get_installed_plugins(); $capturePluginInstalled = in_array('jcapture', $pluginList); if ($capturePluginInstalled) { $jcapturePath = api_get_path(WEB_PLUGIN_PATH).'jcapture/plugin_applet.php'; $htmlHeadXtra[] = ''; } // Create directory certificates DocumentManager::create_directory_certificate_in_course(api_get_course_id()); if (empty($courseInfo)) { api_not_allowed(true); } // Used for avoiding double-click. $dbl_click_id = 0; $selectcat = isset($_GET['selectcat']) ? Security::remove_XSS($_GET['selectcat']) : null; $moveTo = isset($_POST['move_to']) ? Security::remove_XSS($_POST['move_to']) : null; /* Constants and variables */ $session_id = api_get_session_id(); $course_code = api_get_course_id(); $groupId = api_get_group_id(); $is_allowed_to_edit = api_is_allowed_to_edit(null, true); $group_member_with_upload_rights = false; $userId = api_get_user_id(); // If the group id is set, we show them group documents $group_properties = array(); $group_properties['directory'] = null; // For sessions we should check the parameters of visibility if (api_get_session_id() != 0) { $group_member_with_upload_rights = $group_member_with_upload_rights && api_is_allowed_to_session_edit(false, true); } //Setting group variables if (!empty($groupId)) { // Get group info $group_properties = GroupManager::get_group_properties($groupId); // Let's assume the user cannot upload files for the group $group_member_with_upload_rights = false; if ($group_properties['doc_state'] == 2) { // Documents are private if ($is_allowed_to_edit || GroupManager::is_user_in_group($userId, $groupId)) { // Only courseadmin or group members (members + tutors) allowed $interbreadcrumb[] = array( 'url' => api_get_path(WEB_CODE_PATH).'group/group.php?'.api_get_cidreq(), 'name' => get_lang('Groups') ); $interbreadcrumb[] = array( 'url' => api_get_path(WEB_CODE_PATH).'group/group_space.php?'.api_get_cidreq(), 'name' => get_lang('GroupSpace').' '.$group_properties['name'] ); //they are allowed to upload $group_member_with_upload_rights = true; } else { $groupId = 0; } } elseif ($group_properties['doc_state'] == 1) { // Documents are public $interbreadcrumb[] = array( 'url' => api_get_path(WEB_CODE_PATH).'group/group.php?'.api_get_cidreq(), 'name' => get_lang('Groups') ); $interbreadcrumb[] = array( 'url' => api_get_path(WEB_CODE_PATH).'group/group_space.php?'.api_get_cidreq(), 'name' => get_lang('GroupSpace').' '.$group_properties['name'] ); //allowed to upload? if ($is_allowed_to_edit || GroupManager::is_subscribed($userId, $groupId)) { // Only courseadmin or group members can upload $group_member_with_upload_rights = true; } } $_SESSION['group_member_with_upload_rights'] = $group_member_with_upload_rights; } else { $_SESSION['group_member_with_upload_rights'] = false; } // Actions. $document_id = isset($_REQUEST['id']) ? intval($_REQUEST['id']) : null; $action = isset($_REQUEST['action']) ? $_REQUEST['action'] : null; $currentUrl = api_get_self().'?'.api_get_cidreq().'&id='.$document_id; if (Portfolio::controller()->accept()) { Portfolio::controller()->run(); } switch ($action) { case 'delete_item': if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id) || is_my_shared_folder(api_get_user_id(), $moveTo, $session_id) ) { if (isset($_GET['deleteid'])) { if (!$is_allowed_to_edit) { if (api_is_coach()) { if (!DocumentManager::is_visible_by_id( $_GET['deleteid'], $courseInfo, $session_id, api_get_user_id()) ) { api_not_allowed(); } } if (DocumentManager::check_readonly( $courseInfo, api_get_user_id(), '', $_GET['deleteid'], true) ) { api_not_allowed(); } } $documentInfo = DocumentManager::get_document_data_by_id( $_GET['deleteid'], $courseInfo['code'], false, $session_id ); // Check whether the document is in the database. if (!empty($documentInfo)) { $deleteDocument = DocumentManager::delete_document( $courseInfo, null, $base_work_dir, api_get_session_id(), $_GET['deleteid'], $groupId ); if ($deleteDocument) { $certificateId = isset($_GET['delete_certificate_id']) ? $_GET['delete_certificate_id'] : null; DocumentManager::remove_attach_certificate(api_get_course_id(), $certificateId); $message = Display::return_message(get_lang('DocDeleted').': '.