global.inc.php 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * It is recommended that ALL Chamilo scripts include this important file.
  5. * This script manages
  6. * - http get, post, post_files, session, server-vars extraction into global namespace;
  7. * (which doesn't occur anymore when servertype config setting is set to test,
  8. * and which will disappear completely in Dokeos 1.6.1)
  9. * - include of /conf/configuration.php;
  10. * - include of several libraries: main_api, database, display, text, security;
  11. * - selecting the main database;
  12. * - include of language files.
  13. *
  14. * @package chamilo.include
  15. * @todo isn't configuration.php renamed to configuration.inc.php yet?
  16. * @todo use the $_configuration array for all the needed variables
  17. * @todo remove the code that displays the button that links to the install page
  18. * but use a redirect immediately. By doing so the $already_installed variable can be removed.
  19. * @todo make it possible to enable / disable the tracking through the Chamilo config page.
  20. *
  21. */
  22. // Showing/hiding error codes in global error messages.
  23. define('SHOW_ERROR_CODES', false);
  24. // Determine the directory path where this current file lies.
  25. // This path will be useful to include the other intialisation files.
  26. $includePath = dirname(__FILE__);
  27. // @todo Isn't this file renamed to configuration.inc.php yet?
  28. // Include the main Chamilo platform configuration file.
  29. $main_configuration_file_path = $includePath.'/conf/configuration.php';
  30. $already_installed = false;
  31. if (file_exists($main_configuration_file_path)) {
  32. require_once $main_configuration_file_path;
  33. $already_installed = true;
  34. } else {
  35. $_configuration = array();
  36. }
  37. //Redirects to the main/install/ page
  38. if (!$already_installed) {
  39. $global_error_code = 2;
  40. // The system has not been installed yet.
  41. require $includePath.'/global_error_message.inc.php';
  42. die();
  43. }
  44. // Ensure that _configuration is in the global scope before loading
  45. // main_api.lib.php. This is particularly helpful for unit tests
  46. if (!isset($GLOBALS['_configuration'])) {
  47. $GLOBALS['_configuration'] = $_configuration;
  48. }
  49. // Code for trnasitional purposes, it can be removed right before the 1.8.7 release.
  50. if (empty($_configuration['system_version'])) {
  51. $_configuration['system_version'] = $_configuration['dokeos_version'];
  52. $_configuration['system_stable'] = $_configuration['dokeos_stable'];
  53. $_configuration['software_url'] = 'http://www.chamilo.org/';
  54. }
  55. // For backward compatibility.
  56. $_configuration['dokeos_version'] = $_configuration['system_version'];
  57. $_configuration['dokeos_stable'] = $_configuration['system_stable'];
  58. // Include the main Chamilo platform library file.
  59. require_once $includePath.'/lib/main_api.lib.php';
  60. api_check_php_version($includePath.'/');
  61. // Do not over-use this variable. It is only for this script's local use.
  62. $lib_path = api_get_path(LIBRARY_PATH);
  63. // Fix bug in IIS that doesn't fill the $_SERVER['REQUEST_URI'].
  64. api_request_uri();
  65. // Add the path to the pear packages to the include path
  66. ini_set('include_path', api_create_include_path_setting());
  67. // This is for compatibility with MAC computers.
  68. ini_set('auto_detect_line_endings', '1');
  69. // Include the libraries that are necessary everywhere
  70. require_once dirname(__FILE__).'/autoload.inc.php';
  71. require_once $lib_path.'database.lib.php';
  72. //require_once $lib_path.'template.lib.php'; moved to autoload
  73. //require_once $lib_path.'display.lib.php';
  74. require_once $lib_path.'text.lib.php';
  75. //require_once $lib_path.'image.lib.php'; moved to autoload
  76. require_once $lib_path.'array.lib.php';
  77. //require_once $lib_path.'security.lib.php'; moved to autoload
  78. require_once $lib_path.'events.lib.inc.php';
  79. //require_once $lib_path.'debug.lib.php'; moved to autoload
  80. //require_once $lib_path.'rights.lib.php'; moved to autoload
  81. require_once $lib_path.'model.lib.php';
  82. //require_once $lib_path.'sortable_table.class.php'; moved to autoload
  83. //require_once $lib_path.'usermanager.lib.php'; moved to autoload
  84. //require_once $lib_path.'message.lib.php'; moved to autoload
  85. //require_once $lib_path.'social.lib.php'; moved to autoload
  86. //require_once $lib_path.'notification.lib.php'; moved to autoload
  87. require_once $lib_path.'course.lib.php';
  88. //require_once $lib_path.'sessionmanager.lib.php'; moved to autoload
  89. //require_once $lib_path.'tracking.lib.php'; moved to autoload
  90. //require_once $lib_path.'formvalidator/FormValidator.class.php'; moved to autoload
  91. require_once $lib_path.'online.inc.php';
  92. //Here we load the new Doctrine class (just for tests)
  93. //require_once $lib_path.'db.lib.php';
  94. //$db = new db();
  95. /* DATABASE CONNECTION */
  96. // @todo: this shouldn't be done here. It should be stored correctly during installation.
