index.php 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * Index page of the admin tools
  5. * @package chamilo.admin
  6. */
  7. /**
  8. * Code
  9. */
  10. // Language files that need to be included.
  11. $language_file = array('admin', 'tracking','coursebackup');
  12. // Setting the section (for the tabs).
  13. $this_section = SECTION_PLATFORM_ADMIN;
  14. // Access restrictions.
  15. api_protect_admin_script(true);
  16. $nameTools = get_lang('PlatformAdmin');
  17. // Displaying the header
  18. $message = '';
  19. if (api_is_platform_admin()) {
  20. if (is_dir(api_get_path(SYS_CODE_PATH).'install/') && is_readable(api_get_path(SYS_CODE_PATH).'install/index.php')) {
  21. $message = Display::return_message(get_lang('InstallDirAccessibleSecurityThreat'), 'warning');
  22. }
  23. if (is_dir(api_get_path(SYS_ARCHIVE_PATH)) && !is_writable(api_get_path(SYS_ARCHIVE_PATH))) {
  24. $message = Display::return_message(get_lang('ArchivesDirectoryNotWriteableContactAdmin'), 'warning');
  25. }
  26. /* ACTION HANDLING */
  27. if (!empty($_POST['Register'])) {
  28. register_site();
  29. $message = Display::return_message(get_lang('VersionCheckEnabled'), 'confirmation');
  30. }
  31. $keyword_url = Security::remove_XSS((empty($_GET['keyword']) ? '' : $_GET['keyword']));
  32. }
  33. if (isset($_GET['msg']) && isset($_GET['type'])) {
  34. if (in_array($_GET['msg'], array('ArchiveDirCleanupSucceeded', 'ArchiveDirCleanupFailed'))) {
  35. switch($_GET['type']) {
  36. case 'error':
  37. $message = Display::return_message(get_lang($_GET['msg']), 'error');
  38. break;
  39. case 'confirmation':
  40. $message = Display::return_message(get_lang($_GET['msg']), 'confirm');
  41. }
  42. }
  43. }
  44. $blocks = array();
  45. /* Users */
  46. $blocks['users']['icon'] = Display::return_icon('members.gif', get_lang('Users'), array(), ICON_SIZE_SMALL, false);
  47. $blocks['users']['label'] = api_ucfirst(get_lang('Users'));
  48. if (api_is_platform_admin()) {
  49. $search_form = ' <form method="get" class="form-search" action="user_list.php">
  50. <input class="span3" type="text" name="keyword" value="">
  51. <button class="btn" type="submit">'.get_lang('Search').'</button>
  52. </form>';
  53. $blocks['users']['search_form'] = $search_form;
  54. $items = array(
  55. array('url'=>'user_list.php', 'label' => get_lang('UserList')),
  56. array('url'=>'user_add.php', 'label' => get_lang('AddUsers')),
  57. array('url'=>'user_export.php', 'label' => get_lang('ExportUserListXMLCSV')),
  58. array('url'=>'user_import.php', 'label' => get_lang('ImportUserListXMLCSV')),
  59. );
  60. if (isset($extAuthSource) && isset($extAuthSource['ldap']) && count($extAuthSource['ldap']) > 0) {
  61. $items[] = array('url'=>'ldap_users_list.php', 'label' => get_lang('ImportLDAPUsersIntoPlatform'));
  62. }
  63. $items[] = array('url'=>'extra_fields.php?type=user', 'label' => get_lang('ManageUserFields'));
  64. $items[] = array('url'=> api_get_path(WEB_PUBLIC_PATH).'admin/administrator/roles', 'label' => get_lang('Roles'));
  65. } else {
  66. $items = array(
  67. array('url'=>'user_list.php', 'label' => get_lang('UserList')),
  68. array('url'=>'user_add.php', 'label' => get_lang('AddUsers')),
  69. array('url'=>'user_import.php', 'label' => get_lang('ImportUserListXMLCSV')),
  70. );
  71. }
  72. $blocks['users']['items'] = $items;
  73. $blocks['users']['extra'] = null;
  74. if (api_is_platform_admin()) {
  75. /* Courses */
