chamilo
/
chamilo-lms
mirror of https://github.com/chamilo/chamilo-lms/tree/1.11.x
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

Webservice: Add audit log to REST web services - refs #4417

Browse Source 
Author: @BorjaSanchezBeezNest
pull/4430/head
Borja Sánchez 3 years ago committed by GitHub
parent 980e3fc40f
commit 77052d0baf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 136 additions and 39 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 2
      main/inc/lib/api.lib.php
  2. 1
      main/inc/lib/webservices/Rest.php
  3. 172
      main/webservices/api/v2.php

2
main/inc/lib/api.lib.php
Unescape View File

@ -297,6 +297,8 @@ define('LOG_SURVEY_CREATED', 'survey_created');
define('LOG_SURVEY_DELETED', 'survey_deleted');
define('LOG_SURVEY_CLEAN_RESULTS', 'survey_clean_results');
define('LOG_WS', 'access_ws_');
define('USERNAME_PURIFIER', '/[^0-9A-Za-z_\.\$-]/');
//used when login_is_email setting is true

1
main/inc/lib/webservices/Rest.php
Unescape View File

@ -1661,6 +1661,7 @@ class Rest extends WebService
$results = [];
if (!empty($courseInfo)) {
$results['status'] = true;
$results['id'] = $courseInfo['real_id'];
$results['code_course'] = $courseInfo['code'];
$results['title_course'] = $courseInfo['title'];
$extraFieldValues = new ExtraFieldValue('course');

172
main/webservices/api/v2.php
Unescape View File

@ -72,7 +72,7 @@ try {
if (!$isValid) {
throw new Exception(get_lang('InvalideUserDetected'));
}
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData([
'url' => api_get_path(WEB_PATH),
'apiKey' => Rest::findUserApiKey($username, Rest::SERVICE_NAME),
@ -81,34 +81,40 @@ try {
break;
case Rest::SAVE_GCM_ID:
$gcmId = isset($_POST['registration_id']) ? Security::remove_XSS($_POST['registration_id']) : null;
Event::addEvent(LOG_WS.$action, 'gcm_id', $gcmId);
$restApi->setGcmId($gcmId);
$restResponse->setData(['status' => true]);
break;
case Rest::LOGOUT:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restApi->logout();
$restResponse->setData(['status' => true]);
break;
case Rest::GET_USER_MESSAGES:
$lastMessageId = isset($_POST['last']) ? (int) $_POST['last'] : 0;
$messages = $restApi->getUserMessages($lastMessageId);
Event::addEvent(LOG_WS.$action, 'last_message_id', $lastMessageId);
$restResponse->setData($messages);
break;
case Rest::GET_USER_MESSAGES_RECEIVED:
Event::addEvent(LOG_WS.$action, 'username', $username);
$messages = $restApi->getUserReceivedMessages();
$restResponse->setData($messages);
break;
case Rest::DELETE_USER_MESSAGE:
$messageId = isset($_POST['message_id']) ? (int) $_POST['message_id'] : 0;
$messageType = !empty($_POST['msg_type']) ? $_POST['msg_type'] : '';
Event::addEvent(LOG_WS.$action, 'message_id', $messageId);
$restApi->deleteUserMessage($messageId, $messageType);
$restResponse->setData(['status' => true]);
break;
case Rest::GET_USER_MESSAGES_SENT:
Event::addEvent(LOG_WS.$action, 'username', $username);
$messages = $restApi->getUserSentMessages();
$restResponse->setData($messages);
break;
case Rest::GET_COUNT_NEW_MESSAGES:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData(
MessageManager::getMessagesCountForUser($restApi->getUser()->getId())
);