  97. if (empty($_configuration['statistics_database']) && $already_installed) {
  98. $_configuration['statistics_database'] = $_configuration['main_database'];
  99. }
  100. global $database_connection;
  101. // Connect to the server database and select the main chamilo database.
  102. if (!($conn_return = @Database::connect(
  103. array(
  104. 'server' => $_configuration['db_host'],
  105. 'username' => $_configuration['db_user'],
  106. 'password' => $_configuration['db_password'],
  107. 'persistent' => $_configuration['db_persistent_connection'] // When $_configuration['db_persistent_connection'] is set, it is expected to be a boolean type.
  108. )))) {
  109. $global_error_code = 3;
  110. // The database server is not available or credentials are invalid.
  111. require $includePath.'/global_error_message.inc.php';
  112. die();
  113. }
  114. if (!$_configuration['db_host']) {
  115. $global_error_code = 4;
  116. // A configuration option about database server is missing.
  117. require $includePath.'/global_error_message.inc.php';
  118. die();
  119. }
  120. /* RETRIEVING ALL THE CHAMILO CONFIG SETTINGS FOR MULTIPLE URLs FEATURE*/
  121. if (!empty($_configuration['multiple_access_urls'])) {
  122. $_configuration['access_url'] = 1;
  123. $access_urls = api_get_access_urls();
  124. $protocol = ((!empty($_SERVER['HTTPS']) && strtoupper($_SERVER['HTTPS']) != 'OFF') ? 'https' : 'http').'://';
  125. $request_url1 = $protocol.$_SERVER['SERVER_NAME'].'/';
  126. $request_url2 = $protocol.$_SERVER['HTTP_HOST'].'/';
  127. foreach ($access_urls as & $details) {
  128. if ($request_url1 == $details['url'] or $request_url2 == $details['url']) {
  129. $_configuration['access_url'] = $details['id'];
  130. }
  131. }
  132. } else {
  133. $_configuration['access_url'] = 1;
  134. }
  135. // The system has not been designed to use special SQL modes that were introduced since MySQL 5.
  136. Database::query("set session sql_mode='';");
  137. if (!Database::select_db($_configuration['main_database'], $database_connection)) {
  138. $global_error_code = 5;
  139. // Connection to the main Chamilo database is impossible, it might be missing or restricted or its configuration option might be incorrect.
  140. require $includePath.'/global_error_message.inc.php';
  141. die();
  142. }
  143. /* Initialization of the default encodings */
  144. // The platform's character set must be retrieved at this early moment.
  145. $sql = "SELECT selected_value FROM settings_current WHERE variable = 'platform_charset';";
  146. $result = Database::query($sql);
  147. while ($row = @Database::fetch_array($result)) {
  148. $charset = $row[0];
  149. }
  150. if (empty($charset)) {
  151. $charset = 'UTF-8';
  152. }
  153. // Preserving the value of the global variable $charset.
  154. $charset_initial_value = $charset;
  155. // Initialization of the internationalization library.
  156. api_initialize_internationalization();
  157. // Initialization of the default encoding that will be used by the multibyte string routines in the internationalization library.
  158. api_set_internationalization_default_encoding($charset);
  159. //setting_gettext();
  160. // Initialization of the database encoding to be used.
  161. Database::query("SET SESSION character_set_server='utf8';");
  162. Database::query("SET SESSION collation_server='utf8_general_ci';");
  163. if (api_is_utf8($charset)) {
  164. // See Bug #1802: For UTF-8 systems we prefer to use "SET NAMES 'utf8'" statement in order to avoid a bizarre problem with Chinese language.
