chamilo
/
chamilo-lms
mirror of https://github.com/chamilo/chamilo-lms/tree/1.11.x
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

[svn r12219] Updated call to api_not_allowed() calls, part 2/2 -this also prevents api_not_allowed message without stylesheets

Browse Source
skala
Yannick Warnier 18 years ago
parent 14efa1a1c3
commit e33158b0b4
18 changed files with 58 additions and 63 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 4
      main/course_info/delete_course.php
  2. 4
      main/course_info/infocours.php
  3. 12
      main/coursecopy/backup.php
  4. 13
      main/coursecopy/copy_course.php
  5. 12
      main/coursecopy/create_backup.php
  6. 13
      main/coursecopy/import_backup.php
  7. 12
      main/coursecopy/recycle_course.php
  8. 4
      main/exercice/admin.php
  9. 4
      main/exercice/adminhp.php
  10. 2
      main/exercice/exercise_admin.php
  11. 9
      main/exercice/question_pool.php
  12. 5
      main/group/group.php
  13. 2
      main/group/group_edit.php
  14. 7
      main/group/group_overview.php
  15. 2
      main/messaging/email_editor.php
  16. 2
      main/upload/index.php
  17. 2
      main/upload/upload.php
  18. 12
      main/upload/upload_ppt.php

4
main/course_info/delete_course.php
Unescape View File

@ -1,5 +1,5 @@
<?php
// $Id: delete_course.php 11317 2007-03-01 23:51:07Z yannoo $
// $Id: delete_course.php 12219 2007-05-01 18:46:59Z yannoo $
/*
==============================================================================
Dokeos - elearning and course management software
@ -46,7 +46,7 @@ $currentCourseName = $_course['name'];
if (!api_is_allowed_to_edit())
{
api_not_allowed();
api_not_allowed(true);
}
$tool_name = get_lang('DelCourse');
if (isset($_GET['delete']) && $_GET['delete'] == 'yes')

4
main/course_info/infocours.php
Unescape View File

@ -1,5 +1,5 @@
<?php
// $Id: infocours.php 12051 2007-04-18 13:26:45Z elixir_julian $
// $Id: infocours.php 12219 2007-05-01 18:46:59Z yannoo $
/*
==============================================================================
Dokeos - elearning and course management software
@ -96,7 +96,7 @@ $course_access_settings = CourseManager :: get_access_settings($course_code);
if (!$is_allowedToEdit)
{
api_not_allowed();
api_not_allowed(true);
}
$table_course_category = Database :: get_main_table(TABLE_MAIN_CATEGORY);

12
main/coursecopy/backup.php
Unescape View File

@ -1,5 +1,5 @@
<?php
// $Id: backup.php 11791 2007-03-30 07:14:33Z pcool $
// $Id: backup.php 12219 2007-05-01 18:46:59Z yannoo $
/*
==============================================================================
Dokeos - elearning and course management software
@ -38,6 +38,11 @@ $language_file = array('coursebackup','admin');
// including the global file
include ('../inc/global.inc.php');
// Check access rights (only teachers allowed)
if (!api_is_allowed_to_edit())
{
api_not_allowed(true);
}
// section for the tabs
$this_section=SECTION_COURSES;
@ -51,11 +56,6 @@ Display::display_header($nameTools);
// Display the tool title
api_display_tool_title($nameTools);
// Check access rights (only teachers allowed)
if (!api_is_allowed_to_edit())
{
api_not_allowed();
}
/*
==============================================================================
MAIN CODE

13
main/coursecopy/copy_course.php
Unescape View File

@ -1,5 +1,5 @@
<?php
// $Id: copy_course.php 11376 2007-03-03 22:48:24Z yannoo $
// $Id: copy_course.php 12219 2007-05-01 18:46:59Z yannoo $
/*
==============================================================================
Dokeos - elearning and course management software
@ -43,14 +43,17 @@ include_once(api_get_path(LIBRARY_PATH) . 'fileManage.lib.php');
require_once ('classes/CourseBuilder.class.php');
require_once ('classes/CourseRestorer.class.php');
require_once ('classes/CourseSelectForm.class.php');
if (!api_is_allowed_to_edit())
{
api_not_allowed(true);
}
$nameTools = get_lang('CopyCourse');
$interbreadcrumb[] = array ("url" => "../course_info/maintenance.php", "name" => get_lang('Maintenance'));
Display::display_header($nameTools);
//api_display_tool_title($nameTools);
if (!api_is_allowed_to_edit())
{
api_not_allowed();
}
/*
==============================================================================
MAIN CODE

