course/pending.php

   1 <?php  // $Id$
   2        // allow the administrators to look through a list of course requests and either approve them or reject them.
   3
   4     require_once('../config.php');
   5     require_once($CFG->libdir.'/pagelib.php');
   6     require_once($CFG->libdir.'/blocklib.php');
   7     require_once('lib.php');
   8
   9     require_login();
  10
  11     require_capability('moodle/site:approvecourse', get_context_instance(CONTEXT_SYSTEM, SITEID));
  12
  13     $approve      = optional_param('approve', 0, PARAM_INT);
  14     $reject       = optional_param('reject', 0, PARAM_INT);
  15     $rejectnotice = optional_param('rejectnotice', '', PARAM_CLEANHTML);
  16
  17     if (!empty($approve) and confirm_sesskey()) {
  18         if ($course = get_record("course_request","id",$approve)) {
  19             foreach (array_keys((array)$course) as $key) {
  20                 $course->$key = addslashes($course->$key);
  21             }
  22
  23             // place at beginning of category
  24             fix_course_sortorder();
  25
  26             if (empty($CFG->defaultrequestcategory) or !record_exists('course_categories', 'id', $CFG->defaultrequestcategory)) {
  27                 // default to first top level directory, hacky but means things don't break
  28                 $CFG->defaultrequestcategory = get_field('course_categories', 'id', 'parent', '0');
  29             }
  30
  31             $course->category = $CFG->defaultrequestcategory;
  32             $course->sortorder = get_field_sql("SELECT min(sortorder)-1 FROM {$CFG->prefix}course WHERE category=$course->category");
  33             if (empty($course->sortorder)) {
  34                 $course->sortorder = 1000;
  35             }
  36             $course->requested = 1;
  37             unset($course->reason);
  38             unset($course->id);
  39             $teacherid = $course->requester;
  40             unset($course->requester);
  41             $course->teacher = get_string("defaultcourseteacher");
  42             $course->teachers = get_string("defaultcourseteachers");
  43             $course->student = get_string("defaultcoursestudent");
  44             $course->students = get_string("defaultcoursestudents");
  45             if (!empty($CFG->restrictmodulesfor) && $CFG->restrictmodulesfor != 'none' && !empty($CFG->restrictbydefault)) {
  46                 $course->restrictmodules = 1;
  47             }
  48             if ($courseid = insert_record("course",$course)) {
  49                 $page = page_create_object(PAGE_COURSE_VIEW, $courseid);
  50                 blocks_repopulate_page($page); // Return value not checked because you can always edit later
  51                 add_teacher($teacherid,$courseid);
  52                 $course->id = $courseid;
  53                 if (!empty($CFG->restrictmodulesfor) && $CFG->restrictmodulesfor != 'none' && !empty($CFG->restrictbydefault)) { // if we're all or requested we're ok.
  54                     $allowedmods = explode(',',$CFG->defaultallowedmodules);
  55                     update_restricted_mods($course,$allowedmods);
  56                 }
  57                 delete_records('course_request','id',$approve);
  58                 $success = 1;
  59             }
  60             if (!empty($success)) {
  61                 $user = get_record('user','id',$teacherid);
  62                 $a->name = $course->fullname;
  63                 $a->url = $CFG->wwwroot.'/course/view.php?id='.$courseid;
  64                 $a->teacher = $course->teacher;
  65                 email_to_user($user,$USER,get_string('courseapprovedsubject'),get_string('courseapprovedemail','moodle',$a));
  66                 redirect($CFG->wwwroot.'/course/edit.php?id='.$courseid);
  67                 exit;
  68             }
  69             else {
  70                 error(get_string('courseapprovedfailed'));
  71                 exit;
  72             }
  73         }
  74     }
  75
  76     $strtitle = get_string('coursespending');
  77     $strheading = get_string(((!empty($reject)) ? 'coursereject' : 'coursespending'));
  78
  79     print_header($strtitle,$strheading,build_navigation(array(array('name'=>$strheading,'link'=>'','type'=>'misc'))));
  80
  81     if (!empty($reject) and confirm_sesskey()) {
  82         if ($reject = get_record("course_request","id",$reject)) {
  83             if (empty($rejectnotice)) {
  84                 //  display a form for writing a reason
  85                 print_simple_box_start('center');
  86                 print_string('courserejectreason');
  87                 include('pending-reject.html');
  88                 print_simple_box_end();
  89             }
  90             else {
  91                 $user = get_record("user","id",$reject->requester);
  92                 email_to_user($user,$USER,get_string('courserejectsubject'),get_string('courserejectemail','moodle',$rejectnotice));
  93                 delete_records("course_request","id",$reject->id);
  94                 notice(get_string('courserejected'),'pending.php');
  95             }
  96         }
  97     } else if ($pending = get_records("course_request")) {
  98         // loop through
  99         $table->cellpadding = 4;
 100         $table->cellspacing = 3;
 101         $table->align = array('center','center','center','center','center','center','center');
 102         $table->head = array('&nbsp;',get_string('shortname'),get_string('fullname'),get_string('requestedby'),get_string('summary'),
 103                                get_string('requestreason'),'');
 104         $strrequireskey = get_string('requireskey');
 105         foreach ($pending as $course) {
 106             $requester = get_record('user','id',$course->requester);
 107             // check here for shortname collisions and warn about them.
 108             if ($match = get_record("course","shortname",$course->shortname)) {
 109                 $course->shortname .= ' [*]';
 110                 $collision = 1;
 111             }
 112             //do not output raw html from request, quote html entities using s()!!
 113             $table->data[] = array(((!empty($course->password)) ?
 114                                     '<img hspace="1" alt="'.$strrequireskey.'" class="icon" src="'.$CFG->pixpath.'/i/key.gif" />' : ''),
 115                                    format_string($course->shortname),format_string($course->fullname),fullname($requester),
 116                                    format_string($course->summary),format_string($course->reason),
 117                                    '<a href="pending.php?approve='.$course->id.'&amp;sesskey='.sesskey().'">'.get_string('approve').'</a> | '
 118                                    .'<a href="pending.php?reject='.$course->id.'&amp;sesskey='.sesskey().'">'.get_string('reject').'</a>');
 119         }
 120         print_table($table);
 121         if (!empty($collision)) {
 122             print_string('shortnamecollisionwarning');
 123         }
 124     } else {
 125         notice(get_string('nopendingcourses'));
 126         // no pending messages.
 127     }
 128
 129 print_footer();
 130
 131
 132 ?>