  165. Database::query("SET NAMES 'utf8';");
  166. } else {
  167. Database::query("SET CHARACTER SET '" . Database::to_db_encoding($charset) . "';");
  168. }
  169. // Start session after the internationalization library has been initialized.
  170. Chamilo::session()->start($already_installed);
  171. // Remove quotes added by PHP - get_magic_quotes_gpc() is deprecated in PHP 5 see #2970
  172. if (function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) {
  173. array_walk_recursive_limited($_GET, 'stripslashes', true);
  174. array_walk_recursive_limited($_POST, 'stripslashes', true);
  175. array_walk_recursive_limited($_COOKIE, 'stripslashes', true);
  176. array_walk_recursive_limited($_REQUEST, 'stripslashes', true);
  177. }
  178. // access_url == 1 is the default chamilo location
  179. if ($_configuration['access_url'] != 1) {
  180. $url_info = api_get_access_url($_configuration['access_url']);
  181. if ($url_info['active'] == 1) {
  182. $settings_by_access = & api_get_settings(null, 'list', $_configuration['access_url'], 1);
  183. foreach ($settings_by_access as & $row) {
  184. if (empty($row['variable'])) {
  185. $row['variable'] = 0;
  186. }
  187. if (empty($row['subkey'])) {
  188. $row['subkey'] = 0;
  189. }
  190. if (empty($row['category'])) {
  191. $row['category'] = 0;
  192. }
  193. $settings_by_access_list[$row['variable']][$row['subkey']][$row['category']] = $row;
  194. }
  195. }
  196. }
  197. $result = & api_get_settings(null, 'list', 1);
  198. foreach ($result as & $row) {
  199. if ($_configuration['access_url'] != 1) {
  200. if ($url_info['active'] == 1) {
  201. $var = empty($row['variable']) ? 0 : $row['variable'];
  202. $subkey = empty($row['subkey']) ? 0 : $row['subkey'];
  203. $category = empty($row['category']) ? 0 : $row['category'];
  204. }
  205. if ($row['access_url_changeable'] == 1 && $url_info['active'] == 1) {
  206. if ($settings_by_access_list[$var][$subkey][$category]['selected_value'] != '') {
  207. if ($row['subkey'] == null) {
  208. $_setting[$row['variable']] = $settings_by_access_list[$var][$subkey][$category]['selected_value'];
  209. } else {
  210. $_setting[$row['variable']][$row['subkey']] = $settings_by_access_list[$var][$subkey][$category]['selected_value'];
  211. }
  212. } else {
  213. if ($row['subkey'] == null) {
  214. $_setting[$row['variable']] = $row['selected_value'];
  215. } else {
  216. $_setting[$row['variable']][$row['subkey']] = $row['selected_value'];
  217. }
  218. }
  219. } else {
  220. if ($row['subkey'] == null) {
  221. $_setting[$row['variable']] = $row['selected_value'];
  222. } else {
  223. $_setting[$row['variable']][$row['subkey']] = $row['selected_value'];
  224. }
  225. }
  226. } else {
  227. if ($row['subkey'] == null) {
  228. $_setting[$row['variable']] = $row['selected_value'];
  229. } else {
  230. $_setting[$row['variable']][$row['subkey']] = $row['selected_value'];
  231. }
  232. }
  233. }
  234. $result = & api_get_settings('Plugins', 'list', $_configuration['access_url']);
  235. $_plugins = array();
  236. foreach ($result as & $row) {
  237. $key = & $row['variable'];
  238. if (is_string($_setting[$key])) {
  239. $_setting[$key] = array();
  240. }
  241. $_setting[$key][] = $row['selected_value'];
  242. $_plugins[$key][] = $row['selected_value'];
  243. }
  244. // Load allowed tag definitions for kses and/or HTMLPurifier.
  245. require_once $lib_path.'formvalidator/Rule/allowed_tags.inc.php';
  246. // Load HTMLPurifier.
  247. //require_once $lib_path.'htmlpurifier/library/HTMLPurifier.auto.php'; // It will be loaded later, in a lazy manner.
