announcements.php 56 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468
  1. <?php //$Id: announcements.php 22259 2009-07-20 18:56:45Z ivantcholakov $
  2. /*
  3. ==============================================================================
  4. Dokeos - elearning and course management software
  5. Copyright (c) 2004-2008 Dokeos SPRL
  6. Copyright (c) 2003 Ghent University (UGent)
  7. Copyright (c) 2001 Universite catholique de Louvain (UCL)
  8. Copyright (c) various contributors
  9. For a full list of contributors, see "credits.txt".
  10. The full license can be read in "license.txt".
  11. This program is free software; you can redistribute it and/or
  12. modify it under the terms of the GNU General Public License
  13. as published by the Free Software Foundation; either version 2
  14. of the License, or (at your option) any later version.
  15. See the GNU General Public License for more details.
  16. Contact address: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium
  17. Mail: info@dokeos.com
  18. ==============================================================================
  19. */
  20. /**
  21. ==============================================================================
  22. * @author Frederik Vermeire <frederik.vermeire@pandora.be>, UGent Internship
  23. * @author Patrick Cool <patrick.cool@UGent.be>, Ghent University: code cleaning
  24. * @abstract The task of the internship was to integrate the 'send messages to specific users' with the
  25. * Announcements tool and also add the resource linker here. The database also needed refactoring
  26. * as there was no title field (the title was merged into the content field)
  27. * @package dokeos.announcements
  28. * @todo make AWACS out of the configuration settings
  29. * @todo this file is 1200+ lines without any functions -> needs to be split into
  30. * multiple functions
  31. ==============================================================================
  32. */
  33. /*
  34. ==============================================================================
  35. INIT SECTION
  36. ==============================================================================
  37. */
  38. // name of the language file that needs to be included
  39. $language_file[] = 'announcements';
  40. $language_file[] = 'group';
  41. $language_file[] = 'survey';
  42. // use anonymous mode when accessing this course tool
  43. $use_anonymous = true;
  44. // setting the global file that gets the general configuration, the databases, the languages, ...
  45. include('../inc/global.inc.php');
  46. $this_section=SECTION_COURSES;
  47. $nameTools = get_lang('Announcement');
  48. //session
  49. if(isset($_GET['id_session'])) {
  50. $_SESSION['id_session'] = Security::remove_XSS($_GET['id_session']);
  51. }
  52. /* ------------ ACCESS RIGHTS ------------ */
  53. // notice for unauthorized people.
  54. api_protect_course_script();
  55. /*
  56. -----------------------------------------------------------
  57. Constants and variables
  58. -----------------------------------------------------------
  59. */
  60. // Configuration settings
  61. $display_announcement_list = true;
  62. $display_form = false;
  63. $display_title_list = true;
  64. // Maximum title messages to display
  65. $maximum = '12';
  66. // Length of the titles
  67. $length = '36';
  68. // Database Table Definitions
  69. $tbl_course_user = Database::get_main_table(TABLE_MAIN_COURSE_USER);
  70. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  71. $tbl_courses = Database::get_main_table(TABLE_MAIN_COURSE);
  72. $tbl_sessions = Database::get_main_table(TABLE_MAIN_SESSION);
  73. $tbl_session_course_user= Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
  74. $tbl_group = Database::get_course_table(TABLE_GROUP);
  75. $tbl_groupUser = Database::get_course_table(TABLE_GROUP_USER);
  76. $tbl_announcement = Database::get_course_table(TABLE_ANNOUNCEMENT);
  77. $tbl_item_property = Database::get_course_table(TABLE_ITEM_PROPERTY);
  78. /*
  79. -----------------------------------------------------------
  80. Resource linker
  81. -----------------------------------------------------------
  82. */
  83. $_SESSION['source_type']="Ad_Valvas";
  84. include('../resourcelinker/resourcelinker.inc.php');
  85. if (!empty($_POST['addresources'])) // When the "Add Resource" button is clicked we store all the form data into a session
  86. {
  87. include('announcements.inc.php');
  88. $form_elements= array ('emailTitle'=>stripslashes($emailTitle), 'newContent'=>stripslashes($newContent), 'id'=>$id, 'to'=>$selectedform, 'emailoption'=>$email_ann);
  89. $_SESSION['formelements']=$form_elements;
  90. if($id) // this is to correctly handle edits
  91. {
  92. $action="edit";
  93. }else
  94. {
  95. $action="add";
  96. }
  97. // ============== //
  98. // 7 = Ad_Valvas //
  99. // ============== //
  100. if($surveyid)
  101. {
  102. header("Location: ../resourcelinker/resourcelinker.php?source_id=7&action=$action&id=$id&originalresource=no&publish_survey=$surveyid&db_name=$db_name&cidReq=$cidReq");
  103. exit;
  104. }
  105. else
  106. {
  107. header("Location: ../resourcelinker/resourcelinker.php?source_id=7&action=$action&id=$id&originalresource=no");
  108. exit;
  109. }
  110. exit;
  111. }
  112. /*
  113. -----------------------------------------------------------
  114. Tracking
  115. -----------------------------------------------------------
  116. */
  117. event_access_tool(TOOL_ANNOUNCEMENT);
  118. /*
  119. -----------------------------------------------------------
  120. Libraries
  121. -----------------------------------------------------------
  122. */
  123. require_once(api_get_path(LIBRARY_PATH).'groupmanager.lib.php');
  124. require_once('announcements.inc.php');
  125. require_once(api_get_path(INCLUDE_PATH).'lib/mail.lib.inc.php');
  126. require_once(api_get_path(INCLUDE_PATH).'conf/mail.conf.php');
  127. require_once(api_get_path(LIBRARY_PATH).'debug.lib.inc.php');
  128. require_once(api_get_path(LIBRARY_PATH).'tracking.lib.php');
  129. require_once(api_get_path(LIBRARY_PATH) . '/fckeditor/fckeditor.php');
  130. /*
  131. -----------------------------------------------------------
  132. POST TO
  133. -----------------------------------------------------------
  134. */
  135. $safe_emailTitle = $_POST['emailTitle'];
  136. $safe_newContent = $_POST['newContent'];
  137. if (!empty($_POST['To']))
  138. {
  139. if (api_get_session_id()!=0 && api_is_allowed_to_session_edit(false,true)==false) {
  140. api_not_allowed();
  141. }
  142. $display_form = true;
  143. $form_elements= array ('emailTitle'=>$safe_emailTitle, 'newContent'=>$safe_newContent, 'id'=>$_POST['id'], 'emailoption'=>$_POST['email_ann']);
  144. $_SESSION['formelements']=$form_elements;
  145. $form_elements = $_SESSION['formelements'];
  146. $title_to_modify = $form_elements["emailTitle"];
  147. $content_to_modify = $form_elements["newContent"];
  148. $announcement_to_modify = $form_elements["id"];
  149. }
  150. /*
  151. -----------------------------------------------------------
  152. Show/hide user/group form
  153. -----------------------------------------------------------
  154. */
  155. $setting_select_groupusers=true;
  156. if (empty($_POST['To']) and !$_SESSION['select_groupusers'])
  157. {
  158. $_SESSION['select_groupusers']="hide";
  159. }
  160. $select_groupusers_status=$_SESSION['select_groupusers'];
  161. if (!empty($_POST['To']) and ($select_groupusers_status=="hide"))
  162. {
  163. $_SESSION['select_groupusers']="show";
  164. }
  165. if (!empty($_POST['To']) and ($select_groupusers_status=="show"))
  166. {
  167. $_SESSION['select_groupusers']="hide";
  168. }
  169. /*
  170. -----------------------------------------------------------
