function startApplet() { appletsource = ""; appletsource += ""; appletsource += ""; document.getElementById("appletplace").innerHTML=appletsource; // alert(appletsource); } $(function() { $("#jcapture").click(function(){ startApplet(); }); }); '; // Create directory certificates DocumentManager::create_directory_certificate_in_course(api_get_course_id()); if (empty($course_info)) { api_not_allowed(true); } $dbl_click_id = 0; // Used for avoiding double-click $selectcat = isset($_GET['selectcat']) ? Security::remove_XSS($_GET['selectcat']) : null; /* Constants and variables */ $session_id = api_get_session_id(); $course_code = api_get_course_id(); $to_group_id = api_get_group_id(); $is_allowed_to_edit = api_is_allowed_to_edit(null, true); $group_member_with_upload_rights = false; // If the group id is set, we show them group documents $group_properties = array(); $group_properties['directory'] = null; // For sessions we should check the parameters of visibility if (api_get_session_id() != 0) { $group_member_with_upload_rights = $group_member_with_upload_rights && api_is_allowed_to_session_edit(false, true); } //Setting group variables if (api_get_group_id()) { // Get group info $group_properties = GroupManager::get_group_properties(api_get_group_id()); $noPHP_SELF = true; // Let's assume the user cannot upload files for the group $group_member_with_upload_rights = false; if ($group_properties['doc_state'] == 2) { // Documents are private if ($is_allowed_to_edit || GroupManager :: is_user_in_group(api_get_user_id(), api_get_group_id())) { // Only courseadmin or group members (members + tutors) allowed $interbreadcrumb[] = array('url' => '../group/group.php', 'name' => get_lang('Groups')); $interbreadcrumb[] = array('url' => '../group/group_space.php?gidReq='.api_get_group_id(), 'name' => get_lang('GroupSpace').' '.$group_properties['name']); //they are allowed to upload $group_member_with_upload_rights = true; } else { $to_group_id = 0; } } elseif ($group_properties['doc_state'] == 1) { // Documents are public $to_group_id = api_get_group_id(); $interbreadcrumb[] = array('url' => '../group/group.php', 'name' => get_lang('Groups')); $interbreadcrumb[] = array('url' => '../group/group_space.php?gidReq='.api_get_group_id(), 'name' => get_lang('GroupSpace').' '.$group_properties['name']); //allowed to upload? if ($is_allowed_to_edit || GroupManager::is_subscribed(api_get_user_id(), api_get_group_id())) { // Only courseadmin or group members can upload $group_member_with_upload_rights = true; } } else { // Documents not active for this group $to_group_id = 0; } $_SESSION['group_member_with_upload_rights'] = $group_member_with_upload_rights; } else { $_SESSION['group_member_with_upload_rights'] = false; $to_group_id = 0; } //Actions $document_id = isset($_REQUEST['id']) ? intval($_REQUEST['id']) : null; $action = isset($_REQUEST['action']) ? $_REQUEST['action'] : null; $message = ''; if (Portfolio::controller()->accept()) { Portfolio::controller()->run(); } switch ($action) { case 'download': // Get the document data from the ID $document_data = DocumentManager::get_document_data_by_id($document_id, api_get_course_id(), false, $session_id); if ($session_id != 0 && !$document_data) { // If there is a session defined and asking for the document *from the session* didn't work, try it from the course (out of a session context) $document_data = DocumentManager::get_document_data_by_id($document_id, api_get_course_id(), false, 0); } // Check whether the document is in the database if (empty($document_data)) { api_not_allowed(); } // Launch event event_download($document_data['url']); // Check visibility of document and paths if (!($is_allowed_to_edit || $group_member_with_upload_rights) && !DocumentManager::is_visible_by_id($document_id, $course_info, $session_id, api_get_user_id())) { api_not_allowed(true); } $full_file_name = $base_work_dir.$document_data['path']; if (Security::check_abs_path($full_file_name, $base_work_dir.'/')) { DocumentManager::file_send_for_download($full_file_name, true); } exit; break; case 'downloadfolder': if (api_get_setting('students_download_folders') == 'true' || api_is_allowed_to_edit() || api_is_platform_admin()) { // Get the document data from the ID $document_data = DocumentManager::get_document_data_by_id($document_id, api_get_course_id(), false, $session_id); if ($session_id != 0 && !$document_data) { // If there is a session defined and asking for the document *from the session* didn't work, try it from the course (out of a session context) $document_data = DocumentManager::get_document_data_by_id($document_id, api_get_course_id(), false, 0); } //filter when I am into shared folder, I can donwload only my shared folder if (is_any_user_shared_folder($document_data['path'], $session_id)) { if (is_my_shared_folder(api_get_user_id(), $document_data['path'], $session_id) || api_is_allowed_to_edit() || api_is_platform_admin()) { require 'downloadfolder.inc.php'; } } else { require 'downloadfolder.inc.php'; } // Launch event event_download($document_data['url']); exit; } break; case 'export_to_pdf': if (api_get_setting('students_export2pdf') == 'true' || api_is_allowed_to_edit() || api_is_platform_admin()) { DocumentManager::export_to_pdf($document_id, $course_code); } break; case 'copytomyfiles': // Copy a file to general my files user's if (api_get_setting('allow_social_tool') == 'true' && api_get_setting('users_copy_files') == 'true' && api_get_user_id() != 0 && !api_is_anonymous()) { // Get the document data from the ID $document_info = DocumentManager::get_document_data_by_id($document_id, api_get_course_id(), true, $session_id); if ($session_id != 0 && !$document_info) { // If there is a session defined and asking for the document *from the session* didn't work, try it from the course (out of a session context) $document_info = DocumentManager::get_document_data_by_id($document_id, api_get_course_id(), true, 0); } $parent_id = $document_info['parent_id']; $my_path = UserManager::get_user_picture_path_by_id(api_get_user_id(), 'system', true); $user_folder = $my_path['dir'].'my_files/'; $my_path = null; if (!file_exists($user_folder)) { $perm = api_get_permissions_for_new_directories(); @mkdir($user_folder, $perm, true); } $file = $sys_course_path.$_course['path'].'/document'.$document_info['path']; $copyfile = $user_folder.basename($document_info['path']); $cidReq = Security::remove_XSS($_GET['cidReq']); $id_session = Security::remove_XSS($_GET['id_session']); $gidReq = Security::remove_XSS($_GET['gidReq']); $id = Security::remove_XSS($_GET['id']); if (empty($parent_id)) { $parent_id = 0; } $file_link = Display::url( get_lang('SeeFile'), api_get_path(WEB_CODE_PATH).'social/myfiles.php?cidReq='.$cidReq.'&id_session='.$id_session.'&gidReq='.$gidReq.'&parent_id='.$parent_id ); if (file_exists($copyfile)) { $message = get_lang('CopyAlreadyDone').'