  248. // Before we call local.inc.php, let's define a global $this_section variable
  249. // which will then be usable from the banner and header scripts
  250. $this_section = SECTION_GLOBAL;
  251. // include the local (contextual) parameters of this course or section
  252. require $includePath.'/local.inc.php';
  253. //Include Chamilo Mail conf this is added here because the api_get_setting works
  254. $mail_conf = api_get_path(CONFIGURATION_PATH).'mail.conf.php';
  255. if (file_exists($mail_conf)) {
  256. require_once $mail_conf;
  257. }
  258. // ===== "who is logged in?" module section =====
  259. // check and modify the date of user in the track.e.online table
  260. if (!$x = strpos($_SERVER['PHP_SELF'], 'whoisonline.php')) {
  261. LoginCheck(isset($_user['user_id']) ? $_user['user_id'] : '');
  262. }
  263. // ===== end "who is logged in?" module section =====
  264. if (api_get_setting('server_type') == 'test') {
  265. /*
  266. Server type is test
  267. - high error reporting level
  268. - only do addslashes on $_GET and $_POST
  269. */
  270. if (IS_PHP_53) {
  271. error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  272. } else {
  273. error_reporting(E_ALL & ~E_NOTICE);
  274. }
  275. } else {
  276. /*
  277. Server type is not test
  278. - normal error reporting level
  279. - full fake register globals block
  280. */
  281. error_reporting(E_COMPILE_ERROR | E_ERROR | E_CORE_ERROR);
  282. // TODO: These obsolete variables $HTTP_* to be check whether they are actually used.
  283. if (!isset($HTTP_GET_VARS)) { $HTTP_GET_VARS = $_GET; }
  284. if (!isset($HTTP_POST_VARS)) { $HTTP_POST_VARS = $_POST; }
  285. if (!isset($HTTP_POST_FILES)) { $HTTP_POST_FILES = $_FILES; }
  286. if (!isset($HTTP_SESSION_VARS)) { $HTTP_SESSION_VARS = $_SESSION; }
  287. if (!isset($HTTP_SERVER_VARS)) { $HTTP_SERVER_VARS = $_SERVER; }
  288. // Register SESSION variables into $GLOBALS
  289. if (sizeof($HTTP_SESSION_VARS)) {
  290. if (!is_array($_SESSION)) {
  291. $_SESSION = array();
  292. }
  293. foreach ($HTTP_SESSION_VARS as $key => $val) {
  294. $_SESSION[$key] = $HTTP_SESSION_VARS[$key];
  295. $GLOBALS[$key] = $HTTP_SESSION_VARS[$key];
  296. }
  297. }
  298. // Register SERVER variables into $GLOBALS
  299. if (sizeof($HTTP_SERVER_VARS)) {
  300. $_SERVER = array();
  301. foreach ($HTTP_SERVER_VARS as $key => $val) {
  302. $_SERVER[$key] = $HTTP_SERVER_VARS[$key];
  303. if (!isset($_SESSION[$key]) && $key != 'includePath' && $key != 'rootSys' && $key!= 'lang_path' && $key!= 'extAuthSource' && $key!= 'thisAuthSource' && $key!= 'main_configuration_file_path' && $key!= 'phpDigIncCn' && $key!= 'drs') {
  304. $GLOBALS[$key]=$HTTP_SERVER_VARS[$key];
  305. }
  306. }
  307. }
  308. }
  309. /* LOAD LANGUAGE FILES SECTION */
  310. // if we use the javascript version (without go button) we receive a get
  311. // if we use the non-javascript version (with the go button) we receive a post
  312. $user_language = '';
  313. if (!empty($_GET['language'])) {
  314. $user_language = $_GET['language'];
  315. }
  316. if (!empty($_POST['language_list'])) {
  317. $user_language = str_replace('index.php?language=', '', $_POST['language_list']);
  318. }
  319. // Include all files (first english and then current interface language)
  320. $langpath = api_get_path(SYS_LANG_PATH);
  321. /* This will only work if we are in the page to edit a sub_language */
  322. if (api_get_self() == api_get_path(REL_PATH).'main/admin/sub_language.php' || api_get_self() == api_get_path(REL_PATH).'main/admin/sub_language_ajax.inc.php') {
  323. require_once '../admin/sub_language.class.php';
  324. // getting the arrays of files i.e notification, trad4all, etc
  325. $language_files_to_load = SubLanguageManager:: get_lang_folder_files_list(api_get_path(SYS_LANG_PATH).'english', true);
  326. //getting parent info
  327. $parent_language = SubLanguageManager::get_all_information_of_language($_REQUEST['id']);
