course/loginas.php

   1 <?php // $Id$
   2       // Allows a teacher/admin to login as another user (in stealth mode)
   3
   4     require_once('../config.php');
   5     require_once('lib.php');
   6
   7 /// Reset user back to their real self if needed
   8     $return = optional_param('return', 0, PARAM_BOOL);   // return to the page we came from
   9
  10     if (!empty($USER->realuser)) {
  11         if (!confirm_sesskey()) {
  12             print_error('confirmsesskeybad');
  13         }
  14
  15         $USER = get_complete_user_data('id', $USER->realuser);
  16         load_all_capabilities();   // load all this user's normal capabilities
  17
  18         if (isset($SESSION->oldcurrentgroup)) {      // Restore previous "current group" cache.
  19             $SESSION->currentgroup = $SESSION->oldcurrentgroup;
  20             unset($SESSION->oldcurrentgroup);
  21         }
  22         if (isset($SESSION->oldtimeaccess)) {        // Restore previous timeaccess settings
  23             $USER->timeaccess = $SESSION->oldtimeaccess;
  24             unset($SESSION->oldtimeaccess);
  25         }
  26
  27         if ($return and isset($_SERVER["HTTP_REFERER"])) { // That's all we wanted to do, so let's go back
  28             redirect($_SERVER["HTTP_REFERER"]);
  29         } else {
  30             redirect($CFG->wwwroot);
  31         }
  32     }
  33
  34 ///-------------------------------------
  35 /// We are trying to log in as this user in the first place
  36
  37     $id     = optional_param('id', SITEID, PARAM_INT);   // course id
  38     $userid = required_param('user', PARAM_INT);         // login as this user
  39
  40     if (!confirm_sesskey()) {
  41         print_error('confirmsesskeybad');
  42     }
  43
  44     if (! $course = get_record('course', 'id', $id)) {
  45         error("Course ID was incorrect");
  46     }
  47
  48 /// User must be logged in
  49
  50     $systemcontext = get_context_instance(CONTEXT_SYSTEM);
  51     $coursecontext = get_context_instance(CONTEXT_COURSE, $course->id);
  52
  53     require_login();
  54
  55     if (has_capability('moodle/user:loginas', $systemcontext)) {
  56         if (has_capability('moodle/site:doanything', $systemcontext, $userid, false)) {
  57             print_error('nologinas');
  58         }
  59         $context = $systemcontext;
  60     } else if (has_capability('moodle/user:loginas', $coursecontext)) {
  61         require_login($course);
  62         if (!has_capability('moodle/course:view', $coursecontext, $userid, false)) {
  63             error('This user is not in this course!');
  64         }
  65         if (has_capability('moodle/site:doanything', $coursecontext, $userid, false)) {
  66             print_error('nologinas');
  67         }
  68         $context = $coursecontext;
  69     }
  70
  71 /// Remember current timeaccess settings for later
  72
  73     if (isset($USER->timeaccess)) {
  74         $SESSION->oldtimeaccess = $USER->timeaccess;
  75     }
  76
  77 /// Login as this user and return to course home page.
  78
  79     $oldfullname = fullname($USER, true);
  80     $olduserid   = $USER->id;
  81
  82 /// Create the new USER object with all details and reload needed capabilitites
  83     $USER = get_complete_user_data('id', $userid);
  84     $USER->realuser = $olduserid;
  85     $USER->loginascontext = $context;
  86     load_all_capabilities();   // reload capabilities
  87
  88     if (isset($SESSION->currentgroup)) {    // Remember current cache setting for later
  89         $SESSION->oldcurrentgroup = $SESSION->currentgroup;
  90         unset($SESSION->currentgroup);
  91     }
  92
  93     $newfullname = fullname($USER, true);
  94
  95     add_to_log($course->id, "course", "loginas", "../user/view.php?id=$course->id&amp;user=$userid", "$oldfullname -> $newfullname");
  96
  97     $strloginas    = get_string('loginas');
  98     $strloggedinas = get_string('loggedinas', '', $newfullname);
  99
 100     print_header_simple($strloggedinas, '', $strloggedinas, '', '', true, '&nbsp;', navmenu($course));
 101     notice($strloggedinas, "$CFG->wwwroot/course/view.php?id=$course->id");
 102
 103
 104 ?>