@ -116,6 +122,7 @@ try {
case Rest::SET_MESSAGE_READ:
$messageId = isset($_POST['message_id']) ? (int) $_POST['message_id'] : 0;
$restApi->setMessageRead($messageId);
Event::addEvent(LOG_WS.$action, 'message_id', $messageId);
$restResponse->setData(['status' => true]);
break;
case Rest::POST_USER_MESSAGE_READ:
@ -128,7 +135,6 @@ try {
if (empty($messagesId)) {
throw new Exception(get_lang('NoData'));
}
$messageStatus = $action === Rest::POST_USER_MESSAGE_READ ? MESSAGE_STATUS_NEW : MESSAGE_STATUS_UNREAD;
$data = array_flip($messagesId);
@ -139,6 +145,7 @@ try {
$messageStatus
);
}
Event::addEvent(LOG_WS.$action, 'messages_id', implode(',', $messagesId));
$restResponse->setData($data);
break;
@ -147,6 +154,7 @@ try {
$subject = !empty($_POST['subject']) ? $_POST['subject'] : null;
$text = !empty($_POST['text']) ? $_POST['text'] : null;
$data = $restApi->saveUserMessage($subject, $text, $receivers);
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData($data);
break;
case Rest::GET_MESSAGE_USERS:
@ -154,127 +162,152 @@ try {
if (!$search || strlen($search) < 2) {
throw new Exception(get_lang('TooShort'));
}
Event::addEvent(LOG_WS.$action, 'filter_search', $search);
$data = $restApi->getMessageUsers($search);
$restResponse->setData($data);
break;
case Rest::VIEW_MESSAGE:
$messageId = isset($_GET['message']) ? (int) $_GET['message'] : 0;
Event::addEvent(LOG_WS.$action, 'message_id', $messageId);
$restApi->viewMessage($messageId);
break;
case Rest::GET_USER_COURSES:
$userId = isset($_REQUEST['user_id']) ? (int) $_REQUEST['user_id'] : 0;
Event::addEvent(LOG_WS.$action, 'username', $username);
$courses = $restApi->getUserCourses($userId);
$restResponse->setData($courses);
break;
case Rest::GET_USER_SESSIONS:
Event::addEvent(LOG_WS.$action, 'username', $username);
$courses = $restApi->getUserSessions();
$restResponse->setData($courses);
break;
case Rest::VIEW_PROFILE:
$userId = isset($_GET['user_id']) ? (int) $_GET['user_id'] : 0;
Event::addEvent(LOG_WS.$action, 'user_id', $userId);
$restApi->viewUserProfile($userId);
break;
case Rest::GET_PROFILE:
Event::addEvent(LOG_WS.$action, 'username', $username);
$userInfo = $restApi->getUserProfile();
$restResponse->setData($userInfo);
break;
case Rest::GET_PROFILES_BY_EXTRA_FIELD:
Event::addEvent(LOG_WS.$action, 'extra_field_name', $_POST['field_name']);
$users = $restApi->getUsersProfilesByExtraField($_POST['field_name'], $_POST['field_value']);
$restResponse->setData($users);
break;
case Rest::GET_COURSES_DETAILS_BY_EXTRA_FIELD:
Event::addEvent(LOG_WS.$action, 'extra_field_name', $_POST['field_name']);
$courses = $restApi->getCoursesByExtraField($_POST['field_name'], $_POST['field_value']);
$restResponse->setData($courses);
break;
case Rest::GET_USER_COURSES_BY_DATES:
Event::addEvent(LOG_WS.$action, 'user_id', (int) $_POST['user_id']);
$courses = $restApi->getUserCoursesByDates($_POST['user_id'], $_POST['start_date'], $_POST['end_date']);
$restResponse->setData($courses);
break;
case Rest::VIEW_MY_COURSES:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restApi->viewMyCourses();
break;
case Rest::VIEW_COURSE_HOME:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restApi->viewCourseHome();
