File Source for view

<?php
/**
* Sloodle user profile page.
*
* Shows all Sloodle avatar entries associated with a particular user's Moodle account.
*
* @package sloodle
* @copyright Copyright (c) 2008 Sloodle (various contributors)
* @license http://www.gnu.org/licenses/gpl-3.0.html GNU GPL v3
*
* @contributor Peter R. Bloomfield
*
*/
//
// This script will display Sloodle-related user information about a particular Moodle user.
// Notably, this will include avatar data (i.e. name and UUID).
// In the case of a user viewing their own profile, or an admin viewing anybody's profile,
// there will be the ability to unregister an avatar from the Moodle account, and to
// delete allocated LoginZone positions.
//
//
// This script requires the following paramter:
// id = the ID number of a Moodle user, 'all' for all Sloodle entries, 'search' to search avatars by name/uuid, or 'pending' to list pending (unlinked) avatars
//
// The following parameter should be specified when a Sloodle entry is to be deleted:
// delete = ID number the Sloodle entry to be deleted
// The following parameter should be used when the user confirms or rejects deletion
// confirm = "Yes" (according to a localization table) if confirmed, unspecified if not yet confirmed, or anything else if cancelled.
//
// Optionally, the following parameter can also be specified. It defaults to the site if unspecified:
// course = ID of a Moodle course
//
// In order to search for avatars, the following parameter is required:
// search = a term to search for (avatar name/uuid)
/** Sloodle/Moodle configuration. */
require_once('../sl_config.php');
/** Sloodle Session code. */
require_once(SLOODLE_LIBROOT.'/sloodle_session.php');
/** General Sloodle functionality. */
require_once(SLOODLE_LIBROOT.'/general.php');
// Enforce login
require_login();
// Refuse guest access
if (isguestuser()) {
error(get_string('noguestaccess', 'sloodle'));
exit;
}
// Fetch the parameters
$moodleuserid = required_param('id', PARAM_RAW);
$deletesloodleentry = optional_param('delete', null, PARAM_INT);
$userconfirmed = optional_param('confirm', null, PARAM_RAW);
$courseid = optional_param('course', 1, PARAM_INT);
$searchstr = addslashes(optional_param('search', '', PARAM_TEXT));
$deleteuserobjects = optional_param('deleteuserobjects', null, PARAM_TEXT);
// Were any of the delete parameters specified in HTTP (e.g. from a form)?
if (!empty($deleteuserobjects) || !empty($deletesloodleentry) || !empty($userconfirmed)) {
// Convert them to session parameters
if (!empty($deleteuserobjects)) $_SESSION['deleteuserobjects'] = $deleteuserobjects;
if (!empty($deletesloodleentry)) $_SESSION['deletesloodleentry'] = $deletesloodleentry;
if (!empty($userconfirmed)) $_SESSION['userconfirmed'] = $userconfirmed;
// Construct our full URL, with GET parameters
$url = sloodle_get_web_path();
$url .= "?id=$moodleuserid";
if (!empty($courseid)) $url .= "&course=$courseid";
if (!empty($searchstr)) $url .= "&search=$searchstr";
// Reload this page without those parameters
redirect($url);
exit();
}
// Extract data from our session parameters
if (isset($_SESSION['deleteuserobjects'])) {
$deleteuserobjects = $_SESSION['deleteuserobjects'];
unset($_SESSION['deleteuserobjects']);
}
if (isset($_SESSION['deletesloodleentry'])) {
$deletesloodleentry = $_SESSION['deletesloodleentry'];
unset($_SESSION['deletesloodleentry']);
}
if (isset($_SESSION['userconfirmed'])) {
$userconfirmed = $_SESSION['userconfirmed'];
unset($_SESSION['userconfirmed']);
}
// Check the mode: all, search, pending, or single
$allentries = false;
$searchentries = false;
if (strcasecmp($moodleuserid, 'all') == 0) {
$allentries = true;
$moodleuserid = -1;
} else if (strcasecmp($moodleuserid, 'search') == 0) {
$searchentries = true;
$moodleuserid = -1;
} else {
// Make sure the Moodle user ID is an integer
$moodleuserid = (integer)$moodleuserid;
if ($moodleuserid <= 0) error(ucwords(get_string('unknownuser', 'sloodle')));
}
// Get the name of the course
$courserecord = get_record('course', 'id', $courseid);
if (!$courserecord) error(get_string('invalidcourseid','sloodle'));
$courseurl = $CFG->wwwroot.'/course/view.php?id='.$courseid;
$courseshortname = $courserecord->shortname;
$coursefullname = $courserecord->fullname;
// We need to establish some permissions here
$course_context = get_context_instance(CONTEXT_COURSE, $courseid);
$system_context = get_context_instance(CONTEXT_SYSTEM);
$viewingself = false;
$canedit = false;
// Is the user trying to view their own profile?