'; $message .= ''.get_lang("No").'  |   '.get_lang('Yes').'

'; if (!isset($_GET['copy'])) { $message = Display::return_message($message, 'warning', false); } if (Security::remove_XSS($_GET['copy']) == 'yes') { if (!copy($file, $copyfile)) { $message = Display::return_message(get_lang('CopyFailed'), 'error'); } else { $message = Display::return_message(get_lang('OverwritenFile').' '.$file_link, 'confirmation', false); } } } else { if (!copy($file, $copyfile)) { $message = Display::return_message(get_lang('CopyFailed'), 'error'); } else { $message = Display::return_message(get_lang('CopyMade').' '.$file_link, 'confirmation', false); } } } break; } // I'm in the certification module? $is_certificate_mode = false; if (isset($_GET['curdirpath'])) { $is_certificate_mode = DocumentManager::is_certificate_mode($_GET['curdirpath']); } if (isset($_REQUEST['certificate']) && $_REQUEST['certificate'] == 'true') { $is_certificate_mode = true; } //If no actions we proceed to show the document (Hack in order to use document.php?id=X) if (isset($document_id) && empty($action)) { // Get the document data from the ID $document_data = DocumentManager::get_document_data_by_id($document_id, api_get_course_id(), true, $session_id); if ($session_id != 0 && !$document_data) { // If there is a session defined and asking for the document *from the session* didn't work, try it from the course (out of a session context) $document_data = DocumentManager::get_document_data_by_id($document_id, api_get_course_id(), true, 0); } //If the document is not a folder we show the document if ($document_data) { $parent_id = $document_data['parent_id']; //$visibility = DocumentManager::is_visible_by_id($document_id, $course_info, $session_id, api_get_user_id()); $visibility = DocumentManager::check_visibility_tree($document_id, api_get_course_id(), $session_id, api_get_user_id()); if (!empty($document_data['filetype']) && $document_data['filetype'] == 'file') { if ($visibility && api_is_allowed_to_session_edit()) { $url = api_get_path(WEB_COURSE_PATH).$course_info['path'].'/document'.$document_data['path'].'?'.api_get_cidreq(); header("Location: $url"); } exit; } else { if (!$visibility && !api_is_allowed_to_edit()) { api_not_allowed(); } } $_GET['curdirpath'] = $document_data['path']; } // What's the current path? // We will verify this a bit further down if (isset($_GET['curdirpath']) && $_GET['curdirpath'] != '') { $curdirpath = Security::remove_XSS($_GET['curdirpath']); } elseif (isset($_POST['curdirpath']) && $_POST['curdirpath'] != '') { $curdirpath = Security::remove_XSS($_POST['curdirpath']); } else { $curdirpath = '/'; } $curdirpathurl = urlencode($curdirpath); } else { // What's the current path? // We will verify this a bit further down if (isset($_GET['curdirpath']) && $_GET['curdirpath'] != '') { $curdirpath = Security::remove_XSS($_GET['curdirpath']); } elseif (isset($_POST['curdirpath']) && $_POST['curdirpath'] != '') { $curdirpath = Security::remove_XSS($_POST['curdirpath']); } else { $curdirpath = '/'; } $curdirpathurl = urlencode($curdirpath); // Check the path // If the path is not found (no document id), set the path to / $document_id = DocumentManager::get_document_id($course_info, $curdirpath); if (!$document_id) { $document_id = DocumentManager::get_document_id($course_info, $curdirpath); } $document_data = DocumentManager::get_document_data_by_id($document_id, api_get_course_id(), true); $parent_id = $document_data['parent_id']; } if (isset($document_data) && $document_data['path'] == '/certificates') { $is_certificate_mode = true; } if (!$parent_id) { $parent_id = 0; } $current_folder_id = $document_id; // Show preview if (isset($_GET['curdirpath']) && $_GET['curdirpath'] == '/certificates' && isset($_GET['set_preview']) && $_GET['set_preview'] == strval(intval($_GET['set_preview']))) { if (isset($_GET['set_preview'])) { // Generate document HTML $content_html = DocumentManager::replace_user_info_into_html(api_get_user_id(), api_get_course_id(), true); $filename = 'certificate_preview/'.api_get_unique_id().'.png'; $qr_code_filename = api_get_path(SYS_ARCHIVE_PATH).$filename; $temp_folder = api_get_path(SYS_ARCHIVE_PATH).'certificate_preview'; if (!is_dir($temp_folder)) { mkdir($temp_folder, api_get_permissions_for_new_directories()); } $qr_code_web_filename = api_get_path(WEB_ARCHIVE_PATH).$filename; $certificate = new Certificate(); $text = $certificate->parse_certificate_variables($content_html['variables']); $result = $certificate->generate_qr($text, $qr_code_filename); $new_content_html = $content_html['content']; $path_image = api_get_path(WEB_COURSE_PATH).api_get_course_path().'/document/images/gallery'; $new_content_html = str_replace('../images/gallery', $path_image, $new_content_html); $path_image_in_default_course = api_get_path(WEB_CODE_PATH).'default_course_document'; $new_content_html = str_replace('/main/default_course_document', $path_image_in_default_course, $new_content_html); $new_content_html = str_replace('/main/img/', api_get_path(WEB_IMG_PATH), $new_content_html); Display::display_reduced_header(); echo ' '; echo ' '.get_lang('Print').''