Social network permission fixes , Friend tab should work (deleting a contact) see #190
parent
eb3bbc80b4
commit
fc65aa01b3
@ -0,0 +1,146 @@ |
||||
<?php |
||||
/* For licensing terms, see /chamilo_license.txt */ |
||||
/** |
||||
* Responses to AJAX calls |
||||
*/ |
||||
require_once '../global.inc.php'; |
||||
require_once api_get_path(LIBRARY_PATH).'social.lib.php'; |
||||
|
||||
$action = $_GET['a']; |
||||
|
||||
$current_user_id = api_get_user_id(); |
||||
switch ($action) { |
||||
case 'add_friend': |
||||
|
||||
if (api_is_anonymous()){ |
||||
echo ''; |
||||
break; |
||||
} |
||||
|
||||
$my_current_friend = Security::remove_XSS($_POST['friend_id']); |
||||
$my_denied_current_friend= Security::remove_XSS($_POST['denied_friend_id']); |
||||
$my_delete_friend = Security::remove_XSS($_POST['delete_friend_id']); |
||||
$friend_id_qualify = Security::remove_XSS($_POST['user_id_friend_q']); |
||||
$type_friend_qualify = Security::remove_XSS($_POST['type_friend_q']); //filtered? |
||||
$is_my_friend = Security::remove_XSS($_POST['is_my_friend']); //filtered? |
||||
|
||||
if (isset($_POST['is_my_friend'])) { |
||||
$relation_type=SOCIALFRIEND;//my friend |
||||
} else { |
||||
$relation_type=SOCIALUNKNOW;//Contact unknown |
||||
} |
||||
|
||||
if (isset($_POST['friend_id'])) { |
||||
|
||||
SocialManager::register_friend($current_user_id,$my_current_friend,$relation_type); |
||||
SocialManager::register_friend($my_current_friend,$current_user_id,$relation_type); |
||||
|
||||
SocialManager::invitation_accepted($my_current_friend,$current_user_id); |
||||
|
||||
if (isset($_POST['is_my_friend'])) { |
||||
echo api_xml_http_response_encode(get_lang('AddedContactToList')); |
||||
} else { |
||||
Display::display_normal_message(api_xml_http_response_encode(get_lang('AddedContactToList'))); |
||||
} |
||||
} |
||||
|
||||
case 'deny_friend': |
||||
|
||||
if (api_is_anonymous()){ |
||||
echo ''; |
||||
break; |
||||
} |
||||
|
||||
$my_current_friend = Security::remove_XSS($_POST['friend_id']); |
||||
$my_denied_current_friend= Security::remove_XSS($_POST['denied_friend_id']); |
||||
$my_delete_friend = Security::remove_XSS($_POST['delete_friend_id']); |
||||
$friend_id_qualify = Security::remove_XSS($_POST['user_id_friend_q']); |
||||
$type_friend_qualify = Security::remove_XSS($_POST['type_friend_q']); //filtered? |
||||
$is_my_friend = Security::remove_XSS($_POST['is_my_friend']); //filtered? |
||||
if (isset($_POST['is_my_friend'])) { |
||||
$relation_type=SOCIALFRIEND;//my friend |
||||
} else { |
||||
$relation_type=SOCIALUNKNOW;//Contact unknown |
||||
} |
||||
if (isset($_POST['denied_friend_id'])) { |
||||
SocialManager::invitation_denied($my_denied_current_friend,$current_user_id); |
||||
Display::display_confirmation_message(api_xml_http_response_encode(get_lang('InvitationDenied'))); |
||||
} |
||||
break; |
||||
case 'delete_friend': |
||||
|
||||
if (api_is_anonymous()){ |
||||
echo ''; |
||||
break; |
||||
} |
||||
|
||||
$my_current_friend = Security::remove_XSS($_POST['friend_id']); |
||||
$my_denied_current_friend= Security::remove_XSS($_POST['denied_friend_id']); |
||||
$my_delete_friend = Security::remove_XSS($_POST['delete_friend_id']); |
||||
$friend_id_qualify = Security::remove_XSS($_POST['user_id_friend_q']); |
||||
$type_friend_qualify = Security::remove_XSS($_POST['type_friend_q']); //filtered? |
||||
$is_my_friend = Security::remove_XSS($_POST['is_my_friend']); //filtered? |
||||
|
||||
if (isset($_POST['delete_friend_id'])) { |
||||
SocialManager::removed_friend($my_delete_friend); |
||||
} |
||||
/* |
||||
if(isset($_POST['user_id_friend_q']) && isset($_POST['type_friend_q'])) { |
||||
SocialManager::qualify_friend($friend_id_qualify,$type_friend_qualify); |
||||
echo api_xml_http_response_encode(get_lang('AttachContactsToGroupSuccesfuly')); |
