chamilo
/
chamilo-lms
mirror of https://github.com/chamilo/chamilo-lms/tree/1.11.x
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

[svn r15245] Minor - Replaced mysql_ functions, title's bug when editing course fixed.

Browse Source
skala
Julio Montoya 17 years ago
parent 2d840c1313
commit 7633fae31c
2 changed files with 31 additions and 29 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 54
      main/admin/course_edit.php
  2. 6
      main/admin/course_list.php

54
main/admin/course_edit.php
Unescape View File

@ -1,11 +1,11 @@
<?php <?php
// $Id: course_edit.php 14291 2008-02-14 08:17:23Z elixir_inter $ // $Id: course_edit.php 15245 2008-05-08 16:53:52Z juliomontoya $
/* /*
============================================================================== ==============================================================================
Dokeos - elearning and course management software Dokeos - elearning and course management software
Copyright (c) 2004 Dokeos S.A. Copyright (c) 2004 Dokeos SPRL
Copyright (c) 2003 Ghent University (UGent) Copyright (c) 2003 Ghent University (UGent)
Copyright (c) 2001 Universite catholique de Louvain (UCL) Copyright (c) 2001 Universite catholique de Louvain (UCL)
Copyright (c) Olivier Brouckaert Copyright (c) Olivier Brouckaert
@ -21,7 +21,8 @@
See the GNU General Public License for more details. See the GNU General Public License for more details.
Contact: Dokeos, 181 rue Royale, B-1000 Brussels, Belgium, info@dokeos.com Contact address: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium
Mail: info@dokeos.com
============================================================================== ==============================================================================
*/ */
/** /**
@ -74,21 +75,21 @@ $table_user = Database :: get_main_table(TABLE_MAIN_USER);
//Get the course infos //Get the course infos
$sql = "SELECT * FROM $course_table WHERE code='".mysql_real_escape_string($course_code)."'"; $sql = "SELECT * FROM $course_table WHERE code='".Database::escape_string($course_code)."'";
$result = api_sql_query($sql, __FILE__, __LINE__); $result = api_sql_query($sql, __FILE__, __LINE__);
if (mysql_num_rows($result) != 1) if (Database::num_rows($result) != 1)
{ {
header('Location: course_list.php'); header('Location: course_list.php');
exit (); exit ();
} }
$course = mysql_fetch_array($result,MYSQL_ASSOC); $course = Database::fetch_array($result,'ASSOC');
// Get course teachers // Get course teachers
$table_course_user = Database :: get_main_table(TABLE_MAIN_COURSE_USER); $table_course_user = Database :: get_main_table(TABLE_MAIN_COURSE_USER);
$sql = "SELECT user.user_id,lastname,firstname FROM $table_user as user,$table_course_user as course_user WHERE course_user.status='1' AND course_user.user_id=user.user_id AND course_user.course_code='".$course_code."' ORDER BY lastname,firstname"; $sql = "SELECT user.user_id,lastname,firstname FROM $table_user as user,$table_course_user as course_user WHERE course_user.status='1' AND course_user.user_id=user.user_id AND course_user.course_code='".$course_code."' ORDER BY lastname,firstname";
$res = api_sql_query($sql,__FILE__,__LINE__); $res = api_sql_query($sql,__FILE__,__LINE__);
$course_teachers = array(); $course_teachers = array();
while($obj = mysql_fetch_object($res)) while($obj = Database::fetch_object($res))
{ {
$course_teachers[$obj->user_id] = $obj->lastname.' '.$obj->firstname; $course_teachers[$obj->user_id] = $obj->lastname.' '.$obj->firstname;
} }
@ -99,7 +100,7 @@ $res = api_sql_query($sql,__FILE__,__LINE__);
$teachers = array(); $teachers = array();
$platform_teachers[0] = '-- '.get_lang('NoManager').' --'; $platform_teachers[0] = '-- '.get_lang('NoManager').' --';
while($obj = mysql_fetch_object($res)) while($obj = Database::fetch_object($res))
{ {
if(!array_key_exists($obj->user_id,$course_teachers)){ if(!array_key_exists($obj->user_id,$course_teachers)){
$teachers[$obj->user_id] = $obj->lastname.' '.$obj->firstname; $teachers[$obj->user_id] = $obj->lastname.' '.$obj->firstname;
@ -117,7 +118,7 @@ while($obj = mysql_fetch_object($res))
if(count($course_teachers)==0){ if(count($course_teachers)==0){
$sql='SELECT tutor_name FROM '.$course_table.' WHERE code="'.$course_code.'"'; $sql='SELECT tutor_name FROM '.$course_table.' WHERE code="'.$course_code.'"';
$res = api_sql_query($sql,__FILE__,__LINE__); $res = api_sql_query($sql,__FILE__,__LINE__);
$tutor_name=mysql_result($res,0,0); $tutor_name=Database::result($res,0,0);
$course['tutor_name']=array_search($tutor_name,$platform_teachers); $course['tutor_name']=array_search($tutor_name,$platform_teachers);
} }
@ -174,6 +175,7 @@ $form->addElement('button', null, get_lang('Ok'), 'onclick="valide()"');
// Set some default values // Set some default values
$course_db_name = $course['db_name']; $course_db_name = $course['db_name'];
$course['title']=html_entity_decode($course['title'],ENT_QUOTES,$charset);
$form->setDefaults($course); $form->setDefaults($course);
// Validate form // Validate form
if( $form->validate()) if( $form->validate())
@ -201,21 +203,21 @@ if( $form->validate())
{ {
$department_url = 'http://'.$department_url; $department_url = 'http://'.$department_url;
} }
$sql = "UPDATE $course_table SET course_language='".mysql_real_escape_string($course_language)."', $sql = "UPDATE $course_table SET course_language='".Database::escape_string($course_language)."',
title='".mysql_real_escape_string($title)."', title='".Database::escape_string($title)."',
category_code='".mysql_real_escape_string($category_code)."', category_code='".Database::escape_string($category_code)."',
tutor_name='".mysql_real_escape_string($tutor_name)."', tutor_name='".Database::escape_string($tutor_name)."',
visual_code='".mysql_real_escape_string($visual_code)."', visual_code='".Database::escape_string($visual_code)."',
department_name='".mysql_real_escape_string($department_name)."', department_name='".Database::escape_string($department_name)."',
department_url='".mysql_real_escape_string($department_url)."', department_url='".Database::escape_string($department_url)."',
disk_quota='".mysql_real_escape_string($disk_quota)."', disk_quota='".Database::escape_string($disk_quota)."',
visibility = '".mysql_real_escape_string($visibility)."', visibility = '".Database::escape_string($visibility)."',
subscribe = '".mysql_real_escape_string($subscribe)."', subscribe = '".Database::escape_string($subscribe)."',
unsubscribe='".mysql_real_escape_string($unsubscribe)."' unsubscribe='".Database::escape_string($unsubscribe)."'
WHERE code='".mysql_real_escape_string($course_code)."'"; WHERE code='".Database::escape_string($course_code)."'";
api_sql_query($sql, __FILE__, __LINE__); api_sql_query($sql, __FILE__, __LINE__);
$sql='DELETE FROM '.$course_user_table.' WHERE course_code="'.mysql_real_escape_string($course_code).'" AND status="1"'; $sql='DELETE FROM '.$course_user_table.' WHERE course_code="'.Database::escape_string($course_code).'" AND status="1"';
api_sql_query($sql, __FILE__, __LINE__); api_sql_query($sql, __FILE__, __LINE__);
if(count($teachers)>0){ if(count($teachers)>0){
@ -226,12 +228,12 @@ if( $form->validate())
$sql_select_teacher = 'SELECT 1 FROM '.$course_user_table.' WHERE user_id = "'.$key.'" AND course_code = "'.$course_code.'" AND status<>"1"'; $sql_select_teacher = 'SELECT 1 FROM '.$course_user_table.' WHERE user_id = "'.$key.'" AND course_code = "'.$course_code.'" AND status<>"1"';
$result = api_sql_query($sql_select_teacher, __FILE__, __LINE__); $result = api_sql_query($sql_select_teacher, __FILE__, __LINE__);
if(mysql_num_rows($result) == 1){ if(Database::num_rows($result) == 1){
$sql = 'UPDATE '.$course_user_table.' SET status = "1" WHERE course_code = "'.$course_code.'" AND user_id = "'.$key.'"'; $sql = 'UPDATE '.$course_user_table.' SET status = "1" WHERE course_code = "'.$course_code.'" AND user_id = "'.$key.'"';
} }
else{ else{
$sql = "INSERT INTO ".$course_user_table . " SET $sql = "INSERT INTO ".$course_user_table . " SET
course_code = '".mysql_real_escape_string($course_code). "', course_code = '".Database::escape_string($course_code). "',
user_id = '".$key . "', user_id = '".$key . "',
status = '1', status = '1',
role = '', role = '',
@ -245,7 +247,7 @@ if( $form->validate())
} }
$sql = "INSERT IGNORE INTO ".$course_user_table . " SET $sql = "INSERT IGNORE INTO ".$course_user_table . " SET
course_code = '".mysql_real_escape_string($course_code). "', course_code = '".Database::escape_string($course_code). "',
user_id = '".$tutor_id . "', user_id = '".$tutor_id . "',
status = '1', status = '1',
role = '', role = '',
@ -255,7 +257,7 @@ if( $form->validate())
api_sql_query($sql, __FILE__, __LINE__); api_sql_query($sql, __FILE__, __LINE__);
$forum_config_table = Database::get_course_table(TOOL_FORUM_CONFIG_TABLE,$course_db_name); $forum_config_table = Database::get_course_table(TOOL_FORUM_CONFIG_TABLE,$course_db_name);
$sql = "UPDATE ".$forum_config_table." SET default_lang='".mysql_real_escape_string($course_language)."'"; $sql = "UPDATE ".$forum_config_table." SET default_lang='".Database::escape_string($course_language)."'";
header('Location: course_list.php'); header('Location: course_list.php');
exit (); exit ();
} }

