diff --git a/main/admin/session_course_list.php b/main/admin/session_course_list.php index f3c9f89696..2dc1283d7d 100644 --- a/main/admin/session_course_list.php +++ b/main/admin/session_course_list.php @@ -1,9 +1,16 @@ 0) { + $my_temp = array(); + foreach ($idChecked as $id){ + $my_temp[]= Database::escape_string($id);// forcing the escape_string + } + $idChecked = $my_temp; $idChecked="'".implode("','",$idChecked)."'"; - api_sql_query("DELETE FROM $tbl_session_rel_course WHERE id_session='$id_session' AND course_code IN($idChecked)",__FILE__,__LINE__); - $nbr_affected_rows=mysql_affected_rows(); - api_sql_query("DELETE FROM $tbl_session_rel_course_rel_user WHERE id_session='$id_session' AND course_code IN($idChecked)",__FILE__,__LINE__); api_sql_query("UPDATE $tbl_session SET nbr_courses=nbr_courses-$nbr_affected_rows WHERE id='$id_session'",__FILE__,__LINE__); @@ -54,18 +61,14 @@ $limit=20; $from=$page * $limit; $result=api_sql_query("SELECT code,title,nbr_users FROM $tbl_session_rel_course,$tbl_course WHERE course_code=code AND id_session='$id_session' ORDER BY $sort LIMIT $from,".($limit+1),__FILE__,__LINE__); - $Courses=api_store_result($result); - $nbr_results=sizeof($Sessions); - $tool_name = api_htmlentities($session_name,ENT_QUOTES,$charset).' : '.get_lang('CourseListInSession'); $interbreadcrumb[]=array('url' => 'index.php',"name" => get_lang('PlatformAdmin')); $interbreadcrumb[]=array('url' => "session_list.php","name" => get_lang('SessionList')); Display::display_header($tool_name); - api_display_tool_title($tool_name); ?> @@ -83,10 +86,8 @@ $tableHeader[] = array(get_lang('CourseTitle')); $tableHeader[] = array(get_lang('NbUsers')); $tableHeader[] = array(get_lang('Actions')); - $tableCourses = array(); -foreach($Courses as $key=>$enreg) -{ +foreach($Courses as $key=>$enreg) { $course = array(); $course[] = ''; $course[] = api_htmlentities($enreg['title'],ENT_QUOTES,$charset); @@ -97,15 +98,10 @@ foreach($Courses as $key=>$enreg) } echo '
'; -?> - - - +?> \ No newline at end of file diff --git a/main/admin/session_course_user_list.php b/main/admin/session_course_user_list.php index ef50167852..2addfc9608 100644 --- a/main/admin/session_course_user_list.php +++ b/main/admin/session_course_user_list.php @@ -1,12 +1,15 @@ 0 ) { $idChecked=implode(',',$idChecked); - - api_sql_query("DELETE FROM $tbl_session_rel_course_rel_user WHERE id_session='$id_session' AND course_code='".addslashes($course_code)."' AND id_user IN($idChecked)",__FILE__,__LINE__); - + api_sql_query("DELETE FROM $tbl_session_rel_course_rel_user WHERE id_session='$id_session' AND course_code='".addslashes($course_code)."' AND id_user IN($idChecked)",__FILE__,__LINE__); $nbr_affected_rows=mysql_affected_rows(); - api_sql_query("UPDATE $tbl_session_rel_course SET nbr_users=nbr_users-$nbr_affected_rows WHERE id_session='$id_session' AND course_code='".addslashes($course_code)."'",__FILE__,__LINE__); } - header('Location: '.api_get_self().'?id_session='.$id_session.'&course_code='.urlencode($course_code).'&sort='.$sort); exit(); } @@ -49,16 +52,15 @@ $limit=20; $from=$page * $limit; $result=api_sql_query("SELECT user_id,lastname,firstname,username FROM $tbl_session_rel_course_rel_user,$tbl_user WHERE user_id=id_user AND id_session='$id_session' AND course_code='".addslashes($course_code)."' ORDER BY $sort LIMIT $from,".($limit+1),__FILE__,__LINE__); - $Users=api_store_result($result); $nbr_results=sizeof($Users); $tool_name = get_lang('ListOfUsersSubscribedToCourse').' "'.api_htmlentities($course_title,ENT_QUOTES,$charset).'" '.get_lang('ForTheSession').' "'.api_htmlentities($session_name,ENT_QUOTES,$charset).'"'; -$interbredcrump[]=array("url" => "index.php","name" => get_lang('AdministrationTools')); -$interbredcrump[]=array("url" => "session_list.php","name" => get_lang('SessionList')); -$interbredcrump[]=array("url" => "session_course_list.php?id_session=$id_session","name" => get_lang('ListOfCoursesOfSession')." "".api_htmlentities($session_name,ENT_QUOTES,$charset)."""); +$interbreadcrumb[]=array("url" => "index.php","name" => get_lang('AdministrationTools')); +$interbreadcrumb[]=array("url" => "session_list.php","name" => get_lang('SessionList')); +$interbreadcrumb[]=array("url" => "session_course_list.php?id_session=$id_session","name" => get_lang('ListOfCoursesOfSession')." "".api_htmlentities($session_name,ENT_QUOTES,$charset)."""); Display::display_header($tool_name); @@ -110,19 +112,17 @@ else| - | Nom | -Prénom | -Identifiant | -Actions | ++ | + | + |
|---|