if ($moodleuserid == $USER->id) {
$viewingself = true;
$canedit = true;
} else {
// Does the user have permission to edit other peoples' profiles in the system and/or course?
// If not, can they at least view others' profiles?
if (has_capability('moodle/user:editprofile', $system_context) || has_capability('moodle/user:editprofile', $course_context)) {
// User can edit profiles
$canedit = true;
} else if (!(has_capability('moodle/user:viewdetails', $system_context) || has_capability('moodle/user:viewdetails', $course_context))) {
// Cannot view profiles
error(get_string('insufficientpermissiontoviewpage','sloodle'));
exit();
}
}
// This value will indicate if we are currently confirming a deletion
$confirmingdeletion = false;
// These are localization strings used by the deletion confirmation form
$form_yes = get_string('Yes', 'sloodle');
$form_no = get_string('No', 'sloodle');
// Are we deleting a Sloodle entry?
$deletemsg = '';
if ($deletesloodleentry != NULL) {
// Determine if the user is allowed to delete this entry
$allowdelete = $canedit; // Just go with the editing ability for now... will maybe change this later. -PRB
// Has the deletion been confirmed?
if ($userconfirmed == $form_yes) {
if (record_exists('sloodle_users', 'id', $deletesloodleentry)) {
// Is the user allowed to delete this?
if ($allowdelete) {
// Make sure it's a valid ID
if (is_int($deletesloodleentry) && $deletesloodleentry > 0) {
// Attempt to delete the entry
$deleteresult = delete_records('sloodle_users', 'id', $deletesloodleentry);
if ($deleteresult === FALSE) {
$deletemsg = get_string('deletionfailed', 'sloodle').': '.get_string('databasequeryfailed', 'sloodle');
} else {
$deletemsg = get_string('deletionsuccessful', 'sloodle');
}
} else {
$deletemsg = get_string('deletionfailed', 'sloodle').': '.get_string('invalidid', 'sloodle');
}
} else {
$deletemsg = get_string('deletionfailed', 'sloodle').': '.get_string('insufficientpermission', 'sloodle');
}
}
} else if (is_null($userconfirmed)) {
// User needs to confirm deletion
$confirmingdeletion = true;
$form_url = SLOODLE_WWWROOT."/view/view_user.php";
$deletemsg .= '<h3>'.get_string('delete','sloodle').' '.get_string('ID','sloodle').': '.$deletesloodleentry.'<br/>'.get_string('confirmdelete','sloodle').'</h3>';
$deletemsg .= '<form action="'.$form_url.'" method="get">';
if ($allentries) $deletemsg .= '<input type="hidden" name="id" value="all" />';
else if ($searchentries) $deletemsg .= '<input type="hidden" name="id" value="search" /><input type="hidden" name="search" value="'.$searchstr.'" />';
else $deletemsg .= '<input type="hidden" name="id" value="'.$moodleuserid.'" />';
if (!is_null($courseid)) $deletemsg .= '<input type="hidden" name="course" value="'.$courseid.'" />';
$deletemsg .= '<input type="hidden" name="delete" value="'.$deletesloodleentry.'" />';
$deletemsg .= '<input style="color:green;" type="submit" value="'.$form_yes.'" name="confirm" />  ';
$deletemsg .= '<input style="color:red;" type="submit" value="'.$form_no.'" name="confirm" />';
$deletemsg .= '</form><br/>';
} else {
$deletemsg = get_string('deletecancelled','sloodle');
}
}
// Are we getting all entries, searching, or just viewing one?
