online.inc.php 18 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * Code library for showing Who is online
  5. *
  6. * @author Istvan Mandak, principal author
  7. * @author Denes Nagy, principal author
  8. * @author Bart Mollet
  9. * @author Roan Embrechts, cleaning and bugfixing
  10. * @package chamilo.whoisonline
  11. */
  12. /**
  13. * Insert a login reference for the current user into the track_e_online stats table.
  14. * This table keeps trace of the last login. Nothing else matters (we don't keep traces of anything older)
  15. * @param int user id
  16. * @return void
  17. */
  18. use ChamiloSession as Session;
  19. function LoginCheck($uid)
  20. {
  21. $_course = api_get_course_info();
  22. $uid = (int) $uid;
  23. $online_table = Database::get_main_table(TABLE_STATISTIC_TRACK_E_ONLINE);
  24. if (!empty($uid)) {
  25. $user_ip = '';
  26. if (!empty($_SERVER['REMOTE_ADDR'])) {
  27. $user_ip = Database::escape_string(api_get_real_ip());
  28. }
  29. $login_date = api_get_utc_datetime();
  30. $access_url_id = 1;
  31. if (api_get_multiple_access_url() && api_get_current_access_url_id()!=-1) {
  32. $access_url_id = api_get_current_access_url_id();
  33. }
  34. $session_id = api_get_session_id();
  35. // if the $_course array exists this means we are in a course and we have to store this in the who's online table also
  36. // to have the x users in this course feature working
  37. if (is_array($_course) && count($_course)>0 && !empty($_course['id'])) {
  38. $query = "REPLACE INTO ".$online_table ." (login_id,login_user_id,login_date,user_ip, c_id, session_id, access_url_id)
  39. VALUES ($uid,$uid,'$login_date','$user_ip', '".$_course['real_id']."' , '$session_id' , '$access_url_id' )";
  40. } else {
  41. $query = "REPLACE INTO ".$online_table ." (login_id,login_user_id,login_date,user_ip, c_id, session_id, access_url_id)
  42. VALUES ($uid,$uid,'$login_date','$user_ip', 0, '$session_id', '$access_url_id')";
  43. }
  44. Database::query($query);
  45. }
  46. }
  47. /**
  48. * @param int $userId
  49. */
  50. function preventMultipleLogin($userId)
  51. {
  52. $table = Database::get_main_table(TABLE_STATISTIC_TRACK_E_ONLINE);
  53. $userId = intval($userId);
  54. if (api_get_setting('prevent_multiple_simultaneous_login') === 'true') {
  55. if (!empty($userId) && !api_is_anonymous()) {
  56. $isFirstLogin = Session::read('first_user_login');
  57. if (empty($isFirstLogin)) {
  58. $sql = "SELECT login_id FROM $table
  59. WHERE login_user_id = " . $userId . " LIMIT 1";
  60. $result = Database::query($sql);
  61. $loginData = array();
  62. if (Database::num_rows($result)) {
  63. $loginData = Database::fetch_array($result);
  64. }
  65. $userIsReallyOnline = user_is_online($userId);
  66. // Trying double login.
  67. if (!empty($loginData) && $userIsReallyOnline == true) {
  68. session_regenerate_id();
  69. Session::destroy();
  70. header('Location: '.api_get_path(WEB_PATH).'index.php?loginFailed=1&error=multiple_connection_not_allowed');
  71. exit;
  72. } else {
  73. // First time
  74. Session::write('first_user_login', 1);
  75. }
  76. }
  77. }
  78. }
  79. }
  80. /**
  81. * This function handles the logout and is called whenever there is a $_GET['logout']
  82. * @return void Directly redirects the user or leaves him where he is, but doesn't return anything
  83. * @author Fernando P. García <fernando@develcuy.com>
  84. */
  85. function online_logout($user_id = null, $logout_redirect = false)
  86. {
  87. global $extAuthSource;
  88. // Database table definition
  89. $tbl_track_login = Database :: get_main_table(TABLE_STATISTIC_TRACK_E_LOGIN);
  90. if (empty($user_id)) {
  91. $user_id = isset($_GET['uid']) ? intval($_GET['uid']) : 0;
  92. }
  93. //Changing global chat status to offline
  94. if (api_is_global_chat_enabled()) {
  95. $chat = new Chat();
  96. $chat->setUserStatus(0);
  97. }
  98. // selecting the last login of the user
  99. $sql = "SELECT login_id, login_date
  100. FROM $tbl_track_login
  101. WHERE login_user_id = $user_id
  102. ORDER BY login_date DESC
  103. LIMIT 0,1";
  104. $q_last_connection = Database::query($sql);
  105. if (Database::num_rows($q_last_connection)>0) {
  106. $i_id_last_connection = Database::result($q_last_connection,0,"login_id");
  107. }
  108. if (!isset($_SESSION['login_as'])) {
  109. $current_date = api_get_utc_datetime();
  110. $sql = "UPDATE $tbl_track_login SET logout_date='".$current_date."'
