chamilo-lms/main/course_info/tools.php

<?php
/* For licensing terms, see /license.txt */

require_once __DIR__.'/../inc/global.inc.php';

// The section for the tabs
$this_section = SECTION_COURSES;

$sessionId = api_get_session_id();

if (!empty($sessionId)) {
    api_not_allowed();
}

api_protect_course_script(true);

if (!api_is_allowed_to_edit()) {
    api_not_allowed(true);
}

$action = isset($_GET['action']) ? $_GET['action'] : '';
$id = isset($_GET['id']) ? (int) $_GET['id'] : '';

$toolName = get_lang('CustomizeIcons');

switch ($action) {
    case 'delete_icon':
        $tool = CourseHome::getTool($id);
        if (empty($tool)) {
            api_not_allowed(true);
        }

        $currentUrl = api_get_self().'?'.api_get_cidreq();
        Display::addFlash(Display::return_message(get_lang('Updated')));
        CourseHome::deleteIcon($id);
        header('Location: '.$currentUrl);
        exit;

        break;
    case 'edit_icon':
        $tool = CourseHome::getTool($id);
        if (empty($tool)) {
            api_not_allowed(true);
        }

        $interbreadcrumb[] = [
            'url' => api_get_self().'?'.api_get_cidreq(),
            'name' => get_lang('CustomizeIcons'),
        ];
        $toolName = Security::remove_XSS(stripslashes($tool['name']));

        $currentUrl = api_get_self().'?action=edit_icon&id='.$id.'&'.api_get_cidreq();

        $form = new FormValidator('icon_edit', 'post', $currentUrl);
        $form->addHeader(get_lang('EditIcon'));
        $form->addHtml('<div class="col-md-7">');
        $form->addText('name', get_lang('Name'));
        $form->addInternalUrl('link', get_lang('Links'));
        $allowedPictureTypes = ['jpg', 'jpeg', 'png'];
        $form->addFile('icon', get_lang('CustomIcon'));
        $form->addRule(
            'icon',
            get_lang('OnlyImagesAllowed').' ('.implode(',', $allowedPictureTypes).')',
            'filetype',
            $allowedPictureTypes
        );
        $form->addSelect(
            'target',
            get_lang('LinkTarget'),
            [
                '_self' => get_lang('LinkOpenSelf'),
                '_blank' => get_lang('LinkOpenBlank'),
            ]
        );
        $form->addSelect(
            'visibility',
            get_lang('Visibility'),
            [1 => get_lang('Visible'), 0 => get_lang('Invisible')]
        );
        $form->addTextarea(
            'description',
            get_lang('Description'),
            ['rows' => '3', 'cols' => '40']
        );
        $form->addButtonUpdate(get_lang('Update'));
        $form->addHtml('</div>');
        $form->addHtml('<div class="col-md-5">');
        if (isset($tool['custom_icon']) && !empty($tool['custom_icon'])) {
            $form->addLabel(
                get_lang('CurrentIcon'),
                Display::img(
                    CourseHome::getCustomWebIconPath().$tool['custom_icon']
                )
            );

            $form->addCheckBox('delete_icon', null, get_lang('DeletePicture'));
        }
        $form->addHtml('</div>');
        $form->setDefaults($tool);
        $content = $form->returnForm();

        if ($form->validate()) {
            $data = $form->getSubmitValues();
            CourseHome::updateTool($id, $data);
            Display::addFlash(Display::return_message(get_lang('Updated')));
            if (isset($data['delete_icon'])) {
                CourseHome::deleteIcon($id);
            }
            $currentUrlReturn = api_get_self().'?'.api_get_cidreq();
            header('Location: '.$currentUrlReturn);
            exit;
        }
        break;
    case 'list':
    default:
        $toolList = CourseHome::toolsIconsAction(
            api_get_course_int_id(),
            api_get_session_id()
        );
        $iconsTools = '<div id="custom-icons">';
        $iconsTools .= Display::page_header(get_lang('CustomizeIcons'), null, 'h4');
        $iconsTools .= '<div class="row">';
        foreach ($toolList as $tool) {
            if (str_contains($tool['link'], '../plugin/')) {
                continue;
            }

            $tool['name'] = Security::remove_XSS(stripslashes($tool['name']));
            $toolIconName = 'Tool'.api_underscore_to_camel_case($tool['name']);
            $toolIconName = isset($$toolIconName) ? get_lang($toolIconName) : $tool['name'];

            $iconsTools .= '<div class="col-md-2">';
            $iconsTools .= '<div class="items-tools">';

            if (!empty($tool['custom_icon'])) {
                $image = CourseHome::getCustomWebIconPath().$tool['custom_icon'];
                $icon = Display::img($image, $toolIconName);
            } else {
                $image = (substr($tool['image'], 0, strpos($tool['image'], '.'))).'.png';
                $icon = Display::return_icon(
                    $image,
                    $toolIconName,
                    ['id' => 'tool_'.$tool['id']],
                    ICON_SIZE_BIG,
                    false
                );
            }

            $delete = (!empty($tool['custom_icon'])) ? "<a class=\"btn btn-default\" onclick=\"javascript:
                if(!confirm('".addslashes(api_htmlentities(get_lang('ConfirmYourChoice'), ENT_QUOTES, $charset)).
                "')) return false;\" href=\"".api_get_self().'?action=delete_icon&id='.$tool['iid'].'&'.api_get_cidreq()."\">
            <em class=\"fa fa-trash-o\"></em></a>" : "";
            $edit = '<a class="btn btn-default" href="'.api_get_self().'?action=edit_icon&id='.$tool['iid'].'&'.api_get_cidreq().'"><em class="fa fa-pencil"></em></a>';

            $iconsTools .= '<div class="icon-tools">'.$icon.'</div>';
            $iconsTools .= '<div class="name-tools">'.$toolIconName.'</div>';
            $iconsTools .= '<div class="toolbar">'.$edit.$delete.'</div>';
            $iconsTools .= '</div>';
            $iconsTools .= '</div>';
        }
        $iconsTools .= '</div>';
        $iconsTools .= '</div>';
        $content = $iconsTools;
        break;
}

$tpl = new Template($toolName);
$tpl->assign('content', $content);
$template = $tpl->get_template('layout/layout_1_col.tpl');
$tpl->display($template);