  76. $blocks['courses']['icon'] = Display::return_icon('course.gif', get_lang('Courses'), array(), ICON_SIZE_MEDIUM, false);
  77. $blocks['courses']['label'] = api_ucfirst(get_lang('Courses'));
  78. $search_form = ' <form method="get" class="form-search" action="course_list.php">
  79. <input class="span3" type="text" name="keyword" value="">
  80. <button class="btn" type="submit">'.get_lang('Search').'</button>
  81. </form>';
  82. $blocks['courses']['search_form'] = $search_form;
  83. $items = array();
  84. $items[] = array('url'=>'course_list.php', 'label' => get_lang('CourseList'));
  85. if (api_get_setting('course_validation') != 'true') {
  86. $items[] = array('url'=>'course_add.php', 'label' => get_lang('AddCourse'));
  87. } else {
  88. $items[] = array('url'=>'course_request_review.php', 'label' => get_lang('ReviewCourseRequests'));
  89. $items[] = array('url'=>'course_request_accepted.php', 'label' => get_lang('AcceptedCourseRequests'));
  90. $items[] = array('url'=>'course_request_rejected.php', 'label' => get_lang('RejectedCourseRequests'));
  91. }
  92. $items[] = array('url'=>'course_export.php', 'label' => get_lang('ExportCourses'));
  93. $items[] = array('url'=>'course_import.php', 'label' => get_lang('ImportCourses'));
  94. $items[] = array('url'=>'course_category.php', 'label' => get_lang('AdminCategories'));
  95. $items[] = array('url'=>'subscribe_user2course.php', 'label' => get_lang('AddUsersToACourse'));
  96. $items[] = array('url'=>'course_user_import.php', 'label' => get_lang('ImportUsersToACourse'));
  97. $items[] = array('url'=>'extra_fields.php?type=course', 'label' => get_lang('ManageCourseFields'));
  98. $items[] = array('url'=>'extra_fields.php?type=question', 'label' => get_lang('ManageQuestionFields'));
  99. if (api_get_setting('gradebook_enable_grade_model') == 'true') {
  100. $items[] = array('url'=>'grade_models.php', 'label' => get_lang('GradeModel'));
  101. }
  102. if (isset($extAuthSource) && isset($extAuthSource['ldap']) && count($extAuthSource['ldap']) > 0) {
  103. $items[] = array('url'=>'ldap_import_students.php', 'label' => get_lang('ImportLDAPUsersIntoCourse'));
  104. }
  105. $blocks['courses']['items'] = $items;
  106. $blocks['courses']['extra'] = null;
  107. /* Platform */
  108. $blocks['platform']['icon'] = Display::return_icon('platform.png', get_lang('Platform'), array(), ICON_SIZE_MEDIUM, false);
  109. $blocks['platform']['label'] = api_ucfirst(get_lang('Platform'));
  110. $search_form = ' <form method="get" action="settings.php" class="form-search">
  111. <input class="span3" type="text" name="search_field" value="" >
  112. <input type="hidden" value="search_setting" name="category">
  113. <button class="btn" type="submit">'.get_lang('Search').'</button>
  114. </form>';
  115. $blocks['platform']['search_form'] = $search_form;
  116. $items = array();
  117. $items[] = array('url'=>'settings.php', 'label' => get_lang('PlatformConfigSettings'));
  118. $items[] = array('url'=>'settings.php?category=Plugins','label' => get_lang('Plugins'));
  119. $items[] = array('url'=>'settings.php?category=Regions','label' => get_lang('Regions'));
  120. $items[] = array('url'=>'system_announcements.php', 'label' => get_lang('SystemAnnouncements'));
  121. $items[] = array('url'=> api_get_path(WEB_CODE_PATH).'calendar/agenda_js.php?type=admin', 'label' => get_lang('GlobalAgenda'));
  122. $items[] = array('url'=>'configure_homepage.php', 'label' => get_lang('ConfigureHomePage'));
  123. $items[] = array('url'=>'configure_inscription.php', 'label' => get_lang('ConfigureInscription'));
