From 9f7498f692713ffbf6abf0f8de5c28b83a9ae086 Mon Sep 17 00:00:00 2001 From: Ivan Tcholakov Date: Mon, 21 Sep 2009 00:56:45 +0300 Subject: [PATCH] Feature #306 - Cleaning the top-directory php source files. --- index.php | 365 +++++++++++++++++++++-------------------- newsList.php | 23 +-- user_portal.php | 245 +++++++++++++-------------- webchatdeny.php | 13 +- whoisonline.php | 232 +++++++++++++------------- whoisonlinesession.php | 89 +++++----- 6 files changed, 466 insertions(+), 501 deletions(-) diff --git a/index.php b/index.php index feb3184af0..2fa6898975 100644 --- a/index.php +++ b/index.php @@ -25,23 +25,22 @@ */ /** -* @package dokeos.main -* @author Patrick Cool , Ghent University, Refactoring -* @version $Id: index.php 22368 2009-07-24 23:25:57Z iflorespaz $ -* @todo check the different @todos in this page and really do them -* @todo check if the news management works as expected -*/ - + * @package dokeos.main + * @author Patrick Cool , Ghent University, Refactoring + * @version $Id: index.php 22368 2009-07-24 23:25:57Z iflorespaz $ + * @todo check the different @todos in this page and really do them + * @todo check if the news management works as expected + */ // only this script should have this constant defined. This is used to activate the javascript that // gives the login name automatic focus in header.inc.html. -/** @todo Couldn't this be done using the $HtmlHeadXtra array? */ +/** @todo Couldn't this be done using the $HtmlHeadXtra array? */ define('DOKEOS_HOMEPAGE', true); // the language file $language_file = array ('courses', 'index'); -/* Flag forcing the 'current course' reset, as we're not inside a course anymore */ +/* Flag forcing the 'current course' reset, as we're not inside a course anymore */ // maybe we should change this into an api function? an example: Coursemanager::unset(); $cidReset = true; @@ -51,35 +50,40 @@ $cidReset = true; Included libraries ----------------------------------------------------------- */ + /** @todo make all the library files consistent, use filename.lib.php and not filename.lib.inc.php */ -require_once ('main/inc/global.inc.php'); -include_once (api_get_path(LIBRARY_PATH).'course.lib.php'); -include_once (api_get_path(LIBRARY_PATH).'debug.lib.inc.php'); -include_once (api_get_path(LIBRARY_PATH).'events.lib.inc.php'); -include_once (api_get_path(LIBRARY_PATH).'system_announcements.lib.php'); -include_once (api_get_path(LIBRARY_PATH).'groupmanager.lib.php'); -include_once (api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php'); +require_once 'main/inc/global.inc.php'; +include_once api_get_path(LIBRARY_PATH).'course.lib.php'; +include_once api_get_path(LIBRARY_PATH).'debug.lib.inc.php'; +include_once api_get_path(LIBRARY_PATH).'events.lib.inc.php'; +include_once api_get_path(LIBRARY_PATH).'system_announcements.lib.php'; +include_once api_get_path(LIBRARY_PATH).'groupmanager.lib.php'; +include_once api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php'; require_once 'main/chat/chat_functions.lib.php'; + $loginFailed = isset($_GET['loginFailed']) ? true : isset($loginFailed); -$setting_show_also_closed_courses = (api_get_setting('show_closed_courses')=='true') ? true : false; +$setting_show_also_closed_courses = api_get_setting('show_closed_courses') == 'true'; // the section (for the tabs) $this_section = SECTION_CAMPUS; + /* ----------------------------------------------------------- Action Handling ----------------------------------------------------------- */ -/** @todo wouldn't it make more sense if this would be done in local.inc.php so that local.inc.php become the only place where authentication is done? + +/** @todo Wouldn't it make more sense if this would be done in local.inc.php so that local.inc.php become the only place where authentication is done? * by doing this you could logout from any page instead of only from index.php. From the moment there is a logout=true in the url you will be logged out * this can be usefull when you are on an open course and you need to log in to edit something and you immediately want to check how anonymous users * will see it. */ - $my_user_id=api_get_user_id(); +$my_user_id = api_get_user_id(); if (!empty($_GET['logout'])) { logout(); } + /* ----------------------------------------------------------- Table definitions @@ -103,12 +107,12 @@ if (isset($_user['user_id'])) { $nameTools = api_get_setting('siteName'); } - /* ============================================================================== LOGIN ============================================================================== */ + /** * @todo This piece of code should probably move to local.inc.php where the actual