12
main/coursecopy/create_backup.php
Unescape View File

@ -1,5 +1,5 @@
<?php
// $Id: create_backup.php 11998 2007-04-12 19:23:11Z pcool $
// $Id: create_backup.php 12219 2007-05-01 18:46:59Z yannoo $
/*
==============================================================================
Dokeos - elearning and course management software
@ -38,6 +38,11 @@ $language_file = array ('admin','coursebackup');
// including the global file
include ('../inc/global.inc.php');
// Check access rights (only teachers are allowed here)
if (!api_is_allowed_to_edit())
{
api_not_allowed(true);
}
// section for the tabs
$this_section=SECTION_COURSES;
@ -58,11 +63,6 @@ require_once ('classes/CourseSelectForm.class.php');
// Display the tool title
api_display_tool_title($nameTools);
// Check access rights (only teachers are allowed here)
if (!api_is_allowed_to_edit())
{
api_not_allowed();
}
/*
==============================================================================
MAIN CODE

13
main/coursecopy/import_backup.php
Unescape View File

@ -1,4 +1,4 @@
<?php // $Id: import_backup.php 11791 2007-03-30 07:14:33Z pcool $
<?php // $Id: import_backup.php 12219 2007-05-01 18:46:59Z yannoo $
/*
==============================================================================
Dokeos - elearning and course management software
@ -41,6 +41,12 @@ $language_file = array('coursebackup','admin');
// including the global file
include ('../inc/global.inc.php');
// Check access rights (only teachers are allowed here)
if( ! api_is_allowed_to_edit())
{
api_not_allowed(true);
}
// section for the tabs
$this_section=SECTION_COURSES;
@ -61,11 +67,6 @@ require_once('classes/CourseSelectForm.class.php');
// Display the tool title
api_display_tool_title($nameTools);
// Check access rights (only teachers are allowed here)
if( ! api_is_allowed_to_edit())
{
api_not_allowed();
}
/*
==============================================================================
MAIN CODE

12
main/coursecopy/recycle_course.php
Unescape View File

@ -1,4 +1,4 @@
<?php // $Id: recycle_course.php 11791 2007-03-30 07:14:33Z pcool $
<?php // $Id: recycle_course.php 12219 2007-05-01 18:46:59Z yannoo $
/*
==============================================================================
Dokeos - elearning and course management software
@ -37,6 +37,11 @@ $language_file = array ('admin','course_info','coursebackup');
// including the global file
include ('../inc/global.inc.php');
// Check access rights (only teachers are allowed here)
if( ! api_is_allowed_to_edit())
{
api_not_allowed(true);
}
// section for the tabs
$this_section=SECTION_COURSES;
@ -56,11 +61,6 @@ require_once('classes/CourseSelectForm.class.php');
// Display the tool title
api_display_tool_title($nameTools);
// Check access rights (only teachers are allowed here)
if( ! api_is_allowed_to_edit())
{
api_not_allowed();
}
/*
==============================================================================
MAIN CODE

4
main/exercice/admin.php
Unescape View File

@ -60,7 +60,7 @@
*
* @package dokeos.exercise
* @author Olivier Brouckaert
* @version $Id: admin.php 11760 2007-03-29 07:46:40Z pcool $
* @version $Id: admin.php 12219 2007-05-01 18:46:59Z yannoo $
*/
@ -169,7 +169,7 @@ $TBL_DOCUMENT = Database::get_course_table(TABLE_DOCUMENT);
if(!$is_allowedToEdit)
{
api_not_allowed();
api_not_allowed(true);
}
// intializes the Exercise object

4
main/exercice/adminhp.php
Unescape View File

@ -22,7 +22,7 @@
* HotPotatoes administration.
* @package dokeos.exercise
* @author Istvan Mandak
* @version $Id: adminhp.php 10789 2007-01-18 19:18:27Z pcool $
* @version $Id: adminhp.php 12219 2007-05-01 18:46:59Z yannoo $
*/
@ -84,7 +84,7 @@ $dbTable = $TBL_DOCUMENT;
if(!$is_allowedToEdit)
{
api_not_allowed();
api_not_allowed(true);
}
$interbreadcrumb[]=array("url" => "exercice.php","name" => get_lang('Exercices'));