  111. WHERE login_id='$i_id_last_connection'";
  112. Database::query($sql);
  113. }
  114. LoginDelete($user_id); //from inc/lib/online.inc.php - removes the "online" status
  115. //the following code enables the use of an external logout function.
  116. //example: define a $extAuthSource['ldap']['logout']="file.php" in configuration.php
  117. // then a function called ldap_logout() inside that file
  118. // (using *authent_name*_logout as the function name) and the following code
  119. // will find and execute it
  120. $uinfo = api_get_user_info($user_id);
  121. if (($uinfo['auth_source'] != PLATFORM_AUTH_SOURCE) && is_array($extAuthSource)) {
  122. if (is_array($extAuthSource[$uinfo['auth_source']])) {
  123. $subarray = $extAuthSource[$uinfo['auth_source']];
  124. if (!empty($subarray['logout']) && file_exists($subarray['logout'])) {
  125. require_once($subarray['logout']);
  126. $logout_function = $uinfo['auth_source'].'_logout';
  127. if (function_exists($logout_function)) {
  128. $logout_function($uinfo);
  129. }
  130. }
  131. }
  132. }
  133. CourseChatUtils::exitChat($user_id);
  134. session_regenerate_id();
  135. Session::destroy();
  136. if ($logout_redirect) {
  137. header("Location: index.php");
  138. return;
  139. }
  140. }
  141. /**
  142. * Remove all login records from the track_e_online stats table, for the given user ID.
  143. * @param int User ID
  144. * @return void
  145. */
  146. function LoginDelete($user_id)
  147. {
  148. $online_table = Database::get_main_table(TABLE_STATISTIC_TRACK_E_ONLINE);
  149. $user_id = intval($user_id);
  150. $query = "DELETE FROM " . $online_table . " WHERE login_user_id = $user_id";
  151. Database::query($query);
  152. }
  153. /**
  154. * @param int $user_id
  155. * @return bool
  156. */
  157. function user_is_online($user_id)
  158. {
  159. $track_online_table = Database::get_main_table(TABLE_STATISTIC_TRACK_E_ONLINE);
  160. $table_user = Database::get_main_table(TABLE_MAIN_USER);
  161. $access_url_id = api_get_current_access_url_id();
  162. $time_limit = api_get_setting('time_limit_whosonline');
  163. $online_time = time() - $time_limit*60;
  164. $limit_date = api_get_utc_datetime($online_time);
  165. $user_id = intval($user_id);
  166. $query = " SELECT login_user_id,login_date
  167. FROM $track_online_table track
  168. INNER JOIN $table_user u ON (u.id=track.login_user_id)
  169. WHERE
  170. track.access_url_id = $access_url_id AND
  171. login_date >= '".$limit_date."' AND
  172. u.id = $user_id
  173. LIMIT 1 ";
  174. $result = Database::query($query);
  175. if (Database::num_rows($result)) {
  176. return true;
  177. }
  178. return false;
  179. }
  180. /**
  181. * Gives a list of people online now (and in the last $valid minutes)
  182. * @return array For each line, a list of user IDs and login dates, or FALSE on error or empty results
  183. */
  184. function who_is_online($from, $number_of_items, $column = null, $direction = null, $time_limit = null, $friends = false)
  185. {
  186. // Time limit in seconds?