$documentInfo['path'], 'success'); } else { $message = Display::return_message(get_lang('DocDeleteError'), 'warning'); } } else { $message = Display::return_message(get_lang('FileNotFound'), 'warning'); } Session::write('message', $message); header("Location: $currentUrl"); exit; } } case 'download': // Get the document data from the ID $document_data = DocumentManager::get_document_data_by_id( $document_id, api_get_course_id(), false, $session_id ); if ($session_id != 0 && !$document_data) { // If there is a session defined and asking for the document *from // the session* didn't work, try it from the course (out of a // session context) $document_data = DocumentManager::get_document_data_by_id( $document_id, api_get_course_id(), false, 0 ); } // Check whether the document is in the database if (empty($document_data)) { api_not_allowed(); } // Launch event event_download($document_data['url']); // Check visibility of document and paths if (!($is_allowed_to_edit || $group_member_with_upload_rights) && !DocumentManager::is_visible_by_id($document_id, $courseInfo, $session_id, api_get_user_id())) { api_not_allowed(true); } $full_file_name = $base_work_dir.$document_data['path']; if (Security::check_abs_path($full_file_name, $base_work_dir.'/')) { DocumentManager::file_send_for_download($full_file_name, true); } exit; break; case 'downloadfolder': if (api_get_setting('students_download_folders') == 'true' || api_is_allowed_to_edit() || api_is_platform_admin()) { // Get the document data from the ID $document_data = DocumentManager::get_document_data_by_id( $document_id, api_get_course_id(), false, $session_id ); if ($session_id != 0 && !$document_data) { // If there is a session defined and asking for the // document * from the session* didn't work, try it from the // course (out of a session context) $document_data = DocumentManager::get_document_data_by_id( $document_id, api_get_course_id(), false, 0 ); } //filter when I am into shared folder, I can download only my shared folder if (is_any_user_shared_folder($document_data['path'], $session_id)) { if (is_my_shared_folder(api_get_user_id(), $document_data['path'], $session_id) || api_is_allowed_to_edit() || api_is_platform_admin()) { require 'downloadfolder.inc.php'; } } else { require 'downloadfolder.inc.php'; } // Launch event event_download($document_data['url']); exit; } break; case 'export_to_pdf': if (api_get_setting('students_export2pdf') == 'true' || api_is_allowed_to_edit() || api_is_platform_admin()) { DocumentManager::export_to_pdf($document_id, $course_code); } break; case 'copytomyfiles': // Copy a file to general my files user's if (api_get_setting('allow_social_tool') == 'true' && api_get_setting('users_copy_files') == 'true' && api_get_user_id() != 0 && !api_is_anonymous() ) { // Get the document data from the ID $document_info = DocumentManager::get_document_data_by_id( $document_id, api_get_course_id(), true, $session_id ); if ($session_id != 0 && !$document_info) { /* If there is a session defined and asking for the document from the session didn't work, try it from the course (out of a session context)*/ $document_info = DocumentManager::get_document_data_by_id( $document_id, api_get_course_id(), true, 0 ); } $parent_id = $document_info['parent_id']; $my_path = UserManager::get_user_picture_path_by_id( api_get_user_id(), 'system', true ); $user_folder = $my_path['dir'].'my_files/'; $my_path = null; if (!file_exists($user_folder)) { $perm = api_get_permissions_for_new_directories(); @mkdir($user_folder, $perm, true); } $file = $sys_course_path.$courseInfo['directory'].'/document'.$document_info['path']; $copyfile = $user_folder.basename($document_info['path']); $cidReq = Security::remove_XSS($_GET['cidReq']); $id_session = Security::remove_XSS($_GET['id_session']); $gidReq = Security::remove_XSS($_GET['gidReq']); $id = Security::remove_XSS($_GET['id']); if (empty($parent_id)) { $parent_id = 0; } $file_link = Display::url( get_lang('SeeFile'), api_get_path(WEB_CODE_PATH).'social/myfiles.php?'. 'cidReq='.$cidReq.'&id_session='.$id_session.'&'. 'gidReq='.$gidReq.'&parent_id='.$parent_id ); if (file_exists($copyfile)) { $message = get_lang('CopyAlreadyDone').'
