[svn r20126] Adding html filter to course fields see FS#4116

skala
Julio Montoya 16 years ago
parent c57eda4da1
commit 4ade5c51bf
  1. 17
      main/admin/course_add.php
  2. 15
      main/admin/course_edit.php
  3. 22
      main/course_info/infocours.php

@ -1,5 +1,5 @@
<?php
// $Id: course_add.php 19608 2009-04-07 18:04:42Z cvargas1 $
// $Id: course_add.php 20126 2009-04-27 17:09:24Z juliomontoya $
/*
==============================================================================
Dokeos - elearning and course management software
@ -91,11 +91,22 @@ $form->applyFilter('visual_code','strtoupper');
$form->addRule('wanted_code',get_lang('Max'),'maxlength',$maxlength);
$form->addElement('select', 'tutor_id', get_lang('CourseTitular'), $teachers);
$form->addElement('select', 'course_teachers', get_lang('CourseTeachers'), $teachers, 'multiple=multiple size=5');
//Title
$form->add_textfield('title', get_lang('Title'),true, array ('size' => '60'));
$form->applyFilter('title','html_filter');
$form->applyFilter('title','trim');
$categories_select = $form->addElement('select', 'category_code', get_lang('CourseFaculty'), $categories);
CourseManager::select_and_sort_categories($categories_select);
//Course department
$form->add_textfield('department_name', get_lang('CourseDepartment'),false, array ('size' => '60'));
$form->applyFilter('department_name','html_filter');
$form->applyFilter('department_name','trim');
//Department URL
$form->add_textfield('department_url', get_lang('CourseDepartmentURL'),false, array ('size' => '60'));
$form->applyFilter('department_url','html_filter');
$form->addElement('select_language', 'course_language', get_lang('CourseLanguage'));
$form->addElement('radio', 'visibility', get_lang("CourseAccess"), get_lang('OpenToTheWorld'), COURSE_VISIBILITY_OPEN_WORLD);
$form->addElement('radio', 'visibility', null, get_lang('OpenToThePlatform'), COURSE_VISIBILITY_OPEN_PLATFORM);
@ -119,8 +130,7 @@ reset($teachers);
$values['course_teachers'] = key($teachers);
$form->setDefaults($values);
// Validate form
if( $form->validate())
{
if( $form->validate()) {
$course = $form->exportValues();
$code = $course['visual_code'];
$tutor_name = $teachers[$course['tutor_id']];
@ -135,7 +145,6 @@ if( $form->validate())
break;
}
}
$title = $course['title'];
$category = $course['category_code'];
$department_name = $course['department_name'];

@ -1,4 +1,4 @@
<?php // $Id: course_edit.php 19608 2009-04-07 18:04:42Z cvargas1 $
<?php // $Id: course_edit.php 20126 2009-04-27 17:09:24Z juliomontoya $
/* For licensing terms, see /dokeos_license.txt */
/**
==============================================================================
@ -128,12 +128,23 @@ EOT;
$renderer = $form->defaultRenderer();
$renderer -> setElementTemplate($element_template, 'group');
$form -> addGroup($group,'group',get_lang('CourseTeachers'),'</td><td width="50" align="center"><input type="button" onclick="moveItem(document.getElementById(\'platform_teachers\'), document.getElementById(\'course_teachers\'))" value=">>"><br><br><input type="button" onclick="moveItem(document.getElementById(\'course_teachers\'), document.getElementById(\'platform_teachers\'))" value="<<"></td><td>');
//title
$form->add_textfield( 'title', get_lang('Title'),true, array ('size' => '60'));
$form->applyFilter('title','html_filter');
$form->applyFilter('title','trim');
$categories_select = $form->addElement('select', 'category_code', get_lang('CourseFaculty'), $categories);
CourseManager::select_and_sort_categories($categories_select);
$form->add_textfield( 'department_name', get_lang('CourseDepartment'), false,array ('size' => '60'));
$form->applyFilter('department_name','html_filter');
$form->applyFilter('department_name','trim');
$form->add_textfield( 'department_url', get_lang('CourseDepartmentURL'),false, array ('size' => '60'));
$form->applyFilter('department_url','html_filter');
$form->applyFilter('department_url','trim');
$form->addElement('select_language', 'course_language', get_lang('CourseLanguage'));
$form->addElement('radio', 'visibility', get_lang("CourseAccess"), get_lang('OpenToTheWorld'), COURSE_VISIBILITY_OPEN_WORLD);
$form->addElement('radio', 'visibility', null, get_lang('OpenToThePlatform'), COURSE_VISIBILITY_OPEN_PLATFORM);

@ -1,10 +1,10 @@
<?php // $Id: infocours.php 18287 2009-02-06 16:23:12Z ndieschburg $
<?php // $Id: infocours.php 20126 2009-04-27 17:09:24Z juliomontoya $
/*
==============================================================================
Dokeos - elearning and course management software
Copyright (c) 2004 Dokeos S.A.
Copyright (c) 2004-2009 Dokeos SPRL
Copyright (c) 2003 Ghent University (UGent)
Copyright (c) 2001 Universite catholique de Louvain (UCL)
Copyright (c) Hugues Peeters
@ -156,9 +156,17 @@ $form->applyFilter('visual_code', 'strtoupper');
$prof = &$form->addElement('select', 'tutor_name', get_lang('Professors'), $a_profs);
$prof -> setSelected($s_selected_tutor);
$form->add_textfield('title', get_lang('Title'), true, array ('size' => '60'));
$form->applyFilter('title','html_filter');
$form->applyFilter('title','trim');
$form->addElement('select', 'category_code', get_lang('Fac'), $categories);
$form->add_textfield('department_name', get_lang('Department'), false, array ('size' => '60'));
$form->applyFilter('department_name','html_filter');
$form->applyFilter('department_name','trim');
$form->add_textfield('department_url', get_lang('DepartmentUrl'), false, array ('size' => '60'));
$form->applyFilter('department_url','html_filter');
$form->addRule('tutor_name', get_lang('ThisFieldIsRequired'), 'required');
$form->addElement('select_language', 'course_language', get_lang('Ln'));
$form->addElement('static', null, '&nbsp;', get_lang('TipLang'));
@ -289,13 +297,11 @@ $values['allow_learning_path_theme'] = api_get_course_setting('allow_learning_pa
$form->setDefaults($values);
// Validate form
if ($form->validate() && is_settings_editable())
{
if ($form->validate() && is_settings_editable()) {
$update_values = $form->exportValues();
foreach ($update_values as $index => $value)
{
$update_values[$index] = mysql_real_escape_string($value);
}
foreach ($update_values as $index => $value) {
$update_values[$index] = Database::escape_string($value);
}
$table_course = Database :: get_main_table(TABLE_MAIN_COURSE);
$sql = "UPDATE $table_course SET title = '".$update_values['title']."',
visual_code = '".$update_values['visual_code']."',

Loading…
Cancel
Save