  124. $items[] = array('url'=>'statistics/index.php', 'label' => get_lang('Statistics'));
  125. $items[] = array('url'=> api_get_path(WEB_CODE_PATH).'mySpace/company_reports.php', 'label' => get_lang('Reports'));
  126. /* Event settings */
  127. if (api_get_setting('activate_email_template') == 'true') {
  128. $items[] = array('url'=>'event_controller.php?action=listing', 'label' => get_lang('EventMessageManagement'));
  129. }
  130. if (api_get_multiple_access_url()) {
  131. if (api_is_global_platform_admin()) {
  132. $items[] = array('url'=>'access_urls.php', 'label' => get_lang('ConfigureMultipleAccessURLs'));
  133. }
  134. }
  135. if (api_get_setting('allow_reservation') == 'true') {
  136. $items[] = array('url'=>'../reservation/m_category.php', 'label' => get_lang('BookingSystem'));
  137. }
  138. if (api_get_setting('allow_terms_conditions') == 'true') {
  139. $items[] = array('url'=>'legal_add.php', 'label' => get_lang('TermsAndConditions'));
  140. }
  141. $blocks['platform']['items'] = $items;
  142. $blocks['platform']['extra'] = null;
  143. }
  144. /* Sessions */
  145. $blocks['sessions']['icon'] = Display::return_icon('session.png', get_lang('Sessions'), array(), ICON_SIZE_SMALL, false);
  146. $blocks['sessions']['label'] = api_ucfirst(get_lang('Sessions'));
  147. $search_form = ' <form method="GET" class="form-search" action="'.api_get_path(WEB_CODE_PATH).'session/session_list.php">
  148. <input class="span3" type="text" name="keyword" value="">
  149. <button class="btn" type="submit">'.get_lang('Search').'</button>
  150. </form>';
  151. $blocks['sessions']['search_form'] = $search_form;
  152. $items = array();
  153. $items[] = array('url'=> api_get_path(WEB_CODE_PATH).'session/session_list.php', 'label' => get_lang('ListSession'));
  154. $items[] = array('url'=> api_get_path(WEB_CODE_PATH).'session/session_add.php', 'label' => get_lang('AddSession'));
  155. $items[] = array('url'=> 'session_category_list.php', 'label' => get_lang('ListSessionCategory'));
  156. $items[] = array('url'=> api_get_path(WEB_CODE_PATH).'session/session_import.php', 'label' => get_lang('ImportSessionListXMLCSV'));
  157. if (isset($extAuthSource) && isset($extAuthSource['ldap']) && count($extAuthSource['ldap']) > 0) {
  158. $items[] = array('url'=>'ldap_import_students_to_session.php', 'label' => get_lang('ImportLDAPUsersIntoSession'));
  159. }
  160. $items[] = array('url'=>api_get_path(WEB_CODE_PATH).'session/session_export.php', 'label' => get_lang('ExportSessionListXMLCSV'));
  161. $items[] = array('url'=>'../coursecopy/copy_course_session.php', 'label' => get_lang('CopyFromCourseInSessionToAnotherSession'));
  162. if (api_is_platform_admin()) {
  163. if (is_dir(api_get_path(SYS_TEST_PATH).'datafiller/')) { // option only visible in development mode. Enable through code if required
  164. $items[] = array('url'=>'user_move_stats.php', 'label' => get_lang('MoveUserStats'));
  165. }
  166. $items[] = array('url'=>'career_dashboard.php', 'label' => get_lang('CareersAndPromotions'));
  167. }
  168. $items[] = array('url'=>'usergroups.php', 'label' => get_lang('Classes'));
  169. $items[] = array('url'=> 'exercise_report.php', 'label' => get_lang('ExerciseReport'));
  170. $items[] = array('url'=>'extra_fields.php?type=session', 'label' => get_lang('ManageSessionFields'));
  171. $blocks['sessions']['items'] = $items;
  172. $blocks['sessions']['extra'] = null;
  173. /* Settings */
  174. if (api_is_platform_admin()) {