'; $message .= ''. get_lang("No"). ''. ' | '. ''. get_lang('Yes'). '
'; if (!isset($_GET['copy'])) { $message = Display::return_message($message, 'warning', false); } if (Security::remove_XSS($_GET['copy']) == 'yes') { if (!copy($file, $copyfile)) { $message = Display::return_message(get_lang('CopyFailed'), 'error'); } else { $message = Display::return_message( get_lang('OverwritenFile').' '.$file_link, 'confirmation', false ); } } } else { if (!copy($file, $copyfile)) { $message = Display::return_message(get_lang('CopyFailed'), 'error'); } else { $message = Display::return_message(get_lang('CopyMade').' '.$file_link, 'confirmation', false); } } Session::write('message', $message); } break; } // I'm in the certification module? $is_certificate_mode = false; if (isset($_GET['curdirpath'])) { $is_certificate_mode = DocumentManager::is_certificate_mode($_GET['curdirpath']); } if (isset($_REQUEST['certificate']) && $_REQUEST['certificate'] == 'true') { $is_certificate_mode = true; } // If no actions we proceed to show the document (Hack in order to use document.php?id=X) if (isset($document_id) && empty($action)) { // Get the document data from the ID $document_data = DocumentManager::get_document_data_by_id( $document_id, api_get_course_id(), true, $session_id ); if ($session_id != 0 && !$document_data) { // If there is a session defined and asking for the // document * from the session* didn't work, try it from the course // (out of a session context) $document_data = DocumentManager::get_document_data_by_id( $document_id, api_get_course_id(), true, 0 ); } // If the document is not a folder we show the document. if ($document_data) { $parent_id = $document_data['parent_id']; $visibility = DocumentManager::check_visibility_tree( $document_id, api_get_course_id(), $session_id, api_get_user_id(), $groupId ); if (!empty($document_data['filetype']) && $document_data['filetype'] == 'file') { if ($visibility && api_is_allowed_to_session_edit()) { $url = api_get_path(WEB_COURSE_PATH). $courseInfo['path'].'/document'.$document_data['path'].'?' .api_get_cidreq(); header("Location: $url"); } exit; } else { if (!$visibility && !api_is_allowed_to_edit()) { api_not_allowed(); } } $_GET['curdirpath'] = $document_data['path']; } // What's the current path? // We will verify this a bit further down if (isset($_GET['curdirpath']) && $_GET['curdirpath'] != '') { $curdirpath = Security::remove_XSS($_GET['curdirpath']); } elseif (isset($_POST['curdirpath']) && $_POST['curdirpath'] != '') { $curdirpath = Security::remove_XSS($_POST['curdirpath']); } else { $curdirpath = '/'; } $curdirpathurl = urlencode($curdirpath); } else { // What's the current path? // We will verify this a bit further down if (isset($_GET['curdirpath']) && $_GET['curdirpath'] != '') { $curdirpath = Security::remove_XSS($_GET['curdirpath']); } elseif (isset($_POST['curdirpath']) && $_POST['curdirpath'] != '') { $curdirpath = Security::remove_XSS($_POST['curdirpath']); } else { $curdirpath = '/'; } $curdirpathurl = urlencode($curdirpath); // Check the path // If the path is not found (no document id), set the path to / $document_id = DocumentManager::get_document_id($courseInfo, $curdirpath); if (!$document_id) { $document_id = DocumentManager::get_document_id($courseInfo, $curdirpath); } $document_data = DocumentManager::get_document_data_by_id( $document_id, api_get_course_id(), true ); $parent_id = $document_data['parent_id']; } if (isset($document_data) && $document_data['path'] == '/certificates') { $is_certificate_mode = true; } if (!$parent_id) { $parent_id = 0; } $current_folder_id = $document_id; // Show preview if (isset($_GET['curdirpath']) && $_GET['curdirpath'] == '/certificates' && isset($_GET['set_preview']) && $_GET['set_preview'] == strval(intval($_GET['set_preview'])) ) { if (isset($_GET['set_preview'])) { // Generate document HTML $content_html = DocumentManager::replace_user_info_into_html( api_get_user_id(), api_get_course_id(), true ); $filename = 'certificate_preview/'.api_get_unique_id().'.png'; $qr_code_filename = api_get_path(SYS_ARCHIVE_PATH).$filename; $temp_folder = api_get_path(SYS_ARCHIVE_PATH).'certificate_preview'; if (!is_dir($temp_folder)) { mkdir($temp_folder, api_get_permissions_for_new_directories()); } $qr_code_web_filename = api_get_path(WEB_ARCHIVE_PATH).$filename; $certificate = new Certificate(); $text = $certificate->parse_certificate_variables($content_html['variables']); $result = $certificate->generate_qr($text, $qr_code_filename); $new_content_html = $content_html['content']; $path_image = api_get_path(WEB_COURSE_PATH).api_get_course_path().'/document/images/gallery'; $new_content_html = str_replace('../images/gallery', $path_image, $new_content_html); $path_image_in_default_course = api_get_path(WEB_CODE_PATH).'default_course_document'; $new_content_html = str_replace( '/main/default_course_document', $path_image_in_default_course, $new_content_html ); $new_content_html = str_replace( '/main/img/', api_get_path(WEB_IMG_PATH), $new_content_html ); Display::display_reduced_header(); echo ' '; echo '
'.get_lang('Print').'';
if (is_file($qr_code_filename) && is_readable($qr_code_filename)) {
$new_content_html = str_replace(
'((certificate_barcode))',
Display::img($qr_code_web_filename),
$new_content_html
);
}
print_r($new_content_html);
exit;
}
}
// Is the document tool visible?
