Passed
Pull Request — master (#5788)
by
unknown
07:17
created

api_get_setting()   D

Complexity

Conditions 23
Paths 22

Size

Total Lines 89
Code Lines 56

Duplication

Lines 0
Ratio 0 %

Importance

Changes 1
Bugs 0 Features 0
Metric Value
cc 23
eloc 56
c 1
b 0
f 0
nc 22
nop 3
dl 0
loc 89
rs 4.1666

How to fix   Long Method    Complexity   

Long Method

Small methods make your code easier to understand, in particular if combined with a good name. Besides, if your method is small, finding a good name is usually much easier.

For example, if you find yourself adding comments to a method's body, this is usually a good sign to extract the commented part to a new method, and use the comment as a starting point when coming up with a good name for this new method.

Commonly applied refactorings include:

1
<?php
2
3
/* For licensing terms, see /license.txt */
4
5
use Chamilo\CoreBundle\Entity\AccessUrl;
6
use Chamilo\CoreBundle\Entity\Course;
7
use Chamilo\CoreBundle\Entity\Language;
8
use Chamilo\CoreBundle\Entity\Session as SessionEntity;
9
use Chamilo\CoreBundle\Entity\SettingsCurrent;
10
use Chamilo\CoreBundle\Entity\User;
11
use Chamilo\CoreBundle\Entity\UserCourseCategory;
12
use Chamilo\CoreBundle\Exception\NotAllowedException;
13
use Chamilo\CoreBundle\Framework\Container;
14
use Chamilo\CoreBundle\ServiceHelper\AccessUrlHelper;
15
use Chamilo\CoreBundle\ServiceHelper\MailHelper;
16
use Chamilo\CoreBundle\ServiceHelper\PermissionServiceHelper;
17
use Chamilo\CoreBundle\ServiceHelper\ThemeHelper;
18
use Chamilo\CourseBundle\Entity\CGroup;
19
use Chamilo\CourseBundle\Entity\CLp;
20
use ChamiloSession as Session;
21
use Symfony\Bridge\Twig\Mime\TemplatedEmail;
22
use Symfony\Component\Finder\Finder;
23
use Symfony\Component\Mime\Address;
24
use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
25
use Symfony\Component\Security\Core\User\UserInterface;
26
use Symfony\Component\Validator\Constraints as Assert;
27
use ZipStream\Option\Archive;
28
use ZipStream\ZipStream;
29
use Chamilo\CoreBundle\Component\Utils\ActionIcon;
30
use Chamilo\CoreBundle\Component\Utils\ObjectIcon;
31
32
/**
33
 * This is a code library for Chamilo.
34
 * It is included by default in every Chamilo file (through including the global.inc.php)
35
 * This library is in process of being transferred to src/Chamilo/CoreBundle/Component/Utils/ChamiloApi.
36
 * Whenever a function is transferred to the ChamiloApi class, the places where it is used should include
37
 * the "use Chamilo\CoreBundle\Component\Utils\ChamiloApi;" statement.
38
 */
39
40
// PHP version requirement.
41
define('REQUIRED_PHP_VERSION', '8.2');
42
define('REQUIRED_MIN_MEMORY_LIMIT', '128');
43
define('REQUIRED_MIN_UPLOAD_MAX_FILESIZE', '10');
44
define('REQUIRED_MIN_POST_MAX_SIZE', '10');
45
46
// USER STATUS CONSTANTS
47
/** global status of a user: student */
48
define('STUDENT', 5);
49
/** global status of a user: course manager */
50
define('COURSEMANAGER', 1);
51
/** global status of a user: session admin */
52
define('SESSIONADMIN', 3);
53
/** global status of a user: human resources manager */
54
define('DRH', 4);
55
/** global status of a user: anonymous visitor */
56
define('ANONYMOUS', 6);
57
/** global status of a user: low security, necessary for inserting data from
58
 * the teacher through HTMLPurifier */
59
define('COURSEMANAGERLOWSECURITY', 10);
60
// Soft user status
61
define('PLATFORM_ADMIN', 11);
62
define('SESSION_COURSE_COACH', 12);
63
define('SESSION_GENERAL_COACH', 13);
64
define('COURSE_STUDENT', 14); //student subscribed in a course
65
define('SESSION_STUDENT', 15); //student subscribed in a session course
66
define('COURSE_TUTOR', 16); // student is tutor of a course (NOT in session)
67
define('STUDENT_BOSS', 17); // student is boss
68
define('INVITEE', 20);
69
define('HRM_REQUEST', 21); //HRM has request for vinculation with user
70
71
// COURSE VISIBILITY CONSTANTS
72
/** only visible for course admin */
73
define('COURSE_VISIBILITY_CLOSED', 0);
74
/** only visible for users registered in the course */
75
define('COURSE_VISIBILITY_REGISTERED', 1);
76
/** Open for all registered users on the platform */
77
define('COURSE_VISIBILITY_OPEN_PLATFORM', 2);
78
/** Open for the whole world */
79
define('COURSE_VISIBILITY_OPEN_WORLD', 3);
80
/** Invisible to all except admin */
81
define('COURSE_VISIBILITY_HIDDEN', 4);
82
83
define('COURSE_REQUEST_PENDING', 0);
84
define('COURSE_REQUEST_ACCEPTED', 1);
85
define('COURSE_REQUEST_REJECTED', 2);
86
define('DELETE_ACTION_ENABLED', false);
87
88
// EMAIL SENDING RECIPIENT CONSTANTS
89
define('SEND_EMAIL_EVERYONE', 1);
90
define('SEND_EMAIL_STUDENTS', 2);
91
define('SEND_EMAIL_TEACHERS', 3);
92
93
// SESSION VISIBILITY CONSTANTS
94
define('SESSION_VISIBLE_READ_ONLY', 1);
95
define('SESSION_VISIBLE', 2);
96
define('SESSION_INVISIBLE', 3); // not available
97
define('SESSION_AVAILABLE', 4);
98
99
define('SESSION_LINK_TARGET', '_self');
100
101
define('SUBSCRIBE_ALLOWED', 1);
102
define('SUBSCRIBE_NOT_ALLOWED', 0);
103
define('UNSUBSCRIBE_ALLOWED', 1);
104
define('UNSUBSCRIBE_NOT_ALLOWED', 0);
105
106
// SURVEY VISIBILITY CONSTANTS
107
define('SURVEY_VISIBLE_TUTOR', 0);
108
define('SURVEY_VISIBLE_TUTOR_STUDENT', 1);
109
define('SURVEY_VISIBLE_PUBLIC', 2);
110
111
// CONSTANTS defining all tools, using the english version
112
/* When you add a new tool you must add it into function api_get_tools_lists() too */
113
define('TOOL_DOCUMENT', 'document');
114
define('TOOL_LP_FINAL_ITEM', 'final_item');
115
define('TOOL_READOUT_TEXT', 'readout_text');
116
define('TOOL_THUMBNAIL', 'thumbnail');
117
define('TOOL_HOTPOTATOES', 'hotpotatoes');
118
define('TOOL_CALENDAR_EVENT', 'calendar_event');
119
define('TOOL_LINK', 'link');
120
define('TOOL_LINK_CATEGORY', 'link_category');
121
define('TOOL_COURSE_DESCRIPTION', 'course_description');
122
define('TOOL_SEARCH', 'search');
123
define('TOOL_LEARNPATH', 'learnpath');
124
define('TOOL_LEARNPATH_CATEGORY', 'learnpath_category');
125
define('TOOL_AGENDA', 'agenda');
126
define('TOOL_ANNOUNCEMENT', 'announcement');
127
define('TOOL_FORUM', 'forum');
128
define('TOOL_FORUM_CATEGORY', 'forum_category');
129
define('TOOL_FORUM_THREAD', 'forum_thread');
130
define('TOOL_FORUM_POST', 'forum_post');
131
define('TOOL_FORUM_ATTACH', 'forum_attachment');
132
define('TOOL_FORUM_THREAD_QUALIFY', 'forum_thread_qualify');
133
define('TOOL_THREAD', 'thread');
134
define('TOOL_POST', 'post');
135
define('TOOL_DROPBOX', 'dropbox');
136
define('TOOL_QUIZ', 'quiz');
137
define('TOOL_TEST_CATEGORY', 'test_category');
138
define('TOOL_USER', 'user');
139
define('TOOL_GROUP', 'group');
140
define('TOOL_BLOGS', 'blog_management');
141
define('TOOL_CHAT', 'chat');
142
define('TOOL_STUDENTPUBLICATION', 'student_publication');
143
define('TOOL_TRACKING', 'tracking');
144
define('TOOL_HOMEPAGE_LINK', 'homepage_link');
145
define('TOOL_COURSE_SETTING', 'course_setting');
146
define('TOOL_BACKUP', 'backup');
147
define('TOOL_COPY_COURSE_CONTENT', 'copy_course_content');
148
define('TOOL_RECYCLE_COURSE', 'recycle_course');
149
define('TOOL_COURSE_HOMEPAGE', 'course_homepage');
150
define('TOOL_COURSE_RIGHTS_OVERVIEW', 'course_rights');
151
define('TOOL_UPLOAD', 'file_upload');
152
define('TOOL_COURSE_MAINTENANCE', 'course_maintenance');
153
define('TOOL_SURVEY', 'survey');
154
//define('TOOL_WIKI', 'wiki');
155
define('TOOL_GLOSSARY', 'glossary');
156
define('TOOL_GRADEBOOK', 'gradebook');
157
define('TOOL_NOTEBOOK', 'notebook');
158
define('TOOL_ATTENDANCE', 'attendance');
159
define('TOOL_COURSE_PROGRESS', 'course_progress');
160
define('TOOL_PORTFOLIO', 'portfolio');
161
define('TOOL_PLAGIARISM', 'compilatio');
162
define('TOOL_XAPI', 'xapi');
163
164
// CONSTANTS defining Chamilo interface sections
165
define('SECTION_CAMPUS', 'mycampus');
166
define('SECTION_COURSES', 'mycourses');
167
define('SECTION_CATALOG', 'catalog');
168
define('SECTION_MYPROFILE', 'myprofile');
169
define('SECTION_MYAGENDA', 'myagenda');
170
define('SECTION_COURSE_ADMIN', 'course_admin');
171
define('SECTION_PLATFORM_ADMIN', 'platform_admin');
172
define('SECTION_MYGRADEBOOK', 'mygradebook');
173
define('SECTION_TRACKING', 'session_my_space');
174
define('SECTION_SOCIAL', 'social-network');
175
define('SECTION_DASHBOARD', 'dashboard');
176
define('SECTION_REPORTS', 'reports');
177
define('SECTION_GLOBAL', 'global');
178
define('SECTION_INCLUDE', 'include');
179
define('SECTION_CUSTOMPAGE', 'custompage');
180
181
// CONSTANT name for local authentication source
182
define('PLATFORM_AUTH_SOURCE', 'platform');
183
define('CAS_AUTH_SOURCE', 'cas');
184
define('LDAP_AUTH_SOURCE', 'extldap');
185
186
// event logs types
187
define('LOG_COURSE_DELETE', 'course_deleted');
188
define('LOG_COURSE_CREATE', 'course_created');
189
define('LOG_COURSE_SETTINGS_CHANGED', 'course_settings_changed');
190
191
// @todo replace 'soc_gr' with social_group
192
define('LOG_GROUP_PORTAL_CREATED', 'soc_gr_created');
193
define('LOG_GROUP_PORTAL_UPDATED', 'soc_gr_updated');
194
define('LOG_GROUP_PORTAL_DELETED', 'soc_gr_deleted');
195
define('LOG_GROUP_PORTAL_USER_DELETE_ALL', 'soc_gr_delete_users');
196
197
define('LOG_GROUP_PORTAL_ID', 'soc_gr_portal_id');
198
define('LOG_GROUP_PORTAL_REL_USER_ARRAY', 'soc_gr_user_array');
199
200
define('LOG_GROUP_PORTAL_USER_SUBSCRIBED', 'soc_gr_u_subs');
201
define('LOG_GROUP_PORTAL_USER_UNSUBSCRIBED', 'soc_gr_u_unsubs');
202
define('LOG_GROUP_PORTAL_USER_UPDATE_ROLE', 'soc_gr_update_role');
203
204
define('LOG_MESSAGE_DATA', 'message_data');
205
define('LOG_MESSAGE_DELETE', 'msg_deleted');
206
207
define('LOG_USER_DELETE', 'user_deleted');
208
define('LOG_USER_PREDELETE', 'user_predeleted');
209
define('LOG_USER_CREATE', 'user_created');
210
define('LOG_USER_UPDATE', 'user_updated');
211
define('LOG_USER_PASSWORD_UPDATE', 'user_password_updated');
212
define('LOG_USER_ENABLE', 'user_enable');
213
define('LOG_USER_DISABLE', 'user_disable');
214
define('LOG_USER_ANONYMIZE', 'user_anonymized');
215
define('LOG_USER_FIELD_CREATE', 'user_field_created');
216
define('LOG_USER_FIELD_DELETE', 'user_field_deleted');
217
define('LOG_SESSION_CREATE', 'session_created');
218
define('LOG_SESSION_DELETE', 'session_deleted');
219
define('LOG_SESSION_ADD_USER_COURSE', 'session_add_user_course');
220
define('LOG_SESSION_DELETE_USER_COURSE', 'session_delete_user_course');
221
define('LOG_SESSION_ADD_USER', 'session_add_user');
222
define('LOG_SESSION_DELETE_USER', 'session_delete_user');
223
define('LOG_SESSION_ADD_COURSE', 'session_add_course');
224
define('LOG_SESSION_DELETE_COURSE', 'session_delete_course');
225
define('LOG_SESSION_CATEGORY_CREATE', 'session_cat_created'); //changed in 1.9.8
226
define('LOG_SESSION_CATEGORY_DELETE', 'session_cat_deleted'); //changed in 1.9.8
227
define('LOG_CONFIGURATION_SETTINGS_CHANGE', 'settings_changed');
228
define('LOG_PLATFORM_LANGUAGE_CHANGE', 'platform_lng_changed'); //changed in 1.9.8
229
define('LOG_SUBSCRIBE_USER_TO_COURSE', 'user_subscribed');
230
define('LOG_UNSUBSCRIBE_USER_FROM_COURSE', 'user_unsubscribed');
231
define('LOG_ATTEMPTED_FORCED_LOGIN', 'attempted_forced_login');
232
define('LOG_PLUGIN_CHANGE', 'plugin_changed');
233
define('LOG_HOMEPAGE_CHANGED', 'homepage_changed');
234
define('LOG_PROMOTION_CREATE', 'promotion_created');
235
define('LOG_PROMOTION_DELETE', 'promotion_deleted');
236
define('LOG_CAREER_CREATE', 'career_created');
237
define('LOG_CAREER_DELETE', 'career_deleted');
238
define('LOG_USER_PERSONAL_DOC_DELETED', 'user_doc_deleted');
239
//define('LOG_WIKI_ACCESS', 'wiki_page_view');
240
// All results from an exercise
241
define('LOG_EXERCISE_RESULT_DELETE', 'exe_result_deleted');
242
// Logs only the one attempt
243
define('LOG_EXERCISE_ATTEMPT_DELETE', 'exe_attempt_deleted');
244
define('LOG_LP_ATTEMPT_DELETE', 'lp_attempt_deleted');
245
define('LOG_QUESTION_RESULT_DELETE', 'qst_attempt_deleted');
246
define('LOG_QUESTION_SCORE_UPDATE', 'score_attempt_updated');
247
248
define('LOG_MY_FOLDER_CREATE', 'my_folder_created');
249
define('LOG_MY_FOLDER_CHANGE', 'my_folder_changed');
250
define('LOG_MY_FOLDER_DELETE', 'my_folder_deleted');
251
define('LOG_MY_FOLDER_COPY', 'my_folder_copied');
252
define('LOG_MY_FOLDER_CUT', 'my_folder_cut');
253
define('LOG_MY_FOLDER_PASTE', 'my_folder_pasted');
254
define('LOG_MY_FOLDER_UPLOAD', 'my_folder_uploaded');
255
256
// Event logs data types (max 20 chars)
257
define('LOG_COURSE_CODE', 'course_code');
258
define('LOG_COURSE_ID', 'course_id');
259
define('LOG_USER_ID', 'user_id');
260
define('LOG_USER_OBJECT', 'user_object');
261
define('LOG_USER_FIELD_VARIABLE', 'user_field_variable');
262
define('LOG_SESSION_ID', 'session_id');
263
264
define('LOG_QUESTION_ID', 'question_id');
265
define('LOG_SESSION_CATEGORY_ID', 'session_category_id');
266
define('LOG_CONFIGURATION_SETTINGS_CATEGORY', 'settings_category');
267
define('LOG_CONFIGURATION_SETTINGS_VARIABLE', 'settings_variable');
268
define('LOG_PLATFORM_LANGUAGE', 'default_platform_language');
269
define('LOG_PLUGIN_UPLOAD', 'plugin_upload');
270
define('LOG_PLUGIN_ENABLE', 'plugin_enable');
271
define('LOG_PLUGIN_SETTINGS_CHANGE', 'plugin_settings_change');
272
define('LOG_CAREER_ID', 'career_id');
273
define('LOG_PROMOTION_ID', 'promotion_id');
274
define('LOG_GRADEBOOK_LOCKED', 'gradebook_locked');
275
define('LOG_GRADEBOOK_UNLOCKED', 'gradebook_unlocked');
276
define('LOG_GRADEBOOK_ID', 'gradebook_id');
277
//define('LOG_WIKI_PAGE_ID', 'wiki_page_id');
278
define('LOG_EXERCISE_ID', 'exercise_id');
279
define('LOG_EXERCISE_AND_USER_ID', 'exercise_and_user_id');
280
define('LOG_LP_ID', 'lp_id');
281
define('LOG_EXERCISE_ATTEMPT_QUESTION_ID', 'exercise_a_q_id');
282
define('LOG_EXERCISE_ATTEMPT', 'exe_id');
283
284
define('LOG_WORK_DIR_DELETE', 'work_dir_delete');
285
define('LOG_WORK_FILE_DELETE', 'work_file_delete');
286
define('LOG_WORK_DATA', 'work_data_array');
287
288
define('LOG_MY_FOLDER_PATH', 'path');
289
define('LOG_MY_FOLDER_NEW_PATH', 'new_path');
290
291
define('LOG_TERM_CONDITION_ACCEPTED', 'term_condition_accepted');
292
define('LOG_USER_CONFIRMED_EMAIL', 'user_confirmed_email');
293
define('LOG_USER_REMOVED_LEGAL_ACCEPT', 'user_removed_legal_accept');
294
295
define('LOG_USER_DELETE_ACCOUNT_REQUEST', 'user_delete_account_request');
296
297
define('LOG_QUESTION_CREATED', 'question_created');
298
define('LOG_QUESTION_UPDATED', 'question_updated');
299
define('LOG_QUESTION_DELETED', 'question_deleted');
300
define('LOG_QUESTION_REMOVED_FROM_QUIZ', 'question_removed_from_quiz');
301
302
define('LOG_SURVEY_ID', 'survey_id');
303
define('LOG_SURVEY_CREATED', 'survey_created');
304
define('LOG_SURVEY_DELETED', 'survey_deleted');
305
define('LOG_SURVEY_CLEAN_RESULTS', 'survey_clean_results');
306
define('USERNAME_PURIFIER', '/[^0-9A-Za-z_\.@\$-]/');
307
308
//used when login_is_email setting is true
309
define('USERNAME_PURIFIER_MAIL', '/[^0-9A-Za-z_\.@]/');
310
define('USERNAME_PURIFIER_SHALLOW', '/\s/');
311
312
// This constant is a result of Windows OS detection, it has a boolean value:
313
// true whether the server runs on Windows OS, false otherwise.
314
define('IS_WINDOWS_OS', api_is_windows_os());
315
316
// Patterns for processing paths. Examples.
317
define('REPEATED_SLASHES_PURIFIER', '/\/{2,}/'); // $path = preg_replace(REPEATED_SLASHES_PURIFIER, '/', $path);
318
define('VALID_WEB_PATH', '/https?:\/\/[^\/]*(\/.*)?/i'); // $is_valid_path = preg_match(VALID_WEB_PATH, $path);
319
// $new_path = preg_replace(VALID_WEB_SERVER_BASE, $new_base, $path);
320
define('VALID_WEB_SERVER_BASE', '/https?:\/\/[^\/]*/i');
321
// Constants for api_get_path() and api_get_path_type(), etc. - registered path types.
322
// basic (leaf elements)
323
define('REL_CODE_PATH', 'REL_CODE_PATH');
324
define('REL_COURSE_PATH', 'REL_COURSE_PATH');
325
define('REL_HOME_PATH', 'REL_HOME_PATH');
326
327
// Constants for api_get_path() and api_get_path_type(), etc. - registered path types.
328
define('WEB_PATH', 'WEB_PATH');
329
define('SYS_PATH', 'SYS_PATH');
330
define('SYMFONY_SYS_PATH', 'SYMFONY_SYS_PATH');
331
332
define('REL_PATH', 'REL_PATH');
333
define('WEB_COURSE_PATH', 'WEB_COURSE_PATH');
334
define('WEB_CODE_PATH', 'WEB_CODE_PATH');
335
define('SYS_CODE_PATH', 'SYS_CODE_PATH');
336
define('SYS_LANG_PATH', 'SYS_LANG_PATH');
337
define('WEB_IMG_PATH', 'WEB_IMG_PATH');
338
define('WEB_CSS_PATH', 'WEB_CSS_PATH');
339
define('WEB_PUBLIC_PATH', 'WEB_PUBLIC_PATH');
340
define('SYS_CSS_PATH', 'SYS_CSS_PATH');
341
define('SYS_PLUGIN_PATH', 'SYS_PLUGIN_PATH');
342
define('WEB_PLUGIN_PATH', 'WEB_PLUGIN_PATH');
343
define('WEB_PLUGIN_ASSET_PATH', 'WEB_PLUGIN_ASSET_PATH');
344
define('SYS_ARCHIVE_PATH', 'SYS_ARCHIVE_PATH');
345
define('WEB_ARCHIVE_PATH', 'WEB_ARCHIVE_PATH');
346
define('LIBRARY_PATH', 'LIBRARY_PATH');
347
define('CONFIGURATION_PATH', 'CONFIGURATION_PATH');
348
define('WEB_LIBRARY_PATH', 'WEB_LIBRARY_PATH');
349
define('WEB_LIBRARY_JS_PATH', 'WEB_LIBRARY_JS_PATH');
350
define('WEB_AJAX_PATH', 'WEB_AJAX_PATH');
351
define('SYS_TEST_PATH', 'SYS_TEST_PATH');
352
define('SYS_TEMPLATE_PATH', 'SYS_TEMPLATE_PATH');
353
define('SYS_PUBLIC_PATH', 'SYS_PUBLIC_PATH');
354
define('SYS_FONTS_PATH', 'SYS_FONTS_PATH');
355
356
// Relations type with Course manager
357
define('COURSE_RELATION_TYPE_COURSE_MANAGER', 1);
358
359
// Relations type with Human resources manager
360
define('COURSE_RELATION_TYPE_RRHH', 1);
361
362
// User image sizes
363
define('USER_IMAGE_SIZE_ORIGINAL', 1);
364
define('USER_IMAGE_SIZE_BIG', 2);
365
define('USER_IMAGE_SIZE_MEDIUM', 3);
366
define('USER_IMAGE_SIZE_SMALL', 4);
367
368
// Gradebook link constants
369
// Please do not change existing values, they are used in the database !
370
define('GRADEBOOK_ITEM_LIMIT', 1000);
371
372
define('LINK_EXERCISE', 1);
373
define('LINK_DROPBOX', 2);
374
define('LINK_STUDENTPUBLICATION', 3);
375
define('LINK_LEARNPATH', 4);
376
define('LINK_FORUM_THREAD', 5);
377
//define('LINK_WORK',6);
378
define('LINK_ATTENDANCE', 7);
379
define('LINK_SURVEY', 8);
380
define('LINK_HOTPOTATOES', 9);
381
define('LINK_PORTFOLIO', 10);
382
383
// Score display types constants
384
define('SCORE_DIV', 1); // X / Y
385
define('SCORE_PERCENT', 2); // XX %
386
define('SCORE_DIV_PERCENT', 3); // X / Y (XX %)
387
define('SCORE_AVERAGE', 4); // XX %
388
define('SCORE_DECIMAL', 5); // 0.50  (X/Y)
389
define('SCORE_BAR', 6); // Uses the Display::bar_progress function
390
define('SCORE_SIMPLE', 7); // X
391
define('SCORE_IGNORE_SPLIT', 8); //  ??
392
define('SCORE_DIV_PERCENT_WITH_CUSTOM', 9); // X / Y (XX %) - Good!
393
define('SCORE_CUSTOM', 10); // Good!
394
define('SCORE_DIV_SIMPLE_WITH_CUSTOM', 11); // X - Good!
395
define('SCORE_DIV_SIMPLE_WITH_CUSTOM_LETTERS', 12); // X - Good!
396
define('SCORE_ONLY_SCORE', 13); // X - Good!
397
define('SCORE_NUMERIC', 14);
398
399
define('SCORE_BOTH', 1);
400
define('SCORE_ONLY_DEFAULT', 2);
401
define('SCORE_ONLY_CUSTOM', 3);
402
403
// From display.lib.php
404
405
define('MAX_LENGTH_BREADCRUMB', 100);
406
define('ICON_SIZE_ATOM', 8);
407
define('ICON_SIZE_TINY', 16);
408
define('ICON_SIZE_SMALL', 22);
409
define('ICON_SIZE_MEDIUM', 32);
410
define('ICON_SIZE_LARGE', 48);
411
define('ICON_SIZE_BIG', 64);
412
define('ICON_SIZE_HUGE', 128);
413
define('SHOW_TEXT_NEAR_ICONS', false);
414
415
// Session catalog
416
define('CATALOG_COURSES', 0);
417
define('CATALOG_SESSIONS', 1);
418
define('CATALOG_COURSES_SESSIONS', 2);
419
420
// Hook type events, pre-process and post-process.
421
// All means to be executed for both hook event types
422
define('HOOK_EVENT_TYPE_PRE', 0);
423
define('HOOK_EVENT_TYPE_POST', 1);
424
define('HOOK_EVENT_TYPE_ALL', 10);
425
426
// Group permissions
427
define('GROUP_PERMISSION_OPEN', '1');
428
define('GROUP_PERMISSION_CLOSED', '2');
429
430
// Group user permissions
431
define('GROUP_USER_PERMISSION_ADMIN', 1); // the admin of a group
432
define('GROUP_USER_PERMISSION_READER', 2); // a normal user
433
define('GROUP_USER_PERMISSION_PENDING_INVITATION', 3); // When an admin/moderator invites a user
434
define('GROUP_USER_PERMISSION_PENDING_INVITATION_SENT_BY_USER', 4); // an user joins a group
435
define('GROUP_USER_PERMISSION_MODERATOR', 5); // a moderator
436
define('GROUP_USER_PERMISSION_ANONYMOUS', 6); // an anonymous user
437
define('GROUP_USER_PERMISSION_HRM', 7); // a human resources manager
438
439
define('GROUP_IMAGE_SIZE_ORIGINAL', 1);
440
define('GROUP_IMAGE_SIZE_BIG', 2);
441
define('GROUP_IMAGE_SIZE_MEDIUM', 3);
442
define('GROUP_IMAGE_SIZE_SMALL', 4);
443
define('GROUP_TITLE_LENGTH', 50);
444
445
// Exercise
446
// @todo move into a class
447
define('ALL_ON_ONE_PAGE', 1);
448
define('ONE_PER_PAGE', 2);
449
450
define('EXERCISE_FEEDBACK_TYPE_END', 0); //Feedback 		 - show score and expected answers
451
define('EXERCISE_FEEDBACK_TYPE_DIRECT', 1); //DirectFeedback - Do not show score nor answers
452
define('EXERCISE_FEEDBACK_TYPE_EXAM', 2); // NoFeedback 	 - Show score only
453
define('EXERCISE_FEEDBACK_TYPE_POPUP', 3); // Popup BT#15827
454
455
define('RESULT_DISABLE_SHOW_SCORE_AND_EXPECTED_ANSWERS', 0); //show score and expected answers
456
define('RESULT_DISABLE_NO_SCORE_AND_EXPECTED_ANSWERS', 1); //Do not show score nor answers
457
define('RESULT_DISABLE_SHOW_SCORE_ONLY', 2); //Show score only
458
define('RESULT_DISABLE_SHOW_FINAL_SCORE_ONLY_WITH_CATEGORIES', 3); //Show final score only with categories
459
define('RESULT_DISABLE_SHOW_SCORE_ATTEMPT_SHOW_ANSWERS_LAST_ATTEMPT', 4);
460
define('RESULT_DISABLE_DONT_SHOW_SCORE_ONLY_IF_USER_FINISHES_ATTEMPTS_SHOW_ALWAYS_FEEDBACK', 5);
461
define('RESULT_DISABLE_RANKING', 6);
462
define('RESULT_DISABLE_SHOW_ONLY_IN_CORRECT_ANSWER', 7);
463
define('RESULT_DISABLE_SHOW_SCORE_AND_EXPECTED_ANSWERS_AND_RANKING', 8);
464
define('RESULT_DISABLE_RADAR', 9);
465
define('RESULT_DISABLE_SHOW_SCORE_ATTEMPT_SHOW_ANSWERS_LAST_ATTEMPT_NO_FEEDBACK', 10);
466
467
define('EXERCISE_MAX_NAME_SIZE', 80);
468
469
// Question types (edit next array as well when adding values)
470
// @todo move into a class
471
define('UNIQUE_ANSWER', 1);
472
define('MULTIPLE_ANSWER', 2);
473
define('FILL_IN_BLANKS', 3);
474
define('MATCHING', 4);
475
define('FREE_ANSWER', 5);
476
define('HOT_SPOT', 6);
477
define('HOT_SPOT_ORDER', 7);
478
define('HOT_SPOT_DELINEATION', 8);
479
define('MULTIPLE_ANSWER_COMBINATION', 9);
480
define('UNIQUE_ANSWER_NO_OPTION', 10);
481
define('MULTIPLE_ANSWER_TRUE_FALSE', 11);
482
define('MULTIPLE_ANSWER_COMBINATION_TRUE_FALSE', 12);
483
define('ORAL_EXPRESSION', 13);
484
define('GLOBAL_MULTIPLE_ANSWER', 14);
485
define('MEDIA_QUESTION', 15);
486
define('CALCULATED_ANSWER', 16);
487
define('UNIQUE_ANSWER_IMAGE', 17);
488
define('DRAGGABLE', 18);
489
define('MATCHING_DRAGGABLE', 19);
490
define('ANNOTATION', 20);
491
define('READING_COMPREHENSION', 21);
492
define('MULTIPLE_ANSWER_TRUE_FALSE_DEGREE_CERTAINTY', 22);
493
494
define('EXERCISE_CATEGORY_RANDOM_SHUFFLED', 1);
495
define('EXERCISE_CATEGORY_RANDOM_ORDERED', 2);
496
define('EXERCISE_CATEGORY_RANDOM_DISABLED', 0);
497
498
// Question selection type
499
define('EX_Q_SELECTION_ORDERED', 1);
500
define('EX_Q_SELECTION_RANDOM', 2);
501
define('EX_Q_SELECTION_CATEGORIES_ORDERED_QUESTIONS_ORDERED', 3);
502
define('EX_Q_SELECTION_CATEGORIES_RANDOM_QUESTIONS_ORDERED', 4);
503
define('EX_Q_SELECTION_CATEGORIES_ORDERED_QUESTIONS_RANDOM', 5);
504
define('EX_Q_SELECTION_CATEGORIES_RANDOM_QUESTIONS_RANDOM', 6);
505
define('EX_Q_SELECTION_CATEGORIES_RANDOM_QUESTIONS_ORDERED_NO_GROUPED', 7);
506
define('EX_Q_SELECTION_CATEGORIES_RANDOM_QUESTIONS_RANDOM_NO_GROUPED', 8);
507
define('EX_Q_SELECTION_CATEGORIES_ORDERED_BY_PARENT_QUESTIONS_ORDERED', 9);
508
define('EX_Q_SELECTION_CATEGORIES_ORDERED_BY_PARENT_QUESTIONS_RANDOM', 10);
509
510
// Used to save the skill_rel_item table
511
define('ITEM_TYPE_EXERCISE', 1);
512
define('ITEM_TYPE_HOTPOTATOES', 2);
513
define('ITEM_TYPE_LINK', 3);
514
define('ITEM_TYPE_LEARNPATH', 4);
515
define('ITEM_TYPE_GRADEBOOK', 5);
516
define('ITEM_TYPE_STUDENT_PUBLICATION', 6);
517
//define('ITEM_TYPE_FORUM', 7);
518
define('ITEM_TYPE_ATTENDANCE', 8);
519
define('ITEM_TYPE_SURVEY', 9);
520
define('ITEM_TYPE_FORUM_THREAD', 10);
521
define('ITEM_TYPE_PORTFOLIO', 11);
522
523
// Course description blocks.
524
define('ADD_BLOCK', 8);
525
526
// one big string with all question types, for the validator in pear/HTML/QuickForm/Rule/QuestionType
527
define(
528
    'QUESTION_TYPES',
529
    UNIQUE_ANSWER.':'.
530
    MULTIPLE_ANSWER.':'.
531
    FILL_IN_BLANKS.':'.
532
    MATCHING.':'.
533
    FREE_ANSWER.':'.
534
    HOT_SPOT.':'.
535
    HOT_SPOT_ORDER.':'.
536
    HOT_SPOT_DELINEATION.':'.
537
    MULTIPLE_ANSWER_COMBINATION.':'.
538
    UNIQUE_ANSWER_NO_OPTION.':'.
539
    MULTIPLE_ANSWER_TRUE_FALSE.':'.
540
    MULTIPLE_ANSWER_COMBINATION_TRUE_FALSE.':'.
541
    ORAL_EXPRESSION.':'.
542
    GLOBAL_MULTIPLE_ANSWER.':'.
543
    MEDIA_QUESTION.':'.
544
    CALCULATED_ANSWER.':'.
545
    UNIQUE_ANSWER_IMAGE.':'.
546
    DRAGGABLE.':'.
547
    MATCHING_DRAGGABLE.':'.
548
    MULTIPLE_ANSWER_TRUE_FALSE_DEGREE_CERTAINTY.':'.
549
    ANNOTATION
550
);
551
552
//Some alias used in the QTI exports
553
define('MCUA', 1);
554
define('TF', 1);
555
define('MCMA', 2);
556
define('FIB', 3);
557
558
// Message
559
define('MESSAGE_STATUS_INVITATION_PENDING', 5);
560
define('MESSAGE_STATUS_INVITATION_ACCEPTED', 6);
561
define('MESSAGE_STATUS_INVITATION_DENIED', 7);
562
define('MESSAGE_STATUS_WALL', 8);
563
564
define('MESSAGE_STATUS_WALL_DELETE', 9);
565
define('MESSAGE_STATUS_WALL_POST', 10);
566
567
define('MESSAGE_STATUS_FORUM', 12);
568
define('MESSAGE_STATUS_PROMOTED', 13);
569
570
// Images
571
define('IMAGE_WALL_SMALL_SIZE', 200);
572
define('IMAGE_WALL_MEDIUM_SIZE', 500);
573
define('IMAGE_WALL_BIG_SIZE', 2000);
574
define('IMAGE_WALL_SMALL', 'small');
575
define('IMAGE_WALL_MEDIUM', 'medium');
576
define('IMAGE_WALL_BIG', 'big');
577
578
// Social PLUGIN PLACES
579
define('SOCIAL_LEFT_PLUGIN', 1);
580
define('SOCIAL_CENTER_PLUGIN', 2);
581
define('SOCIAL_RIGHT_PLUGIN', 3);
582
define('CUT_GROUP_NAME', 50);
583
584
/**
585
 * FormValidator Filter.
586
 */
587
define('NO_HTML', 1);
588
define('STUDENT_HTML', 2);
589
define('TEACHER_HTML', 3);
590
define('STUDENT_HTML_FULLPAGE', 4);
591
define('TEACHER_HTML_FULLPAGE', 5);
592
593
// Timeline
594
define('TIMELINE_STATUS_ACTIVE', '1');
595
define('TIMELINE_STATUS_INACTIVE', '2');
596
597
// Event email template class
598
define('EVENT_EMAIL_TEMPLATE_ACTIVE', 1);
599
define('EVENT_EMAIL_TEMPLATE_INACTIVE', 0);
600
601
// Course home
602
define('SHORTCUTS_HORIZONTAL', 0);
603
define('SHORTCUTS_VERTICAL', 1);
604
605
// Course copy
606
define('FILE_SKIP', 1);
607
define('FILE_RENAME', 2);
608
define('FILE_OVERWRITE', 3);
609
define('UTF8_CONVERT', false); //false by default
610
611
define('DOCUMENT', 'file');
612
define('FOLDER', 'folder');
613
614
define('RESOURCE_ASSET', 'asset');
615
define('RESOURCE_DOCUMENT', 'document');
616
define('RESOURCE_GLOSSARY', 'glossary');
617
define('RESOURCE_EVENT', 'calendar_event');
618
define('RESOURCE_LINK', 'link');
619
define('RESOURCE_COURSEDESCRIPTION', 'course_description');
620
define('RESOURCE_LEARNPATH', 'learnpath');
621
define('RESOURCE_LEARNPATH_CATEGORY', 'learnpath_category');
622
define('RESOURCE_ANNOUNCEMENT', 'announcement');
623
define('RESOURCE_FORUM', 'forum');
624
define('RESOURCE_FORUMTOPIC', 'thread');
625
define('RESOURCE_FORUMPOST', 'post');
626
define('RESOURCE_QUIZ', 'quiz');
627
define('RESOURCE_TEST_CATEGORY', 'test_category');
628
define('RESOURCE_QUIZQUESTION', 'Exercise_Question');
629
define('RESOURCE_TOOL_INTRO', 'Tool introduction');
630
define('RESOURCE_LINKCATEGORY', 'Link_Category');
631
define('RESOURCE_FORUMCATEGORY', 'Forum_Category');
632
define('RESOURCE_SCORM', 'Scorm');
633
define('RESOURCE_SURVEY', 'survey');
634
define('RESOURCE_SURVEYQUESTION', 'survey_question');
635
define('RESOURCE_SURVEYINVITATION', 'survey_invitation');
636
//define('RESOURCE_WIKI', 'wiki');
637
define('RESOURCE_THEMATIC', 'thematic');
638
define('RESOURCE_ATTENDANCE', 'attendance');
639
define('RESOURCE_WORK', 'work');
640
define('RESOURCE_SESSION_COURSE', 'session_course');
641
define('RESOURCE_GRADEBOOK', 'gradebook');
642
define('ADD_THEMATIC_PLAN', 6);
643
644
// Max online users to show per page (whoisonline)
645
define('MAX_ONLINE_USERS', 12);
646
647
define('TOOL_AUTHORING', 'toolauthoring');
648
define('TOOL_INTERACTION', 'toolinteraction');
649
define('TOOL_COURSE_PLUGIN', 'toolcourseplugin'); //all plugins that can be enabled in courses
650
define('TOOL_ADMIN', 'tooladmin');
651
define('TOOL_ADMIN_PLATFORM', 'tooladminplatform');
652
define('TOOL_DRH', 'tool_drh');
653
define('TOOL_STUDENT_VIEW', 'toolstudentview');
654
define('TOOL_ADMIN_VISIBLE', 'tooladminvisible');
655
656
// Search settings (from main/inc/lib/search/IndexableChunk.class.php )
657
// some constants to avoid serialize string keys on serialized data array
658
define('SE_COURSE_ID', 0);
659
define('SE_TOOL_ID', 1);
660
define('SE_DATA', 2);
661
define('SE_USER', 3);
662
663
// in some cases we need top differenciate xapian documents of the same tool
664
define('SE_DOCTYPE_EXERCISE_EXERCISE', 0);
665
define('SE_DOCTYPE_EXERCISE_QUESTION', 1);
666
667
// xapian prefixes
668
define('XAPIAN_PREFIX_COURSEID', 'C');
669
define('XAPIAN_PREFIX_TOOLID', 'O');
670
671
// User active field constants
672
define('USER_ACTIVE', 1);
673
define('USER_INACTIVE', 0);
674
define('USER_INACTIVE_AUTOMATIC', -1);
675
define('USER_SOFT_DELETED', -2);
676
677
/**
678
 * Returns a path to a certain resource within Chamilo.
679
 *
680
 * @param string $path A path which type is to be converted. Also, it may be a defined constant for a path.
681
 *
682
 * @return string the requested path or the converted path
683
 *
684
 * Notes about the current behaviour model:
685
 * 1. Windows back-slashes are converted to slashes in the result.
686
 * 2. A semi-absolute web-path is detected by its leading slash. On Linux systems, absolute system paths start with
687
 * a slash too, so an additional check about presence of leading system server base is implemented. For example, the function is
688
 * able to distinguish type difference between /var/www/chamilo/courses/ (SYS) and /chamilo/courses/ (REL).
689
 * 3. The function api_get_path() returns only these three types of paths, which in some sense are absolute. The function has
690
 * no a mechanism for processing relative web/system paths, such as: lesson01.html, ./lesson01.html, ../css/my_styles.css.
691
 * It has not been identified as needed yet.
692
 * 4. Also, resolving the meta-symbols "." and ".." within paths has not been implemented, it is to be identified as needed.
693
 *
694
 * Vchamilo changes : allow using an alternate configuration
695
 * to get vchamilo  instance paths
696
 */
697
function api_get_path($path = '', $configuration = [])
698
{
699
    global $paths;
700
701
    // get proper configuration data if exists
702
    global $_configuration;
703
704
    $emptyConfigurationParam = false;
705
    if (empty($configuration)) {
706
        $configuration = (array) $_configuration;
707
        $emptyConfigurationParam = true;
708
    }
709
710
    $root_sys = Container::getProjectDir();
711
    $root_web = '';
712
    if (isset(Container::$container)) {
713
        $root_web = Container::$container->get('router')->generate(
714
            'index',
715
            [],
716
            UrlGeneratorInterface::ABSOLUTE_URL
717
        );
718
    }
719
720
    /*if (api_get_multiple_access_url()) {
721
        // To avoid that the api_get_access_url() function fails since global.inc.php also calls the main_api.lib.php
722
        if (isset($configuration['access_url']) && !empty($configuration['access_url'])) {
723
            // We look into the DB the function api_get_access_url
724
            $urlInfo = api_get_access_url($configuration['access_url']);
725
            // Avoid default value
726
            $defaultValues = ['http://localhost/', 'https://localhost/'];
727
            if (!empty($urlInfo['url']) && !in_array($urlInfo['url'], $defaultValues)) {
728
                $root_web = 1 == $urlInfo['active'] ? $urlInfo['url'] : $configuration['root_web'];
729
            }
730
        }
731
    }*/
732
733
    $paths = [
734
        WEB_PATH => $root_web,
735
        SYMFONY_SYS_PATH => $root_sys,
736
        SYS_PATH => $root_sys.'public/',
737
        REL_PATH => '',
738
        CONFIGURATION_PATH => 'app/config/',
739
        LIBRARY_PATH => $root_sys.'public/main/inc/lib/',
740
741
        REL_COURSE_PATH => '',
742
        REL_CODE_PATH => '/main/',
743
744
        SYS_CODE_PATH => $root_sys.'public/main/',
745
        SYS_CSS_PATH => $root_sys.'public/build/css/',
746
        SYS_PLUGIN_PATH => $root_sys.'public/plugin/',
747
        SYS_ARCHIVE_PATH => $root_sys.'var/cache/',
748
        SYS_TEST_PATH => $root_sys.'tests/',
749
        SYS_TEMPLATE_PATH => $root_sys.'public/main/template/',
750
        SYS_PUBLIC_PATH => $root_sys.'public/',
751
        SYS_FONTS_PATH => $root_sys.'public/fonts/',
752
753
        WEB_CODE_PATH => $root_web.'main/',
754
        WEB_PLUGIN_ASSET_PATH => $root_web.'plugins/',
755
        WEB_COURSE_PATH => $root_web.'course/',
756
        WEB_IMG_PATH => $root_web.'img/',
757
        WEB_CSS_PATH => $root_web.'build/css/',
758
        WEB_AJAX_PATH => $root_web.'main/inc/ajax/',
759
        WEB_LIBRARY_PATH => $root_web.'main/inc/lib/',
760
        WEB_LIBRARY_JS_PATH => $root_web.'main/inc/lib/javascript/',
761
        WEB_PLUGIN_PATH => $root_web.'plugin/',
762
        WEB_PUBLIC_PATH => $root_web,
763
    ];
764
765
    $root_rel = '';
766
767
    global $virtualChamilo;
768
    if (!empty($virtualChamilo)) {
769
        $paths[SYS_ARCHIVE_PATH] = api_add_trailing_slash($virtualChamilo[SYS_ARCHIVE_PATH]);
770
        //$paths[SYS_UPLOAD_PATH] = api_add_trailing_slash($virtualChamilo[SYS_UPLOAD_PATH]);
771
        //$paths[$root_web][WEB_UPLOAD_PATH] = api_add_trailing_slash($virtualChamilo[WEB_UPLOAD_PATH]);
772
        $paths[WEB_ARCHIVE_PATH] = api_add_trailing_slash($virtualChamilo[WEB_ARCHIVE_PATH]);
773
        //$paths[$root_web][WEB_COURSE_PATH] = api_add_trailing_slash($virtualChamilo[WEB_COURSE_PATH]);
774
775
        // WEB_UPLOAD_PATH should be handle by apache htaccess in the vhost
776
777
        // RewriteEngine On
778
        // RewriteRule /app/upload/(.*)$ http://localhost/other/upload/my-chamilo111-net/$1 [QSA,L]
779
780
        //$paths[$root_web][WEB_UPLOAD_PATH] = api_add_trailing_slash($virtualChamilo[WEB_UPLOAD_PATH]);
781
        //$paths[$root_web][REL_PATH] = $virtualChamilo[REL_PATH];
782
        //$paths[$root_web][REL_COURSE_PATH] = $virtualChamilo[REL_COURSE_PATH];
783
    }
784
785
    $path = trim($path);
786
787
    // Retrieving a common-purpose path.
788
    if (isset($paths[$path])) {
789
        return $paths[$path];
790
    }
791
792
    return false;
793
}
794
795
/**
796
 * Adds to a given path a trailing slash if it is necessary (adds "/" character at the end of the string).
797
 *
798
 * @param string $path the input path
799
 *
800
 * @return string returns the modified path
801
 */
802
function api_add_trailing_slash($path)
803
{
804
    return '/' === substr($path, -1) ? $path : $path.'/';
805
}
806
807
/**
808
 * Removes from a given path the trailing slash if it is necessary (removes "/" character from the end of the string).
809
 *
810
 * @param string $path the input path
811
 *
812
 * @return string returns the modified path
813
 */
814
function api_remove_trailing_slash($path)
815
{
816
    return '/' === substr($path, -1) ? substr($path, 0, -1) : $path;
817
}
818
819
/**
820
 * Checks the RFC 3986 syntax of a given URL.
821
 *
822
 * @param string $url      the URL to be checked
823
 * @param bool   $absolute whether the URL is absolute (beginning with a scheme such as "http:")
824
 *
825
 * @return string|false Returns the URL if it is valid, FALSE otherwise.
826
 *                      This function is an adaptation from the function valid_url(), Drupal CMS.
827
 *
828
 * @see http://drupal.org
829
 * Note: The built-in function filter_var($urs, FILTER_VALIDATE_URL) has a bug for some versions of PHP.
830
 * @see http://bugs.php.net/51192
831
 */
832
function api_valid_url($url, $absolute = false)
833
{
834
    if ($absolute) {
835
        if (preg_match("
836
            /^                                                      # Start at the beginning of the text
837
            (?:ftp|https?|feed):\/\/                                # Look for ftp, http, https or feed schemes
838
            (?:                                                     # Userinfo (optional) which is typically
839
                (?:(?:[\w\.\-\+!$&'\(\)*\+,;=]|%[0-9a-f]{2})+:)*    # a username or a username and password
840
                (?:[\w\.\-\+%!$&'\(\)*\+,;=]|%[0-9a-f]{2})+@        # combination
841
            )?
842
            (?:
843
                (?:[a-z0-9\-\.]|%[0-9a-f]{2})+                      # A domain name or a IPv4 address
844
                |(?:\[(?:[0-9a-f]{0,4}:)*(?:[0-9a-f]{0,4})\])       # or a well formed IPv6 address
845
            )
846
            (?::[0-9]+)?                                            # Server port number (optional)
847
            (?:[\/|\?]
848
                (?:[\w#!:\.\?\+=&@$'~*,;\/\(\)\[\]\-]|%[0-9a-f]{2}) # The path and query (optional)
849
            *)?
850
            $/xi", $url)) {
851
            return $url;
852
        }
853
854
        return false;
855
    } else {
856
        return preg_match("/^(?:[\w#!:\.\?\+=&@$'~*,;\/\(\)\[\]\-]|%[0-9a-f]{2})+$/i", $url) ? $url : false;
857
    }
858
}
859
860
/**
861
 * Checks whether a given string looks roughly like an email address.
862
 *
863
 * @param string $address the e-mail address to be checked
864
 *
865
 * @return mixed returns the e-mail if it is valid, FALSE otherwise
866
 */
867
function api_valid_email($address)
868
{
869
    return filter_var($address, FILTER_VALIDATE_EMAIL);
870
}
871
872
/**
873
 * Function used to protect a course script.
874
 * The function blocks access when
875
 * - there is no $_SESSION["_course"] defined; or
876
 * - $is_allowed_in_course is set to false (this depends on the course
877
 * visibility and user status).
878
 *
879
 * This is only the first proposal, test and improve!
880
 *
881
 * @param bool Option to print headers when displaying error message. Default: false
882
 * @param bool whether session admins should be allowed or not
883
 * @param string $checkTool check if tool is available for users (user, group)
884
 *
885
 * @return bool True if the user has access to the current course or is out of a course context, false otherwise
886
 *
887
 * @todo replace global variable
888
 *
889
 * @author Roan Embrechts
890
 */
891
function api_protect_course_script($print_headers = false, $allow_session_admins = false, string $checkTool = '', $cid = null): bool
892
{
893
    $course_info = api_get_course_info();
894
    if (empty($course_info) && isset($_REQUEST['cid'])) {
895
        $course_info = api_get_course_info_by_id((int) $_REQUEST['cid']);
896
    }
897
898
    if (isset($cid)) {
899
        $course_info = api_get_course_info_by_id($cid);
900
    }
901
902
    if (empty($course_info)) {
903
        api_not_allowed($print_headers);
904
905
        return false;
906
    }
907
908
    if (api_is_drh()) {
909
        return true;
910
    }
911
912
    // Session admin has access to course
913
    $sessionAccess = ('true' === api_get_setting('session.session_admins_access_all_content'));
914
    if ($sessionAccess) {
915
        $allow_session_admins = true;
916
    }
917
918
    if (api_is_platform_admin($allow_session_admins)) {
919
        return true;
920
    }
921
922
    $isAllowedInCourse = api_is_allowed_in_course();
923
    $is_visible = false;
924
    if (isset($course_info) && isset($course_info['visibility'])) {
925
        switch ($course_info['visibility']) {
926
            default:
927
            case Course::CLOSED:
928
                // Completely closed: the course is only accessible to the teachers. - 0
929
                if ($isAllowedInCourse && api_get_user_id() && !api_is_anonymous()) {
930
                    $is_visible = true;
931
                }
932
                break;
933
            case Course::REGISTERED:
934
                // Private - access authorized to course members only - 1
935
                if ($isAllowedInCourse && api_get_user_id() && !api_is_anonymous()) {
936
                    $is_visible = true;
937
                }
938
                break;
939
            case Course::OPEN_PLATFORM:
940
                // Open - access allowed for users registered on the platform - 2
941
                if ($isAllowedInCourse && api_get_user_id() && !api_is_anonymous()) {
942
                    $is_visible = true;
943
                }
944
                break;
945
            case Course::OPEN_WORLD:
946
                //Open - access allowed for the whole world - 3
947
                $is_visible = true;
948
                break;
949
            case Course::HIDDEN:
950
                //Completely closed: the course is only accessible to the teachers. - 0
951
                if (api_is_platform_admin()) {
952
                    $is_visible = true;
953
                }
954
                break;
955
        }
956
957
        //If password is set and user is not registered to the course then the course is not visible
958
        if (false === $isAllowedInCourse &&
959
            isset($course_info['registration_code']) &&
960
            !empty($course_info['registration_code'])
961
        ) {
962
            $is_visible = false;
963
        }
964
    }
965
966
    if (!empty($checkTool)) {
967
        if (!api_is_allowed_to_edit(true, true, true)) {
968
            $toolInfo = api_get_tool_information_by_name($checkTool);
969
            if (!empty($toolInfo) && isset($toolInfo['visibility']) && 0 == $toolInfo['visibility']) {
970
                api_not_allowed(true);
971
972
                return false;
973
            }
974
        }
975
    }
976
977
    // Check session visibility
978
    $session_id = api_get_session_id();
979
980
    if (!empty($session_id)) {
981
        // $isAllowedInCourse was set in local.inc.php
982
        if (!$isAllowedInCourse) {
983
            $is_visible = false;
984
        }
985
        // Check if course is inside session.
986
        if (!SessionManager::relation_session_course_exist($session_id, $course_info['real_id'])) {
987
            $is_visible = false;
988
        }
989
    }
990
991
    if (!$is_visible) {
992
        api_not_allowed($print_headers);
993
994
        return false;
995
    }
996
997
    if ($is_visible && 'true' === api_get_plugin_setting('positioning', 'tool_enable')) {
998
        $plugin = Positioning::create();
999
        $block = $plugin->get('block_course_if_initial_exercise_not_attempted');
1000
        if ('true' === $block) {
1001
            $currentPath = $_SERVER['PHP_SELF'];
1002
            // Allowed only this course paths.
1003
            $paths = [
1004
                '/plugin/positioning/start.php',
1005
                '/plugin/positioning/start_student.php',
1006
                '/main/course_home/course_home.php',
1007
                '/main/exercise/overview.php',
1008
            ];
1009
1010
            if (!in_array($currentPath, $paths, true)) {
1011
                // Check if entering an exercise.
1012
                // @todo remove global $current_course_tool
1013
                /*global $current_course_tool;
1014
                if ('quiz' !== $current_course_tool) {
1015
                    $initialData = $plugin->getInitialExercise($course_info['real_id'], $session_id);
1016
                    if ($initialData && isset($initialData['exercise_id'])) {
1017
                        $results = Event::getExerciseResultsByUser(
1018
                            api_get_user_id(),
1019
                            $initialData['exercise_id'],
1020
                            $course_info['real_id'],
1021
                            $session_id
1022
                        );
1023
                        if (empty($results)) {
1024
                            api_not_allowed($print_headers);
1025
1026
                            return false;
1027
                        }
1028
                    }
1029
                }*/
1030
            }
1031
        }
1032
    }
1033
1034
    api_block_inactive_user();
1035
1036
    return true;
1037
}
1038
1039
/**
1040
 * Function used to protect an admin script.
1041
 *
1042
 * The function blocks access when the user has no platform admin rights
1043
 * with an error message printed on default output
1044
 *
1045
 * @param bool Whether to allow session admins as well
1046
 * @param bool Whether to allow HR directors as well
1047
 * @param string An optional message (already passed through get_lang)
1048
 *
1049
 * @return bool True if user is allowed, false otherwise.
1050
 *              The function also outputs an error message in case not allowed
1051
 *
1052
 * @author Roan Embrechts (original author)
1053
 */
1054
function api_protect_admin_script($allow_sessions_admins = false, $allow_drh = false, $message = null)
1055
{
1056
    if (!api_is_platform_admin($allow_sessions_admins, $allow_drh)) {
1057
        api_not_allowed(true, $message);
1058
1059
        return false;
1060
    }
1061
    api_block_inactive_user();
1062
1063
    return true;
1064
}
1065
1066
/**
1067
 * Blocks inactive users with a currently active session from accessing more pages "live".
1068
 *
1069
 * @return bool Returns true if the feature is disabled or the user account is still enabled.
1070
 *              Returns false (and shows a message) if the feature is enabled *and* the user is disabled.
1071
 */
1072
function api_block_inactive_user()
1073
{
1074
    $data = true;
1075
    if ('true' !== api_get_setting('security.security_block_inactive_users_immediately')) {
1076
        return $data;
1077
    }
1078
1079
    $userId = api_get_user_id();
1080
    $homeUrl = api_get_path(WEB_PATH);
1081
    if (0 == $userId) {
1082
        return $data;
1083
    }
1084
1085
    $sql = "SELECT active FROM ".Database::get_main_table(TABLE_MAIN_USER)."
1086
            WHERE id = $userId";
1087
1088
    $result = Database::query($sql);
1089
    if (Database::num_rows($result) > 0) {
1090
        $result_array = Database::fetch_array($result);
1091
        $data = (bool) $result_array['active'];
1092
    }
1093
    if (false == $data) {
0 ignored issues
show
Coding Style Best Practice introduced by
It seems like you are loosely comparing two booleans. Considering using the strict comparison === instead.

