Martin Dougiamas
03d9401e7d
Thanks very much to Remote Learner Canada, especially Hubert Chathi and Olav Jordan, for their work on the bulk of this code, and also Mike Churchward for supporting them. I worked on it after that (actually simplified it by removing a feature temporarily: multiple pages) to bring it more to what I was imagining, and to provide a base to build on and get all the navigation perfect. There's still work to do. Some blocks don't quite work as expected, and some of the code still needs upgrading to bring it fully into line with 2.0. We also could use a much better course overview block and better CSS styling of the profile pages. But it's definitely more usable this it was, I think.
434 lines
17 KiB
PHP
434 lines
17 KiB
PHP
<?php
|
|
|
|
// This file is part of Moodle - http://moodle.org/
|
|
//
|
|
// Moodle is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// Moodle is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with Moodle. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
/**
|
|
* Display profile for a particular user
|
|
*
|
|
* @copyright 1999 Martin Dougiamas http://dougiamas.com
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
|
|
* @package user
|
|
*/
|
|
|
|
require_once("../config.php");
|
|
require_once($CFG->dirroot.'/user/profile/lib.php');
|
|
require_once($CFG->dirroot.'/tag/lib.php');
|
|
|
|
$id = optional_param('id', 0, PARAM_INT); // user id
|
|
$courseid = optional_param('course', SITEID, PARAM_INT); // course id (defaults to Site)
|
|
$enable = optional_param('enable', 0, PARAM_BOOL); // enable email
|
|
$disable = optional_param('disable', 0, PARAM_BOOL); // disable email
|
|
|
|
if (empty($id)) { // See your own profile by default
|
|
require_login();
|
|
$id = $USER->id;
|
|
}
|
|
|
|
if ($courseid == SITEID) { // Since Moodle 2.0 all site-level profiles are shown by profile.php
|
|
redirect($CFG->wwwroot.'/user/profile.php?id='.$id); // Immediate redirect
|
|
}
|
|
|
|
$url = new moodle_url('/user/view.php', array('id'=>$id,'course'=>$courseid));
|
|
$PAGE->set_url($url);
|
|
|
|
$user = $DB->get_record('user', array('id'=>$id), '*', MUST_EXIST);
|
|
$course = $DB->get_record('course', array('id'=>$courseid), '*', MUST_EXIST);
|
|
$currentuser = ($user->id == $USER->id);
|
|
|
|
$systemcontext = get_context_instance(CONTEXT_SYSTEM);
|
|
$coursecontext = get_context_instance(CONTEXT_COURSE, $course->id);
|
|
$usercontext = get_context_instance(CONTEXT_USER, $user->id, MUST_EXIST);
|
|
|
|
// Require login first
|
|
if (isguestuser($user)) {
|
|
// can not view profile of guest - thre is nothing to see there
|
|
print_error('invaliduserid');
|
|
}
|
|
|
|
$PAGE->set_context($coursecontext);
|
|
$PAGE->set_pagetype('course-view-' . $course->format);
|
|
$PAGE->set_other_editing_capability('moodle/course:manageactivities');
|
|
|
|
$isparent = false;
|
|
|
|
if (!$currentuser
|
|
and $DB->record_exists('role_assignments', array('userid'=>$USER->id, 'contextid'=>$usercontext->id))
|
|
and has_capability('moodle/user:viewdetails', $usercontext)) {
|
|
// TODO: very ugly hack - do not force "parents" to enrol into course their child is enrolled in,
|
|
// this way they may access the profile where they get overview of grades and child activity in course,
|
|
// please note this is just a guess!
|
|
require_login();
|
|
$isparent = true;
|
|
|
|
} else {
|
|
// normal course
|
|
require_login($course);
|
|
// what to do with users temporary accessing this course? shoudl they see the details?