login / logout procedure is handled. * @todo consider removing this piece of code because does nothing. @@ -119,11 +123,13 @@ if (isset($_GET['submitAuth']) && $_GET['submitAuth'] == 1) { session_destroy(); die(); } + //Delete session neccesary for legal terms if (api_get_setting('allow_terms_conditions')=='true') { unset($_SESSION['update_term_and_condition']); unset($_SESSION['info_current_user']); } + /** * @todo This piece of code should probably move to local.inc.php where the actual login procedure is handled. * @todo check if this code is used. I think this code is never executed because after clicking the submit button @@ -131,31 +137,32 @@ if (api_get_setting('allow_terms_conditions')=='true') { * on api_get_setting('page_after_login') */ -if (!empty($_POST["submitAuth"])) { +if (!empty($_POST['submitAuth'])) { // the user is already authenticated, we now find the last login of the user. if (isset ($_user['user_id'])) { $sql_last_login = "SELECT UNIX_TIMESTAMP(login_date) FROM $track_login_table WHERE login_user_id = '".$_user['user_id']."' ORDER BY login_date DESC LIMIT 1"; - $result_last_login = api_sql_query($sql_last_login, __FILE__, __LINE__); - if (!$result_last_login) + $result_last_login = Database::query($sql_last_login, __FILE__, __LINE__); + if (!$result_last_login) { if (Database::num_rows($result_last_login) > 0) { $user_last_login_datetime = Database::fetch_array($result_last_login); $user_last_login_datetime = $user_last_login_datetime[0]; api_session_register('user_last_login_datetime'); } + } mysql_free_result($result_last_login); //event_login(); if (api_is_platform_admin()) { // decode all open event informations and fill the track_c_* tables - include (api_get_path(LIBRARY_PATH)."stats.lib.inc.php"); + include api_get_path(LIBRARY_PATH).'stats.lib.inc.php'; decodeOpenInfos(); } } -} // end login -- if($_POST["submitAuth"]) +} // end login -- if ($_POST['submitAuth']) else { // only if login form was not sent because if the form is sent the user was already on the page. @@ -170,6 +177,7 @@ Display :: display_header('', 'dokeos'); MAIN CODE ============================================================================== */ + echo '
'; // Plugins for loginpage_main AND campushomepage_main @@ -179,17 +187,17 @@ if (!api_get_user_id()) { api_plugin('campushomepage_main'); } -$home= 'home/'; -if ($_configuration['multiple_access_urls']==true) { +$home = 'home/'; +if ($_configuration['multiple_access_urls']) { $access_url_id = api_get_current_access_url_id(); if ($access_url_id != -1){ $url_info = api_get_access_url($access_url_id); // "http://" and the final "/" replaced - $url = substr($url_info['url'],7,strlen($url_info['url'])-8); + $url = substr($url_info['url'], 7, strlen($url_info['url']) - 8); $clean_url = replace_dangerous_char($url); - $clean_url = str_replace('/','-',$clean_url); + $clean_url = str_replace('/', '-', $clean_url); $clean_url = $clean_url.'/'; - $home_old = 'home/'; + $home_old = 'home/'; $home= 'home/'.$clean_url; } } @@ -197,35 +205,35 @@ if ($_configuration['multiple_access_urls']==true) { // Including the page for the news $page_included = false; -if (!empty ($_GET['include']) && preg_match('/^[a-zA-Z0-9_-]*\.html$/',$_GET['include'])) { - include ('./'.$home.$_GET['include']); +if (!empty($_GET['include']) && preg_match('/^[a-zA-Z0-9_-]*\.html$/', $_GET['include'])) { + include './'.$home.$_GET['include']; $page_included = true; } else { if (!empty($_SESSION['user_language_choice'])) { - $user_selected_language=$_SESSION['user_language_choice']; - } elseif(!empty($_SESSION['_user']['language'])) { - $user_selected_language=$_SESSION['_user']['language']; + $user_selected_language = $_SESSION['user_language_choice']; + } elseif (!empty($_SESSION['_user']['language'])) { + $user_selected_language = $_SESSION['_user']['language']; } else { - $user_selected_language=api_get_setting('platformLanguage'); + $user_selected_language = api_get_setting('platformLanguage'); } - if(!file_exists($home.'home_news_'.$user_selected_language.'.html')) { - if (file_exists($home.'home_top.html')) - $home_top_temp=file($home.'home_top.html'); - else { - $home_top_temp=file($home_old.'home_top.html'); + if (!file_exists($home.'home_news_'.$user_selected_language.'.html')) { + if (file_exists($home.'home_top.html')) { + $home_top_temp = file($home.'home_top.html'); + } else { + $home_top_temp = file($home_old.'home_top.html'); } - $home_top_temp=implode('',$home_top_temp); - $open=str_replace('{rel_path}',api_get_path(REL_PATH),$home_top_temp); + $home_top_temp = implode('', $home_top_temp); + $open = str_replace('{rel_path}', api_get_path(REL_PATH), $home_top_temp); echo $open; } else { - if(file_exists($home.'home_top_'.