// Check whether the tool is actually visible
$table_course_tool = Database::get_course_table(TABLE_TOOL_LIST);
$course_id = api_get_course_int_id();
$tool_sql = 'SELECT visibility FROM '.$table_course_tool.
' WHERE c_id = '.$course_id.' AND name = "'.TOOL_DOCUMENT.'" LIMIT 1';
$tool_result = Database::query($tool_sql);
$tool_row = Database::fetch_array($tool_result);
$tool_visibility = $tool_row['visibility'];
if ($tool_visibility == '0' && $groupId == '0' && !($is_allowed_to_edit || $group_member_with_upload_rights)) {
api_not_allowed(true);
}
$htmlHeadXtra[] = "";
// If they are looking at group documents they can't see the root
if ($groupId != 0 && $curdirpath == '/') {
$curdirpath = $group_properties['directory'];
$curdirpathurl = urlencode($group_properties['directory']);
}
// Check visibility of the current dir path. Don't show anything if not allowed
//@todo check this validation for coaches
//if (!$is_allowed_to_edit || api_is_coach()) { before
if (!$is_allowed_to_edit && api_is_coach()) {
if ($curdirpath != '/' && !(DocumentManager::is_visible($curdirpath, $courseInfo, $session_id, 'folder'))) {
api_not_allowed(true);
}
}
/* Create shared folders */
if ($session_id == 0) {
//Create shared folder. Necessary for recycled courses.
// session_id should always be zero and should always be created from a
// base course, never from a session.
if (!file_exists($base_work_dir.'/shared_folder')) {
$usf_dir_title = get_lang('UserFolders');
$usf_dir_name = '/shared_folder';
$groupId = 0;
$visibility = 0;
create_unexisting_directory(
$courseInfo,
api_get_user_id(),
$session_id,
$groupId,
$to_user_id,
$base_work_dir,
$usf_dir_name,
$usf_dir_title,
$visibility
);
}
// Create dynamic user shared folder
if (!file_exists($base_work_dir.'/shared_folder/sf_user_'.api_get_user_id())) {
$usf_dir_title = api_get_person_name(
$_user['firstName'],
$_user['lastName']
);
$usf_dir_name = '/shared_folder/sf_user_'.api_get_user_id();
$groupId = 0;
$visibility = 1;
create_unexisting_directory(
$courseInfo,
api_get_user_id(),
$session_id,
$groupId,
$to_user_id,
$base_work_dir,
$usf_dir_name,
$usf_dir_title,
$visibility
);
}
} else {
//Create shared folder session
if (!file_exists($base_work_dir.'/shared_folder_session_'.$session_id)) {
$usf_dir_title = get_lang('UserFolders').' ('.api_get_session_name($session_id).')';
$usf_dir_name = '/shared_folder_session_'.$session_id;
$groupId = 0;
$visibility = 0;
create_unexisting_directory(
$courseInfo,
api_get_user_id(),
$session_id,
$groupId,
$to_user_id,
$base_work_dir,
$usf_dir_name,
$usf_dir_title,
$visibility
);
}
//Create dynamic user shared folder into a shared folder session
if (!file_exists($base_work_dir.'/shared_folder_session_'.$session_id.'/sf_user_'.api_get_user_id())) {
$usf_dir_title = api_get_person_name(
$_user['firstName'],
$_user['lastName']).'('.api_get_session_name($session_id).')';
$usf_dir_name = '/shared_folder_session_'.$session_id.'/sf_user_'.api_get_user_id();
$groupId = 0;
$visibility = 1;
create_unexisting_directory(
$courseInfo,
api_get_user_id(),
$session_id,
$groupId,
$to_user_id,
$base_work_dir,
$usf_dir_name,
$usf_dir_title,
$visibility
);
}
}
/* MAIN SECTION */
// Slideshow inititalisation
$_SESSION['image_files_only'] = '';
$image_files_only = '';
if ($is_certificate_mode) {
$interbreadcrumb[] = array('url' => '../gradebook/index.php', 'name' => get_lang('Gradebook'));
} else {
if ((isset($_GET['id']) && $_GET['id'] != 0) || isset($_GET['curdirpath']) || isset($_GET['createdir'])) {
$interbreadcrumb[] = array('url' => 'document.php', 'name' => get_lang('Documents'));
} else {
$interbreadcrumb[] = array('url' => '#', 'name' => get_lang('Documents'));
}
}
