443 lines
17 KiB
443 lines
17 KiB
<?php
|
|
|
|
/* For licensing terms, see /license.txt */
|
|
|
|
/**
|
|
* This script shows a compose area (wysiwyg editor if supported, otherwise
|
|
* a simple textarea) where the user can type a message.
|
|
* There are three modes
|
|
* - standard: type a message, select a user to send it to, press send
|
|
* - reply on message (when pressing reply when viewing a message)
|
|
* - send to specific user (when pressing send message in the who is online list).
|
|
*/
|
|
$cidReset = true;
|
|
require_once __DIR__.'/../inc/global.inc.php';
|
|
|
|
api_block_anonymous_users();
|
|
|
|
if ('true' !== api_get_setting('allow_message_tool')) {
|
|
api_not_allowed(true);
|
|
}
|
|
|
|
$logInfo = [
|
|
'tool' => 'Messages',
|
|
'action' => 'new_message',
|
|
'action_details' => isset($_GET['re_id']) ? 're_id' : '',
|
|
];
|
|
Event::registerLog($logInfo);
|
|
|
|
$allowSocial = 'true' === api_get_setting('allow_social_tool');
|
|
$nameTools = api_xml_http_response_encode(get_lang('Messages'));
|
|
|
|
$htmlHeadXtra[] = '<script>
|
|
var counter_image = 1;
|
|
function add_image_form() {
|
|
// Multiple filepaths for image form
|
|
var filepaths = document.getElementById("file_uploads");
|
|
if (document.getElementById("filepath_"+counter_image)) {
|
|
counter_image = counter_image + 1;
|
|
} else {
|
|
counter_image = counter_image;
|
|
}
|
|
var elem1 = document.createElement("div");
|
|
elem1.setAttribute("id","filepath_"+counter_image);
|
|
filepaths.appendChild(elem1);
|
|
id_elem1 = "filepath_"+counter_image;
|
|
id_elem1 = "\'"+id_elem1+"\'";
|
|
document.getElementById("filepath_"+counter_image).innerHTML = "<div class=\"form-group\" ><label class=\"col-sm-4\">'.get_lang('Files attachments').'</label><input class=\"col-sm-8\" type=\"file\" name=\"attach_"+counter_image+"\" /></div><div class=\"form-group\" ><label class=\"col-sm-4\">'.get_lang('Description').'</label><div class=\"col-sm-8\"><input style=\"width:100%\" type=\"text\" name=\"legend[]\" /></div></div>";
|
|
if (filepaths.childNodes.length == 6) {
|
|
var link_attach = document.getElementById("link-more-attach");
|
|
if (link_attach) {
|
|
link_attach.innerHTML="";
|
|
}
|
|
}
|
|
}
|
|
</script>';
|
|
$nameTools = get_lang('Compose message');
|
|
$tpl = new Template(get_lang('Compose message'));
|
|
|
|
/**
|
|
* Shows the compose area + a list of users to select from.
