Blocking exercise_report.php page for students

main/exercice/exercise.lib.php

@@ -976,10 +976,12 @@ function get_exam_results_data($from, $number_of_items, $column, $direction, $ex
                     tth.exe_cours_id ASC,
                     tth.exe_date DESC";
     } else {
+        
         //any view is proposed to the student, they should see the results in the overview.php page
         exit;
-        // Student view
         
+        // Student view
+        /*
         $sql = "SELECT DISTINCT
                     te.exe_duration,
 					te.start_date,
@@ -1013,6 +1015,7 @@ function get_exam_results_data($from, $number_of_items, $column, $direction, $ex
                   FROM $TBL_TRACK_HOTPOTATOES
                   WHERE exe_user_id = '" . api_get_user_id() . "' AND exe_cours_id = '" . api_get_course_id() . "' $hotpotatoe_where
                   ORDER BY exe_cours_id ASC, exe_date DESC";
+        */
     }
 
     $teacher_list = CourseManager::get_teacher_list_from_course_code(api_get_course_id());

main/inc/ajax/model.ajax.php

@@ -187,10 +187,18 @@ switch ($action) {
 		if ($is_allowedToEdit || $is_tutor) {
 			$columns = array('firstname', 'lastname', 'username', 'group_name', 'exe_duration', 'start_date', 'exe_date', 'score','status','actions');
 		} else {
-			$columns = array('exe_duration', 'start_date', 'exe_date', 'score', 'status', 'actions');
+			//$columns = array('exe_duration', 'start_date', 'exe_date', 'score', 'status', 'actions');
 		} 
-		$result = get_exam_results_data($start, $limit, $sidx, $sord, $exercise_id, $where_condition);
         
+        if (isset($_GET['filter_by_user']) && !empty($_GET['filter_by_user'])) {            
+            $filter_user = intval($_GET['filter_by_user']);
+            if ($where_condition == "") {
+                $where_condition .= " te.exe_user_id  = '$filter_user'" ;
+            } else {
+                $where_condition .= " AND te.exe_user_id  = '$filter_user'";
+            }
+        } 
+		$result = get_exam_results_data($start, $limit, $sidx, $sord, $exercise_id, $where_condition);        
 		break;
     case 'get_sessions':
         $columns = array('name', 'nbr_courses', 'nbr_users', 'category_name', 'date_start','date_end', 'coach_name', 'session_active', 'visibility');