chamilo / chamilo-lms

    $resultAnonymous = Database::query($sql);

    $rowAnonymous = Database::fetch_array($resultAnonymous, 'ASSOC');

    // If is anonymous and is not allowed to take the survey to anonymous users, forbid access:

    if (!isset($rowAnonymous['anonymous']) ||

        ($rowAnonymous['anonymous'] == 0 && api_is_anonymous()) ||

        count($rowAnonymous) == 0

    ) {

        api_not_allowed(true);

    }

    // If is anonymous and it is allowed to take the survey as anonymous, mark survey as anonymous.

}

if ($action == 'login_as') {

    $check = Security::check_token('get');

    if (isset($_GET['user_id']) && $check) {

        $result = loginUser($_GET['user_id']);

        if ($result == false) {

            api_not_allowed(true);

        }

    }

    Security::clear_token();

}

function api_block_anonymous_users($printHeaders = true)

{

    $user = api_get_user_info();

    if (!(isset($user['user_id']) && $user['user_id']) || api_is_anonymous($user['user_id'], true)) {

        api_not_allowed($printHeaders);

        return false;

    }

    return true;

}