When comparing two booleans, it is generally considered safer to use the strict comparison operator.

Loading history...
1094
        $tpl = new Template(null, true, true, false, true, false, true, 0);
1095
        $tpl->assign('hide_login_link', 1);
1096
1097
        //api_not_allowed(true, get_lang('Account inactive'));
1098
        // we were not in a course, return to home page
1099
        $msg = Display::return_message(
1100
            get_lang('Account inactive'),
1101
            'error',
1102
            false
1103
        );
1104
1105
        $msg .= '<p class="text-center">
1106
                 <a class="btn btn--plain" href="'.$homeUrl.'">'.get_lang('Back to Home Page.').'</a></p>';
1107
1108
        $tpl->assign('content', $msg);
1109
        $tpl->display_one_col_template();
1110
        exit;
0 ignored issues
show
Best Practice introduced by
Using exit here is not recommended.

In general, usage of exit should be done with care and only when running in a scripting context like a CLI script.

Loading history...
1111
    }
1112
1113
    return $data;
1114
}
1115
1116
/**
1117
 * Function used to protect a teacher script.
1118
 * The function blocks access when the user has no teacher rights.
1119
 *
1120
 * @return bool True if the current user can access the script, false otherwise
1121
 *
1122
 * @author Yoselyn Castillo
1123
 */
1124
function api_protect_teacher_script()
1125
{
1126
    if (!api_is_allowed_to_edit()) {
1127
        api_not_allowed(true);
1128
1129
        return false;
1130
    }
1131
1132
    return true;
1133
}
1134
1135
/**
1136
 * Function used to prevent anonymous users from accessing a script.
1137
 *
1138
 * @param bool $printHeaders
1139
 *
1140
 * @return bool
1141
 */
1142
function api_block_anonymous_users($printHeaders = true)
1143
{
1144
    $isAuth = Container::getAuthorizationChecker()->isGranted('IS_AUTHENTICATED');
1145
1146
    if (false === $isAuth) {
1147
        api_not_allowed($printHeaders);
1148
1149
        return false;
1150
    }
1151
1152
    api_block_inactive_user();
1153
1154
    return true;
1155
}
1156
1157
/**
1158
 * Returns a rough evaluation of the browser's name and version based on very
1159
 * simple regexp.
1160
 *
1161
 * @return array with the navigator name and version ['name' => '...', 'version' => '...']
1162
 */
1163
function api_get_navigator()
1164
{
1165
    $navigator = 'Unknown';
1166
    $version = 0;
1167
1168
    if (!isset($_SERVER['HTTP_USER_AGENT'])) {
1169
        return ['name' => 'Unknown', 'version' => '0.0.0'];
1170
    }
1171
1172
    if (false !== strpos($_SERVER['HTTP_USER_AGENT'], 'Opera')) {
1173
        $navigator = 'Opera';
1174
        [, $version] = explode('Opera', $_SERVER['HTTP_USER_AGENT']);
1175
    } elseif (false !== strpos($_SERVER['HTTP_USER_AGENT'], 'Edge')) {
1176
        $navigator = 'Edge';
1177
        [, $version] = explode('Edge', $_SERVER['HTTP_USER_AGENT']);
1178
    } elseif (false !== strpos($_SERVER['HTTP_USER_AGENT'], 'MSIE')) {
1179
        $navigator = 'Internet Explorer';
1180
        [, $version] = explode('MSIE ', $_SERVER['HTTP_USER_AGENT']);
1181
    } elseif (false !== strpos($_SERVER['HTTP_USER_AGENT'], 'Chrome')) {
1182
        $navigator = 'Chrome';
1183
        [, $version] = explode('Chrome', $_SERVER['HTTP_USER_AGENT']);
1184
    } elseif (false !== stripos($_SERVER['HTTP_USER_AGENT'], 'Safari')) {
1185
        $navigator = 'Safari';
1186
        if (false !== stripos($_SERVER['HTTP_USER_AGENT'], 'Version/')) {
1187
            // If this Safari does have the "Version/" string in its user agent
1188
            // then use that as a version indicator rather than what's after
1189
            // "Safari/" which is rather a "build number" or something
1190
            [, $version] = explode('Version/', $_SERVER['HTTP_USER_AGENT']);
1191
        } else {
1192
            [, $version] = explode('Safari/', $_SERVER['HTTP_USER_AGENT']);
1193
        }
1194
    } elseif (false !== strpos($_SERVER['HTTP_USER_AGENT'], 'Firefox')) {
1195
        $navigator = 'Firefox';
1196
        [, $version] = explode('Firefox', $_SERVER['HTTP_USER_AGENT']);
1197
    } elseif (false !== strpos($_SERVER['HTTP_USER_AGENT'], 'Netscape')) {
1198
        $navigator = 'Netscape';
1199
        if (false !== stripos($_SERVER['HTTP_USER_AGENT'], 'Netscape/')) {
1200
            [, $version] = explode('Netscape', $_SERVER['HTTP_USER_AGENT']);
1201
        } else {
1202
            [, $version] = explode('Navigator', $_SERVER['HTTP_USER_AGENT']);
1203
        }
1204
    } elseif (false !== strpos($_SERVER['HTTP_USER_AGENT'], 'Konqueror')) {
1205
        $navigator = 'Konqueror';
1206
        [, $version] = explode('Konqueror', $_SERVER['HTTP_USER_AGENT']);
1207
    } elseif (false !== stripos($_SERVER['HTTP_USER_AGENT'], 'applewebkit')) {
1208
        $navigator = 'AppleWebKit';
1209
        [, $version] = explode('Version/', $_SERVER['HTTP_USER_AGENT']);
1210
    } elseif (false !== strpos($_SERVER['HTTP_USER_AGENT'], 'Gecko')) {
1211
        $navigator = 'Mozilla';
1212
        [, $version] = explode('; rv:', $_SERVER['HTTP_USER_AGENT']);
1213
    }
1214
1215
    // Now cut extra stuff around (mostly *after*) the version number
1216
    $version = preg_replace('/^([\/\s])?([\d\.]+)?.*/', '\2', $version);
1217
1218
    if (false === strpos($version, '.')) {
1219
        $version = number_format(doubleval($version), 1);
1220
    }
1221
1222
    return ['name' => $navigator, 'version' => $version];
1223
}
1224
1225
/**
1226
 * This function returns the id of the user which is stored in the $_user array.
1227
 *
1228
 * example: The function can be used to check if a user is logged in
1229
 *          if (api_get_user_id())
1230
 *
1231
 * @return int the id of the current user, 0 if is empty
1232
 */
1233
function api_get_user_id()
1234
{
1235
    $userInfo = Session::read('_user');
1236
    if ($userInfo && isset($userInfo['user_id'])) {
1237
        return (int) $userInfo['user_id'];
1238
    }
1239
1240
    return 0;
1241
}
1242
1243
/**
1244
 * Formats user information into a standard array
1245
 * This function should be only used inside api_get_user_info().
1246
 *
1247
 * @param array Non-standard user array
0 ignored issues
show
Documentation Bug introduced by
The doc comment Non-standard at position 0 could not be parsed: Unknown type name 'Non-standard' at position 0 in Non-standard.
Loading history...
1248
 * @param bool $add_password
1249
 * @param bool $loadAvatars  turn off to improve performance
1250
 *
1251
 * @return array Standard user array
1252
 */
1253
function _api_format_user($user, $add_password = false, $loadAvatars = true)
1254
{
1255
    $result = [];
1256
1257
    if (!isset($user['id'])) {
1258
        return [];
1259
    }
1260
1261
    $result['firstname'] = null;
1262
    $result['lastname'] = null;
1263
1264
    if (isset($user['firstname']) && isset($user['lastname'])) {
1265
        // with only lowercase
1266
        $result['firstname'] = $user['firstname'];
1267
        $result['lastname'] = $user['lastname'];
1268
    } elseif (isset($user['firstName']) && isset($user['lastName'])) {
1269
        // with uppercase letters
1270
        $result['firstname'] = isset($user['firstName']) ? $user['firstName'] : null;
1271
        $result['lastname'] = isset($user['lastName']) ? $user['lastName'] : null;
1272
    }
1273
1274
    if (isset($user['email'])) {
1275
        $result['mail'] = isset($user['email']) ? $user['email'] : null;
1276
        $result['email'] = isset($user['email']) ? $user['email'] : null;
1277
    } else {
1278
        $result['mail'] = isset($user['mail']) ? $user['mail'] : null;
1279
        $result['email'] = isset($user['mail']) ? $user['mail'] : null;
1280
    }
1281
1282
    $result['complete_name'] = api_get_person_name($result['firstname'], $result['lastname']);
1283
    $result['complete_name_with_username'] = $result['complete_name'];
1284
1285
    if (!empty($user['username']) && 'false' === api_get_setting('profile.hide_username_with_complete_name')) {
1286
        $result['complete_name_with_username'] = $result['complete_name'].' ('.$user['username'].')';
1287
    }
1288
1289
    $showEmail = 'true' === api_get_setting('show_email_addresses');
1290
    if (!empty($user['email'])) {
1291
        $result['complete_name_with_email_forced'] = $result['complete_name'].' ('.$user['email'].')';
1292
        if ($showEmail) {
1293
            $result['complete_name_with_email'] = $result['complete_name'].' ('.$user['email'].')';
1294
        }
1295
    } else {
1296
        $result['complete_name_with_email'] = $result['complete_name'];
1297
        $result['complete_name_with_email_forced'] = $result['complete_name'];
1298
    }
1299
1300
    // Kept for historical reasons
1301
    $result['firstName'] = $result['firstname'];
1302
    $result['lastName'] = $result['lastname'];
1303
1304
    $attributes = [
1305
        'phone',
1306
        'address',
1307
        'picture_uri',
1308
        'official_code',
1309
        'status',
1310
        'active',
1311
        'auth_source',
1312
        'username',
1313
        'theme',
1314
        'language',
1315
        'locale',
1316
        'creator_id',
1317
        'registration_date',
1318
        'hr_dept_id',
1319
        'expiration_date',
1320
        'last_login',
1321
        'user_is_online',
1322
        'profile_completed',
1323
    ];
1324
1325
    if ('true' === api_get_setting('extended_profile')) {
1326
        $attributes[] = 'competences';
1327
        $attributes[] = 'diplomas';
1328
        $attributes[] = 'teach';
1329
        $attributes[] = 'openarea';
1330
    }
1331
1332
    foreach ($attributes as $attribute) {
1333
        $result[$attribute] = $user[$attribute] ?? null;
1334
    }
1335
1336
    $user_id = (int) $user['id'];
1337
    // Maintain the user_id index for backwards compatibility
1338
    $result['user_id'] = $result['id'] = $user_id;
1339
1340
    $hasCertificates = Certificate::getCertificateByUser($user_id);
1341
    $result['has_certificates'] = 0;
1342
    if (!empty($hasCertificates)) {
1343
        $result['has_certificates'] = 1;
1344
    }
1345
1346
    $result['icon_status'] = '';
1347
    $result['icon_status_medium'] = '';
1348
    $result['is_admin'] = UserManager::is_admin($user_id);
1349
1350
    // Getting user avatar.
1351
    if ($loadAvatars) {
1352
        $result['avatar'] = '';
1353
        $result['avatar_no_query'] = '';
1354
        $result['avatar_small'] = '';
1355
        $result['avatar_medium'] = '';
1356
1357
        if (empty($user['avatar'])) {
1358
            $originalFile = UserManager::getUserPicture(
1359
                $user_id,
1360
                USER_IMAGE_SIZE_ORIGINAL,
1361
                null,
1362
                $result
1363
            );
1364
            $result['avatar'] = $originalFile;
1365
            $avatarString = explode('?', $result['avatar']);
1366
            $result['avatar_no_query'] = reset($avatarString);
1367
        } else {
1368
            $result['avatar'] = $user['avatar'];
1369
            $avatarString = explode('?', $user['avatar']);
1370
            $result['avatar_no_query'] = reset($avatarString);
1371
        }
1372
1373
        if (!isset($user['avatar_small'])) {
1374
            $smallFile = UserManager::getUserPicture(
1375
                $user_id,
1376
                USER_IMAGE_SIZE_SMALL,
1377
                null,
1378
                $result
1379
            );
1380
            $result['avatar_small'] = $smallFile;
1381
        } else {
1382
            $result['avatar_small'] = $user['avatar_small'];
1383
        }
1384
1385
        if (!isset($user['avatar_medium'])) {
1386
            $mediumFile = UserManager::getUserPicture(
1387
                $user_id,
1388
                USER_IMAGE_SIZE_MEDIUM,
1389
                null,
1390
                $result
1391
            );
1392
            $result['avatar_medium'] = $mediumFile;
1393
        } else {
1394
            $result['avatar_medium'] = $user['avatar_medium'];
1395
        }
1396
1397
        $urlImg = api_get_path(WEB_IMG_PATH);
1398
        $iconStatus = '';
1399
        $iconStatusMedium = '';
1400
        $label = '';
1401
1402
        switch ($result['status']) {
1403
            case STUDENT:
1404
                if ($result['has_certificates']) {
1405
                    $iconStatus = $urlImg.'icons/svg/identifier_graduated.svg';
1406
                    $label = get_lang('Graduated');
1407
                } else {
1408
                    $iconStatus = $urlImg.'icons/svg/identifier_student.svg';
1409
                    $label = get_lang('Student');
1410
                }
1411
                break;
1412
            case COURSEMANAGER:
1413
                if ($result['is_admin']) {
1414
                    $iconStatus = $urlImg.'icons/svg/identifier_admin.svg';
1415
                    $label = get_lang('Admin');
1416
                } else {
1417
                    $iconStatus = $urlImg.'icons/svg/identifier_teacher.svg';
1418
                    $label = get_lang('Teacher');
1419
                }
1420
                break;
1421
            case STUDENT_BOSS:
1422
                $iconStatus = $urlImg.'icons/svg/identifier_teacher.svg';
1423
                $label = get_lang('StudentBoss');
1424
                break;
1425
        }
1426
1427
        if (!empty($iconStatus)) {
1428
            $iconStatusMedium = '<img src="'.$iconStatus.'" width="32px" height="32px">';
1429
            $iconStatus = '<img src="'.$iconStatus.'" width="22px" height="22px">';
1430
        }
1431
1432
        $result['icon_status'] = $iconStatus;
1433
        $result['icon_status_label'] = $label;
1434
        $result['icon_status_medium'] = $iconStatusMedium;
1435
    }
1436
1437
    if (isset($user['user_is_online'])) {
1438
        $result['user_is_online'] = true == $user['user_is_online'] ? 1 : 0;
1439
    }
1440
    if (isset($user['user_is_online_in_chat'])) {
1441
        $result['user_is_online_in_chat'] = (int) $user['user_is_online_in_chat'];
1442
    }
1443
1444
    if ($add_password) {
1445
        $result['password'] = $user['password'];
1446
    }
1447
1448
    if (isset($result['profile_completed'])) {
1449
        $result['profile_completed'] = $user['profile_completed'];
1450
    }
1451
1452
    $result['profile_url'] = api_get_path(WEB_CODE_PATH).'social/profile.php?u='.$user_id;
1453
1454
    // Send message link
1455
    $sendMessage = api_get_path(WEB_AJAX_PATH).'user_manager.ajax.php?a=get_user_popup&user_id='.$user_id;
1456
    $result['complete_name_with_message_link'] = Display::url(
1457
        $result['complete_name_with_username'],
1458
        $sendMessage,
1459
        ['class' => 'ajax']
1460
    );
1461
1462
    if (isset($user['extra'])) {
1463
        $result['extra'] = $user['extra'];
1464
    }
1465
1466
    return $result;
1467
}
1468
1469
/**
1470
 * Finds all the information about a user.
1471
 * If no parameter is passed you find all the information about the current user.
1472
 *
1473
 * @param int  $user_id
1474
 * @param bool $checkIfUserOnline
1475
 * @param bool $showPassword
1476
 * @param bool $loadExtraData
1477
 * @param bool $loadOnlyVisibleExtraData Get the user extra fields that are visible
1478
 * @param bool $loadAvatars              turn off to improve performance and if avatars are not needed
1479
 * @param bool $updateCache              update apc cache if exists
1480
 *
1481
 * @return mixed $user_info user_id, lastname, firstname, username, email, etc or false on error
1482
 *
1483
 * @author Patrick Cool <[email protected]>
1484
 * @author Julio Montoya
1485
 *
1486
 * @version 21 September 2004
1487
 */
1488
function api_get_user_info(
1489
    $user_id = 0,
1490
    $checkIfUserOnline = false,
1491
    $showPassword = false,
1492
    $loadExtraData = false,
1493
    $loadOnlyVisibleExtraData = false,
1494
    $loadAvatars = true,
1495
    $updateCache = false
1496
) {
1497
    // Make sure user_id is safe
1498
    $user_id = (int) $user_id;
1499
    $user = false;
1500
    if (empty($user_id)) {
1501
        $userFromSession = Session::read('_user');
1502
        if (isset($userFromSession) && !empty($userFromSession)) {
1503
            return $userFromSession;
1504
            /*
1505
            return _api_format_user(
1506
                $userFromSession,
1507
                $showPassword,
1508
                $loadAvatars
1509
            );*/
1510
        }
1511
1512
        return false;
1513
    }
1514
1515
    $sql = "SELECT * FROM ".Database::get_main_table(TABLE_MAIN_USER)."
1516
            WHERE id = $user_id";
1517
    $result = Database::query($sql);
1518
    if (Database::num_rows($result) > 0) {
1519
        $result_array = Database::fetch_array($result);
1520
        $result_array['user_is_online_in_chat'] = 0;
1521
        if ($checkIfUserOnline) {
1522
            $use_status_in_platform = user_is_online($user_id);
1523
            $result_array['user_is_online'] = $use_status_in_platform;
1524
            $user_online_in_chat = 0;
1525
            if ($use_status_in_platform) {
1526
                $user_status = UserManager::get_extra_user_data_by_field(
1527
                    $user_id,
1528
                    'user_chat_status',
1529
                    false,
1530
                    true
1531
                );
1532
                if (1 == (int) $user_status['user_chat_status']) {
1533
                    $user_online_in_chat = 1;
1534
                }
1535
            }
1536
            $result_array['user_is_online_in_chat'] = $user_online_in_chat;
1537
        }
1538
1539
        if ($loadExtraData) {
1540
            $fieldValue = new ExtraFieldValue('user');
1541
            $result_array['extra'] = $fieldValue->getAllValuesForAnItem(
1542
                $user_id,
1543
                $loadOnlyVisibleExtraData
1544
            );
1545
        }
1546
        $user = _api_format_user($result_array, $showPassword, $loadAvatars);
1547
    }
1548
1549
    return $user;
1550
}
1551
1552
function api_get_user_info_from_entity(
1553
    User $user,
1554
    $checkIfUserOnline = false,
1555
    $showPassword = false,
1556
    $loadExtraData = false,
1557
    $loadOnlyVisibleExtraData = false,
1558
    $loadAvatars = true,
1559
    $loadCertificate = false
1560
) {
1561
    if (!$user instanceof UserInterface) {
1562
        return false;
1563
    }
1564
1565
    // Make sure user_id is safe
1566
    $user_id = (int) $user->getId();
1567
1568
    if (empty($user_id)) {
1569
        $userFromSession = Session::read('_user');
1570
1571
        if (isset($userFromSession) && !empty($userFromSession)) {
1572
            return $userFromSession;
1573
        }
1574
1575
        return false;
1576
    }
1577
1578
    $result = [];
1579
    $result['user_is_online_in_chat'] = 0;
1580
    if ($checkIfUserOnline) {
1581
        $use_status_in_platform = user_is_online($user_id);
1582
        $result['user_is_online'] = $use_status_in_platform;
1583
        $user_online_in_chat = 0;
1584
        if ($use_status_in_platform) {
1585
            $user_status = UserManager::get_extra_user_data_by_field(
1586
                $user_id,
1587
                'user_chat_status',
1588
                false,
1589
                true
1590
            );
1591
            if (1 == (int) $user_status['user_chat_status']) {
1592
                $user_online_in_chat = 1;
1593
            }
1594
        }
1595
        $result['user_is_online_in_chat'] = $user_online_in_chat;
1596
    }
1597
1598
    if ($loadExtraData) {
1599
        $fieldValue = new ExtraFieldValue('user');
1600
        $result['extra'] = $fieldValue->getAllValuesForAnItem(
1601
            $user_id,
1602
            $loadOnlyVisibleExtraData
1603
        );
1604
    }
1605
1606
    $result['username'] = $user->getUsername();
1607
    $result['status'] = $user->getStatus();
1608
    $result['firstname'] = $user->getFirstname();
1609
    $result['lastname'] = $user->getLastname();
1610
    $result['email'] = $result['mail'] = $user->getEmail();
1611
    $result['complete_name'] = api_get_person_name($result['firstname'], $result['lastname']);
1612
    $result['complete_name_with_username'] = $result['complete_name'];
1613
1614
    if (!empty($result['username']) && 'false' === api_get_setting('profile.hide_username_with_complete_name')) {
1615
        $result['complete_name_with_username'] = $result['complete_name'].' ('.$result['username'].')';
1616
    }
1617
1618
    $showEmail = 'true' === api_get_setting('show_email_addresses');
1619
    if (!empty($result['email'])) {
1620
        $result['complete_name_with_email_forced'] = $result['complete_name'].' ('.$result['email'].')';
1621
        if ($showEmail) {
1622
            $result['complete_name_with_email'] = $result['complete_name'].' ('.$result['email'].')';
1623
        }
1624
    } else {
1625
        $result['complete_name_with_email'] = $result['complete_name'];
1626
        $result['complete_name_with_email_forced'] = $result['complete_name'];
1627
    }
1628
1629
    // Kept for historical reasons
1630
    $result['firstName'] = $result['firstname'];
1631
    $result['lastName'] = $result['lastname'];
1632
1633
    $attributes = [
1634
        'picture_uri',
1635
        'last_login',
1636
        'user_is_online',
1637
    ];
1638
1639
    $result['phone'] = $user->getPhone();
1640
    $result['address'] = $user->getAddress();
1641
    $result['official_code'] = $user->getOfficialCode();
1642
    $result['active'] = $user->isActive();
1643
    $result['auth_source'] = $user->getAuthSource();
1644
    $result['language'] = $user->getLocale();
1645
    $result['creator_id'] = $user->getCreatorId();
1646
    $result['registration_date'] = $user->getRegistrationDate()->format('Y-m-d H:i:s');
1647
    $result['hr_dept_id'] = $user->getHrDeptId();
1648
    $result['expiration_date'] = '';
1649
    if ($user->getExpirationDate()) {
1650
        $result['expiration_date'] = $user->getExpirationDate()->format('Y-m-d H:i:s');
1651
    }
1652
1653
    $result['last_login'] = null;
1654
    if ($user->getLastLogin()) {
1655
        $result['last_login'] = $user->getLastLogin()->format('Y-m-d H:i:s');
1656
    }
1657
1658
    $result['competences'] = $user->getCompetences();
1659
    $result['diplomas'] = $user->getDiplomas();
1660
    $result['teach'] = $user->getTeach();
1661
    $result['openarea'] = $user->getOpenarea();
1662
    $user_id = (int) $user->getId();
1663
1664
    // Maintain the user_id index for backwards compatibility
1665
    $result['user_id'] = $result['id'] = $user_id;
1666
1667
    if ($loadCertificate) {
1668
        $hasCertificates = Certificate::getCertificateByUser($user_id);
1669
        $result['has_certificates'] = 0;
1670
        if (!empty($hasCertificates)) {
1671
            $result['has_certificates'] = 1;
1672
        }
1673
    }
1674
1675
    $result['icon_status'] = '';
1676
    $result['icon_status_medium'] = '';
1677
    $result['is_admin'] = UserManager::is_admin($user_id);
1678
1679
    // Getting user avatar.
1680
    if ($loadAvatars) {
1681
        $result['avatar'] = '';
1682
        $result['avatar_no_query'] = '';
1683
        $result['avatar_small'] = '';
1684
        $result['avatar_medium'] = '';
1685
        $urlImg = '/';
1686
        $iconStatus = '';
1687
        $iconStatusMedium = '';
1688
1689
        switch ($user->getStatus()) {
1690
            case STUDENT:
1691
                if (isset($result['has_certificates']) && $result['has_certificates']) {
1692
                    $iconStatus = $urlImg.'icons/svg/identifier_graduated.svg';
1693
                } else {
1694
                    $iconStatus = $urlImg.'icons/svg/identifier_student.svg';
1695
                }
1696
                break;
1697
            case COURSEMANAGER:
1698
                if ($result['is_admin']) {
1699
                    $iconStatus = $urlImg.'icons/svg/identifier_admin.svg';
1700
                } else {
1701
                    $iconStatus = $urlImg.'icons/svg/identifier_teacher.svg';
1702
                }
1703
                break;
1704
            case STUDENT_BOSS:
1705
                $iconStatus = $urlImg.'icons/svg/identifier_teacher.svg';
1706
                break;
1707
        }
1708
1709
        if (!empty($iconStatus)) {
1710
            $iconStatusMedium = '<img src="'.$iconStatus.'" width="32px" height="32px">';
1711
            $iconStatus = '<img src="'.$iconStatus.'" width="22px" height="22px">';
1712
        }
1713
1714
        $result['icon_status'] = $iconStatus;
1715
        $result['icon_status_medium'] = $iconStatusMedium;
1716
    }
1717
1718
    if (isset($result['user_is_online'])) {
1719
        $result['user_is_online'] = true == $result['user_is_online'] ? 1 : 0;
1720
    }
1721
    if (isset($result['user_is_online_in_chat'])) {
1722
        $result['user_is_online_in_chat'] = $result['user_is_online_in_chat'];
1723
    }
1724
1725
    $result['password'] = '';
1726
    if ($showPassword) {
1727
        $result['password'] = $user->getPassword();
1728
    }
1729
1730
    if (isset($result['profile_completed'])) {
1731
        $result['profile_completed'] = $result['profile_completed'];
1732
    }
1733
1734
    $result['profile_url'] = api_get_path(WEB_CODE_PATH).'social/profile.php?u='.$user_id;
1735
1736
    // Send message link
1737
    $sendMessage = api_get_path(WEB_AJAX_PATH).'user_manager.ajax.php?a=get_user_popup&user_id='.$user_id;
1738
    $result['complete_name_with_message_link'] = Display::url(
1739
        $result['complete_name_with_username'],
1740
        $sendMessage,
1741
        ['class' => 'ajax']
1742
    );
1743
1744
    if (isset($result['extra'])) {
1745
        $result['extra'] = $result['extra'];
1746
    }
1747
1748
    return $result;
1749
}
1750
1751
function api_get_lp_entity(int $id): ?CLp
1752
{
1753
    return Database::getManager()->getRepository(CLp::class)->find($id);
1754
}
1755
1756
function api_get_user_entity(int $userId = 0): ?User
1757
{
1758
    $userId = $userId ?: api_get_user_id();
1759
    $repo = Container::getUserRepository();
1760
1761
    return $repo->find($userId);
1762
}
1763
1764
function api_get_current_user(): ?User
1765
{
1766
    $isLoggedIn = Container::getAuthorizationChecker()->isGranted('IS_AUTHENTICATED_REMEMBERED');
1767
    if (false === $isLoggedIn) {
1768
        return null;
1769
    }
1770
1771
    $token = Container::getTokenStorage()->getToken();
1772
1773
    if (null !== $token) {
1774
        return $token->getUser();
1775
    }
1776
1777
    return null;
1778
}
1779
1780
/**
1781
 * Finds all the information about a user from username instead of user id.
1782
 *
1783
 * @param string $username
1784
 *
1785
 * @return mixed $user_info array user_id, lastname, firstname, username, email or false on error
1786
 *
1787
 * @author Yannick Warnier <[email protected]>
1788
 */
1789
function api_get_user_info_from_username($username)
1790
{
1791
    if (empty($username)) {
1792
        return false;
1793
    }
1794
    $username = trim($username);
1795
1796
    $sql = "SELECT * FROM ".Database::get_main_table(TABLE_MAIN_USER)."
1797
            WHERE username='".Database::escape_string($username)."'";
1798
    $result = Database::query($sql);
1799
    if (Database::num_rows($result) > 0) {
1800
        $resultArray = Database::fetch_array($result);
1801
1802
        return _api_format_user($resultArray);
1803
    }
1804
1805
    return false;
1806
}
1807
1808
/**
1809
 * Get first user with an email.
1810
 *
1811
 * @param string $email
1812
 *
1813
 * @return array|bool
1814
 */
1815
function api_get_user_info_from_email($email = '')
1816
{
1817
    if (empty($email)) {
1818
        return false;
1819
    }
1820
    $sql = "SELECT * FROM ".Database::get_main_table(TABLE_MAIN_USER)."
1821
            WHERE email ='".Database::escape_string($email)."' LIMIT 1";
1822
    $result = Database::query($sql);
1823
    if (Database::num_rows($result) > 0) {
1824
        $resultArray = Database::fetch_array($result);
1825
1826
        return _api_format_user($resultArray);
1827
    }
1828
1829
    return false;
1830
}
1831
1832
/**
1833
 * @return string
1834
 */
1835
function api_get_course_id()
1836
{
1837
    return Session::read('_cid', null);
1838
}
1839
1840
/**
1841
 * Returns the current course id (integer).
1842
 *
1843
 * @param ?string $code Optional course code
1844
 *
1845
 * @return int
1846
 */
1847
function api_get_course_int_id(?string $code = null): int
1848
{
1849
    if (!empty($code)) {
1850
        $code = Database::escape_string($code);
1851
        $row = Database::select(
1852
            'id',
1853
            Database::get_main_table(TABLE_MAIN_COURSE),
1854
            ['where' => ['code = ?' => [$code]]],
1855
            'first'
1856
        );
1857
1858
        if (is_array($row) && isset($row['id'])) {
1859
            return $row['id'];
1860
        } else {
1861
            return 0;
1862
        }
1863
    }
1864
1865
    $cid = Session::read('_real_cid', 0);
1866
    if (empty($cid) && isset($_REQUEST['cid'])) {
1867
        $cid = (int) $_REQUEST['cid'];
1868
    }
1869
1870
    return $cid;
0 ignored issues
show
Bug Best Practice introduced by
The expression return $cid could return the type null which is incompatible with the type-hinted return integer. Consider adding an additional type-check to rule them out.
Loading history...
1871
}
1872
1873
/**
1874
 * Gets a course setting from the current course_setting table. Try always using integer values.
1875
 *
1876
 * @param string       $settingName The name of the setting we want from the table
1877
 * @param Course|array $courseInfo
1878
 * @param bool         $force       force checking the value in the database
1879
 *
1880
 * @return mixed The value of that setting in that table. Return -1 if not found.
1881
 */
1882
function api_get_course_setting($settingName, $courseInfo = null, $force = false)
1883
{
1884
    if (empty($courseInfo)) {
1885
        $courseInfo = api_get_course_info();
1886
    }
1887
1888
    if (empty($courseInfo) || empty($settingName)) {
1889
        return -1;
1890
    }
1891
1892
    if ($courseInfo instanceof Course) {
1893
        $courseId = $courseInfo->getId();
1894
    } else {
