Source for file online_links.php

 

 

 

 

 

 

 

$language_file='chat';

 

$this_section=SECTION_COURSES;

 

include_once(api_get_path(LIBRARY_PATH).'fileUpload.lib.php');

 

$action=$_GET['action'];

$link=intval($_GET['link']);

 

$tbl_user=Database::get_main_table(TABLE_MAIN_USER);

$tbl_online_link=Database::get_course_table(TABLE_ONLINE_LINK);

 

$query="SELECT username FROM $tbl_user WHERE user_id='".$_user['user_id']."'";

$result=api_sql_query($query,__FILE__,__LINE__);

 

list($pseudoUser)=mysql_fetch_row($result);

 

$isAllowed=(empty($pseudoUser) || !$_cid)?false:true;

$isMaster=$is_courseAdmin?true:false;

 

if(!$isAllowed || !$isMaster)

    exit();

 

$doc_path=api_get_path(SYS_COURSE_PATH).$_course['path'].'/document/';

 

    $sent=1;

 

    $link_name=trim(stripslashes($_POST['link_name']));

    $link_url=trim(stripslashes($_POST['link_url']));

    $link_file=$_FILES['link_file'];

 

    if($link_file['size'])

    {

        if(empty($link_name))

        {

            $link_name=$link_file['name'];

        }

 

        $link_file['name']=php2phps(replace_dangerous_char($link_file['name'],'strict'));

 

        $extension=explode('.',$link_file['name']);

 

        $extension=$extension[sizeof($extension)-1];

 

        $suffix='';

        $i=0;

 

        do

        {

            if(file_exists($doc_path.str_replace('.'.$extension,$suffix.'.'.$extension,$link_file['name'])))

            {

                $suffix='_'.(++$i);

            }

            else

            {

                break;

            }

        }

        while(1);

 

        $link_file['name']=str_replace('.'.$extension,$suffix.'.'.$extension,$link_file['name']);

 

        move_uploaded_file($link_file['tmp_name'],$doc_path.$link_file['name']);

 

        $link_url=str_replace($_configuration['root_sys'],$_configuration['root_web'],$doc_path).$link_file['name'];

    }

 

    if(!empty($link_name) && !empty($link_url))

    {

        if(!strstr($link_url,'://'))

        {

            $link_url='http://'.$link_url;

        }

 

        if($action == 'edit')

        {

            $query="UPDATE $tbl_online_link

                    SET name='".addslashes($link_name)."',

                        url='".addslashes($link_url)."'

            api_sql_query($query,__FILE__,__LINE__);

        }

        else

        {

            $query="INSERT INTO $tbl_online_link (name,url) VALUES('".addslashes($link_name)."','".addslashes($link_url)."')";

            api_sql_query($query,__FILE__,__LINE__);

        }

    }

 

    mysql_close();

    header('Location: '.api_get_self());

    exit();

 

if($action == 'delete')

    $link=intval($_GET['link']);

 

    $query="DELETE FROM $tbl_online_link WHERE id='$link'";

    api_sql_query($query,__FILE__,__LINE__);

 

    mysql_close();

    header('Location: '.api_get_self());

    exit();

 

$query="SELECT id,name,url FROM $tbl_online_link ORDER BY name";

$result=api_sql_query($query,__FILE__,__LINE__);

 

$Links=array();

 

while($row=mysql_fetch_array($result))

    $Links[]=$row;

 

    if($action == 'edit' && $link == $row['id'])

    {

        $link_name=$row['name'];

        $link_url=$row['url'];

    }

 

if($action == 'edit' && empty($link_name))

    $action='';

    $link=0;

 

 

<table border="0" cellpadding="0" cellspacing="0" width="100%">

<tr>

  <td width="1%" valign="middle"><a href="online_master.php"><img src="../img/home.gif" border="0" alt="" title="<?php echo htmlentities(get_lang('Back'),ENT_QUOTES,$charset); ?>"></a></td>

  <td width="99%" align="left">&nbsp;<a href="online_master.php"><?php echo get_lang('Back'); ?></a></td>

</tr>

</table>

 

<br>

 

<form method="post" action="<?php echo api_get_self(); ?>?action=<?php echo $action; ?>&link=<?php echo $link; ?>" enctype="multipart/form-data">

<input type="hidden" name="sent" value="1">

<table border="0" cellpadding="3" cellspacing="0">

<tr>

  <td width="45%"><?php echo get_lang('LinkName'); ?> :</td>

  <td width="55%"><input type="text" name="link_name" size="10" maxlength="50" value="<?php if($action == 'edit') echo htmlentities($link_name,ENT_QUOTES,$charset); ?>" style="width: 95px;"></td>

</tr>

<tr>

  <td width="45%"><?php echo get_lang('LinkURL'); ?> :</td>

  <td width="55%"><input type="text" name="link_url" size="10" maxlength="100" value="<?php if($action == 'edit') echo htmlentities($link_url); else echo 'http://'; ?>" style="width: 95px;"></td>

</tr>

<tr>

  <td width="45%"><?php echo get_lang('OrFile'); ?> :</td>

  <td width="55%"><input type="file" name="link_file" size="1" value="" style="width: 95px;"></td>

</tr>

<tr>

  <td colspan="2" align="center">

    <input type="submit" value="<?php echo htmlentities(get_lang('Ok'),ENT_QUOTES,$charset); ?>">

  </td>

</tr>

</table>

</form>

 

<br>

 

    echo get_lang('NoLinkAvailable');

 

<table border="0" cellpadding="0" cellspacing="0" width="100%">

 

    foreach($Links as $enreg)

    {

 

<tr>

  <td width="98%"><a href="online_goto.php?url=<?php echo urlencode($enreg['url']); ?>" target="online_working_area"><?php echo $enreg['name']; ?></a></td>

  <td width="1%" valign="middle"><a href="<?php echo api_get_self(); ?>?action=edit&link=<?php echo $enreg['id']; ?>"><img src="../img/edit.gif" border="0" alt="" title="<?php echo htmlentities(get_lang('Modify'),ENT_QUOTES,$charset); ?>"></a></td>

  <td width="1%" valign="middle"><a href="<?php echo api_get_self(); ?>?action=delete&link=<?php echo $enreg['id']; ?>" onclick="javascript:if(!confirm('<?php echo addslashes(htmlentities(get_lang('ConfirmYourChoice'),ENT_QUOTES,$charset)); ?>')) return false;"><img src="../img/delete.gif" border="0" alt="" title="<?php echo htmlentities(get_lang('Delete'),ENT_QUOTES,$charset); ?>"></a></td>

</tr>

 

    }

 

    unset($Links);

 

</table>