|
|
*/
|
|
function show_compose_to_any($tpl)
|
|
{
|
|
$default['user_list'] = 0;
|
|
|
|
return manageForm($default, null, null, $tpl);
|
|
}
|
|
|
|
function show_compose_reply_to_message($message_id, $receiver_id, $tpl)
|
|
{
|
|
$table = Database::get_main_table(TABLE_MESSAGE);
|
|
$receiver_id = (int) $receiver_id;
|
|
$message_id = (int) $message_id;
|
|
|
|
$query = "SELECT user_sender_id
|
|
FROM $table
|
|
WHERE user_receiver_id = ".$receiver_id.' AND id = '.$message_id;
|
|
$result = Database::query($query);
|
|
$row = Database::fetch_array($result, 'ASSOC');
|
|
$userInfo = api_get_user_info($row['user_sender_id']);
|
|
if (empty($row['user_sender_id']) || empty($userInfo)) {
|
|
return get_lang('The id of the message to reply to is not valid.');
|
|
}
|
|
|
|
$default['users'] = [$row['user_sender_id']];
|
|
|
|
return manageForm($default, null, $userInfo['complete_name_with_username'], $tpl);
|
|
}
|
|
|
|
function show_compose_to_user($receiver_id, $tpl)
|
|
{
|
|
$userInfo = api_get_user_info($receiver_id);
|
|
$html = get_lang('To').': <strong>'.$userInfo['complete_name'].'</strong>';
|
|
$default['title'] = api_xml_http_response_encode(get_lang('Please enter a title'));
|
|
$default['users'] = [$receiver_id];
|
|
|
|
return $html.manageForm($default, null, '', $tpl);
|
|
}
|
|
|
|
/**
|
|
* @param $default
|
|
* @param null $select_from_user_list
|
|
* @param string $sent_to
|
|
* @param Template $tpl
|
|
*
|
|
* @return string
|
|
*/
|
|
function manageForm($default, $select_from_user_list = null, $sent_to = '', $tpl = null)
|
|
{
|
|
$group_id = isset($_REQUEST['group_id']) ? (int) $_REQUEST['group_id'] : null;
|
|
$message_id = isset($_GET['message_id']) ? (int) $_GET['message_id'] : null;
|
|
|
|
$form = new FormValidator(
|
|
'compose_message',
|
|
null,
|
|
api_get_self(),
|
|
null,
|
|
['enctype' => 'multipart/form-data']
|
|
);
|
|
|
|
if (empty($group_id)) {
|
|
if (isset($select_from_user_list)) {
|
|
$form->addText(
|
|
'id_text_name',
|
|
get_lang('Send to'),
|
|
true,
|
|
[
|
|
'id' => 'id_text_name',
|
|
'onkeyup' => 'send_request_and_search()',
|
|
'autocomplete' => 'off',
|
|
]
|
|
);
|
|
$form->addRule('id_text_name', get_lang('Required field'), 'required');
|
|
$form->addElement('html', '<div id="id_div_search" style="padding:0px" class="message-select-box" > </div>');
|
|
$form->addElement('hidden', 'user_list', 0, ['id' => 'user_list']);
|
|
} else {
|
|
if (!empty($sent_to)) {
|
|
$form->addLabel(get_lang('Send to'), $sent_to);
|
|
}
|
|
if (empty($default['users'])) {
|
|
//fb select
|
|
$form->addElement(
|
|
'select_ajax',
|
|
'users',
|
|
get_lang('Send to'),
|
|
[],
|
|
[
|
|
'multiple' => 'multiple',
|
|
'url' => api_get_path(WEB_AJAX_PATH).'message.ajax.php?a=find_users',
|
|
]
|
|
);
|
|
} else {
|
|
$form->addElement('hidden', 'hidden_user', $default['users'][0], ['id' => 'hidden_user']);
|
|
}
|
|
}
|
|
} else {
|
|
$userGroup = new UserGroup();
|
|
$group_info = $userGroup->get($group_id);
|
|
|
|
$form->addElement('label', get_lang('To social group'), api_xml_http_response_encode($group_info['name']));
|
|
$form->addElement('hidden', 'group_id', $group_id);
|
|
