Social network permission fixes , Friend tab should work (deleting a contact) see #190
	
		
	
				
					
				
			
							parent
							
								
									eb3bbc80b4
								
							
						
					
					
						commit
						fc65aa01b3
					
				@ -0,0 +1,146 @@ | 
				
			||||
<?php | 
				
			||||
/* For licensing terms, see /chamilo_license.txt */ | 
				
			||||
/** | 
				
			||||
 * Responses to AJAX calls  | 
				
			||||
 */ | 
				
			||||
require_once '../global.inc.php'; | 
				
			||||
require_once api_get_path(LIBRARY_PATH).'social.lib.php'; | 
				
			||||
 | 
				
			||||
$action = $_GET['a']; | 
				
			||||
 | 
				
			||||
$current_user_id	 = api_get_user_id(); | 
				
			||||
switch ($action) {	 | 
				
			||||
	case 'add_friend': | 
				
			||||
	 | 
				
			||||
		if (api_is_anonymous()){ | 
				
			||||
			echo ''; | 
				
			||||
			break; | 
				
			||||
		}	 | 
				
			||||
 | 
				
			||||
		$my_current_friend		 = Security::remove_XSS($_POST['friend_id']); | 
				
			||||
		$my_denied_current_friend= Security::remove_XSS($_POST['denied_friend_id']); | 
				
			||||
		$my_delete_friend        = Security::remove_XSS($_POST['delete_friend_id']); | 
				
			||||
		$friend_id_qualify       = Security::remove_XSS($_POST['user_id_friend_q']); | 
				
			||||
		$type_friend_qualify     = Security::remove_XSS($_POST['type_friend_q']); //filtered? | 
				
			||||
		$is_my_friend            = Security::remove_XSS($_POST['is_my_friend']); //filtered? | 
				
			||||
		 | 
				
			||||
		if (isset($_POST['is_my_friend'])) { | 
				
			||||
			$relation_type=SOCIALFRIEND;//my friend | 
				
			||||
		} else { | 
				
			||||
			$relation_type=SOCIALUNKNOW;//Contact unknown | 
				
			||||
		} | 
				
			||||
		 | 
				
			||||
		if (isset($_POST['friend_id'])) { | 
				
			||||
			 | 
				
			||||
			SocialManager::register_friend($current_user_id,$my_current_friend,$relation_type); | 
				
			||||
			SocialManager::register_friend($my_current_friend,$current_user_id,$relation_type); | 
				
			||||
			 | 
				
			||||
			SocialManager::invitation_accepted($my_current_friend,$current_user_id); | 
				
			||||
			 | 
				
			||||
			if (isset($_POST['is_my_friend'])) { | 
				
			||||
				echo api_xml_http_response_encode(get_lang('AddedContactToList')); | 
				
			||||
			} else { | 
				
			||||
				Display::display_normal_message(api_xml_http_response_encode(get_lang('AddedContactToList'))); | 
				
			||||
			} | 
				
			||||
		} | 
				
			||||
		 | 
				
			||||
	case 'deny_friend': | 
				
			||||
	 | 
				
			||||
		if (api_is_anonymous()){ | 
				
			||||
			echo ''; | 
				
			||||
			break; | 
				
			||||
		} | 
				
			||||
 | 
				
			||||
		$my_current_friend		 = Security::remove_XSS($_POST['friend_id']); | 
				
			||||
		$my_denied_current_friend= Security::remove_XSS($_POST['denied_friend_id']); | 
				
			||||
		$my_delete_friend        = Security::remove_XSS($_POST['delete_friend_id']); | 
				
			||||
		$friend_id_qualify       = Security::remove_XSS($_POST['user_id_friend_q']); | 
				
			||||
		$type_friend_qualify     = Security::remove_XSS($_POST['type_friend_q']); //filtered? | 
				
			||||
		$is_my_friend            = Security::remove_XSS($_POST['is_my_friend']); //filtered? | 
				
			||||
		if (isset($_POST['is_my_friend'])) { | 
				
			||||
			$relation_type=SOCIALFRIEND;//my friend | 
				
			||||
		} else { | 
				
			||||
			$relation_type=SOCIALUNKNOW;//Contact unknown | 
				
			||||
		} | 
				
			||||
		if (isset($_POST['denied_friend_id'])) { | 
				
			||||
			SocialManager::invitation_denied($my_denied_current_friend,$current_user_id); | 
				
