blog.lib.php 119 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859286028612862286328642865286628672868286928702871287228732874287528762877287828792880288128822883288428852886288728882889289028912892289328942895289628972898289929002901290229032904290529062907290829092910291129122913291429152916291729182919292029212922292329242925292629272928292929302931293229332934293529362937293829392940294129422943294429452946294729482949295029512952295329542955295629572958295929602961296229632964296529662967296829692970297129722973297429752976297729782979298029812982298329842985298629872988298929902991299229932994299529962997299829993000300130023003300430053006300730083009301030113012301330143015
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * Class Blog
  5. *
  6. * Contains several functions dealing with displaying,
  7. * editing,... of a blog
  8. * @package chamilo.blogs
  9. * @author Toon Keppens <toon@vi-host.net>
  10. * @author Julio Montoya - Cleaning code
  11. */
  12. class Blog
  13. {
  14. /**
  15. * Get the title of a blog
  16. * @author Toon Keppens
  17. *
  18. * @param int $blog_id
  19. *
  20. * @return String Blog Title
  21. */
  22. public static function getBlogTitle($blog_id)
  23. {
  24. $course_id = api_get_course_int_id();
  25. if (is_numeric($blog_id)) {
  26. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  27. $sql = "SELECT blog_name
  28. FROM ".$tbl_blogs."
  29. WHERE c_id = $course_id AND blog_id = ".intval($blog_id);
  30. $result = Database::query($sql);
  31. $blog = Database::fetch_array($result);
  32. return stripslashes($blog['blog_name']);
  33. }
  34. }
  35. /**
  36. * Get the description of a blog
  37. * @author Toon Keppens
  38. *
  39. * @param Integer $blog_id
  40. *
  41. * @return String Blog description
  42. */
  43. public static function getBlogSubtitle($blog_id)
  44. {
  45. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  46. $course_id = api_get_course_int_id();
  47. $sql = "SELECT blog_subtitle FROM $tbl_blogs
  48. WHERE c_id = $course_id AND blog_id ='".intval($blog_id)."'";
  49. $result = Database::query($sql);
  50. $blog = Database::fetch_array($result);
  51. return stripslashes($blog['blog_subtitle']);
  52. }
  53. /**
  54. * Get the users of a blog
  55. * @author Toon Keppens
  56. * @param int $blog_id The ID of the blog
  57. * @return array Returns an array with [userid]=>[username]
  58. */
  59. public static function getBlogUsers($blog_id)
  60. {
  61. // Database table definitions
  62. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  63. $tbl_blogs_rel_user = Database::get_course_table(TABLE_BLOGS_REL_USER);
  64. $course_id = api_get_course_int_id();
  65. // Get blog members
  66. $sql = "SELECT user.user_id, user.firstname, user.lastname
  67. FROM $tbl_blogs_rel_user blogs_rel_user
  68. INNER JOIN $tbl_users user
  69. ON (blogs_rel_user.user_id = user.user_id)
  70. WHERE
  71. blogs_rel_user.c_id = $course_id AND
  72. blogs_rel_user.blog_id = '".(int) $blog_id."'";
  73. $result = Database::query($sql);
  74. $blog_members = array();
  75. while ($user = Database::fetch_array($result)) {
  76. $blog_members[$user['user_id']] = api_get_person_name(
  77. $user['firstname'],
  78. $user['lastname']
  79. );
  80. }
  81. return $blog_members;
  82. }
  83. /**
  84. * Creates a new blog in the given course
  85. * @author Toon Keppens
  86. * @param string $title The title of the new blog
  87. * @param string $subtitle The description (or subtitle) of the new blog
  88. * @return void
  89. */
  90. public static function addBlog($title, $subtitle)
  91. {
  92. $_user = api_get_user_info();
  93. $course_id = api_get_course_int_id();
  94. $current_date = api_get_utc_datetime();
  95. $session_id = api_get_session_id();
  96. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  97. $tbl_tool = Database::get_course_table(TABLE_TOOL_LIST);
  98. $tbl_blogs_posts = Database::get_course_table(TABLE_BLOGS_POSTS);
  99. //verified if exist blog
  100. $sql = 'SELECT COUNT(*) as count FROM '.$tbl_blogs.'
  101. WHERE
  102. c_id = '.$course_id.' AND
  103. blog_name="'.Database::escape_string($title).'" AND
  104. blog_subtitle="'.Database::escape_string($subtitle).'"';
  105. $res = Database::query($sql);
  106. $info_count = Database::result($res, 0, 0);
  107. if ($info_count == 0) {
  108. // Create the blog
  109. $params = [
  110. 'blog_id' => 0,
  111. 'c_id' => $course_id,
  112. 'blog_name' => $title,
  113. 'blog_subtitle' => $subtitle,
  114. 'date_creation' => $current_date,
  115. 'visibility' => 1,
  116. 'session_id' => $session_id,
  117. ];
  118. $this_blog_id = Database::insert($tbl_blogs, $params);
  119. if ($this_blog_id > 0) {
  120. $sql = "UPDATE $tbl_blogs SET blog_id = iid WHERE iid = $this_blog_id";
  121. Database::query($sql);
  122. // insert into item_property
  123. api_item_property_update(
  124. api_get_course_info(),
  125. TOOL_BLOGS,
  126. $this_blog_id,
  127. 'BlogAdded',
  128. api_get_user_id()
  129. );
  130. }
  131. // Make first post. :)
  132. $params = [
  133. 'post_id' => 0,
  134. 'c_id' => $course_id,
  135. 'title' => get_lang("Welcome"),
  136. 'full_text' => get_lang('FirstPostText'),
  137. 'date_creation' => $current_date,
  138. 'blog_id' => $this_blog_id,
  139. 'author_id' => $_user['user_id'],
  140. ];
  141. $postId = Database::insert($tbl_blogs_posts, $params);
  142. if ($postId) {
  143. $sql = "UPDATE $tbl_blogs_posts SET post_id = iid WHERE iid = $postId";
  144. Database::query($sql);
  145. }
  146. // Put it on course homepage
  147. $sql = "INSERT INTO $tbl_tool (c_id, name, link, image, visibility, admin, address, added_tool, session_id, target)
  148. VALUES ($course_id, '".Database::escape_string(
  149. $title
  150. )."','blog/blog.php?blog_id=".(int) $this_blog_id."','blog.gif','1','0','pastillegris.gif',0,'$session_id', '')";
  151. Database::query($sql);
  152. $toolId = Database::insert_id();
  153. if ($toolId) {
  154. $sql = "UPDATE $tbl_tool SET id = iid WHERE iid = $toolId";
  155. Database::query($sql);
  156. }
  157. // Subscribe the teacher to this blog
  158. Blog::subscribeUser($this_blog_id, $_user['user_id']);
  159. }
  160. }
  161. /**
  162. * Subscribes a user to a given blog
  163. * @author Toon Keppens
  164. *
  165. * @param Integer $blog_id
  166. * @param Integer $user_id
  167. */
  168. public static function subscribeUser($blog_id, $user_id)
  169. {
  170. // Init
  171. $tbl_blogs_rel_user = Database::get_course_table(TABLE_BLOGS_REL_USER);
  172. $tbl_user_permissions = Database::get_course_table(TABLE_PERMISSION_USER);
  173. $course_id = api_get_course_int_id();
  174. // Subscribe the user
  175. $sql = "INSERT INTO $tbl_blogs_rel_user (c_id, blog_id, user_id )
  176. VALUES ($course_id, '".(int) $blog_id."', '".(int) $user_id."');";
  177. Database::query($sql);
  178. // Give this user basic rights
  179. $sql = "INSERT INTO $tbl_user_permissions (c_id, user_id,tool,action)
  180. VALUES ($course_id, '".(int) $user_id."','BLOG_".(int) $blog_id."','article_add')";
  181. Database::query($sql);
  182. $id = Database::insert_id();
  183. if ($id) {
  184. $sql = "UPDATE $tbl_user_permissions SET id = iid WHERE iid = $id";
  185. Database::query($sql);
  186. }
  187. $sql = "INSERT INTO $tbl_user_permissions (c_id, user_id,tool,action)
  188. VALUES ($course_id, '".(int) $user_id."','BLOG_".(int) $blog_id."','article_comments_add')";
  189. Database::query($sql);
  190. $id = Database::insert_id();
  191. if ($id) {
  192. $sql = "UPDATE $tbl_user_permissions SET id = iid WHERE iid = $id";
  193. Database::query($sql);
  194. }
  195. }
  196. /**
  197. * Update title and subtitle of a blog in the given course
  198. * @author Toon Keppens
  199. * @param string $title
  200. */
  201. public static function editBlog($blog_id, $title, $subtitle = '')
  202. {
  203. // Table definitions
  204. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  205. $tbl_tool = Database::get_course_table(TABLE_TOOL_LIST);
  206. $course_id = api_get_course_int_id();
  207. // Update the blog
  208. $sql = "UPDATE $tbl_blogs SET
  209. blog_name = '".Database::escape_string($title)."',
  210. blog_subtitle = '".Database::escape_string($subtitle)."'
  211. WHERE
  212. c_id = $course_id AND
  213. blog_id ='".Database::escape_string((int) $blog_id)."'
  214. LIMIT 1";
  215. Database::query($sql);
  216. //update item_property (update)
  217. api_item_property_update(
  218. api_get_course_info(),
  219. TOOL_BLOGS,
  220. intval($blog_id),
  221. 'BlogUpdated',
  222. api_get_user_id()
  223. );
  224. // Update course homepage link
  225. $sql = "UPDATE $tbl_tool SET
  226. name = '".Database::escape_string($title)."'
  227. WHERE c_id = $course_id AND link = 'blog/blog.php?blog_id=".(int) $blog_id."'
  228. LIMIT 1";
  229. Database::query($sql);
  230. }
  231. /**
  232. * Deletes a blog and it's posts from the course database
  233. * @author Toon Keppens
  234. * @param Integer $blog_id The internal blog ID
  235. * @return void
  236. */
  237. public static function deleteBlog($blog_id)
  238. {
  239. // Init
  240. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  241. $tbl_blogs_posts = Database::get_course_table(TABLE_BLOGS_POSTS);
  242. $tbl_blogs_comment = Database::get_course_table(TABLE_BLOGS_COMMENTS);
  243. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  244. $tbl_tool = Database::get_course_table(TABLE_TOOL_LIST);
  245. $tbl_blogs_rating = Database::get_course_table(TABLE_BLOGS_RATING);
  246. $course_id = api_get_course_int_id();
  247. $blog_id = intval($blog_id);
  248. // Delete posts from DB and the attachments
  249. self::deleteAllBlogAttachments($blog_id);
  250. //Delete comments
  251. $sql = "DELETE FROM $tbl_blogs_comment WHERE c_id = $course_id AND blog_id ='".$blog_id."'";
  252. Database::query($sql);
  253. // Delete posts
  254. $sql = "DELETE FROM $tbl_blogs_posts WHERE c_id = $course_id AND blog_id ='".$blog_id."'";
  255. Database::query($sql);
  256. // Delete tasks
  257. $sql = "DELETE FROM $tbl_blogs_tasks WHERE c_id = $course_id AND blog_id ='".$blog_id."'";
  258. Database::query($sql);
  259. // Delete ratings
  260. $sql = "DELETE FROM $tbl_blogs_rating WHERE c_id = $course_id AND blog_id ='".$blog_id."'";
  261. Database::query($sql);
  262. // Delete blog
  263. $sql = "DELETE FROM $tbl_blogs WHERE c_id = $course_id AND blog_id ='".$blog_id."'";
  264. Database::query($sql);
  265. // Delete from course homepage
  266. $sql = "DELETE FROM $tbl_tool WHERE c_id = $course_id AND link = 'blog/blog.php?blog_id=".$blog_id."'";
  267. Database::query($sql);
  268. //update item_property (delete)
  269. api_item_property_update(
  270. api_get_course_info(),
  271. TOOL_BLOGS,
  272. $blog_id,
  273. 'delete',
  274. api_get_user_id()
  275. );
  276. }
  277. /**
  278. * Creates a new post in a given blog
  279. * @author Toon Keppens
  280. * @param String $title
  281. * @param String $full_text
  282. * @param Integer $blog_id
  283. */
  284. public static function createPost($title, $full_text, $file_comment, $blog_id)
  285. {
  286. $_user = api_get_user_info();
  287. $_course = api_get_course_info();
  288. $course_id = $_course['real_id'];
  289. $blog_table_attachment = Database::get_course_table(TABLE_BLOGS_ATTACHMENT);
  290. $upload_ok = true;
  291. $has_attachment = false;
  292. $current_date = api_get_utc_datetime();
  293. if (!empty($_FILES['user_upload']['name'])) {
  294. $upload_ok = process_uploaded_file($_FILES['user_upload']);
  295. $has_attachment = true;
  296. }
  297. if ($upload_ok) {
  298. // Table Definitions
  299. $tbl_blogs_posts = Database::get_course_table(TABLE_BLOGS_POSTS);
  300. // Create the post
  301. $sql = "INSERT INTO $tbl_blogs_posts (c_id, title, full_text, date_creation, blog_id, author_id )
  302. VALUES ($course_id, '".Database::escape_string($title)."', '".Database::escape_string(
  303. $full_text
  304. )."','".$current_date."', '".(int) $blog_id."', '".(int) $_user['user_id']."');";
  305. Database::query($sql);
  306. $last_post_id = Database::insert_id();
  307. if ($last_post_id) {
  308. $sql = "UPDATE $tbl_blogs_posts SET post_id = iid WHERE iid = $last_post_id";
  309. Database::query($sql);
  310. }
  311. if ($has_attachment) {
  312. $courseDir = $_course['path'].'/upload/blog';
  313. $sys_course_path = api_get_path(SYS_COURSE_PATH);
  314. $updir = $sys_course_path.$courseDir;
  315. // Try to add an extension to the file if it hasn't one
  316. $new_file_name = add_ext_on_mime(
  317. stripslashes($_FILES['user_upload']['name']),
  318. $_FILES['user_upload']['type']
  319. );
  320. // user's file name
  321. $file_name = $_FILES['user_upload']['name'];
  322. if (!filter_extension($new_file_name)) {
  323. Display::display_error_message(get_lang('UplUnableToSaveFileFilteredExtension'));
  324. } else {
  325. $new_file_name = uniqid('');
  326. $new_path = $updir.'/'.$new_file_name;
  327. $result = @move_uploaded_file($_FILES['user_upload']['tmp_name'], $new_path);
  328. $comment = Database::escape_string($file_comment);
  329. // Storing the attachments if any
  330. if ($result) {
  331. $sql = 'INSERT INTO '.$blog_table_attachment.'(c_id, filename,comment, path, post_id,size, blog_id,comment_id) '.
  332. "VALUES ($course_id, '".Database::escape_string(
  333. $file_name
  334. )."', '".$comment."', '".Database::escape_string(
  335. $new_file_name
  336. )."' , '".$last_post_id."', '".intval(
  337. $_FILES['user_upload']['size']
  338. )."', '".$blog_id."', '0' )";
  339. Database::query($sql);
  340. $id = Database::insert_id();
  341. if ($id) {
  342. $sql = "UPDATE $blog_table_attachment SET id = iid WHERE iid = $id";
  343. Database::query($sql);
  344. }
  345. }
  346. }
  347. }
  348. return $last_post_id;
  349. } else {
  350. Display::display_error_message(get_lang('UplNoFileUploaded'));
  351. }
  352. }
  353. /**
  354. * Edits a post in a given blog
  355. * @author Toon Keppens
  356. * @param int $post_id The internal ID of the post to edit
  357. * @param string $title The title
  358. * @param string $full_text The full post text
  359. * @param int $blog_id The internal ID of the blog in which the post is located
  360. */
  361. public static function editPost($post_id, $title, $full_text, $blog_id)
  362. {
  363. $tbl_blogs_posts = Database::get_course_table(TABLE_BLOGS_POSTS);
  364. $course_id = api_get_course_int_id();
  365. // Create the post
  366. $sql = "UPDATE $tbl_blogs_posts SET
  367. title = '".Database::escape_string($title)."',
  368. full_text = '".Database::escape_string($full_text)."'