break;
case Rest::GET_COURSE_INFO:
Event::addEvent(LOG_WS.$action, 'course_id', (int) $_POST['course']);
$courseInfo = $restApi->getCourseInfo();
$restResponse->setData($courseInfo);
break;
case Rest::GET_COURSE_DESCRIPTIONS:
Event::addEvent(LOG_WS.$action, 'course_id', (int) $_POST['course']);
$descriptions = $restApi->getCourseDescriptions();
$restResponse->setData($descriptions);
break;
case Rest::GET_COURSE_DOCUMENTS:
$directoryId = isset($_POST['dir_id']) ? Security::remove_XSS($_POST['dir_id']) : null;
Event::addEvent(LOG_WS.$action, 'directory_id', $directoryId);
$documents = $restApi->getCourseDocuments($directoryId);
$restResponse->setData($documents);
break;
case Rest::GET_COURSE_ANNOUNCEMENTS:
Event::addEvent(LOG_WS.$action, 'course_id', (int) $_POST['course']);
$announcements = $restApi->getCourseAnnouncements();
$restResponse->setData($announcements);
break;
case Rest::GET_COURSE_ANNOUNCEMENT:
$announcementId = isset($_POST['announcement']) ? Security::remove_XSS($_POST['announcement']) : 0;
Event::addEvent(LOG_WS.$action, 'announcement_id', $announcementId);
$announcement = $restApi->getCourseAnnouncement($announcementId);
$restResponse->setData($announcement);
break;
case Rest::GET_COURSE_AGENDA:
Event::addEvent(LOG_WS.$action, 'course_id', (int) $_POST['course']);
$agenda = $restApi->getCourseAgenda();
$restResponse->setData($agenda);
break;
case Rest::GET_COURSE_NOTEBOOKS:
Event::addEvent(LOG_WS.$action, 'course_id', (int) $_POST['course']);
$notebooks = $restApi->getCourseNotebooks();
$restResponse->setData($notebooks);
break;
case Rest::GET_COURSE_FORUM_CATEGORIES:
Event::addEvent(LOG_WS.$action, 'course_id', (int) $_POST['course']);
$forums = $restApi->getCourseForumCategories();
$restResponse->setData($forums);
break;
case Rest::GET_COURSE_FORUM:
$forumId = isset($_POST['forum']) ? Security::remove_XSS($_POST['forum']) : 0;
Event::addEvent(LOG_WS.$action, 'course_id-forum_id', (int) $_POST['forum'].':'.$forumId);
$forum = $restApi->getCourseForum($forumId);
$restResponse->setData($forum);
break;
case Rest::GET_COURSE_FORUM_THREAD:
$forumId = isset($_POST['forum']) ? (int) $_POST['forum'] : 0;
$threadId = isset($_POST['thread']) ? (int) $_POST['thread'] : 0;
Event::addEvent(
LOG_WS.$action,
'course_id-forum_id-thread_id',
(int) $_POST['course'].':'.$forumId.':'.$threadId
);
$thread = $restApi->getCourseForumThread($forumId, $threadId);
$restResponse->setData($thread);
break;
case Rest::GET_COURSE_LEARNPATHS:
Event::addEvent(LOG_WS.$action, 'username', $username);
$data = $restApi->getCourseLearnPaths();
$restResponse->setData($data);
break;
case Rest::GET_COURSE_LEARNPATH:
$lpId = isset($_REQUEST['lp_id']) ? (int) $_REQUEST['lp_id'] : 1;
Event::addEvent(LOG_WS.$action, 'lp_id', $lpId);
$restApi->showLearningPath($lpId);
break;
case Rest::GET_COURSE_LP_PROGRESS:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData($restApi->getCourseLpProgress());
break;
case Rest::GET_COURSE_LINKS:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData(
$restApi->getCourseLinks()
);
break;
case Rest::GET_COURSE_WORKS:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData(
$restApi->getCourseWorks()
);