			||||
			Display::display_confirmation_message(api_xml_http_response_encode(get_lang('InvitationDenied'))); | 
				
			||||
		}	 | 
				
			||||
		break; | 
				
			||||
	case 'delete_friend': | 
				
			||||
	 | 
				
			||||
		if (api_is_anonymous()){ | 
				
			||||
			echo ''; | 
				
			||||
			break; | 
				
			||||
		} | 
				
			||||
 | 
				
			||||
		$my_current_friend		 = Security::remove_XSS($_POST['friend_id']); | 
				
			||||
		$my_denied_current_friend= Security::remove_XSS($_POST['denied_friend_id']); | 
				
			||||
		$my_delete_friend        = Security::remove_XSS($_POST['delete_friend_id']); | 
				
			||||
		$friend_id_qualify       = Security::remove_XSS($_POST['user_id_friend_q']); | 
				
			||||
		$type_friend_qualify     = Security::remove_XSS($_POST['type_friend_q']); //filtered? | 
				
			||||
		$is_my_friend            = Security::remove_XSS($_POST['is_my_friend']); //filtered? | 
				
			||||
 | 
				
			||||
		if (isset($_POST['delete_friend_id'])) { | 
				
			||||
			SocialManager::removed_friend($my_delete_friend); | 
				
			||||
		} | 
				
			||||
		/* | 
				
			||||
		if(isset($_POST['user_id_friend_q']) && isset($_POST['type_friend_q'])) { | 
				
			||||
			SocialManager::qualify_friend($friend_id_qualify,$type_friend_qualify); | 
				
			||||
			echo api_xml_http_response_encode(get_lang('AttachContactsToGroupSuccesfuly')); | 
				
			||||
		}*/		 | 
				
			||||
		break; | 
				
			||||
	case 'show_my_friends': | 
				
			||||
	 | 
				
			||||
		if (api_is_anonymous()){ | 
				
			||||
			echo ''; | 
				
			||||
			break; | 
				
			||||
		} | 
				
			||||
		$list_path_friends	= array(); | 
				
			||||
		$user_id	= api_get_user_id(); | 
				
			||||
		$name_search= Security::remove_XSS($_POST['search_name_q']); | 
				
			||||
		$number_friends = 0; | 
				
			||||
		 | 
				
			||||
		if (isset($name_search) && $name_search!='undefined') { | 
				
			||||
			$friends = SocialManager::get_friends($user_id,null,$name_search); | 
				
			||||
		} else { | 
				
			||||
			$friends = SocialManager::get_friends($user_id); | 
				
			||||
		} | 
				
			||||
		 | 
				
			||||
		$friend_html = ''; | 
				
			||||
		$number_of_images = 8; | 
				
			||||
		 | 
				
			||||
		$number_friends = count($friends); | 
				
			||||
		if ($number_friends != 0) { | 
				
			||||
			$number_loop   = ($number_friends/$number_of_images); | 
				
			||||
			$loop_friends  = ceil($number_loop); | 
				
			||||
			$j=0; | 
				
			||||
			$friend_html.= '<table width="100%" border="0" cellpadding="0" cellspacing="0" bgcolor="" >'; | 
				
			||||
			for ($k=0;$k<$loop_friends;$k++) { | 
				
			||||
				$friend_html.='<tr><td valign="top">'; | 
				
			||||
				if ($j==$number_of_images) { | 
				
			||||
					$number_of_images=$number_of_images*2; | 
				
			||||
				} | 
				
			||||
				while ($j<$number_of_images) { | 
				
			||||
					if (isset($friends[$j])) { | 
				
			||||
						$friend = $friends[$j]; | 
				
			||||
						$user_name = api_xml_http_response_encode($friend['firstName'], $friend['lastName']); | 
				
			||||
						$friends_profile = SocialManager::get_picture_user($friend['friend_user_id'], $friend['image'], 92); | 
				
			||||
						$friend_html.='<div onMouseover="show_icon_delete(this)" onMouseout="hide_icon_delete(this)" class="image-social-content" id=div_'.$friends[$j]['friend_user_id'].'>'; | 
				