1895
        $courseId = isset($courseInfo['real_id']) && !empty($courseInfo['real_id']) ? $courseInfo['real_id'] : 0;
1896
    }
1897
1898
    if (empty($courseId)) {
1899
        return -1;
1900
    }
1901
1902
    static $courseSettingInfo = [];
1903
1904
    if ($force) {
1905
        $courseSettingInfo = [];
1906
    }
1907
1908
    if (!isset($courseSettingInfo[$courseId])) {
1909
        $table = Database::get_course_table(TABLE_COURSE_SETTING);
1910
        $settingName = Database::escape_string($settingName);
1911
1912
        $sql = "SELECT variable, value FROM $table
1913
                WHERE c_id = $courseId ";
1914
        $res = Database::query($sql);
1915
        if (Database::num_rows($res) > 0) {
1916
            $result = Database::store_result($res, 'ASSOC');
1917
            $courseSettingInfo[$courseId] = array_column($result, 'value', 'variable');
1918
1919
            if (isset($courseSettingInfo[$courseId]['email_alert_manager_on_new_quiz'])) {
1920
                $value = $courseSettingInfo[$courseId]['email_alert_manager_on_new_quiz'];
1921
                if (!is_null($value)) {
1922
                    $result = explode(',', $value);
1923
                    $courseSettingInfo[$courseId]['email_alert_manager_on_new_quiz'] = $result;
1924
                }
1925
            }
1926
        }
1927
    }
1928
1929
    if (isset($courseSettingInfo[$courseId]) && isset($courseSettingInfo[$courseId][$settingName])) {
1930
        return $courseSettingInfo[$courseId][$settingName];
1931
    }
1932
1933
    return -1;
1934
}
1935
1936
function api_get_course_plugin_setting($plugin, $settingName, $courseInfo = [])
1937
{
1938
    $value = api_get_course_setting($settingName, $courseInfo, true);
1939
1940
    if (-1 === $value) {
1941
        // Check global settings
1942
        $value = api_get_plugin_setting($plugin, $settingName);
1943
        if ('true' === $value) {
1944
            return 1;
1945
        }
1946
        if ('false' === $value) {
1947
            return 0;
1948
        }
1949
        if (null === $value) {
1950
            return -1;
1951
        }
1952
    }
1953
1954
    return $value;
1955
}
1956
1957
/**
1958
 * Gets an anonymous user ID.
1959
 *
1960
 * For some tools that need tracking, like the learnpath tool, it is necessary
1961
 * to have a usable user-id to enable some kind of tracking, even if not
1962
 * perfect. An anonymous ID is taken from the users table by looking for a
1963
 * status of "6" (anonymous).
1964
 *
1965
 * @return int User ID of the anonymous user, or O if no anonymous user found
1966
 */
1967
function api_get_anonymous_id()
1968
{
1969
    // Find if another anon is connected now
1970
    $table = Database::get_main_table(TABLE_STATISTIC_TRACK_E_LOGIN);
1971
    $tableU = Database::get_main_table(TABLE_MAIN_USER);
1972
    $ip = Database::escape_string(api_get_real_ip());
1973
    $max = (int) api_get_setting('admin.max_anonymous_users');
1974
    if ($max >= 2) {
1975
        $sql = "SELECT * FROM $table as TEL
1976
                JOIN $tableU as U
1977
                ON U.id = TEL.login_user_id
1978
                WHERE TEL.user_ip = '$ip'
1979
                    AND U.status = ".ANONYMOUS."
1980
                    AND U.id != 2 ";
1981
1982
        $result = Database::query($sql);
1983
        if (empty(Database::num_rows($result))) {
1984
            $login = uniqid('anon_');
1985
            $anonList = UserManager::get_user_list(['status' => ANONYMOUS], ['registration_date ASC']);
1986
            if (count($anonList) >= $max) {
1987
                foreach ($anonList as $userToDelete) {
1988
                    UserManager::delete_user($userToDelete['user_id']);
1989
                    break;
1990
                }
1991
            }
1992
1993
            return UserManager::create_user(
0 ignored issues
show
Bug Best Practice introduced by
The expression return UserManager::crea...lhost', $login, $login) could also return false which is incompatible with the documented return type integer. Did you maybe forget to handle an error condition?

If the returned type also contains false, it is an indicator that maybe an error condition leading to the specific return statement remains unhandled.

Loading history...
1994
                $login,
1995
                'anon',
1996
                ANONYMOUS,
1997
                ' anonymous@localhost',
1998
                $login,
1999
                $login
2000
            );
2001
        } else {
2002
            $row = Database::fetch_assoc($result);
2003
2004
            return $row['id'];
2005
        }
2006
    }
2007
2008
    $table = Database::get_main_table(TABLE_MAIN_USER);
2009
    $sql = "SELECT id
2010
            FROM $table
2011
            WHERE status = ".ANONYMOUS." ";
2012
    $res = Database::query($sql);
2013
    if (Database::num_rows($res) > 0) {
2014
        $row = Database::fetch_assoc($res);
2015
2016
        return $row['id'];
2017
    }
2018
2019
    // No anonymous user was found.
2020
    return 0;
2021
}
2022
2023
/**
2024
 * @param int $courseId
2025
 * @param int $sessionId
2026
 * @param int $groupId
2027
 *
2028
 * @return string
2029
 */
2030
function api_get_cidreq_params($courseId, $sessionId = 0, $groupId = 0)
2031
{
2032
    $courseId = !empty($courseId) ? (int) $courseId : 0;
2033
    $sessionId = !empty($sessionId) ? (int) $sessionId : 0;
2034
    $groupId = !empty($groupId) ? (int) $groupId : 0;
2035
2036
    $url = 'cid='.$courseId;
2037
    $url .= '&sid='.$sessionId;
2038
    $url .= '&gid='.$groupId;
2039
2040
    return $url;
2041
}
2042
2043
/**
2044
 * Returns the current course url part including session, group, and gradebook params.
2045
 *
2046
 * @param bool   $addSessionId
2047
 * @param bool   $addGroupId
2048
 * @param string $origin
2049
 *
2050
 * @return string Course & session references to add to a URL
2051
 */
2052
function api_get_cidreq($addSessionId = true, $addGroupId = true, $origin = '')
2053
{
2054
    $courseId = api_get_course_int_id();
2055
    if (0 === $courseId && isset($_REQUEST['cid'])) {
2056
        $courseId = (int) $_REQUEST['cid'];
2057
    }
2058
    $url = empty($courseId) ? '' : 'cid='.$courseId;
2059
    $origin = empty($origin) ? api_get_origin() : Security::remove_XSS($origin);
2060
2061
    if ($addSessionId) {
2062
        if (!empty($url)) {
2063
            $sessionId = api_get_session_id();
2064
            if (0 === $sessionId && isset($_REQUEST['sid'])) {
2065
                $sessionId = (int) $_REQUEST['sid'];
2066
            }
2067
            $url .= 0 === $sessionId ? '&sid=0' : '&sid='.$sessionId;
2068
        }
2069
    }
2070
2071
    if ($addGroupId) {
2072
        if (!empty($url)) {
2073
            $url .= 0 == api_get_group_id() ? '&gid=0' : '&gid='.api_get_group_id();
2074
        }
2075
    }
2076
2077
    if (!empty($url)) {
2078
        $url .= '&gradebook='.(int) api_is_in_gradebook();
2079
        if (false !== $origin) {
2080
            $url .= '&origin=' . $origin;
0 ignored issues
show
Bug introduced by
Are you sure $origin of type array|string can be used in concatenation? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

2080
            $url .= '&origin=' . /** @scrutinizer ignore-type */ $origin;
Loading history...
2081
        }
2082
    }
2083
2084
    return $url;
2085
}
2086
2087
/**
2088
 * Get if we visited a gradebook page.
2089
 *
2090
 * @return bool
2091
 */
2092
function api_is_in_gradebook()
2093
{
2094
    return Session::read('in_gradebook', false);
2095
}
2096
2097
/**
2098
 * Set that we are in a page inside a gradebook.
2099
 */
2100
function api_set_in_gradebook()
2101
{
2102
    Session::write('in_gradebook', true);
2103
}
2104
2105
/**
2106
 * Remove gradebook session.
2107
 */
2108
function api_remove_in_gradebook()
2109
{
2110
    Session::erase('in_gradebook');
2111
}
2112
2113
/**
2114
 * Returns the current course info array see api_format_course_array()
2115
 * If the course_code is given, the returned array gives info about that
2116
 * particular course, if none given it gets the course info from the session.
2117
 *
2118
 * @param string $courseCode
2119
 *
2120
 * @return array
2121
 */
2122
function api_get_course_info($courseCode = null)
2123
{
2124
    if (!empty($courseCode)) {
2125
        $course = Container::getCourseRepository()->findOneByCode($courseCode);
2126
2127
        return api_format_course_array($course);
2128
    }
2129
2130
    $course = Session::read('_course');
2131
    if ('-1' == $course) {
2132
        $course = [];
2133
    }
2134
2135
    if (empty($course) && isset($_REQUEST['cid'])) {
2136
        $course = api_get_course_info_by_id((int) $_REQUEST['cid']);
2137
    }
2138
2139
    return $course;
2140
}
2141
2142
/**
2143
 * @param int $courseId
2144
 */
2145
function api_get_course_entity($courseId = 0): ?Course
2146
{
2147
    if (empty($courseId)) {
2148
        $courseId = api_get_course_int_id();
2149
    }
2150
2151
    if (empty($courseId)) {
2152
        return null;
2153
    }
2154
2155
    return Container::getCourseRepository()->find($courseId);
2156
}
2157
2158
/**
2159
 * @param int $id
2160
 */
2161
function api_get_session_entity($id = 0): ?SessionEntity
2162
{
2163
    if (empty($id)) {
2164
        $id = api_get_session_id();
2165
    }
2166
2167
    if (empty($id)) {
2168
        return null;
2169
    }
2170
2171
    return Container::getSessionRepository()->find($id);
2172
}
2173
2174
/**
2175
 * @param int $id
2176
 */
2177
function api_get_group_entity($id = 0): ?CGroup
2178
{
2179
    if (empty($id)) {
2180
        $id = api_get_group_id();
2181
    }
2182
2183
    return Container::getGroupRepository()->find($id);
2184
}
2185
2186
/**
2187
 * @param int $id
2188
 */
2189
function api_get_url_entity($id = 0): ?AccessUrl
2190
{
2191
    if (empty($id)) {
2192
        $id = api_get_current_access_url_id();
2193
    }
2194
2195
    return Container::getAccessUrlRepository()->find($id);
2196
}
2197
2198
/**
2199
 * Returns the current course info array.
2200
2201
 * Now if the course_code is given, the returned array gives info about that
2202
 * particular course, not specially the current one.
2203
 *
2204
 * @param int $id Numeric ID of the course
2205
 *
2206
 * @return array The course info as an array formatted by api_format_course_array, including category.title
2207
 */
2208
function api_get_course_info_by_id(?int $id = 0)
2209
{
2210
    if (empty($id)) {
2211
        $course = Session::read('_course', []);
2212
2213
        return $course;
2214
    }
2215
2216
    $course = Container::getCourseRepository()->find($id);
2217
    if (empty($course)) {
2218
        return [];
2219
    }
2220
2221
    return api_format_course_array($course);
2222
}
2223
2224
/**
2225
 * Reformat the course array (output by api_get_course_info()) in order, mostly,
2226
 * to switch from 'code' to 'id' in the array.
2227
 *
2228
 * @return array
2229
 *
2230
 * @todo eradicate the false "id"=code field of the $_course array and use the int id
2231
 */
2232
function api_format_course_array(Course $course = null)
2233
{
2234
    if (empty($course)) {
2235
        return [];
2236
    }
2237
2238
    $courseData = [];
2239
    $courseData['id'] = $courseData['real_id'] = $course->getId();
2240
2241
    // Added
2242
    $courseData['code'] = $courseData['sysCode'] = $course->getCode();
2243
    $courseData['name'] = $courseData['title'] = $course->getTitle(); // 'name' only used for backwards compatibility - should be removed in the long run
2244
    $courseData['official_code'] = $courseData['visual_code'] = $course->getVisualCode();
2245
    $courseData['creation_date'] = $course->getCreationDate()->format('Y-m-d H:i:s');
2246
    $courseData['titular'] = $course->getTutorName();
2247
    $courseData['language'] = $courseData['course_language'] = $course->getCourseLanguage();
2248
    $courseData['extLink']['url'] = $courseData['department_url'] = $course->getDepartmentUrl();
2249
    $courseData['extLink']['name'] = $courseData['department_name'] = $course->getDepartmentName();
2250
2251
    $courseData['visibility'] = $course->getVisibility();
2252
    $courseData['subscribe_allowed'] = $courseData['subscribe'] = $course->getSubscribe();
2253
    $courseData['unsubscribe'] = $course->getUnsubscribe();
2254
    $courseData['activate_legal'] = $course->getActivateLegal();
2255
    $courseData['legal'] = $course->getLegal();
2256
    $courseData['show_score'] = $course->getShowScore(); //used in the work tool
2257
    $courseData['video_url'] = $course->getVideoUrl();
2258
    $courseData['sticky'] = (int) $course->isSticky();
2259
2260
    $coursePath = '/course/';
2261
    $webCourseHome = $coursePath.$courseData['real_id'].'/home';
2262
2263
    // Course password
2264
    $courseData['registration_code'] = $course->getRegistrationCode();
2265
    $courseData['disk_quota'] = $course->getDiskQuota();
2266
    $courseData['course_public_url'] = $webCourseHome;
2267
    $courseData['about_url'] = $coursePath.$courseData['real_id'].'/about';
2268
    $courseData['add_teachers_to_sessions_courses'] = $course->isAddTeachersToSessionsCourses();
2269
2270
    $image = Display::getMdiIcon(
2271
        ObjectIcon::COURSE,
2272
        'ch-tool-icon',
2273
        null,
2274
        ICON_SIZE_BIG
2275
    );
2276
2277
    $illustration = Container::getIllustrationRepository()->getIllustrationUrl($course);
2278
    if (!empty($illustration)) {
2279
        $image = $illustration;
2280
    }
2281
2282
    $courseData['course_image'] = $image.'?filter=course_picture_small';
2283
    $courseData['course_image_large'] = $image.'?filter=course_picture_medium';
2284
2285
    if ('true' === api_get_setting('course.show_course_duration') && null !== $course->getDuration()) {
2286
        $courseData['duration'] = $course->getDuration();
2287
    }
2288
2289
    return $courseData;
2290
}
2291
2292
/**
2293
 * Returns a difficult to guess password.
2294
 */
2295
function api_generate_password(int $length = 8, $useRequirements = true): string
2296
{
2297
    if ($length < 2) {
2298
        $length = 2;
2299
    }
2300
2301
    $charactersLowerCase = 'abcdefghijkmnopqrstuvwxyz';
2302
    $charactersUpperCase = 'ABCDEFGHJKLMNPQRSTUVWXYZ';
2303
    $charactersSpecials = '!@#$%^&*()_+-=[]{}|;:,.<>?';
2304
    $minNumbers = 2;
2305
    $length = $length - $minNumbers;
2306
    $minLowerCase = round($length / 2);
2307
    $minUpperCase = $length - $minLowerCase;
2308
    $minSpecials = 1; // Default minimum special characters
2309
2310
    $password = '';
2311
    $passwordRequirements = $useRequirements ? Security::getPasswordRequirements() : [];
2312
2313
    $factory = new RandomLib\Factory();
2314
    $generator = $factory->getGenerator(new SecurityLib\Strength(SecurityLib\Strength::MEDIUM));
2315
2316
    if (!empty($passwordRequirements)) {
2317
        $length = $passwordRequirements['min']['length'];
2318
        $minNumbers = $passwordRequirements['min']['numeric'];
2319
        $minLowerCase = $passwordRequirements['min']['lowercase'];
2320
        $minUpperCase = $passwordRequirements['min']['uppercase'];
2321
        $minSpecials = $passwordRequirements['min']['specials'];
2322
2323
        $rest = $length - $minNumbers - $minLowerCase - $minUpperCase - $minSpecials;
2324
        // Add the rest to fill the length requirement
2325
        if ($rest > 0) {
2326
            $password .= $generator->generateString($rest, $charactersLowerCase.$charactersUpperCase);
2327
        }
2328
    }
2329
2330
    // Min digits default 2
2331
    for ($i = 0; $i < $minNumbers; $i++) {
2332
        $password .= $generator->generateInt(2, 9);
2333
    }
2334
2335
    // Min lowercase
2336
    $password .= $generator->generateString($minLowerCase, $charactersLowerCase);
2337
2338
    // Min uppercase
2339
    $password .= $generator->generateString($minUpperCase, $charactersUpperCase);
2340
2341
    // Min special characters
2342
    $password .= $generator->generateString($minSpecials, $charactersSpecials);
2343
2344
    // Shuffle the password to ensure randomness
2345
    $password = str_shuffle($password);
2346
2347
    return $password;
2348
}
2349
2350
/**
2351
 * Checks a password to see wether it is OK to use.
2352
 *
2353
 * @param string $password
2354
 *
2355
 * @return bool if the password is acceptable, false otherwise
2356
 *              Notes about what a password "OK to use" is:
2357
 *              1. The password should be at least 5 characters long.
2358
 *              2. Only English letters (uppercase or lowercase, it doesn't matter) and digits are allowed.
2359
 *              3. The password should contain at least 3 letters.
2360
 *              4. It should contain at least 2 digits.
2361
 *              Settings will change if the configuration value is set: password_requirements
2362
 */
2363
function api_check_password($password)
2364
{
2365
    $passwordRequirements = Security::getPasswordRequirements();
2366
2367
    $minLength = $passwordRequirements['min']['length'];
2368
    $minNumbers = $passwordRequirements['min']['numeric'];
2369
    // Optional
2370
    $minLowerCase = $passwordRequirements['min']['lowercase'];
2371
    $minUpperCase = $passwordRequirements['min']['uppercase'];
2372
2373
    $minLetters = $minLowerCase + $minUpperCase;
2374
    $passwordLength = api_strlen($password);
2375
2376
    $conditions = [
2377
        'min_length' => $passwordLength >= $minLength,
2378
    ];
2379
2380
    $digits = 0;
2381
    $lowerCase = 0;
2382
    $upperCase = 0;
2383
2384
    for ($i = 0; $i < $passwordLength; $i++) {
2385
        $currentCharacterCode = api_ord(api_substr($password, $i, 1));
2386
        if ($currentCharacterCode >= 65 && $currentCharacterCode <= 90) {
2387
            $upperCase++;
2388
        }
2389
2390
        if ($currentCharacterCode >= 97 && $currentCharacterCode <= 122) {
2391
            $lowerCase++;
2392
        }
2393
        if ($currentCharacterCode >= 48 && $currentCharacterCode <= 57) {
2394
            $digits++;
2395
        }
2396
    }
2397
2398
    // Min number of digits
2399
    $conditions['min_numeric'] = $digits >= $minNumbers;
2400
2401
    if (!empty($minUpperCase)) {
2402
        // Uppercase
2403
        $conditions['min_uppercase'] = $upperCase >= $minUpperCase;
2404
    }
2405
2406
    if (!empty($minLowerCase)) {
2407
        // Lowercase
2408
        $conditions['min_lowercase'] = $upperCase >= $minLowerCase;
2409
    }
2410
2411
    // Min letters
2412
    $letters = $upperCase + $lowerCase;
2413
    $conditions['min_letters'] = $letters >= $minLetters;
2414
2415
    $isPasswordOk = true;
2416
    foreach ($conditions as $condition) {
2417
        if (false === $condition) {
2418
            $isPasswordOk = false;
2419
            break;
2420
        }
2421
    }
2422
2423
    if (false === $isPasswordOk) {
2424
        $output = get_lang('The new password does not match the minimum security requirements').'<br />';
2425
        $output .= Security::getPasswordRequirementsToString($conditions);
2426
2427
        Display::addFlash(Display::return_message($output, 'warning', false));
2428
    }
2429
2430
    return $isPasswordOk;
2431
}
2432
2433
/**
2434
 * Gets the current Chamilo (not PHP/cookie) session ID.
2435
 *
2436
 * @return int O if no active session, the session ID otherwise
2437
 */
2438
function api_get_session_id()
2439
{
2440
    return (int) Session::read('sid', 0);
2441
}
2442
2443
/**
2444
 * Gets the current Chamilo (not social network) group ID.
2445
 *
2446
 * @return int O if no active session, the session ID otherwise
2447
 */
2448
function api_get_group_id()
2449
{
2450
    return Session::read('gid', 0);
2451
}
2452
2453
/**
2454
 * Gets the current or given session name.
2455
 *
2456
 * @param   int     Session ID (optional)
2457
 *
2458
 * @return string The session name, or null if not found
2459
 */
2460
function api_get_session_name($session_id = 0)
2461
{
2462
    if (empty($session_id)) {
2463
        $session_id = api_get_session_id();
2464
        if (empty($session_id)) {
2465
            return null;
2466
        }
2467
    }
2468
    $t = Database::get_main_table(TABLE_MAIN_SESSION);
2469
    $s = "SELECT title FROM $t WHERE id = ".(int) $session_id;
2470
    $r = Database::query($s);
2471
    $c = Database::num_rows($r);
2472
    if ($c > 0) {
2473
        //technically, there can be only one, but anyway we take the first
2474
        $rec = Database::fetch_array($r);
2475
2476
        return $rec['title'];
2477
    }
2478
2479
    return null;
2480
}
2481
2482
/**
2483
 * Gets the session info by id.
2484
 *
2485
 * @param int $id Session ID
2486
 *
2487
 * @return array information of the session
2488
 */
2489
function api_get_session_info($id)
2490
{
2491
    return SessionManager::fetch($id);
2492
}
2493
2494
/**
2495
 * Gets the session visibility by session id.
2496
 *
2497
 * @param int  $session_id
2498
 * @param int  $courseId
2499
 * @param bool $ignore_visibility_for_admins
2500
 *
2501
 * @return int
2502
 *             0 = session still available,
2503
 *             SESSION_VISIBLE_READ_ONLY = 1,
2504
 *             SESSION_VISIBLE = 2,
2505
 *             SESSION_INVISIBLE = 3
2506
 */
2507
function api_get_session_visibility(
2508
    $session_id,
2509
    $courseId = null,
2510
    $ignore_visibility_for_admins = true,
2511
    $userId = 0
2512
) {
2513
    if (api_is_platform_admin()) {
2514
        if ($ignore_visibility_for_admins) {
2515
            return SESSION_AVAILABLE;
2516
        }
2517
    }
2518
    $userId = empty($userId) ? api_get_user_id() : (int) $userId;
2519
2520
    $now = time();
2521
    if (empty($session_id)) {
2522
        return 0; // Means that the session is still available.
2523
    }
2524
2525
    $session_id = (int) $session_id;
2526
    $tbl_session = Database::get_main_table(TABLE_MAIN_SESSION);
2527
2528
    $result = Database::query("SELECT * FROM $tbl_session WHERE id = $session_id");
2529
2530
    if (Database::num_rows($result) <= 0) {
2531
        return SESSION_INVISIBLE;
2532
    }
2533
2534
    $row = Database::fetch_assoc($result);
2535
    $visibility = $row['visibility'];
2536
2537
    // I don't care the session visibility.
2538
    if (empty($row['access_start_date']) && empty($row['access_end_date'])) {
2539
        // Session duration per student.
2540
        if (isset($row['duration']) && !empty($row['duration'])) {
2541
            $duration = $row['duration'] * 24 * 60 * 60;
2542
            $courseAccess = CourseManager::getFirstCourseAccessPerSessionAndUser($session_id, $userId);
2543
2544
            // If there is a session duration but there is no previous
2545
            // access by the user, then the session is still available
2546
            if (0 == count($courseAccess)) {
2547
                return SESSION_AVAILABLE;
2548
            }
2549
2550
            $currentTime = time();
2551
            $firstAccess = isset($courseAccess['login_course_date'])
2552
                ? api_strtotime($courseAccess['login_course_date'], 'UTC')
2553
                : 0;
2554
            $userDurationData = SessionManager::getUserSession($userId, $session_id);
2555
            $userDuration = isset($userDurationData['duration'])
2556
                ? (intval($userDurationData['duration']) * 24 * 60 * 60)
2557
                : 0;
2558
2559
            $totalDuration = $firstAccess + $duration + $userDuration;
2560
2561
            return $totalDuration > $currentTime ? SESSION_AVAILABLE : SESSION_VISIBLE_READ_ONLY;
2562
        }
2563
2564
        return SESSION_AVAILABLE;
2565
    }
2566
2567
    // If start date was set.
2568
    if (!empty($row['access_start_date'])) {
2569
        $visibility = $now > api_strtotime($row['access_start_date'], 'UTC') ? SESSION_AVAILABLE : SESSION_INVISIBLE;
2570
    } else {
2571
        // If there's no start date, assume it's available until the end date
2572
        $visibility = SESSION_AVAILABLE;
2573
    }
2574
2575
    // If the end date was set.
2576
    if (!empty($row['access_end_date'])) {
2577
        // Only if date_start said that it was ok
2578
        if (SESSION_AVAILABLE === $visibility) {
2579
            $visibility = $now < api_strtotime($row['access_end_date'], 'UTC')
2580
                ? SESSION_AVAILABLE // Date still available
2581
                : $row['visibility']; // Session ends
2582
        }
2583
    }
2584
2585
    // If I'm a coach the visibility can change in my favor depending in the coach dates.
2586
    $isCoach = api_is_coach($session_id, $courseId);
2587
2588
    if ($isCoach) {
2589
        // Test start date.
2590
        if (!empty($row['coach_access_start_date'])) {
2591
            $start = api_strtotime($row['coach_access_start_date'], 'UTC');
2592
            $visibility = $start < $now ? SESSION_AVAILABLE : SESSION_INVISIBLE;
2593
        }
2594
2595
        // Test end date.
2596
        if (!empty($row['coach_access_end_date'])) {
2597
            if (SESSION_AVAILABLE === $visibility) {
2598
                $endDateCoach = api_strtotime($row['coach_access_end_date'], 'UTC');
2599
                $visibility = $endDateCoach >= $now ? SESSION_AVAILABLE : $row['visibility'];
2600
            }
2601
        }
2602
    }
2603
2604
    return $visibility;
2605
}
2606
2607
/**
2608
 * This function returns a (star) session icon if the session is not null and
2609
 * the user is not a student.
2610
 *
2611
 * @param int $sessionId
2612
 * @param int $statusId  User status id - if 5 (student), will return empty
2613
 *
2614
 * @return string Session icon
2615
 */
2616
function api_get_session_image($sessionId, User $user)
2617
{
2618
    $sessionId = (int) $sessionId;
2619
    $image = '';
2620
    if (!$user->hasRole('ROLE_STUDENT')) {
2621
        // Check whether is not a student
2622
        if ($sessionId > 0) {
2623
            $image = '&nbsp;&nbsp;'.Display::getMdiIcon(
2624
                ObjectIcon::STAR,
2625
                'ch-tool-icon',
2626
                'align:absmiddle;',
2627
                ICON_SIZE_SMALL,
2628
                get_lang('Session-specific resource')
2629
            );
2630
        }
2631
    }
2632
2633
    return $image;
2634
}
2635
2636
/**
2637
 * This function add an additional condition according to the session of the course.
2638
 *
2639
 * @param int    $session_id        session id
2640
 * @param bool   $and               optional, true if more than one condition false if the only condition in the query
2641
 * @param bool   $with_base_content optional, true to accept content with session=0 as well,
2642
 *                                  false for strict session condition
2643
 * @param string $session_field
2644
 *
2645
 * @return string condition of the session
2646
 */
2647
function api_get_session_condition(
2648
    $session_id,
2649
    $and = true,
2650
    $with_base_content = false,
2651
    $session_field = 'session_id'
2652
) {
2653
    $session_id = (int) $session_id;
2654
2655
    if (empty($session_field)) {
2656
        $session_field = 'session_id';
2657
    }
2658
    // Condition to show resources by session
2659
    $condition_add = $and ? ' AND ' : ' WHERE ';
2660
2661
    if ($with_base_content) {
2662
        $condition_session = $condition_add." ( $session_field = $session_id OR $session_field = 0 OR $session_field IS NULL) ";
2663
    } else {
2664
        if (empty($session_id)) {
2665
            $condition_session = $condition_add." ($session_field = $session_id OR $session_field IS NULL)";
2666
        } else {
2667
            $condition_session = $condition_add." $session_field = $session_id ";
2668
        }
2669
    }
2670
2671
    return $condition_session;
2672
}
2673
2674
/**
2675
 * Returns the value of a setting from the web-adjustable admin config settings.
2676
 *
2677
 * WARNING true/false are stored as string, so when comparing you need to check e.g.
2678
 * if (api_get_setting('show_navigation_menu') == 'true') //CORRECT
2679
 * instead of
2680
 * if (api_get_setting('show_navigation_menu') == true) //INCORRECT
2681
 *
2682
 * @param string $variable The variable name
2683
 *
2684
 * @return string|array
2685
 */
2686
function api_get_setting($variable, $isArray = false, $key = null)
2687
{
2688
    if ('cli' === php_sapi_name()) {
2689
        $entityManager = Database::getManager();
2690
        if (false !== strpos($variable, '.')) {
2691
            [$category, $variable] = explode('.', $variable, 2);
2692
            $repository = $entityManager->getRepository(SettingsCurrent::class);
2693
            $setting = $repository->findOneBy([
2694
                'category' => $category,
2695
                'variable' => $variable
2696
            ]);
2697
        } else {
2698
            $repository = $entityManager->getRepository(SettingsCurrent::class);
2699
            $setting = $repository->findOneBy(['variable' => $variable]);
2700
        }
2701
2702
        if ($setting) {
2703
            $settingValue = $setting->getSelectedValue();
2704
            if (is_string($settingValue) && $isArray && !empty($settingValue)) {
2705
                $decodedValue = json_decode($settingValue, true);
2706
                if (is_array($decodedValue)) {
2707
                    return $decodedValue;
2708
                }
2709
            }
2710
2711
            return $settingValue;
2712
        }
2713
2714
        return '';
2715
    }
2716
2717
    $settingsManager = Container::getSettingsManager();
2718
    if (empty($settingsManager)) {
2719
        return '';
2720
    }
2721
    $variable = trim($variable);
2722
2723
    switch ($variable) {
2724
        case 'server_type':
2725
            $test = ['dev', 'test'];
2726
            $environment = Container::getEnvironment();
2727
            if (in_array($environment, $test)) {
2728
                return 'test';
2729
            }
2730
2731
            return 'prod';
2732
        // deprecated settings
2733
        // no break
2734
        case 'openid_authentication':
2735
        case 'service_ppt2lp':
2736
        case 'formLogin_hide_unhide_label':
2737
            return false;
2738
            break;
0 ignored issues
show
Unused Code introduced by
break is not strictly necessary here and could be removed.