  175. $blocks['settings']['icon'] = Display::return_icon('settings.png', get_lang('System'), array(), ICON_SIZE_SMALL, false);
  176. $blocks['settings']['label'] = api_ucfirst(get_lang('System'));
  177. $items = array();
  178. $items[] = array('url'=>'special_exports.php', 'label' => get_lang('SpecialExports'));
  179. if (!empty($_configuration['db_admin_path'])) {
  180. $items[] = array('url'=>$_configuration['db_admin_path'], 'label' => get_lang('AdminDatabases').' ('.get_lang('DBManagementOnlyForServerAdmin').') ');
  181. }
  182. $items[] = array('url'=>'system_status.php', 'label' => get_lang('SystemStatus'));
  183. if (is_dir(api_get_path(SYS_TEST_PATH).'datafiller/')) {
  184. $items[] = array('url'=>'filler.php', 'label' => get_lang('DataFiller'));
  185. }
  186. $items[] = array('url'=>'archive_cleanup.php', 'label' => get_lang('ArchiveDirCleanup'));
  187. $items[] = array('url'=>'system_management.php', 'label' => get_lang('SystemManagement'));
  188. $blocks['settings']['items'] = $items;
  189. $blocks['settings']['extra'] = null;
  190. $blocks['settings']['search_form'] = null;
  191. //Skills
  192. if (api_get_setting('allow_skills_tool') == 'true') {
  193. $blocks['skills']['icon'] = Display::return_icon('logo.png', get_lang('Skills'), array(), ICON_SIZE_SMALL, false);
  194. $blocks['skills']['label'] = get_lang('Skills');
  195. $items = array();
  196. //$items[] = array('url'=>'skills.php', 'label' => get_lang('SkillsTree'));
  197. $items[] = array('url'=>'skills_wheel.php', 'label' => get_lang('SkillsWheel'));
  198. $items[] = array('url'=>'skills_import.php', 'label' => get_lang('SkillsImport'));
  199. //$items[] = array('url'=>'skills_profile.php', 'label' => get_lang('SkillsProfile'));
  200. $items[] = array('url'=>api_get_path(WEB_CODE_PATH).'social/skills_ranking.php', 'label' => get_lang('SkillsRanking'));
  201. $items[] = array('url'=>'skills_gradebook.php', 'label' => get_lang('SkillsAndGradebooks'));
  202. $blocks['skills']['items'] = $items;
  203. $blocks['skills']['extra'] = null;
  204. $blocks['skills']['search_form'] = null;
  205. }
  206. /** Chamilo.org */
  207. $blocks['chamilo']['icon'] = Display::return_icon('logo.png', 'Chamilo.org', array(), ICON_SIZE_SMALL, false);
  208. $blocks['chamilo']['label'] = 'Chamilo.org';
  209. $items = array();
  210. $items[] = array('url'=>'http://www.chamilo.org/', 'label' => get_lang('ChamiloHomepage'));
  211. $items[] = array('url'=>'http://www.chamilo.org/forum', 'label' => get_lang('ChamiloForum'));
  212. $items[] = array('url'=>'../../documentation/installation_guide.html', 'label' => get_lang('InstallationGuide'));
  213. $items[] = array('url'=>'../../documentation/changelog.html', 'label' => get_lang('ChangesInLastVersion'));
  214. $items[] = array('url'=>'../../documentation/credits.html', 'label' => get_lang('ContributorsList'));
  215. $items[] = array('url'=>'../../documentation/security.html', 'label' => get_lang('SecurityGuide'));
  216. $items[] = array('url'=>'../../documentation/optimization.html', 'label' => get_lang('OptimizationGuide'));
  217. $items[] = array('url'=>'http://www.chamilo.org/extensions', 'label' => get_lang('ChamiloExtensions'));
  218. $items[] = array('url'=>'http://www.chamilo.org/en/providers', 'label' => get_lang('ChamiloOfficialServicesProviders'));
  219. $blocks['chamilo']['items'] = $items;
  220. $blocks['chamilo']['extra'] = null;
  221. $blocks['chamilo']['search_form'] = null;
  222. // Try to display a maximum before we check the chamilo version and all that.
