Security::remove_XSS($_POST['fday']), 'month'=>Security::remove_XSS($_POST['fmonth']), 'year'=>Security::remove_XSS($_POST['fyear']), 'hour'=>Security::remove_XSS($_POST['fhour']), 'minutes'=>Security::remove_XSS($_POST['fminute']), 'end_day'=>Security::remove_XSS($_POST['end_fday']), 'end_month'=>Security::remove_XSS($_POST['end_fmonth']), 'end_year'=>Security::remove_XSS($_POST['end_fyear']), 'end_hours'=>Security::remove_XSS($_POST['end_fhour']), 'end_minutes'=>Security::remove_XSS($_POST['end_fminute']), 'title'=>Security::remove_XSS(stripslashes($_POST['title'])), 'content'=>Security::remove_XSS(stripslashes($_POST['content'])), 'id'=>Security::remove_XSS($_POST['id']), 'action'=>Security::remove_XSS($_POST['action']), 'to'=>Security::remove_XSS($_POST['selectedform'])); $_SESSION['formelements']=$form_elements; // this is to correctly handle edits if($id){$action="edit";} //print_r($form_elements); header('Location: '.api_get_path(WEB_CODE_PATH)."resourcelinker/resourcelinker.php?source_id=1&action=$action&id=$id&originalresource=no"); exit; } if (!empty($_GET['view'])) { $_SESSION['view'] = Security::remove_XSS($_GET['view']); } /* ----------------------------------------------------------- Libraries ----------------------------------------------------------- */ // containing the functions for the agenda tool include "agenda.inc.php"; // some debug functions include($includePath."/lib/debug.lib.inc.php"); /*============================================================================== TREATING THE PARAMETERS 1. viewing month only or everything 2. sort ascending or descending 3. showing or hiding the send-to-specific-groups-or-users form 4. filter user or group ============================================================================== */ // 1. show all or show current month? if (!$_SESSION['show']) { $_SESSION['show']="showall"; } if (!empty($_GET['action']) and $_GET['action']=="showcurrent") { $_SESSION['show']="showcurrent"; } if (!empty($_GET['action']) and $_GET['action']=="showall") { $_SESSION['show']="showall"; } //echo $_SESSION['show']; // 2. sorting order (ASC or DESC) if (empty($_GET['sort']) and empty($_SESSION['sort'])) { $_SESSION['sort']="DESC"; } if (!empty($_GET['sort']) and $_GET['sort']=="asc") { $_SESSION['sort']="ASC"; } if (!empty($_GET['sort']) and $_GET['sort']=="desc") { $_SESSION['sort']="DESC"; } // 3. showing or hiding the send-to-specific-groups-or-users form $setting_allow_individual_calendar=true; if (empty($_POST['To']) and empty($_SESSION['allow_individual_calendar'])) { $_SESSION['allow_individual_calendar']="hide"; } $allow_individual_calendar_status=$_SESSION['allow_individual_calendar']; if (!empty($_POST['To']) and ($allow_individual_calendar_status=="hide")) { $_SESSION['allow_individual_calendar']="show"; } if (!empty($_GET['sort']) and ($allow_individual_calendar_status=="show")) { $_SESSION['allow_individual_calendar']="hide"; } // 4. filter user or group if (!empty($_GET['user']) or !empty($_GET['group'])) { $_SESSION['user']=(int)$_GET['user']; $_SESSION['group']=(int)$_GET['group']; } if ((!empty($_GET['user']) and $_GET['user']=="none") or (!empty($_GET['group']) and $_GET['group']=="none")) { api_session_unregister("user"); api_session_unregister("group"); } if (!$is_courseAdmin){ if (!empty($_GET['toolgroup'])){ //$_SESSION['toolgroup']=$_GET['toolgroup']; $toolgroup=Security::remove_XSS($_GET['toolgroup']); api_session_register('toolgroup'); } } //It comes from the group tools. If it's define it overwrites $_SESSION['group'] if (!empty($_GET['isStudentView']) and $_GET['isStudentView']=="false") { api_session_unregister("user"); api_session_unregister("group"); } $htmlHeadXtra[] = to_javascript(); $htmlHeadXtra[] = user_group_filter_javascript(); // this loads the javascript that is needed for the date popup selection $htmlHeadXtra[] = ""; // setting the name of the tool $nameTools = get_lang('Agenda'); // language variable in trad4all.inc.php // showing the header if we are not in the learning path, if we are in // the learning path, we do not include the banner so we have to explicitly // include the stylesheet, which is normally done in the header if (isset($_GET['toolgroup']) && $_GET['toolgroup']==strval(intval($_GET['toolgroup'])) ){ $_clean['toolgroup']=(int)$_GET['toolgroup']; $group_properties = GroupManager :: get_group_properties($_clean['toolgroup']); $interbreadcrumb[] = array ("url" => "../group/group.php", "name" => get_lang('Groups')); $interbreadcrumb[] = array ("url"=>"../group/group_space.php?gidReq=".Security::remove_XSS($_GET['toolgroup']), "name"=> get_lang('GroupSpace').' ('.