Chamilo is a learning management system focused on ease of use and accessibility
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
chamilo-lms/main/calendar/agenda.php

337 lines
13 KiB

<?php
/* For licensing terms, see /license.txt */
/**
* @package chamilo.calendar
*/
/**
* INIT SECTION
*/
use \ChamiloSession as Session;
// name of the language file that needs to be included
$language_file = array('agenda', 'group');
// use anonymous mode when accessing this course tool
$use_anonymous = true;
require_once '../inc/global.inc.php';
$current_course_tool = TOOL_CALENDAR_EVENT;
$course_info = api_get_course_info();
if (!empty($course_info)) {
api_protect_course_script(true);
}
//session
if (isset($_GET['id_session'])) {
$_SESSION['id_session'] = intval($_GET['id_session']);
}
$action = isset($_GET['action']) ? $_GET['action'] : null;
$origin = isset($_GET['origin']) ? $_GET['origin'] : null;
$this_section = SECTION_COURSES;
if (empty($action)) {
$url = api_get_path(WEB_CODE_PATH).'calendar/agenda_js.php?type=course';
header("Location: $url");
exit;
}
/* Resource linker */
$_SESSION['source_type'] = 'Agenda';
require_once '../resourcelinker/resourcelinker.inc.php';
require_once api_get_path(LIBRARY_PATH).'fileUpload.lib.php';
if (!empty($addresources)) {
// When the "Add Resource" button is clicked we store all the form data into a session
$form_elements = array(
'day' => Security::remove_XSS($_POST['fday']),
'month' => Security::remove_XSS($_POST['fmonth']),
'year' => Security::remove_XSS($_POST['fyear']),
'hour' => Security::remove_XSS($_POST['fhour']),
'minutes' => Security::remove_XSS($_POST['fminute']),
'end_day' => Security::remove_XSS($_POST['end_fday']),
'end_month' => Security::remove_XSS($_POST['end_fmonth']),
'end_year' => Security::remove_XSS($_POST['end_fyear']),
'end_hours' => Security::remove_XSS($_POST['end_fhour']),
'end_minutes' => Security::remove_XSS($_POST['end_fminute']),
'title' => Security::remove_XSS(stripslashes($_POST['title'])),
'content' => Security::remove_XSS(stripslashes($_POST['content'])),
'id' => Security::remove_XSS($_POST['id']),
'action' => Security::remove_XSS($_POST['action']),
'add_announcement' => Security::remove_XSS($_POST['add_announcement']),
'to' => Security::remove_XSS($_POST['selectedform'])
);
$_SESSION['formelements'] = $form_elements;
// this is to correctly handle edits
if ($id) {
$action = "edit";
}
//print_r($form_elements);
header('Location: '.api_get_path(WEB_CODE_PATH)."resourcelinker/resourcelinker.php?source_id=1&action=$action&id=$id&originalresource=no");
exit;
}
if (!empty($_GET['view'])) {
$_SESSION['view'] = Security::remove_XSS($_GET['view']);
}
// Functions for the agenda tool
require_once 'agenda.inc.php';
/*
TREATING THE PARAMETERS
1. viewing month only or everything
2. sort ascending or descending
3. showing or hiding the send-to-specific-groups-or-users form
4. filter user or group
*/
// 3. showing or hiding the send-to-specific-groups-or-users form
$setting_allow_individual_calendar = true;
if (empty($_POST['To']) and empty($_SESSION['allow_individual_calendar'])) {
$_SESSION['allow_individual_calendar'] = "hide";
}
$allow_individual_calendar_status = $_SESSION['allow_individual_calendar'];
if (!empty($_POST['To']) and ($allow_individual_calendar_status == "hide")) {
$_SESSION['allow_individual_calendar'] = "show";
}
if (!empty($_GET['sort']) and ($allow_individual_calendar_status == "show")) {
$_SESSION['allow_individual_calendar'] = "hide";
}
// 4. filter user or group
if (!empty($_GET['user']) or !empty($_GET['group'])) {
$_SESSION['user'] = (int) $_GET['user'];
$_SESSION['group'] = (int) $_GET['group'];
}
if ((!empty($_GET['user']) and $_GET['user'] == "none") or (!empty($_GET['group']) and $_GET['group'] == "none")) {
Session::erase("user");
Session::erase("group");
}
$group_id = api_get_group_id();
//It comes from the group tools. If it's define it overwrites $_SESSION['group']
$htmlHeadXtra[] = to_javascript();