break;
case Rest::SAVE_COURSE_NOTEBOOK:
$title = !empty($_POST['title']) ? $_POST['title'] : null;
$text = !empty($_POST['text']) ? $_POST['text'] : null;
$data = $restApi->saveCourseNotebook($title, $text);
Event::addEvent(LOG_WS.$action, 'notebook_id', $data['registered']);
$restResponse->setData($data);
break;
case Rest::SAVE_FORUM_POST:
if (
empty($_POST['title']) || empty($_POST['text']) || empty($_POST['thread']) || empty($_POST['forum'])
@ -296,6 +329,7 @@ try {
];
$data = $restApi->saveForumPost($postValues, $forumId);
Event::addEvent(LOG_WS.$action, 'registered', $data['registered']);
$restResponse->setData($data);
break;
case Rest::SAVE_FORUM_THREAD:
@ -305,7 +339,6 @@ try {
$forumId = $httpRequest->request->getInt('forum');
$notify = !empty($_POST['notify']);
$threadInfo = [
'post_title' => $_POST['title'],
'forum_id' => $_POST['forum'],
@ -314,6 +347,7 @@ try {
];
$data = $restApi->saveForumThread($threadInfo, $forumId);
Event::addEvent(LOG_WS.$action, 'registered', $data['registered']);
$restResponse->setData($data);
break;
case Rest::SET_THREAD_NOTIFY:
@ -328,22 +362,23 @@ try {
'message' => $restApi->setThreadNotify($threadId),
]
);
Event::addEvent(LOG_WS.$action, 'thread_id', $threadId);
break;
case Rest::DOWNLOAD_FORUM_ATTACHMENT:
if (empty($_GET['path'])) {
throw new Exception(get_lang('ActionNotAllowed'));
}
Event::addEvent(LOG_WS.$action, 'path', $_GET['path']);
$restApi->downloadForumPostAttachment($_GET['path']);
break;
case Rest::GET_WORK_LIST:
if (!isset($_GET['work'])) {
throw new Exception(get_lang('ActionNotAllowed'));
}
$workId = (int) $_GET['work'];
Event::addEvent(LOG_WS.$action, 'work_id', $workId);
$restResponse->setData(
$restApi->getWorkList((int) $_GET['work'])
$restApi->getWorkList($workId)
);
break;
case Rest::GET_WORK_STUDENTS_WITHOUT_PUBLICATIONS:
@ -354,9 +389,10 @@ try {
if (!api_is_allowed_to_edit(false, true)) {
throw new Exception(get_lang('NotAllowed'));
}
$workId = (int) $_GET['work'];
Event::addEvent(LOG_WS.$action, 'work_id', $workId);
$restResponse->setData(
$restApi->getWorkStudentsWithoutPublications((int) $_GET['work'])
$restApi->getWorkStudentsWithoutPublications($workId)
);
break;
case Rest::GET_WORK_USERS:
@ -367,9 +403,10 @@ try {
if (!api_is_allowed_to_edit()) {
throw new Exception(get_lang('NotAllowed'));
}
$workId = (int) $_GET['work'];
Event::addEvent(LOG_WS.$action, 'work_id', $workId);
$restResponse->setData(
$restApi->getWorkUsers((int) $_GET['work'])
$restApi->getWorkUsers($workId)
);
break;
case Rest::GET_WORK_STUDENT_LIST:
@ -377,12 +414,15 @@ try {
throw new Exception(get_lang('ActionNotAllowed'));
}
$workId = (int) $_GET['work'];
if (!api_is_allowed_to_edit()) {
throw new Exception(get_lang('NotAllowed'));
}
Event::addEvent(LOG_WS.$action, 'work_id', $workId);
$restResponse->setData(
$restApi->getWorkStudentList((int) $_GET['work'])
$restApi->getWorkStudentList($workId)
);
break;
case Rest::PUT_WORK_STUDENT_ITEM_VISIBILITY:
@ -390,15 +430,18 @@ try {
throw new Exception(get_lang('ActionNotAllowed'));
}
$workId = (int) $_POST['work'];
if (!api_is_allowed_to_edit() && !api_is_coach()) {
throw new Exception(get_lang('NotAllowed'));
}
$data = $restApi->putCourseWorkVisibility(
