add_users_to_session.php 18 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550
  1. <?php
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2004-2009 Dokeos SPRL
  6. Copyright (c) 2003 Ghent University (UGent)
  7. Copyright (c) 2001 Universite catholique de Louvain (UCL)
  8. Copyright (c) Olivier Brouckaert
  9. For a full list of contributors, see "credits.txt".
  10. The full license can be read in "license.txt".
  11. This program is free software; you can redistribute it and/or
  12. modify it under the terms of the GNU General Public License
  13. as published by the Free Software Foundation; either version 2
  14. of the License, or (at your option) any later version.
  15. See the GNU General Public License for more details.
  16. Contact: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium, info@dokeos.com
  17. ==============================================================================
  18. */
  19. /**
  20. ==============================================================================
  21. * @package dokeos.admin
  22. ==============================================================================
  23. */
  24. // name of the language file that needs to be included
  25. $language_file='admin';
  26. // resetting the course id
  27. $cidReset=true;
  28. // including some necessary dokeos files
  29. require('../inc/global.inc.php');
  30. require_once ('../inc/lib/xajax/xajax.inc.php');
  31. $xajax = new xajax();
  32. //$xajax->debugOn();
  33. $xajax -> registerFunction ('search_users');
  34. // setting the section (for the tabs)
  35. $this_section = SECTION_PLATFORM_ADMIN;
  36. // Access restrictions
  37. api_protect_admin_script(true);
  38. // setting breadcrumbs
  39. $interbreadcrumb[]=array('url' => 'index.php','name' => get_lang('PlatformAdmin'));
  40. $interbreadcrumb[]=array('url' => "session_list.php","name" => get_lang('SessionList'));
  41. // Database Table Definitions
  42. $tbl_session = Database::get_main_table(TABLE_MAIN_SESSION);
  43. $tbl_session_rel_class = Database::get_main_table(TABLE_MAIN_SESSION_CLASS);
  44. $tbl_session_rel_course = Database::get_main_table(TABLE_MAIN_SESSION_COURSE);
  45. $tbl_session_rel_course_rel_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  46. $tbl_course = Database::get_main_table(TABLE_MAIN_COURSE);
  47. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  48. $tbl_session_rel_user = Database::get_main_table(TABLE_MAIN_SESSION_USER);
  49. $tbl_class = Database::get_main_table(TABLE_MAIN_CLASS);
  50. $tbl_class_user = Database::get_main_table(TABLE_MAIN_CLASS_USER);
  51. // setting the name of the tool
  52. $tool_name=get_lang('SubscribeUsersToSession');
  53. $id_session=intval($_GET['id_session']);
  54. $add_type = 'unique';
  55. if(isset($_GET['add_type']) && $_GET['add_type']!=''){
  56. $add_type = $_GET['add_type'];
  57. }
  58. if(!api_is_platform_admin()) {
  59. $sql = 'SELECT session_admin_id FROM '.Database :: get_main_table(TABLE_MAIN_SESSION).' WHERE id='.$id_session;
  60. $rs = api_sql_query($sql,__FILE__,__LINE__);
  61. if(Database::result($rs,0,0)!=$_user['user_id']) {
  62. api_not_allowed(true);
  63. }
  64. }
  65. function search_users($needle)
  66. {
  67. global $tbl_user;
  68. $xajax_response = new XajaxResponse();
  69. $return = '';
  70. if (!empty($needle)) {
  71. // xajax send utf8 datas... datas in db can be non-utf8 datas
  72. $charset = api_get_setting('platform_charset');
  73. $needle = mb_convert_encoding($needle, $charset, 'utf-8');
  74. // search users where username or firstname or lastname begins likes $needle
