = intval($user_id);
  52. $sql_select_courses = "SELECT course.code k, course.visual_code vc, course.subscribe subscr, course.unsubscribe unsubscr,
  53. course.title i, course.tutor_name t, course.db_name db, course.directory dir, course_rel_user.status status,
  54. course_rel_user.sort sort, course_rel_user.user_course_cat user_course_cat
  55. FROM $TABLECOURS course, $TABLECOURSUSER course_rel_user
  56. WHERE course.code = course_rel_user.course_code
  57. AND course_rel_user.relation_type<>" . COURSE_RELATION_TYPE_RRHH . "
  58. AND course_rel_user.user_id = '" . $user_id . "' $without_special_courses
  59. ORDER BY course_rel_user.sort ASC";
  60. $result = Database::query($sql_select_courses);
  61. while ($row = Database::fetch_array($result)) {
  62. //we only need the database name of the course
  63. $courses[] = array('db' => $row['db'], 'code' => $row['k'], 'visual_code' => $row['vc'], 'title' => $row['i'], 'directory' => $row['dir'], 'status' => $row['status'], 'tutor' => $row['t'], 'subscribe' => $row['subscr'], 'unsubscribe' => $row['unsubscr'], 'sort' => $row['sort'], 'user_course_category' => $row['user_course_cat']);
  64. }
  65. return $courses;
  66. }
  67. /**
  68. * retrieves the user defined course categories
  69. * @return array containing all the IDs of the user defined courses categories, sorted by the "sort" field
  70. */
  71. public function get_user_course_categories() {
  72. $user_id = api_get_user_id();
  73. $table_category = Database::get_user_personal_table(TABLE_USER_COURSE_CATEGORY);
  74. $sql = "SELECT * FROM " . $table_category . " WHERE user_id=$user_id ORDER BY sort ASC";
  75. $result = Database::query($sql);
  76. $output = array();
  77. while ($row = Database::fetch_array($result)) {
  78. $output[] = $row;
  79. }
  80. return $output;
  81. }
  82. /**
  83. * This function get all the courses in the particular user category;
  84. * @param int User category id
  85. * @return string: the name of the user defined course category
  86. */
  87. public function get_courses_in_category() {
  88. $user_id = api_get_user_id();
  89. // table definitions
  90. $TABLECOURS = Database::get_main_table(TABLE_MAIN_COURSE);
  91. $TABLECOURSUSER = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  92. $TABLE_USER_COURSE_CATEGORY = Database::get_user_personal_table(TABLE_USER_COURSE_CATEGORY);
  93. $TABLE_COURSE_FIELD = Database :: get_main_table(TABLE_MAIN_COURSE_FIELD);
  94. $TABLE_COURSE_FIELD_VALUE = Database :: get_main_table(TABLE_MAIN_COURSE_FIELD_VALUES);
  95. // get course list auto-register
  96. $sql = "SELECT course_code FROM $TABLE_COURSE_FIELD_VALUE tcfv INNER JOIN $TABLE_COURSE_FIELD tcf ON " .
  97. " tcfv.field_id = tcf.id WHERE tcf.field_variable = 'special_course' AND tcfv.field_value = 1 ";
  98. $special_course_result = Database::query($sql);
  99. if (Database::num_rows($special_course_result) > 0) {
  100. $special_course_list = array();
  101. while ($result_row = Database::fetch_array($special_course_result)) {
  102. $special_course_list[] = '"' . $result_row['course_code'] . '"';
  103. }
  104. }
  105. $without_special_courses = '';
  106. if (!empty($special_course_list)) {
  107. $without_special_courses = ' AND course.code NOT IN (' . implode(',', $special_course_list) . ')';
  108. }
  109. $sql_select_courses = "SELECT course.code, course.visual_code, course.subscribe subscr, course.unsubscribe unsubscr,
  110. course.title title, course.tutor_name tutor, course.db_name, course.directory, course_rel_user.status status,
  111. course_rel_user.sort sort, course_rel_user.user_course_cat user_course_cat
  112. FROM $TABLECOURS course,
  113. $TABLECOURSUSER course_rel_user
  114. WHERE course.code = course_rel_user.course_code
  115. AND course_rel_user.user_id = '" . $user_id . "'
  116. AND course_rel_user.relation_type <> " . COURSE_RELATION_TYPE_RRHH . "
  117. $without_special_courses
  118. ORDER BY course_rel_user.user_course_cat, course_rel_user.sort ASC";
  119. $result = Database::query($sql_select_courses);
  120. $number_of_courses = Database::num_rows($result);
  121. $data = array();
  122. while ($course = Database::fetch_array($result)) {
  123. $data[$course['user_course_cat']][] = $course;
  124. }
  125. return $data;
  126. }
  127. /**
  128. * stores the changes in a course category (moving a course to a different course category)
  129. * @param string Course code
  130. * @param int Category id
  131. * @return bool True if it success
  132. */
  133. public function store_changecoursecategory($course_code, $newcategory) {