if ($allentries) {
// All entries
$moodleuserdata = null;
// Fetch a list of all Sloodle user entries
$sloodleentries = get_records('sloodle_users');
} else if ($searchentries && !empty($searchstr)) {
// Search entries
$moodleuserdata = null;
$LIKE = sql_ilike();
$sloodleentries = get_records_select('sloodle_users', "avname $LIKE '%$searchstr%' OR uuid $LIKE '%$searchstr%'", 'avname');
} else {
// Attempt to fetch the Moodle user data
$moodleuserdata = get_record('user', 'id', $moodleuserid);
// Fetch a list of all Sloodle user entries associated with this Moodle account
$sloodleentries = get_records('sloodle_users', 'userid', $moodleuserid);
}
// Post-process the query results
if ($sloodleentries === FALSE) $sloodleentries = array();
$numsloodleentries = count($sloodleentries);
// Get the localization strings
$strsloodle = get_string('modulename', 'sloodle');
$strsloodles = get_string('modulenameplural', 'sloodle');
$strunknown = get_string('unknown', 'sloodle');
// Construct the breadcrumb links
$navigation = "";
if ($courseid != 1) $navigation .= "<a href=\"$courseurl\">$courseshortname</a> -> ";
$navigation .= "<a href=\"".SLOODLE_WWWROOT."/view/view_users.php?course=$courseid\">".get_string('sloodleuserprofiles', 'sloodle') . '</a> -> ';
if ($moodleuserid > 0) {
if ($moodleuserdata) $navigation .= $moodleuserdata->firstname.' '.$moodleuserdata->lastname;
else $navigation .= get_string('unknownuser','sloodle');
} else {
$navigation.= get_string('allentries', 'sloodle');
}
// Display the header
print_header(get_string('sloodleuserprofile', 'sloodle'), get_string('sloodleuserprofile','sloodle'), $navigation, "", "", true);
echo '<div style="text-align:center;padding-left:8px;padding-right:8px;">';
// Display the deletion message if we have one
if (!empty($deletemsg)) {
echo '<div style="text-align:center; padding:3px; border:solid 1px #aaaaaa; background-color:#dfdfdf; font-weight:bold; color:#dd0000;">';
echo $deletemsg;
echo '</div>';
}
echo '<br/>';
// Are we dealing with an actual Moodle account
if ($moodleuserid > 0) {
echo '<p>';
// Yes - do we have an account?
if ($moodleuserdata) {
// Yes - display the name and other general info
echo '<span style="font-size:18pt; font-weight:bold;">'. $moodleuserdata->firstname .' '. $moodleuserdata->lastname.'</span>';
echo " <span style=\"font-size:10pt; color:#444444; font-style:italic;\">(<a href=\"{$CFG->wwwroot}/user/view.php?id=$moodleuserid&course=$courseid\">".get_string('moodleuserprofile','sloodle')."</a>)</span><br/>";
} else {
echo get_string('moodleusernotfound', 'sloodle').'<br/>';
}
echo "<br/><br/>\n";
// Check for issues such as no entries, or multiple entries
if ($numsloodleentries == 0) {
echo '<span style="color:red; font-weight:bold;">';
print_string('noentries', 'sloodle');
echo '</span>';
// If it is the profile owner who is viewing this, then offer a link to the loginzone entry page
if ($moodleuserid == $USER->id) {
echo "<br/><br/><p style=\"padding:8px; border:solid 1px #555555;\"><a href=\"{$CFG->wwwroot}/mod/sloodle/classroom/loginzone.php?id=$courseid\">";
print_string('getnewloginzoneallocation', 'sloodle');
echo '</a></p>';
}
} else if ($numsloodleentries > 1) {
echo '<span style="color:red; font-weight:bold; border:solid 2px #990000; padding:4px; background-color:white;">';
print_string('multipleentries', 'sloodle');
helpbutton('multiple_entries', get_string('help:multipleentries', 'sloodle'), 'sloodle', true, false);
echo '</span>';
}
echo '</p>';
} else if ($searchentries) {
// Searching for users
echo '<span style="font-size:18pt; font-weight:bold; ">'.get_string('avatarsearch','sloodle').": \"$searchstr\"</span><br/><br/>";
// Check to see if there are no entries
if ($numsloodleentries == 0) {
echo '<span style="color:red; font-weight:bold;">';
print_string('noentries', 'sloodle');
echo '</span>';
}
} else {
// Assume we're listing all entries - explain what this means