  75. $sql = 'SELECT user_id, username, lastname, firstname FROM '.$tbl_user.' user
  76. WHERE (username LIKE "'.$needle.'%"
  77. OR firstname LIKE "'.$needle.'%"
  78. OR lastname LIKE "'.$needle.'%")
  79. ORDER BY lastname, firstname, username
  80. LIMIT 11';
  81. global $_configuration;
  82. if ($_configuration['multiple_access_urls']==true) {
  83. $tbl_user_rel_access_url= Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  84. $access_url_id = api_get_current_access_url_id();
  85. if ($access_url_id != -1){
  86. $sql = 'SELECT user.user_id, username, lastname, firstname FROM '.$tbl_user.' user
  87. INNER JOIN '.$tbl_user_rel_access_url.' url_user ON (url_user.user_id=user.user_id)
  88. WHERE access_url_id = '.$access_url_id.' AND (username LIKE "'.$needle.'%"
  89. OR firstname LIKE "'.$needle.'%"
  90. OR lastname LIKE "'.$needle.'%")
  91. ORDER BY lastname, firstname, username
  92. LIMIT 11';
  93. }
  94. }
  95. $rs = api_sql_query($sql, __FILE__, __LINE__);
  96. $i=0;
  97. while ($user = Database :: fetch_array($rs)) {
  98. $i++;
  99. if ($i<=10) {
  100. $return .= '<a href="#" onclick="add_user_to_session(\''.$user['user_id'].'\',\''.$user['lastname'].' '.$user['firstname'].' ('.$user['username'].')'.'\')">'.$user['lastname'].' '.$user['firstname'].' ('.$user['username'].')</a><br />';
  101. } else {
  102. $return .= '...<br />';
  103. }
  104. }
  105. }
  106. $xajax_response -> addAssign('ajax_list_users','innerHTML',utf8_encode($return));
  107. return $xajax_response;
  108. }
  109. $xajax -> processRequests();
  110. $htmlHeadXtra[] = $xajax->getJavascript('../inc/lib/xajax/');
  111. $htmlHeadXtra[] = '
  112. <script type="text/javascript">
  113. function add_user_to_session (code, content) {
  114. document.getElementById("user_to_add").value = "";
  115. document.getElementById("ajax_list_users").innerHTML = "";
  116. destination = document.getElementById("destination_users");
  117. for (i=0;i<destination.length;i++) {
  118. if(destination.options[i].text == content) {
  119. return false;
  120. }
  121. }
  122. destination.options[destination.length] = new Option(content,code);
  123. destination.selectedIndex = -1;
  124. sortOptions(destination.options);
  125. }
  126. function remove_item(origin)
  127. {
  128. for(var i = 0 ; i<origin.options.length ; i++) {
  129. if(origin.options[i].selected) {
  130. origin.options[i]=null;
  131. i = i-1;
  132. }
  133. }
  134. }
  135. </script>';
  136. $formSent=0;
  137. $errorMsg=$firstLetterUser=$firstLetterSession='';
  138. $UserList=$SessionList=array();
  139. $users=$sessions=array();
  140. $noPHP_SELF=true;
  141. if($_POST['formSent']) {
  142. $formSent=$_POST['formSent'];
  143. $firstLetterUser=$_POST['firstLetterUser'];
  144. $firstLetterSession=$_POST['firstLetterSession'];
  145. $UserList=$_POST['sessionUsersList'];
  146. $ClassList=$_POST['sessionClassesList'];
  147. if(!is_array($UserList)) {
  148. $UserList=array();
  149. }
  150. if ($formSent == 1) {
  151. $sql = "SELECT id_user FROM $tbl_session_rel_user WHERE id_session='$id_session'";
  152. $result = api_sql_query($sql,__FILE__,__LINE__);
  153. $existingUsers = array();
  154. while($row = Database::fetch_array($result)){
  155. $existingUsers[] = $row['id_user'];
  156. }
  157. $sql = "SELECT course_code FROM $tbl_session_rel_course WHERE id_session='$id_session'";
  158. $result=api_sql_query($sql,__FILE__,__LINE__);
  159. $CourseList=array();
  160. while($row=Database::fetch_array($result)) {
  161. $CourseList[]=$row['course_code'];