// Interbreadcrumb for the current directory root path
if (empty($document_data['parents'])) {
if (isset($_GET['createdir'])) {
$interbreadcrumb[] = array('url' => $document_data['document_url'], 'name' => $document_data['title']);
} else {
$interbreadcrumb[] = array('url' => '#', 'name' => $document_data['title']);
}
} else {
$counter = 0;
foreach ($document_data['parents'] as $document_sub_data) {
//fixing double group folder in breadcrumb
if ($groupId) {
if ($counter == 0) {
$counter++;
continue;
}
}
if (!isset($_GET['createdir']) && $document_sub_data['id'] == $document_data['id']) {
$document_sub_data['document_url'] = '#';
}
$interbreadcrumb[] = array('url' => $document_sub_data['document_url'], 'name' => $document_sub_data['title']);
$counter++;
}
}
if (isset($_GET['createdir'])) {
$interbreadcrumb[] = array('url' => '#', 'name' => get_lang('CreateDir'));
}
$js_path = api_get_path(WEB_LIBRARY_PATH).'javascript/';
$htmlHeadXtra[] = '';
$htmlHeadXtra[] = '';
$mediaplayer_path = api_get_path(WEB_LIBRARY_PATH).'mediaplayer/player.swf';
$documentAndFolders = DocumentManager::get_all_document_data(
$courseInfo,
$curdirpath,
$groupId,
null,
$is_allowed_to_edit || $group_member_with_upload_rights,
false
);
$count = 1;
$jquery = null;
if (!empty($documentAndFolders)) {
foreach ($documentAndFolders as $file) {
if ($file['filetype'] == 'file') {
$path_info = pathinfo($file['path']);
$extension = strtolower($path_info['extension']);
//@todo use a js loop to auto generate this code
if (in_array($extension, array('ogg', 'mp3', 'wav'))) {
// Get the document data from the ID
$document_data = DocumentManager::get_document_data_by_id(
$file['id'],
api_get_course_id(),
false,
$session_id
);
if ($session_id != 0 && !$document_data) {
/* If there is a session defined and asking for the document
* from the session* didn't work, try it from the
course (out of a session context) */
$document_data = DocumentManager::get_document_data_by_id(
$file['id'],
api_get_course_id(),
false,
0
);
}
if ($extension == 'ogg') {
$extension = 'oga';
}
$params = array('url' => $document_data['direct_url'],
'extension' => $extension,
'count' => $count
);
$jquery .= DocumentManager::generate_jplayer_jquery($params);
$count++;
}
}
}
}
$htmlHeadXtra[] = '';
// Lib for event log, stats & tracking & record of the access
event_access_tool(TOOL_DOCUMENT);
/* DISPLAY */
if ($groupId != 0) { // Add group name after for group documents
$add_group_to_title = ' ('.$group_properties['name'].')';
}
$moveForm = null;
/* MOVE FILE OR DIRECTORY */
//Only teacher and all users into their group and each user into his/her shared folder
if ($is_allowed_to_edit ||
$group_member_with_upload_rights ||
is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id) ||
is_my_shared_folder(api_get_user_id(), $moveTo, $session_id)
) {
if (isset($_GET['move']) && $_GET['move'] != '') {
$my_get_move = intval($_REQUEST['move']);
if (api_is_coach()) {
if (!DocumentManager::is_visible_by_id($my_get_move, $courseInfo, $session_id, api_get_user_id())) {
api_not_allowed(true);
}
}
if (!$is_allowed_to_edit) {
if (DocumentManager::check_readonly($courseInfo, api_get_user_id(), $my_get_move)) {
api_not_allowed(true);
}
}
// Get the document data from the ID
$document_to_move = DocumentManager::get_document_data_by_id(
$my_get_move,
api_get_course_id(),
false,
$session_id
);
$move_path = $document_to_move['path'];
if (!empty($document_to_move)) {
$folders = DocumentManager::get_all_document_folders(
$courseInfo,
$groupId,
$is_allowed_to_edit || $group_member_with_upload_rights
);
//filter if is my shared folder. TODO: move this code to build_move_to_selector function
if (is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id) && !$is_allowed_to_edit) {