The break statement is not necessary if it is preceded for example by a return statement:

switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}

If you would like to keep this construct to be consistent with other case statements, you can safely mark this issue as a false-positive.

Loading history...
2739
        case 'tool_visible_by_default_at_creation':
2740
            $values = $settingsManager->getSetting($variable);
2741
            $newResult = [];
2742
            foreach ($values as $parameter) {
2743
                $newResult[$parameter] = 'true';
2744
            }
2745
2746
            return $newResult;
2747
            break;
2748
        default:
2749
            $settingValue = $settingsManager->getSetting($variable, true);
2750
            if (is_string($settingValue) && $isArray && !empty($settingValue)) {
2751
                // Check if the value is a valid JSON string
2752
                $decodedValue = json_decode($settingValue, true);
2753
2754
                // If it's a valid JSON string and the result is an array, return it
2755
                if (is_array($decodedValue)) {
2756
                    return $decodedValue;
2757
                }
2758
2759
                // If it's not an array, continue with the normal flow
2760
                // Optional: If you need to evaluate the value using eval
2761
                $strArrayValue = rtrim($settingValue, ';');
2762
                $value = eval("return $strArrayValue;");
0 ignored issues
show
introduced by
The use of eval() is discouraged.
Loading history...
2763
                if (is_array($value)) {
2764
                    return $value;
2765
                }
2766
            }
2767
2768
            // If the value is not a JSON array or wasn't returned previously, continue with the normal flow
2769
            if (!empty($key) && isset($settingValue[$variable][$key])) {
2770
                return $settingValue[$variable][$key];
2771
            }
2772
2773
            return $settingValue;
2774
            break;
2775
    }
2776
}
2777
2778
/**
2779
 * @param string $variable
2780
 * @param string $option
2781
 *
2782
 * @return bool
2783
 */
2784
function api_get_setting_in_list($variable, $option)
2785
{
2786
    $value = api_get_setting($variable);
2787
2788
    return in_array($option, $value);
2789
}
2790
2791
/**
2792
 * @param string $plugin
2793
 * @param string $variable
2794
 *
2795
 * @return string
2796
 */
2797
function api_get_plugin_setting($plugin, $variable)
2798
{
2799
    $variableName = $plugin.'_'.$variable;
2800
    //$result = api_get_setting($variableName);
2801
    $params = [
2802
        'category = ? AND subkey = ? AND variable = ?' => [
2803
            'Plugins',
2804
            $plugin,
2805
            $variableName,
2806
        ],
2807
    ];
2808
    $table = Database::get_main_table(TABLE_MAIN_SETTINGS);
2809
    $result = Database::select(
2810
        'selected_value',
2811
        $table,
2812
        ['where' => $params],
2813
        'one'
2814
    );
2815
    if ($result) {
2816
        $value = $result['selected_value'];
2817
        $serializedValue = @unserialize($result['selected_value'], []);
2818
        if (false !== $serializedValue) {
2819
            $value = $serializedValue;
2820
        }
2821
2822
        return $value;
2823
    }
2824
2825
    return null;
2826
    /// Old code
2827
2828
    $variableName = $plugin.'_'.$variable;
0 ignored issues
show
Unused Code introduced by
$variableName = $plugin . '_' . $variable is not reachable.

This check looks for unreachable code. It uses sophisticated control flow analysis techniques to find statements which will never be executed.

Unreachable code is most often the result of return, die or exit statements that have been added for debug purposes.

function fx() {
    try {
        doSomething();
        return true;
    }
    catch (\Exception $e) {
        return false;
    }

    return false;
}

In the above example, the last return false will never be executed, because a return statement has already been met in every possible execution path.

Loading history...
2829
    $result = api_get_setting($variableName);
2830
2831
    if (isset($result[$plugin])) {
2832
        $value = $result[$plugin];
2833
2834
        $unserialized = UnserializeApi::unserialize('not_allowed_classes', $value, true);
2835
2836
        if (false !== $unserialized) {
2837
            $value = $unserialized;
2838
        }
2839
2840
        return $value;
2841
    }
2842
2843
    return null;
2844
}
2845
2846
/**
2847
 * Returns the value of a setting from the web-adjustable admin config settings.
2848
 */
2849
function api_get_settings_params($params)
2850
{
2851
    $table = Database::get_main_table(TABLE_MAIN_SETTINGS);
2852
2853
    return Database::select('*', $table, ['where' => $params]);
2854
}
2855
2856
/**
2857
 * @param array $params example: [id = ? => '1']
2858
 *
2859
 * @return array
2860
 */
2861
function api_get_settings_params_simple($params)
2862
{
2863
    $table = Database::get_main_table(TABLE_MAIN_SETTINGS);
2864
2865
    return Database::select('*', $table, ['where' => $params], 'one');
0 ignored issues
show
Bug Best Practice introduced by
The expression return Database::select(...re' => $params), 'one') also could return the type integer which is incompatible with the documented return type array.
Loading history...
2866
}
2867
2868
/**
2869
 * Returns the value of a setting from the web-adjustable admin config settings.
2870
 */
2871
function api_delete_settings_params($params)
2872
{
2873
    $table = Database::get_main_table(TABLE_MAIN_SETTINGS);
2874
2875
    return Database::delete($table, $params);
2876
}
2877
2878
/**
2879
 * Returns an escaped version of $_SERVER['PHP_SELF'] to avoid XSS injection.
2880
 *
2881
 * @return string Escaped version of $_SERVER['PHP_SELF']
2882
 */
2883
function api_get_self()
2884
{
2885
    return htmlentities($_SERVER['PHP_SELF']);
2886
}
2887
2888
/**
2889
 * Checks whether current user is a platform administrator.
2890
 *
2891
 * @param bool $allowSessionAdmins Whether session admins should be considered admins or not
2892
 * @param bool $allowDrh           Whether HR directors should be considered admins or not
2893
 *
2894
 * @return bool true if the user has platform admin rights,
2895
 *              false otherwise
2896
 *
2897
 * @see usermanager::is_admin(user_id) for a user-id specific function
2898
 */
2899
function api_is_platform_admin($allowSessionAdmins = false, $allowDrh = false)
2900
{
2901
    $currentUser = api_get_current_user();
2902
2903
    if (null === $currentUser) {
2904
        return false;
2905
    }
2906
2907
    $isAdmin = $currentUser->hasRole('ROLE_ADMIN') || $currentUser->hasRole('ROLE_SUPER_ADMIN');
2908
2909
    if ($isAdmin) {
2910
        return true;
2911
    }
2912
2913
    if ($allowSessionAdmins && $currentUser->hasRole('ROLE_SESSION_MANAGER')) {
2914
        return true;
2915
    }
2916
2917
    if ($allowDrh && $currentUser->hasRole('ROLE_HR')) {
2918
        return true;
2919
    }
2920
2921
    return false;
2922
}
2923
2924
/**
2925
 * Checks whether the user given as user id is in the admin table.
2926
 *
2927
 * @param int $user_id If none provided, will use current user
2928
 * @param int $url     URL ID. If provided, also check if the user is active on given URL
2929
 *
2930
 * @return bool True if the user is admin, false otherwise
2931
 */
2932
function api_is_platform_admin_by_id($user_id = null, $url = null)
2933
{
2934
    $user_id = (int) $user_id;
2935
    if (empty($user_id)) {
2936
        $user_id = api_get_user_id();
2937
    }
2938
    $admin_table = Database::get_main_table(TABLE_MAIN_ADMIN);
2939
    $sql = "SELECT * FROM $admin_table WHERE user_id = $user_id";
2940
    $res = Database::query($sql);
2941
    $is_admin = 1 === Database::num_rows($res);
2942
    if (!$is_admin || !isset($url)) {
2943
        return $is_admin;
2944
    }
2945
    // We get here only if $url is set
2946
    $url = (int) $url;
2947
    $url_user_table = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
2948
    $sql = "SELECT * FROM $url_user_table
2949
            WHERE access_url_id = $url AND user_id = $user_id";
2950
    $res = Database::query($sql);
2951
2952
    return 1 === Database::num_rows($res);
2953
}
2954
2955
/**
2956
 * Checks whether current user is allowed to create courses.
2957
 *
2958
 * @return bool true if the user has course creation rights,
2959
 *              false otherwise
2960
 */
2961
function api_is_allowed_to_create_course()
2962
{
2963
    if (api_is_platform_admin()) {
2964
        return true;
2965
    }
2966
2967
    // Teachers can only create courses
2968
    if (api_is_teacher()) {
2969
        if ('true' === api_get_setting('allow_users_to_create_courses')) {
2970
            return true;
2971
        } else {
2972
            return false;
2973
        }
2974
    }
2975
2976
    return Session::read('is_allowedCreateCourse');
2977
}
2978
2979
/**
2980
 * Checks whether the current user is a course administrator.
2981
 *
2982
 * @return bool True if current user is a course administrator
2983
 */
2984
function api_is_course_admin()
2985
{
2986
    if (api_is_platform_admin()) {
2987
        return true;
2988
    }
2989
2990
    $user = api_get_current_user();
2991
    if ($user) {
2992
        if (
2993
            $user->hasRole('ROLE_CURRENT_COURSE_SESSION_TEACHER') ||
2994
            $user->hasRole('ROLE_CURRENT_COURSE_TEACHER')
2995
        ) {
2996
            return true;
2997
        }
2998
    }
2999
3000
    return false;
3001
}
3002
3003
/**
3004
 * Checks whether the current user is a course coach
3005
 * Based on the presence of user in session_rel_user.relation_type (as session general coach, value 3).
3006
 *
3007
 * @return bool True if current user is a course coach
3008
 */
3009
function api_is_session_general_coach()
3010
{
3011
    return Session::read('is_session_general_coach');
3012
}
3013
3014
/**
3015
 * Checks whether the current user is a course tutor
3016
 * Based on the presence of user in session_rel_course_rel_user.user_id with status = 2.
3017
 *
3018
 * @return bool True if current user is a course tutor
3019
 */
3020
function api_is_course_tutor()
3021
{
3022
    return Session::read('is_courseTutor');
3023
}
3024
3025
/**
3026
 * @param int $user_id
3027
 * @param int $courseId
3028
 * @param int $session_id
3029
 *
3030
 * @return bool
3031
 */
3032
function api_is_course_session_coach($user_id, $courseId, $session_id)
3033
{
3034
    $session_table = Database::get_main_table(TABLE_MAIN_SESSION);
3035
    $session_rel_course_rel_user_table = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
3036
3037
    $user_id = (int) $user_id;
3038
    $session_id = (int) $session_id;
3039
    $courseId = (int) $courseId;
3040
3041
    $sql = "SELECT DISTINCT session.id
3042
            FROM $session_table
3043
            INNER JOIN $session_rel_course_rel_user_table session_rc_ru
3044
            ON session.id = session_rc_ru.session_id
3045
            WHERE
3046
                session_rc_ru.user_id = '".$user_id."'  AND
3047
                session_rc_ru.c_id = '$courseId' AND
3048
                session_rc_ru.status = ".SessionEntity::COURSE_COACH." AND
3049
                session_rc_ru.session_id = '$session_id'";
3050
    $result = Database::query($sql);
3051
3052
    return Database::num_rows($result) > 0;
3053
}
3054
3055
/**
3056
 * Checks whether the current user is a course or session coach.
3057
 *
3058
 * @param int $session_id
3059
 * @param int $courseId
3060
 * @param bool  Check whether we are in student view and, if we are, return false
3061
 * @param int $userId
3062
 *
3063
 * @return bool True if current user is a course or session coach
3064
 */
3065
function api_is_coach($session_id = 0, $courseId = null, $check_student_view = true, $userId = 0)
3066
{
3067
    $userId = empty($userId) ? api_get_user_id() : (int) $userId;
3068
3069
    if (!empty($session_id)) {
3070
        $session_id = (int) $session_id;
3071
    } else {
3072
        $session_id = api_get_session_id();
3073
    }
3074
3075
    // The student preview was on
3076
    if ($check_student_view && api_is_student_view_active()) {
3077
        return false;
3078
    }
3079
3080
    if (!empty($courseId)) {
3081
        $courseId = (int) $courseId;
3082
    } else {
3083
        $courseId = api_get_course_int_id();
3084
    }
3085
3086
    $session_table = Database::get_main_table(TABLE_MAIN_SESSION);
3087
    $session_rel_course_rel_user_table = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
3088
    $tblSessionRelUser = Database::get_main_table(TABLE_MAIN_SESSION_USER);
3089
    $sessionIsCoach = [];
3090
3091
    if (!empty($courseId)) {
3092
        $sql = "SELECT DISTINCT s.id, title, access_start_date, access_end_date
3093
                FROM $session_table s
3094
                INNER JOIN $session_rel_course_rel_user_table session_rc_ru
3095
                ON session_rc_ru.session_id = s.id AND session_rc_ru.user_id = '".$userId."'
3096
                WHERE
3097
                    session_rc_ru.c_id = '$courseId' AND
3098
                    session_rc_ru.status =".SessionEntity::COURSE_COACH." AND
3099
                    session_rc_ru.session_id = '$session_id'";
3100
        $result = Database::query($sql);
3101
        $sessionIsCoach = Database::store_result($result);
3102
    }
3103
3104
    if (!empty($session_id)) {
3105
        $sql = "SELECT DISTINCT s.id
3106
                FROM $session_table AS s
3107
                INNER JOIN $tblSessionRelUser sru
3108
                ON s.id = sru.session_id
3109
                WHERE
3110
                    sru.user_id = $userId AND
3111
                    s.id = $session_id AND
3112
                    sru.relation_type = ".SessionEntity::GENERAL_COACH."
3113
                ORDER BY s.access_start_date, s.access_end_date, s.title";
3114
        $result = Database::query($sql);
3115
        if (!empty($sessionIsCoach)) {
3116
            $sessionIsCoach = array_merge(
3117
                $sessionIsCoach,
3118
                Database::store_result($result)
3119
            );
3120
        } else {
3121
            $sessionIsCoach = Database::store_result($result);
3122
        }
3123
    }
3124
3125
    return count($sessionIsCoach) > 0;
3126
}
3127
3128
function api_user_has_role(string $role, ?User $user = null): bool
3129
{
3130
    if (null === $user) {
3131
        $user = api_get_current_user();
3132
    }
3133
3134
    if (null === $user) {
3135
        return false;
3136
    }
3137
3138
    return $user->hasRole($role);
3139
}
3140
3141
function api_is_allowed_in_course(): bool
3142
{
3143
    if (api_is_platform_admin()) {
3144
        return true;
3145
    }
3146
3147
    $user = api_get_current_user();
3148
    if ($user instanceof User) {
3149
        if ($user->hasRole('ROLE_CURRENT_COURSE_SESSION_STUDENT') ||
3150
            $user->hasRole('ROLE_CURRENT_COURSE_SESSION_TEACHER') ||
3151
            $user->hasRole('ROLE_CURRENT_COURSE_STUDENT') ||
3152
            $user->hasRole('ROLE_CURRENT_COURSE_TEACHER')
3153
        ) {
3154
            return true;
3155
        }
3156
    }
3157
3158
    return false;
3159
}
3160
3161
/**
3162
 * Checks whether current user is a student boss.
3163
 */
3164
function api_is_student_boss(?User $user = null): bool
3165
{
3166
    return api_user_has_role('ROLE_STUDENT_BOSS', $user);
3167
}
3168
3169
/**
3170
 * Checks whether the current user is a session administrator.
3171
 *
3172
 * @return bool True if current user is a course administrator
3173
 */
3174
function api_is_session_admin(?User $user = null)
3175
{
3176
    return api_user_has_role('ROLE_SESSION_MANAGER', $user);
3177
}
3178
3179
/**
3180
 * Checks whether the current user is a human resources manager.
3181
 *
3182
 * @return bool True if current user is a human resources manager
3183
 */
3184
function api_is_drh()
3185
{
3186
    return api_user_has_role('ROLE_HR');
3187
}
3188
3189
/**
3190
 * Checks whether the current user is a student.
3191
 *
3192
 * @return bool True if current user is a human resources manager
3193
 */
3194
function api_is_student()
3195
{
3196
    return api_user_has_role('ROLE_STUDENT');
3197
}
3198
3199
/**
3200
 * Checks whether the current user has the status 'teacher'.
3201
 *
3202
 * @return bool True if current user is a human resources manager
3203
 */
3204
function api_is_teacher()
3205
{
3206
    return api_user_has_role('ROLE_TEACHER');
3207
}
3208
3209
/**
3210
 * Checks whether the current user is a invited user.
3211
 *
3212
 * @return bool
3213
 */
3214
function api_is_invitee()
3215
{
3216
    return api_user_has_role('ROLE_INVITEE');
3217
}
3218
3219
/**
3220
 * This function checks whether a session is assigned into a category.
3221
 *
3222
 * @param int       - session id
0 ignored issues
show
Documentation Bug introduced by
The doc comment - at position 0 could not be parsed: Unknown type name '-' at position 0 in -.
Loading history...
3223
 * @param string    - category name
3224
 *
3225
 * @return bool - true if is found, otherwise false
3226
 */
3227
function api_is_session_in_category($session_id, $category_name)
3228
{
3229
    $session_id = (int) $session_id;
3230
    $category_name = Database::escape_string($category_name);
3231
    $tbl_session = Database::get_main_table(TABLE_MAIN_SESSION);
3232
    $tbl_session_category = Database::get_main_table(TABLE_MAIN_SESSION_CATEGORY);
3233
3234
    $sql = "SELECT 1
3235
            FROM $tbl_session
3236
            WHERE $session_id IN (
3237
                SELECT s.id FROM $tbl_session s, $tbl_session_category sc
3238
                WHERE
3239
                  s.session_category_id = sc.id AND
3240
                  sc.name LIKE '%$category_name'
3241
            )";
3242
    $rs = Database::query($sql);
3243
3244
    if (Database::num_rows($rs) > 0) {
3245
        return true;
3246
    }
3247
3248
    return false;
3249
}
3250
3251
/**
3252
 * Displays options for switching between student view and course manager view.
3253
 *
3254
 * Changes in version 1.2 (Patrick Cool)
3255
 * Student view switch now behaves as a real switch. It maintains its current state until the state
3256
 * is changed explicitly
3257
 *
3258
 * Changes in version 1.1 (Patrick Cool)
3259
 * student view now works correctly in subfolders of the document tool
3260
 * student view works correctly in the new links tool
3261
 *
3262
 * Example code for using this in your tools:
3263
 * //if ($is_courseAdmin && api_get_setting('student_view_enabled') == 'true') {
3264
 * //   display_tool_view_option($isStudentView);
3265
 * //}
3266
 * //and in later sections, use api_is_allowed_to_edit()
3267
 *
3268
 * @author Roan Embrechts
3269
 * @author Patrick Cool
3270
 * @author Julio Montoya, changes added in Chamilo
3271
 *
3272
 * @version 1.2
3273
 *
3274
 * @todo rewrite code so it is easier to understand
3275
 */
3276
function api_display_tool_view_option()
3277
{
3278
    if ('true' != api_get_setting('student_view_enabled')) {
3279
        return '';
3280
    }
3281
3282
    $sourceurl = '';
3283
    $is_framed = false;
3284
    // Exceptions apply for all multi-frames pages
3285
    if (false !== strpos($_SERVER['REQUEST_URI'], 'chat/chat_banner.php')) {
3286
        // The chat is a multiframe bit that doesn't work too well with the student_view, so do not show the link
3287
        return '';
3288
    }
3289
3290
    // Uncomment to remove student view link from document view page
3291
    if (false !== strpos($_SERVER['REQUEST_URI'], 'lp/lp_header.php')) {
3292
        if (empty($_GET['lp_id'])) {
3293
            return '';
3294
        }
3295
        $sourceurl = substr($_SERVER['REQUEST_URI'], 0, strpos($_SERVER['REQUEST_URI'], '?'));
3296
        $sourceurl = str_replace(
3297
            'lp/lp_header.php',
3298
            'lp/lp_controller.php?'.api_get_cidreq().'&action=view&lp_id='.intval($_GET['lp_id']).'&isStudentView='.('studentview' == $_SESSION['studentview'] ? 'false' : 'true'),
3299
            $sourceurl
3300
        );
3301
        //showinframes doesn't handle student view anyway...
3302
        //return '';
3303
        $is_framed = true;
3304
    }
3305
3306
    // Check whether the $_SERVER['REQUEST_URI'] contains already url parameters (thus a questionmark)
3307
    if (!$is_framed) {
3308
        if (false === strpos($_SERVER['REQUEST_URI'], '?')) {
3309
            $sourceurl = api_get_self().'?'.api_get_cidreq();
3310
        } else {
3311
            $sourceurl = $_SERVER['REQUEST_URI'];
3312
        }
3313
    }
3314
3315
    $output_string = '';
3316
    if (!empty($_SESSION['studentview'])) {
3317
        if ('studentview' == $_SESSION['studentview']) {
3318
            // We have to remove the isStudentView=true from the $sourceurl
3319
            $sourceurl = str_replace('&isStudentView=true', '', $sourceurl);
3320
            $sourceurl = str_replace('&isStudentView=false', '', $sourceurl);
3321
            $output_string .= '<a class="btn btn--primary btn-sm" href="'.$sourceurl.'&isStudentView=false" target="_self">'.
3322
                Display::getMdiIcon('eye').' '.get_lang('Switch to teacher view').'</a>';
3323
        } elseif ('teacherview' == $_SESSION['studentview']) {
3324
            // Switching to teacherview
3325
            $sourceurl = str_replace('&isStudentView=true', '', $sourceurl);
3326
            $sourceurl = str_replace('&isStudentView=false', '', $sourceurl);
3327
            $output_string .= '<a class="btn btn--plain btn-sm" href="'.$sourceurl.'&isStudentView=true" target="_self">'.
3328
                Display::getMdiIcon('eye').' '.get_lang('Switch to student view').'</a>';
3329
        }
3330
    } else {
3331
        $output_string .= '<a class="btn btn--plain btn-sm" href="'.$sourceurl.'&isStudentView=true" target="_self">'.
3332
            Display::getMdiIcon('eye').' '.get_lang('Switch to student view').'</a>';
3333
    }
3334
    $output_string = Security::remove_XSS($output_string);
3335
    $html = Display::tag('div', $output_string, ['class' => 'view-options']);
3336
3337
    return $html;
3338
}
3339
3340
/**
3341
 * Function that removes the need to directly use is_courseAdmin global in
3342
 * tool scripts. It returns true or false depending on the user's rights in
3343
 * this particular course.
3344
 * Optionally checking for tutor and coach roles here allows us to use the
3345
 * student_view feature altogether with these roles as well.
3346
 *
3347
 * @param bool  Whether to check if the user has the tutor role
3348
 * @param bool  Whether to check if the user has the coach role
3349
 * @param bool  Whether to check if the user has the session coach role
3350
 * @param bool  check the student view or not
3351
 *
3352
 * @author Roan Embrechts
3353
 * @author Patrick Cool
3354
 * @author Julio Montoya
3355
 *
3356
 * @version 1.1, February 2004
3357
 *
3358
 * @return bool true: the user has the rights to edit, false: he does not
3359
 */
3360
function api_is_allowed_to_edit(
3361
    $tutor = false,
3362
    $coach = false,
3363
    $session_coach = false,
3364
    $check_student_view = true
3365
) {
3366
    $allowSessionAdminEdit = 'true' === api_get_setting('session.session_admins_edit_courses_content');
3367
    // Admins can edit anything.
3368
    if (api_is_platform_admin($allowSessionAdminEdit)) {
3369
        //The student preview was on
3370
        if ($check_student_view && api_is_student_view_active()) {
3371
            return false;
3372
        }
3373
3374
        return true;
3375
    }
3376
3377
    $sessionId = api_get_session_id();
3378
3379
    if ($sessionId && 'true' === api_get_setting('session.session_courses_read_only_mode')) {
3380
        $efv = new ExtraFieldValue('course');
3381
        $lockExrafieldField = $efv->get_values_by_handler_and_field_variable(
3382
            api_get_course_int_id(),
3383
            'session_courses_read_only_mode'
3384
        );
3385
3386
        if (!empty($lockExrafieldField['value'])) {
3387
            return false;
3388
        }
3389
    }
3390
3391
    $is_allowed_coach_to_edit = api_is_coach(null, null, $check_student_view);
3392
    $session_visibility = api_get_session_visibility($sessionId);
3393
    $is_courseAdmin = api_is_course_admin();
3394
3395
    if (!$is_courseAdmin && $tutor) {
3396
        // If we also want to check if the user is a tutor...
3397
        $is_courseAdmin = $is_courseAdmin || api_is_course_tutor();
3398
    }
3399
3400
    if (!$is_courseAdmin && $coach) {
3401
        // If we also want to check if the user is a coach...';
3402
        // Check if session visibility is read only for coaches.
3403
        if (SESSION_VISIBLE_READ_ONLY == $session_visibility) {
3404
            $is_allowed_coach_to_edit = false;
3405
        }
3406
3407
        if ('true' === api_get_setting('allow_coach_to_edit_course_session')) {
3408
            // Check if coach is allowed to edit a course.
3409
            $is_courseAdmin = $is_courseAdmin || $is_allowed_coach_to_edit;
3410
        }
3411
    }
3412
3413
    if (!$is_courseAdmin && $session_coach) {
3414
        $is_courseAdmin = $is_courseAdmin || $is_allowed_coach_to_edit;
3415
    }
3416
3417
    // Check if the student_view is enabled, and if so, if it is activated.
3418
    if ('true' === api_get_setting('student_view_enabled')) {
3419
        $studentView = api_is_student_view_active();
3420
        if (!empty($sessionId)) {
3421
            // Check if session visibility is read only for coaches.
3422
            if (SESSION_VISIBLE_READ_ONLY == $session_visibility) {
3423
                $is_allowed_coach_to_edit = false;
3424
            }
3425
3426
            $is_allowed = false;
3427
            if ('true' === api_get_setting('allow_coach_to_edit_course_session')) {
3428
                // Check if coach is allowed to edit a course.
3429
                $is_allowed = $is_allowed_coach_to_edit;
3430
            }
3431
            if ($check_student_view) {
3432
                $is_allowed = $is_allowed && false === $studentView;
3433
            }
3434
        } else {
3435
            $is_allowed = $is_courseAdmin;
3436
            if ($check_student_view) {
3437
                $is_allowed = $is_courseAdmin && false === $studentView;
3438
            }
3439
        }
3440
3441
        return $is_allowed;
3442
    } else {
3443
        return $is_courseAdmin;
3444
    }
3445
}
3446
3447
/**
3448
 * Returns true if user is a course coach of at least one course in session.
3449
 *
3450
 * @param int $sessionId
3451
 *
3452
 * @return bool
3453
 */
3454
function api_is_coach_of_course_in_session($sessionId)
3455
{
3456
    if (api_is_platform_admin()) {
3457
        return true;
3458
    }
3459
3460
    $userId = api_get_user_id();
3461
    $courseList = UserManager::get_courses_list_by_session(
3462
        $userId,
3463
        $sessionId
3464
    );
3465
3466
    // Session visibility.
3467
    $visibility = api_get_session_visibility(
3468
        $sessionId,
3469
        null,
3470
        false
3471
    );
3472
3473
    if (SESSION_VISIBLE != $visibility && !empty($courseList)) {
3474
        // Course Coach session visibility.
3475
        $blockedCourseCount = 0;
3476
        $closedVisibilityList = [
3477
            COURSE_VISIBILITY_CLOSED,
3478
            COURSE_VISIBILITY_HIDDEN,
3479
        ];
3480
3481
        foreach ($courseList as $course) {
3482
            // Checking session visibility
3483
            $sessionCourseVisibility = api_get_session_visibility(
3484
                $sessionId,
3485
                $course['real_id']
3486
            );
3487
3488
            $courseIsVisible = !in_array(
3489
                $course['visibility'],
3490
                $closedVisibilityList
3491
            );
3492
            if (false === $courseIsVisible || SESSION_INVISIBLE == $sessionCourseVisibility) {
3493
                $blockedCourseCount++;
3494
            }
3495
        }
3496
3497
        // If all courses are blocked then no show in the list.
3498
        if ($blockedCourseCount === count($courseList)) {
3499
            $visibility = SESSION_INVISIBLE;
3500
        } else {
3501
            $visibility = SESSION_VISIBLE;
3502
        }
3503
    }
3504
3505
    switch ($visibility) {
3506
        case SESSION_VISIBLE_READ_ONLY:
3507
        case SESSION_VISIBLE:
3508
        case SESSION_AVAILABLE:
3509
            return true;
3510
            break;
0 ignored issues
show
Unused Code introduced by
break is not strictly necessary here and could be removed.