$form->addElement('hidden', 'parent_id', $message_id);
|
|
}
|
|
|
|
$form->addText('title', get_lang('Subject'), true);
|
|
$form->addHtmlEditor(
|
|
'content',
|
|
get_lang('Message'),
|
|
false,
|
|
false,
|
|
['ToolbarSet' => 'Messages', 'Width' => '100%', 'Height' => '250', 'style' => true]
|
|
);
|
|
|
|
if (isset($_GET['re_id'])) {
|
|
$message_reply_info = MessageManager::get_message_by_id($_GET['re_id']);
|
|
$default['title'] = get_lang('RE:').' '.Security::remove_XSS($message_reply_info['title']);
|
|
$form->addHidden('re_id', (int) $_GET['re_id']);
|
|
$form->addHidden('save_form', 'save_form');
|
|
|
|
// Adding reply mail
|
|
$user_reply_info = api_get_user_info($message_reply_info['user_sender_id']);
|
|
$default['content'] = '<p><br/></p>'.sprintf(
|
|
get_lang('%s wrote: <br /><i>%s</i>'),
|
|
$user_reply_info['complete_name'],
|
|
Security::filter_terms($message_reply_info['content'])
|
|
);
|
|
}
|
|
|
|
if (isset($_GET['forward_id'])) {
|
|
$forwardId = (int) $_GET['forward_id'];
|
|
$message_reply_info = MessageManager::get_message_by_id($forwardId);
|
|
$attachments = MessageManager::getAttachmentLinkList($forwardId, MessageManager::MESSAGE_TYPE_INBOX);
|
|
if (!empty($attachments)) {
|
|
$fileListToString = !empty($attachments) ? implode('<br />', $attachments) : '';
|
|
$form->addLabel('', $fileListToString);
|
|
}
|
|
$default['title'] = '['.get_lang('Fwd').': '.Security::remove_XSS($message_reply_info['title']).']';
|
|
$form->addHidden('forward_id', $forwardId);
|
|
$form->addHidden('save_form', 'save_form');
|
|
$receiverInfo = api_get_user_info($message_reply_info['user_receiver_id']);
|
|
|
|
$forwardMessage = '---------- '.get_lang('Forwarded message').' ---------'.'<br />';
|
|
$forwardMessage .= get_lang('Date').': '.api_get_local_time($message_reply_info['send_date']).'<br />';
|
|
$forwardMessage .= get_lang('Subject').': '.Security::remove_XSS($message_reply_info['title']).'<br />';
|
|
$forwardMessage .= get_lang('To').': '.$receiverInfo['complete_name'].' - '.$receiverInfo['email'].' <br />';
|
|
$default['content'] = '<p><br/></p>'.$forwardMessage.'<br />'.Security::filter_terms($message_reply_info['content']);
|
|
}
|
|
|
|
if (empty($group_id)) {
|
|
$form->addLabel(
|
|
'',
|
|
'<div id="file_uploads"><div id="filepath_1">
|
|
<div id="filepaths" class="form-horizontal">
|
|
<div id="paths-file" class="form-group">
|
|
<label class="col-sm-4">'.get_lang('Files attachments').'</label>
|
|
<input class="col-sm-8" type="file" name="attach_1"/>
|
|
</div>
|
|
</div>
|
|
<div id="paths-description" class="form-group">
|
|
<label class="col-sm-4">'.get_lang('Description').'</label>
|
|
<div class="col-sm-8">
|
|
<input id="file-descrtiption" class="form-control" type="text" name="legend[]" />
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>'
|
|
);
|
|
|
|
$form->addLabel(
|
|
'',
|
|
'<span id="link-more-attach"><a class="btn btn-default" href="javascript://" onclick="return add_image_form()">'.
|
|
get_lang('Add one more file').'</a></span> ('.
|
|
sprintf(
|
|
get_lang('Maximun file size: %s'),
|
|
format_file_size(api_get_setting('message_max_upload_filesize'))
|
|
).')'