|
|
}
|
|
|
|
|
|
$strpersonalprofile = get_string('personalprofile');
|
|
$strparticipants = get_string("participants");
|
|
$struser = get_string("user");
|
|
|
|
$fullname = fullname($user, has_capability('moodle/site:viewfullnames', $coursecontext));
|
|
|
|
/// Now test the actual capabilities and enrolment in course
|
|
if ($currentuser) {
|
|
// me
|
|
if (!is_enrolled($coursecontext) and !is_viewing($coursecontext)) { // Need to have full access to a course to see the rest of own info
|
|
echo $OUTPUT->header();
|
|
echo $OUTPUT->heading(get_string('notenrolled', '', $fullname));
|
|
if (!empty($_SERVER['HTTP_REFERER'])) {
|
|
echo $OUTPUT->continue_button($_SERVER['HTTP_REFERER']);
|
|
}
|
|
echo $OUTPUT->footer();
|
|
die;
|
|
}
|
|
|
|
} else {
|
|
// somebody else
|
|
$PAGE->set_title("$strpersonalprofile: ");
|
|
$PAGE->set_heading("$strpersonalprofile: ");
|
|
|
|
// check course level capabilities
|
|
if (!has_capability('moodle/user:viewdetails', $coursecontext) && // normal enrolled user or mnager
|
|
!has_capability('moodle/user:viewdetails', $usercontext)) { // usually parent
|
|
print_error('cannotviewprofile');
|
|
}
|
|
|
|
if (!is_enrolled($coursecontext, $user->id)) {
|
|
// TODO: the only potential problem is that managers and inspectors might post in forum, but the link
|
|
// to profile would not work - maybe a new capability - moodle/user:freely_acessile_profile_for_anybody
|
|
// or test for course:inspect capability
|
|
if (has_capability('moodle/role:assign', $coursecontext)) {
|
|
$PAGE->navbar->add($fullname);
|
|
echo $OUTPUT->header();
|
|
echo $OUTPUT->heading(get_string('notenrolled', '', $fullname));
|
|
} else {
|
|
echo $OUTPUT->header();
|
|
$PAGE->navbar->add($struser);
|
|
echo $OUTPUT->heading(get_string('notenrolledprofile'));
|
|
}
|
|
if (!empty($_SERVER['HTTP_REFERER'])) {
|
|
echo $OUTPUT->continue_button($_SERVER['HTTP_REFERER']);
|
|
}
|
|
echo $OUTPUT->footer();
|
|
exit;
|
|
}
|
|
|
|
// If groups are in use and enforced throughout the course, then make sure we can meet in at least one course level group
|
|
if (groups_get_course_groupmode($course) == SEPARATEGROUPS and $course->groupmodeforce
|
|
and !has_capability('moodle/site:accessallgroups', $coursecontext) and !has_capability('moodle/site:accessallgroups', $coursecontext, $user->id)) {
|
|
if (!isloggedin() or isguestuser()) {
|
|
// do not use require_login() here because we might have already used require_login($course)
|
|
redirect(get_login_url());
|
|
}
|
|
$mygroups = array_keys(groups_get_all_groups($course->id, $USER->id, $course->defaultgroupingid, 'g.id, g.name'));
|
|
$usergroups = array_keys(groups_get_all_groups($course->id, $user->id, $course->defaultgroupingid, 'g.id, g.name'));
|
|
if (!array_intersect($mygroups, $usergroups)) {
|
|
print_error("groupnotamember", '', "../course/view.php?id=$course->id");
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
/// We've established they can see the user's name at least, so what about the rest?
|
|
|
|
$PAGE->navigation->extend_for_user($user);
|
|
$PAGE->set_title("$course->fullname: $strpersonalprofile: $fullname");
|
|
$PAGE->set_heading($course->fullname);
|
|
$PAGE->set_pagelayout('standard');
|
|
echo $OUTPUT->header();
|
|
echo $OUTPUT->heading(fullname($user));
|
|
|
|
if ($user->deleted) {
|
|
echo $OUTPUT->heading(get_string('userdeleted'));
|
|
if (!has_capability('moodle/user:update', $coursecontext)) {
|
|
echo $OUTPUT->footer();
|
|
die;
|
|
}
|
|
}
|
|
|
|
/// OK, security out the way, now we are showing the user
|
|
|
|
add_to_log($course->id, "user", "view", "view.php?id=$user->id&course=$course->id", "$user->id");
|
|
|
|
$user->lastaccess = false;
|
|
if ($lastaccess = $DB->get_record('user_lastaccess', array('userid'=>$user->id, 'courseid'=>$course->id))) {
|
|
$user->lastaccess = $lastaccess->timeaccess;
|
|
}
|
|
|
|
|
|
/// Get the hidden field list
|
|
if (has_capability('moodle/user:viewhiddendetails', $coursecontext)) {