$htmlHeadXtra[] = user_group_filter_javascript();
// this loads the javascript that is needed for the date popup selection
$htmlHeadXtra[] = "<script src=\"tbl_change.js\" type=\"text/javascript\" language=\"javascript\"></script>";
// setting the name of the tool
$nameTools = get_lang('Agenda'); // language variable in trad4all.inc.php
// showing the header if we are not in the learning path, if we are in
// the learning path, we do not include the banner so we have to explicitly
// include the stylesheet, which is normally done in the header
if (!empty($group_id)) {
$group_properties = GroupManager :: get_group_properties($group_id);
$interbreadcrumb[] = array("url" => "../group/group.php", "name" => get_lang('Groups'));
$interbreadcrumb[] = array("url" => "../group/group_space.php?gidReq=".$group_id, "name" => get_lang('GroupSpace').' '.$group_properties['name']);
Display::display_header($nameTools, 'Agenda');
} elseif (empty($origin) or $origin != 'learnpath') {
Display::display_header($nameTools, 'Agenda');
} else {
echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"".api_get_path(WEB_CODE_PATH)."css/default.css\"/>";
}
/*
TRACKING
*/
event_access_tool(TOOL_CALENDAR_EVENT);
/* SETTING SOME VARIABLES
*/
// Variable definitions
// Defining the shorts for the days. We use camelcase because these are arrays of language variables
$DaysShort = api_get_week_days_short();
// Defining the days of the week to allow translation of the days. We use camelcase because these are arrays of language variables
$DaysLong = api_get_week_days_long();
// Defining the months of the year to allow translation of the months. We use camelcase because these are arrays of language variables
$MonthsLong = api_get_months_long();
// Database table definitions
$TABLEAGENDA = Database::get_course_table(TABLE_AGENDA);
$TABLE_ITEM_PROPERTY = Database::get_course_table(TABLE_ITEM_PROPERTY);
$tbl_user = Database::get_main_table(TABLE_MAIN_USER);
$tbl_courseUser = Database::get_main_table(TABLE_MAIN_COURSE_USER);
$tbl_group = Database::get_course_table(TABLE_GROUP);
$tbl_groupUser = Database::get_course_table(TABLE_GROUP_USER);
$tbl_session_course_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
/* ACCESS RIGHTS */
// permission stuff - also used by loading from global in agenda.inc.php
$is_allowed_to_edit = api_is_allowed_to_edit(false, true) OR (api_get_course_setting('allow_user_edit_agenda') && !api_is_anonymous());
// Tool introduction
Display::display_introduction_section(TOOL_CALENDAR_EVENT);
/* MAIN SECTION */
//setting the default year and month
$select_year = '';
$select_month = '';
$select_day = '';
if (!empty($_GET['year'])) {
$select_year = (int) $_GET['year'];
}
if (!empty($_GET['month'])) {
$select_month = (int) $_GET['month'];
}
if (!empty($_GET['day'])) {
$select_day = (int) $_GET['day'];
}
$today = getdate();
if (empty($select_year)) {
$select_year = $today['year'];
}
if (empty($select_month)) {
$select_month = $today['mon'];
}
echo '<div class="actions">';
if (api_is_allowed_to_edit(false, true) OR
(api_get_course_setting('allow_user_edit_agenda') && !api_is_anonymous()) && api_is_allowed_to_session_edit(false, true) OR
GroupManager::user_has_access(api_get_user_id(), $group_id, GroupManager::GROUP_TOOL_CALENDAR) && GroupManager::is_tutor_of_group(api_get_user_id(), $group_id)
) {
echo display_courseadmin_links();
}
echo '</div>';
$event_id = isset($_REQUEST['id']) ? $_REQUEST['id'] : null;
$type = $event_type = isset($_GET['type']) ? $_GET['type'] : null;
if ($type == 'fromjs') {
$id_list = explode('_', $event_id);
$event_id = $id_list[1];
$event_type = $id_list[0];
}
if (!api_is_allowed_to_edit(null, true) && $event_type == 'course') {
api_not_allowed();
}
$course_info = api_get_course_info();
$agenda = new Agenda();
if (api_is_allowed_to_edit(false, true) OR
(api_get_course_setting('allow_user_edit_agenda') &&
!api_is_anonymous() &&
api_is_allowed_to_session_edit(false, true)) OR
