chamilo/chamilo-lms

<?php

/* For licensing terms, see /license.txt */

use Chamilo\CoreBundle\Component\Utils\ActionIcon;

$cidReset = true;

require_once __DIR__.'/../inc/global.inc.php';

$tbl_user = Database::get_main_table(TABLE_MAIN_USER);
$tbl_course = Database::get_main_table(TABLE_MAIN_COURSE);
$tbl_session = Database::get_main_table(TABLE_MAIN_SESSION);
$tbl_session_rel_course = Database::get_main_table(TABLE_MAIN_SESSION_COURSE);
$tbl_session_rel_user = Database::get_main_table(TABLE_MAIN_SESSION_USER);
$tbl_session_rel_course_rel_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);

$id_session = isset($_GET['id_session']) ? (int) $_GET['id_session'] : 0;
$session = api_get_session_entity($id_session);
SessionManager::protectSession($session);

if (empty($id_session)) {
    api_not_allowed();
}

$course_code = Database::escape_string(trim($_GET['course_code']));
$courseInfo = api_get_course_info($course_code);
$courseId = $courseInfo['real_id'];

$page = isset($_GET['page']) ? (int) $_GET['page'] : null;
$action = isset($_REQUEST['action']) ? $_REQUEST['action'] : null;
$default_sort = api_sort_by_first_name() ? 'firstname' : 'lastname';
$sort = isset($_GET['sort']) && in_array($_GET['sort'], ['lastname', 'firstname', 'username'])
    ? $_GET['sort']
    : $default_sort;
$idChecked = isset($_GET['idChecked']) && is_array($_GET['idChecked'])
    ? $_GET['idChecked']
    : (isset($_POST['idChecked'])
    && is_array($_POST['idChecked']) ? $_POST['idChecked'] : null);
$direction = isset($_GET['direction']) && in_array($_GET['direction'], ['desc', 'asc'])
    ? $_GET['direction']
    : 'desc';

if (is_array($idChecked)) {
    $my_temp = [];
    foreach ($idChecked as $id) {
        // forcing the intval
        $my_temp[] = (int) $id;
    }
    $idChecked = $my_temp;
}

$sql = "SELECT s.title, c.title
        FROM $tbl_session_rel_course src
        INNER JOIN $tbl_session s ON s.id = src.session_id
        INNER JOIN $tbl_course c ON c.id = src.c_id
        WHERE src.session_id='$id_session' AND src.c_id='$courseId' ";

$result = Database::query($sql);
if (!list($session_name, $course_title) = Database::fetch_row($result)) {
    header('Location: session_course_list.php?id_session='.$id_session);
    exit();
}

switch ($action) {
    case 'delete':
        if (is_array($idChecked) && count($idChecked) > 0) {
            foreach ($idChecked as $userId) {
                SessionManager::unSubscribeUserFromCourseSession($userId, $courseId, $id_session);
            }
        } else {
            SessionManager::unSubscribeUserFromCourseSession($idChecked, $courseId, $id_session);
        }
        header('Location: '.api_get_self()
            .'?id_session='.$id_session.'&course_code='.urlencode($course_code).'&sort='.$sort);
        exit();
        break;
    case 'add':
        SessionManager::subscribe_users_to_session_course($idChecked, $id_session, $course_code);
        header('Location: '.api_get_self()
            .'?id_session='.$id_session.'&course_code='.urlencode($course_code).'&sort='.$sort);
        exit;
        break;
}

$limit = 20;
$from = $page * $limit;
$is_western_name_order = api_is_western_name_order();

$urlTable = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
$urlId = api_get_current_access_url_id();

$sql = "
    SELECT DISTINCT u.id as user_id,"
        .($is_western_name_order ? 'u.firstname, u.lastname' : 'u.lastname, u.firstname')
        .", u.username, scru.user_id as is_subscribed
    FROM $tbl_session_rel_user s
    INNER JOIN $tbl_user u
    ON (u.id = s.user_id)
    INNER JOIN $urlTable url
    ON (url.user_id = u.id)
    LEFT JOIN $tbl_session_rel_course_rel_user scru
        ON (s.session_id = scru.session_id AND s.user_id = scru.user_id AND scru.c_id = $courseId)
    WHERE
        s.session_id = $id_session AND
        url.access_url_id = $urlId
    ORDER BY `$sort` $direction
    LIMIT $from,".($limit + 1);

if ('desc' === $direction) {
    $direction = 'asc';
} else {
    $direction = 'desc';
}

$result = Database::query($sql);
$users = Database::store_result($result);
$nbr_results = count($users);
$tool_name = get_lang('Session').': '.$session_name.' - '.get_lang('Course').': '.$course_title;

$interbreadcrumb[] = ['url' => 'session_list.php', 'name' => get_lang('Session list')];
$interbreadcrumb[] = [
    'url' => "resume_session.php?id_session=".$id_session,
    'name' => get_lang('Session overview'),
];