  171. Action handling
  172. -----------------------------------------------------------
  173. */
  174. // display the form
  175. if (((!empty($_GET['action']) && $_GET['action'] == 'add') && $_GET['origin'] == "") || (!empty($_GET['action']) && $_GET['action'] == 'edit') || !empty($_POST['To']))
  176. {
  177. if (api_get_session_id()!=0 && api_is_allowed_to_session_edit(false,true)==false) {
  178. api_not_allowed();
  179. }
  180. $display_form = true;
  181. }
  182. // clear all resources
  183. if ((empty($originalresource) || ($originalresource!=='no')) and (!empty($action) && $action=='add'))
  184. {
  185. $_SESSION['formelements']=null;
  186. //unset($_SESSION['formelements']);
  187. unset_session_resources();
  188. }
  189. /*
  190. -----------------------------------------------------------
  191. Javascript
  192. -----------------------------------------------------------
  193. */
  194. $htmlHeadXtra[] = to_javascript();
  195. /*
  196. -----------------------------------------------------------
  197. Filter user/group
  198. -----------------------------------------------------------
  199. */
  200. if(!empty($_GET['toolgroup'])){
  201. if($_GET['toolgroup'] == strval(intval($_GET['toolgroup']))){ //check is integer
  202. $toolgroup = $_GET['toolgroup'];
  203. $_SESSION['select_groupusers'] = 'hide';
  204. }else{
  205. $toolgroup = 0;
  206. }
  207. api_session_register("toolgroup");
  208. }
  209. /*
  210. -----------------------------------------------------------
  211. Sessions
  212. -----------------------------------------------------------
  213. */
  214. $ctok = $_SESSION['sec_token'];
  215. $stok = Security::get_token();
  216. if (!empty($_SESSION['formelements']) and !empty($_GET['originalresource']) and $_GET['originalresource'] == 'no')
  217. {
  218. $form_elements = $_SESSION['formelements'];
  219. $title_to_modify = $form_elements['emailTitle'];
  220. $content_to_modify = $form_elements['newContent'];
  221. $announcement_to_modify = $form_elements['id'];
  222. $to = $form_elements['to'];
  223. //load_edit_users('announcement',$announcement_to_modify);
  224. $email_ann = $form_elements['emailoption'];
  225. }
  226. if(!empty($_GET['remind_inactive']))
  227. {
  228. $to[] = 'USER:'.intval($_GET['remind_inactive']);
  229. }
  230. /*
  231. -----------------------------------------------------------
  232. Survey
  233. -----------------------------------------------------------
  234. */
  235. $surveyid = 0;
  236. if(!empty($_REQUEST['publish_survey']))
  237. {
  238. $surveyid=Database::escape_string(Security::remove_XSS($_REQUEST['publish_survey']));
  239. }
  240. $cidReq=Database::escape_string($_REQUEST['cidReq']);
  241. if($surveyid)
  242. {
  243. $db_name=Database::escape_string($_REQUEST['db_name']);
  244. $sql_temp = "SELECT * FROM $db_name.survey WHERE survey_id='$surveyid'";
  245. $res_temp = Database::query($sql_temp, __FILE__, __LINE__);
  246. $obj=@Database::fetch_object($res_temp);
  247. $template=$obj->template;
  248. }
  249. if (!empty($_SESSION['toolgroup'])){
  250. $_clean['toolgroup']=(int)$_SESSION['toolgroup'];
  251. $group_properties = GroupManager :: get_group_properties($_clean['toolgroup']);
  252. $interbreadcrumb[] = array ("url" => "../group/group.php", "name" => get_lang('Groups'));
  253. $interbreadcrumb[] = array ("url"=>"../group/group_space.php?gidReq=".$_SESSION['toolgroup'], "name"=> get_lang('GroupSpace').' ('.$group_properties['name'].')');
  254. } else {
  255. if($surveyid) {
  256. $interbreadcrumb[] = array ("url" => "../survey/survey_list.php?cidReq=$cidReq", "name" => get_lang('Survey'));
  257. $nameTools = get_lang('PublishSurvey');
  258. }else {
  259. $nameTools = get_lang('Announcement');
  260. $nameTools12 = get_lang('PublishSurvey');
  261. }
  262. }
  263. /*
  264. -----------------------------------------------------------
  265. Learning path & css
  266. -----------------------------------------------------------
  267. */
  268. // showing the header if we are not in the learning path, if we are in
  269. // the learning path, we do not include the banner so we have to explicitly
  270. // include the stylesheet, which is normally done in the header
  271. if (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath')
  272. {
  273. //we are not in the learning path
  274. Display::Display_header($nameTools,"Announcements");
  275. }
  276. else
  277. {
  278. //we are in the learning path, only display central data and change css
  279. $display_title_list = false;
  280. $display_announcement_list = false;
  281. $display_specific_announcement = true;
  282. $announcement_id = $_REQUEST['ann_id'];
  283. ?> <link rel="stylesheet" type="text/css" href="<?php echo $clarolineRepositoryWeb ?>css/default.css">
  284. <!-- css file for announcements -->
  285. <link href="../css/announcements.css" rel="stylesheet" type="text/css">
  286. <?php
  287. }
  288. // inserting an anchor (top) so one can jump back to the top of the page
  289. echo "<a name=\"top\"></a>";
  290. /*=============================================
  291. ACTION HANDLING
  292. =============================================*/
  293. if (api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  294. /*
  295. -----------------------------------------------------------
  296. Change visibility of announcement
  297. -----------------------------------------------------------
  298. */
  299. // $_GET['isStudentView']<>"false" is added to prevent that the visibility
  300. // is changed after you do the following:
  301. // change visibility -> studentview -> course manager view
  302. if (!isset($_GET['isStudentView']) || $_GET['isStudentView']!='false')
  303. {
  304. if (isset($_GET['id']) AND $_GET['id'] AND isset($_GET['action']) AND $_GET['action']=="showhide")
  305. {
  306. if (api_get_session_id()!=0 && api_is_allowed_to_session_edit(false,true)==false) {
  307. api_not_allowed();
  308. }
  309. $id=intval(addslashes($_GET['id']));
  310. if(!api_is_course_coach() || api_is_element_in_the_session(TOOL_ANNOUNCEMENT, $id))
  311. {
  312. if ($ctok == $_GET['sec_token']) {
  313. change_visibility_announcement(TOOL_ANNOUNCEMENT,$id);
  314. $message = get_lang("VisibilityChanged");
  315. }
  316. }
  317. }
  318. }
  319. /*
  320. -----------------------------------------------------------
  321. Delete announcement
  322. -----------------------------------------------------------
  323. */
  324. if (!empty($_GET['action']) AND $_GET['action']=='delete' AND isset($_GET['id'])) {
  325. //Database::query("DELETE FROM $tbl_announcement WHERE id='$delete'",__FILE__,__LINE__);
  326. $id=intval(addslashes($_GET['id']));
  327. if (api_get_session_id()!=0 && api_is_allowed_to_session_edit(false,true)==false) {
  328. api_not_allowed();
  329. }
  330. if (!api_is_course_coach() || api_is_element_in_the_session(TOOL_ANNOUNCEMENT, $id)) {
  331. // tooledit : visibility = 2 : only visibile for platform administrator
  332. if ($ctok == $_GET['sec_token']) {
  333. Database::query("UPDATE $tbl_item_property SET visibility='2' WHERE tool='".TOOL_ANNOUNCEMENT."' and ref='".$id."'",__FILE__,__LINE__);
  334. delete_added_resource("Ad_Valvas", $delete);
  335. $id = null;
  336. $emailTitle = null;
  337. $newContent = null;
  338. $message = get_lang("AnnouncementDeleted");
  339. }
  340. }
  341. }
  342. /*
  343. -----------------------------------------------------------
  344. Delete all announcements
  345. -----------------------------------------------------------
  346. */
  347. if (!empty($_GET['action']) and $_GET['action']=='delete_all') {
  348. //Database::query("DELETE FROM $tbl_announcement",__FILE__,__LINE__);
  349. if(api_is_allowed_to_edit()) {