The break statement is not necessary if it is preceded for example by a return statement:

switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}

If you would like to keep this construct to be consistent with other case statements, you can safely mark this issue as a false-positive.

Loading history...
3511
        case SESSION_INVISIBLE:
3512
            return false;
3513
    }
3514
3515
    return false;
3516
}
3517
3518
/**
3519
 * Checks if a student can edit contents in a session depending
3520
 * on the session visibility.
3521
 *
3522
 * @param bool $tutor Whether to check if the user has the tutor role
3523
 * @param bool $coach Whether to check if the user has the coach role
3524
 *
3525
 * @return bool true: the user has the rights to edit, false: he does not
3526
 */
3527
function api_is_allowed_to_session_edit($tutor = false, $coach = false)
3528
{
3529
    if (api_is_allowed_to_edit($tutor, $coach)) {
3530
        // If I'm a teacher, I will return true in order to not affect the normal behaviour of Chamilo tools.
3531
        return true;
3532
    } else {
3533
        $sessionId = api_get_session_id();
3534
3535
        if (0 == $sessionId) {
3536
            // I'm not in a session so i will return true to not affect the normal behaviour of Chamilo tools.
3537
            return true;
3538
        } else {
3539
            // I'm in a session and I'm a student
3540
            // Get the session visibility
3541
            $session_visibility = api_get_session_visibility($sessionId);
3542
            // if 5 the session is still available
3543
            switch ($session_visibility) {
3544
                case SESSION_VISIBLE_READ_ONLY: // 1
3545
                    return false;
3546
                case SESSION_VISIBLE:           // 2
3547
                    return true;
3548
                case SESSION_INVISIBLE:         // 3
3549
                    return false;
3550
                case SESSION_AVAILABLE:         //5
3551
                    return true;
3552
            }
3553
        }
3554
    }
3555
3556
    return false;
3557
}
3558
3559
/**
3560
 * Current user is anon?
3561
 *
3562
 * @return bool true if this user is anonymous, false otherwise
3563
 */
3564
function api_is_anonymous()
3565
{
3566
    return !Container::getAuthorizationChecker()->isGranted('IS_AUTHENTICATED');
3567
}
3568
3569
/**
3570
 * Displays message "You are not allowed here..." and exits the entire script.
3571
 *
3572
 * @param bool $print_headers Whether to print headers (default = false -> does not print them)
3573
 * @param string $message
3574
 * @param int $responseCode
3575
 *
3576
 * @throws Exception
3577
 */
3578
function api_not_allowed(
3579
    $print_headers = false,
3580
    $message = null,
3581
    $responseCode = 0
3582
): never {
3583
    throw new NotAllowedException($message ?: 'You are not allowed', null, $responseCode);
3584
}
3585
3586
/**
3587
 * @param string $languageIsoCode
3588
 *
3589
 * @return string
3590
 */
3591
function languageToCountryIsoCode($languageIsoCode)
3592
{
3593
    $allow = ('true' === api_get_setting('language.language_flags_by_country'));
3594
3595
    // @todo save in DB
3596
    switch ($languageIsoCode) {
3597
        case 'ar':
3598
            $country = 'ae';
3599
            break;
3600
        case 'bs':
3601
            $country = 'ba';
3602
            break;
3603
        case 'ca':
3604
            $country = 'es';
3605
            if ($allow) {
3606
                $country = 'catalan';
3607
            }
3608
            break;
3609
        case 'cs':
3610
            $country = 'cz';
3611
            break;
3612
        case 'da':
3613
            $country = 'dk';
3614
            break;
3615
        case 'el':
3616
            $country = 'ae';
3617
            break;
3618
        case 'en':
3619
            $country = 'gb';
3620
            break;
3621
        case 'eu': // Euskera
3622
            $country = 'es';
3623
            if ($allow) {
3624
                $country = 'basque';
3625
            }
3626
            break;
3627
        case 'gl': // galego
3628
            $country = 'es';
3629
            if ($allow) {
3630
                $country = 'galician';
3631
            }
3632
            break;
3633
        case 'he':
3634
            $country = 'il';
3635
            break;
3636
        case 'ja':
3637
            $country = 'jp';
3638
            break;
3639
        case 'ka':
3640
            $country = 'ge';
3641
            break;
3642
        case 'ko':
3643
            $country = 'kr';
3644
            break;
3645
        case 'ms':
3646
            $country = 'my';
3647
            break;
3648
        case 'pt-BR':
3649
            $country = 'br';
3650
            break;
3651
        case 'qu':
3652
            $country = 'pe';
3653
            break;
3654
        case 'sl':
3655
            $country = 'si';
3656
            break;
3657
        case 'sv':
3658
            $country = 'se';
3659
            break;
3660
        case 'uk': // Ukraine
3661
            $country = 'ua';
3662
            break;
3663
        case 'zh-TW':
3664
        case 'zh':
3665
            $country = 'cn';
3666
            break;
3667
        default:
3668
            $country = $languageIsoCode;
3669
            break;
3670
    }
3671
    $country = strtolower($country);
3672
3673
    return $country;
3674
}
3675
3676
/**
3677
 * Returns a list of all the languages that are made available by the admin.
3678
 *
3679
 * @return array An array with all languages. Structure of the array is
3680
 *               array['name'] = An array with the name of every language
3681
 *               array['folder'] = An array with the corresponding names of the language-folders in the filesystem
3682
 */
3683
function api_get_languages()
3684
{
3685
    $table = Database::get_main_table(TABLE_MAIN_LANGUAGE);
3686
    $sql = "SELECT * FROM $table WHERE available='1'
3687
            ORDER BY original_name ASC";
3688
    $result = Database::query($sql);
3689
    $languages = [];
3690
    while ($row = Database::fetch_assoc($result)) {
3691
        $languages[$row['isocode']] = $row['original_name'];
3692
    }
3693
3694
    return $languages;
3695
}
3696
3697
/**
3698
 * Returns the id (the database id) of a language.
3699
 *
3700
 * @param   string  language name (the corresponding name of the language-folder in the filesystem)
3701
 *
3702
 * @return int id of the language
3703
 */
3704
function api_get_language_id($language)
3705
{
3706
    $tbl_language = Database::get_main_table(TABLE_MAIN_LANGUAGE);
3707
    if (empty($language)) {
3708
        return null;
3709
    }
3710
3711
    // We check the language by iscocode
3712
    $langInfo = api_get_language_from_iso($language);
3713
    if (null !== $langInfo && !empty($langInfo->getId())) {
3714
        return $langInfo->getId();
3715
    }
3716
3717
    $language = Database::escape_string($language);
3718
    $sql = "SELECT id FROM $tbl_language
3719
            WHERE english_name = '$language' LIMIT 1";
3720
    $result = Database::query($sql);
3721
    $row = Database::fetch_array($result);
3722
3723
    return $row['id'];
3724
}
3725
3726
/**
3727
 * Get the language information by its id.
3728
 *
3729
 * @param int $languageId
3730
 *
3731
 * @throws Exception
3732
 *
3733
 * @return array
3734
 */
3735
function api_get_language_info($languageId)
3736
{
3737
    if (empty($languageId)) {
3738
        return [];
3739
    }
3740
3741
    $language = Database::getManager()->find(Language::class, $languageId);
3742
3743
    if (!$language) {
3744
        return [];
3745
    }
3746
3747
    return [
3748
        'id' => $language->getId(),
3749
        'original_name' => $language->getOriginalName(),
3750
        'english_name' => $language->getEnglishName(),
3751
        'isocode' => $language->getIsocode(),
3752
        'available' => $language->getAvailable(),
3753
        'parent_id' => $language->getParent() ? $language->getParent()->getId() : null,
3754
    ];
3755
}
3756
3757
/**
3758
 * @param string $code
3759
 *
3760
 * @return Language
3761
 */
3762
function api_get_language_from_iso($code)
3763
{
3764
    $em = Database::getManager();
3765
3766
    return $em->getRepository(Language::class)->findOneBy(['isocode' => $code]);
3767
}
3768
3769
/**
3770
 * Shortcut to ThemeHelper::getVisualTheme()
3771
 */
3772
function api_get_visual_theme(): string
3773
{
3774
    $themeHelper = Container::$container->get(ThemeHelper::class);
0 ignored issues
show
Bug introduced by
The method get() does not exist on null. ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-call  annotation

3774
    /** @scrutinizer ignore-call */ 
3775
    $themeHelper = Container::$container->get(ThemeHelper::class);

This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces.

This is most likely a typographical error or the method has been renamed.

Loading history...
3775
3776
    return $themeHelper->getVisualTheme();
3777
}
3778
3779
/**
3780
 * Returns a list of CSS themes currently available in the CSS folder
3781
 * The folder must have a default.css file.
3782
 *
3783
 * @param bool $getOnlyThemeFromVirtualInstance Used by the vchamilo plugin
3784
 *
3785
 * @return array list of themes directories from the css folder
3786
 *               Note: Directory names (names of themes) in the file system should contain ASCII-characters only
3787
 */
3788
function api_get_themes($getOnlyThemeFromVirtualInstance = false)
3789
{
3790
    // This configuration value is set by the vchamilo plugin
3791
    $virtualTheme = api_get_configuration_value('virtual_css_theme_folder');
3792
3793
    $readCssFolder = function ($dir) use ($virtualTheme) {
3794
        $finder = new Finder();
3795
        $themes = $finder->directories()->in($dir)->depth(0)->sortByName();
3796
        $list = [];
3797
        /** @var Symfony\Component\Finder\SplFileInfo $theme */
3798
        foreach ($themes as $theme) {
3799
            $folder = $theme->getFilename();
3800
            // A theme folder is consider if there's a default.css file
3801
            if (!file_exists($theme->getPathname().'/default.css')) {
3802
                continue;
3803
            }
3804
            $name = ucwords(str_replace('_', ' ', $folder));
3805
            if ($folder == $virtualTheme) {
3806
                continue;
3807
            }
3808
            $list[$folder] = $name;
3809
        }
3810
3811
        return $list;
3812
    };
3813
3814
    $dir = Container::getProjectDir().'var/themes/';
3815
    $list = $readCssFolder($dir);
3816
3817
    if (!empty($virtualTheme)) {
3818
        $newList = $readCssFolder($dir.'/'.$virtualTheme);
3819
        if ($getOnlyThemeFromVirtualInstance) {
3820
            return $newList;
3821
        }
3822
        $list = $list + $newList;
3823
        asort($list);
3824
    }
3825
3826
    return $list;
3827
}
3828
3829
/**
3830
 * Find the largest sort value in a given user_course_category
3831
 * This function is used when we are moving a course to a different category
3832
 * and also when a user subscribes to courses (the new course is added at the end of the main category.
3833
 *
3834
 * @param int $courseCategoryId the id of the user_course_category
3835
 * @param int $userId
3836
 *
3837
 * @return int the value of the highest sort of the user_course_category
3838
 */
3839
function api_max_sort_value($courseCategoryId, $userId)
3840
{
3841
    $user = api_get_user_entity($userId);
3842
    $userCourseCategory = Database::getManager()->getRepository(UserCourseCategory::class)->find($courseCategoryId);
3843
3844
    return null === $user ? 0 : $user->getMaxSortValue($userCourseCategory);
3845
}
3846
3847
/**
3848
 * Transforms a number of seconds in hh:mm:ss format.
3849
 *
3850
 * @author Julian Prud'homme
3851
 *
3852
 * @param int    $seconds      number of seconds
3853
 * @param string $space
3854
 * @param bool   $showSeconds
3855
 * @param bool   $roundMinutes
3856
 *
3857
 * @return string the formatted time
3858
 */
3859
function api_time_to_hms($seconds, $space = ':', $showSeconds = true, $roundMinutes = false)
3860
{
3861
    // $seconds = -1 means that we have wrong data in the db.
3862
    if (-1 == $seconds) {
3863
        return
3864
            get_lang('Unknown').
3865
            Display::getMdiIcon(
3866
                ActionIcon::INFORMATION,
3867
                'ch-tool-icon',
3868
                'align: absmiddle; hspace: 3px',
3869
                ICON_SIZE_SMALL,
3870
                get_lang('The datas about this user were registered when the calculation of time spent on the platform wasn\'t possible.')
3871
            );
3872
    }
3873
3874
    // How many hours ?
3875
    $hours = floor($seconds / 3600);
3876
3877
    // How many minutes ?
3878
    $min = floor(($seconds - ($hours * 3600)) / 60);
3879
3880
    if ($roundMinutes) {
3881
        if ($min >= 45) {
3882
            $min = 45;
3883
        }
3884
3885
        if ($min >= 30 && $min <= 44) {
3886
            $min = 30;
3887
        }
3888
3889
        if ($min >= 15 && $min <= 29) {
3890
            $min = 15;
3891
        }
3892
3893
        if ($min >= 0 && $min <= 14) {
3894
            $min = 0;
3895
        }
3896
    }
3897
3898
    // How many seconds
3899
    $sec = floor($seconds - ($hours * 3600) - ($min * 60));
3900
3901
    if ($hours < 10) {
3902
        $hours = "0$hours";
3903
    }
3904
3905
    if ($sec < 10) {
3906
        $sec = "0$sec";
3907
    }
3908
3909
    if ($min < 10) {
3910
        $min = "0$min";
3911
    }
3912
3913
    $seconds = '';
3914
    if ($showSeconds) {
3915
        $seconds = $space.$sec;
3916
    }
3917
3918
    return $hours.$space.$min.$seconds;
3919
}
3920
3921
/**
3922
 * Returns the permissions to be assigned to every newly created directory by the web-server.
3923
 * The return value is based on the platform administrator's setting
3924
 * "Administration > Configuration settings > Security > Permissions for new directories".
3925
 *
3926
 * @return int returns the permissions in the format "Owner-Group-Others, Read-Write-Execute", as an integer value
3927
 */
3928
function api_get_permissions_for_new_directories()
3929
{
3930
    static $permissions;
3931
    if (!isset($permissions)) {
3932
        $permissions = trim(api_get_setting('permissions_for_new_directories'));
3933
        // The default value 0777 is according to that in the platform administration panel after fresh system installation.
3934
        $permissions = octdec(!empty($permissions) ? $permissions : '0777');
3935
    }
3936
3937
    return $permissions;
3938
}
3939
3940
/**
3941
 * Returns the permissions to be assigned to every newly created directory by the web-server.
3942
 * The return value is based on the platform administrator's setting
3943
 * "Administration > Configuration settings > Security > Permissions for new files".
3944
 *
3945
 * @return int returns the permissions in the format
3946
 *             "Owner-Group-Others, Read-Write-Execute", as an integer value
3947
 */
3948
function api_get_permissions_for_new_files()
3949
{
3950
    static $permissions;
3951
    if (!isset($permissions)) {
3952
        $permissions = trim(api_get_setting('permissions_for_new_files'));
3953
        // The default value 0666 is according to that in the platform
3954
        // administration panel after fresh system installation.
3955
        $permissions = octdec(!empty($permissions) ? $permissions : '0666');
3956
    }
3957
3958
    return $permissions;
3959
}
3960
3961
/**
3962
 * Deletes a file, or a folder and its contents.
3963
 *
3964
 * @author      Aidan Lister <[email protected]>
3965
 *
3966
 * @version     1.0.3
3967
 *
3968
 * @param string $dirname Directory to delete
3969
 * @param       bool     Deletes only the content or not
3970
 * @param bool $strict if one folder/file fails stop the loop
3971
 *
3972
 * @return bool Returns TRUE on success, FALSE on failure
3973
 *
3974
 * @see http://aidanlister.com/2004/04/recursively-deleting-a-folder-in-php/
3975
 *
3976
 * @author      Yannick Warnier, adaptation for the Chamilo LMS, April, 2008
3977
 * @author      Ivan Tcholakov, a sanity check about Directory class creation has been added, September, 2009
3978
 */
3979
function rmdirr($dirname, $delete_only_content_in_folder = false, $strict = false)
3980
{
3981
    $res = true;
3982
    // A sanity check.
3983
    if (!file_exists($dirname)) {
3984
        return false;
3985
    }
3986
    $php_errormsg = '';
3987
    // Simple delete for a file.
3988
    if (is_file($dirname) || is_link($dirname)) {
3989
        $res = unlink($dirname);
3990
        if (false === $res) {
3991
            error_log(__FILE__.' line '.__LINE__.': '.((bool) ini_get('track_errors') ? $php_errormsg : 'Error not recorded because track_errors is off in your php.ini'), 0);
3992
        }
3993
3994
        return $res;
3995
    }
3996
3997
    // Loop through the folder.
3998
    $dir = dir($dirname);
3999
    // A sanity check.
4000
    $is_object_dir = is_object($dir);
4001
    if ($is_object_dir) {
4002
        while (false !== $entry = $dir->read()) {
4003
            // Skip pointers.
4004
            if ('.' == $entry || '..' == $entry) {
4005
                continue;
4006
            }
4007
4008
            // Recurse.
4009
            if ($strict) {
4010
                $result = rmdirr("$dirname/$entry");
4011
                if (false == $result) {
0 ignored issues
show
Coding Style Best Practice introduced by
It seems like you are loosely comparing two booleans. Considering using the strict comparison === instead.

When comparing two booleans, it is generally considered safer to use the strict comparison operator.

