userLog.php 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. // TODO: Is this file deprecated?
  4. /**
  5. * @package chamilo.tracking
  6. * @todo clean code - structure is unclear and difficult to modify
  7. */
  8. /**
  9. * Code
  10. */
  11. /* INIT SECTION */
  12. $uInfo = $_REQUEST['uInfo'];
  13. $view = $_REQUEST['view'];
  14. // name of the language file that needs to be included
  15. $language_file = 'tracking';
  16. // Including the global initialization file
  17. require_once '../inc/global.inc.php';
  18. // the section (for the tabs)
  19. $this_section = "session_my_space";
  20. // variables
  21. $user_id = api_get_user_id();
  22. $course_id = api_get_course_id();
  23. //YW Hack security to quick fix RolesRights bug
  24. $is_allowed = true;
  25. /* Libraries */
  26. require_once api_get_path(LIBRARY_PATH).'statsUtils.lib.inc.php';
  27. require_once api_get_path(SYS_CODE_PATH).'resourcelinker/resourcelinker.inc.php';
  28. require_once api_get_path(SYS_CODE_PATH).'exercice/hotpotatoes.lib.php';
  29. /* Header */
  30. /*
  31. $interbreadcrumb[]= array ("url"=>"../group/group.php", "name"=> get_lang('BredCrumpGroups'));
  32. $interbreadcrumb[]= array ("url"=>"../group/group_space.php?gidReq=$_gid", "name"=> get_lang('BredCrumpGroupSpace'));
  33. */
  34. if(isset($uInfo)) {
  35. $interbreadcrumb[]= array ('url'=>'../user/userInfo.php?uInfo='.Security::remove_XSS($uInfo), "name"=> api_ucfirst(get_lang('Users')));
  36. }
  37. $nameTools = get_lang('ToolName');
  38. $htmlHeadXtra[] = "<style type='text/css'>
  39. /*<![CDATA[*/
  40. .secLine {background-color : #E6E6E6;}
  41. .content {padding-left : 15px;padding-right : 15px; }
  42. .specialLink{color : #0000FF;}
  43. /*]]>*/
  44. </style>
  45. <style media='print' type='text/css'>
  46. /*<![CDATA[*/
  47. td {border-bottom: thin dashed gray;}
  48. /*]]>*/
  49. </style>";
  50. Display::display_header($nameTools,"Tracking");
  51. /* Constants and variables */
  52. $is_allowedToTrack = $is_courseAdmin;
  53. $is_course_member = CourseManager::is_user_subscribed_in_real_or_linked_course($user_id, $course_id);
  54. // Database Table Definitions
  55. $TABLECOURSUSER = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  56. $TABLEUSER = Database::get_main_table(TABLE_MAIN_USER);
  57. $tbl_session_course_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  58. $tbl_session = Database::get_main_table(TABLE_MAIN_SESSION);
  59. $TABLECOURSE_GROUPSUSER = Database::get_course_table(TABLE_GROUP_USER);
  60. $sql = "SELECT 1
  61. FROM $tbl_session_course_user AS session_course_user
  62. INNER JOIN $tbl_session AS session
  63. ON session_course_user.id_session = session.id
  64. AND ((date_start<=NOW()
  65. AND date_end>=NOW())
  66. OR (date_start='0000-00-00' AND date_end='0000-00-00'))
  67. WHERE id_session='".$_SESSION['id_session']."' AND course_code='$_cid'";
  68. //echo $sql;
  69. $result=Database::query($sql);
  70. if(!Database::num_rows($result)){
  71. $disabled = true;
  72. }
  73. $tbl_learnpath_main = Database::get_course_table(TABLE_LP_MAIN);
  74. $tbl_learnpath_item = Database::get_course_table(TABLE_LP_ITEM);
  75. $tbl_learnpath_view = Database::get_course_table(TABLE_LP_VIEW);
  76. $tbl_learnpath_item_view = Database::get_course_table(TABLE_LP_ITEM_VIEW);
  77. $documentPath=api_get_path(SYS_COURSE_PATH).$_course['path'].'/document';
  78. // The variables for the days and the months
  79. $DaysShort = api_get_week_days_short();
  80. $DaysLong = api_get_week_days_long();
  81. $MonthsLong = api_get_months_long();
  82. $MonthsShort = api_get_months_short();