6
main/admin/course_list.php
Unescape View File

@ -1,5 +1,5 @@
<?php <?php
// $Id: course_list.php 15014 2008-04-22 20:22:28Z juliomontoya $ // $Id: course_list.php 15245 2008-05-08 16:53:52Z juliomontoya $
/* /*
============================================================================== ==============================================================================
Dokeos - elearning and course management software Dokeos - elearning and course management software
@ -242,8 +242,8 @@ else
$table->set_header(6, get_lang('UnsubscriptionAllowed')); $table->set_header(6, get_lang('UnsubscriptionAllowed'));
$table->set_header(7, get_lang('IsVirtualCourse')); $table->set_header(7, get_lang('IsVirtualCourse'));
$table->set_header(8, get_lang('Teacher')); $table->set_header(8, get_lang('Teacher'));
$table->set_header(9, '', false); $table->set_header(9, get_lang('Modify'), false,'width="120px"');
$table->set_column_filter(9,'modify_filter'); $table->set_column_filter(9,'modify_filter');
$table->set_form_actions(array ('delete_courses' => get_lang('DeleteCourse')),'course'); $table->set_form_actions(array ('delete_courses' => get_lang('DeleteCourse')),'course');
$table->display(); $table->display();
} }

Write Preview
Loading…
Cancel
Save