Loading history...
4012
                    $res = false;
4013
                    break;
4014
                }
4015
            } else {
4016
                rmdirr("$dirname/$entry");
4017
            }
4018
        }
4019
    }
4020
4021
    // Clean up.
4022
    if ($is_object_dir) {
4023
        $dir->close();
4024
    }
4025
4026
    if (false == $delete_only_content_in_folder) {
4027
        $res = rmdir($dirname);
4028
        if (false === $res) {
4029
            error_log(__FILE__.' line '.__LINE__.': '.((bool) ini_get('track_errors') ? $php_errormsg : 'error not recorded because track_errors is off in your php.ini'), 0);
4030
        }
4031
    }
4032
4033
    return $res;
4034
}
4035
4036
// TODO: This function is to be simplified. File access modes to be implemented.
4037
/**
4038
 * function adapted from a php.net comment
4039
 * copy recursively a folder.
4040
 *
4041
 * @param the source folder
4042
 * @param the dest folder
4043
 * @param an array of excluded file_name (without extension)
4044
 * @param copied_files the returned array of copied files
4045
 * @param string $source
4046
 * @param string $dest
4047
 */
4048
function copyr($source, $dest, $exclude = [], $copied_files = [])
4049
{
4050
    if (empty($dest)) {
4051
        return false;
4052
    }
4053
    // Simple copy for a file
4054
    if (is_file($source)) {
4055
        $path_info = pathinfo($source);
4056
        if (!in_array($path_info['filename'], $exclude)) {
4057
            copy($source, $dest);
4058
        }
4059
4060
        return true;
4061
    } elseif (!is_dir($source)) {
4062
        //then source is not a dir nor a file, return
4063
        return false;
4064
    }
4065
4066
    // Make destination directory.
4067
    if (!is_dir($dest)) {
4068
        mkdir($dest, api_get_permissions_for_new_directories());
4069
    }
4070
4071
    // Loop through the folder.
4072
    $dir = dir($source);
4073
    while (false !== $entry = $dir->read()) {
4074
        // Skip pointers
4075
        if ('.' == $entry || '..' == $entry) {
4076
            continue;
4077
        }
4078
4079
        // Deep copy directories.
4080
        if ($dest !== "$source/$entry") {
4081
            $files = copyr("$source/$entry", "$dest/$entry", $exclude, $copied_files);
4082
        }
4083
    }
4084
    // Clean up.
4085
    $dir->close();
4086
4087
    return true;
4088
}
4089
4090
/**
4091
 * @todo: Using DIRECTORY_SEPARATOR is not recommended, this is an obsolete approach.
4092
 * Documentation header to be added here.
4093
 *
4094
 * @param string $pathname
4095
 * @param string $base_path_document
4096
 * @param int    $session_id
4097
 *
4098
 * @return mixed True if directory already exists, false if a file already exists at
4099
 *               the destination and null if everything goes according to plan
4100
 */
4101
function copy_folder_course_session(
4102
    $pathname,
4103
    $base_path_document,
4104
    $session_id,
4105
    $course_info,
4106
    $document,
4107
    $source_course_id
4108
) {
4109
    $table = Database::get_course_table(TABLE_DOCUMENT);
4110
    $session_id = intval($session_id);
4111
    $source_course_id = intval($source_course_id);
4112
4113
    // Check whether directory already exists.
4114
    if (is_dir($pathname) || empty($pathname)) {
4115
        return true;
4116
    }
4117
4118
    // Ensure that a file with the same name does not already exist.
4119
    if (is_file($pathname)) {
4120
        trigger_error('copy_folder_course_session(): File exists', E_USER_WARNING);
4121
4122
        return false;
4123
    }
4124
4125
    $course_id = $course_info['real_id'];
4126
    $folders = explode(DIRECTORY_SEPARATOR, str_replace($base_path_document.DIRECTORY_SEPARATOR, '', $pathname));
4127
    $new_pathname = $base_path_document;
4128
    $path = '';
4129
4130
    foreach ($folders as $folder) {
4131
        $new_pathname .= DIRECTORY_SEPARATOR.$folder;
4132
        $path .= DIRECTORY_SEPARATOR.$folder;
4133
4134
        if (!file_exists($new_pathname)) {
4135
            $path = Database::escape_string($path);
4136
4137
            $sql = "SELECT * FROM $table
4138
                    WHERE
4139
                        c_id = $source_course_id AND
4140
                        path = '$path' AND
4141
                        filetype = 'folder' AND
4142
                        session_id = '$session_id'";
4143
            $rs1 = Database::query($sql);
4144
            $num_rows = Database::num_rows($rs1);
4145
4146
            if (0 == $num_rows) {
4147
                mkdir($new_pathname, api_get_permissions_for_new_directories());
4148
4149
                // Insert new folder with destination session_id.
4150
                $params = [
4151
                    'c_id' => $course_id,
4152
                    'path' => $path,
4153
                    'comment' => $document->comment,
4154
                    'title' => basename($new_pathname),
4155
                    'filetype' => 'folder',
4156
                    'size' => '0',
4157
                    'session_id' => $session_id,
4158
                ];
4159
                Database::insert($table, $params);
4160
            }
4161
        }
4162
    } // en foreach
4163
}
4164
4165
// TODO: chmodr() is a better name. Some corrections are needed. Documentation header to be added here.
4166
/**
4167
 * @param string $path
4168
 */
4169
function api_chmod_R($path, $filemode)
4170
{
4171
    if (!is_dir($path)) {
4172
        return chmod($path, $filemode);
4173
    }
4174
4175
    $handler = opendir($path);
4176
    while ($file = readdir($handler)) {
4177
        if ('.' != $file && '..' != $file) {
4178
            $fullpath = "$path/$file";
4179
            if (!is_dir($fullpath)) {
4180
                if (!chmod($fullpath, $filemode)) {
4181
                    return false;
4182
                }
4183
            } else {
4184
                if (!api_chmod_R($fullpath, $filemode)) {
4185
                    return false;
4186
                }
4187
            }
4188
        }
4189
    }
4190
4191
    closedir($handler);
4192
4193
    return chmod($path, $filemode);
4194
}
4195
4196
// TODO: Where the following function has been copy/pased from? There is no information about author and license. Style, coding conventions...
4197
/**
4198
 * Parse info file format. (e.g: file.info).
4199
 *
4200
 * Files should use an ini-like format to specify values.
4201
 * White-space generally doesn't matter, except inside values.
4202
 * e.g.
4203
 *
4204
 * @verbatim
4205
 *   key = value
4206
 *   key = "value"
4207
 *   key = 'value'
4208
 *   key = "multi-line
4209
 *
4210
 *   value"
4211
 *   key = 'multi-line
4212
 *
4213
 *   value'
4214
 *   key
4215
 *   =
4216
 *   'value'
4217
 * @endverbatim
4218
 *
4219
 * Arrays are created using a GET-like syntax:
4220
 *
4221
 * @verbatim
4222
 *   key[] = "numeric array"
4223
 *   key[index] = "associative array"
4224
 *   key[index][] = "nested numeric array"
4225
 *   key[index][index] = "nested associative array"
4226
 * @endverbatim
4227
 *
4228
 * PHP constants are substituted in, but only when used as the entire value:
4229
 *
4230
 * Comments should start with a semi-colon at the beginning of a line.
4231
 *
4232
 * This function is NOT for placing arbitrary module-specific settings. Use
4233
 * variable_get() and variable_set() for that.
4234
 *
4235
 * Information stored in the module.info file:
4236
 * - name: The real name of the module for display purposes.
4237
 * - description: A brief description of the module.
4238
 * - dependencies: An array of shortnames of other modules this module depends on.
4239
 * - package: The name of the package of modules this module belongs to.
4240
 *
4241
 * Example of .info file:
4242
 * <code>
4243
 * @verbatim
4244
 *   name = Forum
4245
 *   description = Enables threaded discussions about general topics.
4246
 *   dependencies[] = taxonomy
4247
 *   dependencies[] = comment
4248
 *   package = Core - optional
4249
 *   version = VERSION
4250
 * @endverbatim
4251
 * </code>
4252
 *
4253
 * @param string $filename
4254
 *                         The file we are parsing. Accepts file with relative or absolute path.
4255
 *
4256
 * @return
4257
 *   The info array
4258
 */
4259
function api_parse_info_file($filename)
4260
{
4261
    $info = [];
4262
4263
    if (!file_exists($filename)) {
4264
        return $info;
4265
    }
4266
4267
    $data = file_get_contents($filename);
4268
    if (preg_match_all('
4269
        @^\s*                           # Start at the beginning of a line, ignoring leading whitespace
4270
        ((?:
4271
          [^=;\[\]]|                    # Key names cannot contain equal signs, semi-colons or square brackets,
4272
          \[[^\[\]]*\]                  # unless they are balanced and not nested
4273
        )+?)
4274
        \s*=\s*                         # Key/value pairs are separated by equal signs (ignoring white-space)
4275
        (?:
4276
          ("(?:[^"]|(?<=\\\\)")*")|     # Double-quoted string, which may contain slash-escaped quotes/slashes
4277
          (\'(?:[^\']|(?<=\\\\)\')*\')| # Single-quoted string, which may contain slash-escaped quotes/slashes
4278
          ([^\r\n]*?)                   # Non-quoted string
4279
        )\s*$                           # Stop at the next end of a line, ignoring trailing whitespace
4280
        @msx', $data, $matches, PREG_SET_ORDER)) {
4281
        $key = $value1 = $value2 = $value3 = '';
4282
        foreach ($matches as $match) {
4283
            // Fetch the key and value string.
4284
            $i = 0;
4285
            foreach (['key', 'value1', 'value2', 'value3'] as $var) {
4286
                $$var = isset($match[++$i]) ? $match[$i] : '';
4287
            }
4288
            $value = stripslashes(substr($value1, 1, -1)).stripslashes(substr($value2, 1, -1)).$value3;
4289
4290
            // Parse array syntax.
4291
            $keys = preg_split('/\]?\[/', rtrim($key, ']'));
4292
            $last = array_pop($keys);
4293
            $parent = &$info;
4294
4295
            // Create nested arrays.
4296
            foreach ($keys as $key) {
4297
                if ('' == $key) {
4298
                    $key = count($parent);
4299
                }
4300
                if (!isset($parent[$key]) || !is_array($parent[$key])) {
4301
                    $parent[$key] = [];
4302
                }
4303
                $parent = &$parent[$key];
4304
            }
4305
4306
            // Handle PHP constants.
4307
            if (defined($value)) {
4308
                $value = constant($value);
4309
            }
4310
4311
            // Insert actual value.
4312
            if ('' == $last) {
4313
                $last = count($parent);
4314
            }
4315
            $parent[$last] = $value;
4316
        }
4317
    }
4318
4319
    return $info;
4320
}
4321
4322
/**
4323
 * Gets Chamilo version from the configuration files.
4324
 *
4325
 * @return string A string of type "1.8.4", or an empty string if the version could not be found
4326
 */
4327
function api_get_version()
4328
{
4329
    return (string) api_get_configuration_value('system_version');
4330
}
4331
4332
/**
4333
 * Gets the software name (the name/brand of the Chamilo-based customized system).
4334
 *
4335
 * @return string
4336
 */
4337
function api_get_software_name()
4338
{
4339
    $name = api_get_env_variable('SOFTWARE_NAME', 'Chamilo');
4340
    return $name;
4341
}
4342
4343
function api_get_status_list()
4344
{
4345
    $list = [];
4346
    // Table of status
4347
    $list[COURSEMANAGER] = 'teacher'; // 1
4348
    $list[SESSIONADMIN] = 'session_admin'; // 3
4349
    $list[DRH] = 'drh'; // 4
4350
    $list[STUDENT] = 'user'; // 5
4351
    $list[ANONYMOUS] = 'anonymous'; // 6
4352
    $list[INVITEE] = 'invited'; // 20
4353
4354
    return $list;
4355
}
4356
4357
/**
4358
 * Checks whether status given in parameter exists in the platform.
4359
 *
4360
 * @param mixed the status (can be either int either string)
4361
 *
4362
 * @return bool if the status exists, else returns false
4363
 */
4364
function api_status_exists($status_asked)
4365
{
4366
    $list = api_get_status_list();
4367
4368
    return in_array($status_asked, $list) ? true : isset($list[$status_asked]);
4369
}
4370
4371
/**
4372
 * Checks whether status given in parameter exists in the platform. The function
4373
 * returns the status ID or false if it does not exist, but given the fact there
4374
 * is no "0" status, the return value can be checked against
4375
 * if(api_status_key()) to know if it exists.
4376
 *
4377
 * @param   mixed   The status (can be either int or string)
4378
 *
4379
 * @return mixed Status ID if exists, false otherwise
4380
 */
4381
function api_status_key($status)
4382
{
4383
    $list = api_get_status_list();
4384
4385
    return isset($list[$status]) ? $status : array_search($status, $list);
4386
}
4387
4388
/**
4389
 * Gets the status langvars list.
4390
 *
4391
 * @return string[] the list of status with their translations
4392
 */
4393
function api_get_status_langvars()
4394
{
4395
    return [
4396
        COURSEMANAGER => get_lang('Teacher'),
4397
        SESSIONADMIN => get_lang('Sessions administrator'),
4398
        DRH => get_lang('Human Resources Manager'),
4399
        STUDENT => get_lang('Learner'),
4400
        ANONYMOUS => get_lang('Anonymous'),
4401
        STUDENT_BOSS => get_lang('Student boss'),
4402
        INVITEE => get_lang('Invited'),
4403
    ];
4404
}
4405
4406
/**
4407
 * The function that retrieves all the possible settings for a certain config setting.
4408
 *
4409
 * @author Patrick Cool <[email protected]>, Ghent University
4410
 */
4411
function api_get_settings_options($var)
4412
{
4413
    $table_settings_options = Database::get_main_table(TABLE_MAIN_SETTINGS_OPTIONS);
4414
    $var = Database::escape_string($var);
4415
    $sql = "SELECT * FROM $table_settings_options
4416
            WHERE variable = '$var'
4417
            ORDER BY id";
4418
    $result = Database::query($sql);
4419
    $settings_options_array = [];
4420
    while ($row = Database::fetch_assoc($result)) {
4421
        $settings_options_array[] = $row;
4422
    }
4423
4424
    return $settings_options_array;
4425
}
4426
4427
/**
4428
 * @param array $params
4429
 */
4430
function api_set_setting_option($params)
4431
{
4432
    $table = Database::get_main_table(TABLE_MAIN_SETTINGS_OPTIONS);
4433
    if (empty($params['id'])) {
4434
        Database::insert($table, $params);
4435
    } else {
4436
        Database::update($table, $params, ['id = ? ' => $params['id']]);
4437
    }
4438
}
4439
4440
/**
4441
 * @param array $params
4442
 */
4443
function api_set_setting_simple($params)
4444
{
4445
    $table = Database::get_main_table(TABLE_MAIN_SETTINGS);
4446
    $url_id = api_get_current_access_url_id();
4447
4448
    if (empty($params['id'])) {
4449
        $params['access_url'] = $url_id;
4450
        Database::insert($table, $params);
4451
    } else {
4452
        Database::update($table, $params, ['id = ? ' => [$params['id']]]);
4453
    }
4454
}
4455
4456
/**
4457
 * @param int $id
4458
 */
4459
function api_delete_setting_option($id)
4460
{
4461
    $table = Database::get_main_table(TABLE_MAIN_SETTINGS_OPTIONS);
4462
    if (!empty($id)) {
4463
        Database::delete($table, ['id = ? ' => $id]);
4464
    }
4465
}
4466
4467
/**
4468
 * Sets a platform configuration setting to a given value.
4469
 *
4470
 * @param string    The variable we want to update
4471
 * @param string    The value we want to record
4472
 * @param string    The sub-variable if any (in most cases, this will remain null)
4473
 * @param string    The category if any (in most cases, this will remain null)
4474
 * @param int       The access_url for which this parameter is valid
4475
 * @param string $cat
4476
 *
4477
 * @return bool|null
4478
 */
4479
function api_set_setting($var, $value, $subvar = null, $cat = null, $access_url = 1)
4480
{
4481
    if (empty($var)) {
4482
        return false;
4483
    }
4484
    $t_settings = Database::get_main_table(TABLE_MAIN_SETTINGS);
4485
    $var = Database::escape_string($var);
4486
    $value = Database::escape_string($value);
4487
    $access_url = (int) $access_url;
4488
    if (empty($access_url)) {
4489
        $access_url = 1;
4490
    }
4491
    $select = "SELECT id FROM $t_settings WHERE variable = '$var' ";
4492
    if (!empty($subvar)) {
4493
        $subvar = Database::escape_string($subvar);
4494
        $select .= " AND subkey = '$subvar'";
4495
    }
4496
    if (!empty($cat)) {
4497
        $cat = Database::escape_string($cat);
4498
        $select .= " AND category = '$cat'";
4499
    }
4500
    if ($access_url > 1) {
4501
        $select .= " AND access_url = $access_url";
4502
    } else {
4503
        $select .= " AND access_url = 1 ";
4504
    }
4505
4506
    $res = Database::query($select);
4507
    if (Database::num_rows($res) > 0) {
4508
        // Found item for this access_url.
4509
        $row = Database::fetch_array($res);
4510
        $sql = "UPDATE $t_settings SET selected_value = '$value'
4511
                WHERE id = ".$row['id'];
4512
        Database::query($sql);
4513
    } else {
4514
        // Item not found for this access_url, we have to check if it exist with access_url = 1
4515
        $select = "SELECT * FROM $t_settings
4516
                   WHERE variable = '$var' AND access_url = 1 ";
4517
        // Just in case
4518
        if (1 == $access_url) {
4519
            if (!empty($subvar)) {
4520
                $select .= " AND subkey = '$subvar'";
4521
            }
4522
            if (!empty($cat)) {
4523
                $select .= " AND category = '$cat'";
4524
            }
4525
            $res = Database::query($select);
4526
            if (Database::num_rows($res) > 0) {
4527
                // We have a setting for access_url 1, but none for the current one, so create one.
4528
                $row = Database::fetch_array($res);
4529
                $insert = "INSERT INTO $t_settings (variable, subkey, type,category, selected_value, title, comment, scope, subkeytext, access_url)
4530
                        VALUES
4531
                        ('".$row['variable']."',".(!empty($row['subkey']) ? "'".$row['subkey']."'" : "NULL").",".
4532
                    "'".$row['type']."','".$row['category']."',".
4533
                    "'$value','".$row['title']."',".
4534
                    "".(!empty($row['comment']) ? "'".$row['comment']."'" : "NULL").",".(!empty($row['scope']) ? "'".$row['scope']."'" : "NULL").",".
4535
                    "".(!empty($row['subkeytext']) ? "'".$row['subkeytext']."'" : "NULL").",$access_url)";
4536
                Database::query($insert);
4537
            } else {
4538
                // Such a setting does not exist.
4539
                //error_log(__FILE__.':'.__LINE__.': Attempting to update setting '.$var.' ('.$subvar.') which does not exist at all', 0);
4540
            }
4541
        } else {
4542
            // Other access url.
4543
            if (!empty($subvar)) {
4544
                $select .= " AND subkey = '$subvar'";
4545
            }
4546
            if (!empty($cat)) {
4547
                $select .= " AND category = '$cat'";
4548
            }
4549
            $res = Database::query($select);
4550
4551
            if (Database::num_rows($res) > 0) {
4552
                // We have a setting for access_url 1, but none for the current one, so create one.
4553
                $row = Database::fetch_array($res);
4554
                if (1 == $row['access_url_changeable']) {
4555
                    $insert = "INSERT INTO $t_settings (variable,subkey, type,category, selected_value,title, comment,scope, subkeytext,access_url, access_url_changeable) VALUES
4556
                            ('".$row['variable']."',".
4557
                        (!empty($row['subkey']) ? "'".$row['subkey']."'" : "NULL").",".
4558
                        "'".$row['type']."','".$row['category']."',".
4559
                        "'$value','".$row['title']."',".
4560
                        "".(!empty($row['comment']) ? "'".$row['comment']."'" : "NULL").",".
4561
                        (!empty($row['scope']) ? "'".$row['scope']."'" : "NULL").",".
4562
                        "".(!empty($row['subkeytext']) ? "'".$row['subkeytext']."'" : "NULL").",$access_url,".$row['access_url_changeable'].")";
4563
                    Database::query($insert);
4564
                }
4565
            } else { // Such a setting does not exist.
4566
                //error_log(__FILE__.':'.__LINE__.': Attempting to update setting '.$var.' ('.$subvar.') which does not exist at all. The access_url is: '.$access_url.' ',0);
4567
            }
4568
        }
4569
    }
4570
}
4571
4572
/**
4573
 * Sets a whole category of settings to one specific value.
4574
 *
4575
 * @param string    Category
4576
 * @param string    Value
4577
 * @param int       Access URL. Optional. Defaults to 1
4578
 * @param array     Optional array of filters on field type
4579
 * @param string $category
4580
 * @param string $value
4581
 *
4582
 * @return bool
4583
 */
4584
function api_set_settings_category($category, $value = null, $access_url = 1, $fieldtype = [])
4585
{
4586
    if (empty($category)) {
4587
        return false;
4588
    }
4589
    $category = Database::escape_string($category);
4590
    $t_s = Database::get_main_table(TABLE_MAIN_SETTINGS);
4591
    $access_url = (int) $access_url;
4592
    if (empty($access_url)) {
4593
        $access_url = 1;
4594
    }
4595
    if (isset($value)) {
4596
        $value = Database::escape_string($value);
4597
        $sql = "UPDATE $t_s SET selected_value = '$value'
4598
                WHERE category = '$category' AND access_url = $access_url";
4599
        if (is_array($fieldtype) && count($fieldtype) > 0) {
4600
            $sql .= " AND ( ";
4601
            $i = 0;
4602
            foreach ($fieldtype as $type) {
4603
                if ($i > 0) {
4604
                    $sql .= ' OR ';
4605
                }
4606
                $type = Database::escape_string($type);
4607
                $sql .= " type='".$type."' ";
4608
                $i++;
4609
            }
4610
            $sql .= ")";
4611
        }
4612
        $res = Database::query($sql);
4613
4614
        return false !== $res;
4615
    } else {
4616
        $sql = "UPDATE $t_s SET selected_value = NULL
4617
                WHERE category = '$category' AND access_url = $access_url";
4618
        if (is_array($fieldtype) && count($fieldtype) > 0) {
4619
            $sql .= " AND ( ";
4620
            $i = 0;
4621
            foreach ($fieldtype as $type) {
4622
                if ($i > 0) {
4623
                    $sql .= ' OR ';
4624
                }
4625
                $type = Database::escape_string($type);
4626
                $sql .= " type='".$type."' ";
4627
                $i++;
4628
            }
4629
            $sql .= ")";
4630
        }
4631
        $res = Database::query($sql);
4632
4633
        return false !== $res;
4634
    }
4635
}
4636
4637
/**
4638
 * Gets all available access urls in an array (as in the database).
4639
 *
4640
 * @return array An array of database records
4641
 */
4642
function api_get_access_urls($from = 0, $to = 1000000, $order = 'url', $direction = 'ASC')
4643
{
4644
    $table = Database::get_main_table(TABLE_MAIN_ACCESS_URL);
4645
    $from = (int) $from;
4646
    $to = (int) $to;
4647
    $order = Database::escape_string($order);
4648
    $direction = Database::escape_string($direction);
4649
    $direction = !in_array(strtolower(trim($direction)), ['asc', 'desc']) ? 'asc' : $direction;
4650
    $sql = "SELECT id, url, description, active, created_by, tms
4651
            FROM $table
4652
            ORDER BY `$order` $direction
4653
            LIMIT $to OFFSET $from";
4654
    $res = Database::query($sql);
4655
4656
    return Database::store_result($res);
4657
}
4658
4659
/**
4660
 * Gets the access url info in an array.
4661
 *
4662
 * @param int  $id            Id of the access url
4663
 * @param bool $returnDefault Set to false if you want the real URL if URL 1 is still 'http://localhost/'
4664
 *
4665
 * @return array All the info (url, description, active, created_by, tms)
4666
 *               from the access_url table
4667
 *
4668
 * @author Julio Montoya
4669
 */
4670
function api_get_access_url($id, $returnDefault = true)
4671
{
4672
    static $staticResult;
4673
    $id = (int) $id;
4674
4675
    if (isset($staticResult[$id])) {
4676
        $result = $staticResult[$id];
4677
    } else {
4678
        // Calling the Database:: library dont work this is handmade.
4679
        $table_access_url = Database::get_main_table(TABLE_MAIN_ACCESS_URL);
4680
        $sql = "SELECT url, description, active, created_by, tms
4681
                FROM $table_access_url WHERE id = '$id' ";
4682
        $res = Database::query($sql);
4683
        $result = @Database::fetch_array($res);
4684
        $staticResult[$id] = $result;
4685
    }
4686
4687
    // If the result url is 'http://localhost/' (the default) and the root_web
4688
    // (=current url) is different, and the $id is = 1 (which might mean
4689
    // api_get_current_access_url_id() returned 1 by default), then return the
4690
    // root_web setting instead of the current URL
4691
    // This is provided as an option to avoid breaking the storage of URL-specific
4692
    // homepages in home/localhost/
4693
    if (1 === $id && false === $returnDefault) {
4694
        $currentUrl = api_get_current_access_url_id();
4695
        // only do this if we are on the main URL (=1), otherwise we could get
4696
        // information on another URL instead of the one asked as parameter
4697
        if (1 === $currentUrl) {
4698
            $rootWeb = api_get_path(WEB_PATH);
4699
            $default = AccessUrl::DEFAULT_ACCESS_URL;
4700
            if ($result['url'] === $default && $rootWeb != $default) {
4701
                $result['url'] = $rootWeb;
4702
            }
4703
        }
4704
    }
4705
4706
    return $result;
4707
}
4708
4709
/**
4710
 * Gets all the current settings for a specific access url.
4711
 *
4712
 * @param string    The category, if any, that we want to get
4713
 * @param string    Whether we want a simple list (display a category) or
4714
 * a grouped list (group by variable as in settings.php default). Values: 'list' or 'group'
4715
 * @param int       Access URL's ID. Optional. Uses 1 by default, which is the unique URL
4716
 *
4717
 * @return array Array of database results for the current settings of the current access URL
4718
 */
4719
function &api_get_settings($cat = null, $ordering = 'list', $access_url = 1, $url_changeable = 0)
4720
{
4721
    $table = Database::get_main_table(TABLE_MAIN_SETTINGS);
4722
    $access_url = (int) $access_url;
4723
    $where_condition = '';
4724
    if (1 == $url_changeable) {
4725
        $where_condition = " AND access_url_changeable= '1' ";
4726
    }
4727
    if (empty($access_url) || -1 == $access_url) {
4728
        $access_url = 1;
4729
    }
4730
    $sql = "SELECT * FROM $table
4731
            WHERE access_url = $access_url  $where_condition ";
4732
4733
    if (!empty($cat)) {
4734
        $cat = Database::escape_string($cat);
4735
        $sql .= " AND category='$cat' ";
4736
    }
4737
    if ('group' == $ordering) {
4738
        $sql .= " ORDER BY id ASC";
4739
    } else {
4740
        $sql .= " ORDER BY 1,2 ASC";
4741
    }
4742
    $result = Database::query($sql);
4743
    if (null === $result) {
4744
        $result = [];
4745
        return $result;
4746
    }
4747
    $result = Database::store_result($result, 'ASSOC');
4748
4749
    return $result;
4750
}
4751
4752
/**
4753
 * @param string $value       The value we want to record
4754
 * @param string $variable    The variable name we want to insert
4755
 * @param string $subKey      The subkey for the variable we want to insert
4756
 * @param string $type        The type for the variable we want to insert
4757
 * @param string $category    The category for the variable we want to insert
4758
 * @param string $title       The title
4759
 * @param string $comment     The comment
4760
 * @param string $scope       The scope
4761
 * @param string $subKeyText  The subkey text
4762
 * @param int    $accessUrlId The access_url for which this parameter is valid
4763
 * @param int    $visibility  The changeability of this setting for non-master urls
4764
 *
4765
 * @return int The setting ID
4766
 */
4767
function api_add_setting(
4768
    $value,
4769
    $variable,
4770
    $subKey = '',
4771
    $type = 'textfield',
4772
    $category = '',
4773
    $title = '',
4774
    $comment = '',
4775
    $scope = '',
4776
    $subKeyText = '',
4777
    $accessUrlId = 1,
4778
    $visibility = 0
4779
) {
4780
    $em = Database::getManager();
4781
4782
    $settingRepo = $em->getRepository(SettingsCurrent::class);
4783
    $accessUrlId = (int) $accessUrlId ?: 1;
4784
4785
    if (is_array($value)) {
4786
        $value = serialize($value);
4787
    } else {
4788
        $value = trim($value);
4789
    }
4790
4791
    $criteria = ['variable' => $variable, 'url' => $accessUrlId];
4792
4793
    if (!empty($subKey)) {
4794
        $criteria['subkey'] = $subKey;
4795
    }
4796
4797
    // Check if this variable doesn't exist already
4798
    /** @var SettingsCurrent $setting */
4799
    $setting = $settingRepo->findOneBy($criteria);
4800
4801
    if ($setting) {
0 ignored issues
show
introduced by
$setting is of type Chamilo\CoreBundle\Entity\SettingsCurrent, thus it always evaluated to true.
Loading history...
4802
        $setting->setSelectedValue($value);
4803
4804
        $em->persist($setting);
4805
        $em->flush();
4806
4807
        return $setting->getId();
4808
    }
4809
4810
    // Item not found for this access_url, we have to check if the whole thing is missing
4811
    // (in which case we ignore the insert) or if there *is* a record but just for access_url = 1
4812
    $setting = new SettingsCurrent();
4813
    $url = api_get_url_entity();
4814
4815
    $setting
4816
        ->setVariable($variable)
4817
        ->setSelectedValue($value)
4818
        ->setType($type)
4819
        ->setCategory($category)
4820
        ->setSubkey($subKey)
4821
        ->setTitle($title)
4822
        ->setComment($comment)
4823
        ->setScope($scope)
4824
        ->setSubkeytext($subKeyText)
4825
        ->setUrl(api_get_url_entity())
4826
        ->setAccessUrlChangeable($visibility);
4827
4828
    $em->persist($setting);
4829
    $em->flush();
4830
4831
    return $setting->getId();
4832
}
4833
4834
/**
4835
 * Checks wether a user can or can't view the contents of a course.
4836
 *
4837
 * @deprecated use CourseManager::is_user_subscribed_in_course
4838
 *
4839
 * @param int $userid User id or NULL to get it from $_SESSION
4840
 * @param int $cid    course id to check whether the user is allowed
4841
 *
4842
 * @return bool
4843
 */
4844
function api_is_course_visible_for_user($userid = null, $cid = null)
4845
{
4846
    if (null === $userid) {
4847
        $userid = api_get_user_id();
4848
    }
4849
    if (empty($userid) || strval(intval($userid)) != $userid) {
4850
        if (api_is_anonymous()) {
4851
            $userid = api_get_anonymous_id();
4852
        } else {
4853
            return false;
4854
        }
4855
    }
4856
    $cid = Database::escape_string($cid);
4857
4858
    $courseInfo = api_get_course_info($cid);
4859
    $courseId = $courseInfo['real_id'];
4860
    $is_platformAdmin = api_is_platform_admin();
4861
4862
    $course_table = Database::get_main_table(TABLE_MAIN_COURSE);
4863
    $course_cat_table = Database::get_main_table(TABLE_MAIN_CATEGORY);
4864
4865
    $sql = "SELECT
4866
                $course_cat_table.code AS category_code,
4867
                $course_table.visibility,
4868
                $course_table.code,
4869
                $course_cat_table.code
4870
            FROM $course_table
4871
            LEFT JOIN $course_cat_table
4872
                ON $course_table.category_id = $course_cat_table.id
4873
            WHERE
4874
                $course_table.code = '$cid'
4875
            LIMIT 1";
4876
4877
    $result = Database::query($sql);
4878
4879
    if (Database::num_rows($result) > 0) {
4880
        $visibility = Database::fetch_array($result);
4881
        $visibility = $visibility['visibility'];
4882
    } else {
4883
        $visibility = 0;
4884
    }
4885
    // Shortcut permissions in case the visibility is "open to the world".
4886
    if (COURSE_VISIBILITY_OPEN_WORLD === $visibility) {
4887
        return true;
4888
    }
4889
4890
    $tbl_course_user = Database::get_main_table(TABLE_MAIN_COURSE_USER);
4891
4892
    $sql = "SELECT
4893
                is_tutor, status
4894
            FROM $tbl_course_user
4895
            WHERE
4896
                user_id  = '$userid' AND
4897
                relation_type <> '".COURSE_RELATION_TYPE_RRHH."' AND
4898
                c_id = $courseId
4899
            LIMIT 1";
4900
4901
    $result = Database::query($sql);
4902
4903
    if (Database::num_rows($result) > 0) {
4904
        // This user has got a recorded state for this course.
4905
        $cuData = Database::fetch_array($result);
4906
        $is_courseMember = true;
4907
        $is_courseAdmin = (1 == $cuData['status']);
4908
    }
4909
4910
    if (!$is_courseAdmin) {
0 ignored issues
show
Comprehensibility Best Practice introduced by
The variable $is_courseAdmin does not seem to be defined for all execution paths leading up to this point.
Loading history...
4911
        // This user has no status related to this course.
4912
        // Is it the session coach or the session admin?
4913
        $tbl_session = Database::get_main_table(TABLE_MAIN_SESSION);
4914
        $tbl_session_course = Database::get_main_table(TABLE_MAIN_SESSION_COURSE);
4915
        $tblSessionRelUser = Database::get_main_table(TABLE_MAIN_SESSION_USER);
4916
        $tbl_session_course_user = Database::get_main_table(TABLE_MAIN_SESSION_COURSE_USER);
4917
4918
        $sql = "SELECT sru_2.user_id AS session_admin_id, sru_1.user_id AS session_coach_id
4919
                FROM $tbl_session AS s
4920
                INNER JOIN $tblSessionRelUser sru_1
4921
                ON (sru_1.session_id = s.id AND sru_1.relation_type = ".SessionEntity::GENERAL_COACH.")
4922
                INNER JOIN $tblSessionRelUser sru_2
4923
                ON (sru_2.session_id = s.id AND sru_2.relation_type = ".SessionEntity::SESSION_ADMIN.")
4924
                INNER JOIN $tbl_session_course src
4925
                ON (src.session_id = s.id AND src.c_id = $courseId)";
4926
4927
        $result = Database::query($sql);
4928
        $row = Database::store_result($result);
4929
        $sessionAdminsId = array_column($row, 'session_admin_id');
4930
        $sessionCoachesId = array_column($row, 'session_coach_id');
4931
4932
        if (in_array($userid, $sessionCoachesId)) {
4933
            $is_courseMember = true;
4934
            $is_courseAdmin = false;
4935
        } elseif (in_array($userid, $sessionAdminsId)) {
4936
            $is_courseMember = false;
4937
            $is_courseAdmin = false;
4938
        } else {
4939
            // Check if the current user is the course coach.
4940
            $sql = "SELECT 1
4941
                    FROM $tbl_session_course
4942
                    WHERE session_rel_course.c_id = '$courseId'
4943
                    AND session_rel_course.id_coach = '$userid'
4944
                    LIMIT 1";
4945
4946
            $result = Database::query($sql);
4947
4948
            //if ($row = Database::fetch_array($result)) {
4949
            if (Database::num_rows($result) > 0) {
4950
                $is_courseMember = true;
4951
                $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
4952
4953
                $sql = "SELECT status FROM $tbl_user
4954
                        WHERE id = $userid
4955
                        LIMIT 1";
4956
4957
                $result = Database::query($sql);
4958
4959
                if (1 == Database::result($result, 0, 0)) {
4960
                    $is_courseAdmin = true;
4961
                } else {
4962
                    $is_courseAdmin = false;
4963
                }
4964
            } else {
4965
                // Check if the user is a student is this session.
4966
                $sql = "SELECT  id
4967
                        FROM $tbl_session_course_user
4968
                        WHERE
4969
                            user_id  = '$userid' AND
4970
                            c_id = '$courseId'
4971
                        LIMIT 1";
4972
4973
                if (Database::num_rows($result) > 0) {
4974
                    // This user haa got a recorded state for this course.
4975
                    while ($row = Database::fetch_array($result)) {
4976
                        $is_courseMember = true;
4977
                        $is_courseAdmin = false;
4978
                    }
4979
                }
4980
            }
4981
        }
4982
    }
4983
4984
    switch ($visibility) {
4985
        case Course::OPEN_WORLD:
4986
            return true;
4987
        case Course::OPEN_PLATFORM:
4988
            return isset($userid);
4989
        case Course::REGISTERED:
4990
        case Course::CLOSED:
4991
            return $is_platformAdmin || $is_courseMember || $is_courseAdmin;
0 ignored issues
show
Comprehensibility Best Practice introduced by
The variable $is_courseMember does not seem to be defined for all execution paths leading up to this point.
Loading history...
4992
        case Course::HIDDEN:
4993
            return $is_platformAdmin;
4994
    }
4995
4996
    return false;
4997
}
4998
4999
/**
5000
 * Returns whether an element (forum, message, survey ...) belongs to a session or not.
5001
 *
5002
 * @param string the tool of the element
5003
 * @param int the element id in database
5004
 * @param int the session_id to compare with element session id
5005
 *
5006
 * @return bool true if the element is in the session, false else
5007
 */
5008
function api_is_element_in_the_session($tool, $element_id, $session_id = null)
5009
{
5010
    if (is_null($session_id)) {
5011
        $session_id = api_get_session_id();
5012
    }
5013
5014
    $element_id = (int) $element_id;
5015
5016
    if (empty($element_id)) {
5017
        return false;
5018
    }
5019
5020
    // Get information to build query depending of the tool.
5021
    switch ($tool) {
5022
        case TOOL_SURVEY:
5023
            $table_tool = Database::get_course_table(TABLE_SURVEY);
5024
            $key_field = 'survey_id';
5025
            break;
5026
        case TOOL_ANNOUNCEMENT:
5027
            $table_tool = Database::get_course_table(TABLE_ANNOUNCEMENT);
5028
            $key_field = 'id';
5029
            break;
5030
        case TOOL_AGENDA:
5031
            $table_tool = Database::get_course_table(TABLE_AGENDA);
5032
            $key_field = 'id';
5033
            break;
5034
        case TOOL_GROUP:
5035
            $table_tool = Database::get_course_table(TABLE_GROUP);
5036
            $key_field = 'id';
5037
            break;
5038
        default:
5039
            return false;
5040
    }
5041
    $course_id = api_get_course_int_id();
5042
5043
    $sql = "SELECT session_id FROM $table_tool
5044
            WHERE c_id = $course_id AND $key_field =  ".$element_id;
5045
    $rs = Database::query($sql);
5046
    if ($element_session_id = Database::result($rs, 0, 0)) {
5047
        if ($element_session_id == intval($session_id)) {
5048
            // The element belongs to the session.
5049
            return true;
5050
        }
5051
    }
5052
5053
    return false;
5054
}
5055
5056
/**
5057
 * Replaces "forbidden" characters in a filename string.
5058
 *
5059
 * @param string $filename
5060
 * @param bool   $treat_spaces_as_hyphens
5061
 *
5062
 * @return string
5063
 */
5064
function api_replace_dangerous_char($filename, $treat_spaces_as_hyphens = true)
5065
{
5066
    // Some non-properly encoded file names can cause the whole file to be
5067
    // skipped when uploaded. Avoid this by detecting the encoding and
5068
    // converting to UTF-8, setting the source as ASCII (a reasonably
5069
    // limited characters set) if nothing could be found (BT#
5070
    $encoding = api_detect_encoding($filename);
5071
    if (empty($encoding)) {
5072
        $encoding = 'ASCII';
5073
        if (!api_is_valid_ascii($filename)) {
5074
            // try iconv and try non standard ASCII a.k.a CP437
5075
            // see BT#15022
5076
            if (function_exists('iconv')) {
5077
                $result = iconv('CP437', 'UTF-8', $filename);
5078
                if (api_is_valid_utf8($result)) {
5079
                    $filename = $result;
5080
                    $encoding = 'UTF-8';
5081
                }
5082
            }
5083
        }
5084
    }
5085
5086
    $filename = api_to_system_encoding($filename, $encoding);
5087
5088
    $url = URLify::filter(
5089
        $filename,
5090
        250,
5091
        '',
5092
        true,
5093
        false,
5094
        false
5095
    );
5096
5097
    // Replace multiple dots at the end.
5098
    $regex = "/\.+$/";
5099
5100
    return preg_replace($regex, '', $url);
5101
}
5102
5103
/**
5104
 * Fixes the $_SERVER['REQUEST_URI'] that is empty in IIS6.
5105
 *
5106
 * @author Ivan Tcholakov, 28-JUN-2006.
5107
 */
5108
function api_request_uri()
5109
{
5110
    if (!empty($_SERVER['REQUEST_URI'])) {
5111
        return $_SERVER['REQUEST_URI'];
5112
    }
5113
    $uri = $_SERVER['SCRIPT_NAME'];
5114
    if (!empty($_SERVER['QUERY_STRING'])) {
5115
        $uri .= '?'.$_SERVER['QUERY_STRING'];
5116
    }
5117
    $_SERVER['REQUEST_URI'] = $uri;
5118
5119
    return $uri;
5120
}
5121
5122
/**
5123
 * Gets the current access_url id of the Chamilo Platform.
5124
 *
5125
 * @return int access_url_id of the current Chamilo Installation
5126
 *
5127
 * @author Julio Montoya <[email protected]>
5128
 * @throws Exception
5129
 */
5130
function api_get_current_access_url_id(): int
5131
{
5132
    if (false === api_get_multiple_access_url()) {
5133
        return 1;
5134
    }
5135
5136
    static $id;
5137
    if (!empty($id)) {
5138
        return $id;
5139
    }
5140
5141
    $table = Database::get_main_table(TABLE_MAIN_ACCESS_URL);
5142
    $path = Database::escape_string(api_get_path(WEB_PATH));
5143
    $sql = "SELECT id FROM $table WHERE url = '".$path."'";
5144
    $result = Database::query($sql);
5145
    if (Database::num_rows($result) > 0) {
5146
        $id = Database::result($result, 0, 0);
5147
        if (false === $id) {
5148
            return -1;
5149
        }
5150
5151
        return (int) $id;
5152
    }
5153
5154
    $id = 1;
5155
5156
    //if the url in WEB_PATH was not found, it can only mean that there is
5157
    // either a configuration problem or the first URL has not been defined yet
5158
    // (by default it is http://localhost/). Thus the more sensible thing we can
5159
    // do is return 1 (the main URL) as the user cannot hack this value anyway
5160
    return 1;
5161
}
5162
5163
/**
5164
 * Gets the registered urls from a given user id.
5165
 *
5166
 * @author Julio Montoya <[email protected]>
5167
 *
5168
 * @param int $user_id
5169
 *
5170
 * @return array
5171
 */
5172
function api_get_access_url_from_user($user_id)
5173
{
5174
    $user_id = (int) $user_id;
5175
    $table_url_rel_user = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
5176
    $table_url = Database::get_main_table(TABLE_MAIN_ACCESS_URL);
5177
    $sql = "SELECT access_url_id
5178
            FROM $table_url_rel_user url_rel_user
5179
            INNER JOIN $table_url u
5180
            ON (url_rel_user.access_url_id = u.id)
5181
            WHERE user_id = ".$user_id;
5182
    $result = Database::query($sql);
5183
    $list = [];
5184
    while ($row = Database::fetch_assoc($result)) {
5185
        $list[] = $row['access_url_id'];
5186
    }
5187
5188
    return $list;
5189
}
5190
5191
/**
5192
 * Checks whether the curent user is in a group or not.
5193
 *
5194
 * @param string        The group id - optional (takes it from session if not given)
5195
 * @param string        The course code - optional (no additional check by course if course code is not given)
5196
 *
5197
 * @return bool
5198
 *
5199
 * @author Ivan Tcholakov
5200
 */
5201
function api_is_in_group($groupIdParam = null, $courseCodeParam = null)
5202
{
5203
    if (!empty($courseCodeParam)) {
5204
        $courseCode = api_get_course_id();
5205
        if (!empty($courseCode)) {
5206
            if ($courseCodeParam != $courseCode) {
5207
                return false;
5208
            }
5209
        } else {
5210
            return false;
5211
        }
5212
    }
5213
5214
    $groupId = api_get_group_id();
5215
5216
    if (isset($groupId) && '' != $groupId) {
5217
        if (!empty($groupIdParam)) {
5218
            return $groupIdParam == $groupId;
5219
        } else {
5220
            return true;
5221
        }
5222
    }
5223
5224
    return false;
5225
}
5226
5227
/**
5228
 * Checks whether a secret key is valid.
5229
 *
5230
 * @param string $original_key_secret - secret key from (webservice) client
5231
 * @param string $security_key        - security key from Chamilo
5232
 *
5233
 * @return bool - true if secret key is valid, false otherwise
5234
 */
5235
function api_is_valid_secret_key($original_key_secret, $security_key)
5236
{
5237
    if (empty($original_key_secret) || empty($security_key)) {
5238
        return false;
5239
    }
5240
5241
    return (string) $original_key_secret === hash('sha512', $security_key);
5242
}
5243
5244
/**
5245
 * Checks whether the server's operating system is Windows (TM).
5246
 *
5247
 * @return bool - true if the operating system is Windows, false otherwise
5248
 */
5249
function api_is_windows_os()
5250
{
5251
    if (function_exists('php_uname')) {
5252
        // php_uname() exists as of PHP 4.0.2, according to the documentation.
5253
        // We expect that this function will always work for Chamilo 1.8.x.
5254
        $os = php_uname();
5255
    }
5256
    // The following methods are not needed, but let them stay, just in case.
5257
    elseif (isset($_ENV['OS'])) {
5258
        // Sometimes $_ENV['OS'] may not be present (bugs?)
5259
        $os = $_ENV['OS'];
5260
    } elseif (defined('PHP_OS')) {
5261
        // PHP_OS means on which OS PHP was compiled, this is why
5262
        // using PHP_OS is the last choice for detection.
5263
        $os = PHP_OS;
5264
    } else {
5265
        return false;
5266
    }
5267
5268
    return 'win' == strtolower(substr((string) $os, 0, 3));
5269
}
5270
5271
/**
5272
 * This function informs whether the sent request is XMLHttpRequest.
5273
 */
5274
function api_is_xml_http_request()
5275
{
5276
    return isset($_SERVER['HTTP_X_REQUESTED_WITH']) && 'xmlhttprequest' == strtolower($_SERVER['HTTP_X_REQUESTED_WITH']);
5277
}
5278
5279
/**
5280
 * Returns a list of Chamilo's tools or
5281
 * checks whether a given identificator is a valid Chamilo's tool.
5282
 *
5283
 * @author Isaac flores paz
5284
 *
5285
 * @param string The tool name to filter
5286
 *
5287
 * @return mixed Filtered string or array
5288
 */
5289
function api_get_tools_lists($my_tool = null)
5290
{
5291
    $tools_list = [
5292
        TOOL_DOCUMENT,
5293
        TOOL_THUMBNAIL,
5294
        TOOL_HOTPOTATOES,
5295
        TOOL_CALENDAR_EVENT,
5296
        TOOL_LINK,
5297
        TOOL_COURSE_DESCRIPTION,
5298
        TOOL_SEARCH,
5299
        TOOL_LEARNPATH,
5300
        TOOL_ANNOUNCEMENT,
5301
        TOOL_FORUM,
5302
        TOOL_THREAD,
5303
        TOOL_POST,
5304
        TOOL_DROPBOX,
5305
        TOOL_QUIZ,
5306
        TOOL_USER,
5307
        TOOL_GROUP,
5308
        TOOL_BLOGS,
5309
        TOOL_CHAT,
5310
        TOOL_STUDENTPUBLICATION,
5311
        TOOL_TRACKING,
5312
        TOOL_HOMEPAGE_LINK,
5313
        TOOL_COURSE_SETTING,
5314
        TOOL_BACKUP,
5315
        TOOL_COPY_COURSE_CONTENT,
5316
        TOOL_RECYCLE_COURSE,
5317
        TOOL_COURSE_HOMEPAGE,
5318
        TOOL_COURSE_RIGHTS_OVERVIEW,
5319
        TOOL_UPLOAD,
5320
        TOOL_COURSE_MAINTENANCE,
5321
        TOOL_SURVEY,
5322
        //TOOL_WIKI,
5323
        TOOL_GLOSSARY,
5324
        TOOL_GRADEBOOK,
5325
        TOOL_NOTEBOOK,
5326
        TOOL_ATTENDANCE,
5327
        TOOL_COURSE_PROGRESS,
5328
    ];
5329
    if (empty($my_tool)) {
5330
        return $tools_list;
5331
    }
5332
5333
    return in_array($my_tool, $tools_list) ? $my_tool : '';
5334
}
5335
5336
/**
5337
 * Checks whether we already approved the last version term and condition.
5338
 *
5339
 * @param int user id
5340
 *
5341
 * @return bool true if we pass false otherwise
5342
 */
5343
function api_check_term_condition($userId)
5344
{
5345
    if ('true' === api_get_setting('allow_terms_conditions')) {
5346
        // Check if exists terms and conditions
5347
        if (0 == LegalManager::count()) {
5348
            return true;
5349
        }
5350
5351
        $extraFieldValue = new ExtraFieldValue('user');
5352
        $data = $extraFieldValue->get_values_by_handler_and_field_variable(
5353
            $userId,
5354
            'legal_accept'
5355
        );
5356
5357
        if (!empty($data) && isset($data['value']) && !empty($data['value'])) {
5358
            $result = $data['value'];
5359
            $user_conditions = explode(':', $result);
5360
            $version = $user_conditions[0];
5361
            $langId = $user_conditions[1];
5362
            $realVersion = LegalManager::get_last_version($langId);
5363
5364
            return $version >= $realVersion;
5365
        }
5366
5367
        return false;
5368
    }
5369
5370
    return false;
5371
}
5372
5373
/**
5374
 * Gets all information of a tool into course.
5375
 *
5376
 * @param int The tool id
5377
 *
5378
 * @return array
5379
 */
5380
function api_get_tool_information_by_name($name)
5381
{
5382
    $t_tool = Database::get_course_table(TABLE_TOOL_LIST);
5383
    $course_id = api_get_course_int_id();
5384
5385
    $sql = "SELECT id FROM tool
5386
            WHERE title = '".Database::escape_string($name)."' ";
5387
    $rs = Database::query($sql);
5388
    $data = Database::fetch_array($rs);
5389
    if ($data) {
5390
        $tool = $data['id'];
5391
        $sql = "SELECT * FROM $t_tool
5392
                WHERE c_id = $course_id  AND tool_id = '".$tool."' ";
5393
        $rs = Database::query($sql);
5394
5395
        return Database::fetch_assoc($rs);
0 ignored issues
show
Bug Best Practice introduced by
The expression return Database::fetch_assoc($rs) also could return the type boolean which is incompatible with the documented return type array.
Loading history...
5396
    }
5397
5398
    return [];
5399
}
5400
5401
/**
5402
 * Function used to protect a "global" admin script.
5403
 * The function blocks access when the user has no global platform admin rights.
5404
 * Global admins are the admins that are registered in the main.admin table
5405
 * AND the users who have access to the "principal" portal.
5406
 * That means that there is a record in the main.access_url_rel_user table
5407
 * with his user id and the access_url_id=1.
5408
 *
5409
 * @author Julio Montoya
5410
 *
5411
 * @param int $user_id
5412
 *
5413
 * @return bool
5414
 */
5415
function api_is_global_platform_admin($user_id = null)
5416
{
5417
    $user_id = (int) $user_id;
5418
    if (empty($user_id)) {
5419
        $user_id = api_get_user_id();
5420
    }
5421
    if (api_is_platform_admin_by_id($user_id)) {
5422
        $urlList = api_get_access_url_from_user($user_id);
5423
        // The admin is registered in the first "main" site with access_url_id = 1
5424
        if (in_array(1, $urlList)) {
5425
            return true;
5426
        }
5427
    }
5428
5429
    return false;
5430
}
5431
5432
/**
5433
 * @param int  $admin_id_to_check
5434
 * @param int  $userId
5435
 * @param bool $allow_session_admin
5436
 *
5437
 * @return bool
5438
 */
5439
function api_global_admin_can_edit_admin(
5440
    $admin_id_to_check,
5441
    $userId = 0,
5442
    $allow_session_admin = false
5443
) {
5444
    if (empty($userId)) {
5445
        $userId = api_get_user_id();
5446
    }
5447
5448
    $iam_a_global_admin = api_is_global_platform_admin($userId);
5449
    $user_is_global_admin = api_is_global_platform_admin($admin_id_to_check);
5450
5451
    if ($iam_a_global_admin) {
5452
        // Global admin can edit everything
5453
        return true;
5454
    }
5455
5456
    // If i'm a simple admin
5457
    $is_platform_admin = api_is_platform_admin_by_id($userId);
5458
5459
    if ($allow_session_admin && !$is_platform_admin) {
5460
        $user = api_get_user_entity($userId);
5461
        $is_platform_admin = $user->hasRole('ROLE_SESSION_MANAGER');
5462
    }
5463
5464
    if ($is_platform_admin) {
5465
        if ($user_is_global_admin) {
5466
            return false;
5467
        } else {
5468
            return true;
5469
        }
5470
    }
5471
5472
    return false;
5473
}
5474
5475
/**
5476
 * @param int  $admin_id_to_check
5477
 * @param int  $userId
5478
 * @param bool $allow_session_admin
5479
 *
5480
 * @return bool|null
5481
 */
5482
function api_protect_super_admin($admin_id_to_check, $userId = null, $allow_session_admin = false)
5483
{
5484
    if (api_global_admin_can_edit_admin($admin_id_to_check, $userId, $allow_session_admin)) {
5485
        return true;
5486
    } else {
5487
        api_not_allowed();
5488
    }
5489
}
5490
5491
/**
5492
 * Function used to protect a global admin script.
5493
 * The function blocks access when the user has no global platform admin rights.
5494
 * See also the api_is_global_platform_admin() function wich defines who's a "global" admin.
5495
 *
5496
 * @author Julio Montoya
5497
 */
5498
function api_protect_global_admin_script()
5499
{
5500
    if (!api_is_global_platform_admin()) {
5501
        api_not_allowed();
5502
5503
        return false;
5504
    }
5505
5506
    return true;
5507
}
5508
5509
/**
5510
 * Check browser support for specific file types or features
5511
 * This function checks if the user's browser supports a file format or given
5512
 * feature, or returns the current browser and major version when
5513
 * $format=check_browser. Only a limited number of formats and features are
5514
 * checked by this method. Make sure you check its definition first.
5515
 *
5516
 * @param string $format Can be a file format (extension like svg, webm, ...) or a feature (like autocapitalize, ...)
5517
 *
5518
 * @deprecated
5519
 *
5520
 * @return bool or return text array if $format=check_browser
5521
 *
5522
 * @author Juan Carlos Raña Trabado
5523
 */
5524
function api_browser_support($format = '')
5525
{
5526
    return true;
5527
5528
    $browser = new Browser();
0 ignored issues
show
Unused Code introduced by
$browser = new Browser() is not reachable.