  134. $course_code = Database::escape_string($course_code);
  135. $newcategory = intval($newcategory);
  136. $current_user = api_get_user_id();
  137. $result = false;
  138. $TABLECOURSUSER = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  139. $max_sort_value = api_max_sort_value($newcategory, $current_user); // max_sort_value($newcategory);
  140. Database::query("UPDATE $TABLECOURSUSER SET user_course_cat='" . $newcategory . "', sort='" . ($max_sort_value + 1) . "' WHERE course_code='" . $course_code . "' AND user_id='" . $current_user . "' AND relation_type<>" . COURSE_RELATION_TYPE_RRHH . " ");
  141. if (Database::affected_rows()) {
  142. $result = true;
  143. }
  144. return $result;
  145. }
  146. /**
  147. * moves the course one place up or down
  148. * @param string Direction (up/down)
  149. * @param string Course code
  150. * @param int Category id
  151. * @return bool True if it success
  152. */
  153. public function move_course($direction, $course2move, $category) {
  154. // definition of tables
  155. $TABLECOURSUSER = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  156. $current_user_id = api_get_user_id();
  157. $all_user_courses = $this->get_courses_of_user($current_user_id);
  158. $result = false;
  159. // we need only the courses of the category we are moving in
  160. $user_courses = array();
  161. foreach ($all_user_courses as $key => $course) {
  162. if ($course['user_course_category'] == $category) {
  163. $user_courses[] = $course;
  164. }
  165. }
  166. $target_course = array();
  167. foreach ($user_courses as $count => $course) {
  168. if ($course2move == $course['code']) {
  169. // source_course is the course where we clicked the up or down icon
  170. $source_course = $course;
  171. // target_course is the course before/after the source_course (depending on the up/down icon)
  172. if ($direction == 'up') {
  173. $target_course = $user_courses[$count - 1];
  174. } else {
  175. $target_course = $user_courses[$count + 1];
  176. }
  177. break;
  178. }
  179. }
  180. if (count($target_course) > 0 && count($source_course) > 0) {
  181. $sql_update1 = "UPDATE $TABLECOURSUSER SET sort='" . $target_course['sort'] . "' WHERE course_code='" . $source_course['code'] . "' AND user_id='" . $current_user_id . "' AND relation_type<>" . COURSE_RELATION_TYPE_RRHH . " ";
  182. $sql_update2 = "UPDATE $TABLECOURSUSER SET sort='" . $source_course['sort'] . "' WHERE course_code='" . $target_course['code'] . "' AND user_id='" . $current_user_id . "' AND relation_type<>" . COURSE_RELATION_TYPE_RRHH . " ";
  183. Database::query($sql_update2);
  184. Database::query($sql_update1);
  185. if (Database::affected_rows()) {
  186. $result = true;
  187. }
  188. }
  189. return $result;
  190. }
  191. /**
  192. * Moves the course one place up or down
  193. * @param string Direction up/down
  194. * @param string Category id
  195. * @return bool True If it success
  196. */
  197. public function move_category($direction, $category2move) {
  198. // the database definition of the table that stores the user defined course categories
  199. $table_user_defined_category = Database::get_user_personal_table(TABLE_USER_COURSE_CATEGORY);
  200. $current_user_id = api_get_user_id();
  201. $user_coursecategories = $this->get_user_course_categories();
  202. $user_course_categories_info = $this->get_user_course_categories_info();
  203. $result = false;
  204. foreach ($user_coursecategories as $key => $category) {
  205. $category_id = $category['id'];
  206. if ($category2move == $category_id) {
  207. // source_course is the course where we clicked the up or down icon
  208. $source_category = $user_course_categories_info[$category2move];
  209. // target_course is the course before/after the source_course (depending on the up/down icon)
  210. if ($direction == 'up') {
  211. $target_category = $user_course_categories_info[$user_coursecategories[$key - 1]['id']];
  212. } else {
  213. $target_category = $user_course_categories_info[$user_coursecategories[$key + 1]['id']];
  214. }
  215. }
  216. }
  217. if (count($target_category) > 0 && count($source_category) > 0) {
  218. $sql_update1 = "UPDATE $table_user_defined_category SET sort='" . Database::escape_string($target_category['sort']) . "' WHERE id='" . intval($source_category['id']) . "' AND user_id='" . $current_user_id . "'";
  219. $sql_update2 = "UPDATE $table_user_defined_category SET sort='" . Database::escape_string($source_category['sort']) . "' WHERE id='" . intval($target_category['id']) . "' AND user_id='" . $current_user_id . "'";
  220. Database::query($sql_update2);