.get_lang('Print').''; if (is_file($qr_code_filename) && is_readable($qr_code_filename)) { $new_content_html = str_replace('((certificate_barcode))', Display::img($qr_code_web_filename), $new_content_html); } print_r($new_content_html); exit; } } // Is the document tool visible? // Check whether the tool is actually visible $table_course_tool = Database::get_course_table(TABLE_TOOL_LIST); $course_id = api_get_course_int_id(); $tool_sql = 'SELECT visibility FROM '.$table_course_tool.' WHERE c_id = '.$course_id.' AND name = "'.TOOL_DOCUMENT.'" LIMIT 1'; $tool_result = Database::query($tool_sql); $tool_row = Database::fetch_array($tool_result); $tool_visibility = $tool_row['visibility']; if ($tool_visibility == '0' && $to_group_id == '0' && !($is_allowed_to_edit || $group_member_with_upload_rights)) { api_not_allowed(true); } $htmlHeadXtra[] = ""; // If they are looking at group documents they can't see the root if ($to_group_id != 0 && $curdirpath == '/') { $curdirpath = $group_properties['directory']; $curdirpathurl = urlencode($group_properties['directory']); } // Check visibility of the current dir path. Don't show anything if not allowed //@todo check this validation for coaches //if (!$is_allowed_to_edit || api_is_coach()) { before if (!$is_allowed_to_edit && api_is_coach()) { if ($curdirpath != '/' && !(DocumentManager::is_visible($curdirpath, $_course, $session_id, 'folder'))) { api_not_allowed(true); } } /* Create shared folders */ if ($session_id == 0) { //Create shared folder. Necessary for courses recycled. Allways session_id should be zero. Allway should be created from a base course, never from a session. if (!file_exists($base_work_dir.'/shared_folder')) { $usf_dir_title = get_lang('UserFolders'); $usf_dir_name = '/shared_folder'; $to_group_id = 0; $visibility = 0; create_unexisting_directory($_course, api_get_user_id(), $session_id, $to_group_id, $to_user_id, $base_work_dir, $usf_dir_name, $usf_dir_title, $visibility); } // Create dynamic user shared folder if (!file_exists($base_work_dir.'/shared_folder/sf_user_'.api_get_user_id())) { $usf_dir_title = api_get_person_name($_user['firstName'], $_user['lastName']); $usf_dir_name = '/shared_folder/sf_user_'.api_get_user_id(); $to_group_id = 0; $visibility = 1; create_unexisting_directory($_course, api_get_user_id(), $session_id, $to_group_id, $to_user_id, $base_work_dir, $usf_dir_name, $usf_dir_title, $visibility); } } else { //Create shared folder session if (!file_exists($base_work_dir.'/shared_folder_session_'.$session_id)) { $usf_dir_title = get_lang('UserFolders').' ('.api_get_session_name($session_id).')'; $usf_dir_name = '/shared_folder_session_'.$session_id; $to_group_id = 0; $visibility = 0; create_unexisting_directory($_course, api_get_user_id(), $session_id, $to_group_id, $to_user_id, $base_work_dir, $usf_dir_name, $usf_dir_title, $visibility); } //Create dynamic user shared folder into a shared folder session if (!file_exists($base_work_dir.'/shared_folder_session_'.$session_id.'/sf_user_'.api_get_user_id())) { $usf_dir_title = api_get_person_name($_user['firstName'], $_user['lastName']).'('.api_get_session_name($session_id).')'; $usf_dir_name = '/shared_folder_session_'.$session_id.'/sf_user_'.api_get_user_id(); $to_group_id = 0; $visibility = 1; create_unexisting_directory($_course, api_get_user_id(), $session_id, $to_group_id, $to_user_id, $base_work_dir, $usf_dir_name, $usf_dir_title, $visibility); } } /* MAIN SECTION */ // Slideshow inititalisation $_SESSION['image_files_only'] = ''; $image_files_only = ''; if ($is_certificate_mode) { $interbreadcrumb[] = array('url' => '../gradebook/index.php', 'name' => get_lang('Gradebook')); } else { if ((isset($_GET['id']) && $_GET['id'] != 0) || isset($_GET['curdirpath']) || isset($_GET['createdir'])) { $interbreadcrumb[] = array('url' => 'document.php', 'name' => get_lang('Documents')); } else { $interbreadcrumb[] = array('url' => '#', 'name' => get_lang('Documents')); } } // Interbreadcrumb for the current directory root path if (empty($document_data['parents'])) { if (isset($_GET['createdir'])) { $interbreadcrumb[] = array('url' => $document_data['document_url'], 'name' => $document_data['title']); } else { $interbreadcrumb[] = array('url' => '#', 'name' => $document_data['title']); } } else { $counter = 0; foreach ($document_data['parents'] as $document_sub_data) { //fixing double group folder in breadcrumb if (api_get_group_id()) { if ($counter == 0) { $counter++; continue; } } if (!isset($_GET['createdir']) && $document_sub_data['id'] == $document_data['id']) { $document_sub_data['document_url'] = '#'; } $interbreadcrumb[] = array('url' => $document_sub_data['document_url'], 'name' => $document_sub_data['title']); $counter++; } } if (isset($_GET['createdir'])) { $interbreadcrumb[] = array('url' => '#', 'name' => get_lang('CreateDir')); } $js_path = api_get_path(WEB_LIBRARY_PATH).'javascript/'; $htmlHeadXtra[] = ''; $htmlHeadXtra[] = ''; $to_group_id = api_get_group_id(); $mediaplayer_path = api_get_path(WEB_LIBRARY_PATH).'mediaplayer/player.swf'; $docs_and_folders = DocumentManager::get_all_document_data($_course, $curdirpath, $to_group_id, null, $is_allowed_to_edit || $group_member_with_upload_rights, false); $count = 1; $jquery = null; if (!empty($docs_and_folders)) { foreach ($docs_and_folders as $file) { if ($file['filetype'] == 'file') { $path_info = pathinfo($file['path']); $extension = strtolower($path_info['extension']); //@todo use a js loop to auto generate this code if (in_array($extension, array('ogg', 'mp3', 'wav'))) { // Get the document data from the ID $document_data = DocumentManager::get_document_data_by_id($file['id'], api_get_course_id(), false, $session_id); if ($session_id != 0 && !$document_data) { // If there is a session defined and asking for the document *from the session* didn't work, try it from the course (out of a session context) $document_data = DocumentManager::get_document_data_by_id($file['id'], api_get_course_id(), false, 0); } if ($extension == 'ogg') { $extension = 'oga'; } $params = array('url' => $document_data['direct_url'], 'extension' => $extension, 'count' => $count ); $jquery .= DocumentManager::generate_jplayer_jquery($params); $count++; } } } } $htmlHeadXtra[] = ''; Display::display_header('', 'Doc'); // Lib for event log, stats & tracking & record of the access event_access_tool(TOOL_DOCUMENT); /* DISPLAY */ if ($to_group_id != 0) { // Add group name after for group documents $add_group_to_title = ' ('.$group_properties['name'].')'; } /* Introduction section (editable by course admins) */ if (!empty($_SESSION['_gid'])) { Display::display_introduction_section(TOOL_DOCUMENT.$_SESSION['_gid']); } else { Display::display_introduction_section(TOOL_DOCUMENT); } // ACTION MENU /* MOVE FILE OR DIRECTORY */ //Only teacher and all users into their group and each user into his/her shared folder if ( $is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id) || is_my_shared_folder(api_get_user_id(), Security::remove_XSS($_POST['move_to']), $session_id) ) { if (isset($_GET['move']) && $_GET['move'] != '') { $my_get_move = intval($_REQUEST['move']); if (api_is_coach()) { if (!DocumentManager::is_visible_by_id($my_get_move, $course_info, $session_id, api_get_user_id())) { api_not_allowed(); } } if (!$is_allowed_to_edit) { if (DocumentManager::check_readonly($_course, api_get_user_id(), $my_get_move)) { api_not_allowed(); } } // Get the document data from the ID $document_to_move = DocumentManager::get_document_data_by_id($my_get_move, api_get_course_id(), false, $session_id); $move_path = $document_to_move['path']; if (!empty($document_to_move)) { $folders = DocumentManager::get_all_document_folders($_course, $to_group_id, $is_allowed_to_edit || $group_member_with_upload_rights); //filter if is my shared folder. TODO: move this code to build_move_to_selector function if (is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id) && !$is_allowed_to_edit) { $main_user_shared_folder_main = '/shared_folder/sf_user_'.api_get_user_id(); //only main user shared folder $main_user_shared_folder_sub = '/shared_folder\/sf_user_'.api_get_user_id().'\//'; //all subfolders $user_shared_folders = array(); foreach ($folders as $fold) { if ($main_user_shared_folder_main == $fold || preg_match($main_user_shared_folder_sub, $fold)) { $user_shared_folders[] = $fold; } } echo ''.get_lang('Move').''; echo build_move_to_selector($user_shared_folders, $move_path, $my_get_move, $group_properties['directory']); } else { echo ''.get_lang('Move').''; echo build_move_to_selector($folders, $move_path, $my_get_move, $group_properties['directory']); } } } if (isset($_POST['move_to']) && isset($_POST['move_file'])) { if (!$is_allowed_to_edit) { if (DocumentManager::check_readonly($_course, api_get_user_id(), $_POST['move_file'])) { api_not_allowed(); } } if (api_is_coach()) { if (!DocumentManager::is_visible_by_id($_POST['move_file'], $_course, $session_id, api_get_user_id())) { api_not_allowed(); } } // Get the document data from the ID $document_to_move = DocumentManager::get_document_data_by_id($_POST['move_file'], api_get_course_id(), false, $session_id); // Security fix: make sure they can't move files that are not in the document table if (!empty($document_to_move)) { $real_path_target = $base_work_dir.$_POST['move_to'].'/'.basename($document_to_move['path']); $fileExist = false; if (file_exists($real_path_target)) { $fileExist = true; } if (move($base_work_dir.$document_to_move['path'], $base_work_dir.$_POST['move_to'])) { update_db_info('update', $document_to_move['path'], $_POST['move_to'].'