This check looks for unreachable code. It uses sophisticated control flow analysis techniques to find statements which will never be executed.

Unreachable code is most often the result of return, die or exit statements that have been added for debug purposes.

function fx() {
    try {
        doSomething();
        return true;
    }
    catch (\Exception $e) {
        return false;
    }

    return false;
}

In the above example, the last return false will never be executed, because a return statement has already been met in every possible execution path.

Loading history...
5529
    $current_browser = $browser->getBrowser();
5530
    $a_versiontemp = explode('.', $browser->getVersion());
5531
    $current_majorver = $a_versiontemp[0];
5532
5533
    static $result;
5534
5535
    if (isset($result[$format])) {
5536
        return $result[$format];
5537
    }
5538
5539
    // Native svg support
5540
    if ('svg' == $format) {
5541
        if (('Internet Explorer' == $current_browser && $current_majorver >= 9) ||
5542
            ('Firefox' == $current_browser && $current_majorver > 1) ||
5543
            ('Safari' == $current_browser && $current_majorver >= 4) ||
5544
            ('Chrome' == $current_browser && $current_majorver >= 1) ||
5545
            ('Opera' == $current_browser && $current_majorver >= 9)
5546
        ) {
5547
            $result[$format] = true;
5548
5549
            return true;
5550
        } else {
5551
            $result[$format] = false;
5552
5553
            return false;
5554
        }
5555
    } elseif ('pdf' == $format) {
5556
        // native pdf support
5557
        if ('Chrome' == $current_browser && $current_majorver >= 6) {
5558
            $result[$format] = true;
5559
5560
            return true;
5561
        } else {
5562
            $result[$format] = false;
5563
5564
            return false;
5565
        }
5566
    } elseif ('tif' == $format || 'tiff' == $format) {
5567
        //native tif support
5568
        if ('Safari' == $current_browser && $current_majorver >= 5) {
5569
            $result[$format] = true;
5570
5571
            return true;
5572
        } else {
5573
            $result[$format] = false;
5574
5575
            return false;
5576
        }
5577
    } elseif ('ogg' == $format || 'ogx' == $format || 'ogv' == $format || 'oga' == $format) {
5578
        //native ogg, ogv,oga support
5579
        if (('Firefox' == $current_browser && $current_majorver >= 3) ||
5580
            ('Chrome' == $current_browser && $current_majorver >= 3) ||
5581
            ('Opera' == $current_browser && $current_majorver >= 9)) {
5582
            $result[$format] = true;
5583
5584
            return true;
5585
        } else {
5586
            $result[$format] = false;
5587
5588
            return false;
5589
        }
5590
    } elseif ('mpg' == $format || 'mpeg' == $format) {
5591
        //native mpg support
5592
        if (('Safari' == $current_browser && $current_majorver >= 5)) {
5593
            $result[$format] = true;
5594
5595
            return true;
5596
        } else {
5597
            $result[$format] = false;
5598
5599
            return false;
5600
        }
5601
    } elseif ('mp4' == $format) {
5602
        //native mp4 support (TODO: Android, iPhone)
5603
        if ('Android' == $current_browser || 'iPhone' == $current_browser) {
5604
            $result[$format] = true;
5605
5606
            return true;
5607
        } else {
5608
            $result[$format] = false;
5609
5610
            return false;
5611
        }
5612
    } elseif ('mov' == $format) {
5613
        //native mov support( TODO:check iPhone)
5614
        if ('Safari' == $current_browser && $current_majorver >= 5 || 'iPhone' == $current_browser) {
0 ignored issues
show
introduced by
Consider adding parentheses for clarity. Current Interpretation: ('Safari' == $current_br...ne' == $current_browser, Probably Intended Meaning: 'Safari' == $current_bro...e' == $current_browser)
Loading history...
5615
            $result[$format] = true;
5616
5617
            return true;
5618
        } else {
5619
            $result[$format] = false;
5620
5621
            return false;
5622
        }
5623
    } elseif ('avi' == $format) {
5624
        //native avi support
5625
        if ('Safari' == $current_browser && $current_majorver >= 5) {
5626
            $result[$format] = true;
5627
5628
            return true;
5629
        } else {
5630
            $result[$format] = false;
5631
5632
            return false;
5633
        }
5634
    } elseif ('wmv' == $format) {
5635
        //native wmv support
5636
        if ('Firefox' == $current_browser && $current_majorver >= 4) {
5637
            $result[$format] = true;
5638
5639
            return true;
5640
        } else {
5641
            $result[$format] = false;
5642
5643
            return false;
5644
        }
5645
    } elseif ('webm' == $format) {
5646
        //native webm support (TODO:check IE9, Chrome9, Android)
5647
        if (('Firefox' == $current_browser && $current_majorver >= 4) ||
5648
            ('Opera' == $current_browser && $current_majorver >= 9) ||
5649
            ('Internet Explorer' == $current_browser && $current_majorver >= 9) ||
5650
            ('Chrome' == $current_browser && $current_majorver >= 9) ||
5651
            'Android' == $current_browser
5652
        ) {
5653
            $result[$format] = true;
5654
5655
            return true;
5656
        } else {
5657
            $result[$format] = false;
5658
5659
            return false;
5660
        }
5661
    } elseif ('wav' == $format) {
5662
        //native wav support (only some codecs !)
5663
        if (('Firefox' == $current_browser && $current_majorver >= 4) ||
5664
            ('Safari' == $current_browser && $current_majorver >= 5) ||
5665
            ('Opera' == $current_browser && $current_majorver >= 9) ||
5666
            ('Internet Explorer' == $current_browser && $current_majorver >= 9) ||
5667
            ('Chrome' == $current_browser && $current_majorver > 9) ||
5668
            'Android' == $current_browser ||
5669
            'iPhone' == $current_browser
5670
        ) {
5671
            $result[$format] = true;
5672
5673
            return true;
5674
        } else {
5675
            $result[$format] = false;
5676
5677
            return false;
5678
        }
5679
    } elseif ('mid' == $format || 'kar' == $format) {
5680
        //native midi support (TODO:check Android)
5681
        if ('Opera' == $current_browser && $current_majorver >= 9 || 'Android' == $current_browser) {
0 ignored issues
show
introduced by
Consider adding parentheses for clarity. Current Interpretation: ('Opera' == $current_bro...id' == $current_browser, Probably Intended Meaning: 'Opera' == $current_brow...d' == $current_browser)
Loading history...
5682
            $result[$format] = true;
5683
5684
            return true;
5685
        } else {
5686
            $result[$format] = false;
5687
5688
            return false;
5689
        }
5690
    } elseif ('wma' == $format) {
5691
        //native wma support
5692
        if ('Firefox' == $current_browser && $current_majorver >= 4) {
5693
            $result[$format] = true;
5694
5695
            return true;
5696
        } else {
5697
            $result[$format] = false;
5698
5699
            return false;
5700
        }
5701
    } elseif ('au' == $format) {
5702
        //native au support
5703
        if ('Safari' == $current_browser && $current_majorver >= 5) {
5704
            $result[$format] = true;
5705
5706
            return true;
5707
        } else {
5708
            $result[$format] = false;
5709
5710
            return false;
5711
        }
5712
    } elseif ('mp3' == $format) {
5713
        //native mp3 support (TODO:check Android, iPhone)
5714
        if (('Safari' == $current_browser && $current_majorver >= 5) ||
5715
            ('Chrome' == $current_browser && $current_majorver >= 6) ||
5716
            ('Internet Explorer' == $current_browser && $current_majorver >= 9) ||
5717
            'Android' == $current_browser ||
5718
            'iPhone' == $current_browser ||
5719
            'Firefox' == $current_browser
5720
        ) {
5721
            $result[$format] = true;
5722
5723
            return true;
5724
        } else {
5725
            $result[$format] = false;
5726
5727
            return false;
5728
        }
5729
    } elseif ('autocapitalize' == $format) {
5730
        // Help avoiding showing the autocapitalize option if the browser doesn't
5731
        // support it: this attribute is against the HTML5 standard
5732
        if ('Safari' == $current_browser || 'iPhone' == $current_browser) {
5733
            return true;
5734
        } else {
5735
            return false;
5736
        }
5737
    } elseif ("check_browser" == $format) {
5738
        $array_check_browser = [$current_browser, $current_majorver];
5739
5740
        return $array_check_browser;
5741
    } else {
5742
        $result[$format] = false;
5743
5744
        return false;
5745
    }
5746
}
5747
5748
/**
5749
 * This function checks if exist path and file browscap.ini
5750
 * In order for this to work, your browscap configuration setting in php.ini
5751
 * must point to the correct location of the browscap.ini file on your system
5752
 * http://php.net/manual/en/function.get-browser.php.
5753
 *
5754
 * @return bool
5755
 *
5756
 * @author Juan Carlos Raña Trabado
5757
 */
5758
function api_check_browscap()
5759
{
5760
    $setting = ini_get('browscap');
5761
    if ($setting) {
5762
        $browser = get_browser($_SERVER['HTTP_USER_AGENT'], true);
5763
        if (strpos($setting, 'browscap.ini') && !empty($browser)) {
5764
            return true;
5765
        }
5766
    }
5767
5768
    return false;
5769
}
5770
5771
/**
5772
 * Returns the <script> HTML tag.
5773
 */
5774
function api_get_js($file)
5775
{
5776
    return '<script src="'.api_get_path(WEB_LIBRARY_PATH).'javascript/'.$file.'"></script>'."\n";
5777
}
5778
5779
function api_get_build_js($file)
5780
{
5781
    return '<script src="'.api_get_path(WEB_PUBLIC_PATH).'build/'.$file.'"></script>'."\n";
5782
}
5783
5784
function api_get_build_css($file, $media = 'screen')
5785
{
5786
    return '<link
5787
        href="'.api_get_path(WEB_PUBLIC_PATH).'build/'.$file.'" rel="stylesheet" media="'.$media.'" type="text/css" />'."\n";
5788
}
5789
5790
/**
5791
 * Returns the <script> HTML tag.
5792
 *
5793
 * @return string
5794
 */
5795
function api_get_asset($file)
5796
{
5797
    return '<script src="'.api_get_path(WEB_PUBLIC_PATH).'build/libs/'.$file.'"></script>'."\n";
5798
}
5799
5800
/**
5801
 * Returns the <script> HTML tag.
5802
 *
5803
 * @param string $file
5804
 * @param string $media
5805
 *
5806
 * @return string
5807
 */
5808
function api_get_css_asset($file, $media = 'screen')
5809
{
5810
    return '<link
5811
        href="'.api_get_path(WEB_PUBLIC_PATH).'build/libs/'.$file.'"
5812
        rel="stylesheet" media="'.$media.'" type="text/css" />'."\n";
5813
}
5814
5815
/**
5816
 * Returns the <link> HTML tag.
5817
 *
5818
 * @param string $file
5819
 * @param string $media
5820
 */
5821
function api_get_css($file, $media = 'screen')
5822
{
5823
    return '<link href="'.$file.'" rel="stylesheet" media="'.$media.'" type="text/css" />'."\n";
5824
}
5825
5826
function api_get_bootstrap_and_font_awesome($returnOnlyPath = false, $returnFileLocation = false)
5827
{
5828
    $url = api_get_path(WEB_PUBLIC_PATH).'build/css/bootstrap.css';
5829
5830
    if ($returnOnlyPath) {
5831
        if ($returnFileLocation) {
5832
            return api_get_path(SYS_PUBLIC_PATH).'build/css/bootstrap.css';
5833
        }
5834
5835
        return $url;
5836
    }
5837
5838
    return '<link href="'.$url.'" rel="stylesheet" type="text/css" />'."\n";
5839
}
5840
5841
/**
5842
 * Returns the js header to include the jquery library.
5843
 */
5844
function api_get_jquery_js()
5845
{
5846
    return api_get_asset('jquery/jquery.min.js');
5847
}
5848
5849
/**
5850
 * Returns the jquery path.
5851
 *
5852
 * @return string
5853
 */
5854
function api_get_jquery_web_path()
5855
{
5856
    return api_get_path(WEB_PUBLIC_PATH).'assets/jquery/jquery.min.js';
5857
}
5858
5859
/**
5860
 * @return string
5861
 */
5862
function api_get_jquery_ui_js_web_path()
5863
{
5864
    return api_get_path(WEB_PUBLIC_PATH).'assets/jquery-ui/jquery-ui.min.js';
5865
}
5866
5867
/**
5868
 * @return string
5869
 */
5870
function api_get_jquery_ui_css_web_path()
5871
{
5872
    return api_get_path(WEB_PUBLIC_PATH).'assets/jquery-ui/themes/smoothness/jquery-ui.min.css';
5873
}
5874
5875
/**
5876
 * Returns the jquery-ui library js headers.
5877
 *
5878
 * @return string html tags
5879
 */
5880
function api_get_jquery_ui_js()
5881
{
5882
    $libraries = [];
5883
5884
    return api_get_jquery_libraries_js($libraries);
5885
}
5886
5887
function api_get_jqgrid_js()
5888
{
5889
    return api_get_build_css('legacy_free-jqgrid.css').PHP_EOL
5890
        .api_get_build_js('legacy_free-jqgrid.js');
5891
}
5892
5893
/**
5894
 * Returns the jquery library js and css headers.
5895
 *
5896
 * @param   array   list of jquery libraries supported jquery-ui
5897
 * @param   bool    add the jquery library
5898
 *
5899
 * @return string html tags
5900
 */
5901
function api_get_jquery_libraries_js($libraries)
5902
{
5903
    $js = '';
5904
5905
    //Document multiple upload funcionality
5906
    if (in_array('jquery-uploadzs', $libraries)) {
5907
        $js .= api_get_asset('blueimp-load-image/js/load-image.all.min.js');
5908
        $js .= api_get_asset('blueimp-canvas-to-blob/js/canvas-to-blob.min.js');
5909
        $js .= api_get_asset('jquery-file-upload/js/jquery.iframe-transport.js');
5910
        $js .= api_get_asset('jquery-file-upload/js/jquery.fileupload.js');
5911
        $js .= api_get_asset('jquery-file-upload/js/jquery.fileupload-process.js');
5912
        $js .= api_get_asset('jquery-file-upload/js/jquery.fileupload-image.js');
5913
        $js .= api_get_asset('jquery-file-upload/js/jquery.fileupload-audio.js');
5914
        $js .= api_get_asset('jquery-file-upload/js/jquery.fileupload-video.js');
5915
        $js .= api_get_asset('jquery-file-upload/js/jquery.fileupload-validate.js');
5916
5917
        $js .= api_get_css(api_get_path(WEB_PUBLIC_PATH).'assets/jquery-file-upload/css/jquery.fileupload.css');
5918
        $js .= api_get_css(api_get_path(WEB_PUBLIC_PATH).'assets/jquery-file-upload/css/jquery.fileupload-ui.css');
5919
    }
5920
5921
    // jquery datepicker
5922
    if (in_array('datepicker', $libraries)) {
5923
        $languaje = 'en-GB';
5924
        $platform_isocode = strtolower(api_get_language_isocode());
5925
5926
        $datapicker_langs = [
5927
            'af', 'ar', 'ar-DZ', 'az', 'bg', 'bs', 'ca', 'cs', 'cy-GB', 'da', 'de', 'el', 'en-AU', 'en-GB', 'en-NZ', 'eo', 'es', 'et', 'eu', 'fa', 'fi', 'fo', 'fr', 'fr-CH', 'gl', 'he', 'hi', 'hr', 'hu', 'hy', 'id', 'is', 'it', 'ja', 'ka', 'kk', 'km', 'ko', 'lb', 'lt', 'lv', 'mk', 'ml', 'ms', 'nl', 'nl-BE', 'no', 'pl', 'pt', 'pt-BR', 'rm', 'ro', 'ru', 'sk', 'sl', 'sq', 'sr', 'sr-SR', 'sv', 'ta', 'th', 'tj', 'tr', 'uk', 'vi', 'zh-CN', 'zh-HK', 'zh-TW',
5928
        ];
5929
        if (in_array($platform_isocode, $datapicker_langs)) {
5930
            $languaje = $platform_isocode;
5931
        }
5932
5933
        $js .= api_get_js('jquery-ui/jquery-ui-i18n.min.js');
5934
        $script = '<script>
5935
        $(function(){
5936
            $.datepicker.setDefaults($.datepicker.regional["'.$languaje.'"]);
5937
            $.datepicker.regional["local"] = $.datepicker.regional["'.$languaje.'"];
5938
        });
5939
        </script>
5940
        ';
5941
        $js .= $script;
5942
    }
5943
5944
    return $js;
5945
}
5946
5947
/**
5948
 * Returns the URL to the course or session, removing the complexity of the URL
5949
 * building piece by piece.
5950
 *
5951
 * This function relies on api_get_course_info()
5952
 *
5953
 * @param int $courseId  The course code - optional (takes it from context if not given)
5954
 * @param int $sessionId The session ID  - optional (takes it from context if not given)
5955
 * @param int $groupId   The group ID - optional (takes it from context if not given)
5956
 *
5957
 * @return string The URL to a course, a session, or empty string if nothing works
5958
 *                e.g. https://localhost/courses/ABC/index.php?session_id=3&gidReq=1
5959
 *
5960
 * @author  Julio Montoya
5961
 */
5962
function api_get_course_url($courseId = null, $sessionId = null, $groupId = null)
5963
{
5964
    $url = '';
5965
    // If courseCode not set, get context or []
5966
    if (empty($courseId)) {
5967
        $courseId = api_get_course_int_id();
5968
    }
5969
5970
    // If sessionId not set, get context or 0
5971
    if (empty($sessionId)) {
5972
        $sessionId = api_get_session_id();
5973
    }
5974
5975
    // If groupId not set, get context or 0
5976
    if (empty($groupId)) {
5977
        $groupId = api_get_group_id();
5978
    }
5979
5980
    // Build the URL
5981
    if (!empty($courseId)) {
5982
        $webCourseHome = '/course/'.$courseId.'/home';
5983
        // directory not empty, so we do have a course
5984
        $url = $webCourseHome.'?sid='.$sessionId.'&gid='.$groupId;
5985
    } else {
5986
        if (!empty($sessionId) && 'true' !== api_get_setting('session.remove_session_url')) {
5987
            // if the course was unset and the session was set, send directly to the session
5988
            $url = api_get_path(WEB_CODE_PATH).'session/index.php?session_id='.$sessionId;
5989
        }
5990
    }
5991
5992
    // if not valid combination was found, return an empty string
5993
    return $url;
5994
}
5995
5996
/**
5997
 * Check if there is more than the default URL defined in the access_url table.
5998
 */
5999
function api_get_multiple_access_url(): bool
6000
{
6001
    return Container::$container->get(AccessUrlHelper::class)->isMultiple();
6002
}
6003
6004
/**
6005
 * @deprecated Use AccessUrlHelper::isMultiple
6006
 */
6007
function api_is_multiple_url_enabled(): bool
6008
{
6009
    return api_get_multiple_access_url();
6010
}
6011
6012
/**
6013
 * Returns a md5 unique id.
6014
 *
6015
 * @todo add more parameters
6016
 */
6017
function api_get_unique_id()
6018
{
6019
    return md5(time().uniqid().api_get_user_id().api_get_course_id().api_get_session_id());
6020
}
6021
6022
/**
6023
 * @param int Course id
6024
 * @param int tool id: TOOL_QUIZ, TOOL_FORUM, TOOL_STUDENTPUBLICATION, TOOL_LEARNPATH
6025
 * @param int the item id (tool id, exercise id, lp id)
6026
 *
6027
 * @return bool
6028
 */
6029
function api_resource_is_locked_by_gradebook($item_id, $link_type, $course_code = null)
6030
{
6031
    if (api_is_platform_admin()) {
6032
        return false;
6033
    }
6034
    if ('true' === api_get_setting('gradebook_locking_enabled')) {
6035
        if (empty($course_code)) {
6036
            $course_code = api_get_course_id();
6037
        }
6038
        $table = Database::get_main_table(TABLE_MAIN_GRADEBOOK_LINK);
6039
        $item_id = (int) $item_id;
6040
        $link_type = (int) $link_type;
6041
        $course_code = Database::escape_string($course_code);
6042
        $sql = "SELECT locked FROM $table
6043
                WHERE locked = 1 AND ref_id = $item_id AND type = $link_type AND course_code = '$course_code' ";
6044
        $result = Database::query($sql);
6045
        if (Database::num_rows($result)) {
6046
            return true;
6047
        }
6048
    }
6049
6050
    return false;
6051
}
6052
6053
/**
6054
 * Blocks a page if the item was added in a gradebook.
6055
 *
6056
 * @param int       exercise id, work id, thread id,
6057
 * @param int       LINK_EXERCISE, LINK_STUDENTPUBLICATION, LINK_LEARNPATH LINK_FORUM_THREAD, LINK_ATTENDANCE
6058
 * see gradebook/lib/be/linkfactory
6059
 * @param string    course code
6060
 *
6061
 * @return false|null
6062
 */
6063
function api_block_course_item_locked_by_gradebook($item_id, $link_type, $course_code = null)
6064
{
6065
    if (api_is_platform_admin()) {
6066
        return false;
6067
    }
6068
6069
    if (api_resource_is_locked_by_gradebook($item_id, $link_type, $course_code)) {
6070
        $message = Display::return_message(
6071
            get_lang(
6072
                'This option is not available because this activity is contained by an assessment, which is currently locked. To unlock the assessment, ask your platform administrator.'
6073
            ),
6074
            'warning'
6075
        );
6076
        api_not_allowed(true, $message);
6077
    }
6078
}
6079
6080
/**
6081
 * Checks the PHP version installed is enough to run Chamilo.
6082
 *
6083
 * @param string Include path (used to load the error page)
6084
 */
6085
function api_check_php_version()
6086
{
6087
    if (!function_exists('version_compare') ||
6088
        version_compare(PHP_VERSION, REQUIRED_PHP_VERSION, '<')
6089
    ) {
6090
        throw new Exception('Wrong PHP version');
6091
    }
6092
}
6093
6094
/**
6095
 * Checks whether the Archive directory is present and writeable. If not,
6096
 * prints a warning message.
6097
 */
6098
function api_check_archive_dir()
6099
{
6100
    if (is_dir(api_get_path(SYS_ARCHIVE_PATH)) && !is_writable(api_get_path(SYS_ARCHIVE_PATH))) {
6101
        $message = Display::return_message(
6102
            get_lang(
6103
                'The var/cache/ directory, used by this tool, is not writeable. Please contact your platform administrator.'
6104
            ),
6105
            'warning'
6106
        );
6107
        api_not_allowed(true, $message);
6108
    }
6109
}
6110
6111
/**
6112
 * Returns an array of global configuration settings which should be ignored
6113
 * when printing the configuration settings screens.
6114
 *
6115
 * @return array Array of strings, each identifying one of the excluded settings
6116
 */
6117
function api_get_locked_settings()
6118
{
6119
    return [
6120
        'permanently_remove_deleted_files',
6121
        'account_valid_duration',
6122
        'service_ppt2lp',
6123
        'wcag_anysurfer_public_pages',
6124
        'upload_extensions_list_type',
6125
        'upload_extensions_blacklist',
6126
        'upload_extensions_whitelist',
6127
        'upload_extensions_skip',
6128
        'upload_extensions_replace_by',
6129
        'hide_dltt_markup',
6130
        'split_users_upload_directory',
6131
        'permissions_for_new_directories',
6132
        'permissions_for_new_files',
6133
        'platform_charset',
6134
        'ldap_description',
6135
        'cas_activate',
6136
        'cas_server',
6137
        'cas_server_uri',
6138
        'cas_port',
6139
        'cas_protocol',
6140
        'cas_add_user_activate',
6141
        'update_user_info_cas_with_ldap',
6142
        'languagePriority1',
6143
        'languagePriority2',
6144
        'languagePriority3',
6145
        'languagePriority4',
6146
        'login_is_email',
6147
        'chamilo_database_version',
6148
    ];
6149
}
6150
6151
/**
6152
 * Guess the real ip for register in the database, even in reverse proxy cases.
6153
 * To be recognized, the IP has to be found in either $_SERVER['REMOTE_ADDR'] or
6154
 * in $_SERVER['HTTP_X_FORWARDED_FOR'], which is in common use with rproxies.
6155
 * Note: the result of this function is not SQL-safe. Please escape it before
6156
 * inserting in a database.
6157
 *
6158
 * @return string the user's real ip (unsafe - escape it before inserting to db)
6159
 *
6160
 * @author Jorge Frisancho Jibaja <[email protected]>, USIL - Some changes to allow the use of real IP using reverse proxy
6161
 *
6162
 * @version CEV CHANGE 24APR2012
6163
 * @throws RuntimeException
6164
 */
6165
function api_get_real_ip(): string
6166
{
6167
    if ('cli' === PHP_SAPI) {
6168
        $ip = '127.0.0.1';
6169
    } else {
6170
        $ip = trim($_SERVER['REMOTE_ADDR']);
6171
        if (empty($ip)) {
6172
            throw new RuntimeException("Unable to retrieve remote IP address.");
6173
        }
6174
    }
6175
    if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
6176
        if (preg_match('/,/', $_SERVER['HTTP_X_FORWARDED_FOR'])) {
6177
            @list($ip1, $ip2) = @explode(',', $_SERVER['HTTP_X_FORWARDED_FOR']);
6178
        } else {
6179
            $ip1 = $_SERVER['HTTP_X_FORWARDED_FOR'];
6180
        }
6181
        $ip = trim($ip1);
6182
    }
6183
6184
    return $ip;
6185
}
6186
6187
/**
6188
 * Checks whether an IP is included inside an IP range.
6189
 *
6190
 * @param string IP address
6191
 * @param string IP range
6192
 * @param string $ip
6193
 *
6194
 * @return bool True if IP is in the range, false otherwise
6195
 *
6196
 * @author claudiu at cnixs dot com  on http://www.php.net/manual/fr/ref.network.php#55230
6197
 * @author Yannick Warnier for improvements and managment of multiple ranges
6198
 *
6199
 * @todo check for IPv6 support
6200
 */
6201
function api_check_ip_in_range($ip, $range)
6202
{
6203
    if (empty($ip) or empty($range)) {
6204
        return false;
6205
    }
6206
    $ip_ip = ip2long($ip);
6207
    // divide range param into array of elements
6208
    if (false !== strpos($range, ',')) {
6209
        $ranges = explode(',', $range);
6210
    } else {
6211
        $ranges = [$range];
6212
    }
6213
    foreach ($ranges as $range) {
0 ignored issues
show
introduced by
$range is overwriting one of the parameters of this function.
Loading history...
6214
        $range = trim($range);
6215
        if (empty($range)) {
6216
            continue;
6217
        }
6218
        if (false === strpos($range, '/')) {
6219
            if (0 === strcmp($ip, $range)) {
6220
                return true; // there is a direct IP match, return OK
6221
            }
6222
            continue; //otherwise, get to the next range
6223
        }
6224
        // the range contains a "/", so analyse completely
6225
        [$net, $mask] = explode("/", $range);
6226
6227
        $ip_net = ip2long($net);
6228
        // mask binary magic
6229
        $ip_mask = ~((1 << (32 - $mask)) - 1);
6230
6231
        $ip_ip_net = $ip_ip & $ip_mask;
6232
        if ($ip_ip_net == $ip_net) {
6233
            return true;
6234
        }
6235
    }
6236
6237
    return false;
6238
}
6239
6240
function api_check_user_access_to_legal($courseInfo)
6241
{
6242
    if (empty($courseInfo)) {
6243
        return false;
6244
    }
6245
6246
    $visibility = (int) $courseInfo['visibility'];
6247
    $visibilityList = [COURSE_VISIBILITY_OPEN_WORLD, COURSE_VISIBILITY_OPEN_PLATFORM];
6248
6249
    return
6250
        in_array($visibility, $visibilityList) ||
6251
        api_is_drh() ||
6252
        (COURSE_VISIBILITY_REGISTERED === $visibility && 1 === (int) $courseInfo['subscribe']);
6253
}
6254
6255
/**
6256
 * Checks if the global chat is enabled or not.
6257
 *
6258
 * @return bool
6259
 */
6260
function api_is_global_chat_enabled()
6261
{
6262
    return
6263
        !api_is_anonymous() &&
6264
        'true' === api_get_setting('allow_global_chat') &&
6265
        'true' === api_get_setting('allow_social_tool');
6266
}
6267
6268
/**
6269
 * @param int   $item_id
6270
 * @param int   $tool_id
6271
 * @param int   $group_id   id
6272
 * @param array $courseInfo
6273
 * @param int   $sessionId
6274
 * @param int   $userId
6275
 *
6276
 * @deprecated
6277
 */
6278
function api_set_default_visibility(
6279
    $item_id,
6280
    $tool_id,
6281
    $group_id = 0,
6282
    $courseInfo = [],
6283
    $sessionId = 0,
6284
    $userId = 0
6285
) {
6286
    $courseInfo = empty($courseInfo) ? api_get_course_info() : $courseInfo;
6287
    $courseId = $courseInfo['real_id'];
6288
    $courseCode = $courseInfo['code'];
6289
    $sessionId = empty($sessionId) ? api_get_session_id() : $sessionId;
6290
    $userId = empty($userId) ? api_get_user_id() : $userId;
6291
6292
    // if group is null force group_id = 0, this force is needed to create a LP folder with group = 0
6293
    if (is_null($group_id)) {
6294
        $group_id = 0;
6295
    } else {
6296
        $group_id = empty($group_id) ? api_get_group_id() : $group_id;
6297
    }
6298
6299
    $groupInfo = [];
6300
    if (!empty($group_id)) {
6301
        $groupInfo = GroupManager::get_group_properties($group_id);
6302
    }
6303
    $original_tool_id = $tool_id;
6304
6305
    switch ($tool_id) {
6306
        case TOOL_LINK:
6307
        case TOOL_LINK_CATEGORY:
6308
            $tool_id = 'links';
6309
            break;
6310
        case TOOL_DOCUMENT:
6311
            $tool_id = 'documents';
6312
            break;
6313
        case TOOL_LEARNPATH:
6314
            $tool_id = 'learning';
6315
            break;
6316
        case TOOL_ANNOUNCEMENT:
6317
            $tool_id = 'announcements';
6318
            break;
6319
        case TOOL_FORUM:
6320
        case TOOL_FORUM_CATEGORY:
6321
        case TOOL_FORUM_THREAD:
6322
            $tool_id = 'forums';
6323
            break;
6324
        case TOOL_QUIZ:
6325
            $tool_id = 'quiz';
6326
            break;
6327
    }
6328
    $setting = api_get_setting('tool_visible_by_default_at_creation');
6329
6330
    if (isset($setting[$tool_id])) {
6331
        $visibility = 'invisible';
6332
        if ('true' === $setting[$tool_id]) {
6333
            $visibility = 'visible';
6334
        }
6335
6336
        // Read the portal and course default visibility
6337
        if ('documents' === $tool_id) {
6338
            $visibility = DocumentManager::getDocumentDefaultVisibility($courseInfo);
6339
        }
6340
6341
        // Fixes default visibility for tests
6342
        switch ($original_tool_id) {
6343
            case TOOL_QUIZ:
6344
                if (empty($sessionId)) {
6345
                    $objExerciseTmp = new Exercise($courseId);
6346
                    $objExerciseTmp->read($item_id);
6347
                    if ('visible' === $visibility) {
6348
                        $objExerciseTmp->enable();
6349
                        $objExerciseTmp->save();
6350
                    } else {
6351
                        $objExerciseTmp->disable();
6352
                        $objExerciseTmp->save();
6353
                    }
6354
                }
6355
                break;
6356
        }
6357
    }
6358
}
6359
6360
function api_get_roles()
6361
{
6362
    $hierarchy = Container::$container->getParameter('security.role_hierarchy.roles');
6363
    $roles = [];
6364
    array_walk_recursive($hierarchy, function ($role) use (&$roles) {
6365
        $roles[$role] = $role;
6366
    });
6367
6368
    return $roles;
6369
}
6370
6371
function api_get_user_roles(): array
6372
{
6373
    $permissionService = Container::$container->get(PermissionServiceHelper::class);
6374
6375
    $roles = $permissionService->getUserRoles();
6376
6377
    return array_combine($roles, $roles);
6378
}
6379
6380
/**
6381
 * @param string $file
6382
 *
6383
 * @return string
6384
 */
6385
function api_get_js_simple($file)
6386
{
6387
    return '<script type="text/javascript" src="'.$file.'"></script>'."\n";
6388
}
6389
6390
/**
6391
 * Modify default memory_limit and max_execution_time limits
6392
 * Needed when processing long tasks.
6393
 */
6394
function api_set_more_memory_and_time_limits()
6395
{
6396
    if (function_exists('ini_set')) {
6397
        api_set_memory_limit('256M');
6398
        ini_set('max_execution_time', 1800);
6399
    }
6400
}
6401
6402
/**
6403
 * Tries to set memory limit, if authorized and new limit is higher than current.
6404
 *
6405
 * @param string $mem New memory limit
6406
 *
6407
 * @return bool True on success, false on failure or current is higher than suggested
6408
 * @assert (null) === false
6409
 * @assert (-1) === false
6410
 * @assert (0) === true
6411
 * @assert ('1G') === true
6412
 */
6413
function api_set_memory_limit($mem)
6414
{
6415
    //if ini_set() not available, this function is useless
6416
    if (!function_exists('ini_set') || is_null($mem) || -1 == $mem) {
6417
        return false;
6418
    }
6419
6420
    $memory_limit = ini_get('memory_limit');
6421
    if (api_get_bytes_memory_limit($mem) > api_get_bytes_memory_limit($memory_limit)) {
6422
        ini_set('memory_limit', $mem);
6423
6424
        return true;
6425
    }
6426
6427
    return false;
6428
}
6429
6430
/**
6431
 * Gets memory limit in bytes.
6432
 *
6433
 * @param string The memory size (128M, 1G, 1000K, etc)
6434
 *
6435
 * @return int
6436
 * @assert (null) === false
6437
 * @assert ('1t')  === 1099511627776
6438
 * @assert ('1g')  === 1073741824
6439
 * @assert ('1m')  === 1048576
6440
 * @assert ('100k') === 102400
6441
 */
6442
function api_get_bytes_memory_limit($mem)
6443
{
6444
    $size = strtolower(substr($mem, -1));
6445
6446
    switch ($size) {
6447
        case 't':
6448
            $mem = (int) substr($mem, -1) * 1024 * 1024 * 1024 * 1024;
6449
            break;
6450
        case 'g':
6451
            $mem = (int) substr($mem, 0, -1) * 1024 * 1024 * 1024;
6452
            break;
6453
        case 'm':
6454
            $mem = (int) substr($mem, 0, -1) * 1024 * 1024;
6455
            break;
6456
        case 'k':
6457
            $mem = (int) substr($mem, 0, -1) * 1024;
6458
            break;
6459
        default:
6460
            // we assume it's integer only
6461
            $mem = (int) $mem;
6462
            break;
6463
    }
6464
6465
    return $mem;
6466
}
6467
6468
/**
6469
 * Finds all the information about a user from username instead of user id.
6470
 *
6471
 * @param string $officialCode
6472
 *
6473
 * @return array $user_info user_id, lastname, firstname, username, email, ...
6474
 *
6475
 * @author Yannick Warnier <[email protected]>
6476
 */
6477
function api_get_user_info_from_official_code($officialCode)
6478
{
6479
    if (empty($officialCode)) {
6480
        return false;
6481
    }
6482
    $sql = "SELECT * FROM ".Database::get_main_table(TABLE_MAIN_USER)."
6483
            WHERE official_code ='".Database::escape_string($officialCode)."'";
6484
    $result = Database::query($sql);
6485
    if (Database::num_rows($result) > 0) {
6486
        $result_array = Database::fetch_array($result);
6487
6488
        return _api_format_user($result_array);
6489
    }
6490
6491
    return false;
6492
}
6493
6494
/**
6495
 * @param string $usernameInputId
6496
 * @param string $passwordInputId
6497
 *
6498
 * @return string|null
6499
 */
6500
function api_get_password_checker_js($usernameInputId, $passwordInputId)
6501
{
6502
    $checkPass = api_get_setting('allow_strength_pass_checker');
6503
    $useStrengthPassChecker = 'true' === $checkPass;
6504
6505
    if (false === $useStrengthPassChecker) {
6506
        return null;
6507
    }
6508
6509
    $minRequirements = Security::getPasswordRequirements()['min'];
6510
6511
    $options = [
6512
        'rules' => [],
6513
    ];
6514
6515
    if ($minRequirements['length'] > 0) {
6516
        $options['rules'][] = [
6517
            'minChar' => $minRequirements['length'],
6518
            'pattern' => '.',
6519
            'helpText' => sprintf(
6520
                get_lang('Minimum %s characters in total'),
6521
                $minRequirements['length']
6522
            ),
6523
        ];
6524
    }
6525
6526
    if ($minRequirements['lowercase'] > 0) {
6527
        $options['rules'][] = [
6528
            'minChar' => $minRequirements['lowercase'],
6529
            'pattern' => '[a-z]',
6530
            'helpText' => sprintf(
6531
                get_lang('Minimum %s lowercase characters'),
6532
                $minRequirements['lowercase']
6533
            ),
6534
        ];
6535
    }
6536
6537
    if ($minRequirements['uppercase'] > 0) {
6538
        $options['rules'][] = [
6539
            'minChar' => $minRequirements['uppercase'],
6540
            'pattern' => '[A-Z]',
6541
            'helpText' => sprintf(
6542
                get_lang('Minimum %s uppercase characters'),
6543
                $minRequirements['uppercase']
6544
            ),
6545
        ];
6546
    }
6547
6548
    if ($minRequirements['numeric'] > 0) {
6549
        $options['rules'][] = [
6550
            'minChar' => $minRequirements['numeric'],
6551
            'pattern' => '[0-9]',
6552
            'helpText' => sprintf(
6553
                get_lang('Minimum %s numerical (0-9) characters'),
6554
                $minRequirements['numeric']
6555
            ),
6556
        ];
6557
    }
6558
6559
    if ($minRequirements['specials'] > 0) {
6560
        $options['rules'][] = [
6561
            'minChar' => $minRequirements['specials'],
6562
            'pattern' => '[!"#$%&\'()*+,\-./\\\:;<=>?@[\\]^_`{|}~]',
6563
            'helpText' => sprintf(
6564
                get_lang('Minimum %s special characters'),
6565
                $minRequirements['specials']
6566
            ),
6567
        ];
6568
    }
6569
6570
    $js = api_get_js('password-checker/password-checker.js');
6571
    $js .= "<script>
6572
    $(function() {
6573
        $('".$passwordInputId."').passwordChecker(".json_encode($options).");
6574
    });
6575
    </script>";
6576
6577
    return $js;
6578
}
6579
6580
/**
6581
 * create an user extra field called 'captcha_blocked_until_date'.
6582
 *
6583
 * @param string $username
6584
 *
6585
 * @return bool
6586
 */
6587
function api_block_account_captcha($username)
6588
{
6589
    $userInfo = api_get_user_info_from_username($username);
6590
    if (empty($userInfo)) {
6591
        return false;
6592
    }
6593
    $minutesToBlock = api_get_setting('captcha_time_to_block');
6594
    $time = time() + $minutesToBlock * 60;
6595
    UserManager::update_extra_field_value(
6596
        $userInfo['user_id'],
6597
        'captcha_blocked_until_date',
6598
        api_get_utc_datetime($time)
6599
    );
6600
6601
    return true;
6602
}
6603
6604
/**
6605
 * @param string $username
6606
 *
6607
 * @return bool
6608
 */
6609
function api_clean_account_captcha($username)
6610
{
6611
    $userInfo = api_get_user_info_from_username($username);
6612
    if (empty($userInfo)) {
6613
        return false;
6614
    }
6615
    Session::erase('loginFailedCount');
6616
    UserManager::update_extra_field_value(
6617
        $userInfo['user_id'],
6618
        'captcha_blocked_until_date',
6619
        null
6620
    );
6621
6622
    return true;
6623
}
6624
6625
/**
6626
 * @param string $username
6627
 *
6628
 * @return bool
6629
 */
6630
function api_get_user_blocked_by_captcha($username)
6631
{
6632
    $userInfo = api_get_user_info_from_username($username);
6633
    if (empty($userInfo)) {
6634
        return false;
6635
    }
6636
    $data = UserManager::get_extra_user_data_by_field(
6637
        $userInfo['user_id'],
6638
        'captcha_blocked_until_date'
6639
    );
6640
    if (isset($data) && isset($data['captcha_blocked_until_date'])) {
6641
        return $data['captcha_blocked_until_date'];
6642
    }
6643
6644
    return false;
6645
}
6646
6647
/**
6648
 * If true, the drh can access all content (courses, users) inside a session.
6649
 *
6650
 * @return bool
6651
 */
6652
function api_drh_can_access_all_session_content()
6653
{
6654
    return 'true' === api_get_setting('drh_can_access_all_session_content');
6655
}
6656
6657
/**
6658
 * Checks if user can login as another user.
6659
 *
6660
 * @param int $loginAsUserId the user id to log in
6661
 * @param int $userId        my user id
6662
 *
6663
 * @return bool
6664
 */
6665
function api_can_login_as($loginAsUserId, $userId = null)
6666
{
6667
    $loginAsUserId = (int) $loginAsUserId;
6668
6669
    if (empty($loginAsUserId)) {
6670
        return false;
6671
    }
6672
6673
    if (empty($userId)) {
6674
        $userId = api_get_user_id();
6675
    }
6676
6677
    if ($loginAsUserId == $userId) {
6678
        return false;
6679
    }
6680
6681
    // Check if the user to login is an admin
6682
    if (api_is_platform_admin_by_id($loginAsUserId)) {
6683
        // Only super admins can login to admin accounts
6684
        if (!api_global_admin_can_edit_admin($loginAsUserId)) {
6685
            return false;
6686
        }
6687
    }
6688
6689
    $userInfo = api_get_user_info($loginAsUserId);
6690
6691
    $isDrh = function () use ($loginAsUserId) {
6692
        if (api_is_drh()) {
6693
            if (api_drh_can_access_all_session_content()) {
6694
                $users = SessionManager::getAllUsersFromCoursesFromAllSessionFromStatus(
6695
                    'drh_all',
6696
                    api_get_user_id()
6697
                );
6698
                $userList = [];
6699
                if (is_array($users)) {
6700
                    foreach ($users as $user) {
6701
                        $userList[] = $user['id'];
6702
                    }
6703
                }
6704
                if (in_array($loginAsUserId, $userList)) {
6705
                    return true;
6706
                }
6707
            } else {
6708
                if (api_is_drh() &&
6709
                    UserManager::is_user_followed_by_drh($loginAsUserId, api_get_user_id())
6710
                ) {
6711
                    return true;
6712
                }
6713
            }
6714
        }
6715
6716
        return false;
6717
    };
6718
6719
    $loginAsStatusForSessionAdmins = [STUDENT];
6720
6721
    if ('true' === api_get_setting('session.allow_session_admin_login_as_teacher')) {
6722
        $loginAsStatusForSessionAdmins[] = COURSEMANAGER;
6723
    }
6724
6725
    return api_is_platform_admin() ||
6726
        (api_is_session_admin() && in_array($userInfo['status'], $loginAsStatusForSessionAdmins)) ||
6727
        $isDrh();
6728
}
6729
6730
/**
6731
 * Return true on https install.
6732
 *
6733
 * @return bool
6734
 */
6735
function api_is_https()
6736
{
6737
    if (!empty($_SERVER['HTTP_X_FORWARDED_PROTO']) &&
0 ignored issues
show
introduced by
Consider adding parentheses for clarity. Current Interpretation: (! empty($_SERVER['HTTP_...ttps_forwarded_proto')), Probably Intended Meaning: ! empty($_SERVER['HTTP_X...tps_forwarded_proto')))
Loading history...
6738
        'https' == $_SERVER['HTTP_X_FORWARDED_PROTO'] || !empty(api_get_configuration_value('force_https_forwarded_proto'))
6739
    ) {
6740
        $isSecured = true;
6741
    } else {
6742
        if (!empty($_SERVER['HTTPS']) && 'off' != $_SERVER['HTTPS']) {
6743
            $isSecured = true;
6744
        } else {
6745
            $isSecured = false;
6746
            // last chance
6747
            if (!empty($_SERVER['SERVER_PORT']) && 443 == $_SERVER['SERVER_PORT']) {
6748
                $isSecured = true;
6749
            }
6750
        }
6751
    }
6752
6753
    return $isSecured;
6754
}
6755
6756
/**
6757
 * Return protocol (http or https).
6758
 *
6759
 * @return string
6760
 */
6761
function api_get_protocol()
6762
{
6763
    return api_is_https() ? 'https' : 'http';
6764
}
6765
6766
/**
6767
 * Get origin.
6768
 *
6769
 * @param string
6770
 *
6771
 * @return string
6772
 */
6773
function api_get_origin()
6774
{
6775
    return isset($_REQUEST['origin']) ? urlencode(Security::remove_XSS(urlencode($_REQUEST['origin']))) : '';
6776
}
6777
6778
/**
6779
 * Warns an user that the portal reach certain limit.
6780
 *
6781
 * @param string $limitName
6782
 */
6783
function api_warn_hosting_contact($limitName)
6784
{
6785
    $hostingParams = api_get_configuration_value(1);
6786
    $email = null;
6787
6788
    if (!empty($hostingParams)) {
6789
        if (isset($hostingParams['hosting_contact_mail'])) {
6790
            $email = $hostingParams['hosting_contact_mail'];
6791
        }
6792
    }
6793
6794
    if (!empty($email)) {
6795
        $subject = get_lang('Hosting warning reached');
6796
        $body = get_lang('Portal name').': '.api_get_path(WEB_PATH)." \n ";
6797
        $body .= get_lang('Portal\'s limit type').': '.$limitName." \n ";
6798
        if (isset($hostingParams[$limitName])) {
6799
            $body .= get_lang('Value').': '.$hostingParams[$limitName];
6800
        }
6801
        api_mail_html(null, $email, $subject, $body);
6802
    }
6803
}
6804
6805
/**
6806
 * Gets value of a variable from config/configuration.php
6807
 * Variables that are not set in the configuration.php file but set elsewhere:
6808
 * - virtual_css_theme_folder (vchamilo plugin)
6809
 * - access_url (global.inc.php)
6810
 * - apc/apc_prefix (global.inc.php).
6811
 *
6812
 * @param string $variable
6813
 *
6814
 * @return bool|mixed
6815
 */
6816
function api_get_configuration_value($variable)
6817
{
6818
    global $_configuration;
6819
    // Check the current url id, id = 1 by default
6820
    $urlId = isset($_configuration['access_url']) ? (int) $_configuration['access_url'] : 1;
6821
6822
    $variable = trim($variable);
6823
6824
    // Check if variable exists
6825
    if (isset($_configuration[$variable])) {
6826
        if (is_array($_configuration[$variable])) {
6827
            // Check if it exists for the sub portal
6828
            if (array_key_exists($urlId, $_configuration[$variable])) {
6829
                return $_configuration[$variable][$urlId];
6830
            } else {
6831
                // Try to found element with id = 1 (master portal)
6832
                if (array_key_exists(1, $_configuration[$variable])) {
6833
                    return $_configuration[$variable][1];
6834
                }
6835
            }
6836
        }
6837
6838
        return $_configuration[$variable];
6839
    }
6840
6841
    return false;
6842
}
6843
6844
/**
6845
 * Loads hosting limits from the YAML file.
6846
 *
6847
 * @return array The hosting limits.
6848
 */
6849
function load_hosting_limits(): array
6850
{
6851
    $container = Container::$container;
6852
6853
    $hostingLimits = $container->getParameter('hosting_limits');
0 ignored issues
show
Bug introduced by
The method getParameter() does not exist on null. ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-call  annotation