|
|
$hiddenfields = array();
|
|
} else {
|
|
$hiddenfields = array_flip(explode(',', $CFG->hiddenuserfields));
|
|
}
|
|
|
|
if (is_mnet_remote_user($user)) {
|
|
$sql = "
|
|
SELECT DISTINCT h.id, h.name, h.wwwroot,
|
|
a.name as application, a.display_name
|
|
FROM {mnet_host} h, {mnet_application} a
|
|
WHERE h.id = ? AND h.applicationid = a.id
|
|
ORDER BY a.display_name, h.name";
|
|
|
|
$remotehost = $DB->get_record_sql($sql, array($user->mnethostid));
|
|
|
|
echo '<p class="errorboxcontent">'.get_string('remoteappuser', $remotehost->application)." <br />\n";
|
|
if ($currentuser) {
|
|
if ($remotehost->application =='moodle') {
|
|
echo "Remote {$remotehost->display_name}: <a href=\"{$remotehost->wwwroot}/user/edit.php\">{$remotehost->name}</a> ".get_string('editremoteprofile')." </p>\n";
|
|
} else {
|
|
echo "Remote {$remotehost->display_name}: <a href=\"{$remotehost->wwwroot}/\">{$remotehost->name}</a> ".get_string('gotoyourserver')." </p>\n";
|
|
}
|
|
} else {
|
|
echo "Remote {$remotehost->display_name}: <a href=\"{$remotehost->wwwroot}/\">{$remotehost->name}</a></p>\n";
|
|
}
|
|
}
|
|
|
|
echo '<div class="fullprofilelink">';
|
|
echo html_writer::link($CFG->wwwroot.'/user/profile.php?id='.$id, get_string('fullprofile'));
|
|
echo '</div>';
|
|
|
|
echo '<div class="profilepicture">';
|
|
echo $OUTPUT->user_picture($user, array('size'=>100));
|
|
echo '</div>';
|
|
|
|
// Print the description
|
|
echo '<div class="description">';
|
|
if ($user->description && !isset($hiddenfields['description'])) {
|
|
if (!empty($CFG->profilesforenrolledusersonly) && !$DB->record_exists('role_assignments', array('userid'=>$id))) {
|
|
echo get_string('profilenotshown', 'moodle').'<hr />';
|
|
} else {
|
|
$user->description = file_rewrite_pluginfile_urls($user->description, 'pluginfile.php', $usercontext->id, 'user_profile', $id);
|
|
echo format_text($user->description, $user->descriptionformat)."<hr />";
|
|
}
|
|
}
|
|
echo '</div>';
|
|
|
|
|
|
// Print all the little details in a list
|
|
|
|
echo '<table class="list" summary="">';
|
|
|
|
if (! isset($hiddenfields['country']) && $user->country) {
|
|
print_row(get_string('country') . ':', get_string($user->country, 'countries'));
|
|
}
|
|
|
|
if (! isset($hiddenfields['city']) && $user->city) {
|
|
print_row(get_string('city') . ':', $user->city);
|
|
}
|
|
|
|
if (has_capability('moodle/user:viewhiddendetails', $coursecontext)) {
|
|
if ($user->address) {
|
|
print_row(get_string("address").":", "$user->address");
|
|
}
|
|
if ($user->phone1) {
|
|
print_row(get_string("phone").":", "$user->phone1");
|
|
}
|
|
if ($user->phone2) {
|
|
print_row(get_string("phone2").":", "$user->phone2");
|
|
}
|
|
}
|
|
|
|
if ($user->maildisplay == 1
|
|
or ($user->maildisplay == 2 && !isguestuser())
|
|
or has_capability('moodle/course:useremail', $coursecontext)) {
|
|
|
|
$emailswitch = '';
|
|
|
|
if ($currentuser or has_capability('moodle/course:useremail', $coursecontext)) { /// Can use the enable/disable email stuff
|
|
if (!empty($enable) and confirm_sesskey()) { /// Recieved a parameter to enable the email address
|
|
$DB->set_field('user', 'emailstop', 0, array('id'=>$user->id));
|
|
$user->emailstop = 0;
|
|
}
|
|
if (!empty($disable) and confirm_sesskey()) { /// Recieved a parameter to disable the email address
|
|
$DB->set_field('user', 'emailstop', 1, array('id'=>$user->id));
|
|
$user->emailstop = 1;
|
|
}
|
|
}
|
|
|
|
if (has_capability('moodle/course:useremail', $coursecontext)) { /// Can use the enable/disable email stuff
|
|
if ($user->emailstop) {
|
|
$switchparam = 'enable';
|
|
$switchtitle = get_string('emaildisable');
|
|
$switchclick = get_string('emailenableclick');
|
|
$switchpix = 't/emailno';
|
|
} else {
|
|
$switchparam = 'disable';
|
|
$switchtitle = get_string('emailenable');
|
|
$switchclick = get_string('emaildisableclick');
|
|
$switchpix = 't/email';
|
|
}
|
|
$emailswitch = " <a title=\"$switchclick\" ".