echo '<span style="font-size:18pt; font-weight:bold; ">'.get_string('allentries','sloodle').'</span><br/>';
echo '<center><p style="width:550px; text-align:left;">'.get_string('allentries:info', 'sloodle').'</p></center>';
// Check to see if there are no entries
if ($numsloodleentries == 0) {
echo '<span style="color:red; font-weight:bold;">';
print_string('noentries', 'sloodle');
echo '</span>';
}
}
// Construct and display a table of Sloodle entries
if ($numsloodleentries > 0) {
$sloodletable = new stdClass();
$sloodletable->head = array( get_string('ID', 'sloodle'),
get_string('linkedtomoodleusernum', 'sloodle'),
get_string('avatarname', 'sloodle'),
get_string('avataruuid', 'sloodle'),
get_string('lastactive', 'sloodle'),
''
);
$sloodletable->align = array('center', 'center', 'left', 'left', 'left', 'left');
$sloodletable->size = array('5%', '5%', '27%', '35%', '20%', '8%');
$deletestr = get_string('delete', 'sloodle');
// We want to build a list of Sloodle user objects too
$userobjects = array();
// Create a dummy Sloodle Session
$sloodle = new SloodleSession(false);
// Go through each Sloodle entry for this user
foreach ($sloodleentries as $su) {
// Add this user's Sloodle objects (if we're not in 'all' or search modes)
if (!$allentries && !$searchentries) {
if ($sloodle->user->load_avatar($su->uuid, '')) {
$userobjects += $sloodle->user->get_user_objects();
}
}
// Is this entry being deleted (i.e. is the user being asked to confirm its deletion)?
$deletingcurrent = ($confirmingdeletion == true && $su->id == $deletesloodleentry);
// Reset the line's content
$line = array();
// Add the ID to the line
if ($deletingcurrent) $line[] = '<span style="color:red; font-weight:bold;">'.$su->id.'</span>';
else $line[] = $su->id;
// Add the Moodle user ID and link
$line[] = "<a href=\"{$CFG->wwwroot}/user/view.php?id={$su->userid}&course=$courseid\">{$su->userid}</a>";
// Fetch the avatar name and UUID
$curavname = '-';
$curuuid = '-';
if (!empty($su->avname)) $curavname = $su->avname;
if (!empty($su->uuid)) $curuuid = $su->uuid;
// If we are in all or searching mode, add a link to the Sloodle user profile
if ($allentries || $searchentries) {
$curavname .= " <span style=\"font-size:10pt; color:#444444; font-style:italic;\">(<a href=\"{$CFG->wwwroot}/mod/sloodle/view/view_user.php?id={$su->userid}&course=$courseid\">".get_string('sloodleuserprofile','sloodle')."</a>)</span>";
}
// Add them to the table
$line[] = $curavname;
$line[] = $curuuid;
// Do we know when the avatar was last active
if (!empty($su->lastactive)) {
// Calculate the time difference
$difference = time() - (int)$su->lastactive;
if ($difference < 0) $difference = 0;
// Add it to the table
$line[] = sloodle_describe_approx_time($difference, true);
} else {
$line[] = '('.$strunknown.')';
}
// Display the "delete" action
if ($canedit) {
if ($allentries) $deleteurl = $CFG->wwwroot."/mod/sloodle/view/view_user.php?id=all&course=$courseid&delete={$su->id}";
else if ($searchentries) $deleteurl = $CFG->wwwroot."/mod/sloodle/view/view_user.php?id=search&course=$courseid&search=$searchstr&delete={$su->id}";
else $deleteurl = $CFG->wwwroot."/mod/sloodle/view/view_user.php?id=$moodleuserid&course=$courseid&delete={$su->id}";
$deletecaption = get_string('clicktodeleteentry','sloodle');
$line[] = "<a href=\"$deleteurl\" title=\"$deletecaption\">$deletestr</a>";
} else {
$line[] = '<span style="color:#777777;" title="'.get_string('nodeletepermission','sloodle').'">'.get_string('delete','sloodle').'</span>';
}
// Add the line to the table
$sloodletable->data[] = $line;
}
// Display the table
print_table($sloodletable);
// Now display the section of user-authorized objects
if (!$allentries && !$searchentries) {
echo '<br><h3>'.get_string('userobjects','sloodle');
helpbutton('user_objects', get_string('userobjects','sloodle'), 'sloodle', true, false, '', false);
echo "</h3>\n";
// Have we been asked to delete the user objects?