  369. WHERE c_id = $course_id AND post_id ='".(int) $post_id."' AND blog_id ='".(int) $blog_id."'
  370. LIMIT 1 ";
  371. Database::query($sql);
  372. }
  373. /**
  374. * Deletes an article and its comments
  375. * @author Toon Keppens
  376. * @param int $blog_id The internal blog ID
  377. * @param int $post_id The internal post ID
  378. */
  379. public static function deletePost($blog_id, $post_id)
  380. {
  381. $tbl_blogs_posts = Database::get_course_table(TABLE_BLOGS_POSTS);
  382. $tbl_blogs_comments = Database::get_course_table(TABLE_BLOGS_COMMENTS);
  383. $tbl_blogs_rating = Database::get_course_table(TABLE_BLOGS_RATING);
  384. $blog_id = intval($blog_id);
  385. $post_id = intval($post_id);
  386. $course_id = api_get_course_int_id();
  387. // Delete ratings on this comment
  388. $sql = "DELETE FROM $tbl_blogs_rating
  389. WHERE c_id = $course_id AND blog_id = '".(int) $blog_id."' AND item_id = '".(int) $post_id."' AND rating_type = 'post'";
  390. Database::query($sql);
  391. // Delete the post
  392. $sql = "DELETE FROM $tbl_blogs_posts
  393. WHERE c_id = $course_id AND post_id = '".(int) $post_id."'";
  394. Database::query($sql);
  395. // Delete the comments
  396. $sql = "DELETE FROM $tbl_blogs_comments
  397. WHERE c_id = $course_id AND post_id = '".(int) $post_id."' AND blog_id = '".(int) $blog_id."'";
  398. Database::query($sql);
  399. // Delete posts and attachments
  400. self::deleteAllBlogAttachments($blog_id, $post_id);
  401. }
  402. /**
  403. * Creates a comment on a post in a given blog
  404. * @author Toon Keppens
  405. * @param String $title
  406. * @param String $full_text
  407. * @param Integer $blog_id
  408. * @param Integer $post_id
  409. * @param Integer $parent_id
  410. */
  411. public static function createComment(
  412. $title,
  413. $full_text,
  414. $file_comment,
  415. $blog_id,
  416. $post_id,
  417. $parent_id,
  418. $task_id = 'NULL'
  419. ) {
  420. $_user = api_get_user_info();
  421. $_course = api_get_course_info();
  422. $blog_table_attachment = Database::get_course_table(TABLE_BLOGS_ATTACHMENT);
  423. $upload_ok = true;
  424. $has_attachment = false;
  425. $current_date = api_get_utc_datetime();
  426. $course_id = api_get_course_int_id();
  427. if (!empty($_FILES['user_upload']['name'])) {
  428. $upload_ok = process_uploaded_file($_FILES['user_upload']);
  429. $has_attachment = true;
  430. }
  431. if ($upload_ok) {
  432. // Table Definition
  433. $tbl_blogs_comments = Database::get_course_table(TABLE_BLOGS_COMMENTS);
  434. // Create the comment
  435. $sql = "INSERT INTO $tbl_blogs_comments (c_id, title, comment, author_id, date_creation, blog_id, post_id, parent_comment_id, task_id )
  436. VALUES ($course_id, '".Database::escape_string($title)."', '".Database::escape_string(
  437. $full_text
  438. )."', '".(int) $_user['user_id']."','".$current_date."', '".(int) $blog_id."', '".(int) $post_id."', '".(int) $parent_id."', '".(int) $task_id."')";
  439. Database::query($sql);
  440. // Empty post values, or they are shown on the page again
  441. $last_id = Database::insert_id();
  442. if ($last_id) {
  443. $sql = "UPDATE $tbl_blogs_comments SET comment_id = iid WHERE iid = $last_id";
  444. Database::query($sql);
  445. }
  446. if ($has_attachment) {
  447. $courseDir = $_course['path'].'/upload/blog';
  448. $sys_course_path = api_get_path(SYS_COURSE_PATH);
  449. $updir = $sys_course_path.$courseDir;
  450. // Try to add an extension to the file if it hasn't one
  451. $new_file_name = add_ext_on_mime(
  452. stripslashes($_FILES['user_upload']['name']),
  453. $_FILES['user_upload']['type']
  454. );
  455. // user's file name
  456. $file_name = $_FILES['user_upload']['name'];
  457. if (!filter_extension($new_file_name)) {
  458. Display:: display_error_message(get_lang('UplUnableToSaveFileFilteredExtension'));
  459. } else {
  460. $new_file_name = uniqid('');
  461. $new_path = $updir.'/'.$new_file_name;
  462. $result = @move_uploaded_file($_FILES['user_upload']['tmp_name'], $new_path);
  463. $comment = Database::escape_string($file_comment);
  464. // Storing the attachments if any
  465. if ($result) {
  466. $sql = 'INSERT INTO '.$blog_table_attachment.'(c_id, filename,comment, path, post_id,size,blog_id,comment_id) '.
  467. "VALUES ($course_id, '".Database::escape_string(
  468. $file_name
  469. )."', '".$comment."', '".Database::escape_string(
  470. $new_file_name
  471. )."' , '".$post_id."', '".$_FILES['user_upload']['size']."', '".$blog_id."', '".$last_id."' )";
  472. Database::query($sql);
  473. $id = Database::insert_id();
  474. if ($id) {
  475. $sql = "UPDATE $blog_table_attachment SET id = iid WHERE iid = $id";
  476. Database::query($sql);
  477. }
  478. }
  479. }
  480. }
  481. }
  482. }
  483. /**
  484. * Deletes a comment from a blogpost
  485. * @author Toon Keppens
  486. * @param int $blog_id The internal blog ID
  487. * @param int $post_id The internal post ID
  488. * @param int $comment_id The internal comment ID
  489. */
  490. public static function deleteComment($blog_id, $post_id, $comment_id)
  491. {
  492. $tbl_blogs_comments = Database::get_course_table(TABLE_BLOGS_COMMENTS);
  493. $tbl_blogs_rating = Database::get_course_table(TABLE_BLOGS_RATING);
  494. $blog_id = intval($blog_id);
  495. $post_id = intval($post_id);
  496. $comment_id = intval($comment_id);
  497. $course_id = api_get_course_int_id();
  498. self::deleteAllBlogAttachments($blog_id, $post_id, $comment_id);
  499. // Delete ratings on this comment
  500. $sql = "DELETE FROM $tbl_blogs_rating
  501. WHERE
  502. c_id = $course_id AND
  503. blog_id = $blog_id AND
  504. item_id = $comment_id AND
  505. rating_type = 'comment'";
  506. Database::query($sql);
  507. // select comments that have the selected comment as their parent
  508. $sql = "SELECT comment_id FROM $tbl_blogs_comments
  509. WHERE c_id = $course_id AND parent_comment_id = $comment_id";
  510. $result = Database::query($sql);
  511. // Delete them recursively
  512. while ($comment = Database::fetch_array($result)) {
  513. Blog::deleteComment($blog_id, $post_id, $comment['comment_id']);
  514. }
  515. // Finally, delete the selected comment to
  516. $sql = "DELETE FROM $tbl_blogs_comments
  517. WHERE c_id = $course_id AND comment_id = $comment_id";
  518. Database::query($sql);
  519. }
  520. /**
  521. * Creates a new task in a blog
  522. * @author Toon Keppens
  523. * @param Integer $blog_id
  524. * @param String $title
  525. * @param String $description
  526. * @param String $color
  527. */
  528. public static function addTask(
  529. $blog_id,
  530. $title,
  531. $description,
  532. $articleDelete,
  533. $articleEdit,
  534. $commentsDelete,
  535. $color
  536. ) {
  537. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  538. $tbl_tasks_permissions = Database::get_course_table(TABLE_BLOGS_TASKS_PERMISSIONS);
  539. $course_id = api_get_course_int_id();
  540. // Create the task
  541. $sql = "INSERT INTO $tbl_blogs_tasks (c_id, blog_id, title, description, color, system_task)
  542. VALUES ($course_id , '".(int) $blog_id."', '".Database::escape_string(
  543. $title
  544. )."', '".Database::escape_string($description)."', '".Database::escape_string($color)."', '0');";
  545. Database::query($sql);
  546. $task_id = Database::insert_id();
  547. if ($task_id) {
  548. $sql = "UPDATE $tbl_blogs_tasks SET task_id = iid WHERE iid = $task_id";
  549. Database::query($sql);
  550. }
  551. $tool = 'BLOG_'.$blog_id;
  552. if ($articleDelete == 'on') {
  553. $sql = " INSERT INTO ".$tbl_tasks_permissions." ( c_id, task_id, tool, action) VALUES (
  554. '".(int) $course_id."',
  555. '".(int) $task_id."',
  556. '".Database::escape_string($tool)."',
  557. 'article_delete'
  558. )";
  559. Database::query($sql);
  560. $id = Database::insert_id();
  561. if ($id) {
  562. $sql = "UPDATE $tbl_tasks_permissions SET id = iid WHERE iid = $id";
  563. Database::query($sql);
  564. }
  565. }
  566. if ($articleEdit == 'on') {
  567. $sql = "
  568. INSERT INTO ".$tbl_tasks_permissions." (c_id, task_id, tool, action ) VALUES (
  569. '".(int) $course_id."',
  570. '".(int) $task_id."',
  571. '".Database::escape_string($tool)."',
  572. 'article_edit'
  573. )";
  574. Database::query($sql);
  575. $id = Database::insert_id();
  576. if ($id) {
  577. $sql = "UPDATE $tbl_tasks_permissions SET id = iid WHERE iid = $id";
  578. Database::query($sql);
  579. }
  580. }
  581. if ($commentsDelete == 'on') {
  582. $sql = "
  583. INSERT INTO ".$tbl_tasks_permissions." (c_id, task_id, tool, action ) VALUES (
  584. '".(int) $course_id."',
  585. '".(int) $task_id."',
  586. '".Database::escape_string($tool)."',
  587. 'article_comments_delete'
  588. )";
  589. Database::query($sql);
  590. $id = Database::insert_id();
  591. if ($id) {
  592. $sql = "UPDATE $tbl_tasks_permissions SET id = iid WHERE iid = $id";
  593. Database::query($sql);
  594. }
  595. }
  596. }
  597. /**
  598. * Edit a task in a blog
  599. * @author Toon Keppens
  600. * @param int $blog_id The internal blog ID
  601. * @param int $task_id The internal task ID
  602. * @param string $title The task title
  603. * @param string $description The task description
  604. * @param string $articleDelete Set to 'on' to register as 'article_delete' in tasks_permissions
  605. * @param string $articleEdit Set to 'on' to register as 'article_edit' in tasks_permissions
  606. * @param string $commentsDelete Set to 'on' to register as 'article_comments_delete' in tasks permissions
  607. * @param string $color The color code
  608. */
  609. public static function editTask(
  610. $blog_id,
  611. $task_id,
  612. $title,
  613. $description,
  614. $articleDelete,
  615. $articleEdit,
  616. $commentsDelete,
  617. $color
  618. ) {
  619. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  620. $tbl_tasks_permissions = Database::get_course_table(TABLE_BLOGS_TASKS_PERMISSIONS);
  621. $course_id = api_get_course_int_id();
  622. // Create the task
  623. $sql = "UPDATE $tbl_blogs_tasks SET
  624. title = '".Database::escape_string($title)."',
  625. description = '".Database::escape_string($description)."',
  626. color = '".Database::escape_string($color)."'
  627. WHERE c_id = $course_id AND task_id ='".(int) $task_id."' LIMIT 1";
  628. Database::query($sql);
  629. $tool = 'BLOG_'.$blog_id;
  630. $sql = "DELETE FROM ".$tbl_tasks_permissions."
  631. WHERE c_id = $course_id AND task_id = '".(int) $task_id."'";
  632. Database::query($sql);
  633. if ($articleDelete == 'on') {
  634. $sql = "INSERT INTO ".$tbl_tasks_permissions." ( c_id, task_id, tool, action) VALUES (
  635. '".(int) $course_id."',
  636. '".(int) $task_id."',
  637. '".Database::escape_string($tool)."',
  638. 'article_delete'
  639. )";
  640. Database::query($sql);
  641. $id = Database::insert_id();
  642. if ($id) {
  643. $sql = "UPDATE $tbl_tasks_permissions SET id = iid WHERE iid = $id";
  644. Database::query($sql);
  645. }
  646. }
  647. if ($articleEdit == 'on') {
  648. $sql = "INSERT INTO ".$tbl_tasks_permissions." (c_id, task_id, tool, action) VALUES (
  649. '".(int) $course_id."',
  650. '".(int) $task_id."',
  651. '".Database::escape_string($tool)."',
  652. 'article_edit'
  653. )";
  654. Database::query($sql);
  655. $id = Database::insert_id();
  656. if ($id) {
  657. $sql = "UPDATE $tbl_tasks_permissions SET id = iid WHERE iid = $id";
  658. Database::query($sql);
  659. }
  660. }
  661. if ($commentsDelete == 'on') {
  662. $sql = " INSERT INTO ".$tbl_tasks_permissions." (c_id, task_id, tool, action) VALUES (
  663. '".(int) $course_id."',
  664. '".(int) $task_id."',
  665. '".Database::escape_string($tool)."',
  666. 'article_comments_delete'
  667. )";
  668. Database::query($sql);
  669. $id = Database::insert_id();
  670. if ($id) {
  671. $sql = "UPDATE $tbl_tasks_permissions SET id = iid WHERE iid = $id";
  672. Database::query($sql);
  673. }
  674. }
  675. }
  676. /**
  677. * Deletes a task from a blog
  678. * @param int $blog_id
  679. * @param int $task_id
  680. * @return void
  681. */
  682. public static function deleteTask($blog_id, $task_id)
  683. {
  684. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  685. $course_id = api_get_course_int_id();
  686. $blog_id = intval($blog_id);
  687. $task_id = intval($task_id);
  688. // Delete posts
  689. $sql = "DELETE FROM $tbl_blogs_tasks
  690. WHERE c_id = $course_id AND blog_id = '".(int) $blog_id."' AND task_id = '".(int) $task_id."'";
  691. Database::query($sql);
  692. }
  693. /**
  694. * Deletes an assigned task from a blog
  695. * @param int $blog_id
  696. * @param int $task_id
  697. * @param int $user_id
  698. * @return void
  699. */
  700. public static function deleteAssignedTask($blog_id, $task_id, $user_id)
  701. {
  702. $tbl_blogs_tasks_rel_user = Database::get_course_table(TABLE_BLOGS_TASKS_REL_USER);
  703. $course_id = api_get_course_int_id();
  704. // Delete posts
  705. $sql = "DELETE FROM $tbl_blogs_tasks_rel_user
  706. WHERE
  707. c_id = $course_id AND
  708. blog_id = '".(int) $blog_id."' AND
  709. task_id = '".(int) $task_id."' AND
  710. user_id = '".(int) $user_id."'";
  711. Database::query($sql);
  712. }
  713. /**
  714. * Get personal task list
  715. * @author Toon Keppens
  716. * @return Returns an unsorted list (<ul></ul>) with the users' tasks
  717. */
  718. public static function getPersonalTasksList()
  719. {
  720. $_user = api_get_user_info();
  721. $html = null;
  722. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  723. $tbl_blogs_tasks_rel_user = Database::get_course_table(TABLE_BLOGS_TASKS_REL_USER);
  724. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  725. $course_id = api_get_course_int_id();
  726. if ($_user['user_id']) {
  727. $sql = "SELECT task_rel_user.*, task.title, blog.blog_name
  728. FROM $tbl_blogs_tasks_rel_user task_rel_user
  729. INNER JOIN $tbl_blogs_tasks task
  730. ON task_rel_user.task_id = task.task_id
  731. INNER JOIN $tbl_blogs blog
  732. ON task_rel_user.blog_id = blog.blog_id
  733. AND blog.blog_id = ".intval($_GET['blog_id'])."
  734. WHERE
  735. task.c_id = $course_id AND
  736. blog.c_id = $course_id AND
  737. task_rel_user.c_id = $course_id AND
  738. task_rel_user.user_id = ".(int) $_user['user_id']."