|
|
"href=\"view.php?id=$user->id&course=$course->id&$switchparam=1&sesskey=".sesskey()."\">".
|
|
"<img src=\"" . $OUTPUT->pix_url("$switchpix") . "\" alt=\"$switchclick\" /></a>";
|
|
|
|
} else if ($currentuser) { /// Can only re-enable an email this way
|
|
if ($user->emailstop) { // Include link that tells how to re-enable their email
|
|
$switchparam = 'enable';
|
|
$switchtitle = get_string('emaildisable');
|
|
$switchclick = get_string('emailenableclick');
|
|
|
|
$emailswitch = " (<a title=\"$switchclick\" ".
|
|
"href=\"view.php?id=$user->id&course=$course->id&enable=1&sesskey=".sesskey()."\">$switchtitle</a>)";
|
|
}
|
|
}
|
|
|
|
print_row(get_string("email").":", obfuscate_mailto($user->email, '', $user->emailstop)."$emailswitch");
|
|
}
|
|
|
|
if ($user->url && !isset($hiddenfields['webpage'])) {
|
|
$url = $user->url;
|
|
if (strpos($user->url, '://') === false) {
|
|
$url = 'http://'. $url;
|
|
}
|
|
print_row(get_string('webpage') .':', '<a href="'.s($url).'">'.s($user->url).'</a>');
|
|
}
|
|
|
|
if ($user->icq && !isset($hiddenfields['icqnumber'])) {
|
|
print_row(get_string('icqnumber').':',"<a href=\"http://web.icq.com/wwp?uin=".urlencode($user->icq)."\">".s($user->icq)." <img src=\"http://web.icq.com/whitepages/online?icq=".urlencode($user->icq)."&img=5\" alt=\"\" /></a>");
|
|
}
|
|
|
|
if ($user->skype && !isset($hiddenfields['skypeid'])) {
|
|
print_row(get_string('skypeid').':','<a href="callto:'.urlencode($user->skype).'">'.s($user->skype).
|
|
' <img src="http://mystatus.skype.com/smallicon/'.urlencode($user->skype).'" alt="'.get_string('status').'" '.
|
|
' /></a>');
|
|
}
|
|
if ($user->yahoo && !isset($hiddenfields['yahooid'])) {
|
|
print_row(get_string('yahooid').':', '<a href="http://edit.yahoo.com/config/send_webmesg?.target='.urlencode($user->yahoo).'&.src=pg">'.s($user->yahoo)." <img src=\"http://opi.yahoo.com/online?u=".urlencode($user->yahoo)."&m=g&t=0\" alt=\"\"></a>");
|
|
}
|
|
if ($user->aim && !isset($hiddenfields['aimid'])) {
|
|
print_row(get_string('aimid').':', '<a href="aim:goim?screenname='.urlencode($user->aim).'">'.s($user->aim).'</a>');
|
|
}
|
|
if ($user->msn && !isset($hiddenfields['msnid'])) {
|
|
print_row(get_string('msnid').':', s($user->msn));
|
|
}
|
|
|
|
/// Print the Custom User Fields
|
|
profile_display_fields($user->id);
|
|
|
|
|
|
if (!isset($hiddenfields['mycourses'])) {
|
|
if ($mycourses = get_my_courses($user->id, 'visible DESC,sortorder ASC', null, false, 21)) {
|
|
$shown=0;
|
|
$courselisting = '';
|
|
foreach ($mycourses as $mycourse) {
|
|
if ($mycourse->category) {
|
|
if ($mycourse->id != $course->id){
|
|
$class = '';
|
|
if ($mycourse->visible == 0) {
|
|
// get_my_courses will filter courses $USER cannot see
|
|
// if we get one with visible 0 it just means it's hidden
|
|
// ... but not from $USER
|
|
$class = 'class="dimmed"';
|
|
}
|
|
$courselisting .= "<a href=\"{$CFG->wwwroot}/user/view.php?id={$user->id}&course={$mycourse->id}\" $class >"