  223. //session_write_close(); //close session to avoid blocking concurrent access
  224. //flush(); //send data to client as much as allowed by the web server
  225. //ob_flush();
  226. //Version check
  227. $blocks['version_check']['icon'] = Display::return_icon('logo.png', 'Chamilo.org', array(), ICON_SIZE_SMALL, false);
  228. $blocks['version_check']['label'] = get_lang('VersionCheck');
  229. $blocks['version_check']['extra'] = '<div class="admin-block-version"></div>';
  230. $blocks['version_check']['search_form'] = null;
  231. $blocks['version_check']['items'] = null;
  232. //$blocks['version_check']['class'] = '';
  233. }
  234. $admin_ajax_url = api_get_path(WEB_AJAX_PATH).'admin.ajax.php';
  235. $app['template']->assign('web_admin_ajax_url', $admin_ajax_url);
  236. $app['template']->assign('blocks', $blocks);
  237. $app['template']->display('default/admin/settings_index.tpl');
  238. /**
  239. * Displays either the text for the registration or the message that the installation is (not) up to date
  240. *
  241. * @return string html code
  242. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University
  243. * @version august 2006
  244. * @todo have a 6monthly re-registration
  245. */
  246. function version_check()
  247. {
  248. $tbl_settings = Database :: get_main_table(TABLE_MAIN_SETTINGS_CURRENT);
  249. $sql = 'SELECT selected_value FROM '.$tbl_settings.' WHERE variable="registered" ';
  250. $result = Database::query($sql);
  251. $row = Database::fetch_array($result, 'ASSOC');
  252. // The site has not been registered yet.
  253. $return = '';
  254. if ($row['selected_value'] == 'false') {
  255. $return .= get_lang('VersionCheckExplanation');
  256. $return .= '<form class="well" action="'.api_get_self().'" id="VersionCheck" name="VersionCheck" method="post">';
  257. $return .= '<label class="checkbox"><input type="checkbox" name="donotlistcampus" value="1" id="checkbox" />'.get_lang('HideCampusFromPublicPlatformsList');
  258. $return .= '</label><button type="submit" class="btn btn-primary" name="Register" value="'.get_lang('EnableVersionCheck').'" id="register" >'.get_lang('EnableVersionCheck').'</button>';
  259. $return .= '</form>';
  260. check_system_version();
  261. } else {
  262. // Site registered. Call anyway
  263. $return .= check_system_version();
  264. }
  265. return $return;
  266. }
  267. /**
  268. * Check if the current installation is up to date
  269. * The code is borrowed from phpBB and slighlty modified
  270. * @author The phpBB Group <support@phpbb.com> (the code)
  271. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University (the modifications)
  272. * @author Yannick Warnier <ywarnier@beeznest.org> for the move to HTTP request
  273. * @copyright (C) 2001 The phpBB Group
  274. * @return language string with some layout (color)
  275. */
  276. function check_system_version()
  277. {
  278. global $_configuration;
  279. $system_version = trim($_configuration['system_version']); // the chamilo version of your installation
  280. if (ini_get('allow_url_fopen') == 1) {
  281. // The number of courses
  282. $number_of_courses = Statistics::count_courses();
  283. // The number of users
  284. $number_of_users = Statistics::count_users();
  285. $number_of_active_users = Statistics::count_users(null, null, null,true);
  286. $data = array(
  287. 'url' => api_get_path(WEB_PATH),