||||
}*/ |
||||
break; |
||||
case 'show_my_friends': |
||||
|
||||
if (api_is_anonymous()){ |
||||
echo ''; |
||||
break; |
||||
} |
||||
$list_path_friends = array(); |
||||
$user_id = api_get_user_id(); |
||||
$name_search= Security::remove_XSS($_POST['search_name_q']); |
||||
$number_friends = 0; |
||||
|
||||
if (isset($name_search) && $name_search!='undefined') { |
||||
$friends = SocialManager::get_friends($user_id,null,$name_search); |
||||
} else { |
||||
$friends = SocialManager::get_friends($user_id); |
||||
} |
||||
|
||||
$friend_html = ''; |
||||
$number_of_images = 8; |
||||
|
||||
$number_friends = count($friends); |
||||
if ($number_friends != 0) { |
||||
$number_loop = ($number_friends/$number_of_images); |
||||
$loop_friends = ceil($number_loop); |
||||
$j=0; |
||||
$friend_html.= '<table width="100%" border="0" cellpadding="0" cellspacing="0" bgcolor="" >'; |
||||
for ($k=0;$k<$loop_friends;$k++) { |
||||
$friend_html.='<tr><td valign="top">'; |
||||
if ($j==$number_of_images) { |
||||
$number_of_images=$number_of_images*2; |
||||
} |
||||
while ($j<$number_of_images) { |
||||
if (isset($friends[$j])) { |
||||
$friend = $friends[$j]; |
||||
$user_name = api_xml_http_response_encode($friend['firstName'], $friend['lastName']); |
||||
$friends_profile = SocialManager::get_picture_user($friend['friend_user_id'], $friend['image'], 92); |
||||
$friend_html.='<div onMouseover="show_icon_delete(this)" onMouseout="hide_icon_delete(this)" class="image-social-content" id=div_'.$friends[$j]['friend_user_id'].'>'; |
||||
$friend_html.='<span><a href="profile.php?u='.$friend['friend_user_id'].'"><center><img src="'.$friends_profile['file'].'" '.$friends_profile['style'].' id="imgfriend_'.$friend['friend_user_id'].'" title="'.$user_name.'" /></center></a></span>'; |
||||
$friend_html.='<img onclick="delete_friend (this)" id=img_'.$friend['friend_user_id'].' src="../img/blank.gif" alt="" title="" class="image-delete" /> <center class="friend">'.$user_name.'</center></div>'; |
||||
} |
||||
$j++; |
||||
} |
||||
$friend_html.='</td></tr>'; |
||||
} |
||||
$friend_html.='<br/></table>'; |
||||
} |
||||
echo $friend_html; |
||||
break; |
||||
default: |
||||
echo ''; |
||||
|
||||
} |
||||
exit; |
||||
?> |
@ -1,51 +0,0 @@ |
||||
<?php //$id: $
|
||||
/* For licensing terms, see /chamilo_license.txt */ |
||||
/** |
||||
* @package dokeos.social |
||||
* @author Julio Montoya <gugli100@gmail.com> |
||||
*/ |
||||
|
||||
// names of the language files that needs to be included |
||||
$language_file = array('registration','messages','userInfo','admin'); |
||||
require '../inc/global.inc.php'; |
||||
require_once api_get_path(LIBRARY_PATH).'image.lib.php'; |
||||
require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php'; |
||||
require_once api_get_path(LIBRARY_PATH).'social.lib.php'; |
||||
$the_current_user_id = api_get_user_id(); |
||||
$my_current_friend = Security::remove_XSS($_POST['friend_id']); |
||||
$my_denied_current_friend= Security::remove_XSS($_POST['denied_friend_id']); |
||||
$my_delete_friend = Security::remove_XSS($_POST['delete_friend_id']); |
||||
$friend_id_qualify = Security::remove_XSS($_POST['user_id_friend_q']); |
||||
$type_friend_qualify = Security::remove_XSS($_POST['type_friend_q']); //filtered? |
||||
$is_my_friend = Security::remove_XSS($_POST['is_my_friend']); //filtered? |
||||
if (isset($_POST['is_my_friend'])) { |
||||
$relation_type=SOCIALFRIEND;//my friend |
||||
} else { |
||||
$relation_type=SOCIALUNKNOW;//Contact unknown |
||||
} |
||||
|
||||
if (isset($_POST['friend_id'])) { |
||||
|
||||
SocialManager::register_friend($the_current_user_id,$my_current_friend,$relation_type); |
||||
SocialManager::register_friend($my_current_friend,$the_current_user_id,$relation_type); |