/'.basename($document_to_move['path'])); //update database item property $doc_id = $_POST['move_file']; if (is_dir($real_path_target)) { api_item_property_update($_course, TOOL_DOCUMENT, $doc_id, 'FolderMoved', api_get_user_id(), $to_group_id, null, null, null, $session_id); Display::display_confirmation_message(get_lang('DirMv')); } elseif (is_file($real_path_target)) { api_item_property_update($_course, TOOL_DOCUMENT, $doc_id, 'DocumentMoved', api_get_user_id(), $to_group_id, null, null, null, $session_id); Display::display_confirmation_message(get_lang('DocMv')); } // Set the current path $curdirpath = $_POST['move_to']; $curdirpathurl = urlencode($_POST['move_to']); } else { if ($fileExist) { if (is_dir($real_path_target)) { Display::display_error_message(get_lang('DirExists')); } elseif (is_file($real_path_target)) { Display::display_error_message(get_lang('FileExists')); } } else { Display::display_error_message(get_lang('Impossible')); } } } else { Display::display_error_message(get_lang('Impossible')); } } } /* DELETE FILE OR DIRECTORY */ //Only teacher and all users into their group if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id)) { if (isset($_GET['deleteid'])) { if (!$is_allowed_to_edit) { if (api_is_coach()) { if (!DocumentManager::is_visible_by_id($_GET['deleteid'], $_course, $session_id, api_get_user_id())) { api_not_allowed(); } } if (DocumentManager::check_readonly($_course, api_get_user_id(), '', $_GET['deleteid'], true)) { api_not_allowed(); } } $document_data = intval($_GET['deleteid']); $documentInfo = DocumentManager::get_document_data_by_id($_GET['deleteid'], $_course['code'], false, $session_id); // Check whether the document is in the database if (!empty($document_data)) { if (DocumentManager::delete_document($_course, null, $base_work_dir, api_get_session_id(), $_GET['deleteid'])) { $certificateId = isset($_GET['delete_certificate_id']) ? $_GET['delete_certificate_id'] : null; DocumentManager::remove_attach_certificate(api_get_course_id(), $certificateId); Display::display_confirmation_message(get_lang('DocDeleted')); } else { Display::display_warning_message(get_lang('DocDeleteError')); } } else { Display::display_warning_message(get_lang('FileNotFound')); } } if (isset($_POST['action']) && isset($_POST['path'])) { $files = $_POST['path']; foreach ($files as $path) { $items = array('/audio', '/flash', '/images', '/shared_folder', '/video', '/chat_files', '/certificates'); if (in_array($path, $items)) { continue; } else { $documentId = DocumentManager::get_document_id($_course, $path, $session_id); $data = DocumentManager::get_document_data_by_id($documentId, $_course['code'], false, $session_id); switch ($_POST['action']) { case 'set_invisible': $visibilityCommand = 'invisible'; if (api_item_property_update( $_course, TOOL_DOCUMENT, $documentId, $visibilityCommand, api_get_user_id(), null, null, null, null, $session_id )) { Display::display_confirmation_message(get_lang('VisibilityChanged').': '.$data['path']); } else { Display::display_error_message(get_lang('ViModProb')); } break; case 'set_visible': $visibilityCommand = 'visible'; if (api_item_property_update( $_course, TOOL_DOCUMENT, $documentId, $visibilityCommand, api_get_user_id(), null, null, null, null, $session_id )) { Display::display_confirmation_message(get_lang('VisibilityChanged').': '.$data['path']); } else { Display::display_error_message(get_lang('ViModProb')); } break; case 'delete': foreach ($files as $checkPath) { if (!$is_allowed_to_edit) { if (DocumentManager::check_readonly( $_course, api_get_user_id(), $checkPath, null, false, $session_id ) ) { Display::display_error_message(get_lang('CantDeleteReadonlyFiles')); break 2; } } } $deleteDocument = DocumentManager::delete_document($_course, $path, $base_work_dir, $session_id); if (!empty($deleteDocument)) { Display::display_confirmation_message(get_lang('DocDeleted').': '.$data['path']); } break; } } } } } /* CREATE DIRECTORY */ //Only teacher and all users into their group and any user into his/her shared folder if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id)) { // Create directory with $_POST data if (isset($_POST['create_dir']) && $_POST['dirname'] != '') { // Needed for directory creation $post_dir_name = $_POST['dirname']; if ($post_dir_name == '../' || $post_dir_name == '.' || $post_dir_name == '..') { Display::display_error_message(get_lang('CannotCreateDir')); } else { if (!empty($_POST['dir_id'])) { // Get the document data from the ID $document_data = DocumentManager::get_document_data_by_id($_POST['dir_id'], api_get_course_id(), false, $session_id); if ($session_id != 0 && !$document_data) { // If there is a session defined and asking for the document *from the session* didn't work, try it from the course (out of a session context) $document_data = DocumentManager::get_document_data_by_id($_POST['dir_id'], api_get_course_id(), false, 0); } $curdirpath = $document_data['path']; } $added_slash = ($curdirpath == '/') ? '' : '/'; $dir_name = $curdirpath.$added_slash.replace_dangerous_char($post_dir_name); $dir_name = disable_dangerous_file($dir_name); $dir_check = $base_work_dir.