  739. ORDER BY target_date ASC";
  740. $result = Database::query($sql);
  741. if (Database::num_rows($result) > 0) {
  742. $html .= '<ul>';
  743. while ($mytask = Database::fetch_array($result)) {
  744. $html .= '<li><a href="blog.php?action=execute_task&blog_id='.$mytask['blog_id'].'&task_id='.stripslashes(
  745. $mytask['task_id']
  746. ).'" title="[Blog: '.stripslashes($mytask['blog_name']).'] '.get_lang(
  747. 'ExecuteThisTask'
  748. ).'">'.stripslashes($mytask['title']).'</a></li>';
  749. }
  750. $html .= '<ul>';
  751. } else {
  752. $html .= get_lang('NoTasks');
  753. }
  754. } else {
  755. $html .= get_lang('NoTasks');
  756. }
  757. return $html;
  758. }
  759. /**
  760. * Changes the visibility of a blog
  761. * @author Toon Keppens
  762. * @param Integer $blog_id
  763. */
  764. public static function changeBlogVisibility($blog_id)
  765. {
  766. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  767. $tbl_tool = Database::get_course_table(TABLE_TOOL_LIST);
  768. $course_id = api_get_course_int_id();
  769. // Get blog properties
  770. $sql = "SELECT blog_name, visibility FROM $tbl_blogs
  771. WHERE c_id = $course_id AND blog_id='".(int) $blog_id."'";
  772. $result = Database::query($sql);
  773. $blog = Database::fetch_array($result);
  774. $visibility = $blog['visibility'];
  775. $title = $blog['blog_name'];
  776. if ($visibility == 1) {
  777. // Change visibility state, remove from course home.
  778. $sql = "UPDATE $tbl_blogs SET visibility = '0'
  779. WHERE c_id = $course_id AND blog_id ='".(int) $blog_id."' LIMIT 1";
  780. Database::query($sql);
  781. $sql = "DELETE FROM $tbl_tool
  782. WHERE c_id = $course_id AND name = '".Database::escape_string($title)."' LIMIT 1";
  783. Database::query($sql);
  784. } else {
  785. // Change visibility state, add to course home.
  786. $sql = "UPDATE $tbl_blogs SET visibility = '1'
  787. WHERE c_id = $course_id AND blog_id ='".(int) $blog_id."' LIMIT 1";
  788. Database::query($sql);
  789. $sql = "INSERT INTO $tbl_tool (c_id, name, link, image, visibility, admin, address, added_tool, target )
  790. VALUES ($course_id, '".Database::escape_string(
  791. $title
  792. )."', 'blog/blog.php?blog_id=".(int) $blog_id."', 'blog.gif', '1', '0', 'pastillegris.gif', '0', '_self')";
  793. Database::query($sql);
  794. $id = Database::insert_id();
  795. if ($id) {
  796. $sql = "UPDATE $tbl_tool SET id = iid WHERE iid = $id";
  797. Database::query($sql);
  798. }
  799. }
  800. }
  801. /**
  802. * Display the search results
  803. * @param Integer $blog_id
  804. * @param String $query_string
  805. */
  806. public static function getSearchResults($blog_id, $query_string)
  807. {
  808. // Init
  809. $query_string = Database::escape_string($query_string);
  810. $query_string_parts = explode(' ', $query_string);
  811. $query_string = array();
  812. foreach ($query_string_parts as $query_part) {
  813. $query_string[] = " full_text LIKE '%".$query_part."%' OR title LIKE '%".$query_part."%' ";
  814. }
  815. $query_string = '('.implode('OR', $query_string).')';
  816. // Display the posts
  817. //echo '<span class="blogpost_title">' . get_lang('SearchResults') . '</span>';
  818. return Blog::getPosts($blog_id, $query_string);
  819. }
  820. /**
  821. * Shows the posts of a blog
  822. * @author Toon Keppens
  823. *
  824. * @param Integer $blog_id
  825. */
  826. public static function getPosts($blog_id, $filter = '1=1', $max_number_of_posts = 20)
  827. {
  828. // Init
  829. $tbl_blogs_posts = Database::get_course_table(TABLE_BLOGS_POSTS);
  830. $tbl_blogs_comments = Database::get_course_table(TABLE_BLOGS_COMMENTS);
  831. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  832. $course_id = api_get_course_int_id();
  833. // Get posts and authors
  834. $sql = "SELECT post.*, user.lastname, user.firstname, user.username
  835. FROM $tbl_blogs_posts post
  836. INNER JOIN $tbl_users user
  837. ON post.author_id = user.user_id
  838. WHERE post.blog_id = '".(int) $blog_id."' AND
  839. post.c_id = $course_id AND
  840. $filter
  841. ORDER BY post_id DESC LIMIT 0,".(int) $max_number_of_posts;
  842. $result = Database::query($sql);
  843. // Display
  844. if (Database::num_rows($result) > 0) {
  845. $limit = 200;
  846. while ($blog_post = Database::fetch_array($result)) {
  847. // Get number of comments
  848. $sql = "SELECT COUNT(1) as number_of_comments
  849. FROM $tbl_blogs_comments
  850. WHERE
  851. c_id = $course_id AND
  852. blog_id = '".(int) $blog_id."' AND
  853. post_id = '".(int) $blog_post['post_id']."'";
  854. $tmp = Database::query($sql);
  855. $blog_post_comments = Database::fetch_array($tmp);
  856. $fileArray = self::getBlogAttachments($blog_id, $blog_post['post_id'], 0);
  857. $scoreRanking = Blog::displayRating('post',$blog_id,$blog_post['post_id']);
  858. // Prepare data
  859. $article = [
  860. 'id_blog' => $blog_post['blog_id'],
  861. 'c_id' => $blog_post['c_id'],
  862. 'id_post' => $blog_post['post_id'],
  863. 'id_autor' => $blog_post['author_id'],
  864. 'autor' => $blog_post['firstname'].' '.$blog_post['lastname'],
  865. 'username' => $blog_post['username'],
  866. 'title' => stripslashes($blog_post['title']),
  867. 'extract' => self::getPostExtract($blog_post['full_text'], BLOG_MAX_PREVIEW_CHARS),
  868. 'content' => stripslashes($blog_post['full_text']),
  869. 'post_date' => api_convert_and_format_date($blog_post['date_creation']),
  870. 'n_comments' => $blog_post_comments['number_of_comments'],
  871. 'files' => $fileArray,
  872. 'score_ranking' => $scoreRanking
  873. ];
  874. $listArticle[] = $article;
  875. }
  876. return $listArticle;
  877. } else {
  878. if ($filter == '1=1') {
  879. return get_lang('NoArticles');
  880. } else {
  881. return get_lang('NoArticleMatches');
  882. }
  883. }
  884. }
  885. /**
  886. * Display posts from a certain date
  887. *
  888. * @param Integer $blog_id
  889. * @param String $query_string
  890. */
  891. public static function getDailyResults($blog_id, $query_string)
  892. {
  893. //$date_output = $query_string;
  894. $date = explode('-', $query_string);
  895. $query_string = ' DAYOFMONTH(date_creation) ='.intval($date[2]).' AND MONTH(date_creation) ='.intval(
  896. $date[1]
  897. ).' AND YEAR(date_creation) ='.intval($date[0]);
  898. // Put date in correct output format
  899. //$date_output = api_format_date($date_output, DATE_FORMAT_LONG);
  900. // Display the posts
  901. //echo '<span class="blogpost_title">' . get_lang('PostsOf') . ': ' . $date_output . '</span>';
  902. $list = Blog::getPosts($blog_id, $query_string);
  903. return $list;
  904. }
  905. /**
  906. * Displays a post and his comments
  907. *
  908. * @param Integer $blog_id
  909. * @param Integer $post_id
  910. */
  911. public static function getSinglePost($blog_id, $post_id)
  912. {
  913. $tbl_blogs_posts = Database::get_course_table(TABLE_BLOGS_POSTS);
  914. $tbl_blogs_comments = Database::get_course_table(TABLE_BLOGS_COMMENTS);
  915. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  916. $listComments = null;
  917. global $charset, $dateFormatLong;
  918. $course_id = api_get_course_int_id();
  919. // Get posts and author
  920. $sql = "SELECT post.*, user.lastname, user.firstname, user.username
  921. FROM $tbl_blogs_posts post
  922. INNER JOIN $tbl_users user
  923. ON post.author_id = user.user_id
  924. WHERE
  925. post.c_id = $course_id AND
  926. post.blog_id = '".(int) $blog_id."' AND
  927. post.post_id = '".(int) $post_id."'
  928. ORDER BY post_id DESC";
  929. $result = Database::query($sql);
  930. $blog_post = Database::fetch_array($result);
  931. // Get number of comments
  932. $sql = "SELECT COUNT(1) as number_of_comments
  933. FROM $tbl_blogs_comments
  934. WHERE c_id = $course_id AND blog_id = '".(int) $blog_id."' AND post_id = '".(int) $post_id."'";
  935. $result = Database::query($sql);
  936. $blog_post_comments = Database::fetch_array($result);
  937. $blogActions = null;
  938. $task_id = (isset($_GET['task_id']) && is_numeric($_GET['task_id'])) ? intval($_GET['task_id']) : 0;
  939. // Display comments if there are any
  940. if ($blog_post_comments['number_of_comments'] > 0) {
  941. $listComments = Blog::getThreadedComments(0, 0, $blog_id, $post_id, $task_id);
  942. }
  943. // Display comment form
  944. if (api_is_allowed('BLOG_'.$blog_id, 'article_comments_add')) {
  945. $formComments = Blog::displayCommentCreateForm($blog_id, $post_id, $blog_post['title'], false);
  946. }
  947. // Prepare data
  948. $fileArray = self::getBlogAttachments($blog_id, $post_id);
  949. $post_text = make_clickable(stripslashes($blog_post['full_text']));
  950. $post_text = stripslashes($post_text);
  951. if (api_is_allowed('BLOG_'.$blog_id, 'article_edit', $task_id)) {
  952. $blogActions .= '<a class="btn btn-default" href="blog.php?action=edit_post&blog_id='.$blog_id.'&post_id='.$post_id.'&article_id='.$blog_post['post_id'].'&task_id='.$task_id.'" title="'.get_lang('EditThisPost').'">';
  953. $blogActions .= Display::return_icon('edit.png', get_lang('Edit'), null, ICON_SIZE_TINY);
  954. $blogActions .= '</a>';
  955. }
  956. if (api_is_allowed('BLOG_'.$blog_id, 'article_delete', $task_id)) {
  957. $blogActions .= '<a class="btn btn-default" href="blog.php?action=view_post&blog_id='.$blog_id.'&post_id='.$post_id.'&do=delete_article&article_id='.$blog_post['post_id'].'&task_id='.$task_id.'" title="'.get_lang(
  958. 'DeleteThisArticle'
  959. ).'" onclick="javascript:if(!confirm(\''.addslashes(
  960. api_htmlentities(get_lang("ConfirmYourChoice"), ENT_QUOTES, $charset)
  961. ).'\')) return false;">';
  962. $blogActions .= Display::return_icon('delete.png', get_lang('Delete'), null, ICON_SIZE_TINY);
  963. $blogActions .= '</a>';
  964. }
  965. $scoreRanking = Blog::displayRating('post',$blog_id,$post_id);
  966. $article = [
  967. 'id_blog' => $blog_post['blog_id'],
  968. 'c_id' => $blog_post['c_id'],
  969. 'id_post' => $blog_post['post_id'],
  970. 'id_author' => $blog_post['author_id'],
  971. 'author' => $blog_post['firstname'].' '.$blog_post['lastname'],
  972. 'username' => $blog_post['username'],
  973. 'title' => stripslashes($blog_post['title']),
  974. 'extract' => api_get_short_text_from_html(stripslashes($blog_post['full_text']), 400),
  975. 'content' => $post_text,
  976. 'post_date' => api_convert_and_format_date($blog_post['date_creation']),
  977. 'n_comments' => $blog_post_comments['number_of_comments'],
  978. 'files' => $fileArray,
  979. 'id_task' => $task_id,
  980. 'comments' => $listComments,
  981. 'form_html' => $formComments,
  982. 'actions' => $blogActions,
  983. 'score_ranking' => (int)$scoreRanking,
  984. 'frm_rating' => api_is_allowed('BLOG_'.$blog_id, 'article_rate')
  985. ? Blog::displayRatingCreateForm('post', $blog_id, $post_id)
  986. : null
  987. ];
  988. return $article;
  989. }
  990. /**
  991. * This functions gets all replys to a post, threaded.
  992. *
  993. * @param Integer $current
  994. * @param Integer $current_level
  995. * @param Integer $blog_id
  996. * @param Integer $post_id
  997. */
  998. public static function getThreadedComments($current = 0, $current_level = 0, $blog_id, $post_id, $task_id = 0)
  999. {
  1000. $tbl_blogs_comments = Database::get_course_table(TABLE_BLOGS_COMMENTS);
  1001. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  1002. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  1003. $charset = api_get_system_encoding();
  1004. $course_id = api_get_course_int_id();
  1005. $listComments = [];
  1006. // Select top level comments
  1007. $next_level = $current_level + 1;
  1008. $sql = "SELECT comments.*, user.lastname, user.firstname, user.username, task.color
  1009. FROM $tbl_blogs_comments comments
  1010. INNER JOIN $tbl_users user
  1011. ON comments.author_id = user.user_id
  1012. LEFT JOIN $tbl_blogs_tasks task
  1013. ON comments.task_id = task.task_id AND task.c_id = $course_id
  1014. WHERE
  1015. comments.c_id = $course_id AND
  1016. parent_comment_id = $current AND
  1017. comments.blog_id = '".(int) $blog_id."' AND
  1018. comments.post_id = '".(int) $post_id."'";
  1019. $result = Database::query($sql);
  1020. $html = null;
  1021. while ($comment = Database::fetch_array($result)) {
  1022. $commentActions = null;
  1023. $ratingSelect = null;
  1024. $comment_text = make_clickable(stripslashes($comment['comment']));
  1025. $comment_text = stripslashes($comment_text);
  1026. $infoUser = UserManager::getUserPicture($comment['author_id']);
  1027. $commentActions .= Display::toolbarButton(
  1028. get_lang('ReplyToThisComment'),
  1029. '#',
  1030. 'reply',
  1031. 'default',
  1032. ['data-id' => $comment['iid'], 'role' => 'button', 'class' => 'btn-reply-to'],
  1033. false
  1034. );
  1035. if (api_is_allowed('BLOG_'.$blog_id, 'article_comments_delete', $task_id)) {
  1036. $commentActions .= ' <a class="btn btn-default" href="blog.php?action=view_post&blog_id='.$blog_id.'&post_id='.$post_id.'&do=delete_comment&comment_id='.$comment['comment_id'].'&task_id='.$task_id.'" title="'.get_lang(
  1037. 'DeleteThisComment'
  1038. ).'" onclick="javascript:if(!confirm(\''.addslashes(
  1039. api_htmlentities(get_lang("ConfirmYourChoice"), ENT_QUOTES, $charset)
  1040. ).'\')) return false;">';
  1041. $commentActions .= Display::returnFontAwesomeIcon('trash');
  1042. $commentActions .= '</a>';
  1043. }
  1044. if (api_is_allowed('BLOG_'.$blog_id, 'article_comments_rate')) {
  1045. $ratingSelect = Blog::displayRatingCreateForm('comment', $blog_id, $post_id, $comment['comment_id']);
  1046. }
  1047. $scoreRanking = self::displayRating('comment', $blog_id, $comment['comment_id']);
  1048. //Files
  1049. $fileArray = self::getBlogAttachments($blog_id, $post_id, $comment['comment_id']);
  1050. $comments = [
  1051. 'iid' => $comment['iid'],
  1052. 'id_comment' => $comment['comment_id'],
  1053. 'id_curso' => $comment['c_id'],
  1054. 'title' => $comment['title'],
  1055. 'content' => $comment_text,
  1056. 'id_author' => $comment['author_id'],
  1057. 'comment_date' => api_convert_and_format_date($comment['date_creation']),
  1058. 'id_blog' => $comment['blog_id'],
  1059. 'id_post' => $comment['post_id'],
  1060. 'id_task' => $comment['task_id'],
  1061. 'id_parent' => $comment['parent_comment_id'],
  1062. 'name_author' => api_get_person_name($comment['firstname'], $comment['lastname']),
  1063. 'info_user' => $infoUser,
  1064. 'username' => $comment['username'],
  1065. 'color' => $comment['color'],
  1066. 'files' => $fileArray,
  1067. 'actions' => $commentActions,
  1068. 'form_ranking' => $ratingSelect,
  1069. 'score_ranking' => $scoreRanking,
  1070. 'comments' => self::getThreadedComments($comment['iid'], $next_level, $blog_id, $post_id)
  1071. ];
  1072. $listComments[] = $comments;
  1073. }
  1074. return $listComments;
  1075. }
  1076. /**
  1077. * Shows the rating form if not already rated by that user
  1078. * @author Toon Keppens
  1079. *
  1080. * @param String $type
  1081. * @param Integer $blog_id
  1082. * @param integer $post_id
  1083. */
  1084. public static function displayRatingCreateForm($type, $blog_id, $post_id, $comment_id = null)
  1085. {
  1086. $_user = api_get_user_info();
  1087. $tbl_blogs_rating = Database::get_course_table(TABLE_BLOGS_RATING);
  1088. $course_id = api_get_course_int_id();
  1089. $html = null;
  1090. if ($type == 'post') {
  1091. // Check if the user has already rated this post
  1092. $sql = "SELECT rating_id FROM $tbl_blogs_rating
  1093. WHERE c_id = $course_id AND
  1094. blog_id = '".(int) $blog_id."'