|
|
. format_string($mycourse->fullname) . "</a>, ";
|
|
}
|
|
else {
|
|
$courselisting .= format_string($mycourse->fullname) . ", ";
|
|
}
|
|
}
|
|
$shown++;
|
|
if($shown==20) {
|
|
$courselisting.= "...";
|
|
break;
|
|
}
|
|
}
|
|
print_row(get_string('courseprofiles').':', rtrim($courselisting,', '));
|
|
}
|
|
}
|
|
if (!isset($hiddenfields['firstaccess'])) {
|
|
if ($user->firstaccess) {
|
|
$datestring = userdate($user->firstaccess)." (".format_time(time() - $user->firstaccess).")";
|
|
} else {
|
|
$datestring = get_string("never");
|
|
}
|
|
print_row(get_string("firstaccess").":", $datestring);
|
|
}
|
|
if (!isset($hiddenfields['lastaccess'])) {
|
|
if ($user->lastaccess) {
|
|
$datestring = userdate($user->lastaccess)." (".format_time(time() - $user->lastaccess).")";
|
|
} else {
|
|
$datestring = get_string("never");
|
|
}
|
|
print_row(get_string("lastaccess").":", $datestring);
|
|
}
|
|
/// printing roles
|
|
|
|
if ($rolestring = get_user_roles_in_course($id, $course->id)) {
|
|
print_row(get_string('roles').':', $rolestring);
|
|
}
|
|
|
|
/// Printing groups
|
|
if (!isset($hiddenfields['groups'])) {
|
|
if ($course->groupmode != SEPARATEGROUPS or has_capability('moodle/site:accessallgroups', $coursecontext)) {
|
|
if ($usergroups = groups_get_all_groups($course->id, $user->id)) {
|
|
$groupstr = '';
|
|
foreach ($usergroups as $group){
|
|
$groupstr .= ' <a href="'.$CFG->wwwroot.'/user/index.php?id='.$course->id.'&group='.$group->id.'">'.format_string($group->name).'</a>,';
|
|
}
|
|
print_row(get_string("group").":", rtrim($groupstr, ', '));
|
|
}
|
|
}
|
|
}
|
|
/// End of printing groups
|
|
|
|
/// Printing Interests
|
|
if( !empty($CFG->usetags)) {
|
|
if ( $interests = tag_get_tags_csv('user', $user->id) ) {
|
|
print_row(get_string('interests') .": ", $interests);
|
|
}
|
|
}
|
|
/// End of Printing Interests
|
|
|
|
echo "</table>";
|
|
|
|
$userauth = get_auth_plugin($user->auth);
|
|
|
|
$passwordchangeurl = false;
|
|
if ($currentuser and $userauth->can_change_password() and !isguestuser() and has_capability('moodle/user:changeownpassword', $systemcontext)) {
|
|
if (!$passwordchangeurl = $userauth->change_password_url()) {
|
|
if (empty($CFG->loginhttps)) {
|
|
$passwordchangeurl = "$CFG->wwwroot/login/change_password.php";
|
|
} else {
|
|
$passwordchangeurl = str_replace('http:', 'https:', $CFG->wwwroot.'/login/change_password.php');
|
|
}
|
|
}
|
|
}
|
|
|
|
// Buttons gone! TODO: Make sure there's a good way to message someone from the profile pages
|
|
|
|
if ($CFG->debugdisplay && debugging('', DEBUG_DEVELOPER) && $currentuser) { // Show user object
|
|
echo '<br /><br /><hr />';
|
|
echo $OUTPUT->heading('DEBUG MODE: User session variables');
|
|
print_object($USER);
|
|
}
|
|
|
|
echo $OUTPUT->footer();
|
|
|
|
/// Functions ///////
|
|
|
|
function print_row($left, $right) {
|
|
echo "\n<tr><td class=\"label c0\">$left</td><td class=\"info c1\">$right</td></tr>\n";
|
|
}
|
|
|
|
|