(int) $_POST['work'],
$workId,
(int) $_POST['status']
);
Event::addEvent(LOG_WS.$action, 'work_id', $workId);
$restResponse->setData(['status' => $data]);
break;
case Rest::DELETE_WORK_STUDENT_ITEM:
@ -409,10 +452,11 @@ try {
if (!api_is_allowed_to_edit() && !api_is_coach()) {
throw new Exception(get_lang('NotAllowed'));
}
$workId = (int) $_POST['work'];
Event::addEvent(LOG_WS.$action, 'work_id', $workId);
$restResponse->setData(
[
'message' => $restApi->deleteWorkStudentItem((int) $_POST['work']),
'message' => $restApi->deleteWorkStudentItem($workId),
]
);
break;
@ -425,9 +469,11 @@ try {
throw new Exception(get_lang('NotAllowed'));
}
$workId = (int) $_POST['work'];
Event::addEvent(LOG_WS.$action, 'work_id', $workId);
$restResponse->setData(
[
'message' => $restApi->deleteWorkCorrections((int) $_POST['work']),
'message' => $restApi->deleteWorkCorrections($workId),
]
);
break;
@ -436,13 +482,16 @@ try {
throw new Exception(get_lang('ActionNotAllowed'));
}
$restApi->downloadWorkFolder((int) $_GET['work']);
$workId = (int) $_GET['work'];
Event::addEvent(LOG_WS.$action, 'work_id', $workId);
$restApi->downloadWorkFolder($workId);
break;
case Rest::DOWNLOAD_WORK_COMMENT_ATTACHMENT:
if (!isset($_GET['comment'])) {
throw new Exception(get_lang('ActionNotAllowed'));
}
Event::addEvent(LOG_WS.$action, 'comment_id', (int) $_GET['comment']);
$restApi->downloadWorkCommentAttachment((int) $_GET['comment']);
break;
case Rest::DOWNLOAD_WORK:
@ -451,50 +500,56 @@ try {
}
$isCorrection = isset($_GET['correction']);
$restApi->downloadWork((int) $_GET['work'], $isCorrection);
$workId = (int) $_GET['work'];
Event::addEvent(LOG_WS.$action, 'work_id', $workId);
$restApi->downloadWork($workId, $isCorrection);
break;
case Rest::VIEW_DOCUMENT_IN_FRAME:
$lpId = isset($_REQUEST['document']) ? (int) $_REQUEST['document'] : 0;
Event::addEvent(LOG_WS.$action, 'document_id', $lpId);
$restApi->viewDocumentInFrame($lpId);
break;
case Rest::VIEW_QUIZ_TOOL:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restApi->viewQuizTool();
break;
case Rest::VIEW_SURVEY_TOOL:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restApi->viewSurveyTool();
break;
case Rest::CREATE_CAMPUS:
$data = $restApi->createCampusURL($_POST);
Event::addEvent(LOG_WS.$action, 'campus_id', $data['id_campus']);
$restResponse->setData($data);
break;
case Rest::EDIT_CAMPUS:
$data = $restApi->editCampusURL($_POST);
Event::addEvent(LOG_WS.$action, 'campus_id', $_POST['id']);
$restResponse->setData($data);
break;
case Rest::DELETE_CAMPUS:
$data = $restApi->deleteCampusURL($_POST);
Event::addEvent(LOG_WS.$action, 'campus_id', $_POST['id']);
$restResponse->setData($data);
break;
case Rest::GET_USERS:
Event::addEvent(LOG_WS.$action, 'username', $username);
$data = $restApi->getUsersCampus($_POST);
$restResponse->setData($data);
break;
case Rest::USERNAME_EXIST:
Event::addEvent(LOG_WS.$action, 'username', $_POST['loginname']);
$data = $restApi->usernameExist($_POST['loginname']);
$restResponse->setData([$data]);
break;
case Rest::SAVE_USER:
$data = $restApi->addUser($_POST);
Event::addEvent(LOG_WS.$action, 'user_id', $data);
$restResponse->setData($data);
break;