  83. //$is_allowedToTrack = $is_groupTutor; // allowed to track only user of one group
  84. //$is_allowedToTrackEverybodyInCourse = $is_allowed[EDIT_RIGHT]; // allowed to track all students in course
  85. //YW hack security to fix RolesRights bug
  86. $is_allowedToTrack = true; // allowed to track only user of one group
  87. $is_allowedToTrackEverybodyInCourse = $is_allowedToTrack; // allowed to track all students in course
  88. /* MAIN SECTION */
  89. ?>
  90. <h3>
  91. <?php echo $nameTools ?>
  92. </h3>
  93. <h4>
  94. <?php echo get_lang('StatsOfUser'); ?>
  95. </h4>
  96. <table width="100%" cellpadding="2" cellspacing="3" border="0">
  97. <?php
  98. // check if uid is tutor of this group
  99. if( ( $is_allowedToTrack || $is_allowedToTrackEverybodyInCourse )) {
  100. if(!$uInfo && !isset($uInfo) ) {
  101. /*
  102. * Display list of user of this group
  103. */
  104. echo "<h4>".get_lang('ListStudents')."</h4>";
  105. if( $is_allowedToTrackEverybodyInCourse ) {
  106. // if user can track everybody : list user of course
  107. $sql = "SELECT count(user_id)
  108. FROM $TABLECOURSUSER
  109. WHERE course_code = '".Database::escape_string($_cid)."' AND relation_type<>".COURSE_RELATION_TYPE_RRHH."";
  110. } else {
  111. // if user can only track one group : list users of this group
  112. $sql = "SELECT count(user)
  113. FROM $TABLECOURSE_GROUPSUSER
  114. WHERE group_id = '".Database::escape_string($_gid)."'";
  115. }
  116. $userGroupNb = getOneResult($sql);
  117. $step = 25; // number of student per page
  118. if ($userGroupNb > $step) {
  119. if(!isset($offset)) {
  120. $offset=0;
  121. }
  122. $next = $offset + $step;
  123. $previous = $offset - $step;
  124. $navLink = "<table width='100%' border='0'>\n"
  125. ."<tr>\n"
  126. ."<td align='left'>";
  127. if ($previous >= 0) {
  128. $navLink .= "<a href='".api_get_self()."?offset=$previous'>&lt;&lt; ".get_lang('PreviousPage')."</a>";
  129. }
  130. $navLink .= "</td>\n"
  131. ."<td align='right'>";
  132. if ($next < $userGroupNb) {
  133. $navLink .= "<a href='".api_get_self()."?offset=$next'>".get_lang('NextPage')." &gt;&gt;</a>";
  134. }
  135. $navLink .= "</td>\n"
  136. ."</tr>\n"
  137. ."</table>\n";
  138. } else {
  139. $offset = 0;
  140. }
  141. echo $navLink;
  142. if (!settype($offset, 'integer') || !settype($step, 'integer')) die('Offset or step variables are not integers.'); //sanity check of integer vars
  143. if( $is_allowedToTrackEverybodyInCourse ) {
  144. // list of users in this course
  145. $sql = "SELECT u.user_id, u.firstname,u.lastname
  146. FROM $TABLECOURSUSER cu , $TABLEUSER u
  147. WHERE cu.user_id = u.user_id AND cu.relation_type<>".COURSE_RELATION_TYPE_RRHH."
  148. AND cu.course_code = '".Database::escape_string($_cid)."'
  149. LIMIT $offset,$step";
  150. }
  151. else
  152. {
  153. // list of users of this group
  154. $sql = "SELECT u.user_id, u.firstname,u.lastname
  155. FROM $TABLECOURSE_GROUPSUSER gu , $TABLEUSER u
  156. WHERE gu.user_id = u.user_id
  157. AND gu.group_id = '".Database::escape_string($_gid)."'
  158. LIMIT $offset,$step";
  159. }
  160. $list_users = getManyResults3Col($sql);
  161. echo "<table width='100%' cellpadding='2' cellspacing='1' border='0'>\n"
  162. ."<tr align='center' valign='top' bgcolor='#E6E6E6'>\n"
  163. ."<td align='left'>",get_lang('UserName'),"</td>\n"
  164. ."</tr>\n";
  165. for($i = 0 ; $i < sizeof($list_users) ; $i++) {
  166. echo "<tr valign='top' align='center'>\n"
  167. ."<td align='left'>"
  168. ."<a href='".api_get_self()."?uInfo=",$list_users[$i][0],"'>"
  169. .$list_users[$i][1]," ",$list_users[$i][2]
  170. ."</a>".