  350. Database::query("UPDATE $tbl_item_property SET visibility='2' WHERE tool='".TOOL_ANNOUNCEMENT."'",__FILE__,__LINE__);
  351. delete_all_resources_type("Ad_Valvas");
  352. $id = null;
  353. $emailTitle = null;
  354. $newContent = null;
  355. $message = get_lang("AnnouncementDeletedAll");
  356. }
  357. }
  358. /*
  359. -----------------------------------------------------------
  360. Modify announcement
  361. -----------------------------------------------------------
  362. */
  363. if (!empty($_GET['action']) and $_GET['action']=='modify' AND isset($_GET['id'])) {
  364. if (api_get_session_id()!=0 && api_is_allowed_to_session_edit(false,true)==false) {
  365. api_not_allowed();
  366. }
  367. $display_form = true;
  368. // RETRIEVE THE CONTENT OF THE ANNOUNCEMENT TO MODIFY
  369. $id = intval(addslashes($_GET['id']));
  370. if (!api_is_course_coach() || api_is_element_in_the_session(TOOL_ANNOUNCEMENT, $id)) {
  371. $sql="SELECT * FROM $tbl_announcement WHERE id='$id'";
  372. $result = Database::query($sql,__FILE__,__LINE__);
  373. $myrow = Database::fetch_array($result);
  374. if ($myrow) {
  375. $announcement_to_modify = $myrow['id'];
  376. $content_to_modify = $myrow['content'];
  377. $title_to_modify = $myrow['title'];
  378. if ($originalresource!=="no") {
  379. //unset_session_resources();
  380. edit_added_resources("Ad_Valvas", $announcement_to_modify);
  381. $to=load_edit_users("announcement", $announcement_to_modify);
  382. }
  383. $display_announcement_list = false;
  384. }
  385. if ($to=="everyone" OR !empty($_SESSION['toolgroup']))
  386. {
  387. $_SESSION['select_groupusers']="hide";
  388. }
  389. else
  390. {
  391. $_SESSION['select_groupusers']="show";
  392. }
  393. }
  394. }
  395. /*
  396. -----------------------------------------------------------
  397. Move announcement up/down
  398. -----------------------------------------------------------
  399. */
  400. if ($ctok == $_GET['sec_token']) {
  401. if (!empty($_GET['down'])) {
  402. $thisAnnouncementId = intval($_GET['down']);
  403. $sortDirection = "DESC";
  404. }
  405. if (!empty($_GET['up'])) {
  406. $thisAnnouncementId = intval($_GET['up']);
  407. $sortDirection = "ASC";
  408. }
  409. }
  410. if (!empty($sortDirection)) {
  411. if (!in_array(trim(strtoupper($sortDirection)), array('ASC', 'DESC'))) {
  412. $sortDirection='ASC';
  413. }
  414. $my_sql = "SELECT announcement.id, announcement.display_order " .
  415. "FROM $tbl_announcement announcement, " .
  416. "$tbl_item_property itemproperty " .
  417. "WHERE itemproperty.ref=announcement.id " .
  418. "AND itemproperty.tool='".TOOL_ANNOUNCEMENT."' " .
  419. "AND itemproperty.visibility<>2 " .
  420. "ORDER BY display_order $sortDirection";
  421. $result = Database::query($my_sql,__FILE__,__LINE__);
  422. while (list ($announcementId, $announcementOrder) = Database::fetch_row($result)) {
  423. // STEP 2 : FOUND THE NEXT ANNOUNCEMENT ID AND ORDER.
  424. // COMMIT ORDER SWAP ON THE DB
  425. if (isset ($thisAnnouncementOrderFound) && $thisAnnouncementOrderFound == true) {
  426. $nextAnnouncementId = $announcementId;
  427. $nextAnnouncementOrder = $announcementOrder;
  428. Database::query("UPDATE $tbl_announcement " .
  429. "SET display_order = '$nextAnnouncementOrder' " .
  430. "WHERE id = '$thisAnnouncementId'",__FILE__,__LINE__);
  431. Database::query("UPDATE $tbl_announcement " .
  432. "SET display_order = '$thisAnnouncementOrder' " .
  433. "WHERE id = '$nextAnnouncementId.'",__FILE__,__LINE__);
  434. break;
  435. }
  436. // STEP 1 : FIND THE ORDER OF THE ANNOUNCEMENT
  437. if ($announcementId == $thisAnnouncementId) {
  438. $thisAnnouncementOrder = $announcementOrder;
  439. $thisAnnouncementOrderFound = true;
  440. }
  441. }
  442. // show message
  443. $message = get_lang('AnnouncementMoved');
  444. }
  445. /*
  446. -----------------------------------------------------------
  447. Submit announcement
  448. -----------------------------------------------------------
  449. */
  450. //if (api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  451. $emailTitle=(!empty($_POST['emailTitle'])?$safe_emailTitle:'');
  452. $newContent=(!empty($_POST['newContent'])?$safe_newContent:'');
  453. $submitAnnouncement=isset($_POST['submitAnnouncement'])?$_POST['submitAnnouncement']:0;
  454. $id = 0;
  455. if (!empty($_POST['id'])) {
  456. $id=intval($_POST['id']);
  457. }
  458. if ($submitAnnouncement && empty($emailTitle)) {
  459. $error_message = get_lang('TitleIsRequired');
  460. $content_to_modify = $newContent;
  461. } else if ($submitAnnouncement) {
  462. if (isset($id)&&$id) {
  463. // there is an Id => the announcement already exists => update mode
  464. if ($ctok == $_POST['sec_token']) {
  465. $edit_id = edit_advalvas_item($id,$emailTitle,$newContent,$_POST['selectedform']);
  466. if (!$delete) {
  467. update_added_resources("Ad_Valvas", $id);
  468. }
  469. $message = get_lang('AnnouncementModified');
  470. }
  471. } else {
  472. //insert mode
  473. if ($ctok == $_POST['sec_token']) {
  474. if (!$surveyid) {
  475. $result = Database::query("SELECT MAX(display_order) FROM $tbl_announcement WHERE session_id=".intval($_SESSION['id_session'])." OR session_id=0",__FILE__,__LINE__);
  476. list($orderMax) = Database::fetch_row($result);
  477. $order = $orderMax + 1;
  478. if (!empty($_SESSION['toolgroup'])) {
  479. $insert_id=store_advalvas_group_item($safe_emailTitle,$safe_newContent,$order,array('GROUP:'.$_SESSION['toolgroup']),$_POST['selectedform']);
  480. } else {
  481. $insert_id=store_advalvas_item($safe_emailTitle,$safe_newContent,$order,$_POST['selectedform']);
  482. }
  483. store_resources($_SESSION['source_type'],$insert_id);
  484. $_SESSION['select_groupusers']="hide";
  485. $message = get_lang('AnnouncementAdded');
  486. }
  487. /*============================================================
  488. MAIL WHEN USER COMES FROM SURVEY
  489. ======================================================= */
  490. if ($_POST['emailsAdd']) {
  491. $to_email_address =$_POST['emailsAdd'];
  492. $to_email_to = explode(',', $to_email_address);
  493. $to_email = array_unique($to_email_to);
  494. $db_name = $_REQUEST['db_name'];
  495. for ($i=0;$i<count($to_email);$i++) {
  496. $to= trim($to_email[$i]);
  497. $db_name = $_REQUEST['db_name'];
  498. $newContentone=str_replace("#page#","choose_language.php",$newContent);
  499. $newContenttwo=str_replace("#temp#",$template,$newContentone);
  500. $newContentthree=str_replace("#sid#",$surveyid,$newContenttwo);
  501. $newContentfour=str_replace("#mail#",$to,$newContentthree);
  502. $newContentfive=str_replace("#db_name#",$db_name,$newContentfour);
  503. $newContentsix=str_replace("#uid#","",$newContentfive);
  504. if (eregi('^[0-9a-z_\.-]+@(([0-9]{1,3}\.){3}[0-9]{1,3}|([0-9a-z][0-9a-z-]*[0-9a-z]\.)+[a-z]{2,3})$', $to )) {
  505. $subject=stripslashes($emailTitle);
  506. $message=stripslashes($newContentsix);
  507. $sender_name = api_get_person_name($_SESSION['_user']['lastName'], $_SESSION['_user']['firstName'], null, PERSON_NAME_EMAIL_ADDRESS);
  508. $email = $_SESSION['_user']['mail'];
  509. $headers="From:$sender_name\r\nReply-to: $email\r\nContent-type: text/html; charset=iso-8859-15";
  510. //@mail($to,$subject,$message,$headers);
  511. //api_send_mail($to,$subject,$message,$headers);
  512. api_mail('',$to,$subject,$message,$sender_name,$email,$headers);
  513. $sql_date="SELECT * FROM $db_name.survey WHERE survey_id='$surveyid'";
  514. $res_date=Database::query($sql_date, __FILE__, __LINE__);
  515. $obj_date=Database::fetch_object($res_date);
  516. $end_date=$obj_date->avail_till;
  517. $table_reminder = Database :: get_main_table(TABLE_MAIN_SURVEY_REMINDER); // TODO: To be checked. TABLE_MAIN_SURVEY_REMINDER has not been defined.