			||||
						$friend_html.='<span><a href="profile.php?u='.$friend['friend_user_id'].'"><center><img src="'.$friends_profile['file'].'" '.$friends_profile['style'].' id="imgfriend_'.$friend['friend_user_id'].'" title="'.$user_name.'" /></center></a></span>'; | 
				
			||||
						$friend_html.='<img onclick="delete_friend (this)" id=img_'.$friend['friend_user_id'].' src="../img/blank.gif" alt="" title=""  class="image-delete" /> <center class="friend">'.$user_name.'</center></div>';				 | 
				
			||||
					} | 
				
			||||
					$j++; | 
				
			||||
				} | 
				
			||||
				$friend_html.='</td></tr>'; | 
				
			||||
			} | 
				
			||||
			$friend_html.='<br/></table>'; | 
				
			||||
		} | 
				
			||||
		echo $friend_html;	 | 
				
			||||
		break;	 | 
				
			||||
	default: | 
				
			||||
		echo ''; | 
				
			||||
	 | 
				
			||||
} | 
				
			||||
exit; | 
				
			||||
?> | 
				
			||||
@ -1,51 +0,0 @@ | 
				
			||||
<?php //$id: $
 | 
				
			||||
/* For licensing terms, see /chamilo_license.txt */ | 
				
			||||
/** | 
				
			||||
 * @package dokeos.social | 
				
			||||
 * @author Julio Montoya <gugli100@gmail.com> | 
				
			||||
 */ | 
				
			||||
  | 
				
			||||
 // names of the language files that needs to be included | 
				
			||||
$language_file = array('registration','messages','userInfo','admin'); | 
				
			||||
require '../inc/global.inc.php'; | 
				
			||||
require_once api_get_path(LIBRARY_PATH).'image.lib.php'; | 
				
			||||
require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php'; | 
				
			||||
require_once api_get_path(LIBRARY_PATH).'social.lib.php'; | 
				
			||||
$the_current_user_id	 = api_get_user_id(); | 
				
			||||
$my_current_friend		 = Security::remove_XSS($_POST['friend_id']); | 
				
			||||
$my_denied_current_friend= Security::remove_XSS($_POST['denied_friend_id']); | 
				
			||||
$my_delete_friend        = Security::remove_XSS($_POST['delete_friend_id']); | 
				
			||||
$friend_id_qualify       = Security::remove_XSS($_POST['user_id_friend_q']); | 
				
			||||
$type_friend_qualify     = Security::remove_XSS($_POST['type_friend_q']); //filtered? | 
				
			||||
$is_my_friend            = Security::remove_XSS($_POST['is_my_friend']); //filtered? | 
				
			||||
if (isset($_POST['is_my_friend'])) { | 
				
			||||
	$relation_type=SOCIALFRIEND;//my friend | 
				
			||||
} else { | 
				
			||||
	$relation_type=SOCIALUNKNOW;//Contact unknown | 
				
			||||
} | 
				
			||||
 | 
				
			||||
if (isset($_POST['friend_id'])) { | 
				
			||||
	 | 
				
			||||
	SocialManager::register_friend($the_current_user_id,$my_current_friend,$relation_type); | 
				
			||||
	SocialManager::register_friend($my_current_friend,$the_current_user_id,$relation_type); | 
				
			||||
	 | 
				
			||||
	SocialManager::invitation_accepted($my_current_friend,$the_current_user_id); | 
				
			||||
	 | 
				
			||||
	if (isset($_POST['is_my_friend'])) { | 
				
			||||
		echo api_xml_http_response_encode(get_lang('AddedContactToList')); | 
				
			||||
	} else { | 
				
			||||
		Display::display_normal_message(api_xml_http_response_encode(get_lang('AddedContactToList'))); | 
				
			||||
	} | 
				
			||||
} | 
				
			||||
if (isset($_POST['denied_friend_id'])) { | 
				
			||||
	SocialManager::invitation_denied($my_denied_current_friend,$the_current_user_id); | 
				
			||||
	Display::display_confirmation_message(api_xml_http_response_encode(get_lang('InvitationDenied'))); | 
				
			||||
} | 
				
			||||
if (isset($_POST['delete_friend_id'])) { | 
				
			||||
	SocialManager::removed_friend($my_delete_friend); | 
				
			||||
} | 
				
			||||
if(isset($_POST['user_id_friend_q']) && isset($_POST['type_friend_q'])) { | 
				
			||||
	SocialManager::qualify_friend($friend_id_qualify,$type_friend_qualify); | 
				
			||||
	echo api_xml_http_response_encode(get_lang('AttachContactsToGroupSuccesfuly')); | 
				