//only main user shared folder
$main_user_shared_folder_main = '/shared_folder/sf_user_'.api_get_user_id();
$main_user_shared_folder_sub = '/shared_folder\/sf_user_'.api_get_user_id().'\//'; //all subfolders
$user_shared_folders = array();
foreach ($folders as $fold) {
if ($main_user_shared_folder_main == $fold || preg_match($main_user_shared_folder_sub, $fold)) {
$user_shared_folders[] = $fold;
}
}
$moveForm .= '';
$moveForm .= build_move_to_selector(
$user_shared_folders,
$move_path,
$my_get_move,
$group_properties['directory']
);
} else {
$moveForm .= '';
$moveForm .= build_move_to_selector($folders, $move_path, $my_get_move, $group_properties['directory']);
}
}
}
if (!empty($moveTo) && isset($_POST['move_file'])) {
if (!$is_allowed_to_edit) {
if (DocumentManager::check_readonly($courseInfo, api_get_user_id(), $_POST['move_file'])) {
api_not_allowed(true);
}
}
if (api_is_coach()) {
if (!DocumentManager::is_visible_by_id($_POST['move_file'], $courseInfo, $session_id, api_get_user_id())) {
api_not_allowed(true);
}
}
// Get the document data from the ID
$document_to_move = DocumentManager::get_document_data_by_id(
$_POST['move_file'],
api_get_course_id(),
false,
$session_id
);
// Security fix: make sure they can't move files that are not in the document table
if (!empty($document_to_move)) {
$real_path_target = $base_work_dir.$moveTo.'/'.basename($document_to_move['path']);
$fileExist = false;
if (file_exists($real_path_target)) {
$fileExist = true;
}
if (move($base_work_dir.$document_to_move['path'], $base_work_dir.$moveTo)) {
update_db_info('update', $document_to_move['path'], $moveTo.'/'.basename($document_to_move['path']));
//update database item property
$doc_id = $_POST['move_file'];
if (is_dir($real_path_target)) {
api_item_property_update(
$courseInfo,
TOOL_DOCUMENT,
$doc_id,
'FolderMoved',
api_get_user_id(),
$groupId,
null,
null,
null,
$session_id
);
$message = Display::return_message(get_lang('DirMv'), 'confirmation');
} elseif (is_file($real_path_target)) {
api_item_property_update(
$courseInfo,
TOOL_DOCUMENT,
$doc_id,
'DocumentMoved',
api_get_user_id(),
$groupId,
null,
null,
null,
$session_id
);
$message = Display::return_message(get_lang('DocMv'), 'confirmation');
}
// Set the current path
$curdirpath = $_POST['move_to'];
$curdirpathurl = urlencode($_POST['move_to']);
} else {
if ($fileExist) {
if (is_dir($real_path_target)) {
$message = Display::return_message(get_lang('DirExists'), 'error');
} elseif (is_file($real_path_target)) {
$message = Display::return_message(get_lang('FileExists'), 'v');
}
} else {
$message = Display::return_message(get_lang('Impossible'), 'error');
}
}
} else {
$message = Display::return_message(get_lang('Impossible'), 'error');
}
Session::write('message', $message);
}
}
/* DELETE FILE OR DIRECTORY */
//Only teacher and all users into their group
if ($is_allowed_to_edit ||
$group_member_with_upload_rights ||
is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id)
) {
if (isset($_POST['action']) && isset($_POST['ids'])) {
$files = $_POST['ids'];
$readonlyAlreadyChecked = false;
$messages = null;
foreach ($files as $documentId) {
$items = array('/audio', '/flash', '/images', '/shared_folder', '/video', '/chat_files', '/certificates');
$data = DocumentManager::get_document_data_by_id($documentId, $courseInfo['code']);
if (in_array($data['path'], $items)) {
// exclude system directories (do not allow deletion)
continue;
} else {
switch ($_POST['action']) {
case 'set_invisible':
$visibilityCommand = 'invisible';
if (api_item_property_update(
$courseInfo,
TOOL_DOCUMENT,
$documentId,
$visibilityCommand,
api_get_user_id(),
null,
null,
null,
null,
