viewpost.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234
  1. <?php
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2008 Dokeos Latinoamerica SAC
  6. For a full list of contributors, see "credits.txt".
  7. The full license can be read in "license.txt".
  8. This program is free software; you can redistribute it and/or
  9. modify it under the terms of the GNU General Public License
  10. as published by the Free Software Foundation; either version 2
  11. of the License, or (at your option) any later version.
  12. See the GNU General Public License for more details.
  13. Contact address: Dokeos, 108 rue du Corbeau, B-1030 Brussels, Belgium
  14. Mail: info@dokeos.com
  15. ==============================================================================
  16. */
  17. /**
  18. * @package dokeos.forum
  19. */
  20. // name of the language file that needs to be included
  21. $language_file = 'forum';
  22. // including the global dokeos file
  23. require '../inc/global.inc.php';
  24. // the section (tabs)
  25. $this_section=SECTION_COURSES;
  26. // notice for unauthorized people.
  27. api_protect_course_script(true);
  28. // including additional library scripts
  29. require_once (api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php');
  30. include_once (api_get_path(LIBRARY_PATH).'groupmanager.lib.php');
  31. //require_once (api_get_path(LIBRARY_PATH).'resourcelinker.lib.php');
  32. $nameTools=get_lang('ToolForum');
  33. /*
  34. -----------------------------------------------------------
  35. Including necessary files
  36. -----------------------------------------------------------
  37. */
  38. require 'forumconfig.inc.php';
  39. require_once 'forumfunction.inc.php';
  40. $htmlHeadXtra[] = '<script type="text/javascript" src="'.api_get_path(WEB_CODE_PATH).'inc/lib/javascript/jquery.js" ></script>';
  41. $htmlHeadXtra[] = '<script language="javascript">
  42. $(document).ready(function(){ $(\'.hide-me\').slideUp() });
  43. function hidecontent(content){ $(content).slideToggle(\'normal\'); }
  44. </script>';
  45. //are we in a lp ?
  46. $origin = '';
  47. if (isset($_GET['origin'])) {
  48. $origin = Security::remove_XSS($_GET['origin']);
  49. }
  50. /*
  51. ==============================================================================
  52. MAIN DISPLAY SECTION
  53. ==============================================================================
  54. */
  55. /*
  56. -----------------------------------------------------------
  57. Retrieving forum and forum categorie information
  58. -----------------------------------------------------------
  59. */
  60. // we are getting all the information about the current forum and forum category.
  61. // note pcool: I tried to use only one sql statement (and function) for this
  62. // but the problem is that the visibility of the forum AND forum cateogory are stored in the item_property table
  63. $current_thread=get_thread_information($_GET['thread']); // note: this has to be validated that it is an existing thread
  64. $current_forum=get_forum_information($current_thread['forum_id']); // note: this has to be validated that it is an existing forum.
  65. $current_forum_category=get_forumcategory_information($current_forum['forum_category']);
  66. $whatsnew_post_info=$_SESSION['whatsnew_post_info'];
  67. /*
  68. -----------------------------------------------------------
  69. Header and Breadcrumbs
  70. -----------------------------------------------------------
  71. */
  72. if (isset($_SESSION['gradebook'])){
  73. $gradebook= $_SESSION['gradebook'];
  74. }
  75. if (!empty($gradebook) && $gradebook=='view') {
  76. $interbreadcrumb[]= array (
  77. 'url' => '../gradebook/'.$_SESSION['gradebook_dest'],
  78. 'name' => get_lang('ToolGradebook')
  79. );
  80. }
  81. if ($origin=='learnpath') {
  82. include(api_get_path(INCLUDE_PATH).'reduced_header.inc.php');
  83. } else {
  84. $interbreadcrumb[]=array("url" => "index.php?gradebook=$gradebook&search=".Security::remove_XSS(urlencode($_GET['search'])),"name" => $nameTools);
  85. $interbreadcrumb[]=array("url" => "viewforumcategory.php?forumcategory=".$current_forum_category['cat_id']."&amp;search=".Security::remove_XSS(urlencode($_GET['search'])),"name" => prepare4display($current_forum_category['cat_title']));
  86. $interbreadcrumb[]=array("url" => "viewforum.php?forum=".Security::remove_XSS($_GET['forum'])."&amp;origin=".$origin."&amp;search=".Security::remove_XSS(urlencode($_GET['search'])),"name" => prepare4display($current_forum['forum_title']));
  87. // the last element of the breadcrumb navigation is already set in interbreadcrumb, so give empty string
  88. Display :: display_header('');
  89. api_display_tool_title($nameTools);
  90. }
  91. /*
  92. -----------------------------------------------------------
  93. Is the user allowed here?
  94. -----------------------------------------------------------
  95. */
  96. // if the user is not a course administrator and the forum is hidden
  97. // then the user is not allowed here.