  221. Database::query($sql_update1);
  222. if (Database::affected_rows()) {
  223. $result = true;
  224. }
  225. }
  226. return $result;
  227. }
  228. /**
  229. * Retrieves the user defined course categories and all the info that goes with it
  230. * @return array containing all the info of the user defined courses categories with the id as key of the array
  231. */
  232. public function get_user_course_categories_info() {
  233. $current_user_id = api_get_user_id();
  234. $table_category = Database::get_user_personal_table(TABLE_USER_COURSE_CATEGORY);
  235. $sql = "SELECT * FROM " . $table_category . " WHERE user_id='" . $current_user_id . "' ORDER BY sort ASC";
  236. $result = Database::query($sql);
  237. while ($row = Database::fetch_array($result)) {
  238. $output[$row['id']] = $row;
  239. }
  240. return $output;
  241. }
  242. /**
  243. * Updates the user course category in the chamilo_user database
  244. * @param string Category title
  245. * @param int Category id
  246. * @return bool True if it success
  247. */
  248. public function store_edit_course_category($title, $category_id) {
  249. // protect data
  250. $title = Database::escape_string($title);
  251. $category_id = intval($category_id);
  252. $result = false;
  253. $tucc = Database::get_user_personal_table(TABLE_USER_COURSE_CATEGORY);
  254. $sql_update = "UPDATE $tucc SET title='" . api_htmlentities($title, ENT_QUOTES, api_get_system_encoding()) . "' WHERE id='" . $category_id . "'";
  255. Database::query($sql_update);
  256. if (Database::affected_rows()) {
  257. $result = true;
  258. }
  259. return $result;
  260. }
  261. /**
  262. * deletes a course category and moves all the courses that were in this category to main category
  263. * @param int Category id
  264. * @return bool True if it success
  265. */
  266. public function delete_course_category($category_id) {
  267. $current_user_id = api_get_user_id();
  268. $tucc = Database::get_user_personal_table(TABLE_USER_COURSE_CATEGORY);
  269. $TABLECOURSUSER = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  270. $category_id = intval($category_id);
  271. $result = false;
  272. $sql_delete = "DELETE FROM $tucc WHERE id='" . $category_id . "' and user_id='" . $current_user_id . "'";
  273. Database::query($sql_delete);
  274. if (Database::affected_rows()) {
  275. $result = true;
  276. }
  277. $sql_update = "UPDATE $TABLECOURSUSER SET user_course_cat='0' WHERE user_course_cat='" . $category_id . "' AND user_id='" . $current_user_id . "' AND relation_type<>" . COURSE_RELATION_TYPE_RRHH . " ";
  278. Database::query($sql_update);
  279. return $result;
  280. }
  281. /**
  282. * unsubscribe the user from a given course
  283. * @param string Course code
  284. * @return bool True if it success
  285. */
  286. public function remove_user_from_course($course_code) {
  287. $tbl_course_user = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  288. // protect variables
  289. $current_user_id = api_get_user_id();
  290. $course_code = Database::escape_string($course_code);
  291. $result = true;
  292. // we check (once again) if the user is not course administrator
  293. // because the course administrator cannot unsubscribe himself
  294. // (s)he can only delete the course
  295. $sql_check = "SELECT * FROM $tbl_course_user WHERE user_id='" . $current_user_id . "' AND course_code='" . $course_code . "' AND status='1' ";
  296. $result_check = Database::query($sql_check);
  297. $number_of_rows = Database::num_rows($result_check);
  298. if ($number_of_rows > 0) {
  299. $result = false;
  300. }
  301. CourseManager::unsubscribe_user($current_user_id, $course_code);
  302. return $result;
  303. }
  304. /**
  305. * stores the user course category in the chamilo_user database
  306. * @param string Category title
  307. * @return bool True if it success
  308. */
  309. public function store_course_category($category_title) {
  310. $tucc = Database::get_user_personal_table(TABLE_USER_COURSE_CATEGORY);
  311. // protect data
  312. $current_user_id = api_get_user_id();
  313. $category_title = Database::escape_string($category_title);
  314. $result = false;
  315. // step 1: we determine the max value of the user defined course categories
  316. $sql = "SELECT sort FROM $tucc WHERE user_id='" . $current_user_id . "' ORDER BY sort DESC";
  317. $rs_sort = Database::query($sql);
  318. $maxsort = Database::fetch_array($rs_sort);
  319. $nextsort = $maxsort['sort'] + 1;
  320. // step 2: we check if there is already a category with this name, if not we store it, else we give an error.