|
|
);
|
|
}
|
|
|
|
$form->addLabel(
|
|
'',
|
|
'<iframe
|
|
frameborder="0" height="200" width="100%" scrolling="no"
|
|
src="'.api_get_path(WEB_CODE_PATH).'messages/record_audio.php"></iframe>'
|
|
);
|
|
|
|
$form->addButtonSend(get_lang('Send message'), 'compose');
|
|
$form->setRequiredNote('<span class="form_required">*</span> <small>'.get_lang('Required field').'</small>');
|
|
|
|
if (!empty($group_id) && !empty($message_id)) {
|
|
$message_info = MessageManager::get_message_by_id($message_id);
|
|
$default['title'] = get_lang('RE:').' '.$message_info['title'];
|
|
}
|
|
$form->setDefaults($default);
|
|
$html = '';
|
|
if ($form->validate()) {
|
|
$check = Security::check_token('post');
|
|
$disabled = api_get_configuration_value('disable_token_in_new_message');
|
|
if ($disabled) {
|
|
$check = true;
|
|
}
|
|
|
|
if ($check) {
|
|
$user_list = $default['users'];
|
|
$file_comments = $_POST['legend'];
|
|
$title = $default['title'];
|
|
$content = $default['content'];
|
|
$group_id = isset($default['group_id']) ? $default['group_id'] : null;
|
|
$parent_id = isset($default['parent_id']) ? $default['parent_id'] : null;
|
|
$forwardId = isset($_POST['forward_id']) ? $_POST['forward_id'] : false;
|
|
|
|
if (is_array($user_list) && count($user_list) > 0) {
|
|
// All is well, send the message
|
|
foreach ($user_list as $userId) {
|
|
$res = MessageManager::send_message(
|
|
$userId,
|
|
$title,
|
|
$content,
|
|
$_FILES,
|
|
$file_comments,
|
|
$group_id,
|
|
$parent_id,
|
|
0,
|
|
0,
|
|
null,
|
|
false,
|
|
$forwardId,
|
|
[],
|
|
true
|
|
);
|
|
|
|
if ($res) {
|
|
$userInfo = api_get_user_info($userId);
|
|
Display::addFlash(Display::return_message(
|
|
get_lang('The message has been sent to').' <b>'.$userInfo['complete_name_with_username'].'</b>',
|
|
'confirmation',
|
|
false
|
|
));
|
|
}
|
|
}
|
|
MessageManager::cleanAudioMessage();
|
|
} else {
|
|
Display::addFlash(Display::return_message('There was an error while trying to send the message.', 'error'));
|
|
}
|
|
}
|
|
Security::clear_token();
|
|
header('Location: '.api_get_path(WEB_CODE_PATH).'messages/inbox.php');
|
|
exit;
|
|
} else {
|
|
$token = Security::get_token();
|
|
$form->addElement('hidden', 'sec_token');
|
|
$form->setConstants(['sec_token' => $token]);
|
|
$html .= $form->returnForm();
|
|
}
|
|
|
|
return $html;
|
|
}
|
|
|
|
if ($allowSocial) {
|
|
$this_section = SECTION_SOCIAL;
|
|
$interbreadcrumb[] = [
|
|
'url' => api_get_path(WEB_CODE_PATH).'social/home.php',
|
|
'name' => get_lang('Social network'),
|
|
];
|
|
} else {
|
|
$this_section = SECTION_MYPROFILE;
|
|
$interbreadcrumb[] = [
|
|
'url' => api_get_path(WEB_CODE_PATH).'auth/profile.php',
|
|
'name' => get_lang('Profile'),
|
|
];
|
|
}
|
|
|
|
$interbreadcrumb[] = [
|
|
'url' => api_get_path(WEB_CODE_PATH).'messages/inbox.php',
|
|
'name' => get_lang('Messages'),
|
|
];
|
|
|
|
$group_id = isset($_REQUEST['group_id']) ? (int) $_REQUEST['group_id'] : 0;
|
|
$social_right_content = null;
|
|
if (0 != $group_id) {
|
|
$social_right_content .= '<div class=actions>';
|
|
$social_right_content .= '<a href="'.api_get_path(WEB_CODE_PATH).'social/group_view.php?id='.$group_id.'">'.
|
|
Display::return_icon('back.png', api_xml_http_response_encode(get_lang('Compose message'))).'</a>';
|
|
$social_right_content .= '<a href="'.api_get_path(WEB_CODE_PATH).'messages/new_message.php?group_id='.$group_id.'">'.
|
|
Display::return_icon('message_new.png', api_xml_http_response_encode(get_lang('Compose message'))).'</a>';
|
|
$social_right_content .= '</div>';
|
|
} else {
|
|
if ($allowSocial) {
|
|
} else {
|
|
$social_right_content .= '<div class=actions>';
|
|
if ('true' === api_get_setting('allow_message_tool')) {
|
|
$social_right_content .= '<a href="'.api_get_path(WEB_CODE_PATH).'messages/new_message.php">'.
