upload.php 4.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. use ChamiloSession as Session;
  4. require_once '../inc/global.inc.php';
  5. $current_course_tool = TOOL_STUDENTPUBLICATION;
  6. api_protect_course_script(true);
  7. // Including necessary files
  8. require_once 'work.lib.php';
  9. $this_section = SECTION_COURSES;
  10. $work_id = isset($_REQUEST['id']) ? intval($_REQUEST['id']) : null;
  11. $is_allowed_to_edit = api_is_allowed_to_edit();
  12. $course_id = api_get_course_int_id();
  13. $user_id = api_get_user_id();
  14. $userInfo = api_get_user_info();
  15. $session_id = api_get_session_id();
  16. $course_info = api_get_course_info();
  17. $course_code = $course_info['code'];
  18. $group_id = api_get_group_id();
  19. if (empty($work_id)) {
  20. api_not_allowed(true);
  21. }
  22. protectWork($course_info, $work_id);
  23. $workInfo = get_work_data_by_id($work_id);
  24. $is_course_member = CourseManager::is_user_subscribed_in_real_or_linked_course($user_id, $course_id, $session_id);
  25. $is_course_member = $is_course_member || api_is_platform_admin();
  26. if ($is_course_member == false || api_is_invitee()) {
  27. api_not_allowed(true);
  28. }
  29. $check = Security::check_token('post');
  30. $token = Security::get_token();
  31. $student_can_edit_in_session = api_is_allowed_to_session_edit(false, true);
  32. // @todo add an option to allow/block multiple attempts.
  33. /*
  34. if (!empty($workInfo) && !empty($workInfo['qualification'])) {
  35. $count = get_work_count_by_student($user_id, $work_id);
  36. if ($count >= 1) {
  37. Display::display_header();
  38. if (api_get_course_setting('student_delete_own_publication') == '1') {
  39. Display::display_warning_message(get_lang('CantUploadDeleteYourPaperFirst'));
  40. } else {
  41. Display::display_warning_message(get_lang('YouAlreadySentAPaperYouCantUpload'));
  42. }
  43. Display::display_footer();
  44. exit;
  45. }
  46. }*/
  47. $homework = get_work_assignment_by_id($workInfo['id']);
  48. $validationStatus = getWorkDateValidationStatus($homework);
  49. $interbreadcrumb[] = array(
  50. 'url' => api_get_path(WEB_CODE_PATH).'work/work.php?'.api_get_cidreq(),
  51. 'name' => get_lang('StudentPublications'),
  52. );
  53. $interbreadcrumb[] = array(
  54. 'url' => api_get_path(WEB_CODE_PATH).'work/work_list.php?'.api_get_cidreq().'&id='.$work_id,
  55. 'name' => $workInfo['title'],
  56. );
  57. $interbreadcrumb[] = array('url' => '#', 'name' => get_lang('UploadADocument'));
  58. $form = new FormValidator(
  59. 'form',
  60. 'POST',
  61. api_get_self()."?".api_get_cidreq()."&id=".$work_id,
  62. '',
  63. array('enctype' => "multipart/form-data")
  64. );
  65. setWorkUploadForm($form, $workInfo['allow_text_assignment']);
  66. $form->addElement('hidden', 'id', $work_id);
  67. $form->addElement('hidden', 'sec_token', $token);
  68. $error_message = null;
  69. $succeed = false;
  70. if ($form->validate()) {
  71. if ($student_can_edit_in_session && $check) {
  72. $values = $form->getSubmitValues();
  73. // Process work
  74. $error_message = processWorkForm(
  75. $workInfo,
  76. $values,
  77. $course_info,
  78. $session_id,
  79. $group_id,
  80. $user_id
  81. );
  82. $script = 'work_list.php';
  83. if ($is_allowed_to_edit) {
  84. $script = 'work_list_all.php';
  85. }
  86. if (!empty($error_message)) {
  87. Session::write('error_message', $error_message);
  88. }
  89. header('Location: '.api_get_path(WEB_CODE_PATH).'work/'.$script.'?'.api_get_cidreq().'&id='.$work_id);
  90. exit;
  91. } else {
  92. // Bad token or can't add works
  93. $error_message = Display::return_message(get_lang('IsNotPosibleSaveTheDocument'), 'error');
  94. }
  95. }
  96. $htmlHeadXtra[] = to_javascript_work();
  97. Display :: display_header(null);
  98. if (!empty($work_id)) {
  99. echo $validationStatus['message'];
  100. if ($is_allowed_to_edit) {
  101. if (api_resource_is_locked_by_gradebook($work_id, LINK_STUDENTPUBLICATION)) {
  102. echo Display::display_warning_message(get_lang('ResourceLockedByGradebook'));
  103. } else {
  104. $form->display();
  105. }
  106. } elseif ($student_can_edit_in_session && $validationStatus['has_ended'] == false) {
  107. $form->display();
  108. } else {
  109. Display::display_error_message(get_lang('ActionNotAllowed'));
  110. }
  111. } else {
  112. Display::display_error_message(get_lang('ActionNotAllowed'));
  113. }
  114. Display :: display_footer();