  1095. AND item_id = '".(int) $post_id."'
  1096. AND rating_type = '".Database::escape_string($type)."'
  1097. AND user_id = '".(int) $_user['user_id']."'";
  1098. $result = Database::query($sql);
  1099. // Add rating
  1100. if (Database::num_rows($result) == 0) {
  1101. $html .= '<form class="form-horizontal" method="get" action="blog.php" id="frm_rating_'.$type.'_'.$post_id.'" name="frm_rating_'.$type.'_'.$post_id.'">';
  1102. $html .= '<div class="form-group">';
  1103. $html .= '<label class="col-sm-3 control-label">'.get_lang('RateThis').'</label>';
  1104. $html .= '<div class="col-sm-9">';
  1105. $html .= '<select class="selectpicker" name="rating" onchange="document.forms[\'frm_rating_'.$type.'_'.$post_id.'\'].submit()"><option value="">-</option><option value="1">1</option><option value="2">2</option><option value="3">3</option><option value="4">4</option><option value="5">5</option><option value="6">6</option><option value="7">7</option><option value="8">8</option><option value="9">9</option><option value="10">10</option></select><input type="hidden" name="action" value="view_post" /><input type="hidden" name="type" value="'.$type.'" /><input type="hidden" name="do" value="rate" /><input type="hidden" name="blog_id" value="'.$blog_id.'" /><input type="hidden" name="post_id" value="'.$post_id.'" />';
  1106. $html .= '</div>';
  1107. $html .= '</div>';
  1108. $html .= '</form>';
  1109. return $html;
  1110. } else {
  1111. return '';
  1112. }
  1113. }
  1114. if ($type = 'comment') {
  1115. // Check if the user has already rated this comment
  1116. $sql = "SELECT rating_id FROM $tbl_blogs_rating
  1117. WHERE c_id = $course_id AND blog_id = '".(int) $blog_id."'
  1118. AND item_id = '".(int) $comment_id."'
  1119. AND rating_type = '".Database::escape_string($type)."'
  1120. AND user_id = '".(int) $_user['user_id']."' ";
  1121. $result = Database::query($sql);
  1122. if (Database::num_rows($result) == 0) {
  1123. $html .= '<form class="form-horizontal" method="get" action="blog.php" id="frm_rating_'.$type.'_'.$comment_id.'" name="frm_rating_'.$type.'_'.$comment_id.'">';
  1124. $html .= '<div class="form-group">';
  1125. $html .= '<label class="col-sm-3 control-label">'.get_lang('RateThis').'</label>';
  1126. $html .= '<div class="col-sm-9">';
  1127. $html .= '<select class="selectpicker" name="rating" onchange="document.forms[\'frm_rating_'.$type.'_'.$comment_id.'\'].submit()"><option value="">-</option><option value="1">1</option><option value="2">2</option><option value="3">3</option><option value="4">4</option><option value="5">5</option><option value="6">6</option><option value="7">7</option><option value="8">8</option><option value="9">9</option><option value="10">10</option></select><input type="hidden" name="action" value="view_post" /><input type="hidden" name="type" value="'.$type.'" /><input type="hidden" name="do" value="rate" /><input type="hidden" name="blog_id" value="'.$blog_id.'" /><input type="hidden" name="post_id" value="'.$post_id.'" /><input type="hidden" name="comment_id" value="'.$comment_id.'" />';
  1128. $html .= '</div>';
  1129. $html .= '</div>';
  1130. $html .= '</form>';
  1131. return $html;
  1132. } else {
  1133. return '';
  1134. }
  1135. }
  1136. }
  1137. /**
  1138. * Shows the rating of user
  1139. * @param String $type
  1140. * @param Integer $blog_id
  1141. * @param Integer $item_id
  1142. * @return array
  1143. */
  1144. public static function displayRating($type, $blog_id, $item_id)
  1145. {
  1146. $tbl_blogs_rating = Database::get_course_table(TABLE_BLOGS_RATING);
  1147. $course_id = api_get_course_int_id();
  1148. // Calculate rating
  1149. $sql = "SELECT AVG(rating) as rating FROM $tbl_blogs_rating
  1150. WHERE
  1151. c_id = $course_id AND
  1152. blog_id = '".(int) $blog_id."' AND
  1153. item_id = '".(int) $item_id."' AND
  1154. rating_type = '".Database::escape_string($type)."' ";
  1155. $result = Database::query($sql);
  1156. $result = Database::fetch_array($result);
  1157. return round($result['rating'], 2);
  1158. }
  1159. /**
  1160. * Displays the form to create a new post
  1161. * @author Toon Keppens
  1162. *
  1163. * @param Integer $blog_id
  1164. * @param Integer $post_id
  1165. */
  1166. public static function displayCommentCreateForm($blog_id, $post_id)
  1167. {
  1168. $taskId = !empty($_GET['task_id']) ? (int) $_GET['task_id'] : 0;
  1169. $form = new FormValidator(
  1170. 'add_post',
  1171. 'post',
  1172. api_get_self().'?'.api_get_cidreq().'&'.http_build_query([
  1173. 'action' => 'view_post',
  1174. 'blog_id' => (int) $blog_id,
  1175. 'post_id' => (int) $post_id,
  1176. 'task_id' => (int) $taskId
  1177. ]),
  1178. null,
  1179. array('enctype' => 'multipart/form-data')
  1180. );
  1181. $header = $taskId ? get_lang('ExecuteThisTask') : get_lang('AddNewComment');
  1182. $form->addHeader($header);
  1183. $form->addText('title', get_lang('Title'));
  1184. $config = array();
  1185. if (!api_is_allowed_to_edit()) {
  1186. $config['ToolbarSet'] = 'ProjectComment';
  1187. } else {
  1188. $config['ToolbarSet'] = 'ProjectCommentStudent';
  1189. }
  1190. $form->addHtmlEditor('comment', get_lang('Comment'), false, false, $config);
  1191. $form->addFile('user_upload', get_lang('AddAnAttachment'));
  1192. $form->addTextarea('post_file_comment', get_lang('FileComment'));
  1193. $form->addHidden('action', null);
  1194. $form->addHidden('comment_parent_id', 0);
  1195. $form->addHidden('task_id', $taskId);
  1196. $form->addButton('save', get_lang('Save'));
  1197. if ($form->validate()) {
  1198. $values = $form->exportValues();
  1199. Blog::createComment(
  1200. $values['title'],
  1201. $values['comment'],
  1202. $values['post_file_comment'],
  1203. $blog_id,
  1204. $post_id,
  1205. $values['comment_parent_id'],
  1206. $taskId
  1207. );
  1208. Display::addFlash(
  1209. Display::return_message(get_lang('CommentAdded'), 'success')
  1210. );
  1211. header(
  1212. 'Location: '
  1213. .api_get_self()
  1214. .'?'
  1215. .api_get_cidreq()
  1216. .'&'
  1217. .http_build_query([
  1218. 'blog_id' => $blog_id,
  1219. 'post_id' => $post_id,
  1220. 'action' => 'view_post',
  1221. 'task_id' => $taskId
  1222. ])
  1223. );
  1224. exit;
  1225. }
  1226. return $form->returnForm();
  1227. }
  1228. /**
  1229. * Adds rating to a certain post or comment
  1230. * @author Toon Keppens
  1231. *
  1232. * @param String $type
  1233. * @param Integer $blog_id
  1234. * @param Integer $item_id
  1235. * @param Integer $rating
  1236. *
  1237. * @return Boolean success
  1238. */
  1239. public static function addRating($type, $blog_id, $item_id, $rating)
  1240. {
  1241. $_user = api_get_user_info();
  1242. // Init
  1243. $tbl_blogs_rating = Database::get_course_table(TABLE_BLOGS_RATING);
  1244. $course_id = api_get_course_int_id();
  1245. // Check if the user has already rated this post/comment
  1246. $sql = "SELECT rating_id FROM $tbl_blogs_rating
  1247. WHERE
  1248. c_id = $course_id AND
  1249. blog_id = '".(int) $blog_id."' AND
  1250. item_id = '".(int) $item_id."' AND
  1251. rating_type = '".Database::escape_string($type)."' AND
  1252. user_id = '".(int) $_user['user_id']."'";
  1253. $result = Database::query($sql);
  1254. // Add rating
  1255. if (Database::num_rows($result) == 0) {
  1256. $sql = "INSERT INTO $tbl_blogs_rating (c_id, blog_id, rating_type, item_id, user_id, rating )
  1257. VALUES ($course_id, '".(int) $blog_id."', '".Database::escape_string(
  1258. $type
  1259. )."', '".(int) $item_id."', '".(int) $_user['user_id']."', '".Database::escape_string($rating)."')";
  1260. Database::query($sql);
  1261. $id = Database::insert_id();
  1262. if ($id) {
  1263. $sql = "UPDATE $tbl_blogs_rating SET rating_id = iid WHERE iid = $id";
  1264. Database::query($sql);
  1265. }
  1266. return true;
  1267. } else {
  1268. return false;
  1269. }
  1270. }
  1271. /**
  1272. * Displays the form to create a new post
  1273. * @author Toon Keppens
  1274. *
  1275. * @param Integer $blog_id
  1276. */
  1277. public static function displayPostCreateForm($blog_id)
  1278. {
  1279. $blog_id = intval($blog_id);
  1280. if (!api_is_allowed('BLOG_'.$blog_id, 'article_add')) {
  1281. api_not_allowed();
  1282. }
  1283. $form = new FormValidator(
  1284. 'add_post',
  1285. 'post',
  1286. api_get_path(WEB_CODE_PATH)."blog/blog.php?action=new_post&blog_id=".$blog_id."&".api_get_cidreq(),
  1287. null,
  1288. array('enctype' => 'multipart/form-data')
  1289. );
  1290. $form->addHidden('post_title_edited', 'false');
  1291. $form->addHeader(get_lang('NewPost'));
  1292. $form->addText('title', get_lang('Title'));
  1293. $config = array();
  1294. $config['ToolbarSet'] = !api_is_allowed_to_edit() ? 'ProjectStudent' : 'Project';
  1295. $form->addHtmlEditor('full_text', get_lang('Content'), false, false, $config);
  1296. $form->addFile('user_upload', get_lang('AddAnAttachment'));
  1297. $form->addTextarea('post_file_comment', get_lang('FileComment'));
  1298. $form->addHidden('new_post_submit', 'true');
  1299. $form->addButton('save', get_lang('Save'));
  1300. if ($form->validate()) {
  1301. $values = $form->exportValues();
  1302. $postId = Blog::createPost(
  1303. $values['title'],
  1304. $values['full_text'],
  1305. $values['post_file_comment'],
  1306. $blog_id
  1307. );
  1308. if ($postId) {
  1309. Display::addFlash(
  1310. Display::return_message(get_lang('BlogAdded'), 'success')
  1311. );
  1312. header('Location: '.api_get_self().'?'.api_get_cidreq().'&'.http_build_query([
  1313. 'action' => 'view_post',
  1314. 'blog_id' => $blog_id,
  1315. 'post_id' => $postId,
  1316. ]));
  1317. exit;
  1318. }
  1319. }
  1320. return $form->returnForm();
  1321. }
  1322. /**
  1323. * Displays the form to edit a post
  1324. * @author Toon Keppens
  1325. *
  1326. * @param Integer $blog_id
  1327. */
  1328. public static function displayPostEditForm($blog_id, $post_id)
  1329. {
  1330. $tbl_blogs_posts = Database::get_course_table(TABLE_BLOGS_POSTS);
  1331. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  1332. $course_id = api_get_course_int_id();
  1333. // Get posts and author
  1334. $sql = "SELECT post.*, user.lastname, user.firstname
  1335. FROM $tbl_blogs_posts post
  1336. INNER JOIN $tbl_users user ON post.author_id = user.user_id
  1337. WHERE
  1338. post.c_id = $course_id AND
  1339. post.blog_id = '".(int) $blog_id."'
  1340. AND post.post_id = '".(int) $post_id."'
  1341. ORDER BY post_id DESC";
  1342. $result = Database::query($sql);
  1343. $blog_post = Database::fetch_array($result);
  1344. // Form
  1345. $form = new FormValidator(
  1346. 'edit_post',
  1347. 'post',
  1348. api_get_path(WEB_CODE_PATH).'blog/blog.php?action=edit_post&post_id='.intval(
  1349. $_GET['post_id']
  1350. ).'&blog_id='.intval($blog_id).'&article_id='.intval($_GET['article_id']).'&task_id='.intval(
  1351. $_GET['task_id']
  1352. )
  1353. );
  1354. $form->addHeader(get_lang('EditPost'));
  1355. $form->addText('title', get_lang('Title'));
  1356. if (!api_is_allowed_to_edit()) {
  1357. $config['ToolbarSet'] = 'ProjectStudent';
  1358. } else {
  1359. $config['ToolbarSet'] = 'Project';
  1360. }
  1361. $form->addHtmlEditor('full_text', get_lang('Content'), false, false, $config);
  1362. $form->addHidden('action', '');
  1363. $form->addHidden('edit_post_submit', 'true');
  1364. $form->addHidden('post_id', intval($_GET['post_id']));
  1365. $form->addButton('save', get_lang('Save'));
  1366. $form->setDefaults($blog_post);
  1367. return $form->return_form();
  1368. }
  1369. /**
  1370. * Displays a list of tasks in this blog
  1371. * @author Toon Keppens
  1372. *
  1373. * @param int $blog_id
  1374. * @return string
  1375. */
  1376. public static function displayTasksList($blog_id)
  1377. {
  1378. global $charset;
  1379. $course_id = api_get_course_int_id();
  1380. $html = '';
  1381. if (api_is_allowed('BLOG_'.$blog_id, 'article_add')) {
  1382. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  1383. $counter = 0;
  1384. global $color2;
  1385. $html .= '<div class="actions">';
  1386. $html .= '<a href="'.api_get_self().'?action=manage_tasks&blog_id='.$blog_id.'&do=add">';
  1387. $html .= Display::return_icon('blog_newtasks.gif', get_lang('AddTasks'));
  1388. $html .= get_lang('AddTasks').'</a> ';
  1389. $html .= '<a href="'.api_get_self().'?action=manage_tasks&blog_id='.$blog_id.'&do=assign">';
  1390. $html .= Display::return_icon('blog_task.gif', get_lang('AssignTasks'));
  1391. $html .= get_lang('AssignTasks').'</a>';
  1392. $html .= Display::url(
  1393. Display::return_icon('blog_admin_users.png', get_lang('RightsManager')),
  1394. api_get_self().'?'.http_build_query([
  1395. 'action' => 'manage_rights',
  1396. 'blog_id' => $blog_id
  1397. ]),
  1398. ['title' => get_lang('ManageRights')]
  1399. );
  1400. $html .= '</div>';
  1401. $html .= '<span class="blogpost_title">'.get_lang('TaskList').'</span><br />';
  1402. $html .= "<table class=\"data_table\">";
  1403. $html .= "<tr bgcolor=\"$color2\" align=\"center\" valign=\"top\">"
  1404. ."<th width='240'><b>".get_lang('Title')."</b></th>"
  1405. ."<th><b>".get_lang('Description')."</b></th>"
  1406. ."<th><b>".get_lang('Color')."</b></th>"
  1407. ."<th width='50'><b>".get_lang('Modify')."</b></th></tr>";