  187. if (empty($time_limit)) {
  188. $time_limit = api_get_setting('time_limit_whosonline');
  189. } else {
  190. $time_limit = intval($time_limit);
  191. }
  192. $from = intval($from);
  193. $number_of_items = intval($number_of_items);
  194. if (empty($column)) {
  195. $column = 'picture_uri';
  196. if ($friends) {
  197. $column = 'login_date';
  198. }
  199. }
  200. if (empty($direction)) {
  201. $direction = 'DESC';
  202. } else {
  203. if (!in_array(strtolower($direction), array('asc', 'desc'))) {
  204. $direction = 'DESC';
  205. }
  206. }
  207. $online_time = time() - $time_limit * 60;
  208. $current_date = api_get_utc_datetime($online_time);
  209. $track_online_table = Database::get_main_table(TABLE_STATISTIC_TRACK_E_ONLINE);
  210. $friend_user_table = Database::get_main_table(TABLE_MAIN_USER_REL_USER);
  211. $table_user = Database::get_main_table(TABLE_MAIN_USER);
  212. if ($friends) {
  213. // who friends from social network is online
  214. $query = "SELECT DISTINCT login_user_id, login_date
  215. FROM $track_online_table INNER JOIN $friend_user_table
  216. ON (friend_user_id = login_user_id)
  217. WHERE
  218. login_date >= '".$current_date."' AND
  219. friend_user_id <> '".api_get_user_id()."' AND
  220. relation_type='".USER_RELATION_TYPE_FRIEND."' AND
  221. user_id = '".api_get_user_id()."'
  222. ORDER BY $column $direction
  223. LIMIT $from, $number_of_items";
  224. } else {
  225. $query = "SELECT DISTINCT login_user_id, login_date
  226. FROM ".$track_online_table ." e
  227. INNER JOIN ".$table_user ." u ON (u.id = e.login_user_id)
  228. WHERE u.status != ".ANONYMOUS." AND login_date >= '".$current_date."'
  229. ORDER BY $column $direction
  230. LIMIT $from, $number_of_items";
  231. }
  232. if (api_get_multiple_access_url()) {
  233. $access_url_id = api_get_current_access_url_id();
  234. if ($access_url_id != -1) {
  235. if ($friends) {
  236. // friends from social network is online
  237. $query = "SELECT distinct login_user_id, login_date
  238. FROM $track_online_table track INNER JOIN $friend_user_table
  239. ON (friend_user_id = login_user_id)
  240. WHERE track.access_url_id = $access_url_id AND
  241. login_date >= '".$current_date."' AND
  242. friend_user_id <> '".api_get_user_id()."' AND
  243. relation_type='".USER_RELATION_TYPE_FRIEND."'
  244. ORDER BY $column $direction
  245. LIMIT $from, $number_of_items";
  246. } else {
  247. // all users online
  248. $query = "SELECT login_user_id, login_date
  249. FROM ".$track_online_table ." track
  250. INNER JOIN ".$table_user ." u
  251. ON (u.id=track.login_user_id)
  252. WHERE u.status != ".ANONYMOUS." AND track.access_url_id = $access_url_id AND
  253. login_date >= '".$current_date."'
  254. ORDER BY $column $direction
  255. LIMIT $from, $number_of_items";
  256. }
  257. }
  258. }
  259. //This query will show all registered users. Only for dev purposes.