Display::display_header($tool_name);
echo Display::page_header($tool_name);
?>
    <form method="post"
          action="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&sort=<?php echo $sort; ?>"
          onsubmit="javascript:if(!confirm('<?php echo get_lang('Please confirm your choice'); ?>')) return false;">
        <div align="right">
            <?php
            if ($page) {
                ?>
                <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&page=<?php echo $page
                    - 1; ?>&sort=<?php echo $sort; ?>"><?php echo get_lang('Previous'); ?></a>
                <?php
            } else {
                echo get_lang('Previous');
            }
            ?>
            |
            <?php
            if ($nbr_results > $limit) {
                ?>
                <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&page=<?php echo $page
                    + 1; ?>&sort=<?php echo $sort; ?>"><?php echo get_lang('Next'); ?></a>
                <?php
            } else {
                echo get_lang('Next');
            }
            ?>
        </div>
        <br/>
        <table class="data_table" width="100%">
            <tr>
                <th>&nbsp;</th>
                <?php if ($is_western_name_order) {
                ?>
                    <th>
                        <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&sort=firstname&direction=<?php echo urlencode($direction); ?>">
                            <?php echo get_lang('First name'); ?></a>
                    </th>
                    <th>
                        <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&sort=lastname&direction=<?php echo urlencode($direction); ?>">
                            <?php echo get_lang('Last name'); ?></a>
                    </th>
                <?php
            } else {
                ?>
                    <th>
                        <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&sort=lastname&direction=<?php echo urlencode($direction); ?>">
                            <?php echo get_lang('Last name'); ?></a>
                    </th>
                    <th>
                        <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&sort=firstname&direction=<?php echo urlencode($direction); ?>">
                            <?php echo get_lang('First name'); ?></a>
                    </th>
                <?php
            } ?>
                <th>
                    <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&sort=username&direction=<?php echo urlencode($direction); ?>">
                        <?php echo get_lang('Login'); ?></a>
                </th>
                <th><?php echo get_lang('Detail'); ?></th>
            </tr>
            <?php
            $i = 0;
            foreach ($users as $key => $enreg) {
                if ($key == $limit) {
                    break;
                } ?>
                <tr class="<?php echo $i ? 'row_odd' : 'row_even'; ?>">
                    <td><input type="checkbox" name="idChecked[]" value="<?php echo $enreg['user_id']; ?>"></td>
                    <?php if ($is_western_name_order) {
                    ?>
                        <td><?php echo api_htmlentities($enreg['firstname'], ENT_QUOTES); ?></td>
                        <td><?php echo api_htmlentities($enreg['lastname'], ENT_QUOTES); ?></td>
                    <?php
                } else {
                    ?>
                        <td><?php echo api_htmlentities($enreg['lastname'], ENT_QUOTES); ?></td>
                        <td><?php echo api_htmlentities($enreg['firstname'], ENT_QUOTES); ?></td>
                    <?php
                } ?>
                    <td><?php echo api_htmlentities($enreg['username'], ENT_QUOTES); ?></td>
                    <td>
                        <?php if ($enreg['is_subscribed']) {
                    ?>
                            <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&sort=<?php echo $sort; ?>&action=delete&idChecked[]=<?php echo $enreg['user_id']; ?>"
                               onclick="javascript:if(!confirm('<?php echo get_lang('Please confirm your choice'); ?>')) return false;">
                                <?php echo Display::getMdiIcon(ActionIcon::DELETE, 'ch-tool-icon', null, ICON_SIZE_SMALL, get_lang('Delete')); ?>
                            </a>
                        <?php
                } else {
                    ?>
                            <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&sort=<?php echo $sort; ?>&action=add&idChecked[]=<?php echo $enreg['user_id']; ?>"
                               onclick="javascript:if(!confirm('<?php echo get_lang('Please confirm your choice'); ?>')) return false;">
                                <?php echo Display::getMdiIcon(ActionIcon::ADD, 'ch-tool-icon', null, ICON_SIZE_SMALL, get_lang('Add')); ?>
                            </a>
                        <?php
                } ?>

                    </td>
                </tr>
                <?php
                $i = $i ? 0 : 1;
            }
            unset($users);
            ?>
        </table>
        <br/>
        <div align="left">
            <?php
            if ($page) {
                ?>
                <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&page=<?php echo $page
                    - 1; ?>&sort=<?php echo $sort; ?>"><?php echo get_lang('Previous'); ?></a>
                <?php
            } else {
                echo get_lang('Previous');
            }
            ?>
            |
            <?php
            if ($nbr_results > $limit) {
                ?>
                <a href="<?php echo api_get_self(); ?>?id_session=<?php echo $id_session; ?>&course_code=<?php echo urlencode($course_code); ?>&page=<?php echo $page
                    + 1; ?>&sort=<?php echo $sort; ?>"><?php echo get_lang('Next'); ?></a>
                <?php
            } else {
                echo get_lang('Next');
            }
            ?>
        </div>
        <br/>
        <select name="action">
            <option value="delete"><?php echo get_lang('Unsubscribe selected users from session'); ?></option>
            <option value="add"><?php echo get_lang('Add a user'); ?></option>
        </select>
        <button class="save" type="submit"> <?php echo get_lang('Validate'); ?></button>
    </form>
<?php
Display::display_footer();