chamilo / chamilo-lms

            if (!empty($group_id) && !empty($relation_type)) {

                $sql = "SELECT user_id, username, lastname, firstname FROM $tbl_user user

                        WHERE ".(api_sort_by_first_name() ? 'firstname' : 'lastname')." LIKE '$needle%' AND user_id<>'$user_anonymous' $without_user_id $order_clause ";

                if (api_is_multiple_url_enabled()) {

                    $access_url_id = api_get_current_access_url_id();

                    if ($access_url_id != -1) {

                        $sql = "SELECT user.user_id, username, lastname, firstname

                                FROM $tbl_user user

                                INNER JOIN $tbl_user_rel_access_url url_user ON (url_user.user_id=user.user_id)

                                WHERE

                                    access_url_id = '$access_url_id' AND

                                    ".(api_sort_by_first_name() ? 'firstname' : 'lastname')." LIKE '$needle%' AND

                                    user.user_id<>'$user_anonymous' $without_user_id $order_clause ";

                    }

                }

                $rs_multiple = Database::query($sql);

                $return_origin .= '<select id="origin_users" name="nosessionUsersList[]" multiple="multiple" size="15" style="width:360px;">';

            WHERE ".(api_sort_by_first_name() ? 'firstname' : 'lastname')." LIKE '$needle%' AND

            user_id<>'$user_anonymous' $without_user_id ";

    if (api_is_multiple_url_enabled()) {

        $access_url_id = api_get_current_access_url_id();

        if ($access_url_id != -1) {

            $sql = "SELECT count(user.user_id) FROM $tbl_user user

                    INNER JOIN $tbl_user_rel_access_url url_user ON (url_user.user_id=user.user_id)

                    WHERE

                        access_url_id = '$access_url_id' AND

                        ".(api_sort_by_first_name() ? 'firstname' : 'lastname')." LIKE '$needle%' AND

                        user.user_id<>'$user_anonymous' $without_user_id ";

        }

    }

    $rs_count  = Database::query($sql);

    $row_count = 0;

    if (Database::num_rows($rs_count)) {

        $sql = "SELECT user_id, username, lastname, firstname FROM $tbl_user user

                WHERE ".(api_sort_by_first_name() ? 'firstname' : 'lastname')." LIKE '$needle%' AND user_id<>'$user_anonymous' $without_user_id $order_clause ";

        if (api_is_multiple_url_enabled()) {

            $access_url_id = api_get_current_access_url_id();

            if ($access_url_id != -1) {

                $sql = "SELECT user.user_id, username, lastname, firstname FROM $tbl_user user

                        INNER JOIN $tbl_user_rel_access_url url_user ON (url_user.user_id=user.user_id)

                        WHERE access_url_id = '$access_url_id'

                        AND ".(api_sort_by_first_name() ? 'firstname' : 'lastname')." LIKE '$needle%'

                        AND user.user_id<>'$user_anonymous' $without_user_id $order_clause ";

            }

        }

        $rs_origin_list = Database::query($sql);

        while ($row_origin_list = Database::fetch_array($rs_origin_list)) {

            $nosessionUsersList[$row_origin_list['user_id']] = $row_origin_list;