6853
    /** @scrutinizer ignore-call */ 
6854
    $hostingLimits = $container->getParameter('hosting_limits');

This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces.

This is most likely a typographical error or the method has been renamed.

Loading history...
6854
6855
    return $hostingLimits['urls'] ?? [];
6856
}
6857
6858
/**
6859
 * Gets a specific hosting limit.
6860
 *
6861
 * @param int $urlId The URL ID.
6862
 * @param string $limitName The name of the limit.
6863
 * @return mixed The value of the limit, or null if not found.
6864
 */
6865
function get_hosting_limit(int $urlId, string $limitName): mixed
6866
{
6867
    $limits = load_hosting_limits();
6868
6869
    foreach ($limits[$urlId] as $limitArray) {
6870
        if (isset($limitArray[$limitName])) {
6871
            return $limitArray[$limitName];
6872
        }
6873
    }
6874
6875
    return null;
6876
}
6877
6878
6879
/**
6880
 * Retrieves an environment variable value with validation and handles boolean conversion.
6881
 *
6882
 * @param string $variable The name of the environment variable.
6883
 * @param mixed $default The default value to return if the variable is not set.
6884
 * @return mixed The value of the environment variable, converted to boolean if necessary, or the default value.
6885
 */
6886
function api_get_env_variable(string $variable, mixed $default = null): mixed
6887
{
6888
    if (Container::$container->hasParameter($variable)) {
6889
        $value = Container::$container->getParameter($variable);
6890
6891
        if ($value === '0') {
6892
            return false;
6893
        }
6894
        if ($value === '1') {
6895
            return true;
6896
        }
6897
6898
        return $value;
6899
    }
6900
6901
    return $default;
6902
}
6903
/**
6904
 * Retreives and returns a value in a hierarchical configuration array
6905
 * api_get_configuration_sub_value('a/b/c') returns api_get_configuration_value('a')['b']['c'].
6906
 *
6907
 * @param string $path      the successive array keys, separated by the separator
6908
 * @param mixed  $default   value to be returned if not found, null by default
6909
 * @param string $separator '/' by default
6910
 * @param array  $array     the active configuration array by default
6911
 *
6912
 * @return mixed the found value or $default
6913
 */
6914
function api_get_configuration_sub_value($path, $default = null, $separator = '/', $array = null)
6915
{
6916
    $pos = strpos($path, $separator);
6917
    if (false === $pos) {
6918
        if (is_null($array)) {
6919
            return api_get_configuration_value($path);
6920
        }
6921
        if (is_array($array) && array_key_exists($path, $array)) {
6922
            return $array[$path];
6923
        }
6924
6925
        return $default;
6926
    }
6927
    $key = substr($path, 0, $pos);
6928
    if (is_null($array)) {
6929
        $newArray = api_get_configuration_value($key);
6930
    } elseif (is_array($array) && array_key_exists($key, $array)) {
6931
        $newArray = $array[$key];
6932
    } else {
6933
        return $default;
6934
    }
6935
    if (is_array($newArray)) {
6936
        $newPath = substr($path, $pos + 1);
6937
6938
        return api_get_configuration_sub_value($newPath, $default, $separator, $newArray);
6939
    }
6940
6941
    return $default;
6942
}
6943
6944
/**
6945
 * Retrieves and returns a value in a hierarchical configuration array
6946
 * api_array_sub_value($array, 'a/b/c') returns $array['a']['b']['c'].
6947
 *
6948
 * @param array  $array     the recursive array that contains the value to be returned (or not)
6949
 * @param string $path      the successive array keys, separated by the separator
6950
 * @param mixed  $default   the value to be returned if not found
6951
 * @param string $separator the separator substring
6952
 *
6953
 * @return mixed the found value or $default
6954
 */
6955
function api_array_sub_value($array, $path, $default = null, $separator = '/')
6956
{
6957
    $pos = strpos($path, $separator);
6958
    if (false === $pos) {
6959
        if (is_array($array) && array_key_exists($path, $array)) {
6960
            return $array[$path];
6961
        }
6962
6963
        return $default;
6964
    }
6965
    $key = substr($path, 0, $pos);
6966
    if (is_array($array) && array_key_exists($key, $array)) {
6967
        $newArray = $array[$key];
6968
    } else {
6969
        return $default;
6970
    }
6971
    if (is_array($newArray)) {
6972
        $newPath = substr($path, $pos + 1);
6973
6974
        return api_array_sub_value($newArray, $newPath, $default);
6975
    }
6976
6977
    return $default;
6978
}
6979
6980
/**
6981
 * Returns supported image extensions in the portal.
6982
 *
6983
 * @param bool $supportVectors Whether vector images should also be accepted or not
6984
 *
6985
 * @return array Supported image extensions in the portal
6986
 */
6987
function api_get_supported_image_extensions($supportVectors = true)
6988
{
6989
    // jpg can also be called jpeg, jpe, jfif and jif. See https://en.wikipedia.org/wiki/JPEG#JPEG_filename_extensions
6990
    $supportedImageExtensions = ['jpg', 'jpeg', 'png', 'gif', 'jpe', 'jfif', 'jif'];
6991
    if ($supportVectors) {
6992
        array_push($supportedImageExtensions, 'svg');
6993
    }
6994
    if (version_compare(PHP_VERSION, '5.5.0', '>=')) {
6995
        array_push($supportedImageExtensions, 'webp');
6996
    }
6997
6998
    return $supportedImageExtensions;
6999
}
7000
7001
/**
7002
 * This setting changes the registration status for the campus.
7003
 *
7004
 * @author Patrick Cool <[email protected]>, Ghent University
7005
 *
7006
 * @version August 2006
7007
 *
7008
 * @param bool $listCampus Whether we authorize
7009
 *
7010
 * @todo the $_settings should be reloaded here. => write api function for this and use this in global.inc.php also.
7011
 */
7012
function api_register_campus($listCampus = true)
7013
{
7014
    $tbl_settings = Database::get_main_table(TABLE_MAIN_SETTINGS);
7015
7016
    $sql = "UPDATE $tbl_settings SET selected_value='true' WHERE variable='registered'";
7017
    Database::query($sql);
7018
7019
    if (!$listCampus) {
7020
        $sql = "UPDATE $tbl_settings SET selected_value='true' WHERE variable='donotlistcampus'";
7021
        Database::query($sql);
7022
    }
7023
}
7024
7025
/**
7026
 * Check whether the user type should be exclude.
7027
 * Such as invited or anonymous users.
7028
 *
7029
 * @param bool $checkDB Optional. Whether check the user status
7030
 * @param int  $userId  Options. The user id
7031
 *
7032
 * @return bool
7033
 */
7034
function api_is_excluded_user_type($checkDB = false, $userId = 0)
7035
{
7036
    if ($checkDB) {
7037
        $userId = empty($userId) ? api_get_user_id() : (int) $userId;
7038
7039
        if (0 == $userId) {
7040
            return true;
7041
        }
7042
7043
        $userInfo = api_get_user_info($userId);
7044
7045
        switch ($userInfo['status']) {
7046
            case INVITEE:
7047
            case ANONYMOUS:
7048
                return true;
7049
            default:
7050
                return false;
7051
        }
7052
    }
7053
7054
    $isInvited = api_is_invitee();
7055
    $isAnonymous = api_is_anonymous();
7056
7057
    if ($isInvited || $isAnonymous) {
7058
        return true;
7059
    }
7060
7061
    return false;
7062
}
7063
7064
/**
7065
 * Get the user status to ignore in reports.
7066
 *
7067
 * @param string $format Optional. The result type (array or string)
7068
 *
7069
 * @return array|string
7070
 */
7071
function api_get_users_status_ignored_in_reports($format = 'array')
7072
{
7073
    $excludedTypes = [
7074
        INVITEE,
7075
        ANONYMOUS,
7076
    ];
7077
7078
    if ('string' == $format) {
7079
        return implode(', ', $excludedTypes);
7080
    }
7081
7082
    return $excludedTypes;
7083
}
7084
7085
/**
7086
 * Set the Site Use Cookie Warning for 1 year.
7087
 */
7088
function api_set_site_use_cookie_warning_cookie()
7089
{
7090
    setcookie('ChamiloUsesCookies', 'ok', time() + 31556926);
7091
}
7092
7093
/**
7094
 * Return true if the Site Use Cookie Warning Cookie warning exists.
7095
 *
7096
 * @return bool
7097
 */
7098
function api_site_use_cookie_warning_cookie_exist()
7099
{
7100
    return isset($_COOKIE['ChamiloUsesCookies']);
7101
}
7102
7103
/**
7104
 * Given a number of seconds, format the time to show hours, minutes and seconds.
7105
 *
7106
 * @param int    $time         The time in seconds
7107
 * @param string $originFormat Optional. PHP o JS
7108
 *
7109
 * @return string (00h00'00")
7110
 */
7111
function api_format_time($time, $originFormat = 'php')
7112
{
7113
    $h = get_lang('h');
7114
    $hours = $time / 3600;
7115
    $mins = ($time % 3600) / 60;
7116
    $secs = ($time % 60);
7117
7118
    if ($time < 0) {
7119
        $hours = 0;
7120
        $mins = 0;
7121
        $secs = 0;
7122
    }
7123
7124
    if ('js' === $originFormat) {
7125
        $formattedTime = trim(sprintf("%02d : %02d : %02d", $hours, $mins, $secs));
7126
    } else {
7127
        $formattedTime = trim(sprintf("%02d$h%02d'%02d\"", $hours, $mins, $secs));
7128
    }
7129
7130
    return $formattedTime;
7131
}
7132
7133
function api_set_noreply_and_from_address_to_mailer(
7134
    TemplatedEmail $email,
7135
    array $sender,
7136
    array $replyToAddress = []
7137
): void {
7138
    $validator = Container::getLegacyHelper()->getValidator();
7139
    $emailConstraint = new Assert\Email();
7140
7141
    $noReplyAddress = api_get_setting('noreply_email_address');
7142
    $avoidReplyToAddress = false;
7143
7144
    if (!empty($noReplyAddress)) {
7145
        // $avoidReplyToAddress = api_get_configuration_value('mail_no_reply_avoid_reply_to');
7146
    }
7147
7148
    // Default values
7149
    $notification = new Notification();
7150
    $defaultSenderName = $notification->getDefaultPlatformSenderName();
7151
    $defaultSenderEmail = $notification->getDefaultPlatformSenderEmail();
7152
7153
    // If the parameter is set don't use the admin.
7154
    $senderName = !empty($sender['name']) ? $sender['name'] : $defaultSenderName;
7155
    $senderEmail = !empty($sender['email']) ? $sender['email'] : $defaultSenderEmail;
7156
7157
    // Send errors to the platform admin
7158
    $adminEmail = api_get_setting('admin.administrator_email');
7159
7160
    $adminEmailValidation = $validator->validate($adminEmail, $emailConstraint);
7161
7162
    if (!empty($adminEmail) && 0 === $adminEmailValidation->count()) {
7163
        $email
7164
            ->getHeaders()
7165
            ->addIdHeader('Errors-To', $adminEmail)
7166
        ;
7167
    }
7168
7169
    if (!$avoidReplyToAddress && !empty($replyToAddress)) {
7170
        $replyToEmailValidation = $validator->validate($replyToAddress['mail'], $emailConstraint);
7171
7172
        if (0 === $replyToEmailValidation->count()) {
7173
            $email->addReplyTo(new Address($replyToAddress['mail'], $replyToAddress['name']));
7174
        }
7175
    }
7176
7177
    if ('true' === api_get_setting('mail.smtp_unique_sender')) {
7178
        $senderName = $defaultSenderName;
7179
        $senderEmail = $defaultSenderEmail;
7180
7181
        $email->sender(new Address($senderEmail, $senderName));
7182
    }
7183
7184
    if ($senderEmail) {
7185
        $email->from(new Address($senderEmail, $senderName));
7186
    }
7187
}
7188
7189
/**
7190
 * Sends an email
7191
 * Sender name and email can be specified, if not specified
7192
 * name and email of the platform admin are used.
7193
 *
7194
 * @param string    name of recipient
7195
 * @param string    email of recipient
7196
 * @param string    email subject
7197
 * @param string    email body
7198
 * @param string    sender name
7199
 * @param string    sender e-mail
7200
 * @param array     extra headers in form $headers = array($name => $value) to allow parsing
7201
 * @param array     data file (path and filename)
7202
 * @param bool      True for attaching a embedded file inside content html (optional)
7203
 * @param array     Additional parameters
7204
 *
7205
 * @return bool true if mail was sent
7206
 */
7207
function api_mail_html(
7208
    $recipientName,
7209
    $recipientEmail,
7210
    $subject,
7211
    $body,
7212
    $senderName = '',
7213
    $senderEmail = '',
7214
    $extra_headers = [],
7215
    $data_file = [],
7216
    $embeddedImage = false,
7217
    $additionalParameters = [],
7218
    string $sendErrorTo = null
7219
) {
7220
    $mailHelper = Container::$container->get(MailHelper::class);
7221
7222
    return $mailHelper->send(
7223
        $recipientName,
7224
        $recipientEmail,
7225
        $subject,
7226
        $body,
7227
        $senderName,
7228
        $senderEmail,
7229
        $extra_headers,
7230
        $data_file,
7231
        $embeddedImage,
7232
        $additionalParameters,
7233
        $sendErrorTo
7234
    );
7235
}
7236
7237
/**
7238
 * @param int  $tool       Possible values: GroupManager::GROUP_TOOL_*
7239
 * @param bool $showHeader
7240
 */
7241
function api_protect_course_group($tool, $showHeader = true)
7242
{
7243
    $groupId = api_get_group_id();
7244
    if (!empty($groupId)) {
7245
        if (api_is_platform_admin()) {
7246
            return true;
7247
        }
7248
7249
        if (api_is_allowed_to_edit(false, true, true)) {
7250
            return true;
7251
        }
7252
7253
        $userId = api_get_user_id();
7254
        $sessionId = api_get_session_id();
7255
        if (!empty($sessionId)) {
7256
            if (api_is_coach($sessionId, api_get_course_int_id())) {
7257
                return true;
7258
            }
7259
7260
            if (api_is_drh()) {
7261
                if (SessionManager::isUserSubscribedAsHRM($sessionId, $userId)) {
7262
                    return true;
7263
                }
7264
            }
7265
        }
7266
7267
        $group = api_get_group_entity($groupId);
7268
7269
        // Group doesn't exists
7270
        if (null === $group) {
7271
            api_not_allowed($showHeader);
7272
        }
7273
7274
        // Check group access
7275
        $allow = GroupManager::userHasAccess(
7276
            $userId,
7277
            $group,
7278
            $tool
7279
        );
7280
7281
        if (!$allow) {
7282
            api_not_allowed($showHeader);
7283
        }
7284
    }
7285
7286
    return false;
7287
}
7288
7289
/**
7290
 * Check if a date is in a date range.
7291
 *
7292
 * @param datetime $startDate
7293
 * @param datetime $endDate
7294
 * @param datetime $currentDate
7295
 *
7296
 * @return bool true if date is in rage, false otherwise
7297
 */
7298
function api_is_date_in_date_range($startDate, $endDate, $currentDate = null)
7299
{
7300
    $startDate = strtotime(api_get_local_time($startDate));
7301
    $endDate = strtotime(api_get_local_time($endDate));
7302
    $currentDate = strtotime(api_get_local_time($currentDate));
7303
7304
    if ($currentDate >= $startDate && $currentDate <= $endDate) {
7305
        return true;
7306
    }
7307
7308
    return false;
7309
}
7310
7311
/**
7312
 * Eliminate the duplicates of a multidimensional array by sending the key.
7313
 *
7314
 * @param array $array multidimensional array
7315
 * @param int   $key   key to find to compare
7316
 *
7317
 * @return array
7318
 */
7319
function api_unique_multidim_array($array, $key)
7320
{
7321
    $temp_array = [];
7322
    $i = 0;
7323
    $key_array = [];
7324
7325
    foreach ($array as $val) {
7326
        if (!in_array($val[$key], $key_array)) {
7327
            $key_array[$i] = $val[$key];
7328
            $temp_array[$i] = $val;
7329
        }
7330
        $i++;
7331
    }
7332
7333
    return $temp_array;
7334
}
7335
7336
/**
7337
 * Limit the access to Session Admins when the limit_session_admin_role
7338
 * configuration variable is set to true.
7339
 */
7340
function api_protect_limit_for_session_admin()
7341
{
7342
    $limitAdmin = api_get_setting('limit_session_admin_role');
7343
    if (api_is_session_admin() && 'true' === $limitAdmin) {
7344
        api_not_allowed(true);
7345
    }
7346
}
7347
7348
/**
7349
 * Limits that a session admin has access to list users.
7350
 * When limit_session_admin_list_users configuration variable is set to true.
7351
 */
7352
function api_protect_session_admin_list_users()
7353
{
7354
    $limitAdmin = ('true' === api_get_setting('session.limit_session_admin_list_users'));
7355
7356
    if (api_is_session_admin() && true === $limitAdmin) {
7357
        api_not_allowed(true);
7358
    }
7359
}
7360
7361
/**
7362
 * @return bool
7363
 */
7364
function api_is_student_view_active(): bool
7365
{
7366
    $studentView = Session::read('studentview');
7367
7368
    return 'studentview' === $studentView;
7369
}
7370
7371
/**
7372
 * Converts string value to float value.
7373
 *
7374
 * 3.141516 => 3.141516
7375
 * 3,141516 => 3.141516
7376
 *
7377
 * @todo WIP
7378
 *
7379
 * @param string $number
7380
 *
7381
 * @return float
7382
 */
7383
function api_float_val($number)
7384
{
7385
    return (float) str_replace(',', '.', trim($number));
7386
}
7387
7388
/**
7389
 * Converts float values
7390
 * Example if $decimals = 2.
7391
 *
7392
 * 3.141516 => 3.14
7393
 * 3,141516 => 3,14
7394
 *
7395
 * @param string $number            number in iso code
7396
 * @param int    $decimals
7397
 * @param string $decimalSeparator
7398
 * @param string $thousandSeparator
7399
 *
7400
 * @return bool|string
7401
 */
7402
function api_number_format($number, $decimals = 0, $decimalSeparator = '.', $thousandSeparator = ',')
7403
{
7404
    $number = api_float_val($number);
7405
7406
    return number_format($number, $decimals, $decimalSeparator, $thousandSeparator);
7407
}
7408
7409
/**
7410
 * Set location url with a exit break by default.
7411
 *
7412
 * @param string $url
7413
 * @param bool   $exit
7414
 */
7415
function api_location($url, $exit = true)
7416
{
7417
    header('Location: '.$url);
7418
7419
    if ($exit) {
7420
        exit;
0 ignored issues
show
Best Practice introduced by
Using exit here is not recommended.

In general, usage of exit should be done with care and only when running in a scripting context like a CLI script.

Loading history...
7421
    }
7422
}
7423
7424
/**
7425
 * @param string $from
7426
 * @param string $to
7427
 *
7428
 * @return string
7429
 */
7430
function api_get_relative_path($from, $to)
7431
{
7432
    // some compatibility fixes for Windows paths
7433
    $from = is_dir($from) ? rtrim($from, '\/').'/' : $from;
7434
    $to = is_dir($to) ? rtrim($to, '\/').'/' : $to;
7435
    $from = str_replace('\\', '/', $from);
7436
    $to = str_replace('\\', '/', $to);
7437
7438
    $from = explode('/', $from);
7439
    $to = explode('/', $to);
7440
    $relPath = $to;
7441
7442
    foreach ($from as $depth => $dir) {
7443
        // find first non-matching dir
7444
        if ($dir === $to[$depth]) {
7445
            // ignore this directory
7446
            array_shift($relPath);
7447
        } else {
7448
            // get number of remaining dirs to $from
7449
            $remaining = count($from) - $depth;
7450
            if ($remaining > 1) {
7451
                // add traversals up to first matching dir
7452
                $padLength = (count($relPath) + $remaining - 1) * -1;
7453
                $relPath = array_pad($relPath, $padLength, '..');
7454
                break;
7455
            } else {
7456
                $relPath[0] = './'.$relPath[0];
7457
            }
7458
        }
7459
    }
7460
7461
    return implode('/', $relPath);
7462
}
7463
7464
/**
7465
 * @param string $template
7466
 *
7467
 * @return string
7468
 */
7469
function api_find_template($template)
7470
{
7471
    return Template::findTemplateFilePath($template);
7472
}
7473
7474
/**
7475
 * @return array
7476
 */
7477
function api_get_language_list_for_flag()
7478
{
7479
    $table = Database::get_main_table(TABLE_MAIN_LANGUAGE);
7480
    $sql = "SELECT english_name, isocode FROM $table
7481
            ORDER BY original_name ASC";
7482
    static $languages = [];
7483
    if (empty($languages)) {
7484
        $result = Database::query($sql);
7485
        while ($row = Database::fetch_array($result)) {
7486
            $languages[$row['english_name']] = $row['isocode'];
7487
        }
7488
        $languages['english'] = 'gb';
7489
    }
7490
7491
    return $languages;
7492
}
7493
7494
function api_create_zip(string $name): ZipStream
7495
{
7496
    $zipStreamOptions = new Archive();
7497
    $zipStreamOptions->setSendHttpHeaders(true);
7498
    $zipStreamOptions->setContentDisposition('attachment');
7499
    $zipStreamOptions->setContentType('application/x-zip');
7500
7501
    return new ZipStream($name, $zipStreamOptions);
7502
}
7503
7504
function api_get_language_translate_html(): string
7505
{
7506
    $translate = 'true' === api_get_setting('editor.translate_html');
7507
7508
    if (!$translate) {
7509
        return '';
7510
    }
7511
7512
    /*$languageList = api_get_languages();
7513
    $hideAll = '';
7514
    foreach ($languageList as $isocode => $name) {
7515
        $hideAll .= '
7516
        $(".mce-translatehtml").hide();
7517
        $("span:lang('.$isocode.')").filter(
7518
            function(e, val) {
7519
                // Only find the spans if they have set the lang
7520
                if ($(this).attr("lang") == null) {
7521
                    return false;
7522
                }
7523
                // Ignore ckeditor classes
7524
                return !this.className.match(/cke(.*)/);
7525
        }).hide();'."\n";
7526
    }*/
7527
7528
    $userInfo = api_get_user_info();
7529
    if (!empty($userInfo['language'])) {
7530
        $isoCode = $userInfo['language'];
7531
7532
        return '
7533
            $(function() {
7534
                $(".mce-translatehtml").hide();
7535
                var defaultLanguageFromUser = "'.$isoCode.'";
7536
                $("span:lang('.$isoCode.')").show();
7537
            });
7538
        ';
7539
    }
7540
7541
    return '';
7542
}
7543
7544
function api_protect_webservices()
7545
{
7546
    if (api_get_configuration_value('disable_webservices')) {
7547
        echo "Webservices are disabled. \n";
7548
        echo "To enable, add \$_configuration['disable_webservices'] = true; in configuration.php";
7549
        exit;
0 ignored issues
show
Best Practice introduced by
Using exit here is not recommended.

In general, usage of exit should be done with care and only when running in a scripting context like a CLI script.

Loading history...
7550
    }
7551
}
7552
7553
/**
7554
 * Checks if a set of roles have a specific permission.
7555
 *
7556
 * @param string $permissionSlug The slug of the permission to check.
7557
 * @param array  $roles          An array of role codes to check against.
7558
 * @return bool True if any of the roles have the permission, false otherwise.
7559
 */
7560
function api_get_permission(string $permissionSlug, array $roles): bool
7561
{
7562
    $permissionService = Container::$container->get(PermissionServiceHelper::class);
7563
7564
    return $permissionService->hasPermission($permissionSlug, $roles);
7565
}
7566