$session_id
)) {
$messages .= Display::return_message(get_lang('VisibilityChanged').': '.$data['path'], 'confirmation');
} else {
$messages .= Display::return_message(get_lang('ViModProb'), 'error');
}
break;
case 'set_visible':
$visibilityCommand = 'visible';
if (api_item_property_update(
$courseInfo,
TOOL_DOCUMENT,
$documentId,
$visibilityCommand,
api_get_user_id(),
null,
null,
null,
null,
$session_id
)) {
$messages .= Display::return_message(get_lang('VisibilityChanged').': '.$data['path'], 'confirmation');
} else {
$messages .= Display::return_message(get_lang('ViModProb'), 'error');
}
break;
case 'delete':
// Check all documents scheduled for deletion
// If one of them is read-only, abandon deletion
// Note: this is only executed once
if (!$readonlyAlreadyChecked) {
foreach ($files as $id) {
if (!$is_allowed_to_edit) {
if (DocumentManager::check_readonly(
$courseInfo,
api_get_user_id(),
null,
$id,
false,
$session_id
)
) {
$messages .= Display::return_message(get_lang('CantDeleteReadonlyFiles'), 'error');
break 2;
}
}
}
$readonlyAlreadyChecked = true;
}
$deleteDocument = DocumentManager::delete_document(
$courseInfo,
null,
$base_work_dir,
$session_id,
$documentId,
$groupId
);
if (!empty($deleteDocument)) {
$messages .= Display::return_message(get_lang('DocDeleted').': '.$data['path'], 'confirmation');
}
break;
}
}
} // endforeach
Session::write('message', $messages);
}
}
$dirForm = null;
/* CREATE DIRECTORY */
//Only teacher and all users into their group and any user into his/her shared folder
if ($is_allowed_to_edit ||
$group_member_with_upload_rights ||
is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id)
) {
// Create directory with $_POST data
if (isset($_POST['create_dir']) && $_POST['dirname'] != '') {
// Needed for directory creation
$post_dir_name = $_POST['dirname'];
if ($post_dir_name == '../' || $post_dir_name == '.' || $post_dir_name == '..') {
$message = Display::return_message(get_lang('CannotCreateDir'), 'error');
} else {
if (!empty($_POST['dir_id'])) {
// Get the document data from the ID
$document_data = DocumentManager::get_document_data_by_id(
$_POST['dir_id'],
api_get_course_id(),
false,
$session_id
);
if ($session_id != 0 && !$document_data) {
// If there is a session defined and asking for the
// document * from the session* didn't work, try it from
// the course (out of a session context)
$document_data = DocumentManager::get_document_data_by_id(
$_POST['dir_id'],
api_get_course_id(),
false,
0
);
}
$curdirpath = $document_data['path'];
}
$added_slash = ($curdirpath == '/') ? '' : '/';
$dir_name = $curdirpath.$added_slash.replace_dangerous_char($post_dir_name);
$dir_name = disable_dangerous_file($dir_name);
$dir_check = $base_work_dir.$dir_name;
if (!is_dir($dir_check)) {
$visibility = empty($groupId) ? null : 1;
$created_dir = create_unexisting_directory(
$courseInfo,
api_get_user_id(),
$session_id,
$groupId,
$to_user_id,
$base_work_dir,
$dir_name,
$post_dir_name,
$visibility
);
if ($created_dir) {
$message = Display::return_message(get_lang('DirCr').' '.$created_dir, 'confirmation');
} else {
$message = Display::return_message(get_lang('CannotCreateDir'), 'error');
}
} else {
$message = Display::return_message(get_lang('CannotCreateDir'), 'error');
}
}
Session::write('message', $message);
}
// Show them the form for the directory name
if (isset($_GET['createdir'])) {
$dirForm = create_dir_form($document_id);
}
}
/* VISIBILITY COMMANDS */
if ($is_allowed_to_edit) {
if ((isset($_GET['set_invisible']) && !empty($_GET['set_invisible'])) ||
(isset($_GET['set_visible']) && !empty($_GET['set_visible'])) &&
$_GET['set_visible'] != '*' && $_GET['set_invisible'] != '*'
) {
// Make visible or invisible?