  518. if ($_REQUEST['reminder']=="1") {
  519. $time=getdate();
  520. $time = $time['yday'];
  521. $time = $time+7;
  522. $sql_insert="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$to','".addslashes($subject)."','".addslashes($message)."','1','$time','$end_date')";
  523. Database::query($sql_insert, __FILE__, __LINE__);
  524. } else if ($_REQUEST['reminder']=="2") {
  525. $time=getdate();
  526. $time = $time['yday'];
  527. $time = $time+14;
  528. $sql_insert="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$to','".addslashes($subject)."','".addslashes($message)."','1','$time','$end_date')";
  529. Database::query($sql_insert, __FILE__, __LINE__);
  530. } else if($_REQUEST['reminder']=="3") {
  531. $time=getdate();
  532. $time = $time['yday'];
  533. $time = $time+30;
  534. $sql_insert="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$to','".addslashes($subject)."','".addslashes($message)."','1','$time','$end_date')";
  535. Database::query($sql_insert, __FILE__, __LINE__);
  536. }
  537. }
  538. }
  539. }
  540. /*===================================================================
  541. MAIL FUNCTION
  542. ===================================================================*/
  543. if ($_POST['email_ann'] && empty($_POST['onlyThoseMails'])) {
  544. $sent_to=sent_to("announcement", $insert_id);
  545. $userlist = $sent_to['users'];
  546. $grouplist = $sent_to['groups'];
  547. // groepen omzetten in users
  548. if ($grouplist) {
  549. $grouplist = "'".implode("', '",$grouplist)."'"; //protect individual elements with surrounding quotes
  550. $sql = "SELECT user_id
  551. FROM $tbl_groupUser gu
  552. WHERE gu.group_id IN (".$grouplist.")";
  553. $groupMemberResult = Database::query($sql,__FILE__,__LINE__);
  554. if ($groupMemberResult) {
  555. while ($u = Database::fetch_array($groupMemberResult)) {
  556. $userlist [] = $u ['user_id']; // complete the user id list ...
  557. }
  558. }
  559. }
  560. if (is_array($userlist)) {
  561. $userlist = "'".implode("', '", array_unique($userlist) )."'";
  562. // send to the created 'userlist'
  563. $sqlmail = "SELECT user_id, lastname, firstname, email
  564. FROM $tbl_user
  565. WHERE user_id IN (".$userlist.")";
  566. } else if (empty($_POST['not_selected_form'])) {
  567. if(empty($_SESSION['id_session']) || api_get_setting('use_session_mode')=='false') {
  568. // send to everybody
  569. $sqlmail = "SELECT user.user_id, user.email, user.lastname, user.firstname
  570. FROM $tbl_course_user, $tbl_user
  571. WHERE course_code='".Database::escape_string($_course['sysCode'])."'
  572. AND course_rel_user.user_id = user.user_id";
  573. } else {
  574. $sqlmail = "SELECT user.user_id, user.email, user.lastname, user.firstname
  575. FROM $tbl_user
  576. INNER JOIN $tbl_session_course_user
  577. ON $tbl_user.user_id = $tbl_session_course_user.id_user
  578. AND $tbl_session_course_user.course_code = '".$_course['id']."'
  579. AND $tbl_session_course_user.id_session = ".intval($_SESSION['id_session']);
  580. }
  581. }
  582. if ($sqlmail!='') {
  583. $result = Database::query($sqlmail,__FILE__,__LINE__);
  584. /*=================================================================================
  585. send email one by one to avoid antispam
  586. =================================================================================*/
  587. $db_name = Database::get_course_table(TABLE_MAIN_SURVEY);
  588. while ($myrow = Database::fetch_array($result)) {
  589. /* Header : Bericht van uw lesgever - GES ($_cid)
  590. Body : John Doe (prenom + nom) <john_doe@hotmail.com> (email)
  591. Morgen geen les!! (emailTitle)
  592. Morgen is er geen les, de les wordt geschrapt wegens vergadering (newContent)
  593. */
  594. $emailSubject = "[" . $_course['official_code'] . "] " . $emailTitle;
  595. if ($surveyid) {
  596. $newContentone=str_replace("#page#","choose_language.php",$newContent);
  597. $newContenttwo=str_replace("#temp#",$template,$newContentone);
  598. $newContentthree=str_replace("#sid#",$surveyid,$newContenttwo);
  599. $newContentfour=str_replace("#mail#",$myrow["email"],$newContentthree);
  600. $newContentfive=str_replace("#db_name#",$db_name,$newContentfour);
  601. $newContentsix=str_replace("#uid#",$myrow["user_id"],$newContentfive);
  602. $message=stripslashes($newContentsix);
  603. $sender_name = api_get_person_name($_SESSION['_user']['lastName'], $_SESSION['_user']['firstName'], null, PERSON_NAME_EMAIL_ADDRESS);
  604. $email = $_SESSION['_user']['mail'];
  605. $headers="From:$sender_name\r\nReply-to: $email\r\nContent-type: text/html; charset=iso-8859-15";
  606. //@mail($myrow["email"],stripslashes($emailTitle),$message,$headers);
  607. api_mail('',$myrow["email"],stripslashes($emailTitle),$message,$sender_name,$email);
  608. } else {
  609. // intro of the email: receiver name and subject
  610. $mail_body = api_get_person_name($myrow["lastname"], $myrow["firstname"], null, PERSON_NAME_EMAIL_ADDRESS)."<br />\n".stripslashes($emailTitle)."<br />";
  611. // make a change for absolute url
  612. $newContent = str_replace('src=\"../../','src=\"'.api_get_path(WEB_PATH).'', $newContent);
  613. // main part of the email
  614. $mail_body .= trim(stripslashes($newContent));
  615. // signature of email: sender name and course URL after -- line
  616. $mail_body .= "<br />-- <br />";
  617. $mail_body .= api_get_person_name($_user['firstName'], $_user['lastName'], null, PERSON_NAME_EMAIL_ADDRESS)." \n";
  618. $mail_body .= "<br /> \n<a href=\"".api_get_path(WEB_COURSE_PATH).$_course['id']."\">";
  619. $mail_body .= $_course['official_code'].' '.$_course['name'] . "</a>";
  620. //set the charset and use it for the encoding of the email - small fix, not really clean (should check the content encoding origin first)
  621. //here we use the encoding used for the webpage where the text is encoded (ISO-8859-1 in this case)
  622. //$to_email_address =$_POST['emailsAdd'];
  623. //$mail_body;
  624. $headers = array();
  625. if (empty($charset)) { $charset='ISO-8859-1';}
  626. $headers['Content-Type'] = 'text/html';
  627. $headers['charset'] = $charset;
  628. $mailid=$myrow["email"];
  629. $newmail = api_mail_html(api_get_person_name($myrow["lastname"], $myrow["firstname"], null, PERSON_NAME_EMAIL_ADDRESS), $myrow["email"], stripslashes($emailSubject), $mail_body, api_get_person_name($_SESSION['_user']['lastName'], $_SESSION['_user']['firstName'], null, PERSON_NAME_EMAIL_ADDRESS), $_SESSION['_user']['mail'],$headers);
  630. }
  631. $sql_date="SELECT * FROM $db_name WHERE survey_id='$surveyid'";
  632. $res_date=Database::query($sql_date, __FILE__, __LINE__);
  633. $obj_date=Database::fetch_object($res_date);
  634. $end_date=$obj_date->avail_till;
  635. $table_reminder = Database :: get_main_table(TABLE_MAIN_SURVEY_REMINDER); // TODO: To be checked. TABLE_MAIN_SURVEY_REMINDER has not been defined.