  1408. $sql = " SELECT
  1409. blog_id,
  1410. task_id,
  1411. blog_id,
  1412. title,
  1413. description,
  1414. color,
  1415. system_task
  1416. FROM ".$tbl_blogs_tasks."
  1417. WHERE c_id = $course_id AND blog_id = ".(int) $blog_id."
  1418. ORDER BY system_task, title";
  1419. $result = Database::query($sql);
  1420. while ($task = Database::fetch_array($result)) {
  1421. $counter++;
  1422. $css_class = (($counter % 2) == 0) ? "row_odd" : "row_even";
  1423. $delete_icon = ($task['system_task'] == '1') ? "delete_na.png" : "delete.png";
  1424. $delete_title = ($task['system_task'] == '1') ? get_lang('DeleteSystemTask') : get_lang('DeleteTask');
  1425. $delete_link = ($task['system_task'] == '1') ? '#' : api_get_self(
  1426. ).'?action=manage_tasks&blog_id='.$task['blog_id'].'&do=delete&task_id='.$task['task_id'];
  1427. $delete_confirm = ($task['system_task'] == '1') ? '' : 'onclick="javascript:if(!confirm(\''.addslashes(
  1428. api_htmlentities(get_lang("ConfirmYourChoice"), ENT_QUOTES, $charset)
  1429. ).'\')) return false;"';
  1430. $html .= '<tr class="'.$css_class.'" valign="top">';
  1431. $html .= '<td width="240">'.Security::remove_XSS($task['title']).'</td>';
  1432. $html .= '<td>'.Security::remove_XSS($task['description']).'</td>';
  1433. $html .= '<td><span style="background-color: #'.$task['color'].'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span></td>';
  1434. $html .= '<td width="50">';
  1435. $html .= '<a href="'.api_get_self(
  1436. ).'?action=manage_tasks&blog_id='.$task['blog_id'].'&do=edit&task_id='.$task['task_id'].'">';
  1437. $html .= Display::return_icon('edit.png', get_lang('EditTask'));
  1438. $html .= "</a>";
  1439. $html .= '<a href="'.$delete_link.'"';
  1440. $html .= $delete_confirm;
  1441. $html .= '>';
  1442. $html .= Display::return_icon($delete_icon, $delete_title);
  1443. $html .= "</a>";
  1444. $html .= '</td>';
  1445. $html .= '</tr>';
  1446. }
  1447. $html .= "</table>";
  1448. }
  1449. return $html;
  1450. }
  1451. /**
  1452. * Displays a list of tasks assigned to a user in this blog
  1453. * @author Toon Keppens
  1454. *
  1455. * @param Integer $blog_id
  1456. */
  1457. public static function displayAssignedTasksList($blog_id)
  1458. {
  1459. // Init
  1460. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  1461. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  1462. $tbl_blogs_tasks_rel_user = Database::get_course_table(TABLE_BLOGS_TASKS_REL_USER);
  1463. $counter = 0;
  1464. global $charset, $color2;
  1465. $return = '<span class="blogpost_title">'.get_lang('AssignedTasks').'</span><br />';
  1466. $return .= "<table class=\"data_table\">";
  1467. $return .= "<tr bgcolor=\"$color2\" align=\"center\" valign=\"top\">"
  1468. ."<th width='240'><b>".get_lang('Member')."</b></th>"
  1469. ."<th><b>".get_lang('Task')."</b></th>"
  1470. ."<th><b>".get_lang('Description')."</b></th>"
  1471. ."<th><b>".get_lang('TargetDate')."</b></th>"
  1472. ."<th width='50'><b>".get_lang('Modify')."</b></th>"
  1473. ."</tr>";
  1474. $course_id = api_get_course_int_id();
  1475. $sql = "SELECT task_rel_user.*, task.title, user.firstname, user.lastname, user.username, task.description, task.system_task, task.blog_id, task.task_id
  1476. FROM $tbl_blogs_tasks_rel_user task_rel_user
  1477. INNER JOIN $tbl_blogs_tasks task ON task_rel_user.task_id = task.task_id
  1478. INNER JOIN $tbl_users user ON task_rel_user.user_id = user.user_id
  1479. WHERE
  1480. task_rel_user.c_id = $course_id AND
  1481. task.c_id = $course_id AND
  1482. task_rel_user.blog_id = '".(int) $blog_id."'
  1483. ORDER BY target_date ASC";
  1484. $result = Database::query($sql);
  1485. while ($assignment = Database::fetch_array($result)) {
  1486. $counter++;
  1487. $css_class = (($counter % 2) == 0) ? "row_odd" : "row_even";
  1488. $delete_icon = ($assignment['system_task'] == '1') ? "delete_na.png" : "delete.png";
  1489. $delete_title = ($assignment['system_task'] == '1') ? get_lang('DeleteSystemTask') : get_lang('DeleteTask');
  1490. $delete_link = ($assignment['system_task'] == '1') ? '#' : api_get_self(
  1491. ).'?action=manage_tasks&blog_id='.$assignment['blog_id'].'&do=delete&task_id='.$assignment['task_id'];
  1492. $delete_confirm = ($assignment['system_task'] == '1') ? '' : 'onclick="javascript:if(!confirm(\''.addslashes(
  1493. api_htmlentities(get_lang("ConfirmYourChoice"), ENT_QUOTES, $charset)
  1494. ).'\')) return false;"';
  1495. $username = api_htmlentities(sprintf(get_lang('LoginX'), $assignment['username']), ENT_QUOTES);
  1496. $return .='<tr class="'.$css_class.'" valign="top">';
  1497. $return .='<td width="240">'.Display::tag(
  1498. 'span',
  1499. api_get_person_name($assignment['firstname'], $assignment['lastname']),
  1500. array('title' => $username)
  1501. ).'</td>';
  1502. $return .= '<td>'.stripslashes($assignment['title']).'</td>';
  1503. $return .= '<td>'.stripslashes($assignment['description']).'</td>';
  1504. $return .= '<td>'.$assignment['target_date'].'</td>';
  1505. $return .= '<td width="50">';
  1506. $return .= '<a href="'.api_get_self(
  1507. ).'?action=manage_tasks&blog_id='.$assignment['blog_id'].'&do=edit_assignment&task_id='.$assignment['task_id'].'&user_id='.$assignment['user_id'].'">';
  1508. $return .= Display::return_icon('edit.png', get_lang('EditTask'));
  1509. $return .= "</a>";
  1510. $return .= '<a href="'.api_get_self(
  1511. ).'?action=manage_tasks&blog_id='.$assignment['blog_id'].'&do=delete_assignment&task_id='.$assignment['task_id'].'&user_id='.$assignment['user_id'].'" ';
  1512. $return .= 'onclick="javascript:if(!confirm(\''.addslashes(
  1513. api_htmlentities(get_lang("ConfirmYourChoice"), ENT_QUOTES, $charset)
  1514. ).'\')) return false;"';
  1515. $return .= Display::return_icon($delete_icon, $delete_title);
  1516. $return .= "</a>";
  1517. $return .= '</td>';
  1518. $return .= '</tr>';
  1519. }
  1520. $return .= "</table>";
  1521. return $return;
  1522. }
  1523. /**
  1524. * Displays new task form
  1525. * @author Toon Keppens
  1526. *
  1527. */
  1528. public static function displayTaskCreateForm($blog_id)
  1529. {
  1530. // Init
  1531. $colors = array(
  1532. 'FFFFFF',
  1533. 'FFFF99',
  1534. 'FFCC99',
  1535. 'FF9933',
  1536. 'FF6699',
  1537. 'CCFF99',
  1538. 'CC9966',
  1539. '66FF00',
  1540. '9966FF',
  1541. 'CF3F3F',
  1542. '990033',
  1543. '669933',
  1544. '0033FF',
  1545. '003366',
  1546. '000000',
  1547. );
  1548. // form
  1549. $return = '<form name="add_task" method="post" action="blog.php?action=manage_tasks&blog_id='.$blog_id.'">';
  1550. // form title
  1551. $return .= '<legend>'.get_lang('AddTask').'</legend>';
  1552. // task title
  1553. $return .= ' <div class="control-group">
  1554. <label class="control-label">
  1555. <span class="form_required">*</span>'.get_lang('Title').'
  1556. </label>
  1557. <div class="controls">
  1558. <input name="task_name" type="text" size="70" />
  1559. </div>
  1560. </div>';
  1561. // task comment
  1562. $return .= ' <div class="control-group">
  1563. <label class="control-label">
  1564. '.get_lang('Description').'
  1565. </label>
  1566. <div class="controls">
  1567. <textarea name="task_description" cols="45"></textarea>
  1568. </div>
  1569. </div>';
  1570. // task management
  1571. $return .= ' <div class="control-group">
  1572. <label class="control-label">
  1573. '.get_lang('TaskManager').'
  1574. </label>
  1575. <div class="controls">';
  1576. $return .= '<table class="data_table" cellspacing="0" style="border-collapse:collapse; width:446px;">';
  1577. $return .= '<tr>';
  1578. $return .= '<th colspan="2" style="width:223px;">'.get_lang('ArticleManager').'</th>';
  1579. $return .= '<th width:223px;>'.get_lang('CommentManager').'</th>';
  1580. $return .= '</tr>';
  1581. $return .= '<tr>';
  1582. $return .= '<th style="width:111px;"><label for="articleDelete">'.get_lang('Delete').'</label></th>';
  1583. $return .= '<th style="width:112px;"><label for="articleEdit">'.get_lang('Edit').'</label></th>';
  1584. $return .= '<th style="width:223px;"><label for="commentsDelete">'.get_lang('Delete').'</label></th>';
  1585. $return .= '</tr>';
  1586. $return .= '<tr>';
  1587. $return .= '<td style="text-align:center;"><input id="articleDelete" name="chkArticleDelete" type="checkbox" /></td>';
  1588. $return .= '<td style="text-align:center;"><input id="articleEdit" name="chkArticleEdit" type="checkbox" /></td>';
  1589. $return .= '<td style="border:1px dotted #808080; text-align:center;"><input id="commentsDelete" name="chkCommentsDelete" type="checkbox" /></td>';
  1590. $return .= '</tr>';
  1591. $return .= '</table>';
  1592. $return .= ' </div>
  1593. </div>';
  1594. // task color
  1595. $return .= ' <div class="control-group">
  1596. <label class="control-label">
  1597. '.get_lang('Color').'
  1598. </label>
  1599. <div class="controls">';
  1600. $return .= '<select name="task_color" id="color" style="width: 150px; background-color: #eeeeee" onchange="document.getElementById(\'color\').style.backgroundColor=\'#\'+document.getElementById(\'color\').value" onkeypress="document.getElementById(\'color\').style.backgroundColor=\'#\'+document.getElementById(\'color\').value">';
  1601. foreach ($colors as $color) {
  1602. $style = 'style="background-color: #'.$color.'"';
  1603. $return .= '<option value="'.$color.'" '.$style.'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</option>';
  1604. }
  1605. $return .= '</select>';
  1606. $return .= ' </div>
  1607. </div>';
  1608. // submit
  1609. $return .= ' <div class="control-group">
  1610. <div class="controls">
  1611. <input type="hidden" name="action" value="" />
  1612. <input type="hidden" name="new_task_submit" value="true" />
  1613. <button class="save" type="submit" name="Submit">'.get_lang('Save').'</button>
  1614. </div>
  1615. </div>';
  1616. $return .= '</form>';
  1617. $return .= '<div style="clear:both; margin-bottom: 10px;"></div>';
  1618. return $return;
  1619. }
  1620. /**
  1621. * Displays edit task form
  1622. * @author Toon Keppens
  1623. *
  1624. */
  1625. public static function displayTaskEditForm($blog_id, $task_id)
  1626. {
  1627. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  1628. $course_id = api_get_course_int_id();
  1629. $colors = array(
  1630. 'FFFFFF',
  1631. 'FFFF99',
  1632. 'FFCC99',
  1633. 'FF9933',
  1634. 'FF6699',
  1635. 'CCFF99',
  1636. 'CC9966',
  1637. '66FF00',
  1638. '9966FF',
  1639. 'CF3F3F',
  1640. '990033',
  1641. '669933',
  1642. '0033FF',
  1643. '003366',
  1644. '000000',
  1645. );
  1646. $sql = "SELECT blog_id, task_id, title, description, color FROM $tbl_blogs_tasks WHERE c_id = $course_id AND task_id = '".(int) $task_id."'";
  1647. $result = Database::query($sql);
  1648. $task = Database::fetch_array($result);
  1649. // Display
  1650. $return = '<form name="edit_task" method="post" action="blog.php?action=manage_tasks&blog_id='.$blog_id.'">
  1651. <legend>'.get_lang('EditTask').'</legend>
  1652. <table width="100%" border="0" cellspacing="2">
  1653. <tr>
  1654. <td align="right">'.get_lang('Title').':&nbsp;&nbsp;</td>
  1655. <td><input name="task_name" type="text" size="70" value="'.Security::remove_XSS($task['title']).'" /></td>
  1656. </tr>
  1657. <tr>
  1658. <td align="right">'.get_lang('Description').':&nbsp;&nbsp;</td>
  1659. <td><textarea name="task_description" cols="45">'.Security::remove_XSS($task['description']).'</textarea></td>
  1660. </tr>';
  1661. /* edit by Kevin Van Den Haute (kevin@develop-it.be) */
  1662. $tbl_tasks_permissions = Database::get_course_table(TABLE_BLOGS_TASKS_PERMISSIONS);
  1663. $sql = " SELECT id, action FROM ".$tbl_tasks_permissions."