  328. //getting sub language info
  329. $sub_language = SubLanguageManager::get_all_information_of_language($_REQUEST['sub_language_id']);
  330. $english_language_array = $parent_language_array = $sub_language_array = array();
  331. foreach ($language_files_to_load as $language_file_item) {
  332. $lang_list_pre = array_keys($GLOBALS);
  333. //loading english
  334. $path = $langpath.'english/'.$language_file_item.'.inc.php';
  335. if (file_exists($path)) {
  336. include $path;
  337. }
  338. $lang_list_post = array_keys($GLOBALS);
  339. $lang_list_result = array_diff($lang_list_post, $lang_list_pre);
  340. unset($lang_list_pre);
  341. // english language array
  342. $english_language_array[$language_file_item] = compact($lang_list_result);
  343. //cleaning the variables
  344. foreach ($lang_list_result as $item) {
  345. unset(${$item});
  346. }
  347. $parent_file = $langpath.$parent_language['dokeos_folder'].'/'.$language_file_item.'.inc.php';
  348. if (file_exists($parent_file) && is_file($parent_file)) {
  349. include_once $parent_file;
  350. }
  351. // parent language array
  352. $parent_language_array[$language_file_item] = compact($lang_list_result);
  353. //cleaning the variables
  354. foreach($lang_list_result as $item) {
  355. unset(${$item});
  356. }
  357. $sub_file = $langpath.$sub_language['dokeos_folder'].'/'.$language_file_item.'.inc.php';
  358. if (file_exists($sub_file) && is_file($sub_file)) {
  359. include $sub_file;
  360. }
  361. // sub language array
  362. $sub_language_array[$language_file_item] = compact($lang_list_result);
  363. //cleaning the variables
  364. foreach($lang_list_result as $item) {
  365. unset(${$item});
  366. }
  367. }
  368. }
  369. // Checking if we have a valid language. If not we set it to the platform language.
  370. $valid_languages = api_get_languages();
  371. if (!empty($valid_languages)) {
  372. if (!in_array($user_language, $valid_languages['folder'])) {
  373. $user_language = api_get_setting('platformLanguage');
  374. }
  375. $language_priority1 = api_get_setting('languagePriority1');
  376. $language_priority2 = api_get_setting('languagePriority2');
  377. $language_priority3 = api_get_setting('languagePriority3');
  378. $language_priority4 = api_get_setting('languagePriority4');
  379. if (in_array($user_language, $valid_languages['folder']) && (isset($_GET['language']) || isset($_POST['language_list']))) {
  380. $user_selected_language = $user_language; // $_GET['language'];
  381. $_SESSION['user_language_choice'] = $user_selected_language;
  382. $platformLanguage = $user_selected_language;
  383. }
  384. if (!empty($language_priority4) && api_get_language_from_type($language_priority4) !== false ) {
  385. $language_interface = api_get_language_from_type($language_priority4);
  386. } else {
  387. $language_interface = api_get_setting('platformLanguage');
  388. }
  389. if (!empty($language_priority3) && api_get_language_from_type($language_priority3) !== false ) {
  390. $language_interface = api_get_language_from_type($language_priority3);
  391. } else {
  392. if (isset($_SESSION['user_language_choice'])) {
  393. $language_interface = $_SESSION['user_language_choice'];
  394. }
  395. }
  396. if (!empty($language_priority2) && api_get_language_from_type($language_priority2) !== false ) {
  397. $language_interface = api_get_language_from_type($language_priority2);
  398. } else {
  399. if (isset($_user['language'])) {
  400. $language_interface = $_user['language'];
  401. }
  402. }
  403. if (!empty($language_priority1) && api_get_language_from_type($language_priority1) !== false ) {
  404. $language_interface = api_get_language_from_type($language_priority1);
  405. } else {
  406. if ($_course['language']) {
  407. $language_interface = $_course['language'];
  408. }
  409. }
  410. }
  411. // Sometimes the variable $language_interface is changed
  412. // temporarily for achieving translation in different language.