  636. if ($_REQUEST['reminder']=="1") {
  637. $time=getdate();
  638. $time = $time['yday'];
  639. $time = $time+7;
  640. $sql="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$mailid','".addslashes($emailSubject)."','".addslashes($mail_body)."','1','$time','$end_date')";
  641. Database::query($sql, __FILE__, __LINE__);
  642. } else if ($_REQUEST['reminder']=="2") {
  643. $time=getdate();
  644. $time = $time['yday'];
  645. $time = $time+14;
  646. $sql="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$mailid','".addslashes($emailSubject)."','".addslashes($mail_body)."','1','$time','$end_date')";
  647. Database::query($sql, __FILE__, __LINE__);
  648. } else if ($_REQUEST['reminder']=="3") {
  649. $time=getdate();
  650. $time = $time['yday'];
  651. $time = $time+30;
  652. $sql="INSERT INTO $table_reminder(sid,db_name,email,subject,content,reminder_choice,reminder_time,avail_till) values('$surveyid','$db_name','$mailid','".addslashes($emailSubject)."','".addslashes($mail_body)."','1','$time','$end_date')";
  653. Database::query($sql, __FILE__, __LINE__);
  654. }
  655. }
  656. update_mail_sent($insert_id);
  657. $message = $added_and_sent;
  658. }
  659. } // $email_ann*/
  660. } // end condition token
  661. } // isset
  662. // UNSET VARIABLES
  663. unset_session_resources();
  664. unset($form_elements);
  665. $_SESSION['formelements']=null;
  666. $newContent = null;
  667. $emailTitle = null;
  668. unset($emailTitle);
  669. unset($newContent);
  670. unset($content_to_modify);
  671. unset($title_to_modify);
  672. if($_REQUEST['publish_survey']) {
  673. $surveyid=$_REQUEST['surveyid'];
  674. $cidReq = $_REQUEST['cidReq'];
  675. ?>
  676. <script>
  677. window.location.href="../survey/survey_list.php?<?php echo api_get_cidreq(); ?>&published=published&surveyid=<?php echo Security::remove_XSS($_REQUEST['publish_survey']); ?>";
  678. </script>
  679. <?php
  680. }
  681. } // if $submit Announcement
  682. }
  683. /*====================================================
  684. Tool introduction
  685. ====================================================*/
  686. if (empty($_GET['origin']) || $_GET['origin'] !== 'learnpath') {
  687. //api_display_tool_title($nameTools);
  688. Display::display_introduction_section(TOOL_ANNOUNCEMENT);
  689. }
  690. /*
  691. ==============================================================================
  692. MAIN SECTION
  693. ==============================================================================
  694. */
  695. /* DISPLAY LEFT COLUMN */
  696. //condition for the session
  697. $session_id = api_get_session_id();
  698. $condition_session = api_get_session_condition($session_id);
  699. if(api_is_allowed_to_edit(false,true)) {
  700. // check teacher status
  701. if (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath') {
  702. $sql="SELECT
  703. announcement.*, toolitemproperties.*
  704. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  705. WHERE announcement.id = toolitemproperties.ref
  706. AND toolitemproperties.tool='announcement'
  707. AND toolitemproperties.visibility<>'2'
  708. $condition_session
  709. GROUP BY toolitemproperties.ref
  710. ORDER BY display_order DESC
  711. LIMIT 0,$maximum";
  712. }
  713. } else {
  714. // students only get to see the visible announcements
  715. if (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath') {
  716. $group_memberships=GroupManager::get_group_ids($_course['dbName'], $_user['user_id']);
  717. if ((api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  718. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR ( toolitemproperties.to_user_id='".$_user['user_id']."'" .
  719. "OR toolitemproperties.to_group_id IN (0, ".implode(", ", $group_memberships)."))) ";
  720. } else {
  721. $cond_user_id = " AND ( toolitemproperties.to_user_id='".$_user['user_id']."'" .
  722. "OR toolitemproperties.to_group_id IN (0, ".implode(", ", $group_memberships).")) ";
  723. }
  724. // the user is member of several groups => display personal announcements AND his group announcements AND the general announcements
  725. if (is_array($group_memberships) && count($group_memberships)>0) {
  726. $sql="SELECT
  727. announcement.*, toolitemproperties.*
  728. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  729. WHERE announcement.id = toolitemproperties.ref
  730. AND toolitemproperties.tool='announcement'
  731. AND toolitemproperties.visibility='1'
  732. $cond_user_id
  733. $condition_session
  734. GROUP BY toolitemproperties.ref
  735. ORDER BY display_order DESC
  736. LIMIT 0,$maximum";
  737. } else {
  738. // the user is not member of any group
  739. // this is an identified user => show the general announcements AND his personal announcements
  740. if ($_user['user_id']) {
  741. if ((api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  742. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR ( toolitemproperties.to_user_id='".$_user['user_id']."' OR toolitemproperties.to_group_id='0')) ";
  743. } else {
  744. $cond_user_id = " AND ( toolitemproperties.to_user_id='".$_user['user_id']."' OR toolitemproperties.to_group_id='0') ";
  745. }
  746. $sql="SELECT
  747. announcement.*, toolitemproperties.*
  748. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  749. WHERE announcement.id = toolitemproperties.ref
  750. AND toolitemproperties.tool='announcement'
  751. AND toolitemproperties.visibility='1'
  752. $cond_user_id
  753. $condition_session
  754. GROUP BY toolitemproperties.ref
  755. ORDER BY display_order DESC
  756. LIMIT 0,$maximum";
  757. } else {
  758. if (api_get_course_setting('allow_user_edit_announcement')) {
  759. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR toolitemproperties.to_group_id='0') ";
  760. } else {
  761. $cond_user_id = " AND toolitemproperties.to_group_id='0' ";
  762. }
  763. // the user is not identiefied => show only the general announcements
  764. $sql="SELECT
  765. announcement.*, toolitemproperties.*
  766. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  767. WHERE announcement.id = toolitemproperties.ref
  768. AND toolitemproperties.tool='announcement'
  769. AND toolitemproperties.visibility='1'
  770. AND toolitemproperties.to_group_id='0'
  771. $condition_session
  772. GROUP BY toolitemproperties.ref
  773. ORDER BY display_order DESC
  774. LIMIT 0,$maximum";
  775. }
  776. }
  777. }
  778. }
  779. $result = Database::query($sql,__FILE__,__LINE__);
  780. $announcement_number = Database::num_rows($result);
  781. /*----------------------------------------------------
  782. ADD ANNOUNCEMENT / DELETE ALL
  783. ----------------------------------------------------*/
  784. if (!$surveyid) {
  785. $show_actions = false;
  786. if ((api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) and (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath')) {
  787. echo '<div class="actions">';
  788. echo "<a href='".api_get_self()."?".api_get_cidreq()."&action=add&origin=".(empty($_GET['origin'])?'':$_GET['origin'])."'>".Display::return_icon('announce_add.gif',get_lang('AddAnnouncement')).get_lang('AddAnnouncement')."</a>";
  789. $show_actions = true;
  790. }
  791. if (api_is_allowed_to_edit() && $announcement_number > 1) {