  321. $sql = "SELECT * FROM $tucc WHERE user_id='" . $current_user_id . "' AND title='" . $category_title . "'ORDER BY sort DESC";
  322. $rs = Database::query($sql);
  323. if (Database::num_rows($rs) == 0) {
  324. $sql_insert = "INSERT INTO $tucc (user_id, title,sort) VALUES ('" . $current_user_id . "', '" . api_htmlentities($category_title, ENT_QUOTES, api_get_system_encoding()) . "', '" . $nextsort . "')";
  325. Database::query($sql_insert);
  326. if (Database::affected_rows()) {
  327. $result = true;
  328. }
  329. } else {
  330. $result = false;
  331. }
  332. return $result;
  333. }
  334. /**
  335. * Counts the number of courses in a given course category
  336. * @param string $categoryCode Category code
  337. * @return int Count of courses
  338. */
  339. public function count_courses_in_category($categoryCode)
  340. {
  341. return countCoursesInCategory($categoryCode);
  342. }
  343. /**
  344. * get the browsing of the course categories (faculties)
  345. * @return array array containing a list with all the categories and subcategories(if needed)
  346. */
  347. public function browse_course_categories()
  348. {
  349. return browseCourseCategories();
  350. }
  351. /**
  352. * Display all the courses in the given course category. I could have used a parameter here
  353. * @param string $categoryCode Category code
  354. * @return array Courses data
  355. */
  356. public function browse_courses_in_category($categoryCode, $randomValue = null)
  357. {
  358. return browseCoursesInCategory($categoryCode, $randomValue);
  359. }
  360. /**
  361. * Search the courses database for a course that matches the search term.
  362. * The search is done on the code, title and tutor field of the course table.
  363. * @param string $search_term: the string that the user submitted, what we are looking for
  364. * @return array an array containing a list of all the courses (the code, directory, dabase, visual_code, title, ... ) matching the the search term.
  365. */
  366. public function search_courses($search_term)
  367. {
  368. $TABLECOURS = Database::get_main_table(TABLE_MAIN_COURSE);
  369. $TABLE_COURSE_FIELD = Database :: get_main_table(TABLE_MAIN_COURSE_FIELD);
  370. $TABLE_COURSE_FIELD_VALUE = Database :: get_main_table(TABLE_MAIN_COURSE_FIELD_VALUES);
  371. // get course list auto-register
  372. $sql = "SELECT course_code FROM $TABLE_COURSE_FIELD_VALUE tcfv INNER JOIN $TABLE_COURSE_FIELD tcf ON tcfv.field_id = tcf.id
  373. WHERE tcf.field_variable = 'special_course' AND tcfv.field_value = 1 ";
  374. $special_course_result = Database::query($sql);
  375. if (Database::num_rows($special_course_result) > 0) {
  376. $special_course_list = array();
  377. while ($result_row = Database::fetch_array($special_course_result)) {
  378. $special_course_list[] = '"' . $result_row['course_code'] . '"';
  379. }
  380. }
  381. $without_special_courses = '';
  382. if (!empty($special_course_list)) {
  383. $without_special_courses = ' AND course.code NOT IN (' . implode(',', $special_course_list) . ')';
  384. }
  385. $search_term_safe = Database::escape_string($search_term);
  386. $sql_find = "SELECT * FROM $TABLECOURS WHERE (code LIKE '%" . $search_term_safe . "%' OR title LIKE '%" . $search_term_safe . "%' OR tutor_name LIKE '%" . $search_term_safe . "%') $without_special_courses ORDER BY title, visual_code ASC";
  387. global $_configuration;
  388. if ($_configuration['multiple_access_urls']) {
  389. $url_access_id = api_get_current_access_url_id();
  390. if ($url_access_id != -1) {
  391. $tbl_url_rel_course = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_COURSE);
  392. $sql_find = "SELECT * FROM $TABLECOURS as course INNER JOIN $tbl_url_rel_course as url_rel_course
  393. ON (url_rel_course.course_code=course.code)