  413. // We need to save the genuine value of this variable and
  414. // to use it within the function get_lang(...).
  415. $language_interface_initial_value = $language_interface;
  416. /**
  417. * Include all necessary language files
  418. * - trad4all
  419. * - notification
  420. * - custom tool language files
  421. */
  422. $language_files = array();
  423. $language_files[] = 'trad4all';
  424. $language_files[] = 'notification';
  425. $language_files[] = 'accessibility';
  426. if (isset($language_file)) {
  427. if (!is_array($language_file)) {
  428. $language_files[] = $language_file;
  429. } else {
  430. $language_files = array_merge($language_files, $language_file);
  431. }
  432. }
  433. // if a set of language files has been properly defined
  434. if (is_array($language_files)) {
  435. // if the sub-language feature is on
  436. if (api_get_setting('allow_use_sub_language') == 'true') {
  437. require_once api_get_path(SYS_CODE_PATH).'admin/sub_language.class.php';
  438. $parent_path = SubLanguageManager::get_parent_language_path($language_interface);
  439. foreach ($language_files as $index => $language_file) {
  440. // include English
  441. include $langpath.'english/'.$language_file.'.inc.php';
  442. // prepare string for current language and its parent
  443. $lang_file = $langpath.$language_interface.'/'.$language_file.'.inc.php';
  444. $parent_lang_file = $langpath.$parent_path.'/'.$language_file.'.inc.php';
  445. // load the parent language file first
  446. if (file_exists($parent_lang_file)) {
  447. include $parent_lang_file;
  448. }
  449. // overwrite the parent language translations if there is a child
  450. if (file_exists($lang_file)) {
  451. include $lang_file;
  452. }
  453. }
  454. } else {
  455. // if the sub-languages feature is not on, then just load the
  456. // set language interface
  457. foreach ($language_files as $index => $language_file) {
  458. // include English
  459. include $langpath.'english/'.$language_file.'.inc.php';
  460. // prepare string for current language
  461. $langfile = $langpath.$language_interface.'/'.$language_file.'.inc.php';
  462. if (file_exists($langfile)) {
  463. include $langfile;
  464. }
  465. }
  466. }
  467. }
  468. // The global variable $charset has been defined in a language file too (trad4all.inc.php), this is legacy situation.
  469. // So, we have to reassign this variable again in order to keep its value right.
  470. $charset = $charset_initial_value;
  471. // The global variable $text_dir has been defined in the language file trad4all.inc.php.
  472. // For determing text direction correspondent to the current language we use now information from the internationalization library.
  473. $text_dir = api_get_text_direction();
  474. //Update of the logout_date field in the table track_e_login (needed for the calculation of the total connection time)
  475. if (!isset($_SESSION['login_as']) && isset($_user)) {
  476. // if $_SESSION['login_as'] is set, then the user is an admin logged as the user
  477. $tbl_track_login = Database :: get_statistic_table(TABLE_STATISTIC_TRACK_E_LOGIN);
  478. $sql_last_connection = "SELECT login_id, login_date FROM $tbl_track_login WHERE login_user_id='".$_user["user_id"]."' ORDER BY login_date DESC LIMIT 0,1";
  479. $q_last_connection = Database::query($sql_last_connection);
  480. if (Database::num_rows($q_last_connection) > 0) {
  481. $i_id_last_connection = Database::result($q_last_connection, 0, 'login_id');
  482. // is the latest logout_date still relevant?
  483. $sql_logout_date = "SELECT logout_date FROM $tbl_track_login WHERE login_id=$i_id_last_connection";
  484. $q_logout_date = Database::query($sql_logout_date);
  485. $res_logout_date = convert_sql_date(Database::result($q_logout_date,0,'logout_date'));
  486. if ($res_logout_date < time() - $_configuration['session_lifetime']) {
  487. // it isn't, we should create a fresh entry
  488. event_login();
  489. // now that it's created, we can get its ID and carry on
  490. $q_last_connection = Database::query($sql_last_connection);
  491. $i_id_last_connection = Database::result($q_last_connection, 0, 'login_id');
  492. }
  493. $s_sql_update_logout_date = "UPDATE $tbl_track_login SET logout_date=NOW() WHERE login_id='$i_id_last_connection'";
  494. Database::query($s_sql_update_logout_date);
  495. }
  496. }