  792. if (!$show_actions)
  793. echo '<div class="actions">';
  794. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&action=delete_all\" onclick=\"javascript:if(!confirm('".get_lang("ConfirmYourChoice")."')) return false;\">".Display::return_icon('valvesdelete.gif',get_lang('AnnouncementDeleteAll')).get_lang('AnnouncementDeleteAll')."</a>\n"; } // if announcementNumber > 1
  795. if ($show_actions)
  796. echo '</div>';
  797. }
  798. if (empty($_GET['origin']) OR $_GET['origin'] !== 'learnpath') {
  799. echo "\n\n<table width=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n";
  800. echo "\t<tr>\n";
  801. echo "\t\t<td width=\"20%\" valign=\"top\">\n";
  802. }
  803. /*----------------------------------------------------
  804. ANNOUNCEMENTS LIST
  805. ----------------------------------------------------*/
  806. if (!$surveyid) {
  807. if ($display_title_list == true) {
  808. echo "\t\t\t<table>\n";
  809. while ($myrow = Database::fetch_array($result)) {
  810. $title = $myrow['title'];
  811. $title = Security::remove_XSS($title);
  812. echo "\t\t\t\t<tr>\n";
  813. echo "\t\t\t\t\t<td width=\"15%\">\n";
  814. if ($myrow['visibility']==0) {
  815. $class="class=\"invisible\"";
  816. } else {
  817. $class="";
  818. }
  819. //validacion when belongs to a session
  820. $session_img = api_get_session_image($myrow['session_id'], $_user['status']);
  821. echo "\t\t\t\t\t\t<a style=\"text-decoration:none\" href=\"announcements.php?".api_get_cidreq()."#".$myrow['id']."\" ".$class.">" . api_trunc_str($title, $length) . "</a>\n" . $session_img;
  822. echo "\t\t\t\t\t</td>\n\t\t\t\t</tr>\n";
  823. }
  824. echo "\t\t\t</table>\n";
  825. } // end $display_title_list == true
  826. }
  827. if (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath') {
  828. echo "\t\t</td>\n";
  829. echo "\t\t<td width=\"20\" background=\"../img/verticalruler.gif\">&nbsp;</td>\n";
  830. // START RIGHT PART
  831. echo "\t\t<td valign=\"top\">\n";
  832. }
  833. /*=======================================
  834. DISPLAY ACTION MESSAGE
  835. =======================================*/
  836. if (isset($message) && $message == true) {
  837. Display::display_confirmation_message($message);
  838. $display_announcement_list = true;
  839. $display_form = false;
  840. }
  841. if (!empty($error_message)) {
  842. Display::display_error_message($error_message);
  843. $display_announcement_list = false;
  844. $display_form = true;
  845. }
  846. /*==================================================================================
  847. DISPLAY FORM
  848. ==================================================================================*/
  849. if ($display_form == true) {
  850. $content_to_modify=stripslashes($content_to_modify);
  851. $title_to_modify=stripslashes($title_to_modify);
  852. // DISPLAY ADD ANNOUNCEMENT COMMAND
  853. echo '<form method="post" name="f1" action="'.api_get_self().'?publish_survey='.Security::remove_XSS($surveyid).'&id='.Security::remove_XSS($_GET['id']).'&db_name='.$db_name.'&cidReq='.Security::remove_XSS($_GET['cidReq']).'" style="margin:0px;">'."\n";
  854. if (empty($_GET['id'])) {
  855. $form_name = get_lang('AddAnnouncement');
  856. } else {
  857. $form_name = get_lang('ModifyAnnouncement');
  858. }
  859. echo '<div class="row"><div class="form_header">'.$form_name.'</div></div>';
  860. //this variable defines if the course administrator can send a message to a specific user / group or not
  861. if (empty($_SESSION['toolgroup'])) {
  862. echo ' <div class="row">
  863. <div class="label">'.
  864. Display::return_icon('group.gif', get_lang('ModifyRecipientList'), array ('align' => 'absmiddle')).'<a href="#" onclick="if(document.getElementById(\'recipient_list\').style.display==\'none\') document.getElementById(\'recipient_list\').style.display=\'block\'; else document.getElementById(\'recipient_list\').style.display=\'none\';">'.get_lang('SentTo').'</a>
  865. </div>
  866. <div class="formw">';
  867. if (isset($_GET['id']) && is_array($to)) {
  868. echo '&nbsp;';
  869. } elseif (isset($_GET['remind_inactive'])) {
  870. $email_ann = '1';
  871. $_SESSION['select_groupusers']="show";
  872. $content_to_modify = sprintf(get_lang('RemindInactiveLearnersMailContent'),api_get_setting('siteName'), 7);
  873. $title_to_modify = sprintf(get_lang('RemindInactiveLearnersMailSubject'),api_get_setting('siteName'));
  874. } elseif (isset($_GET['remindallinactives']) && $_GET['remindallinactives']=='true') {
  875. $since = isset($_GET['since']) ? intval($_GET['since']) : 6;
  876. $to = Tracking :: get_inactives_students_in_course($_course['id'],$since, $_SESSION['id_session']);
  877. foreach($to as &$user) {
  878. $user = 'USER:'.$user;
  879. }
  880. $_SESSION['select_groupusers']="show";
  881. $email_ann = '1';
  882. $content_to_modify = sprintf(get_lang('RemindInactiveLearnersMailContent'),api_get_setting('siteName'),$since);
  883. $title_to_modify = sprintf(get_lang('RemindInactiveLearnersMailSubject'),api_get_setting('siteName'));
  884. } else {
  885. echo get_lang("Everybody");
  886. }
  887. show_to_form($to);
  888. echo ' </div>
  889. </div>';
  890. if (!isset($announcement_to_modify) ) $announcement_to_modify ='';
  891. if ($announcement_to_modify=='') {
  892. ($email_ann=='1')?$checked='checked':$checked='';
  893. echo ' <div class="row">
  894. <div class="label">
  895. <input class="checkbox" type="checkbox" value="1" name="email_ann" checked>
  896. </div>
  897. <div class="formw">'.get_lang('EmailOption').'
  898. </div>
  899. </div>';
  900. }
  901. } else {
  902. if (!isset($announcement_to_modify) ) {
  903. $announcement_to_modify ="";
  904. }
  905. if ($announcement_to_modify=='') {
  906. ($email_ann=='1' || !empty($surveyid))?$checked='checked':$checked='';
  907. echo '<div class="row">
  908. <div class="label">
  909. <input class="checkbox" type="checkbox" value="1" name="email_ann" '.$checked.'>
  910. </div>
  911. <div class="formw">'.
  912. get_lang('EmailOption').': '.get_lang('MyGroup').'&nbsp;&nbsp;<a href="#" onclick="if(document.getElementById(\'recipient_list\').style.display==\'none\') document.getElementById(\'recipient_list\').style.display=\'block\'; else document.getElementById(\'recipient_list\').style.display=\'none\';">'.get_lang('ModifyRecipientList').'</a>';
  913. show_to_form_group($_SESSION['toolgroup']);
  914. echo '</div></div>';
  915. }
  916. }
  917. if ($surveyid) {
  918. echo ' <div class="row">
  919. <div class="label">
  920. '.get_lang('EmailAddress').'
  921. </div>
  922. <div class="formw">
  923. <input type="text" name="emailsAdd" value="'.Security::remove_XSS($emails_add).'" size="52">(Comma separated for multiple)
  924. </div>
  925. </div>';
  926. echo ' <div class="row">
  927. <div class="label">
  928. '.get_lang('OnlyThoseAddresses').'
  929. </div>
  930. <div class="formw">
  931. <input type="checkbox" name="onlyThoseMails">
  932. </div>
  933. </div>';
  934. }
  935. // the announcement title
  936. echo ' <div class="row">
  937. <div id="msg_error" style="display:none;color:red;margin-left:20%"></div>
  938. <div class="label">
  939. <span class="form_required">*</span> '.get_lang('EmailTitle').'
