chamilo-lms/main/social/message_for_group_form.inc.php

<?php
/* For licensing terms, see /license.txt */
$language_file = array('registration','messages','userInfo','admin');
$cidReset=true;
require_once '../inc/global.inc.php';
require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php';
require_once api_get_path(LIBRARY_PATH).'message.lib.php';
require_once api_get_path(LIBRARY_PATH).'social.lib.php';
require_once api_get_path(LIBRARY_PATH).'group_portal_manager.lib.php';
require_once api_get_path(LIBRARY_PATH).'fckeditor/fckeditor.php';

$tok = Security::get_token();

if (api_is_anonymous()) {
	api_not_allowed();
}

if (api_get_setting('allow_message_tool') != 'true' && api_get_setting('allow_social_tool') != 'true') {
	api_not_allowed();
}

if ( isset($_REQUEST['user_friend']) ) {
	$info_user_friend=array();
	$info_path_friend=array();
 	$userfriend_id=Security::remove_XSS($_REQUEST['user_friend']);
 	// panel=1  send message
 	// panel=2  send invitation
 	$panel=Security::remove_XSS($_REQUEST['view_panel']);
 	$info_user_friend=api_get_user_info($userfriend_id);
 	$info_path_friend=UserManager::get_user_picture_path_by_id($userfriend_id,'web',false,true);
}

$group_id = intval($_GET['group_id']);
$message_id = intval($_GET['message_id']);
$actions = array('add_message_group','edit_message_group','reply_message_group');

$allowed_action = (isset($_GET['action']) && in_array($_GET['action'],$actions))?Security::remove_XSS($_GET['action']):'';

$to_group = '';
$subject = '';
$message = '';
if (!empty($group_id) && $allowed_action) {
	$group_info = GroupPortalManager::get_group_data($group_id);
	$to_group   = $group_info['name'];
	if (!empty($message_id)) {
		$message_info = MessageManager::get_message_by_id($message_id);
		if ($allowed_action == 'reply_message_group') {				
			$subject  = get_lang('Reply').': '.api_xml_http_response_encode($message_info['title']);
		} else {
			$subject  = api_xml_http_response_encode($message_info['title']);
			$message  = api_xml_http_response_encode($message_info['content']);
		}	
	} 	
}

$page_item = !empty($_GET['topics_page_nr'])?intval($_GET['topics_page_nr']):1;

$param_item_page = isset($_GET['items_page_nr']) && isset($_GET['topic_id'])?('&items_'.intval($_GET['topic_id']).'_page_nr='.(!empty($_GET['topics_page_nr'])?intval($_GET['topics_page_nr']):1)):'';
$page_topic  = !empty($_GET['topics_page_nr'])?intval($_GET['topics_page_nr']):1;
?>

<form name="form" action="groups.php?id=<?php echo $group_id ?>&anchor_topic=<?php echo Security::remove_XSS($_GET['anchor_topic']) ?>&topics_page_nr=<?php echo $page_topic ?><?php echo $param_item_page ?>" method="POST" enctype="multipart/form-data">
<input type="hidden" name="action" value="<?php echo $allowed_action ?>" />
<input type="hidden" name="group_id" value="<?php echo $group_id ?>" />
<input type="hidden" name="parent_id" value="<?php echo $message_id ?>" />
<input type="hidden" name="message_id" value="<?php echo $message_id ?>" />
<input type="hidden" name="token" value="<?php echo $tok ?>" />
<table width="600" border="0" height="220">
    <tr height="180">
        <td align="left">
<div id="id_content_panel_init">
	<dl>
	<?php
			if (api_get_setting('allow_message_tool')=='true') {	
	            //normal message
		   		$user_info=api_get_user_info($userfriend_id);
		  		echo api_xml_http_response_encode(get_lang('To')); ?> :&nbsp;&nbsp;&nbsp;&nbsp;<?php echo api_xml_http_response_encode($to_group); ?>
		  		<br />
		 		<br /><span style="color:red">*</span><?php echo api_xml_http_response_encode(get_lang('Subject')); ?> :<br />
		 		<input id="txt_subject_id" name="title" type="text" style="width:450px;" value="<?php echo $subject ?>"><br/>
		   		<br /><?php echo api_xml_http_response_encode(get_lang('Message')); ?> :<br />		   		
		   		<?php
				$oFCKeditor = new FCKeditor('content') ;
				$oFCKeditor->ToolbarSet = 'messages';
				$oFCKeditor->Width		= '100%';
				$oFCKeditor->Height		= '130';
				$oFCKeditor->Value		= $message;					
				$return =	$oFCKeditor->CreateHtml();	
				echo $return;
		   		?>		   		
		   		<br /><?php echo api_xml_http_response_encode(get_lang('AttachmentFiles')); ?> :<br />
				<span id="filepaths"><div id="filepath_1"><input type="file" name="attach_1" size="20" /></div></span>
				<div id="link-more-attach"><a href="javascript://" onclick="return add_image_form()"><?php echo get_lang('AddOneMoreFile') ?></a>&nbsp;(<?php echo api_xml_http_response_encode(sprintf(get_lang('MaximunFileSizeX'),format_file_size(api_get_setting('message_max_upload_filesize')))) ?>)</div>		   				   				   		
		   		<br />
		   		<button class="save" onclick="if(validate_text_empty(this.form.title.value,'<?php echo get_lang('YouShouldWriteASubject')?>')){return false;}" type="submit" value="<?php echo api_xml_http_response_encode(get_lang('SendMessage')); ?>"><?php echo api_xml_http_response_encode(get_lang('SendMessage')) ?></button>
		   		<div><span style="color:red">*</span><?php echo get_lang('FieldRequired') ?></div>
	<?php } ?>
	</dl>
</td>
</tr>
</div>
</table>
</form>