2
main/exercice/exercise_admin.php
Unescape View File

@ -43,7 +43,7 @@ $this_section=SECTION_COURSES;
if(!api_is_allowed_to_edit())
{
api_not_allowed();
api_not_allowed(true);
}

9
main/exercice/question_pool.php
Unescape View File

@ -24,7 +24,7 @@
* One question can be in several exercises
* @package dokeos.exercise
* @author Olivier Brouckaert
* @version $Id: question_pool.php 12070 2007-04-20 09:43:41Z elixir_julian $
* @version $Id: question_pool.php 12219 2007-05-01 18:46:59Z yannoo $
*/
// name of the language file that needs to be included
@ -112,10 +112,10 @@ $nameTools=get_lang('QuestionPool');
$interbreadcrumb[]=array("url" => "exercice.php","name" => get_lang('Exercices'));
Display::display_header($nameTools,"Exercise");
// if admin of course
if($is_allowedToEdit)
{
Display::display_header($nameTools,"Exercise");
?>
<h3>
@ -348,12 +348,11 @@ if($is_allowedToEdit)
</form>
<?php
Display::display_footer();
}
// if not admin of course
else
{
api_not_allowed();
api_not_allowed(true);
}
Display::display_footer();
?>

5
main/group/group.php
Unescape View File

@ -78,11 +78,8 @@ if( api_get_setting('allow_group_categories') == 'false')
*/
if (!isset ($_GET['origin']) || $_GET['origin'] != 'learnpath')
{ //so we are not in learnpath tool
Display::display_header($nameTools,"Group");
event_access_tool(TOOL_GROUP);
//api_display_tool_title($nameTools);
if (! $is_allowed_in_course) api_not_allowed();
if (! $is_allowed_in_course) api_not_allowed(true);
}
else
{

2
main/group/group_edit.php
Unescape View File

@ -67,7 +67,7 @@ $interbreadcrumb[] = array ("url" => "group.php", "name" => get_lang('GroupManag
if (!api_is_allowed_to_edit())
{
api_not_allowed();
api_not_allowed(true);
}
/*
==============================================================================

7
main/group/group_overview.php
Unescape View File

@ -98,12 +98,7 @@ if( isset($_GET['action']))
$interbreadcrumb[]=array("url" => "group.php","name" => get_lang('GroupManagement'));
if (!isset ($_GET['origin']) || $_GET['origin'] != 'learnpath')
{ //so we are not in learnpath tool
Display::display_header($nameTools,"Group");
//event_access_tool($nameTools);
api_display_tool_title($nameTools);
if (! $is_allowed_in_course) api_not_allowed();
if (! $is_allowed_in_course) api_not_allowed(true);
}
else
{

2
main/messaging/email_editor.php
Unescape View File

@ -33,7 +33,7 @@ include_once("../inc/global.inc.php");
if(empty($_user['user_id']))
{
api_not_allowed();
api_not_allowed(true);
}
//api_protect_course_script(); //not a course script, so no protection

2
main/upload/index.php
Unescape View File

@ -68,7 +68,7 @@ function check_unzip() {
$is_allowed_to_edit = api_is_allowed_to_edit();
if(!$is_allowed_to_edit){
api_not_allowed();
api_not_allowed(true);
}

2
main/upload/upload.php
Unescape View File

@ -22,7 +22,7 @@ if(empty($_SESSION['my_tool'])){header('location:index.php');}
$is_allowed_to_edit = api_is_allowed_to_edit();
if(!$is_allowed_to_edit){
api_not_allowed();
api_not_allowed(true);
}

12
main/upload/upload_ppt.php
Unescape View File

@ -49,18 +49,18 @@ if(isset($_POST['convert'])){
event_access_tool(TOOL_UPLOAD);
$interbreadcrumb[]= array ("url"=>"../newscorm/lp_controller.php?action=list", "name"=> get_lang("Doc"));
$nameTools = get_lang("OogieConversionPowerPoint");
Display :: display_header($nameTools);
// check access permissions (edit permission is needed to add a document or a LP)
$is_allowed_to_edit = api_is_allowed_to_edit();
if(!$is_allowed_to_edit){
api_not_allowed();
api_not_allowed(true);
}
$interbreadcrumb[]= array ("url"=>"../newscorm/lp_controller.php?action=list", "name"=> get_lang("Doc"));
$nameTools = get_lang("OogieConversionPowerPoint");
Display :: display_header($nameTools);
?>
<img src="../img/oogie.gif"><br>

Write Preview
Loading…
Cancel
Save