  394. WHERE access_url_id = $url_access_id AND (code LIKE '%" . $search_term_safe . "%' OR title LIKE '%" . $search_term_safe . "%' OR tutor_name LIKE '%" . $search_term_safe . "%' ) $without_special_courses ORDER BY title, visual_code ASC ";
  395. }
  396. }
  397. $result_find = Database::query($sql_find);
  398. $courses = array();
  399. while ($row = Database::fetch_array($result_find)) {
  400. $row['registration_code'] = !empty($row['registration_code']);
  401. $count_users = count(CourseManager::get_user_list_from_course_code($row['code']));
  402. $count_connections_last_month = Tracking::get_course_connections_count($row['code'], 0, api_get_utc_datetime(time() - (30 * 86400)));
  403. $point_info = CourseManager::get_course_ranking($row['id'], 0);
  404. $courses[] = array(
  405. 'real_id' => $row['id'],
  406. 'point_info' => $point_info,
  407. 'code' => $row['code'],
  408. 'directory' => $row['directory'],
  409. 'db' => $row['db_name'],
  410. 'visual_code' => $row['visual_code'],
  411. 'title' => $row['title'],
  412. 'tutor' => $row['tutor_name'],
  413. 'subscribe' => $row['subscribe'],
  414. 'unsubscribe' => $row['unsubscribe'],
  415. 'registration_code' => $row['registration_code'],
  416. 'creation_date' => $row['creation_date'],
  417. 'visibility' => $row['visibility'],
  418. 'count_users' => $count_users,
  419. 'count_connections' => $count_connections_last_month
  420. );
  421. }
  422. return $courses;
  423. }
  424. /**
  425. * Subscribe the user to a given course
  426. * @param string Course code
  427. * @return string Message about results
  428. */
  429. public function subscribe_user($course_code)
  430. {
  431. $user_id = api_get_user_id();
  432. $all_course_information = CourseManager::get_course_information($course_code);
  433. if ($all_course_information['registration_code'] == '' || $_POST['course_registration_code'] == $all_course_information['registration_code']) {
  434. if (api_is_platform_admin()) {
  435. $status_user_in_new_course = COURSEMANAGER;
  436. } else {
  437. $status_user_in_new_course = null;
  438. }
  439. if (CourseManager::add_user_to_course($user_id, $course_code, $status_user_in_new_course)) {
  440. $send = api_get_course_setting('email_alert_to_teacher_on_new_user_in_course', $course_code);
  441. if ($send == 1) {
  442. CourseManager::email_to_tutor($user_id, $course_code, $send_to_tutor_also = false);
  443. } else if ($send == 2) {
  444. CourseManager::email_to_tutor($user_id, $course_code, $send_to_tutor_also = true);
  445. }
  446. $url = Display::url($all_course_information['title'], api_get_course_url($course_code));
  447. $message = sprintf(get_lang('EnrollToCourseXSuccessful'), $url);
  448. } else {
  449. $message = get_lang('ErrorContactPlatformAdmin');
  450. }
  451. return array('message' => $message);
  452. } else {
  453. if (isset($_POST['course_registration_code']) && $_POST['course_registration_code'] != $all_course_information['registration_code']) {
  454. return false;
  455. }
  456. $message = get_lang('CourseRequiresPassword') . '<br />';
  457. $message .= $all_course_information['title'].' ('.$all_course_information['visual_code'].') ';
  458. $action = api_get_path(WEB_CODE_PATH) . "auth/courses.php?action=subscribe_user_with_password&sec_token=" . $_SESSION['sec_token'];
  459. $form = new FormValidator('subscribe_user_with_password', 'post', $action);
  460. $form->addElement('hidden', 'sec_token', $_SESSION['sec_token']);
  461. $form->addElement('hidden', 'subscribe_user_with_password', $all_course_information['code']);
  462. $form->addElement('text', 'course_registration_code');
  463. $form->addElement('button', 'submit', get_lang('SubmitRegistrationCode'));
  464. $content = $form->return_form();
  465. return array('message' => $message, 'content' => $content);
  466. }
  467. }
  468. }