  162. }
  163. foreach ($CourseList as $enreg_course) {
  164. $nbr_users=0;
  165. foreach ($UserList as $enreg_user) {
  166. if(!in_array($enreg_user, $existingUsers)) {
  167. $insert_sql = "INSERT IGNORE INTO $tbl_session_rel_course_rel_user(id_session,course_code,id_user) VALUES('$id_session','$enreg_course','$enreg_user')";
  168. api_sql_query($insert_sql,__FILE__,__LINE__);
  169. if(Database::affected_rows()) {
  170. $nbr_users++;
  171. }
  172. }
  173. }
  174. foreach ($existingUsers as $existing_user) {
  175. if(!in_array($existing_user, $UserList)) {
  176. $sql = "DELETE FROM $tbl_session_rel_course_rel_user WHERE id_session='$id_session' AND course_code='$enreg_course' AND id_user='$existing_user'";
  177. api_sql_query($sql,__FILE__,__LINE__);
  178. if(Database::affected_rows()) {
  179. $nbr_users--;
  180. }
  181. }
  182. }
  183. $sql = "SELECT COUNT(id_user) as nbUsers FROM $tbl_session_rel_course_rel_user WHERE id_session='$id_session' AND course_code='$enreg_course'";
  184. $rs = api_sql_query($sql, __FILE__, __LINE__);
  185. list($nbr_users) = Database::fetch_array($rs);
  186. $update_sql = "UPDATE $tbl_session_rel_course SET nbr_users=$nbr_users WHERE id_session='$id_session' AND course_code='$enreg_course'";
  187. api_sql_query($update_sql,__FILE__,__LINE__);
  188. }
  189. api_sql_query("DELETE FROM $tbl_session_rel_user WHERE id_session = $id_session",__FILE__,__LINE__);
  190. $nbr_users = 0;
  191. foreach ($UserList as $enreg_user) {
  192. $nbr_users++;
  193. $insert_sql = "INSERT IGNORE INTO $tbl_session_rel_user(id_session, id_user) VALUES('$id_session','$enreg_user')";
  194. api_sql_query($insert_sql,__FILE__,__LINE__);
  195. }
  196. $nbr_users = count($UserList);
  197. $update_sql = "UPDATE $tbl_session SET nbr_users= $nbr_users WHERE id='$id_session' ";
  198. api_sql_query($update_sql,__FILE__,__LINE__);
  199. //adding the session to the access_url_rel_session table
  200. global $_configuration;
  201. require_once (api_get_path(LIBRARY_PATH).'urlmanager.lib.php');
  202. if ($_configuration['multiple_access_urls']==true) {
  203. $tbl_user_rel_access_url= Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  204. $access_url_id = api_get_current_access_url_id();
  205. UrlManager::add_session_to_url($id_session,$access_url_id);
  206. } else {
  207. // we are filling by default the access_url_rel_session table
  208. UrlManager::add_session_to_url($id_session,1);
  209. }
  210. //if(empty($_GET['add']))
  211. //header('Location: '.$_GET['page'].'?id_session='.$id_session);
  212. //else
  213. header('Location: resume_session.php?id_session='.$id_session);
  214. }
  215. }
  216. Display::display_header($tool_name);
  217. api_display_tool_title($tool_name);
  218. $nosessionUsersList = $sessionUsersList = array();
  219. /*$sql = 'SELECT COUNT(1) FROM '.$tbl_user;
  220. $rs = api_sql_query($sql, __FILE__, __LINE__);
  221. $count_courses = Database::result($rs, 0, 0);*/
  222. $ajax_search = $add_type == 'unique' ? true : false;
  223. if ($ajax_search) {
  224. $sql="SELECT user_id, lastname, firstname, username, id_session
  225. FROM $tbl_user
  226. INNER JOIN $tbl_session_rel_user
  227. ON $tbl_session_rel_user.id_user = $tbl_user.user_id
  228. AND $tbl_session_rel_user.id_session = ".intval($id_session)."
  229. ORDER BY lastname,firstname,username";
  230. global $_configuration;
  231. if ($_configuration['multiple_access_urls']==true) {
  232. $tbl_user_rel_access_url= Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  233. $access_url_id = api_get_current_access_url_id();