if ($deleteuserobjects == 'true') {
// Yes - display a confirmation form
echo '<h4 style="color:red; font-weight:bold;">'.get_string('confirmdeleteuserobjects','sloodle').'</h4>';
echo '<table style="border-style:none; margin-left:auto; margin-right:auto;"><tr><td>';
echo '<form action="view_user.php" method="GET">';
echo '<input type="hidden" name="id" value="'.$moodleuserid.'" >';
if (!empty($courseid)) echo '<input type="hidden" name="course" value="'.$courseid.'" >';
echo '<input type="hidden" name="deleteuserobjects" value="confirm" >';
echo '<input type="submit" value="'.get_string('yes').'" title="'.get_string('deleteuserobjects:help','sloodle').'" >';
echo '</form>';
echo '</td><td>';
echo '<form action="view_user.php" method="GET">';
echo '<input type="hidden" name="id" value="'.$moodleuserid.'" >';
if (!empty($courseid)) echo '<input type="hidden" name="course" value="'.$courseid.'" >';
echo '<input type="submit" value="'.get_string('no').'" >';
echo '</form>';
echo '</td></tr></table><br>';
} else if ($deleteuserobjects == 'confirm') {
// Delete each one
$numdeleted = 0;
foreach ($userobjects as $obj) {
delete_records('sloodle_user_object', 'id', $obj->id);
$numdeleted++;
}
$userobjects = array();
echo get_string('numdeleted','sloodle').': '.$numdeleted.'<br><br>';
}
// Do we have any objects to display?
if (count($userobjects) > 0) {
// Yes - prepare the table
$sloodletable = new stdClass();
$sloodletable->head = array( get_string('ID', 'sloodle'),
get_string('avataruuid', 'sloodle'),
get_string('uuid', 'sloodle'),
get_string('name', 'sloodle'),
get_string('isauthorized', 'sloodle'),
get_string('lastused', 'sloodle')
);
$sloodletable->align = array('center', 'left', 'left', 'left', 'center', 'left');
//$sloodletable->size = array('5%', '5%', '27%', '35%', '20%', '8%');
// Store the current timestamp for consistency
$curtime = time();
// Go through each object
foreach ($userobjects as $obj) {
$line = array();
$line[] = $obj->id;
$line[] = $obj->avuuid;
$line[] = $obj->objuuid;
$line[] = $obj->objname;
if ($obj->authorized) $line[] = ucwords(get_string('yes'));
else $line[] = ucwords(get_string('no'));
$lastused = (int)$obj->timeupdated;
if ($lastused > 0) $line[] = sloodle_describe_approx_time($curtime - $lastused, true);
else $line[] = '('.get_string('unknown','sloodle').')';
$sloodletable->data[] = $line;
}
// Display the table
print_table($sloodletable);
// Display a button to delete all the Sloodle objects
if (empty($deleteuserobjects)) {
echo '<br><form action="view_user.php" method="GET">';
echo '<input type="hidden" name="id" value="'.$moodleuserid.'" >';
if (!empty($courseid)) echo '<input type="hidden" name="course" value="'.$courseid.'" >';
echo '<input type="hidden" name="deleteuserobjects" value="true" >';
echo '<input type="submit" value="'.get_string('deleteuserobjects','sloodle').'" title="'.get_string('deleteuserobjects:help','sloodle').'" >';
echo '</form><br>';
}
} else {
// No user objects
echo '<span style="color:red; font-weight:bold;">';
print_string('noentries', 'sloodle');
echo '</span>';
}
}
}
echo '</div>';
// Display the footer
print_footer();
?>

Documentation generated on Mon, 07 Jul 2008 12:33:30 +0100 by phpDocumentor 1.4.0

Source for file view_user.php