$dir_name; if (!is_dir($dir_check)) { $created_dir = create_unexisting_directory($_course, api_get_user_id(), $session_id, $to_group_id, $to_user_id, $base_work_dir, $dir_name, $post_dir_name); if ($created_dir) { Display::display_confirmation_message(''.get_lang('DirCr').'', false); // Uncomment if you want to enter the created dir //$curdirpath = $created_dir; //$curdirpathurl = urlencode($curdirpath); } else { Display::display_error_message(get_lang('CannotCreateDir')); } } else { Display::display_error_message(get_lang('CannotCreateDir')); } } } // Show them the form for the directory name if (isset($_GET['createdir'])) { echo create_dir_form($document_id); } } /* VISIBILITY COMMANDS */ if ($is_allowed_to_edit) { if ((isset($_GET['set_invisible']) && !empty($_GET['set_invisible'])) || (isset($_GET['set_visible']) && !empty($_GET['set_visible'])) && $_GET['set_visible'] != '*' && $_GET['set_invisible'] != '*') { // Make visible or invisible? if (isset($_GET['set_visible'])) { $update_id = intval($_GET['set_visible']); $visibility_command = 'visible'; } else { $update_id = intval($_GET['set_invisible']); $visibility_command = 'invisible'; } if (!$is_allowed_to_edit) { if (api_is_coach()) { if (!DocumentManager::is_visible_by_id($update_id, $_course, $session_id, api_get_user_id())) { api_not_allowed(); } } if (DocumentManager::check_readonly($_course, api_get_user_id(), '', $update_id)) { api_not_allowed(); } } // Update item_property to change visibility if (api_item_property_update($_course, TOOL_DOCUMENT, $update_id, $visibility_command, api_get_user_id(), null, null, null, null, $session_id)) { Display::display_confirmation_message(get_lang('VisibilityChanged')); //don't use ViMod because firt is load ViMdod (Gradebook). VisibilityChanged (trad4all) } else { Display::display_error_message(get_lang('ViModProb')); } } } /* TEMPLATE ACTION */ //Only teacher and all users into their group if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id)) { if (isset($_GET['add_as_template']) && !isset($_POST['create_template'])) { $document_id_for_template = intval($_GET['add_as_template']); // Create the form that asks for the directory name $template_text = '
'; $template_text .= ''; $template_text .= ''; $template_text .= ''; //$template_text .= ''; //$template_text .= ''; $template_text .= ''; $template_text .= ''; $template_text .= '
'; $template_text .= get_lang('TemplateName').' :
'.get_lang('TemplateDescription').' :
'.get_lang('TemplateImage').' :
'; $template_text .= ''; $template_text .= '
'; // Show the form Display::display_normal_message($template_text, false); } elseif (isset($_GET['add_as_template']) && isset($_POST['create_template'])) { $document_id_for_template = intval(Database::escape_string($_GET['add_as_template'])); $title = Security::remove_XSS($_POST['template_title']); //$description = Security::remove_XSS($_POST['template_description']); $user_id = api_get_user_id(); // Create the template_thumbnails folder in the upload folder (if needed) if (!is_dir(api_get_path(SYS_PATH).'courses/'.$_course['path'].'/upload/template_thumbnails/')) { @mkdir(api_get_path(SYS_PATH).'courses/'.$_course['path'].'/upload/template_thumbnails/', api_get_permissions_for_new_directories()); } // Upload the file if (!empty($_FILES['template_image']['name'])) { require_once api_get_path(LIBRARY_PATH).'fileUpload.lib.php'; $upload_ok = process_uploaded_file($_FILES['template_image']); if ($upload_ok) { // Try to add an extension to the file if it hasn't one $new_file_name = $_course['sysCode'].'-'.add_ext_on_mime(stripslashes($_FILES['template_image']['name']), $_FILES['template_image']['type']); // Upload dir $upload_dir = api_get_path(SYS_PATH).'courses/'.$_course['path'].'/upload/template_thumbnails/'; // Resize image to max default and end upload $temp = new Image($_FILES['template_image']['tmp_name']); $picture_info = $temp->get_image_info(); $max_width_for_picture = 100; if ($picture_info['width'] > $max_width_for_picture) { $thumbwidth = $max_width_for_picture; if (empty($thumbwidth) || $thumbwidth == 0) { $thumbwidth = $max_width_for_picture; } $new_height = round(($thumbwidth / $picture_info['width']) * $picture_info['height']); $temp->resize($thumbwidth, $new_height, 0); } $temp->send_image($upload_dir.$new_file_name); } } DocumentManager::set_document_as_template($title, $description, $document_id_for_template, $course_code, $user_id, $new_file_name); Display::display_confirmation_message(get_lang('DocumentSetAsTemplate')); } if (isset($_GET['remove_as_template'])) { $document_id_for_template = intval($_GET['remove_as_template']); $user_id = api_get_user_id(); DocumentManager::unset_document_as_template($document_id_for_template, $course_code, $user_id); Display::display_confirmation_message(get_lang('DocumentUnsetAsTemplate')); } } // END ACTION MENU // Attach certificate in the gradebook if (isset($_GET['curdirpath']) && $_GET['curdirpath'] == '/certificates' && isset($_GET['set_certificate']) && $_GET['set_certificate'] == strval(intval($_GET['set_certificate']))) { if (isset($_GET['cidReq'])) { $course_id = Security::remove_XSS($_GET['cidReq']); // course id $document_id = Security::remove_XSS($_GET['set_certificate']); // document id DocumentManager::attach_gradebook_certificate($course_id, $document_id); Display::display_normal_message(get_lang('IsDefaultCertificate')); } } /* GET ALL DOCUMENT DATA FOR CURDIRPATH */ if (isset($_GET['keyword']) && !empty($_GET['keyword'])) { $docs_and_folders = DocumentManager::get_all_document_data($_course, $curdirpath, $to_group_id, null, $is_allowed_to_edit || $group_member_with_upload_rights, true); } else { $docs_and_folders = DocumentManager::get_all_document_data($_course, $curdirpath, $to_group_id, null, $is_allowed_to_edit || $group_member_with_upload_rights, false); } if (api_get_group_id() != 0) { if (api_is_allowed_to_edit() || GroupManager::is_subscribed(api_get_user_id(), api_get_group_id()) || GroupManager :: is_tutor_of_group(api_get_user_id(), api_get_group_id())) { $folders = DocumentManager::get_all_document_folders($_course, api_get_group_id(), $is_allowed_to_edit || $group_member_with_upload_rights); } } else { $folders = DocumentManager::get_all_document_folders($_course, api_get_group_id(), $is_allowed_to_edit || $group_member_with_upload_rights); } //$folders = DocumentManager::get_all_document_folders($_course, $to_group_id, $is_allowed_to_edit || $group_member_with_upload_rights); if ($folders === false) { $folders = array(); } echo '
'; echo '
'; if (!$is_certificate_mode) { /* BUILD SEARCH FORM */ echo ''; $form = new FormValidator('search_document', 'get', '', '', null, false); $renderer = & $form->defaultRenderer(); $renderer->setElementTemplate('{element} '); $form->add_textfield('keyword', '', false, array('class' => 'span2')); $form->addElement('style_submit_button', 'submit', get_lang('Search'), 'class="search"'); $form->display(); echo ''; } /* GO TO PARENT DIRECTORY */ if ($curdirpath != '/' && $curdirpath != $group_properties['directory'] && !$is_certificate_mode) { echo ''; echo Display::display_icon('folder_up.png', get_lang('Up'), '', ICON_SIZE_MEDIUM); echo ''; } if ($is_certificate_mode && $curdirpath != '/certificates') { ?>   '; echo Display::display_icon('upload_certificate.png', get_lang('UploadCertificate'), '', ICON_SIZE_MEDIUM).''; } else { echo ''; echo Display::display_icon('upload_file.png', get_lang('UplUploadDocument'), '', ICON_SIZE_MEDIUM).''; } /*echo ''; echo Display::display_icon('capture.png', get_lang('CatchScreenCasts'), '', ICON_SIZE_MEDIUM).'';*/ // Create directory if (!$is_certificate_mode) { ?> $document_data) { $row = array(); $row['id'] = $document_data['id']; $row['type'] = $document_data['filetype']; // If the item is invisible, wrap it in a span with class invisible. $is_visible = DocumentManager::is_visible_by_id($document_data['id'], $course_info, $session_id, api_get_user_id(), false); $invisibility_span_open = ($is_visible == 0) ? '' : ''; $invisibility_span_close = ($is_visible == 0) ? '' : ''; // Size (or total size of a directory) $size = $document_data['filetype'] == 'folder' ? get_total_folder_size($document_data['path'], $is_allowed_to_edit) : $document_data['size']; // Get the title or the basename depending on what we're using if ($document_data['title'] != '') { $document_name = $document_data['title']; } else { $document_name = basename($document_data['path']); } $row['name'] = $document_name; // Data for checkbox if (($is_allowed_to_edit || $group_member_with_upload_rights) && count($docs_and_folders) > 1) { $row[] = $document_data['path']; } if (DocumentManager::is_folder_to_avoid($document_data['path'], $is_certificate_mode)) { continue; } // Show the owner of the file only in groups $user_link = ''; if (isset($_SESSION['_gid']) && $_SESSION['_gid'] != '') { if (!empty($document_data['insert_user_id'])) { $user_info = UserManager::get_user_info_by_id($document_data['insert_user_id']); $user_name = api_get_person_name($user_info['firstname'], $user_info['lastname']); $user_link = '
'.get_lang('Owner').': '.display_user_link_document($document_data['insert_user_id'], $user_name).'
'; } } // Icons (clickable) $row[] = create_document_link($document_data, true, $count, $is_visible); $path_info = pathinfo($document_data['path']); if (isset($path_info['extension']) && in_array($path_info['extension'], array('ogg', 'mp3', 'wav'))) { $count++; } // Validacion when belongs to a session $session_img = api_get_session_image($document_data['session_id'], $_user['status']); // Document title with link $row[] = create_document_link($document_data, false, null, $is_visible). $session_img.'
'.$invisibility_span_open. ''.nl2br(htmlspecialchars($document_data['comment'], ENT_QUOTES, $charset)).''. $invisibility_span_close. $user_link; // Comments => display comment under the document name $display_size = format_file_size($size); $row[] = ''.$size.''.$invisibility_span_open.$display_size.$invisibility_span_close; // Last edit date $last_edit_date = api_get_local_time($document_data['lastedit_date']); $display_date = date_to_str_ago($last_edit_date).'
'.$last_edit_date."