  288. 'campus' => api_get_setting('siteName'),
  289. 'contact' => api_get_setting('emailAdministrator'),
  290. 'version' => $system_version,
  291. 'numberofcourses' => $number_of_courses,
  292. 'numberofusers' => $number_of_users,
  293. 'numberofactiveusers' => $number_of_active_users,
  294. //The donotlistcampus setting recovery should be improved to make
  295. // it true by default - this does not affect numbers counting
  296. 'donotlistcampus' => api_get_setting('donotlistcampus'),
  297. 'organisation' => api_get_setting('Institution'),
  298. 'language' => api_get_setting('platformLanguage'),
  299. 'adminname' => api_get_setting('administratorName').' '.api_get_setting('administratorSurname'),
  300. );
  301. $res = _http_request('version.chamilo.org', 80, '/version.php', $data);
  302. if ($res != 0) {
  303. $version_info = $res;
  304. if ($system_version != $version_info) {
  305. $output = '<br /><span style="color:red">' . get_lang('YourVersionNotUpToDate') . '. '.get_lang('LatestVersionIs').' <b>Chamilo '.$version_info.'</b>. '.get_lang('YourVersionIs').' <b>Chamilo '.$system_version. '</b>. '.str_replace('http://www.chamilo.org', '<a href="http://www.chamilo.org">http://www.chamilo.org</a>', get_lang('PleaseVisitOurWebsite')).'</span>';
  306. } else {
  307. $output = '<br /><span style="color:green">'.get_lang('VersionUpToDate').': Chamilo '.$version_info.'</span>';
  308. }
  309. } else {
  310. $output = '<span style="color:red">' . get_lang('ImpossibleToContactVersionServerPleaseTryAgain') . '</span>';
  311. }
  312. } else {
  313. $output = '<span style="color:red">' . get_lang('AllowurlfopenIsSetToOff') . '</span>';
  314. }
  315. return $output;
  316. }
  317. /**
  318. * Function to make an HTTP request through fsockopen (specialised for GET)
  319. * Derived from Jeremy Saintot: http://www.php.net/manual/en/function.fsockopen.php#101872
  320. * @param string IP or hostname
  321. * @param int Target port
  322. * @param string URI (defaults to '/')
  323. * @param array GET data
  324. * @param float Timeout
  325. * @param bool Include HTTP Request headers?
  326. * @param bool Include HTTP Response headers?
  327. */
  328. function _http_request($ip, $port = 80, $uri = '/', $getdata = array(), $timeout = 1, $req_hdr = false, $res_hdr = false) {
  329. $verb = 'GET';
  330. $ret = '';
  331. $getdata_str = count($getdata) ? '?' : '';
  332. foreach ($getdata as $k => $v) {
  333. $getdata_str .= urlencode($k) .'='. urlencode($v) . '&';
  334. }
  335. $crlf = "\r\n";
  336. $req = $verb .' '. $uri . $getdata_str .' HTTP/1.1' . $crlf;
  337. $req .= 'Host: '. $ip . $crlf;
  338. $req .= 'User-Agent: Mozilla/5.0 Firefox/3.6.12' . $crlf;
  339. $req .= 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' . $crlf;
  340. $req .= 'Accept-Language: en-us,en;q=0.5' . $crlf;
  341. $req .= 'Accept-Encoding: deflate' . $crlf;
  342. $req .= 'Accept-Charset: utf-8;q=0.7,*;q=0.7' . $crlf;
  343. $req .= $crlf;
  344. if ($req_hdr) {
  345. $ret .= $req;
  346. }
  347. if (($fp = @fsockopen($ip, $port, $errno, $errstr, $timeout)) == false) {
  348. return "Error $errno: $errstr\n";
  349. }
  350. stream_set_timeout($fp, $timeout);
  351. $r = @fwrite($fp, $req);
  352. $line = @fread($fp, 512);
  353. $ret .= $line;
  354. fclose($fp);
  355. if (!$res_hdr) {
  356. $ret = substr($ret, strpos($ret, "\r\n\r\n") + 4);
  357. }
  358. return trim($ret);
  359. }