  171. "</td>\n";
  172. }
  173. echo "</table>\n";
  174. echo $navLink;
  175. } else {
  176. // if uInfo is set
  177. /*
  178. * Informations about student uInfo
  179. */
  180. // these checks exists for security reasons, neither a prof nor a tutor can see statistics of a user from
  181. // another course, or group
  182. if( $is_allowedToTrackEverybodyInCourse ) {
  183. // check if user is in this course
  184. $tracking_is_accepted = $is_course_member;
  185. $tracked_user_info = Database::get_user_info_from_id($uInfo);
  186. } else {
  187. // check if user is in the group of this tutor
  188. $sql = "SELECT u.firstname,u.lastname, u.email
  189. FROM $TABLECOURSE_GROUPSUSER gu , $TABLEUSER u
  190. WHERE gu.user_id = u.user_id
  191. AND gu.group_id = '".Database::escape_string($_gid)."'
  192. AND u.user_id = '".Database::escape_string($uInfo)."'";
  193. $query = Database::query($sql);
  194. $tracked_user_info = @Database::fetch_assoc($query);
  195. if(is_array($tracked_user_info)) $tracking_is_accepted = true;
  196. }
  197. if ($tracking_is_accepted) {
  198. $tracked_user_info['email'] == '' ? $mail_link = get_lang('NoEmail') : $mail_link = Display::encrypted_mailto_link($tracked_user_info['email']);
  199. echo "<tr><td>";
  200. echo get_lang('informationsAbout').' :';
  201. echo "<ul>\n"
  202. ."<li>".get_lang('FirstName')." : ".$tracked_user_info['firstname']."</li>\n"
  203. ."<li>".get_lang('LastName')." : ".$tracked_user_info['lastname']."</li>\n"
  204. ."<li>".get_lang('Email')." : ".$mail_link."</li>\n"
  205. ."</ul>";
  206. echo "</td></tr>\n";
  207. // show all : number of 1 is equal to or bigger than number of categories
  208. // show none : number of 0 is equal to or bigger than number of categories
  209. echo "<tr>
  210. <td>
  211. [<a href='".api_get_self()."?uInfo=".Security::remove_XSS($uInfo)."&view=1111111'>".get_lang('ShowAll')."</a>]
  212. [<a href='".api_get_self()."?uInfo=".Security::remove_XSS($uInfo)."&view=0000000'>".get_lang('ShowNone')."</a>]".
  213. //"||[<a href='".api_get_self()."'>".get_lang('BackToList')."</a>]".
  214. "</td>
  215. </tr>
  216. ";
  217. if(!isset($view))
  218. {
  219. $view ='0000000';
  220. }
  221. //Logins
  222. TrackingUserLog::display_login_tracking_info($view, $uInfo, $_cid);
  223. //Exercise results
  224. TrackingUserLog::display_exercise_tracking_info($view, $uInfo, $_cid);
  225. //Student publications uploaded
  226. TrackingUserLog::display_student_publications_tracking_info($view, $uInfo, $_cid);
  227. //Links usage
  228. TrackingUserLog::display_links_tracking_info($view, $uInfo, $_cid);
  229. //Documents downloaded
  230. TrackingUserLog::display_document_tracking_info($view, $uInfo, $_cid);
  231. } else {
  232. echo get_lang('ErrorUserNotInGroup');
  233. }
  234. /*
  235. * Scorm contents and Learning Path
  236. */
  237. if(substr($view,5,1) == '1') {
  238. $new_view = substr_replace($view,'0',5,1);
  239. echo "<tr>
  240. <td valign='top'>
  241. <font color='#0000FF'>-&nbsp;&nbsp;&nbsp;</font><b>".get_lang('ScormAccess')."</b>&nbsp;&nbsp;&nbsp;[<a href='".api_get_self()."?view=".Security::remove_XSS($new_view)."&uInfo=".Security::remove_XSS($uInfo)."'>".get_lang('Close')."</a>]&nbsp;&nbsp;&nbsp;[<a href='userLogCSV.php?".api_get_cidreq()."&uInfo=".Security::remove_XSS($_GET['uInfo'])."&view=000001'>".get_lang('ExportAsCSV')."</a>]