||||
|
||||
SocialManager::invitation_accepted($my_current_friend,$the_current_user_id); |
||||
|
||||
if (isset($_POST['is_my_friend'])) { |
||||
echo api_xml_http_response_encode(get_lang('AddedContactToList')); |
||||
} else { |
||||
Display::display_normal_message(api_xml_http_response_encode(get_lang('AddedContactToList'))); |
||||
} |
||||
} |
||||
if (isset($_POST['denied_friend_id'])) { |
||||
SocialManager::invitation_denied($my_denied_current_friend,$the_current_user_id); |
||||
Display::display_confirmation_message(api_xml_http_response_encode(get_lang('InvitationDenied'))); |
||||
} |
||||
if (isset($_POST['delete_friend_id'])) { |
||||
SocialManager::removed_friend($my_delete_friend); |
||||
} |
||||
if(isset($_POST['user_id_friend_q']) && isset($_POST['type_friend_q'])) { |
||||
SocialManager::qualify_friend($friend_id_qualify,$type_friend_qualify); |
||||
echo api_xml_http_response_encode(get_lang('AttachContactsToGroupSuccesfuly')); |
||||
} |
||||
?> |
@ -1,58 +0,0 @@ |
||||
<?php |
||||
/* For licensing terms, see /chamilo_license.txt */ |
||||
/** |
||||
* @package dokeos.social |
||||
* @author Julio Montoya <gugli100@gmail.com> |
||||
*/ |
||||
|
||||
$cidReset = true; |
||||
require '../inc/global.inc.php'; |
||||
$language_file = array('registration','messages','userInfo','admin'); |
||||
require_once api_get_path(CONFIGURATION_PATH).'profile.conf.php'; |
||||
require_once api_get_path(LIBRARY_PATH).'fileManage.lib.php'; |
||||
require_once api_get_path(LIBRARY_PATH).'fileUpload.lib.php'; |
||||
require_once api_get_path(LIBRARY_PATH).'image.lib.php'; |
||||
require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php'; |
||||
require_once '../inc/lib/social.lib.php'; |
||||
|
||||
$list_path_friends = array(); |
||||
$user_id = api_get_user_id(); |
||||
$name_search= Security::remove_XSS($_POST['search_name_q']); |
||||
$number_friends = 0; |
||||
|
||||
if (isset($name_search) && $name_search!='undefined') { |
||||
$friends = SocialManager::get_friends($user_id,null,$name_search); |
||||
} else { |
||||
$friends = SocialManager::get_friends($user_id); |
||||
} |
||||
$friend_html = ''; |
||||
$number_of_images = 8; |
||||
|
||||
$number_friends = count($friends); |
||||
if ($number_friends != 0) { |
||||
$number_loop = ($number_friends/$number_of_images); |
||||
$loop_friends = ceil($number_loop); |
||||
$j=0; |
||||
$friend_html.= '<table width="100%" border="0" cellpadding="0" cellspacing="0" bgcolor="" >'; |
||||
for ($k=0;$k<$loop_friends;$k++) { |
||||
$friend_html.='<tr><td valign="top">'; |
||||
if ($j==$number_of_images) { |
||||
$number_of_images=$number_of_images*2; |
||||
} |
||||
while ($j<$number_of_images) { |
||||
if (isset($friends[$j])) { |
||||
$friend = $friends[$j]; |
||||
$user_name = api_xml_http_response_encode($friend['firstName'], $friend['lastName']); |
||||
$friends_profile = SocialManager::get_picture_user($friend['friend_user_id'], $friend['image'], 92); |
||||
$friend_html.='<div onMouseover="show_icon_delete(this)" onMouseout="hide_icon_delete(this)" class="image-social-content" id=div_'.$list_friends_id[$j].'>'; |
||||
$friend_html.='<span><a href="profile.php?u='.$friend['friend_user_id'].'"><center><img src="'.$friends_profile['file'].'" '.$friends_profile['style'].' id="imgfriend_'.$friend['friend_user_id'].'" title="'.$user_name.'" /></center></a></span>'; |
||||
$friend_html.='<img onclick="delete_friend (this)" id=img_'.$friend['friend_user_id'].' src="../img/blank.gif" alt="" title="" class="image-delete" /> <center class="friend">'.$user_name.'</center></div>'; |
||||
} |
||||
$j++; |
||||
} |
||||
$friend_html.='</td></tr>'; |
||||
} |
||||
$friend_html.='<br/></table>'; |
||||
} |
||||
echo $friend_html; |
||||
?> |
Loading…
Reference in new issue