  234. if ($access_url_id != -1){
  235. $sql="SELECT u.user_id, lastname, firstname, username, id_session
  236. FROM $tbl_user u
  237. INNER JOIN $tbl_session_rel_user
  238. ON $tbl_session_rel_user.id_user = u.user_id
  239. AND $tbl_session_rel_user.id_session = ".intval($id_session)."
  240. INNER JOIN $tbl_user_rel_access_url url_user ON (url_user.user_id=u.user_id)
  241. WHERE access_url_id = $access_url_id
  242. ORDER BY lastname,firstname,username";
  243. }
  244. }
  245. $result=api_sql_query($sql,__FILE__,__LINE__);
  246. $Users=api_store_result($result);
  247. foreach($Users as $user) {
  248. $sessionUsersList[$user['user_id']] = $user ;
  249. }
  250. } else {
  251. $sql="SELECT user_id, lastname, firstname, username, id_session
  252. FROM $tbl_user
  253. LEFT JOIN $tbl_session_rel_user
  254. ON $tbl_session_rel_user.id_user = $tbl_user.user_id AND id_session = '$id_session'
  255. ORDER BY lastname,firstname,username";
  256. global $_configuration;
  257. if ($_configuration['multiple_access_urls']==true) {
  258. $tbl_user_rel_access_url= Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  259. $access_url_id = api_get_current_access_url_id();
  260. if ($access_url_id != -1){
  261. $sql="SELECT u.user_id, lastname, firstname, username, id_session
  262. FROM $tbl_user u
  263. LEFT JOIN $tbl_session_rel_user
  264. ON $tbl_session_rel_user.id_user = u.user_id AND id_session = '$id_session'
  265. INNER JOIN $tbl_user_rel_access_url url_user ON (url_user.user_id=u.user_id)
  266. WHERE access_url_id = $access_url_id
  267. ORDER BY lastname,firstname,username";
  268. }
  269. }
  270. $result=api_sql_query($sql,__FILE__,__LINE__);
  271. $Users=api_store_result($result);
  272. //var_dump($_REQUEST['id_session']);
  273. foreach ($Users as $user) {
  274. if($user['id_session'] == $id_session)
  275. $sessionUsersList[$user['user_id']] = $user ;
  276. else
  277. $nosessionUsersList[$user['user_id']] = $user ;
  278. }
  279. }
  280. if ($add_type == 'multiple') {
  281. $link_add_type_unique = '<a href="'.api_get_self().'?id_session='.$id_session.'&add='.$_GET['add'].'&add_type=unique">'.get_lang('SessionAddTypeUnique').'</a>';
  282. $link_add_type_multiple = get_lang('SessionAddTypeMultiple');
  283. } else {
  284. $link_add_type_unique = get_lang('SessionAddTypeUnique');
  285. $link_add_type_multiple = '<a href="'.api_get_self().'?id_session='.$id_session.'&add='.$_GET['add'].'&add_type=multiple">'.get_lang('SessionAddTypeMultiple').'</a>';
  286. }
  287. ?>
  288. <div style="text-align: left;">
  289. <?php echo $link_add_type_unique ?>&nbsp;|&nbsp;<?php echo $link_add_type_multiple ?>
  290. </div>
  291. <br><br>
  292. <form name="formulaire" method="post" action="<?php echo api_get_self(); ?>?page=<?php echo $_GET['page'] ?>&id_session=<?php echo $id_session; ?><?php if(!empty($_GET['add'])) echo '&add=true' ; ?>" style="margin:0px;">
  293. <input type="hidden" name="formSent" value="1" />
  294. <?php
  295. if(!empty($errorMsg)) {
  296. Display::display_normal_message($errorMsg); //main API
  297. }
  298. ?>
  299. <table border="0" cellpadding="5" cellspacing="0" width="100%">
  300. <!-- Users -->
  301. <tr>
  302. <td align="center"><b><?php echo get_lang('UserListInPlatform') ?> :</b>
  303. </td>
  304. <td></td>
  305. <td align="center"><b><?php echo get_lang('UserListInSession') ?> :</b></td>
  306. </tr>
  307. <tr>
  308. <td align="center">
  309. <div id="content_source">
  310. <?php
  311. if ($ajax_search) {
  312. ?>
  313. <input type="text" id="user_to_add" onkeyup="xajax_search_users(this.value)" />
  314. <div id="ajax_list_users"></div>
  315. <?php
  316. } else {
  317. ?>
  318. <select id="origin_users" name="nosessionUsersList[]" multiple="multiple" size="15" style="width:300px;">
  319. <?php
  320. foreach($nosessionUsersList as $enreg) {
  321. ?>
  322. <option value="<?php echo $enreg['user_id']; ?>" <?php if(in_array($enreg['user_id'],$UserList)) echo 'selected="selected"'; ?>><?php echo $enreg['lastname'].' '.$enreg['firstname'].' ('.$enreg['username'].')'; ?></option>
  323. <?php
  324. }
  325. ?>
  326. </select>
  327. <?php
  328. }
  329. unset($nosessionUsersList);
  330. ?>
  331. </div>
  332. </td>
  333. <td width="10%" valign="middle" align="center">
  334. <?php
  335. if ($ajax_search) {
  336. ?>
  337. <input type="button" onclick="remove_item(document.getElementById('destination_users'))" value="<<" />
  338. <?php
  339. } else {
  340. ?>