$group_properties['name'].')'); Display::display_header($nameTools,'Agenda'); } elseif (empty($_GET['origin']) or $_GET['origin'] != 'learnpath') { Display::display_header($nameTools,'Agenda'); } else { echo ""; } /* ============================================================================== TRACKING ============================================================================== */ event_access_tool(TOOL_CALENDAR_EVENT); /* ============================================================================== SETTING SOME VARIABLES ============================================================================== */ // Variable definitions $dateNow = format_locale_date($dateTimeFormatLong); // Defining the shorts for the days. We use camelcase because these are arrays of language variables $DaysShort = api_get_week_days_short(); // Defining the days of the week to allow translation of the days. We use camelcase because these are arrays of language variables $DaysLong = api_get_week_days_long(); // Defining the months of the year to allow translation of the months. We use camelcase because these are arrays of language variables $MonthsLong = api_get_months_long(); // Database table definitions $TABLEAGENDA = Database::get_course_table(TABLE_AGENDA); $TABLE_ITEM_PROPERTY = Database::get_course_table(TABLE_ITEM_PROPERTY); $tbl_user = Database::get_main_table(TABLE_MAIN_USER); $tbl_courseUser = Database::get_main_table(TABLE_MAIN_COURSE_USER); $tbl_group = Database::get_course_table(TABLE_GROUP); $tbl_groupUser = Database::get_course_table(TABLE_GROUP_USER); $tbl_session_course_user= Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER); /* ============================================================================== ACCESS RIGHTS ============================================================================== */ // permission stuff - also used by loading from global in agenda.inc.php $is_allowed_to_edit = api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_agenda') && !api_is_anonymous()); /* ============================================================================== TITLE ============================================================================== */ // Displaying the title of the tool //api_display_tool_title($nameTools); // Tool introduction Display::display_introduction_section(TOOL_CALENDAR_EVENT); // insert an anchor (top) so one can jump back to the top of the page echo ''; /* ============================================================================== MAIN SECTION ============================================================================== */ //setting the default year and month $select_year = ''; $select_month = ''; if(!empty($_GET['year'])) { $select_year = (int)$_GET['year']; } if(!empty($_GET['month'])) { $select_month = (int)$_GET['month']; } if (empty($select_year) && empty($select_month)) { $today = getdate(); $select_year = $today['year']; $select_month = $today['mon']; } echo '
'; if (api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_agenda') && !api_is_anonymous()) && api_is_allowed_to_session_edit(false,true)) { display_courseadmin_links(); } display_student_links(); echo '
'; if (api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_agenda') && !api_is_anonymous() && api_is_allowed_to_session_edit(false,true))) { switch ($_GET['action']) { case "importical": if(isset($_POST['ical_submit'])) { $course_info = api_get_course_info(); $ical_name = $_FILES['ical_import']['name']; $ical_type = $_FILES['ical_import']['type']; $ext = substr($ical_name,(strrpos($ical_name,".")+1)); if ($ical_type === 'text/calendar' || $ext === 'ics') { agenda_import_ical($course_info,$_FILES['ical_import']); $is_ical = true; } else { $is_ical = false; } } break; case 'add': if($_POST['submit_event']) { $course_info = api_get_course_info(); $event_start = (int) $_POST['fyear'].'-'.(int) $_POST['fmonth'].'-'.(int) $_POST['fday'].' '.(int) $_POST['fhour'].':'.(int) $_POST['fminute'].':00'; $event_stop = (int) $_POST['end_fyear'].'-'.(int) $_POST['end_fmonth'].'-'.(int) $_POST['end_fday'].' '.(int) $_POST['end_fhour'].':'.