case Rest::SAVE_USER_GET_APIKEY:
$data = $restApi->addUserGetApikey($_POST);
Event::addEvent(LOG_WS.$action, 'user_id', $data['id']);
$restResponse->setData($data);
break;
case Rest::SAVE_USER_JSON:
@ -506,10 +561,12 @@ try {
throw new Exception(get_lang('NoData'));
}
$data = $restApi->addUser($json);
Event::addEvent(LOG_WS.$action, 'user_id', $data);
$restResponse->setData($data);
break;
case Rest::UPDATE_USER_FROM_USERNAME:
$data = $restApi->updateUserFromUserName($_POST);
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData([$data]);
break;
case Rest::UPDATE_USER_APIKEY:
@ -520,6 +577,7 @@ try {
throw new Exception(get_lang('NotAllowed'));
}
Event::addEvent(LOG_WS.$action, 'user_id', $userId);
$data = $restApi->updateUserApiKey($userId, $currentApiKey);
$restResponse->setData($data);
break;
@ -529,9 +587,11 @@ try {
}
$result = UserManager::delete_user($_REQUEST['user_id']);
Event::addEvent(LOG_WS.$action, 'user_id', (int) $_REQUEST['user_id']);
$restResponse->setData(['status' => $result]);
break;
case Rest::GET_USERS_API_KEYS:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData(
$restApi->getAllUsersApiKeys(
$httpRequest->query->getInt('page', 1),
@ -548,6 +608,7 @@ try {
throw new Exception(get_lang('NoData'));
}
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData(
$restApi->getUserApiKey(
$username,
@ -555,8 +616,8 @@ try {
)
);
break;
case Rest::GET_COURSES:
Event::addEvent(LOG_WS.$action, 'id_campus', (int) $_POST['id_campus']);
$data = $restApi->getCoursesCampus($_POST);
$restResponse->setData($data);
break;
@ -571,6 +632,11 @@ try {
throw new Exception("$variable not found");
}
Event::addEvent(
LOG_WS.$action,
'extra_field-extra_field_value',
Database::escape_string($variable).':'.Database::escape_string($value)
);
$extraFieldValue = new ExtraFieldValue('course');
$items = $extraFieldValue->get_item_id_from_field_variable_and_field_value(
$variable,
@ -592,6 +658,7 @@ try {
break;
case Rest::SAVE_COURSE:
$data = $restApi->addCourse($_POST);
Event::addEvent(LOG_WS.$action, 'course_id', $data['id']);
$restResponse->setData($data);
break;
case Rest::DELETE_COURSE:
@ -616,55 +683,75 @@ try {
}
$result = CourseManager::delete_course($course['code']);
Event::addEvent(LOG_WS.$action, 'course_id', $courseId);
$restResponse->setData(['status' => $result]);
break;
case Rest::GET_SESSION_FROM_EXTRA_FIELD:
if (empty($_POST['field_name']) || empty($_POST['field_value'])) {
throw new Exception(get_lang('NoData'));
}
$idSession = $restApi->getSessionFromExtraField($_POST['field_name'], $_POST['field_value']);
Event::addEvent(
LOG_WS.$action,
'extra_field_name-extra_field_value',
Database::escape_string($_POST['field_name']).':'.Database::escape_string($_POST['field_value'])
);
$restResponse->setData([$idSession]);
break;
case Rest::SAVE_SESSION:
$data = $restApi->addSession($_POST);
Event::addEvent(LOG_WS.$action, 'session_id', $data['id_session']);
$restResponse->setData($data);
break;
case Rest::CREATE_SESSION_FROM_MODEL:
$newSessionId = $restApi->createSessionFromModel($httpRequest);
Event::addEvent(LOG_WS.$action, 'session_id', $newSessionId);
$restResponse->setData([$newSessionId]);
break;
case Rest::UPDATE_SESSION:
$data = $restApi->updateSession($_POST);
Event::addEvent(LOG_WS.$action, 'session_id', $data['id_session']);
$restResponse->setData($data);
break;
case Rest::SUBSCRIBE_USER_TO_COURSE:
$data = $restApi->subscribeUserToCourse($_POST);
Event::addEvent(LOG_WS.$action, 'course_id-user_id', (int) $_POST['course_id'].':'.(int) $_POST['user_id']);
$restResponse->setData($data);
break;
case Rest::SUBSCRIBE_USER_TO_COURSE_PASSWORD:
$courseCode = isset($_POST['code']) ? Security::remove_XSS($_POST['code']) : null;
$password = $_POST['password'] ?? null;
Event::addEvent(LOG_WS.$action, 'course_code', $courseCode);
$restApi->subscribeUserToCoursePassword($courseCode, $password);
$restResponse->setData(['status' => true]);
break;
case Rest::UNSUBSCRIBE_USER_FROM_COURSE:
$data = $restApi->unSubscribeUserToCourse($_POST);
Event::addEvent(LOG_WS.$action, 'course_id-user_id', (int) $_POST['course_id'].':'.(int) $_POST['user_id']);
$restResponse->setData($data);
break;
case Rest::GET_USERS_SUBSCRIBED_TO_COURSE:
Event::addEvent(LOG_WS.$action, 'course_id', (int) $_POST['course']);
$users = $restApi->getUsersSubscribedToCourse();
$restResponse->setData($users);
break;
case Rest::ADD_COURSES_SESSION:
$data = $restApi->addCoursesSession($_POST);
Event::addEvent(
LOG_WS.$action,
'session_id-course_ids',
(int) $_POST['id_session'].':'.implode(',', $_POST['list_courses'])
);
$restResponse->setData($data);
break;
case Rest::ADD_USERS_SESSION:
$data = $restApi->addUsersSession($_POST);
Event::addEvent(
LOG_WS.$action,
'session_id-users_ids',
(int) $_POST['id_session'].':'.implode(',', $_POST['list_users'])
);
$restResponse->setData($data);
break;
case Rest::SUBSCRIBE_USER_TO_SESSION_FROM_USERNAME:
@ -672,15 +759,19 @@ try {
throw new Exception(get_lang('NoData'));
}
$subscribed = $restApi->subscribeUserToSessionFromUsername($_POST['sessionId'], $_POST['loginname']);
Event::addEvent(
LOG_WS.$action,
'session_id-username',
(int) $_POST['sessionId'].':'.Database::escape_string($_POST['loginname'])
);
$restResponse->setData([$subscribed]);
break;
case Rest::GET_COURSE_QUIZ_MDL_COMPAT:
Event::addEvent(LOG_WS.$action, 'course_id', (int) $_POST['course']);
$data = $restApi->getCourseQuizMdlCompat();
echo json_encode($data, JSON_PRETTY_PRINT);
exit;
case Rest::UPDATE_USER_PAUSE_TRAINING:
$allow = api_get_plugin_setting('pausetraining', 'tool_enable') === 'true';
@ -696,10 +787,11 @@ try {
}
$plugin = PauseTraining::create();
$data = $plugin->updateUserPauseTraining($_POST['user_id'], $_POST);
Event::addEvent(LOG_WS.$action, 'user_id', (int) $_POST['user_id']);
$restResponse->setData([$data]);
break;
case Rest::CHECK_CONDITIONAL_LOGIN:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData(
[
'check_conditional_login' => $restApi->checkConditionalLogin(),
@ -707,12 +799,14 @@ try {
);
break;
case Rest::GET_LEGAL_CONDITIONS:
Event::addEvent(LOG_WS.$action, 'username', $username);
$restResponse->setData(
$restApi->getLegalConditions()
);
break;
case Rest::UPDATE_CONDITION_ACCEPTED:
$restApi->updateConditionAccepted();
Event::addEvent(LOG_WS.$action, 'success', 'true');
$restResponse->setData(['status' => true]);
break;
default:

Write Preview
Loading…
Cancel
Save