  260. /*$query = "SELECT DISTINCT u.id as login_user_id, login_date FROM ".$track_online_table ." e , $table_user u
  261. GROUP by u.id
  262. ORDER BY $column $direction
  263. LIMIT $from, $number_of_items";*/
  264. $result = Database::query($query);
  265. if ($result) {
  266. $users_online = array();
  267. while (list($login_user_id, $login_date) = Database::fetch_row($result)) {
  268. $users_online[] = $login_user_id;
  269. }
  270. return $users_online;
  271. } else {
  272. return false;
  273. }
  274. }
  275. function who_is_online_count($time_limit = null, $friends = false)
  276. {
  277. if (empty($time_limit)) {
  278. $time_limit = api_get_setting('time_limit_whosonline');
  279. } else {
  280. $time_limit = intval($time_limit);
  281. }
  282. $track_online_table = Database::get_main_table(TABLE_STATISTIC_TRACK_E_ONLINE);
  283. $friend_user_table = Database::get_main_table(TABLE_MAIN_USER_REL_USER);
  284. $table_user = Database::get_main_table(TABLE_MAIN_USER);
  285. $online_time = time() - $time_limit * 60;
  286. $current_date = api_get_utc_datetime($online_time);
  287. if ($friends) {
  288. // who friends from social network is online
  289. $query = "SELECT DISTINCT count(login_user_id) as count
  290. FROM $track_online_table INNER JOIN $friend_user_table
  291. ON (friend_user_id = login_user_id)
  292. WHERE
  293. login_date >= '$current_date' AND
  294. friend_user_id <> '".api_get_user_id()."' AND
  295. relation_type='".USER_RELATION_TYPE_FRIEND."' AND
  296. user_id = '".api_get_user_id()."' ";
  297. } else {
  298. // All users online
  299. $query = "SELECT count(login_id) as count
  300. FROM $track_online_table track INNER JOIN $table_user u
  301. ON (u.id=track.login_user_id)
  302. WHERE u.status != ".ANONYMOUS." AND login_date >= '$current_date' ";
  303. }
  304. if (api_get_multiple_access_url()) {
  305. $access_url_id = api_get_current_access_url_id();
  306. if ($access_url_id != -1) {
  307. if ($friends) {
  308. // friends from social network is online
  309. $query = "SELECT DISTINCT count(login_user_id) as count
  310. FROM $track_online_table track
  311. INNER JOIN $friend_user_table ON (friend_user_id = login_user_id)
  312. WHERE
  313. track.access_url_id = $access_url_id AND
  314. login_date >= '".$current_date."' AND
  315. friend_user_id <> '".api_get_user_id()."' AND
  316. relation_type='".USER_RELATION_TYPE_FRIEND."' ";
  317. } else {
  318. // all users online
  319. $query = "SELECT count(login_id) as count FROM $track_online_table track
  320. INNER JOIN $table_user u ON (u.id=track.login_user_id)
  321. WHERE
  322. u.status != ".ANONYMOUS." AND
  323. track.access_url_id = $access_url_id AND
  324. login_date >= '$current_date' ";
  325. }
  326. }
  327. }
  328. // Dev purposes show all users online
  329. /*$table_user = Database::get_main_table(TABLE_MAIN_USER);
  330. $query = "SELECT count(*) as count FROM ".$table_user;*/
  331. $result = Database::query($query);
  332. if (Database::num_rows($result) > 0) {
  333. $row = Database::fetch_array($result);
  334. return $row['count'];
  335. } else {
  336. return false;
  337. }
  338. }
  339. /**
  340. * Returns a list (array) of users who are online and in this course.
  341. * @param int User ID
  342. * @param int Number of minutes
  343. * @param string Course code (could be empty, but then the function returns false)
  344. * @return array Each line gives a user id and a login time
  345. */
  346. function who_is_online_in_this_course($from, $number_of_items, $uid, $time_limit, $course_code)
  347. {
  348. if (empty($course_code)) return false;
  349. if (empty($time_limit)) {
  350. $time_limit = api_get_setting('time_limit_whosonline');
  351. } else {
  352. $time_limit = intval($time_limit);
  353. }
  354. $online_time = time() - $time_limit*60;
  355. $current_date = api_get_utc_datetime($online_time);
  356. $track_online_table = Database::get_main_table(TABLE_STATISTIC_TRACK_E_ONLINE);
  357. $course_code = Database::escape_string($course_code);
  358. $courseInfo = api_get_course_info($course_code);
  359. $courseId = $courseInfo['real_id'];
  360. $from = intval($from);