(int) $_POST['end_fminute'].':00'; $safe_title = Security::remove_XSS($_POST['title']); $safe_file_comment = Security::remove_XSS($_POST['file_comment']); $id = agenda_add_item($course_info,$safe_title,$_POST['content'],$event_start,$event_stop,$_POST['selectedform'],false,$safe_file_comment); if(!empty($_POST['repeat'])) { $end_y = intval($_POST['repeat_end_year']); $end_m = intval($_POST['repeat_end_month']); $end_d = intval($_POST['repeat_end_day']); $end = mktime(23, 59, 59, $end_m, $end_d, $end_y); $res = agenda_add_repeat_item($course_info,$id,Security::remove_XSS($_POST['repeat_type']),$end,Security::remove_XSS($_POST['selectedform']),$safe_file_comment); } } break; case "edit": if( ! (api_is_course_coach() && !api_is_element_in_the_session(TOOL_AGENDA, intval($_REQUEST['id']) ) ) ) { // a coach can only delete an element belonging to his session if ($_POST['submit_event']) { $my_id_attach = (int)$_REQUEST['id_attach']; $safe_file_comment = Security::remove_XSS($_REQUEST['file_comment']); store_edited_agenda_item($my_id_attach,$safe_file_comment); } } break; case "delete": $id=(int)$_GET['id']; if( ! (api_is_course_coach() && !api_is_element_in_the_session(TOOL_AGENDA, $id ) ) ) { // a coach can only delete an element belonging to his session delete_agenda_item($id); } break; case "showhide": $id=(int)$_GET['id']; if( ! (api_is_course_coach() && !api_is_element_in_the_session(TOOL_AGENDA, $id ) ) ) { // a coach can only delete an element belonging to his session showhide_agenda_item($id); } break; case "announce": //copying the agenda item into an announcement $id=(int)$_GET['id']; if( ! (api_is_course_coach() && !api_is_element_in_the_session(TOOL_AGENDA, $id ) ) ) { // a coach can only delete an element belonging to his session $ann_id = store_agenda_item_as_announcement($id); $tool_group_link = (isset($_SESSION['toolgroup'])?'&toolgroup='.$_SESSION['toolgroup']:''); Display::display_normal_message(get_lang('CopiedAsAnnouncement').' '.get_lang('NewAnnouncement').'', false); } break; case "delete_attach": //delete attachment file $id_attach = (int)$_GET['id_attach']; if (!empty($id_attach)) { delete_attachment_file($id_attach); } break; } } echo '' . ''; // THE LEFT PART if (empty($_GET['origin']) or $_GET['origin']!='learnpath') { echo ''; echo ''; } // THE RIGHT PART echo '
'; // the small calendar $MonthName = $MonthsLong[$select_month -1]; $agenda_items=get_calendar_items($select_month,$select_year); if (api_get_setting('display_mini_month_calendar') == 'true') { display_minimonthcalendar($agenda_items, $select_month,$select_year, $MonthName); } echo '
'; if (api_get_setting('display_upcoming_events') == 'true') { display_upcoming_events(); } echo '
 '; echo '
'; echo '
'; if (api_is_allowed_to_edit(false,true) OR (api_get_course_setting('allow_user_edit_agenda') && !api_is_anonymous() && api_is_allowed_to_session_edit(false,true) )) { switch ($_GET['action']) { case 'importical' : if (isset($_POST['ical_submit'])) { if (!$is_ical) { Display::display_error_message(get_lang('IsNotiCalFormatFile')); display_ical_import_form(); break; } display_agenda_items(); } else { display_ical_import_form(); } break; case 'add' : if ($_POST['submit_event']) { display_agenda_items(); } else { show_add_form(); } break; case 'edit' : if ( !(api_is_course_coach() && !api_is_element_in_the_session(TOOL_AGENDA, intval($_REQUEST['id'])))) { if ($_POST['submit_event']) { display_agenda_items(); } else { $id=(int)$_GET['id']; show_add_form($id); } } else { display_agenda_items(); } break; case 'delete': display_agenda_items(); break; case 'showhide': if(!empty($_GET['agenda_id'])) { display_one_agenda_item((int)$_GET['agenda_id']); } else { display_agenda_items(); } break; case 'announce': display_agenda_items(); break; case 'delete_attach': display_agenda_items(); break; } } // this is for students and whenever the courseaministrator has not chosen any action. It is in fact the default behaviour if (!$_GET['action'] || $_GET['action']=="showall" || $_GET['action']=="showcurrent" || $_GET['action']=="view") { if ($_GET['origin'] != 'learnpath') { if (!$_SESSION['view'] || $_SESSION['view'] <> 'month') { if(!empty($_GET['agenda_id'])) { display_one_agenda_item((int)$_GET['agenda_id']); } else { display_agenda_items(); } } else { display_monthcalendar($select_month, $select_year); } } else { display_one_agenda_item((int)$_GET['agenda_id']); } } echo ' 
'; /* ============================================================================== FOOTER ============================================================================== */ // The footer is displayed only if we are not in the learnpath if ($_GET['origin'] != 'learnpath') { Display::display_footer(); } ?>