  940. </div>
  941. <div class="formw">
  942. <input type="text" id="emailTitle" name="emailTitle" value="'.Security::remove_XSS($title_to_modify).'" size="60">
  943. </div>
  944. </div>';
  945. unset($title_to_modify);
  946. $title_to_modify = null;
  947. if (!isset($announcement_to_modify) ) $announcement_to_modify ="";
  948. if (!isset($content_to_modify) ) $content_to_modify ="";
  949. if (!isset($title_to_modify)) $title_to_modify = "";
  950. echo '<input type="hidden" name="id" value="'.$announcement_to_modify.'" />';
  951. if ($surveyid) {
  952. $content_to_modify='<br /><a href="'.api_get_path(WEB_CODE_PATH).'/survey/#page#?temp=#temp#&surveyid=#sid#&uid=#uid#&mail=#mail#&db_name=#db_name">'.get_lang('ClickHereToOpenSurvey').'</a><br />
  953. '.get_lang('OrCopyPasteUrl').' <br />
  954. '.api_get_path(WEB_CODE_PATH).'/survey/#page#?temp=#temp#&surveyid=#sid#&uid=#uid#&mail=#mail#&db_name=#db_name&nbsp;';
  955. }
  956. $oFCKeditor = new FCKeditor('newContent') ;
  957. $oFCKeditor->Width = '100%';
  958. $oFCKeditor->Height = '300';
  959. if(!api_is_allowed_to_edit()) {
  960. $oFCKeditor->ToolbarSet = "AnnouncementsStudent";
  961. } else {
  962. $oFCKeditor->ToolbarSet = "Announcements";
  963. }
  964. $oFCKeditor->Value = $content_to_modify;
  965. echo $oFCKeditor->CreateHtml();
  966. echo'<br />';
  967. if (empty($_SESSION['toolgroup'])) {
  968. echo '<input type="hidden" name="submitAnnouncement" value="OK">';
  969. echo '<input type="hidden" name="sec_token" value="'.$stok.'" />';
  970. echo '<button class="save" type="button" value="'.' '.get_lang('Send').' '.'" onclick="selectAll(this.form.elements[3],true)" >'.get_lang('ButtonPublishAnnouncement').'</button><br /><br />';
  971. } else {
  972. echo '<input type="hidden" name="submitAnnouncement" value="OK">';
  973. echo '<input type="hidden" name="sec_token" value="'.$stok.'" />';
  974. echo '<button class="save" type="button" value="'.' '.get_lang('Send').' '.'" onclick="selectAll(this.form.elements[4],true)" >'.get_lang('ButtonPublishAnnouncement').'</button><br /><br />';
  975. }
  976. echo '</form><br />';
  977. if ((isset($_GET['action']) && isset($_GET['id']) && is_array($to))||isset($_GET['remindallinactives'])||isset($_GET['remind_inactive'])) {
  978. echo '<script>document.getElementById(\'recipient_list\').style.display=\'block\';</script>';
  979. }
  980. } // displayform
  981. /*===============================================
  982. DISPLAY ANNOUNCEMENT LIST
  983. ===============================================*/
  984. if ($display_announcement_list && !$surveyid) {
  985. // by default we use the id of the current user. The course administrator can see the announcement of other users by using the user / group filter
  986. $user_id=$_user['user_id'];
  987. if (isset($_SESSION['user'])) {
  988. $user_id=$_SESSION['user'];
  989. }
  990. if (isset($_SESSION['group'])) {
  991. $group_id=$_SESSION['group'];
  992. }
  993. //$group_memberships=GroupManager::get_group_ids($_course['dbName'], $_user['user_id']);
  994. $group_memberships=GroupManager::get_group_ids($_course['dbName'],$_user['user_id']);
  995. if (api_is_allowed_to_edit(false,true)) {
  996. // A.1. you are a course admin with a USER filter
  997. // => see only the messages of this specific user + the messages of the group (s)he is member of.
  998. if (isset($_SESSION['user'])) {
  999. if (is_array($group_memberships) && count($group_memberships)>0) {
  1000. $sql="SELECT
  1001. announcement.*, toolitemproperties.*
  1002. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1003. WHERE announcement.id = toolitemproperties.ref
  1004. AND toolitemproperties.tool='announcement'
  1005. AND (toolitemproperties.to_user_id=$user_id OR toolitemproperties.to_group_id IN (0, ".implode(", ", $group_memberships).") )
  1006. $condition_session
  1007. ORDER BY display_order DESC";
  1008. } else {
  1009. $sql="SELECT
  1010. announcement.*, toolitemproperties.*
  1011. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1012. WHERE announcement.id = toolitemproperties.ref
  1013. AND toolitemproperties.tool='announcement'
  1014. AND (toolitemproperties.to_user_id=$user_id OR toolitemproperties.to_group_id='0')
  1015. AND toolitemproperties.visibility='1'
  1016. $condition_session
  1017. ORDER BY display_order DESC";
  1018. }
  1019. } elseif (isset($_SESSION['group'])) {
  1020. // A.2. you are a course admin with a GROUP filter
  1021. // => see only the messages of this specific group
  1022. $sql="SELECT
  1023. announcement.*, toolitemproperties.*
  1024. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1025. WHERE announcement.id = toolitemproperties.ref
  1026. AND toolitemproperties.tool='announcement'
  1027. AND (toolitemproperties.to_group_id=$group_id OR toolitemproperties.to_group_id='0')
  1028. $condition_session
  1029. GROUP BY toolitemproperties.ref
  1030. ORDER BY display_order DESC";
  1031. } else {
  1032. // A.3 you are a course admin without any group or user filter
  1033. // A.3.a you are a course admin without user or group filter but WITH studentview
  1034. // => see all the messages of all the users and groups without editing possibilities
  1035. if (isset($isStudentView) and $isStudentView=="true") {
  1036. $sql="SELECT
  1037. announcement.*, toolitemproperties.*
  1038. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1039. WHERE announcement.id = toolitemproperties.ref
  1040. AND toolitemproperties.tool='announcement'
  1041. AND toolitemproperties.visibility='1'
  1042. $condition_session
  1043. GROUP BY toolitemproperties.ref
  1044. ORDER BY display_order DESC";
  1045. } else {
  1046. // A.3.a you are a course admin without user or group filter and WTIHOUT studentview (= the normal course admin view)
  1047. // => see all the messages of all the users and groups with editing possibilities
  1048. $sql="SELECT
  1049. announcement.*, toolitemproperties.*
  1050. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1051. WHERE announcement.id = toolitemproperties.ref
  1052. AND toolitemproperties.tool='announcement'
  1053. AND (toolitemproperties.visibility='0' or toolitemproperties.visibility='1')
  1054. $condition_session
  1055. GROUP BY toolitemproperties.ref
  1056. ORDER BY display_order DESC";
  1057. }
  1058. }
  1059. } else {
  1060. //STUDENT
  1061. if (is_array($group_memberships) && count($group_memberships)>0) {
  1062. if ((api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  1063. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR (toolitemproperties.to_user_id=$user_id OR toolitemproperties.to_group_id IN (0, ".implode(", ", $group_memberships).") )) ";
  1064. } else {
  1065. $cond_user_id = " AND (toolitemproperties.to_user_id=$user_id OR toolitemproperties.to_group_id IN (0, ".implode(", ", $group_memberships).")) ";
  1066. }
  1067. $sql="SELECT
  1068. announcement.*, toolitemproperties.*
  1069. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1070. WHERE announcement.id = toolitemproperties.ref
  1071. AND toolitemproperties.tool='announcement'
  1072. $cond_user_id
  1073. AND toolitemproperties.visibility='1'
  1074. ORDER BY display_order DESC";
  1075. } else {
  1076. if ($_user['user_id']) {
  1077. if ((api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  1078. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR (toolitemproperties.to_user_id='".$_user['user_id']."' OR toolitemproperties.to_group_id='0')) ";