  1664. WHERE c_id = $course_id AND task_id = '".(int) $task_id."'";
  1665. $result = Database::query($sql);
  1666. $arrPermissions = array();
  1667. while ($row = Database::fetch_array($result)) {
  1668. $arrPermissions[] = $row['action'];
  1669. }
  1670. $return .= '<tr>';
  1671. $return .= '<td style="text-align:right; vertical-align:top;">'.get_lang('TaskManager').':&nbsp;&nbsp;</td>';
  1672. $return .= '<td>';
  1673. $return .= '<table class="data_table" cellspacing="0" style="border-collapse:collapse; width:446px;">';
  1674. $return .= '<tr>';
  1675. $return .= '<th colspan="2" style="width:223px;">'.get_lang('ArticleManager').'</th>';
  1676. $return .= '<th width:223px;>'.get_lang('CommentManager').'</th>';
  1677. $return .= '</tr>';
  1678. $return .= '<tr>';
  1679. $return .= '<th style="width:111px;"><label for="articleDelete">'.get_lang('Delete').'</label></th>';
  1680. $return .= '<th style="width:112px;"><label for="articleEdit">'.get_lang('Edit').'</label></th>';
  1681. $return .= '<th style="width:223px;"><label for="commentsDelete">'.get_lang('Delete').'</label></th>';
  1682. $return .= '</tr>';
  1683. $return .= '<tr>';
  1684. $return .= '<td style="text-align:center;"><input '.((in_array(
  1685. 'article_delete',
  1686. $arrPermissions
  1687. )) ? 'checked ' : '').'id="articleDelete" name="chkArticleDelete" type="checkbox" /></td>';
  1688. $return .= '<td style="text-align:center;"><input '.((in_array(
  1689. 'article_edit',
  1690. $arrPermissions
  1691. )) ? 'checked ' : '').'id="articleEdit" name="chkArticleEdit" type="checkbox" /></td>';
  1692. $return .= '<td style="text-align:center;"><input '.((in_array(
  1693. 'article_comments_delete',
  1694. $arrPermissions
  1695. )) ? 'checked ' : '').'id="commentsDelete" name="chkCommentsDelete" type="checkbox" /></td>';
  1696. $return .= '</tr>';
  1697. $return .= '</table>';
  1698. $return .= '</td>';
  1699. $return .= '</tr>';
  1700. /* end of edit */
  1701. $return .= '<tr>
  1702. <td align="right">'.get_lang('Color').':&nbsp;&nbsp;</td>
  1703. <td>
  1704. <select name="task_color" id="color" style="width: 150px; background-color: #'.$task['color'].'" onchange="document.getElementById(\'color\').style.backgroundColor=\'#\'+document.getElementById(\'color\').value" onkeypress="document.getElementById(\'color\').style.backgroundColor=\'#\'+document.getElementById(\'color\').value">';
  1705. foreach ($colors as $color) {
  1706. $selected = ($color == $task['color']) ? ' selected' : '';
  1707. $style = 'style="background-color: #'.$color.'"';
  1708. $return .= '<option value="'.$color.'" '.$style.' '.$selected.' >&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</option>';
  1709. }
  1710. $return .= ' </select>
  1711. </td>
  1712. </tr>
  1713. <tr>
  1714. <td align="right">&nbsp;</td>
  1715. <td><br /><input type="hidden" name="action" value="" />
  1716. <input type="hidden" name="edit_task_submit" value="true" />
  1717. <input type="hidden" name="task_id" value="'.$task['task_id'].'" />
  1718. <input type="hidden" name="blog_id" value="'.$task['blog_id'].'" />
  1719. <button class="save" type="submit" name="Submit">'.get_lang('Save').'</button></td>
  1720. </tr>
  1721. </table>
  1722. </form>';
  1723. return $return;
  1724. }
  1725. /**
  1726. * Displays assign task form
  1727. * @author Toon Keppens
  1728. *
  1729. */
  1730. public static function displayTaskAssignmentForm($blog_id)
  1731. {
  1732. $form = self::getTaskAssignmentForm($blog_id);
  1733. $form->addHidden('assign_task_submit', 'true');
  1734. return $form->returnForm()
  1735. . PHP_EOL
  1736. . '<div style="clear: both; margin-bottom:10px;"></div>';
  1737. }
  1738. /**
  1739. * @param $blog_id
  1740. * @return FormValidator
  1741. */
  1742. public static function getTaskAssignmentForm($blog_id)
  1743. {
  1744. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  1745. $tbl_blogs_rel_user = Database::get_course_table(TABLE_BLOGS_REL_USER);
  1746. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  1747. $course_id = api_get_course_int_id();
  1748. // Get users in this blog / make select list of it
  1749. $sql = "SELECT user.user_id, user.firstname, user.lastname, user.username
  1750. FROM $tbl_users user
  1751. INNER JOIN $tbl_blogs_rel_user blogs_rel_user
  1752. ON user.user_id = blogs_rel_user.user_id
  1753. WHERE blogs_rel_user.c_id = $course_id AND blogs_rel_user.blog_id = '".(int) $blog_id."'";
  1754. $result = Database::query($sql);
  1755. $options = array();
  1756. while ($user = Database::fetch_array($result)) {
  1757. $options[$user['user_id']] = api_get_person_name($user['firstname'], $user['lastname']);
  1758. }
  1759. // Get tasks in this blog / make select list of it
  1760. $sql = "
  1761. SELECT
  1762. blog_id,
  1763. task_id,
  1764. blog_id,
  1765. title,
  1766. description,
  1767. color,
  1768. system_task
  1769. FROM $tbl_blogs_tasks
  1770. WHERE c_id = $course_id AND blog_id = ".(int) $blog_id."
  1771. ORDER BY system_task, title";
  1772. $result = Database::query($sql);
  1773. $taskOptions = array();
  1774. while ($task = Database::fetch_array($result)) {
  1775. $taskOptions[$task['task_id']] = stripslashes($task['title']);
  1776. }
  1777. $form = new FormValidator(
  1778. 'assign_task',
  1779. 'post',
  1780. api_get_path(
  1781. WEB_CODE_PATH
  1782. ).'blog/blog.php?action=manage_tasks&blog_id='.$blog_id
  1783. );
  1784. $form->addHeader(get_lang('AssignTask'));
  1785. $form->addSelect('task_user_id', get_lang('SelectUser'), $options);
  1786. $form->addSelect('task_task_id', get_lang('SelectTask'), $taskOptions);
  1787. $form->addDatePicker('task_day', get_lang('SelectTargetDate'));
  1788. $form->addHidden('action', '');
  1789. $form->addButtonSave(get_lang('Ok'));
  1790. return $form;
  1791. }
  1792. /**
  1793. * Displays assign task form
  1794. * @author Toon Keppens
  1795. *
  1796. */
  1797. public static function displayAssignedTaskEditForm($blog_id, $task_id, $user_id)
  1798. {
  1799. $tbl_blogs_tasks_rel_user = Database::get_course_table(TABLE_BLOGS_TASKS_REL_USER);
  1800. $course_id = api_get_course_int_id();
  1801. // Get assignd date;
  1802. $sql = "
  1803. SELECT target_date
  1804. FROM $tbl_blogs_tasks_rel_user
  1805. WHERE c_id = $course_id AND
  1806. blog_id = '".(int) $blog_id."' AND
  1807. user_id = '".(int) $user_id."' AND
  1808. task_id = '".(int) $task_id."'";
  1809. $result = Database::query($sql);
  1810. $row = Database::fetch_assoc($result);
  1811. $date = $row['target_date'];
  1812. $defaults = [
  1813. 'task_user_id' => $user_id,
  1814. 'task_task_id' => $task_id,
  1815. 'task_day' => $date,
  1816. ];
  1817. $form = self::getTaskAssignmentForm($blog_id);
  1818. $form->addHidden('old_task_id', $task_id);
  1819. $form->addHidden('old_user_id', $user_id);
  1820. $form->addHidden('old_target_date', $date);
  1821. $form->addHidden('assign_task_edit_submit', 'true');
  1822. $form->setDefaults($defaults);
  1823. return $form->returnForm();
  1824. }
  1825. /**
  1826. * Assigns a task to a user in a blog
  1827. * @param int $blog_id
  1828. * @param int $user_id
  1829. * @param int $task_id
  1830. * @param string $target_date date
  1831. * @return void
  1832. */
  1833. public static function assignTask($blog_id, $user_id, $task_id, $target_date)
  1834. {
  1835. $tbl_blogs_tasks_rel_user = Database::get_course_table(TABLE_BLOGS_TASKS_REL_USER);
  1836. $course_id = api_get_course_int_id();
  1837. $blog_id = intval($blog_id);
  1838. $user_id = intval($user_id);
  1839. $task_id = intval($task_id);
  1840. $target_date = Database::escape_string($target_date);
  1841. $sql = "
  1842. SELECT COUNT(*) as 'number'
  1843. FROM ".$tbl_blogs_tasks_rel_user."
  1844. WHERE c_id = $course_id AND
  1845. blog_id = ".(int) $blog_id."
  1846. AND user_id = ".(int) $user_id."
  1847. AND task_id = ".(int) $task_id."
  1848. ";
  1849. $result = Database::query($sql);
  1850. $row = Database::fetch_assoc($result);
  1851. if ($row['number'] == 0) {
  1852. $sql = "
  1853. INSERT INTO ".$tbl_blogs_tasks_rel_user." (
  1854. c_id,
  1855. blog_id,
  1856. user_id,
  1857. task_id,
  1858. target_date
  1859. ) VALUES (
  1860. '".(int) $course_id."',
  1861. '".(int) $blog_id."',
  1862. '".(int) $user_id."',
  1863. '".(int) $task_id."',
  1864. '".Database::escape_string($target_date)."'
  1865. )";
  1866. Database::query($sql);
  1867. }
  1868. }
  1869. /**
  1870. * @param $blog_id
  1871. * @param $user_id
  1872. * @param $task_id
  1873. * @param $target_date
  1874. * @param $old_user_id
  1875. * @param $old_task_id
  1876. * @param $old_target_date
  1877. */
  1878. public static function updateAssignedTask(
  1879. $blog_id,
  1880. $user_id,
  1881. $task_id,
  1882. $target_date,
  1883. $old_user_id,
  1884. $old_task_id,
  1885. $old_target_date
  1886. ) {
  1887. $tbl_blogs_tasks_rel_user = Database::get_course_table(TABLE_BLOGS_TASKS_REL_USER);
  1888. $course_id = api_get_course_int_id();
  1889. $sql = "SELECT COUNT(*) as 'number'
  1890. FROM ".$tbl_blogs_tasks_rel_user."
  1891. WHERE
  1892. c_id = $course_id AND
  1893. blog_id = ".(int) $blog_id." AND
  1894. user_id = ".(int) $user_id." AND
  1895. task_id = ".(int) $task_id."
  1896. ";
  1897. $result = Database::query($sql);
  1898. $row = Database::fetch_assoc($result);
  1899. if ($row['number'] == 0 || ($row['number'] != 0 && $task_id == $old_task_id && $user_id == $old_user_id)) {
  1900. $sql = "
  1901. UPDATE ".$tbl_blogs_tasks_rel_user."
  1902. SET
  1903. user_id = ".(int) $user_id.",
  1904. task_id = ".(int) $task_id.",
  1905. target_date = '".Database::escape_string($target_date)."'
  1906. WHERE
  1907. c_id = $course_id AND
  1908. blog_id = ".(int) $blog_id." AND
  1909. user_id = ".(int) $old_user_id." AND
  1910. task_id = ".(int) $old_task_id." AND
  1911. target_date = '".Database::escape_string($old_target_date)."'
  1912. ";
  1913. Database::query($sql);
  1914. }
  1915. }
  1916. /**
  1917. * Displays a list with posts a user can select to execute his task.
  1918. *
  1919. * @param int $blog_id
  1920. * @param int $task_id
  1921. * @return string
  1922. */
  1923. public static function displayPostSelectionForTask($blog_id, $task_id)
  1924. {
  1925. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  1926. $tbl_blogs_posts = Database::get_course_table(TABLE_BLOGS_POSTS);
  1927. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  1928. $course_id = api_get_course_int_id();
  1929. $sql = "SELECT title, description FROM $tbl_blogs_tasks
  1930. WHERE task_id = '".(int) $task_id."'
  1931. AND c_id = $course_id";
  1932. $result = Database::query($sql);
  1933. $row = Database::fetch_assoc($result);
  1934. // Get posts and authors
  1935. $sql = "SELECT post.*, user.lastname, user.firstname, user.username
  1936. FROM $tbl_blogs_posts post
  1937. INNER JOIN $tbl_users user ON post.author_id = user.user_id
  1938. WHERE post.blog_id = '".(int) $blog_id."' AND post.c_id = $course_id
  1939. ORDER BY post_id DESC
  1940. LIMIT 0, 100";
  1941. $result = Database::query($sql);
  1942. // Display
  1943. $return = '<span class="blogpost_title">'.get_lang('SelectTaskArticle').' "'.stripslashes($row['title']).'"</span>';
  1944. $return .= '<span style="font-style: italic;"">'.stripslashes($row['description']).'</span><br><br>';
  1945. if (Database::num_rows($result) == 0) {
  1946. $return .= get_lang('NoArticles');
  1947. return $return;
  1948. }
  1949. while ($blog_post = Database::fetch_array($result)) {
  1950. $username = api_htmlentities(sprintf(get_lang('LoginX'), $blog_post['username']), ENT_QUOTES);
  1951. $return .= '<a href="blog.php?action=execute_task&blog_id='.$blog_id.'&task_id='.$task_id.'&post_id='.$blog_post['post_id'].'#add_comment">'.stripslashes(
  1952. $blog_post['title']
  1953. ).'</a>, '.get_lang('WrittenBy').' '.stripslashes(
  1954. Display::tag(
  1955. 'span',
  1956. api_get_person_name($blog_post['firstname'], $blog_post['lastname']),
  1957. array('title' => $username)
  1958. )
  1959. ).'<br />';
  1960. }
  1961. return $return;
  1962. }
  1963. /**
  1964. * Unsubscribe a user from a given blog
  1965. * @author Toon Keppens
  1966. *
  1967. * @param Integer $blog_id
  1968. * @param Integer $user_id
  1969. */
  1970. public static function unsubscribeUser($blog_id, $user_id)
  1971. {
  1972. // Init
  1973. $tbl_blogs_rel_user = Database::get_course_table(TABLE_BLOGS_REL_USER);
  1974. $tbl_user_permissions = Database::get_course_table(TABLE_PERMISSION_USER);
  1975. // Unsubscribe the user
  1976. $sql = "DELETE FROM $tbl_blogs_rel_user
  1977. WHERE blog_id = '".(int) $blog_id."' AND user_id = '".(int) $user_id."'";
  1978. Database::query($sql);
  1979. // Remove this user's permissions.
  1980. $sql = "DELETE FROM $tbl_user_permissions
  1981. WHERE user_id = '".(int) $user_id."'";
  1982. Database::query($sql);
  1983. }
  1984. /**
  1985. * Displays the form to register users in a blog (in a course)
  1986. * The listed users are users subcribed in the course.
  1987. * @author Toon Keppens
  1988. *
  1989. * @param Integer $blog_id
  1990. *
  1991. * @return Html Form with sortable table with users to subcribe in a blog, in a course.
  1992. */
  1993. public static function displayUserSubscriptionForm($blog_id)
  1994. {
  1995. $_course = api_get_course_info();
  1996. $is_western_name_order = api_is_western_name_order();
  1997. $session_id = api_get_session_id();
  1998. $course_id = $_course['real_id'];
  1999. $currentCourse = $_course['code'];
  2000. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  2001. $tbl_blogs_rel_user = Database::get_course_table(TABLE_BLOGS_REL_USER);
  2002. $html = null;
  2003. $html .= '<legend>'.get_lang('SubscribeMembers').'</legend>';
  2004. $properties["width"] = "100%";
  2005. // Get blog members' id.
  2006. $sql = "SELECT user.user_id FROM $tbl_users user
  2007. INNER JOIN $tbl_blogs_rel_user blogs_rel_user
  2008. ON user.user_id = blogs_rel_user.user_id
  2009. WHERE blogs_rel_user.c_id = $course_id AND blogs_rel_user.blog_id = '".intval($blog_id)."'";
  2010. $result = Database::query($sql);
  2011. $blog_member_ids = array();
  2012. while ($user = Database::fetch_array($result)) {
  2013. $blog_member_ids[] = $user['user_id'];
  2014. }
  2015. // Set table headers
  2016. $column_header[] = array('', false, '');
  2017. if ($is_western_name_order) {
  2018. $column_header[] = array(get_lang('FirstName'), true, '');
  2019. $column_header[] = array(get_lang('LastName'), true, '');
  2020. } else {
  2021. $column_header[] = array(get_lang('LastName'), true, '');
  2022. $column_header[] = array(get_lang('FirstName'), true, '');
  2023. }
  2024. $column_header[] = array(get_lang('Email'), false, '');
  2025. $column_header[] = array(get_lang('Register'), false, '');
  2026. $student_list = CourseManager:: get_student_list_from_course_code(
  2027. $currentCourse,
  2028. false,
  2029. $session_id
  2030. );
  2031. $user_data = array();
  2032. // Add users that are not in this blog to the list.