GroupManager::user_has_access(api_get_user_id(), $group_id, GroupManager::GROUP_TOOL_CALENDAR) &&
GroupManager::is_tutor_of_group(api_get_user_id(), $group_id)
) {
switch ($action) {
case 'add':
if (isset($_POST['submit_event']) && $_POST['submit_event']) {
$event_start = (int) $_POST['fyear'].'-'.(int) $_POST['fmonth'].'-'.(int) $_POST['fday'].' '.(int) $_POST['fhour'].':'.(int) $_POST['fminute'].':00';
$event_stop = (int) $_POST['end_fyear'].'-'.(int) $_POST['end_fmonth'].'-'.(int) $_POST['end_fday'].' '.(int) $_POST['end_fhour'].':'.(int) $_POST['end_fminute'].':00';
$safe_title = Security::remove_XSS($_POST['title']);
$safe_file_comment = isset($_POST['file_comment']) ? Security::remove_XSS($_POST['file_comment']) : null;
if (isset($_POST['empty_end_date']) && $_POST['empty_end_date'] == 'on') {
$event_stop = '0000-00-00 00:00:00';
}
$agenda->type = 'course';
$sendEmail = isset($_POST['add_announcement']) ? true : false;
$eventId = $agenda->add_event($event_start, $event_stop, false, null, $safe_title, $_POST['content'], $_POST['selected_form'], $sendEmail);
if (!empty($_POST['repeat']) && !empty($eventId)) {
$end_y = intval($_POST['repeat_end_year']);
$end_m = intval($_POST['repeat_end_month']);
$end_d = intval($_POST['repeat_end_day']);
$end = mktime(23, 59, 59, $end_m, $end_d, $end_y);
$agenda->addRepeatedItem($eventId, $_POST['repeat_type'], $end, $_POST['selected_form']);
}
Display::display_confirmation_message(get_lang('AddSuccess'));
if ($sendEmail) {
Display::display_confirmation_message(get_lang('AdditionalMailWasSentToSelectedUsers'));
}
} else {
show_add_form();
}
break;
case "announce":
//copying the agenda item into an announcement
if (!(api_is_course_coach() && !api_is_element_in_the_session(TOOL_AGENDA, $event_id))) {
// a coach can only delete an element belonging to his session
$ann_id = store_agenda_item_as_announcement($event_id);
$tool_group_link = (isset($_SESSION['toolgroup']) ? '&toolgroup='.$_SESSION['toolgroup'] : '');
Display::display_normal_message(get_lang('CopiedAsAnnouncement').'&nbsp;<a href="../announcements/announcements.php?id='.$ann_id.$tool_group_link.'">'.get_lang('NewAnnouncement').'</a>', false);
}
break;
case 'importical':
if (isset($_POST['ical_submit'])) {
$ical_name = $_FILES['ical_import']['name'];
$ical_type = $_FILES['ical_import']['type'];
$ext = substr($ical_name, (strrpos($ical_name, ".") + 1));
//$ical_type === 'text/calendar'
if ($ext === 'ics' || $ext === 'ical' || $ext === 'icalendar' || $ext === 'ifb') {
$agenda_result = agenda_import_ical($course_info, $_FILES['ical_import']);
$is_ical = true;
} else {
$is_ical = false;
}
if (!$is_ical) {
Display::display_error_message(get_lang('IsNotiCalFormatFile'));
display_ical_import_form();
break;
} else {
Display::display_confirmation_message(get_lang('AddSuccess'));
echo $agenda_result;
}
} else {
display_ical_import_form();
}
break;
case 'edit':
// a coach can only delete an element belonging to his session
if ($_POST['submit_event']) {
store_edited_agenda_item($event_id, $_REQUEST['id_attach'], $_REQUEST['file_comment']);
$action = 'view';
} else {
show_add_form($event_id, $event_type);
}
break;
case "delete":
if (!(api_is_course_coach() && !api_is_element_in_the_session(TOOL_AGENDA, $event_id) )) {
// a coach can only delete an element belonging to his session
delete_agenda_item($event_id);
$action = 'view';
}
break;
case "showhide":
if (!(api_is_course_coach() && !api_is_element_in_the_session(TOOL_AGENDA, $event_id))) {
// a coach can only delete an element belonging to his session
showhide_agenda_item($event_id);
$action = 'view';
}
if (!empty($_GET['agenda_id'])) {
display_one_agenda_item($_GET['agenda_id']);
}
break;
case "delete_attach": //delete attachment file
$id_attach = $_GET['id_attach'];
if (!empty($id_attach)) {
delete_attachment_file($id_attach);
$action = 'view';
}
break;
}
}
// The footer is displayed only if we are not in the learnpath
if ($origin != 'learnpath') {
Display::display_footer();
}