  341. <input type="button" onclick="moveItem(document.getElementById('origin_users'), document.getElementById('destination_users'))" value=">>" />
  342. <br /><br />
  343. <input type="button" onclick="moveItem(document.getElementById('destination_users'), document.getElementById('origin_users'))" value="<<" />
  344. <?php
  345. }
  346. ?>
  347. <br /><br /><br /><br /><br /><br />
  348. </td>
  349. <td align="center">
  350. <select id="destination_users" name="sessionUsersList[]" multiple="multiple" size="15" style="width:300px;">
  351. <?php
  352. foreach($sessionUsersList as $enreg) {
  353. ?>
  354. <option value="<?php echo $enreg['user_id']; ?>"><?php echo $enreg['lastname'].' '.$enreg['firstname'].' ('.$enreg['username'].')'; ?></option>
  355. <?php
  356. }
  357. unset($sessionUsersList);
  358. ?>
  359. </select></td>
  360. </tr>
  361. <tr>
  362. <td colspan="3" align="center">
  363. <br />
  364. <?php
  365. if(isset($_GET['add']))
  366. echo '<input type="button" value="'.get_lang("FinishSessionCreation").'" onclick="valide()" />';
  367. else
  368. echo '<input type="button" value="'.get_lang('Ok').'" onclick="valide()" />';
  369. ?>
  370. </td>
  371. </tr>
  372. </table>
  373. </form>
  374. <script type="text/javascript">
  375. <!--
  376. function moveItem(origin , destination){
  377. for(var i = 0 ; i<origin.options.length ; i++) {
  378. if(origin.options[i].selected) {
  379. destination.options[destination.length] = new Option(origin.options[i].text,origin.options[i].value);
  380. origin.options[i]=null;
  381. i = i-1;
  382. }
  383. }
  384. destination.selectedIndex = -1;
  385. sortOptions(destination.options);
  386. }
  387. function sortOptions(options) {
  388. newOptions = new Array();
  389. for (i = 0 ; i<options.length ; i++)
  390. newOptions[i] = options[i];
  391. newOptions = newOptions.sort(mysort);
  392. options.length = 0;
  393. for(i = 0 ; i < newOptions.length ; i++)
  394. options[i] = newOptions[i];
  395. }
  396. function mysort(a, b){
  397. if(a.text.toLowerCase() > b.text.toLowerCase()){
  398. return 1;
  399. }
  400. if(a.text.toLowerCase() < b.text.toLowerCase()){
  401. return -1;
  402. }
  403. return 0;
  404. }
  405. function valide(){
  406. var options = document.getElementById('destination_users').options;
  407. for (i = 0 ; i<options.length ; i++)
  408. options[i].selected = true;
  409. /*
  410. var options = document.getElementById('destination_classes').options;
  411. for (i = 0 ; i<options.length ; i++)
  412. options[i].selected = true;
  413. */
  414. document.forms.formulaire.submit();
  415. }
  416. function loadUsersInSelect(select){
  417. var xhr_object = null;
  418. if(window.XMLHttpRequest) // Firefox
  419. xhr_object = new XMLHttpRequest();
  420. else if(window.ActiveXObject) // Internet Explorer
  421. xhr_object = new ActiveXObject("Microsoft.XMLHTTP");
  422. else // XMLHttpRequest non supporté par le navigateur
  423. alert("Votre navigateur ne supporte pas les objets XMLHTTPRequest...");
  424. //xhr_object.open("GET", "loadUsersInSelect.ajax.php?id_session=<?php echo $id_session ?>&letter="+select.options[select.selectedIndex].text, false);
  425. xhr_object.open("POST", "loadUsersInSelect.ajax.php");
  426. xhr_object.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
  427. nosessionUsers = makepost(document.getElementById('origin_users'));
  428. sessionUsers = makepost(document.getElementById('destination_users'));
  429. nosessionClasses = makepost(document.getElementById('origin_classes'));
  430. sessionClasses = makepost(document.getElementById('destination_classes'));
  431. xhr_object.send("nosessionusers="+nosessionUsers+"&sessionusers="+sessionUsers+"&nosessionclasses="+nosessionClasses+"&sessionclasses="+sessionClasses);
  432. xhr_object.onreadystatechange = function() {
  433. if(xhr_object.readyState == 4) {
  434. document.getElementById('content_source').innerHTML = result = xhr_object.responseText;
  435. //alert(xhr_object.responseText);
  436. }
  437. }
  438. }
  439. function makepost(select){
  440. var options = select.options;
  441. var ret = "";
  442. for (i = 0 ; i<options.length ; i++)
  443. ret = ret + options[i].value +'::'+options[i].text+";;";
  444. return ret;
  445. }
  446. -->
  447. </script>
  448. <?php
  449. /*
  450. ==============================================================================
  451. FOOTER
  452. ==============================================================================
  453. */
  454. Display::display_footer();
  455. ?>