  2033. foreach ($student_list as $key => $user) {
  2034. if (isset($user['id_user'])) {
  2035. $user['user_id'] = $user['id_user'];
  2036. }
  2037. if (!in_array($user['user_id'], $blog_member_ids)) {
  2038. $a_infosUser = api_get_user_info($user['user_id']);
  2039. $row = array();
  2040. $row[] = '<input type="checkbox" name="user[]" value="'.$a_infosUser['user_id'].'" '.((isset($_GET['selectall']) && $_GET['selectall'] == "subscribe") ? ' checked="checked" ' : '').'/>';
  2041. $username = api_htmlentities(sprintf(get_lang('LoginX'), $a_infosUser["username"]), ENT_QUOTES);
  2042. if ($is_western_name_order) {
  2043. $row[] = $a_infosUser["firstname"];
  2044. $row[] = Display::tag('span', $a_infosUser["lastname"], array('title' => $username));
  2045. } else {
  2046. $row[] = Display::tag('span', $a_infosUser["lastname"], array('title' => $username));
  2047. $row[] = $a_infosUser["firstname"];
  2048. }
  2049. $row[] = Display::icon_mailto_link($a_infosUser["email"]);
  2050. //Link to register users
  2051. if ($a_infosUser["user_id"] != $_SESSION['_user']['user_id']) {
  2052. $row[] = "<a class=\"btn btn-primary \" href=\"".api_get_self(
  2053. )."?action=manage_members&blog_id=$blog_id&register=yes&user_id=".$a_infosUser["user_id"]."\">".get_lang(
  2054. 'Register'
  2055. )."</a>";
  2056. } else {
  2057. $row[] = '';
  2058. }
  2059. $user_data[] = $row;
  2060. }
  2061. }
  2062. // Display
  2063. $query_vars['action'] = 'manage_members';
  2064. $query_vars['blog_id'] = $blog_id;
  2065. $html .= '<form class="form-inline" method="post" action="blog.php?action=manage_members&blog_id='.$blog_id.'">';
  2066. $html.= Display::return_sortable_table($column_header, $user_data, null, null, $query_vars);
  2067. $link = '';
  2068. $link .= isset ($_GET['action']) ? 'action='.Security::remove_XSS($_GET['action']).'&' : '';
  2069. $link .= "blog_id=$blog_id&";
  2070. $html .= '<a class="btn btn-default" href="blog.php?'.$link.'selectall=subscribe">'.get_lang('SelectAll').'</a> - ';
  2071. $html .= '<a class="btn btn-default" href="blog.php?'.$link.'">'.get_lang('UnSelectAll').'</a> ';
  2072. $html .= '<div class="form-group">';
  2073. $html .= '<label>';
  2074. $html .= get_lang('WithSelected').' : ';
  2075. $html .= '</label>';
  2076. $html .= '<select class="selectpicker" name="action">';
  2077. $html .= '<option value="select_subscribe">'.get_lang('Register').'</option>';
  2078. $html .= '</select>';
  2079. $html .= '<input type="hidden" name="register" value="true" />';
  2080. $html .= '<button class="btn btn-default" type="submit">'.get_lang('Ok').'</button>';
  2081. $html .= '</div>';
  2082. $html .= '</form>';
  2083. return $html;
  2084. }
  2085. /**
  2086. * Displays the form to register users in a blog (in a course)
  2087. * The listed users are users subcribed in the course.
  2088. * @author Toon Keppens
  2089. *
  2090. * @param Integer $blog_id
  2091. *
  2092. * @return false|null Form with sortable table with users to unsubcribe from a blog.
  2093. */
  2094. public static function displayUserUnsubscriptionForm($blog_id)
  2095. {
  2096. $_user = api_get_user_info();
  2097. $is_western_name_order = api_is_western_name_order();
  2098. $html = null;
  2099. // Init
  2100. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  2101. $tbl_blogs_rel_user = Database::get_course_table(TABLE_BLOGS_REL_USER);
  2102. $html.= '<legend>'.get_lang('UnsubscribeMembers').'</legend>';
  2103. $properties["width"] = "100%";
  2104. //table column titles
  2105. $column_header[] = array('', false, '');
  2106. if ($is_western_name_order) {
  2107. $column_header[] = array(get_lang('FirstName'), true, '');
  2108. $column_header[] = array(get_lang('LastName'), true, '');
  2109. } else {
  2110. $column_header[] = array(get_lang('LastName'), true, '');
  2111. $column_header[] = array(get_lang('FirstName'), true, '');
  2112. }
  2113. $column_header[] = array(get_lang('Email'), false, '');
  2114. $column_header[] = array(get_lang('TaskManager'), true, '');
  2115. $column_header[] = array(get_lang('UnRegister'), false, '');
  2116. $course_id = api_get_course_int_id();
  2117. $sql = "SELECT user.user_id, user.lastname, user.firstname, user.email, user.username
  2118. FROM $tbl_users user INNER JOIN $tbl_blogs_rel_user blogs_rel_user
  2119. ON user.user_id = blogs_rel_user.user_id
  2120. WHERE blogs_rel_user.c_id = $course_id AND blogs_rel_user.blog_id = '".(int) $blog_id."'";
  2121. if (!($sql_result = Database::query($sql))) {
  2122. return false;
  2123. }
  2124. $user_data = array();
  2125. while ($myrow = Database::fetch_array($sql_result)) {
  2126. $row = array();
  2127. $row[] = '<input type="checkbox" name="user[]" value="'.$myrow['user_id'].'" '.((isset($_GET['selectall']) && $_GET['selectall'] == "unsubscribe") ? ' checked="checked" ' : '').'/>';
  2128. $username = api_htmlentities(sprintf(get_lang('LoginX'), $myrow["username"]), ENT_QUOTES);
  2129. if ($is_western_name_order) {
  2130. $row[] = $myrow["firstname"];
  2131. $row[] = Display::tag('span', $myrow["lastname"], array('title' => $username));
  2132. } else {
  2133. $row[] = Display::tag('span', $myrow["lastname"], array('title' => $username));
  2134. $row[] = $myrow["firstname"];
  2135. }
  2136. $row[] = Display::icon_mailto_link($myrow["email"]);
  2137. $sql = "SELECT bt.title task
  2138. FROM ".Database::get_course_table(TABLE_BLOGS_TASKS_REL_USER)." btu
  2139. INNER JOIN ".Database::get_course_table(TABLE_BLOGS_TASKS)." bt
  2140. ON btu.task_id = bt.task_id
  2141. WHERE btu.c_id = $course_id AND
  2142. bt.c_id = $course_id AND
  2143. btu.blog_id = $blog_id AND
  2144. btu.user_id = ".$myrow['user_id'];
  2145. $sql_res = Database::query($sql);
  2146. $task = '';
  2147. while ($r = Database::fetch_array($sql_res)) {
  2148. $task .= stripslashes($r['task']).', ';
  2149. }
  2150. //echo $task;
  2151. $task = (api_strlen(trim($task)) != 0) ? api_substr($task, 0, api_strlen($task) - 2) : get_lang('Reader');
  2152. $row[] = $task;
  2153. //Link to register users
  2154. if ($myrow["user_id"] != $_user['user_id']) {
  2155. $row[] = "<a class=\"btn btn-primary\" href=\"".api_get_self(
  2156. )."?action=manage_members&blog_id=$blog_id&unregister=yes&user_id=".$myrow['user_id']."\">".get_lang(
  2157. 'UnRegister'
  2158. )."</a>";
  2159. } else {
  2160. $row[] = '';
  2161. }
  2162. $user_data[] = $row;
  2163. }
  2164. $query_vars['action'] = 'manage_members';
  2165. $query_vars['blog_id'] = $blog_id;
  2166. $html.= '<form class="form-inline" method="post" action="blog.php?action=manage_members&blog_id='.$blog_id.'">';
  2167. $html.= Display::return_sortable_table($column_header, $user_data, null, null, $query_vars);
  2168. $link = '';
  2169. $link .= isset ($_GET['action']) ? 'action='.Security::remove_XSS($_GET['action']).'&' : '';
  2170. $link .= "blog_id=$blog_id&";
  2171. $html.= '<a class="btn btn-default" href="blog.php?'.$link.'selectall=unsubscribe">'.get_lang('SelectAll').'</a> - ';
  2172. $html.= '<a class="btn btn-default" href="blog.php?'.$link.'">'.get_lang('UnSelectAll').'</a> ';
  2173. $html.= '<div class="form-group">';
  2174. $html.= '<label>';
  2175. $html.= get_lang('WithSelected').' : ';
  2176. $html.= '</label>';
  2177. $html.= '<select name="action" class="selectpicker">';
  2178. $html.= '<option value="select_unsubscribe">'.get_lang('UnRegister').'</option>';
  2179. $html.= '</select>';
  2180. $html.= '<input type="hidden" name="unregister" value="true" />';
  2181. $html.= '<button class="btn btn-default" type="submit">'.get_lang('Ok').'</button>';
  2182. $html.= '</div>';
  2183. $html.= '</form>';
  2184. return $html;
  2185. }
  2186. /**
  2187. * Displays a matrix with selectboxes. On the left: users, on top: possible rights.
  2188. * The blog admin can thus select what a certain user can do in the current blog
  2189. *
  2190. * @param Integer $blog_id
  2191. */
  2192. public static function displayUserRightsForm($blog_id)
  2193. {
  2194. echo '<legend>'.get_lang('RightsManager').'</legend>';
  2195. echo '<br />';
  2196. // Integration of patricks permissions system.
  2197. require_once api_get_path(SYS_CODE_PATH).'permissions/blog_permissions.inc.php';
  2198. }
  2199. /**
  2200. * show the calender of the given month
  2201. * @author Patrick Cool
  2202. * @author Toon Keppens
  2203. *
  2204. * @param Integer $month : the integer value of the month we are viewing
  2205. * @param Integer $year : the 4-digit year indication e.g. 2005
  2206. *
  2207. * @return html code
  2208. */
  2209. public static function displayMiniMonthCalendar($month, $year, $blog_id)
  2210. {
  2211. // Init
  2212. $_user = api_get_user_info();
  2213. global $DaysShort;
  2214. global $MonthsLong;
  2215. $html = null;
  2216. $posts = array();
  2217. $tasks = array();
  2218. $tbl_users = Database::get_main_table(TABLE_MAIN_USER);
  2219. $tbl_blogs_posts = Database::get_course_table(TABLE_BLOGS_POSTS);
  2220. $tbl_blogs_tasks = Database::get_course_table(TABLE_BLOGS_TASKS);
  2221. $tbl_blogs_tasks_rel_user = Database::get_course_table(TABLE_BLOGS_TASKS_REL_USER);
  2222. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  2223. $course_id = api_get_course_int_id();
  2224. //Handle leap year
  2225. $numberofdays = array(0, 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31);
  2226. if (($year % 400 == 0) or ($year % 4 == 0 and $year % 100 <> 0)) {
  2227. $numberofdays[2] = 29;
  2228. }
  2229. //Get the first day of the month
  2230. $dayone = getdate(mktime(0, 0, 0, $month, 1, $year));
  2231. $monthName = $MonthsLong[$month - 1];
  2232. //Start the week on monday
  2233. $startdayofweek = $dayone['wday'] <> 0 ? ($dayone['wday'] - 1) : 6;
  2234. $blogId = isset($_GET['blog_id']) ? intval($_GET['blog_id']) : null;
  2235. $filter = isset($_GET['filter']) ? Security::remove_XSS($_GET['filter']) : null;
  2236. $backwardsURL = api_get_self(
  2237. )."?blog_id=".$blogId."&filter=".$filter."&month=".($month == 1 ? 12 : $month - 1)."&year=".($month == 1 ? $year - 1 : $year);
  2238. $forewardsURL = api_get_self(
  2239. )."?blog_id=".$blogId."&filter=".$filter."&month=".($month == 12 ? 1 : $month + 1)."&year=".($month == 12 ? $year + 1 : $year);
  2240. // Get posts for this month
  2241. $sql = "SELECT post.*, DAYOFMONTH(date_creation) as post_day, user.lastname, user.firstname
  2242. FROM $tbl_blogs_posts post
  2243. INNER JOIN $tbl_users user
  2244. ON post.author_id = user.user_id
  2245. WHERE
  2246. post.c_id = $course_id AND
  2247. post.blog_id = '".(int) $blog_id."' AND
  2248. MONTH(date_creation) = '".(int) $month."' AND
  2249. YEAR(date_creation) = '".(int) $year."'
  2250. ORDER BY date_creation";
  2251. $result = Database::query($sql);
  2252. // We will create an array of days on which there are posts.
  2253. if (Database::num_rows($result) > 0) {
  2254. while ($blog_post = Database::fetch_array($result)) {
  2255. // If the day of this post is not yet in the array, add it.
  2256. if (!in_array($blog_post['post_day'], $posts)) {
  2257. $posts[] = $blog_post['post_day'];
  2258. }
  2259. }
  2260. }
  2261. // Get tasks for this month
  2262. if ($_user['user_id']) {
  2263. $sql = " SELECT task_rel_user.*, DAYOFMONTH(target_date) as task_day, task.title, blog.blog_name
  2264. FROM $tbl_blogs_tasks_rel_user task_rel_user
  2265. INNER JOIN $tbl_blogs_tasks task ON task_rel_user.task_id = task.task_id
  2266. INNER JOIN $tbl_blogs blog ON task_rel_user.blog_id = blog.blog_id
  2267. WHERE
  2268. task_rel_user.c_id = $course_id AND
  2269. task.c_id = $course_id AND
  2270. blog.c_id = $course_id AND
  2271. task_rel_user.user_id = '".(int) $_user['user_id']."' AND
  2272. MONTH(target_date) = '".(int) $month."' AND
  2273. YEAR(target_date) = '".(int) $year."'
  2274. ORDER BY target_date ASC";
  2275. $result = Database::query($sql);
  2276. if (Database::num_rows($result) > 0) {
  2277. while ($mytask = Database::fetch_array($result)) {
  2278. $tasks[$mytask['task_day']][$mytask['task_id']]['task_id'] = $mytask['task_id'];
  2279. $tasks[$mytask['task_day']][$mytask['task_id']]['title'] = $mytask['title'];
  2280. $tasks[$mytask['task_day']][$mytask['task_id']]['blog_id'] = $mytask['blog_id'];
  2281. $tasks[$mytask['task_day']][$mytask['task_id']]['blog_name'] = $mytask['blog_name'];
  2282. $tasks[$mytask['task_day']][$mytask['task_id']]['day'] = $mytask['task_day'];
  2283. }
  2284. }
  2285. }
  2286. $html .= '<table id="smallcalendar" class="table table-responsive">
  2287. <tr id="title">
  2288. <th width="10%"><a href="'.$backwardsURL.'">&laquo;</a></th>
  2289. <th align="center" width="80%" colspan="5" class="month">'.$monthName.' '.$year.'</th>
  2290. <th width="10%" align="right"><a href="'.$forewardsURL.'">&raquo;</a></th></tr>';
  2291. $html .= '<tr>';
  2292. for ($ii = 1; $ii < 8; $ii++) {
  2293. $html .= '<td class="weekdays">'.$DaysShort[$ii % 7].'</td>';
  2294. }
  2295. $html .= '</tr>';
  2296. $curday = -1;
  2297. $today = getdate();
  2298. while ($curday <= $numberofdays[$month]) {
  2299. $html .= '<tr>';
  2300. for ($ii = 0; $ii < 7; $ii++) {
  2301. if (($curday == -1) && ($ii == $startdayofweek)) {
  2302. $curday = 1;
  2303. }
  2304. if (($curday > 0) && ($curday <= $numberofdays[$month])) {
  2305. $bgcolor = $ii < 5 ? $class = "class=\"days_week\"" : $class = "class=\"days_weekend\"";
  2306. $dayheader = "$curday";
  2307. if (($curday == $today['mday']) && ($year == $today['year']) && ($month == $today['mon'])) {
  2308. $dayheader = "$curday";
  2309. $class = "class=\"days_today\"";
  2310. }
  2311. $html .= '<td '.$class.'>';
  2312. // If there are posts on this day, create a filter link.
