diff --git a/main/session/session_course_edit.php b/main/session/session_course_edit.php index 399c5f6210..e3d0bfcd14 100644 --- a/main/session/session_course_edit.php +++ b/main/session/session_course_edit.php @@ -13,9 +13,11 @@ require_once __DIR__.'/../inc/global.inc.php'; $id_session = intval($_GET['id_session']); SessionManager::protectSession($id_session); $course_code = $_GET['course_code']; +$course_info = api_get_course_info($_REQUEST['course_code']); -$formSent = 0; -$errorMsg = ''; +if (empty($course_info)) { + api_not_allowed(true); +} // Database Table Definitions $tbl_user = Database::get_main_table(TABLE_MAIN_USER); @@ -24,7 +26,6 @@ $tbl_session = Database::get_main_table(TABLE_MAIN_SESSION); $tbl_session_course = Database::get_main_table(TABLE_MAIN_SESSION_COURSE); $tbl_session_rel_course_rel_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER); -$course_info = api_get_course_info($_REQUEST['course_code']); $courseId = $course_info['real_id']; $tool_name = $course_info['name']; $sql = "SELECT s.name, c.title @@ -41,15 +42,18 @@ if (!list($session_name, $course_title) = Database::fetch_row($result)) { exit(); } -//$interbreadcrumb[]=array('url' => 'index.php',"name" => get_lang('PlatformAdmin')); $interbreadcrumb[] = array('url' => "session_list.php", "name" => get_lang("SessionList")); -$interbreadcrumb[] = array('url' => "resume_session.php?id_session=".$id_session, "name" => get_lang('SessionOverview')); -$interbreadcrumb[] = array('url' => "session_course_list.php?id_session=$id_session", "name" =>api_htmlentities($session_name, ENT_QUOTES, $charset)); +$interbreadcrumb[] = array( + 'url' => "resume_session.php?id_session=".$id_session, + "name" => get_lang('SessionOverview'), +); +$interbreadcrumb[] = array( + 'url' => "session_course_list.php?id_session=$id_session", + "name" => api_htmlentities($session_name, ENT_QUOTES, $charset), +); $arr_infos = array(); if (isset($_POST['formSent']) && $_POST['formSent']) { - $formSent = 1; - // get all tutor by course_code in the session $sql = "SELECT user_id FROM $tbl_session_rel_course_rel_user @@ -63,10 +67,8 @@ if (isset($_POST['formSent']) && $_POST['formSent']) { } } - $id_coaches = $_POST['id_coach']; - + $id_coaches = isset($_POST['id_coach']) ? $_POST['id_coach'] : [0]; if (is_array($id_coaches) && count($id_coaches) > 0) { - foreach ($id_coaches as $id_coach) { $id_coach = intval($id_coach); $rs1 = SessionManager::set_coach_to_course_session( @@ -87,7 +89,7 @@ if (isset($_POST['formSent']) && $_POST['formSent']) { true ); } - + Display::addFlash(Display::return_message(get_lang('Updated'))); header('Location: '.Security::remove_XSS($_GET['page']).'?id_session='.$id_session); exit(); } @@ -142,54 +144,25 @@ Display::display_header($tool_name); $tool_name = get_lang('ModifySessionCourse'); api_display_tool_title($tool_name); -?> -