			||||
} | 
				
			||||
?> | 
				
			||||
@ -1,58 +0,0 @@ | 
				
			||||
<?php | 
				
			||||
/* For licensing terms, see /chamilo_license.txt */ | 
				
			||||
/** | 
				
			||||
 * @package dokeos.social | 
				
			||||
 * @author Julio Montoya <gugli100@gmail.com> | 
				
			||||
 */ | 
				
			||||
  | 
				
			||||
$cidReset = true; | 
				
			||||
require '../inc/global.inc.php'; | 
				
			||||
$language_file = array('registration','messages','userInfo','admin'); | 
				
			||||
require_once api_get_path(CONFIGURATION_PATH).'profile.conf.php'; | 
				
			||||
require_once api_get_path(LIBRARY_PATH).'fileManage.lib.php'; | 
				
			||||
require_once api_get_path(LIBRARY_PATH).'fileUpload.lib.php'; | 
				
			||||
require_once api_get_path(LIBRARY_PATH).'image.lib.php'; | 
				
			||||
require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php'; | 
				
			||||
require_once '../inc/lib/social.lib.php'; | 
				
			||||
 | 
				
			||||
$list_path_friends	= array(); | 
				
			||||
$user_id	= api_get_user_id(); | 
				
			||||
$name_search= Security::remove_XSS($_POST['search_name_q']); | 
				
			||||
$number_friends = 0; | 
				
			||||
 | 
				
			||||
if (isset($name_search) && $name_search!='undefined') { | 
				
			||||
	$friends = SocialManager::get_friends($user_id,null,$name_search); | 
				
			||||
} else { | 
				
			||||
	$friends = SocialManager::get_friends($user_id); | 
				
			||||
} | 
				
			||||
$friend_html = ''; | 
				
			||||
$number_of_images = 8; | 
				
			||||
 | 
				
			||||
$number_friends = count($friends); | 
				
			||||
if ($number_friends != 0) { | 
				
			||||
	$number_loop   = ($number_friends/$number_of_images); | 
				
			||||
	$loop_friends  = ceil($number_loop); | 
				
			||||
	$j=0; | 
				
			||||
	$friend_html.= '<table width="100%" border="0" cellpadding="0" cellspacing="0" bgcolor="" >'; | 
				
			||||
	for ($k=0;$k<$loop_friends;$k++) { | 
				
			||||
		$friend_html.='<tr><td valign="top">'; | 
				
			||||
		if ($j==$number_of_images) { | 
				
			||||
			$number_of_images=$number_of_images*2; | 
				
			||||
		} | 
				
			||||
		while ($j<$number_of_images) { | 
				
			||||
			if (isset($friends[$j])) { | 
				
			||||
				$friend = $friends[$j]; | 
				
			||||
				$user_name = api_xml_http_response_encode($friend['firstName'], $friend['lastName']); | 
				
			||||
				$friends_profile = SocialManager::get_picture_user($friend['friend_user_id'], $friend['image'], 92); | 
				
			||||
				$friend_html.='<div onMouseover="show_icon_delete(this)" onMouseout="hide_icon_delete(this)" class="image-social-content" id=div_'.$list_friends_id[$j].'>'; | 
				
			||||
				$friend_html.='<span><a href="profile.php?u='.$friend['friend_user_id'].'"><center><img src="'.$friends_profile['file'].'" '.$friends_profile['style'].' id="imgfriend_'.$friend['friend_user_id'].'" title="'.$user_name.'" /></center></a></span>'; | 
				
			||||
				$friend_html.='<img onclick="delete_friend (this)" id=img_'.$friend['friend_user_id'].' src="../img/blank.gif" alt="" title=""  class="image-delete" /> <center class="friend">'.$user_name.'</center></div>';				 | 
				
			||||
			} | 
				
			||||
			$j++; | 
				
			||||
		} | 
				
			||||
		$friend_html.='</td></tr>'; | 
				
			||||
	} | 
				
			||||
	$friend_html.='<br/></table>'; | 
				
			||||
} | 
				
			||||
echo $friend_html; | 
				
			||||
?> | 
				
			||||
					Loading…
					
					
				
		Reference in new issue