Merge branch '1.11.x' of github.com:chamilo/chamilo-lms into 1.11.x

main/auth/courses_categories.php

@@ -296,9 +296,10 @@ function getOptionSelect($categories, $codeType)
     $html = '';
     $html .= '<select name="category_code" onchange="submit();" class="selectpicker form-control">';
     foreach ($categories as $category) {
-        $categoryCode = $category['code'];
-        $countCourse = $category['number_courses'];
-        $level = $category['level'];
+        $categoryCode = Security::remove_XSS($category['code']);
+        $categoryName = Security::remove_XSS($category['name']);
+        $countCourse = (int) $category['number_courses'];
+        $level =  $category['level'];
         if (empty($countCourse)) {
             continue;
         }
@@ -308,7 +309,7 @@ function getOptionSelect($categories, $codeType)
             $separate = '';
         }
         $html .= '<option '.($categoryCode == $codeType ? 'selected="selected" ' : '')
-            .' value="'.$category['code'].'">'.$separate.' '.$category['name'].' ('.$countCourse.') </option>';
+            .' value="'.$categoryCode.'">'.$separate.' '.$categoryName.' ('.$countCourse.') </option>';
     }
     $html .= '</select>';
 

main/inc/lib/CoursesAndSessionsCatalog.class.php

@@ -238,7 +238,6 @@ class CoursesAndSessionsCatalog
 
         $categoriesFromDatabase = CourseCategory::getCategories();
 
-        //$allCategories = CourseCategory::getCategoriesCanBeAddedInCourse();
         foreach ($categoriesFromDatabase as $row) {
             $count_courses = CourseCategory::countCoursesInCategory($row['code']);
             $row['count_courses'] = $count_courses;

main/inc/lib/course_category.lib.php

@@ -113,9 +113,10 @@ class CourseCategory
     }
 
     /**
-     * @param string $category Optional. Parent category code
-     *
-     * @return array
+     * Returns a flat list of all course categories in this URL. If the
+     * allow_base_course_category option is true, then also show the
+     * course categories of the base URL
+     * @return array [id, name, code, parent_id, tree_pos, children_count, number_courses]
      */
     public static function getAllCategories()
     {