  1079. } else {
  1080. $cond_user_id = " AND (toolitemproperties.to_user_id='".$_user['user_id']."' OR toolitemproperties.to_group_id='0') ";
  1081. }
  1082. $sql="SELECT
  1083. announcement.*, toolitemproperties.*
  1084. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1085. WHERE announcement.id = toolitemproperties.ref
  1086. AND toolitemproperties.tool='announcement'
  1087. $cond_user_id
  1088. AND toolitemproperties.visibility='1'
  1089. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")
  1090. ORDER BY display_order DESC";
  1091. } else {
  1092. if ((api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  1093. $cond_user_id = " AND (toolitemproperties.lastedit_user_id = '".api_get_user_id()."' OR toolitemproperties.to_group_id='0' ) ";
  1094. } else {
  1095. $cond_user_id = " AND toolitemproperties.to_group_id='0' ";
  1096. }
  1097. $sql="SELECT
  1098. announcement.*, toolitemproperties.*
  1099. FROM $tbl_announcement announcement, $tbl_item_property toolitemproperties
  1100. WHERE announcement.id = toolitemproperties.ref
  1101. AND toolitemproperties.tool='announcement'
  1102. $cond_user_id
  1103. AND toolitemproperties.visibility='1'
  1104. AND announcement.session_id IN(0,".intval($_SESSION['id_session']).")";
  1105. }
  1106. }
  1107. }
  1108. $result = Database::query($sql,__FILE__,__LINE__);
  1109. $num_rows = Database::num_rows($result);
  1110. /*=================================================
  1111. DISPLAY: NO ITEMS
  1112. =================================================*/
  1113. if ($num_rows == 0) {
  1114. echo get_lang('NoAnnouncements');;
  1115. }
  1116. $iterator = 1;
  1117. $bottomAnnouncement = $announcement_number;
  1118. echo "\t\t\t<table width=\"100%\" class=\"data_table\">\n";
  1119. $displayed=array();
  1120. while ($myrow = Database::fetch_array($result)) {
  1121. if (!in_array($myrow['id'], $displayed)) {
  1122. $title = $myrow['title'];
  1123. $content = $myrow['content'];
  1124. $content = make_clickable($content);
  1125. $content = text_filter($content);
  1126. /* DATE */
  1127. $last_post_datetime = $myrow['end_date'];
  1128. list($last_post_date, $last_post_time) = split(" ", $last_post_datetime);
  1129. list($year, $month, $day) = explode("-", $last_post_date);
  1130. list($hour, $min) = explode(":", $last_post_time);
  1131. $announceDate = mktime((int)$hour, (int)$min, 0, (int)$month, (int)$day, (int)$year);
  1132. // the styles
  1133. if ($myrow['visibility']=='0') {
  1134. $style='invisible';
  1135. } else {
  1136. $style = '';
  1137. }
  1138. echo "\t\t\t\t<tr class=\"".$style."\">";
  1139. /* THE ICONS */
  1140. echo "\t\t\t\t\t<th>\n";
  1141. // anchoring
  1142. echo "<a name=\"".(int)($myrow["id"])."\"></a>\n";
  1143. // User or group icon
  1144. if ($myrow['to_group_id']!== '0' and $myrow['to_group_id']!== 'NULL') {
  1145. echo "\t\t\t\t\t\t".Display::return_icon('group.gif', get_lang('AnnounceSentToUserSelection'))."\n";
  1146. }
  1147. // the email icon
  1148. if ($myrow['email_sent'] == '1') {
  1149. echo "\t\t\t\t\t\t".Display::return_icon('email.gif', get_lang('AnnounceSentByEmail'))."\n";
  1150. }
  1151. echo "\t\t\t\t\t</th>\n";
  1152. /* TITLE */
  1153. echo "\t\t\t\t\t<th>".Security::remove_XSS($title)."</th>\n";
  1154. echo "\t\t\t\t\t<th>" . get_lang("SentTo") . " : &nbsp; ";
  1155. $sent_to=sent_to("announcement", $myrow['id']);
  1156. $sent_to_form=sent_to_form($sent_to);
  1157. $user_info=api_get_user_info($myrow['insert_user_id']);
  1158. echo '&nbsp;&nbsp;&nbsp;'.get_lang('By').' : &nbsp;'.str_replace(' ', '&nbsp;', api_get_person_name($user_info['firstName'], $user_info['lastName']));
  1159. echo "\t\t\t\t\t</th>\n","\t\t\t\t</tr>\n";
  1160. echo "\t\t\t\t<tr class='row_odd'>\n\t\t\t\t\t<td class=\"announcements_datum\" colspan=\"3\">";
  1161. echo get_lang('AnnouncementPublishedOn')," : ",api_ucfirst(format_locale_date($dateFormatLong,strtotime($last_post_date)));
  1162. echo "</td>\n\t\t\t\t</tr>\n";
  1163. /* CONTENT */
  1164. echo "\t\t\t\t<tr class=\"$text_style\">\n\t\t\t\t\t<td colspan=\"3\">\n";
  1165. echo $content."\t\t\t\t\t</td>\n\t\t\t\t</tr>\n";
  1166. /* RESOURCES */
  1167. echo "<tr class='row_odd'>\n<td colspan=\"3\">\n";
  1168. if (check_added_resources("Ad_Valvas", $myrow["id"])) {
  1169. echo "<i>".get_lang('AddedResources')."</i><br />";
  1170. display_added_resources("Ad_Valvas", $myrow["id"]);
  1171. }
  1172. // we can edit if : we are the teacher OR the element belongs to the session we are coaching OR the option to allow users to edit is on
  1173. if (api_is_allowed_to_edit() OR (api_is_course_coach() && api_is_element_in_the_session(TOOL_ANNOUNCEMENT,$myrow['id'])) OR (api_get_course_setting('allow_user_edit_announcement') && !api_is_anonymous())) {
  1174. /* SHOW MOD/DEL/VIS FUNCTIONS */
  1175. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&action=modify&id=".$myrow['id']."\">",
  1176. Display::return_icon('edit.gif', get_lang('Edit')),
  1177. "</a>";
  1178. if (api_is_allowed_to_edit(false,true)) {
  1179. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&action=delete&id=".$myrow['id']."&sec_token=".$stok."\" onclick=\"javascript:if(!confirm('".addslashes(api_htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset))."')) return false;\">",
  1180. Display::return_icon('delete.gif', get_lang('Delete')),
  1181. "</a>";
  1182. }
  1183. if ($myrow['visibility']==1) {
  1184. $image_visibility="visible";
  1185. $alt_visibility=get_lang('Hide');
  1186. } else {
  1187. $image_visibility="invisible";
  1188. $alt_visibility=get_lang('Visible');
  1189. }
  1190. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&origin=".(!empty($_GET['origin'])?Security::remove_XSS($_GET['origin']):'')."&action=showhide&id=".$myrow['id']."&sec_token=".$stok."\">".
  1191. Display::return_icon($image_visibility.'.gif', $alt_visibility)."</a>";
  1192. // DISPLAY MOVE UP COMMAND only if it is not the top announcement
  1193. if ($iterator != 1) {
  1194. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&up=".$myrow["id"]."&sec_token=".$stok."\">",
  1195. Display::return_icon('up.gif', get_lang('Up'))."</a>";
  1196. }
  1197. if ($iterator < $bottomAnnouncement) {
  1198. echo "<a href=\"".api_get_self()."?".api_get_cidreq()."&down=".$myrow["id"]."&sec_token=".$stok."\">".
  1199. Display::return_icon('down.gif', get_lang('Down'))."</a>";
  1200. }
  1201. echo "</td>\n</tr>\n";
  1202. $iterator ++;
  1203. } // is_allowed_to_edit
  1204. echo "<tr><td width=\"100%\" colspan=\"3\"><a href=\"#top\">".Display::return_icon('top.gif', get_lang('Top'))."</a></td></tr>";
  1205. }
  1206. $displayed[]=$myrow['id'];
  1207. } // end while ($myrow = Database::fetch_array($result))
  1208. echo "</table>";
  1209. } // end: if ($displayAnnoucementList)
  1210. echo "</table>";
  1211. if (!empty($display_specific_announcement)) display_announcement($announcement_id);
  1212. /*
  1213. ==============================================================================
  1214. FOOTER
  1215. ==============================================================================
  1216. */
  1217. if (empty($_GET['origin']) or $_GET['origin'] !== 'learnpath') {
  1218. //we are not in learnpath tool
  1219. Display::display_footer();
  1220. }
  1221. ?>