  361. $number_of_items = intval($number_of_items);
  362. $query = "SELECT login_user_id, login_date FROM $track_online_table
  363. WHERE login_user_id <> 2 AND c_id = $courseId AND login_date >= '$current_date'
  364. LIMIT $from, $number_of_items ";
  365. $result = Database::query($query);
  366. if ($result) {
  367. $users_online = array();
  368. while(list($login_user_id, $login_date) = Database::fetch_row($result)) {
  369. $users_online[] = $login_user_id;
  370. }
  371. return $users_online;
  372. } else {
  373. return false;
  374. }
  375. }
  376. function who_is_online_in_this_course_count($uid, $time_limit, $coursecode=null)
  377. {
  378. if (empty($coursecode)) {
  379. return false;
  380. }
  381. $track_online_table = Database::get_main_table(TABLE_STATISTIC_TRACK_E_ONLINE);
  382. $coursecode = Database::escape_string($coursecode);
  383. $time_limit = Database::escape_string($time_limit);
  384. $online_time = time() - $time_limit * 60;
  385. $current_date = api_get_utc_datetime($online_time);
  386. $courseId = api_get_course_int_id($coursecode);
  387. if (empty($courseId)) {
  388. return false;
  389. }
  390. $query = "SELECT count(login_user_id) as count
  391. FROM $track_online_table
  392. WHERE login_user_id <> 2 AND c_id = $courseId AND login_date >= '$current_date' ";
  393. $result = Database::query($query);
  394. if (Database::num_rows($result) > 0) {
  395. $row = Database::fetch_array($result);
  396. return $row['count'];
  397. } else {
  398. return false;
  399. }
  400. }
  401. /**
  402. * Gets the full user name for a given user ID
  403. * @param int User ID
  404. * @return string The full username, elements separated by an HTML space
  405. * @deprecated user api_get_user_info($user_id)
  406. */
  407. function GetFullUserName($uid) {
  408. $uid = (int) $uid;
  409. $uid = intval($uid);
  410. $user_table = Database::get_main_table(TABLE_MAIN_USER);
  411. $query = "SELECT firstname, lastname FROM ".$user_table." WHERE id=$uid";
  412. $result = @Database::query($query);
  413. if (count($result)>0) {
  414. while(list($firstname,$lastname)= Database::fetch_array($result)) {
  415. $str = str_replace(' ', '&nbsp;', api_get_person_name($firstname, $lastname));
  416. return $str;
  417. }
  418. }
  419. }
  420. /**
  421. * Gets a list of chat calls made by others to the current user (info kept in main.user table)
  422. * @param none - taken from global space
  423. * @return string An HTML-formatted message
  424. */
  425. function chatcall() {
  426. $_cid = api_get_course_id();
  427. $_user = api_get_user_info();
  428. if (!$_user['user_id']) {
  429. return (false);
  430. }
  431. $userId = intval($_user['user_id']);
  432. $track_user_table = Database::get_main_table(TABLE_MAIN_USER);
  433. $sql="SELECT chatcall_user_id, chatcall_date FROM $track_user_table
  434. WHERE ( id = $userId )";
  435. $result=Database::query($sql);
  436. $row=Database::fetch_array($result);
  437. $login_date=$row['chatcall_date'];
  438. $hour = substr($login_date,11,2);
  439. $minute = substr($login_date,14,2);
  440. $second = substr($login_date,17,2);
  441. $month = substr($login_date,5,2);
  442. $day = substr($login_date,8,2);
  443. $year = substr($login_date,0,4);
  444. $calltime = mktime($hour,$minute,$second,$month,$day,$year);
  445. $time = api_get_utc_datetime();
  446. $minute_passed=5; //within this limit, the chat call request is valid
  447. $limittime = mktime(date("H"),date("i")-$minute_passed,date("s"),date("m"),date("d"),date("Y"));
  448. if (($row['chatcall_user_id']) and ($calltime>$limittime)) {
  449. $webpath=api_get_path(WEB_CODE_PATH);
  450. $message=get_lang('YouWereCalled').' : '.GetFullUserName($row['chatcall_user_id'],'').'<br>'.get_lang('DoYouAccept')
  451. ."<p>"
  452. ."<a href=\"".$webpath."chat/chat.php?cidReq=".$_cid."&origin=whoisonlinejoin\">"
  453. . get_lang("Yes")
  454. ."</a>"
  455. ."&nbsp;&nbsp;|&nbsp;&nbsp;"
  456. ."<a href=\"".api_get_path(WEB_PATH)."webchatdeny.php\">"
  457. . get_lang("No")
  458. ."</a>"
  459. ."</p>";
  460. return($message);
  461. } else {
  462. return false;
  463. }
  464. }