  242. </td>
  243. </tr>";
  244. $sql = "SELECT id, name FROM $tbl_learnpath_main";
  245. $result=Database::query($sql);
  246. $ar=Database::fetch_array($result);
  247. echo "<tr><td style='padding-left : 40px;padding-right : 40px;'>";
  248. echo "<table cellpadding='2' cellspacing='1' border='0' align='center'><tr>
  249. <td class='secLine'>
  250. &nbsp;".get_lang('ScormContentColumn')."&nbsp;
  251. </td>
  252. </tr>";
  253. if (is_array($ar)) {
  254. while ($ar['id'] != '') {
  255. $lp_title = stripslashes($ar['name']);
  256. echo "<tr><td>";
  257. echo "<a href='".api_get_self()."?view=".$view."&scormcontopen=".$ar['id']."&uInfo=".Security::remove_XSS($uInfo)."' class='specialLink'>$lp_title</a>";
  258. echo "</td></tr>";
  259. if ($ar['id']==$scormcontopen) { //have to list the students here
  260. $contentId=$ar['id'];
  261. $sql3 = "SELECT iv.status, iv.score, i.title, iv.total_time " .
  262. "FROM $tbl_learnpath_item i " .
  263. "INNER JOIN $tbl_learnpath_item_view iv ON i.id=iv.lp_item_id " .
  264. "INNER JOIN $tbl_learnpath_view v ON iv.lp_view_id=v.id " .
  265. "WHERE (v.user_id=".Database::escape_string($uInfo)." and v.lp_id=$contentId) ORDER BY v.id, i.id";
  266. $result3=Database::query($sql3);
  267. $ar3=Database::fetch_array($result3);
  268. if (is_array($ar3)) {
  269. echo "<tr><td>&nbsp;&nbsp;&nbsp;</td>
  270. <td class='secLine'>
  271. &nbsp;".get_lang('ScormTitleColumn')."&nbsp;
  272. </td>
  273. <td class='secLine'>
  274. &nbsp;".get_lang('ScormStatusColumn')."&nbsp;
  275. </td>
  276. <td class='secLine'>
  277. &nbsp;".get_lang('ScormScoreColumn')."&nbsp;
  278. </td>
  279. <td class='secLine'>
  280. &nbsp;".get_lang('ScormTimeColumn')."&nbsp;
  281. </td>
  282. </tr>";
  283. while ($ar3['status'] != '') {
  284. require_once '../newscorm/learnpathItem.class.php';
  285. $time = learnpathItem::get_scorm_time('php',$ar3['total_time']);
  286. echo "<tr><td>&nbsp;&nbsp;&nbsp;</td><td>";
  287. echo "$title</td><td align=right>{$ar3['status']}</td><td align=right>{$ar3['score']}</td><td align=right>$time</td>";
  288. echo "</tr>";
  289. $ar3=Database::fetch_array($result3);
  290. }
  291. } else {
  292. echo "<tr>";
  293. echo "<td colspan='3'><center>".get_lang('ScormNeverOpened')."</center></td>";
  294. echo"</tr>";
  295. }
  296. }
  297. $ar=Database::fetch_array($result);
  298. }
  299. } else {
  300. $noscorm=true;
  301. }
  302. if ($noscorm) {
  303. echo "<tr>";
  304. echo "<td colspan='3'><center>".get_lang('NoResult')."</center></td>";
  305. echo "</tr>";
  306. }
  307. echo "</table>";
  308. echo "</td></tr>";
  309. } else {
  310. $new_view = substr_replace($view,'1',5,1);
  311. echo "
  312. <tr>
  313. <td valign='top'>
  314. +<font color='#0000FF'>&nbsp;&nbsp;</font><a href='".api_get_self()."?view=".Security::remove_XSS($new_view)."&uInfo=".Security::remove_XSS($uInfo)."' class='specialLink'>".get_lang('ScormAccess')."</a>
  315. </td>
  316. </tr>
  317. ";
  318. }
  319. }
  320. } else {
  321. // not allowed
  322. api_not_allowed();
  323. }
  324. ?>
  325. </table>
  326. <?php
  327. Display::display_footer();