$user_selected_language.'.html')) { + if (file_exists($home.'home_top_'.$user_selected_language.'.html')) { $home_top_temp = file_get_contents($home.'home_top_'.$user_selected_language.'.html'); } else { $home_top_temp = file_get_contents($home.'home_top.html'); } - $open=str_replace('{rel_path}',api_get_path(REL_PATH),$home_top_temp); + $open = str_replace('{rel_path}', api_get_path(REL_PATH), $home_top_temp); echo $open; } } @@ -272,10 +280,10 @@ function logout() { global $_configuration, $extAuthSource; // variable initialisation - $query_string=''; + $query_string = ''; if (!empty($_SESSION['user_language_choice'])) { - $query_string='?language='.$_SESSION['user_language_choice']; + $query_string = '?language='.$_SESSION['user_language_choice']; } // Database table definition @@ -283,16 +291,16 @@ function logout() // selecting the last login of the user $uid = intval($_GET['uid']); - $sql_last_connection="SELECT login_id, login_date FROM $tbl_track_login WHERE login_user_id='$uid' ORDER BY login_date DESC LIMIT 0,1"; - $q_last_connection=api_sql_query($sql_last_connection); - if (Database::num_rows($q_last_connection)>0) { - $i_id_last_connection=Database::result($q_last_connection,0,"login_id"); + $sql_last_connection = "SELECT login_id, login_date FROM $tbl_track_login WHERE login_user_id='$uid' ORDER BY login_date DESC LIMIT 0,1"; + $q_last_connection = Database::query($sql_last_connection, __FILE__, __LINE__); + if (Database::num_rows($q_last_connection) > 0) { + $i_id_last_connection = Database::result($q_last_connection, 0, 'login_id'); } if (!isset($_SESSION['login_as'])) { - $current_date=date('Y-m-d H:i:s',time()); - $s_sql_update_logout_date="UPDATE $tbl_track_login SET logout_date='".$current_date."' WHERE login_id='$i_id_last_connection'"; - api_sql_query($s_sql_update_logout_date); + $current_date = date('Y-m-d H:i:s', time()); + $s_sql_update_logout_date = "UPDATE $tbl_track_login SET logout_date='".$current_date."' WHERE login_id='$i_id_last_connection'"; + Database::query($s_sql_update_logout_date, __FILE__, __LINE__); } LoginDelete($uid, $_configuration['statistics_database']); //from inc/lib/online.inc.php - removes the "online" status @@ -306,7 +314,7 @@ function logout() if (is_array($extAuthSource[$uinfo['auth_source']])) { $subarray = $extAuthSource[$uinfo['auth_source']]; if (!empty($subarray['logout']) && file_exists($subarray['logout'])) { - include_once($subarray['logout']); + include_once ($subarray['logout']); $logout_function = $uinfo['auth_source'].'_logout'; if (function_exists($logout_function)) { $logout_function($uinfo); @@ -329,19 +337,19 @@ function logout() function category_has_open_courses($category) { global $setting_show_also_closed_courses; - $user_identified = (api_get_user_id()>0 && !api_is_anonymous()); + $user_identified = (api_get_user_id() > 0 && !api_is_anonymous()); $main_course_table = Database :: get_main_table(TABLE_MAIN_COURSE); $sql_query = "SELECT * FROM $main_course_table WHERE category_code='$category'"; - $sql_result = api_sql_query($sql_query, __FILE__, __LINE__); + $sql_result = Database::query($sql_query, __FILE__, __LINE__); while ($course = Database::fetch_array($sql_result)) { - if ($setting_show_also_closed_courses == false) { - if ((api_get_user_id()>0 - and $course['visibility'] == COURSE_VISIBILITY_OPEN_PLATFORM) - or ($course['visibility'] == COURSE_VISIBILITY_OPEN_WORLD)) { + if (!$setting_show_also_closed_courses) { + if ((api_get_user_id() > 0 + && $course['visibility'] == COURSE_VISIBILITY_OPEN_PLATFORM) + || ($course['visibility'] == COURSE_VISIBILITY_OPEN_WORLD)) { return true; //at least one open course } - } else { - if(isset($course['visibility'])){ + } else { + if (isset($course['visibility'])){ return true; //at least one course (does not matter weither it's open or not because $setting_show_also_closed_courses = true } } @@ -369,7 +377,7 @@ function display_anonymous_right_menu() { $platformLanguage = api_get_setting('platformLanguage'); - if ( !($_user['user_id']) or api_is_anonymous($_user['user_id']) ) { // only display if the user isn't logged in + if (!($_user['user_id']) || api_is_anonymous($_user['user_id']) ) { // only display if the user isn't logged in api_display_language_form(true); echo '
'; display_login_form(); @@ -378,7 +386,7 @@ function display_anonymous_right_menu() { echo '
'; handle_login_failed(); } - if (api_get_setting('allow_lostpassword') == 'true' OR api_get_setting('allow_registration') == 'true') { + if (api_get_setting('allow_lostpassword') == 'true' || api_get_setting('allow_registration') == 'true') { echo '