Hacked By AnonymousFox

<?php
/* For licensing terms, see /license.txt */
/**
*	@package chamilo.admin
*/
/**
 * Code
 */
$language_file = 'admin';

$cidReset = true;
require '../inc/global.inc.php';

$this_section = SECTION_PLATFORM_ADMIN;
api_protect_admin_script();

/**
 * Gets the total number of classes.
 */
function get_number_of_classes() {
    $tbl_class = Database :: get_main_table(TABLE_MAIN_CLASS);
    $sql = "SELECT COUNT(*) AS number_of_classes FROM $tbl_class";
    if (isset ($_GET['keyword'])) {
        $sql .= " WHERE (name LIKE '%".Database::escape_string(trim($_GET['keyword']))."%')";
    }
    $res = Database::query($sql);
    $obj = Database::fetch_object($res);
    return $obj->number_of_classes;
}

/**
 * Gets the information about some classes.
 * @param int $from
 * @param int $number_of_items
 * @param string $direction
 */
function get_class_data($from, $number_of_items, $column, $direction) {
    $tbl_class_user = Database::get_main_table(TABLE_MAIN_CLASS_USER);
    $tbl_class = Database :: get_main_table(TABLE_MAIN_CLASS);
    $from 				= Database::escape_string($from);
    $number_of_items 	= Database::escape_string($number_of_items);
    $column 			= Database::escape_string($column);
    $direction 			= Database::escape_string($direction);

    $sql = "SELECT 	id AS col0, name AS col1, COUNT(user_id) AS col2, id AS col3
        FROM $tbl_class
            LEFT JOIN $tbl_class_user ON id=class_id ";
    if (isset ($_GET['keyword'])) {
        $sql .= " WHERE (name LIKE '%".Database::escape_string(trim($_GET['keyword']))."%')";
    }
    $sql .= " GROUP BY id,name ORDER BY col$column $direction LIMIT $from,$number_of_items";
    $res = Database::query($sql);
    $classes = array ();
    while ($class = Database::fetch_row($res)) {
        $classes[] = $class;
    }
    return $classes;
}

/**
 * Filter for sortable table to display edit icons for class
 */
function modify_filter($class_id) {
    $class_id = Security::remove_XSS($class_id);
    $result = '<a href="class_information.php?id='.$class_id.'">'.Display::return_icon('synthese_view.gif', get_lang('Info')).'</a>';
    $result .= ' <a href="class_edit.php?idclass='.$class_id.'">'.Display::return_icon('edit.png', get_lang('Edit')).'</a>';
    $result .= ' <a href="subscribe_user2class.php?idclass='.$class_id.'">'.Display::return_icon('add_multiple_users.gif', get_lang('AddUsersToAClass')).'</a>';
    $result .= ' <a href="class_list.php?action=delete_class&amp;class_id='.$class_id.'" onclick="javascript: if(!confirm('."'".addslashes(api_htmlentities(get_lang("ConfirmYourChoice"), ENT_QUOTES))."'".')) return false;">'.Display::return_icon('delete.png', get_lang('Delete')).'</a>';
    return $result;
}

require api_get_path(LIBRARY_PATH).'fileManage.lib.php';
require api_get_path(LIBRARY_PATH).'classmanager.lib.php';

$tool_name = get_lang('ClassList');
$interbreadcrumb[] = array ('url' => 'index.php', 'name' => get_lang('PlatformAdmin'));

if (isset($_POST['action'])) {
    switch ($_POST['action']) {
        // Delete selected classes
        case 'delete_classes' :
            $classes = $_POST['class'];
            if (count($classes) > 0) {
                foreach ($classes as $index => $class_id) {
                    ClassManager :: delete_class($class_id);
                }
                $message = Display :: return_message(get_lang('ClassesDeleted'));
            }
            break;
    }
}

if (isset($_GET['action'])) {
    switch ($_GET['action']) {
        case 'delete_class':
            ClassManager :: delete_class($_GET['class_id']);
            $message = Display :: return_message(get_lang('ClassDeleted'));
            break;
        case 'show_message':
            $message = Display :: return_message(Security::remove_XSS(stripslashes($_GET['message'])));
            break;
    }
}

// Create a search-box
$form = new FormValidator('search_simple', 'get', '', '', null, false);
$renderer =& $form->defaultRenderer();
$renderer->setElementTemplate('<span>{element}</span> ');
$form->addElement('text', 'keyword', get_lang('keyword'));
$form->addElement('button', 'submit', get_lang('Search'));
$content .= $form->return_form();

// Create the sortable table with class information
$table = new SortableTable('classes', 'get_number_of_classes', 'get_class_data', 1);
$table->set_additional_parameters(array('keyword' => $_GET['keyword']));
$table->set_header(0, '', false);
$table->set_header(1, get_lang('ClassName'));
$table->set_header(2, get_lang('NumberOfUsers'));
$table->set_header(3, '', false);
$table->set_column_filter(3, 'modify_filter');
$table->set_form_actions(array ('delete_classes' => get_lang('DeleteSelectedClasses')), 'class');

$content .= $table->return_table();

$actions .= Display::url(Display::return_icon('add.png', get_lang('Add'), array(), ICON_SIZE_MEDIUM), 'class_add.php');
$actions .= Display::url(Display::return_icon('import_csv.png', get_lang('AddUsersToAClass'), array(), ICON_SIZE_MEDIUM), 'class_user_import.php');
$actions .= Display::url(Display::return_icon('import_csv.png', get_lang('ImportClassListCSV'), array(), ICON_SIZE_MEDIUM), 'class_import.php');

$tpl = new Template($tool_name);
$tpl->assign('content', $content);
$tpl->assign('actions', $actions);
$tpl->assign('message', $message);
$tpl->display_one_col_template();