  2313. if (in_array($curday, $posts)) {
  2314. $html .= '<a href="blog.php?blog_id='.$blog_id.'&filter='.$year.'-'.$month.'-'.$curday.'&month='.$month.'&year='.$year.'" title="'.get_lang(
  2315. 'ViewPostsOfThisDay'
  2316. ).'">'.$curday.'</a>';
  2317. } else {
  2318. $html .= $dayheader;
  2319. }
  2320. if (count($tasks) > 0) {
  2321. if (isset($tasks[$curday]) && is_array($tasks[$curday])) {
  2322. // Add tasks to calendar
  2323. foreach ($tasks[$curday] as $task) {
  2324. $html .= '<a href="blog.php?action=execute_task&blog_id='.$task['blog_id'].'&task_id='.stripslashes(
  2325. $task['task_id']
  2326. ).'" title="'.$task['title'].' : '.get_lang(
  2327. 'InBlog'
  2328. ).' : '.$task['blog_name'].' - '.get_lang('ExecuteThisTask').'">';
  2329. $html .= Display::return_icon('blog_task.gif', get_lang('ExecuteThisTask'));
  2330. $html .= '</a>';
  2331. }
  2332. }
  2333. }
  2334. $html .= '</td>';
  2335. $curday++;
  2336. } else {
  2337. $html .= '<td>&nbsp;</td>';
  2338. }
  2339. }
  2340. $html .= '</tr>';
  2341. }
  2342. $html .= '</table>';
  2343. return $html;
  2344. }
  2345. /**
  2346. * Blog admin | Display the form to add a new blog.
  2347. * @return void (direct output)
  2348. */
  2349. public static function displayBlogCreateForm()
  2350. {
  2351. $form = new FormValidator('add_blog', 'post', 'blog_admin.php?action=add');
  2352. $form->addElement('header', get_lang('AddBlog'));
  2353. $form->addElement('text', 'blog_name', get_lang('Title'));
  2354. $form->addElement('textarea', 'blog_subtitle', get_lang('SubTitle'));
  2355. $form->addElement('hidden', 'new_blog_submit', 'true');
  2356. $form->addButtonSave(get_lang('SaveProject'));
  2357. $defaults = array(
  2358. 'blog_name' => isset($_POST['blog_name']) ? Security::remove_XSS($_POST['blog_name']) : null,
  2359. 'blog_subtitle' => isset($_POST['blog_subtitle']) ? Security::remove_XSS($_POST['blog_subtitle']) : null,
  2360. );
  2361. $form->setDefaults($defaults);
  2362. $form->display();
  2363. }
  2364. /**
  2365. * Blog admin | Display the form to edit a blog.
  2366. *
  2367. */
  2368. public static function displayBlogEditForm($blog_id)
  2369. {
  2370. $course_id = api_get_course_int_id();
  2371. $blog_id = intval($blog_id);
  2372. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  2373. $sql = "SELECT blog_id, blog_name, blog_subtitle
  2374. FROM $tbl_blogs
  2375. WHERE c_id = $course_id AND blog_id = '".$blog_id."'";
  2376. $result = Database::query($sql);
  2377. $blog = Database::fetch_array($result);
  2378. // the form contained errors but we do not want to lose the changes the user already did
  2379. if ($_POST) {
  2380. $blog['blog_name'] = Security::remove_XSS($_POST['blog_name']);
  2381. $blog['blog_subtitle'] = Security::remove_XSS($_POST['blog_subtitle']);
  2382. }
  2383. $form = new FormValidator('edit_blog', 'post', 'blog_admin.php?action=edit&blog_id='.intval($_GET['blog_id']));
  2384. $form->addElement('header', get_lang('EditBlog'));
  2385. $form->addElement('text', 'blog_name', get_lang('Title'));
  2386. $form->addElement('textarea', 'blog_subtitle', get_lang('SubTitle'));
  2387. $form->addElement('hidden', 'edit_blog_submit', 'true');
  2388. $form->addElement('hidden', 'blog_id', $blog['blog_id']);
  2389. $form->addButtonSave(get_lang('Save'));
  2390. $defaults = array();
  2391. $defaults['blog_name'] = $blog['blog_name'];
  2392. $defaults['blog_subtitle'] = $blog['blog_subtitle'];
  2393. $form->setDefaults($defaults);
  2394. $form->display();
  2395. }
  2396. /**
  2397. * Blog admin | Returns table with blogs in this course
  2398. * @return void Direct output
  2399. */
  2400. public static function displayBlogsList()
  2401. {
  2402. global $charset;
  2403. $_user = api_get_user_info();
  2404. $course_id = api_get_course_int_id();
  2405. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  2406. //condition for the session
  2407. $session_id = api_get_session_id();
  2408. $sql = "SELECT blog_name, blog_subtitle, visibility, blog_id, session_id
  2409. FROM $tbl_blogs WHERE c_id = $course_id
  2410. ORDER BY date_creation DESC";
  2411. $result = Database::query($sql);
  2412. $list_info = array();
  2413. if (Database::num_rows($result)) {
  2414. while ($row_project = Database::fetch_row($result)) {
  2415. $list_info[] = $row_project;
  2416. }
  2417. }
  2418. $list_content_blog = array();
  2419. $list_body_blog = array();
  2420. if (is_array($list_info)) {
  2421. foreach ($list_info as $key => $info_log) {
  2422. // Validation when belongs to a session
  2423. $session_img = api_get_session_image($info_log[4], $_user['status']);
  2424. $url_start_blog = 'blog.php'."?"."blog_id=".$info_log[3]."&".api_get_cidreq();
  2425. $title = $info_log[0];
  2426. $image = Display::return_icon('blog.png', $title);
  2427. $list_name = '<div style="float: left; width: 35px; height: 22px;"><a href="'.$url_start_blog.'">'.$image.'</a></div><a href="'.$url_start_blog.'">'.$title.'</a>'.$session_img;
  2428. $list_body_blog[] = $list_name;
  2429. $list_body_blog[] = $info_log[1];
  2430. $visibility_icon = ($info_log[2] == 0) ? 'invisible' : 'visible';
  2431. $visibility_info = ($info_log[2] == 0) ? 'Visible' : 'Invisible';
  2432. $my_image = '<a href="'.api_get_self().'?action=edit&blog_id='.$info_log[3].'">';
  2433. $my_image .= Display::return_icon('edit.png', get_lang('EditBlog'));
  2434. $my_image .= "</a>";
  2435. $my_image .= '<a href="'.api_get_self().'?action=delete&blog_id='.$info_log[3].'" ';
  2436. $my_image .= 'onclick="javascript:if(!confirm(\''.addslashes(
  2437. api_htmlentities(get_lang("ConfirmYourChoice"), ENT_QUOTES, $charset)
  2438. ).'\')) return false;" >';
  2439. $my_image .= Display::return_icon('delete.png', get_lang('DeleteBlog'));
  2440. $my_image .= "</a>";
  2441. $my_image .= '<a href="'.api_get_self().'?action=visibility&blog_id='.$info_log[3].'">';
  2442. $my_image .= Display::return_icon($visibility_icon.'.gif', get_lang($visibility_info));
  2443. $my_image .= "</a>";
  2444. $list_body_blog[] = $my_image;
  2445. $list_content_blog[] = $list_body_blog;
  2446. $list_body_blog = array();
  2447. }
  2448. $table = new SortableTableFromArrayConfig($list_content_blog, 1, 20, 'project');
  2449. $table->set_header(0, get_lang('Title'));
  2450. $table->set_header(1, get_lang('SubTitle'));
  2451. $table->set_header(2, get_lang('Modify'));
  2452. $table->display();
  2453. }
  2454. }
  2455. /**
  2456. * Filter the post $fullText to get a extract of $length characters
  2457. * @param string $fullText
  2458. * @param int $length
  2459. * @return null|string
  2460. */
  2461. public static function getBlogAttachments($blog_id, $post_id = 0, $comment_id = 0)
  2462. {
  2463. $blog_table_attachment = Database::get_course_table(TABLE_BLOGS_ATTACHMENT);
  2464. $blog_id = intval($blog_id);
  2465. $comment_id = intval($comment_id);
  2466. $post_id = intval($post_id);
  2467. $row = array();
  2468. $where = '';
  2469. if (!empty ($post_id) && is_numeric($post_id)) {
  2470. $where .= " AND post_id = $post_id ";
  2471. }
  2472. if (!empty ($comment_id) && is_numeric($comment_id)) {
  2473. if (!empty ($post_id)) {
  2474. $where .= ' AND ';
  2475. }
  2476. $where .= " comment_id = $comment_id ";
  2477. }
  2478. $course_id = api_get_course_int_id();
  2479. $sql = "SELECT path, filename, comment FROM $blog_table_attachment
  2480. WHERE c_id = $course_id AND blog_id = $blog_id $where";
  2481. $result = Database::query($sql);
  2482. if (Database::num_rows($result) != 0) {
  2483. $row = Database::fetch_array($result);
  2484. }
  2485. return $row;
  2486. }
  2487. /**
  2488. * Delete the all the attachments according the parameters.
  2489. * @param int $blog_id
  2490. * @param int $post_id post's id
  2491. * @param int $comment_id the comment's id
  2492. * @return void
  2493. * @author Julio Montoya
  2494. * @version avril 2008, dokeos 1.8.5
  2495. */
  2496. public static function deleteAllBlogAttachments(
  2497. $blog_id,
  2498. $post_id = 0,
  2499. $comment_id = 0
  2500. ) {
  2501. $_course = api_get_course_info();
  2502. $blog_table_attachment = Database::get_course_table(TABLE_BLOGS_ATTACHMENT);
  2503. $blog_id = intval($blog_id);
  2504. $comment_id = intval($comment_id);
  2505. $post_id = intval($post_id);
  2506. $course_id = api_get_course_int_id();
  2507. $where = null;
  2508. // delete files in DB
  2509. if (!empty ($post_id) && is_numeric($post_id)) {
  2510. $where .= ' AND post_id ="'.$post_id.'" ';
  2511. }
  2512. if (!empty ($comment_id) && is_numeric($comment_id)) {
  2513. if (!empty ($post_id)) {
  2514. $where .= ' AND ';
  2515. }
  2516. $where .= ' comment_id ="'.$comment_id.'" ';
  2517. }
  2518. // delete all files in directory
  2519. $courseDir = $_course['path'].'/upload/blog';
  2520. $sys_course_path = api_get_path(SYS_COURSE_PATH);
  2521. $updir = $sys_course_path.$courseDir;
  2522. $sql = 'SELECT path FROM '.$blog_table_attachment.'
  2523. WHERE c_id = '.$course_id.' AND blog_id ="'.intval($blog_id).'" '.$where;
  2524. $result = Database::query($sql);
  2525. while ($row = Database::fetch_row($result)) {
  2526. $file = $updir.'/'.$row[0];
  2527. if (Security::check_abs_path($file, $updir)) {
  2528. @ unlink($file);
  2529. }
  2530. }
  2531. $sql = 'DELETE FROM '.$blog_table_attachment.'
  2532. WHERE c_id = '.$course_id.' AND blog_id ="'.intval($blog_id).'" '.$where;
  2533. Database::query($sql);
  2534. }
  2535. /**
  2536. * Gets all the post from a given user id
  2537. * @param int $courseId
  2538. * @param int $userId
  2539. * @param string $courseCode
  2540. * @return string
  2541. */
  2542. public static function getBlogPostFromUser($courseId, $userId, $courseCode)
  2543. {
  2544. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  2545. $tbl_blog_post = Database::get_course_table(TABLE_BLOGS_POSTS);
  2546. $courseId = intval($courseId);
  2547. $userId = intval($userId);
  2548. $sql = "SELECT DISTINCT blog.blog_id, post_id, title, full_text, post.date_creation
  2549. FROM $tbl_blogs blog
  2550. INNER JOIN $tbl_blog_post post
  2551. ON (blog.blog_id = post.blog_id)
  2552. WHERE
  2553. blog.c_id = $courseId AND
  2554. post.c_id = $courseId AND
  2555. author_id = $userId AND visibility = 1
  2556. ORDER BY post.date_creation DESC ";
  2557. $result = Database::query($sql);
  2558. $return_data = '';
  2559. if (Database::num_rows($result) != 0) {
  2560. while ($row = Database::fetch_array($result)) {
  2561. $return_data .= '<div class="clear"></div><br />';
  2562. $return_data .= '<div class="actions" style="margin-left:5px;margin-right:5px;">'.Display::return_icon(
  2563. 'blog_article.png',
  2564. get_lang('BlogPosts')
  2565. ).' '.$row['title'].'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<div style="float:right;margin-top:-18px"><a href="../blog/blog.php?blog_id='.$row['blog_id'].'&gidReq=&cidReq='.$courseId.' " >'.get_lang(
  2566. 'SeeBlog'
  2567. ).'</a></div></div>';
  2568. $return_data .= '<br / >';
  2569. $return_data .= $row['full_text'];
  2570. $return_data .= '<br /><br />';
  2571. }
  2572. }
  2573. return $return_data;
  2574. }
  2575. /**
  2576. * Gets all the post comments from a given user id
  2577. * @param int $courseId
  2578. * @param int $userId
  2579. * @param string $courseCode
  2580. * @return string
  2581. */
  2582. public static function getBlogCommentsFromUser($courseId, $userId, $courseCode)
  2583. {
  2584. $tbl_blogs = Database::get_course_table(TABLE_BLOGS);
  2585. $tbl_blog_comment = Database::get_course_table(TABLE_BLOGS_COMMENTS);
  2586. $userId = intval($userId);
  2587. $courseId = intval($courseId);
  2588. $sql = "SELECT DISTINCT blog.blog_id, comment_id, title, comment, comment.date_creation
  2589. FROM $tbl_blogs blog INNER JOIN $tbl_blog_comment comment
  2590. ON (blog.blog_id = comment.blog_id)
  2591. WHERE blog.c_id = $courseId AND
  2592. comment.c_id = $courseId AND
  2593. author_id = $userId AND
  2594. visibility = 1
  2595. ORDER BY blog_name";
  2596. $result = Database::query($sql);
  2597. $return_data = '';
  2598. if (Database::num_rows($result) != 0) {
  2599. while ($row = Database::fetch_array($result)) {
  2600. $return_data .= '<div class="clear"></div><br />';
  2601. $return_data .= '<div class="actions" style="margin-left:5px;margin-right:5px;">'.$row['title'].'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<div style="float:right;margin-top:-18px"><a href="../blog/blog.php?blog_id='.$row['blog_id'].'&gidReq=&cidReq='.Security::remove_XSS(
  2602. $courseCode
  2603. ).' " >'.get_lang('SeeBlog').'</a></div></div>';
  2604. $return_data .= '<br / >';
  2605. $return_data .= $row['comment'];
  2606. $return_data .= '<br />';
  2607. }
  2608. }
  2609. return $return_data;
  2610. }
  2611. /**
  2612. * Filter the post $fullText to get a extract of $length characters
  2613. * @param string $fullText
  2614. * @param int $length
  2615. * @return null|string
  2616. */
  2617. private static function getPostExtract($fullText, $length = BLOG_MAX_PREVIEW_CHARS)
  2618. {
  2619. $parts = explode(BLOG_PAGE_BREAK, $fullText);
  2620. if (count($parts) > 1) {
  2621. return $parts[0];
  2622. }
  2623. // Remove any HTML from the string
  2624. $text = strip_tags($fullText);
  2625. $text = api_html_entity_decode($text);
  2626. // Replace end of lines with spaces
  2627. $text = preg_replace('/\s+/', ' ', $text);
  2628. // Count whitespaces to add to the cut() call below
  2629. $countBlanks = substr_count($text, ' ');
  2630. // Get a version of the string without spaces for comparison purposes
  2631. $textWithoutBlanks = str_replace(' ', '', $text);
  2632. // utf8_decode replaces non-ISO chars by '?' which avoids counting
  2633. // multi-byte characters as more than one character
  2634. $stringLength = strlen(utf8_decode($textWithoutBlanks));
  2635. if ($stringLength <= $length) {
  2636. return null;
  2637. }
  2638. // Cut the string to the BLOG_MAX_PREVIEX_CHARS limit, adding
  2639. // whitespaces
  2640. $extract = cut($text, $length + $countBlanks);
  2641. // Return an HTML string for printing
  2642. return api_htmlentities($extract);
  2643. }
  2644. }