if (isset($_GET['set_visible'])) {
$update_id = intval($_GET['set_visible']);
$visibility_command = 'visible';
} else {
$update_id = intval($_GET['set_invisible']);
$visibility_command = 'invisible';
}
if (!$is_allowed_to_edit) {
if (api_is_coach()) {
if (!DocumentManager::is_visible_by_id($update_id, $courseInfo, $session_id, api_get_user_id())) {
api_not_allowed(true);
}
}
if (DocumentManager::check_readonly($courseInfo, api_get_user_id(), '', $update_id)) {
api_not_allowed(true);
}
}
// Update item_property to change visibility
if (api_item_property_update(
$courseInfo,
TOOL_DOCUMENT,
$update_id,
$visibility_command,
api_get_user_id(),
null,
null,
null,
null,
$session_id)
) {
//don't use ViMod because firt is load ViMdod (Gradebook). VisibilityChanged (trad4all)
$message = Display::return_message(get_lang('VisibilityChanged'), 'confirmation');
} else {
$message = Display::return_message(get_lang('ViModProb'), 'error');
}
Session::write('message', $message);
}
}
$templateForm = null;
/* TEMPLATE ACTION */
//Only teacher and all users into their group
if ($is_allowed_to_edit ||
$group_member_with_upload_rights ||
is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id)
) {
if (isset($_GET['add_as_template']) && !isset($_POST['create_template'])) {
$document_id_for_template = intval($_GET['add_as_template']);
// Create the form that asks for the directory name
$templateForm .= '';
} elseif (isset($_GET['add_as_template']) && isset($_POST['create_template'])) {
$document_id_for_template = intval(Database::escape_string($_GET['add_as_template']));
$title = Security::remove_XSS($_POST['template_title']);
//$description = Security::remove_XSS($_POST['template_description']);
$user_id = api_get_user_id();
// Create the template_thumbnails folder in the upload folder (if needed)
if (!is_dir(api_get_path(SYS_PATH).'courses/'.$courseInfo['directory'].'/upload/template_thumbnails/')) {
@mkdir(
api_get_path(SYS_PATH).'courses/'.$courseInfo['directory'].'/upload/template_thumbnails/',
api_get_permissions_for_new_directories()
);
}
// Upload the file
if (!empty($_FILES['template_image']['name'])) {
require_once api_get_path(LIBRARY_PATH).'fileUpload.lib.php';
$upload_ok = process_uploaded_file($_FILES['template_image']);
if ($upload_ok) {
// Try to add an extension to the file if it hasn't one
$new_file_name = $courseInfo['code'].'-'.add_ext_on_mime(
stripslashes($_FILES['template_image']['name']),
$_FILES['template_image']['type']
);
// Upload dir
$upload_dir = api_get_path(SYS_PATH).'courses/'.$courseInfo['directory'].'/upload/template_thumbnails/';
// Resize image to max default and end upload
$temp = new Image($_FILES['template_image']['tmp_name']);
$picture_info = $temp->get_image_info();
$max_width_for_picture = 100;
if ($picture_info['width'] > $max_width_for_picture) {
$thumbwidth = $max_width_for_picture;
if (empty($thumbwidth) || $thumbwidth == 0) {
$thumbwidth = $max_width_for_picture;
}
$new_height = round(($thumbwidth / $picture_info['width']) * $picture_info['height']);
$temp->resize($thumbwidth, $new_height, 0);
}
$temp->send_image($upload_dir.$new_file_name);
}
}
DocumentManager::set_document_as_template(
$title,
$description,
$document_id_for_template,
$course_code,
$user_id,
$new_file_name
);
$message = Display::return_message(get_lang('DocumentSetAsTemplate'), 'confirmation');
Session::write('message', $message);
}
if (isset($_GET['remove_as_template'])) {
$document_id_for_template = intval($_GET['remove_as_template']);
$user_id = api_get_user_id();
DocumentManager::unset_document_as_template(
$document_id_for_template,
$course_code,
$user_id
);
$message = Display::return_message(get_lang('DocumentUnsetAsTemplate'), 'confirmation');
Session::write('message', $message);
}
}
// END ACTION MENU
// Attach certificate in the gradebook
if (isset($_GET['curdirpath']) &&
$_GET['curdirpath'] == '/certificates' &&
isset($_GET['set_certificate']) &&
$_GET['set_certificate'] == strval(intval($_GET['set_certificate']))
) {
if (isset($_GET['cidReq'])) {
$course_id = Security::remove_XSS($_GET['cidReq']); // course id
$document_id = Security::remove_XSS($_GET['set_certificate']); // document id
DocumentManager::attach_gradebook_certificate($course_id, $document_id);
$message = Display::return_message(get_lang('IsDefaultCertificate'), 'normal');
Session::write('message', $message);
}
}
/* GET ALL DOCUMENT DATA FOR CURDIRPATH */
if (isset($_GET['keyword']) && !empty($_GET['keyword'])) {
$documentAndFolders = DocumentManager::get_all_document_data(
$courseInfo,
$curdirpath,
$groupId,
null,
$is_allowed_to_edit || $group_member_with_upload_rights,
true
);
} else {
$documentAndFolders = DocumentManager::get_all_document_data(
$courseInfo,
$curdirpath,
$groupId,
null,
$is_allowed_to_edit || $group_member_with_upload_rights,
false
);
}
if ($groupId != 0) {
$userAccess = GroupManager::user_has_access(
api_get_user_id(),
$groupId,
GroupManager::GROUP_TOOL_DOCUMENTS
);
if ($userAccess) {
$folders = DocumentManager::get_all_document_folders(
$courseInfo,
$groupId,
$is_allowed_to_edit || $group_member_with_upload_rights
);
}
} else {
$folders = DocumentManager::get_all_document_folders(
$courseInfo,
$groupId,
$is_allowed_to_edit || $group_member_with_upload_rights
);
}
if (!isset($folders) || $folders === false) {
$folders = array();
}
$actions = '