|
|
Display::return_icon('message_new.png', get_lang('Compose message')).'</a>';
|
|
$social_right_content .= '<a href="'.api_get_path(WEB_CODE_PATH).'messages/inbox.php">'.
|
|
Display::return_icon('inbox.png', get_lang('Inbox')).'</a>';
|
|
$social_right_content .= '<a href="'.api_get_path(WEB_CODE_PATH).'messages/outbox.php">'.
|
|
Display::return_icon('outbox.png', get_lang('Outbox')).'</a>';
|
|
}
|
|
$social_right_content .= '</div>';
|
|
}
|
|
}
|
|
|
|
// LEFT COLUMN
|
|
$social_left_content = '';
|
|
if ($allowSocial) {
|
|
// Block Social Menu
|
|
$social_menu_block = SocialManager::show_social_menu('messages');
|
|
$social_right_content .= '<div class="row">';
|
|
$social_right_content .= '<div class="col-md-12">';
|
|
$social_right_content .= '<div class="actions">';
|
|
$social_right_content .= '<a href="'.api_get_path(WEB_CODE_PATH).'messages/inbox.php">'.
|
|
Display::return_icon('back.png', get_lang('Back'), [], 32).'</a>';
|
|
$social_right_content .= '</div>';
|
|
$social_right_content .= '</div>';
|
|
$social_right_content .= '<div class="col-md-12">';
|
|
}
|
|
|
|
// MAIN CONTENT
|
|
if (!isset($_POST['compose'])) {
|
|
if (isset($_GET['re_id'])) {
|
|
$social_right_content .= show_compose_reply_to_message(
|
|
$_GET['re_id'],
|
|
api_get_user_id(),
|
|
$tpl
|
|
);
|
|
} elseif (isset($_GET['send_to_user'])) {
|
|
$social_right_content .= show_compose_to_user($_GET['send_to_user'], $tpl);
|
|
} else {
|
|
$social_right_content .= show_compose_to_any($tpl);
|
|
}
|
|
} else {
|
|
$restrict = false;
|
|
if (isset($_POST['users'])) {
|
|
$restrict = true;
|
|
} elseif (isset($_POST['group_id'])) {
|
|
$restrict = true;
|
|
} elseif (isset($_POST['hidden_user'])) {
|
|
$restrict = true;
|
|
}
|
|
|
|
$default['title'] = $_POST['title'];
|
|
$default['content'] = $_POST['content'];
|
|
|
|
// comes from a reply button
|
|
if (isset($_GET['re_id']) || isset($_GET['forward_id'])) {
|
|
$social_right_content .= manageForm($default, null, null, $tpl);
|
|
} else {
|
|
// post
|
|
if ($restrict) {
|
|
if (!isset($_POST['group_id'])) {
|
|
$default['users'] = isset($_POST['users']) ? $_POST['users'] : null;
|
|
} else {
|
|
$default['group_id'] = (int) $_POST['group_id'];
|
|
}
|
|
if (isset($_POST['hidden_user'])) {
|
|
$default['users'] = [$_POST['hidden_user']];
|
|
}
|
|
$social_right_content .= manageForm($default, null, null, $tpl);
|
|
} else {
|
|
$social_right_content .= Display::return_message(get_lang('There was an error while trying to send the message.'), 'error');
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($allowSocial) {
|
|
$social_right_content .= '</div>';
|
|
$social_right_content .= '</div>';
|
|
}
|
|
|
|
// Block Social Avatar
|
|
SocialManager::setSocialUserBlock($tpl, api_get_user_id(), 'messages');
|
|
|
|
MessageManager::cleanAudioMessage();
|
|
if ($allowSocial) {
|
|
$tpl->assign('social_menu_block', $social_menu_block);
|
|
$tpl->assign('social_right_content', $social_right_content);
|
|
$social_layout = $tpl->get_template('social/inbox.tpl');
|
|
$tpl->display($social_layout);
|
|
} else {
|
|
$content = $social_right_content;
|
|
$tpl->assign('content', $content);
|
|
$tpl->display_one_col_template();
|
|
}
|
|
|