"; $row[] = $invisibility_span_open.$display_date.$invisibility_span_close; // Admins get an edit column if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id)) { $is_template = isset($document_data['is_template']) ? $document_data['is_template'] : false; // If readonly, check if it the owner of the file or if the user is an admin if ($document_data['insert_user_id'] == api_get_user_id() || api_is_platform_admin()) { $edit_icons = build_edit_icons($document_data, $key, $is_template, 0, $is_visible); } else { $edit_icons = build_edit_icons($document_data, $key, $is_template, $document_data['readonly'], $is_visible); } $row[] = $edit_icons; } $row[] = $last_edit_date; $row[] = $size; $row[] = $document_name; $total_size = $total_size + $size; if ((isset($_GET['keyword']) && search_keyword($document_name, $_GET['keyword'])) || !isset($_GET['keyword']) || empty($_GET['keyword'])) { $sortable_data[] = $row; } } } } else { $sortable_data = ''; $table_footer = get_lang('NoDocsInFolder'); } if (!is_null($docs_and_folders)) { // Show download zipped folder icon global $total_size; if (!$is_certificate_mode && $total_size != 0 && (api_get_setting('students_download_folders') == 'true' || api_is_allowed_to_edit() || api_is_platform_admin())) { //for student does not show icon into other shared folder, and does not show into main path (root) if (is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id) && $curdirpath != '/' || api_is_allowed_to_edit() || api_is_platform_admin()) { echo ''.Display::return_icon('save_pack.png', get_lang('Save').' (ZIP)', '', ICON_SIZE_MEDIUM).''; } } } // Slideshow by Patrick Cool, May 2004 require 'document_slideshow.inc.php'; if ($image_present && !isset($_GET['keyword'])) { echo ''.Display::return_icon('slideshow.png', get_lang('ViewSlideshow'), '', ICON_SIZE_MEDIUM).''; } if (api_is_allowed_to_edit(null, true)) { echo ''.Display::return_icon('percentage.png', get_lang('DocumentQuota'), '', ICON_SIZE_MEDIUM).''; } echo '
'; //end actions if (isset($message)) { echo $message; } if (isset($_POST['move_to'])) { $document_id = DocumentManager::get_document_id($course_info, $_POST['move_to']); } if (isset($_GET['createdir']) && isset($_POST['dirname']) && $_POST['dirname'] != '') { $post_dir_name = $_POST['dirname']; $document_id = DocumentManager::get_document_id($course_info, $_POST['dirname']); } if (!$is_certificate_mode) { echo build_directory_selector($folders, $document_id, (isset($group_properties['directory']) ? $group_properties['directory'] : array()), true); } if (($is_allowed_to_edit || $group_member_with_upload_rights) && count($docs_and_folders) > 1) { $column_show[] = 1; } $column_show[] = 1; $column_show[] = 1; $column_show[] = 1; $column_show[] = 1; if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id)) { $column_show[] = 1; } $column_show[] = 0; $column_show[] = 0; $column_order = array(); if (count($row) == 12) { //teacher $column_order[2] = 8; //name $column_order[3] = 7; $column_order[4] = 6; } elseif (count($row) == 10) { //student $column_order[1] = 6; $column_order[2] = 5; $column_order[3] = 4; } $default_column = $is_allowed_to_edit ? 2 : 1; $tablename = $is_allowed_to_edit ? 'teacher_table' : 'student_table'; $table = new SortableTableFromArrayConfig($sortable_data, $default_column, 20, $tablename, $column_show, $column_order, 'ASC'); $query_vars = array(); if (isset($_GET['keyword'])) { $query_vars['keyword'] = Security::remove_XSS($_GET['keyword']); } else { $query_vars['curdirpath'] = $curdirpath; } if (api_get_group_id()) { $query_vars['gidReq'] = api_get_group_id(); } $query_vars['cidReq'] = api_get_course_id(); $table->set_additional_parameters($query_vars); $column = 0; if (($is_allowed_to_edit || $group_member_with_upload_rights) && count($docs_and_folders) > 1) { $table->set_header($column++, '', false, array('style' => 'width:12px;')); } $table->set_header($column++, get_lang('Type'), true, array('style' => 'width:30px;')); $table->set_header($column++, get_lang('Name')); $table->set_header($column++, get_lang('Size'), true, array('style' => 'width:50px;')); $table->set_header($column++, get_lang('Date'), true, array('style' => 'width:150px;')); // Admins get an edit column if ($is_allowed_to_edit || $group_member_with_upload_rights || is_my_shared_folder(api_get_user_id(), $curdirpath, $session_id)) { $table->set_header($column++, get_lang('Actions'), false, array('class' => 'td_actions')); } // Actions on multiple selected documents // TODO: Currently only delete action -> take only DELETE right into account if (count($docs_and_folders) > 1) { if ($is_allowed_to_edit || $group_member_with_upload_rights) { $form_actions = array(); $form_action['set_invisible'] = get_lang('SetInvisible'); $form_action['set_visible'] = get_lang('SetVisible'); $form_action['delete'] = get_lang('Delete'); $portfolio_actions = Portfolio::actions(); foreach ($portfolio_actions as $action) { $form_action[$action->get_name()] = $action->get_title(); } $table->set_form_actions($form_action, 'path'); } } $table->display(); if (count($docs_and_folders) > 1) { if ($is_allowed_to_edit || $group_member_with_upload_rights) { // Getting the course quota $course_quota = DocumentManager::get_course_quota(); // Calculating the total space $already_consumed_space_course = DocumentManager::documents_total_space(api_get_course_int_id()); // Displaying the quota DocumentManager::display_simple_quota($course_quota, $already_consumed_space_course); } } if (!empty($table_footer)) { Display::display_warning_message($table_footer); } // Footer Display::display_footer();