Security::remove_XSS($_POST['fday']), 'month'=>Security::remove_XSS($_POST['fmonth']), 'year'=>Security::remove_XSS($_POST['fyear']), 'hour'=>Security::remove_XSS($_POST['fhour']), 'minutes'=>Security::remove_XSS($_POST['fminute']), 'end_day'=>Security::remove_XSS($_POST['end_fday']), 'end_month'=>Security::remove_XSS($_POST['end_fmonth']), 'end_year'=>Security::remove_XSS($_POST['end_fyear']), 'end_hours'=>Security::remove_XSS($_POST['end_fhour']), 'end_minutes'=>Security::remove_XSS($_POST['end_fminute']), 'title'=>Security::remove_XSS(stripslashes($_POST['title'])), 'content'=>Security::remove_XSS(stripslashes($_POST['content'])), 'id'=>Security::remove_XSS($_POST['id']), 'action'=>Security::remove_XSS($_POST['action']), 'to'=>Security::remove_XSS($_POST['selectedform'])); $_SESSION['formelements']=$form_elements; // this is to correctly handle edits if($id){$action="edit";} //print_r($form_elements); header('Location: '.api_get_path(WEB_CODE_PATH)."resourcelinker/resourcelinker.php?source_id=1&action=$action&id=$id&originalresource=no"); exit; } if (!empty($_GET['view'])) { $_SESSION['view'] = Security::remove_XSS($_GET['view']); } // Functions for the agenda tool require_once 'agenda.inc.php'; /* TREATING THE PARAMETERS 1. viewing month only or everything 2. sort ascending or descending 3. showing or hiding the send-to-specific-groups-or-users form 4. filter user or group */ // 3. showing or hiding the send-to-specific-groups-or-users form $setting_allow_individual_calendar=true; if (empty($_POST['To']) and empty($_SESSION['allow_individual_calendar'])) { $_SESSION['allow_individual_calendar']="hide"; } $allow_individual_calendar_status=$_SESSION['allow_individual_calendar']; if (!empty($_POST['To']) and ($allow_individual_calendar_status=="hide")) { $_SESSION['allow_individual_calendar']="show"; } if (!empty($_GET['sort']) and ($allow_individual_calendar_status=="show")) { $_SESSION['allow_individual_calendar']="hide"; } // 4. filter user or group if (!empty($_GET['user']) or !empty($_GET['group'])) { $_SESSION['user']=(int)$_GET['user']; $_SESSION['group']=(int)$_GET['group']; } if ((!empty($_GET['user']) and $_GET['user']=="none") or (!empty($_GET['group']) and $_GET['group']=="none")) { Session::erase("user"); Session::erase("group"); } if (!$is_courseAdmin){ if (!empty($_GET['toolgroup'])){ //$_SESSION['toolgroup']=$_GET['toolgroup']; $toolgroup=Security::remove_XSS($_GET['toolgroup']); Session::write('toolgroup',$toolgroup); } } //It comes from the group tools. If it's define it overwrites $_SESSION['group'] /* if (!empty($_GET['isStudentView']) and $_GET['isStudentView']=="false") { api_session_unregister("user"); api_session_unregister("group"); }*/ $htmlHeadXtra[] = to_javascript(); $htmlHeadXtra[] = user_group_filter_javascript(); // this loads the javascript that is needed for the date popup selection $htmlHeadXtra[] = ""; // setting the name of the tool $nameTools = get_lang('Agenda'); // language variable in trad4all.inc.php // showing the header if we are not in the learning path, if we are in // the learning path, we do not include the banner so we have to explicitly // include the stylesheet, which is normally done in the header if (isset($_GET['toolgroup']) && !empty($_GET['toolgroup'])){ $_clean['toolgroup']= intval($_GET['toolgroup']); $group_properties = GroupManager :: get_group_properties($_clean['toolgroup']); $interbreadcrumb[] = array ("url" => "../group/group.php", "name" => get_lang('Groups')); $interbreadcrumb[] = array ("url"=>"../group/group_space.php?gidReq=".Security::remove_XSS($_GET['toolgroup']), "name"=> get_lang('GroupSpace').' '.$group_properties['name']); Display::display_header($nameTools,'Agenda'); } elseif (empty($origin) or $origin != 'learnpath') { Display::display_header($nameTools,'Agenda'); } else { echo ""; } /* TRACKING */ event_access_tool(TOOL_CALENDAR_EVENT); /* SETTING SOME VARIABLES */ // Variable definitions // Defining the shorts for the days. We use camelcase because these are arrays of language variables $DaysShort = api_get_week_days_short(); // Defining the days of the week to allow translation of the days. We use camelcase because these are arrays of language variables $DaysLong = api_get_week_days_long(); // Defining the months of the year to allow translation of the months. We use camelcase because these are arrays of language variables $MonthsLong = api_get_months_long(); // Database table definitions $TABLEAGENDA = Database::get_course_table(TABLE_AGENDA); $TABLE_ITEM_PROPERTY = Database::get_course_table(TABLE_ITEM_PROPERTY); $tbl_user = Database::get_main_table(TABLE_MAIN_USER); $tbl_courseUser = Database::get_main_table(TABLE_MAIN_COURSE_USER); $tbl_group = Database::get_course_table(TABLE_GROUP); $tbl_groupUser = Database::get_course_table(TABLE_GROUP_USER); $tbl_session_course_user= Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER); /* ACCESS RIGHTS*/ // permission stuff - also used by loading from global in agenda.inc.php $is_allowed_to_edit = api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_agenda') && !api_is_anonymous()); // Tool introduction Display::display_introduction_section(TOOL_CALENDAR_EVENT); /* MAIN SECTION */ //setting the default year and month $select_year = ''; $select_month = ''; $select_day = ''; if(!empty($_GET['year'])) { $select_year = (int)$_GET['year']; } if(!empty($_GET['month'])) { $select_month = (int)$_GET['month']; } if(!empty($_GET['day'])) { $select_day = (int)$_GET['day']; } $today = getdate(); if (empty($select_year)) { $select_year = $today['year']; } if (empty($select_month)) { $select_month = $today['mon']; } echo '