  98. if (!api_is_allowed_to_edit(false,true) AND ($current_forum['visibility']==0 OR $current_thread['visibility']==0)) {
  99. $forum_allow = forum_not_allowed_here();
  100. if ($forum_allow === false) {
  101. exit;
  102. }
  103. }
  104. /*
  105. -----------------------------------------------------------
  106. Actions
  107. -----------------------------------------------------------
  108. */
  109. if ($_GET['action']=='delete' && isset($_GET['content']) && isset($_GET['id']) && api_is_allowed_to_edit(false,true)) {
  110. $message=delete_post($_GET['id']); // note: this has to be cleaned first
  111. }
  112. if (($_GET['action']=='invisible' || $_GET['action']=='visible') && isset($_GET['id']) && api_is_allowed_to_edit(false,true)) {
  113. $message=approve_post($_GET['id'],$_GET['action']); // note: this has to be cleaned first
  114. }
  115. if ($_GET['action']=='move' and isset($_GET['post'])) {
  116. $message=move_post_form();
  117. }
  118. /*
  119. -----------------------------------------------------------
  120. Display the action messages
  121. -----------------------------------------------------------
  122. */
  123. if (!empty($message)) {
  124. Display :: display_confirmation_message(get_lang($message));
  125. }
  126. if ($message<>'PostDeletedSpecial') {// in this case the first and only post of the thread is removed
  127. // this increases the number of times the thread has been viewed
  128. increase_thread_view($_GET['thread']);
  129. /*
  130. -----------------------------------------------------------
  131. Action Links
  132. -----------------------------------------------------------
  133. */
  134. echo '<div style="float:right;">';
  135. $my_url = '<a href="viewthread.php?'.api_get_cidreq().'&amp;forum='.Security::remove_XSS($_GET['forum']).'&amp;thread='.Security::remove_XSS($_GET['thread']).'&amp;origin='.$origin.'&gradebook='.$gradebook.'&amp;search='.Security::remove_XSS(urlencode($_GET['search']));
  136. echo $my_url.'&amp;view=flat&origin='.$origin.'">'.get_lang('FlatView').'</a> | ';
  137. echo $my_url.'&amp;view=threaded&origin='.$origin.'">'.get_lang('ThreadedView').'</a> | ';
  138. echo $my_url.'&amp;view=nested&origin='.$origin.'">'.get_lang('NestedView').'</a>';
  139. $my_url = null;
  140. echo '</div>';
  141. // the reply to thread link should only appear when the forum_category is not locked AND the forum is not locked AND the thread is not locked.
  142. // if one of the three levels is locked then the link should not be displayed
  143. if ($current_forum_category['locked']==0 AND $current_forum['locked']==0 AND $current_thread['locked']==0 OR api_is_allowed_to_edit(false,true)) {
  144. // The link should only appear when the user is logged in or when anonymous posts are allowed.
  145. if ($_user['user_id'] OR ($current_forum['allow_anonymous']==1 AND !$_user['user_id'])) {
  146. //reply link
  147. echo '<a href="reply.php?'.api_get_cidreq().'&forum='.Security::remove_XSS($_GET['forum']).'&amp;thread='.Security::remove_XSS($_GET['thread']).'&amp;action=replythread&origin='.$origin.'">'.get_lang('ReplyToThread').'</a>';
  148. //new thread link
  149. if (api_is_allowed_to_edit(false,true) OR ($current_forum['allow_new_threads']==1 AND isset($_user['user_id'])) OR ($current_forum['allow_new_threads']==1 AND !isset($_user['user_id']) AND $current_forum['allow_anonymous']==1)) {
  150. if ($current_forum['locked'] <> 1 AND $current_forum['locked'] <> 1) {
  151. echo '&nbsp;&nbsp;';
  152. /*echo '<a href="newthread.php?'.api_get_cidreq().'&forum='.Security::remove_XSS($_GET['forum']).$origin_string.'">'.Display::return_icon('forumthread_new.gif').' '.get_lang('NewTopic').'</a>';*/
  153. } else {
  154. echo get_lang('ForumLocked');
  155. }
  156. }
  157. }
  158. }
  159. // note: this is to prevent that some browsers display the links over the table (FF does it but Opera doesn't)
  160. echo '&nbsp;';
  161. /*
  162. -----------------------------------------------------------
  163. Display Forum Category and the Forum information
  164. -----------------------------------------------------------
  165. */
  166. if (!$_SESSION['view']) {
  167. $viewmode=$current_forum['default_view'];
  168. } else {
  169. $viewmode=$_SESSION['view'];
  170. }
  171. $viewmode_whitelist=array('flat', 'threaded', 'nested');
  172. if (isset($_GET['view']) and in_array($_GET['view'],$viewmode_whitelist)) {
  173. $viewmode=Database::escape_string($_GET['view']);
  174. $_SESSION['view']=$viewmode;
  175. }
  176. if (empty($viewmode)) {
  177. $viewmode = 'flat';
  178. }
  179. /*
  180. -----------------------------------------------------------
  181. Display Forum Category and the Forum information
  182. -----------------------------------------------------------
  183. */
  184. // we are getting all the information about the current forum and forum category.
  185. // note pcool: I tried to use only one sql statement (and function) for this
  186. // but the problem is that the visibility of the forum AND forum cateogory are stored in the item_property table
  187. echo "<table class=\"data_table\" width=\"100%\">\n";
  188. // the thread
  189. echo "\t<tr>\n\t\t<th style=\"padding-left:5px;\" align=\"left\" colspan=\"6\">";
  190. echo '<span class="forum_title">'.prepare4display($current_thread['thread_title']).'</span><br />';
  191. if ($origin!='learnpath') {
  192. echo '<span class="forum_low_description">'.prepare4display($current_forum_category['cat_title']).' - ';
  193. }
  194. echo prepare4display($current_forum['forum_title']).'<br />';
  195. echo "</th>\n";
  196. echo "\t</tr>\n";
  197. echo '<span>'.prepare4display($current_thread['thread_comment']).'</span>';
  198. echo "</table>";
  199. include_once('viewpost.inc.php');
  200. } // if ($message<>'PostDeletedSpecial') // in this case the first and only post of the thread is removed
  201. /*
  202. ==============================================================================
  203. FOOTER
  204. ==============================================================================
  205. */
  206. if ($origin!='learnpath') {
  207. Display :: display_footer();
  208. }