mirror of
https://github.com/moodle/moodle.git
synced 2025-01-19 06:18:28 +01:00
415 lines
16 KiB
PHP
415 lines
16 KiB
PHP
<?php // $Id$
|
|
|
|
require_once('../config.php');
|
|
|
|
$newuser = optional_param('newuser', 0, PARAM_BOOL);
|
|
$delete = optional_param('delete', 0, PARAM_INT);
|
|
$confirm = optional_param('confirm', '', PARAM_ALPHANUM); //md5 confirmation hash
|
|
$confirmuser = optional_param('confirmuser', 0, PARAM_INT);
|
|
$sort = optional_param('sort', 'name', PARAM_ALPHA);
|
|
$dir = optional_param('dir', 'ASC', PARAM_ALPHA);
|
|
$page = optional_param('page', 0, PARAM_INT);
|
|
$perpage = optional_param('perpage', 30, PARAM_INT); // how many per page
|
|
$search = optional_param('search', '', PARAM_RAW);
|
|
$lastinitial = optional_param('lastinitial', '', PARAM_CLEAN); // only show students with this last initial
|
|
$firstinitial = optional_param('firstinitial', '', PARAM_CLEAN); // only show students with this first initial
|
|
|
|
$search = trim($search);
|
|
|
|
$user = new object();
|
|
$admin = new object();
|
|
$teacher = new object();
|
|
|
|
$context = get_context_instance(CONTEXT_SYSTEM, SITEID);
|
|
|
|
|
|
//if (! record_exists("user_admins")) { // No admin user yet
|
|
if (!$CFG->rolesactive) { // No admin user yet.
|
|
|
|
$user->firstname = get_string("admin");
|
|
$user->lastname = get_string("user");
|
|
$user->username = "admin";
|
|
$user->password = hash_internal_user_password("admin");
|
|
$user->email = "root@localhost";
|
|
$user->confirmed = 1;
|
|
$user->lang = $CFG->lang;
|
|
$user->maildisplay = 1;
|
|
$user->timemodified = time();
|
|
|
|
if (! $user->id = insert_record("user", $user)) {
|
|
error("SERIOUS ERROR: Could not create admin user record !!!");
|
|
}
|
|
|
|
|
|
$admin->userid = $user->id;
|
|
|
|
/*
|
|
if (! insert_record("user_admins", $admin)) {
|
|
error("Could not make user $user->id an admin !!!");
|
|
}
|
|
*/
|
|
|
|
if (! $user = get_record("user", "id", $user->id)) { // Double check.
|
|
error("User ID was incorrect (can't find it)");
|
|
}
|
|
|
|
|
|
// Assign the default admin role to the new user.
|
|
if (!$adminroles = get_roles_with_capability('moodle/legacy:admin', CAP_ALLOW)) {
|
|
error('No admin role could be found');
|
|
}
|
|
foreach ($adminroles as $adminrole) {
|
|
role_assign($adminrole->id, $user->id, 0, $context->id);
|
|
}
|
|
set_config('rolesactive', 1);
|
|
|
|
|
|
if (! $site = get_site()) {
|
|
error("Could not find site-level course");
|
|
}
|
|
|
|
|
|
/*
|
|
// Assign as a teacher in the site-level course.
|
|
$teacher->userid = $user->id;
|
|
$teacher->course = $site->id;
|
|
$teacher->authority = 1;
|
|
if (! insert_record("user_teachers", $teacher)) {
|
|
error("Could not make user $id a teacher of site-level course !!!");
|
|
}
|
|
*/
|
|
|
|
|
|
// Log the user in.
|
|
$USER = $user;
|
|
$USER->loggedin = true;
|
|
$USER->sessionIP = md5(getremoteaddr()); // Store the current IP in the session
|
|
$USER->site = $CFG->wwwroot;
|
|
$USER->admin = true;
|
|
//$USER->teacher["$site->id"] = true;
|
|
$USER->newadminuser = true;
|
|
sesskey(); // For added security, used to check script parameters
|
|
load_user_capability();
|
|
|
|
|
|
redirect("$CFG->wwwroot/user/edit.php?id=$user->id&course=$site->id");
|
|
exit;
|
|
|
|
} else {
|
|
if (! $site = get_site()) {
|
|
error("Could not find site-level course");
|
|
}
|
|
}
|
|
|
|
require_login();
|
|
|
|
|
|
if ($newuser && confirm_sesskey()) { // Create a new user
|
|
|
|
if (!has_capability('moodle/user:create', $context)) {
|
|
error('You do not have the required permission to create new users.');
|
|
}
|
|
|
|
$user->auth = "manual";
|
|
$user->firstname = "";
|
|
$user->lastname = "";
|
|
$user->username = "changeme";
|
|
$user->password = "";
|
|
$user->email = "";
|
|
$user->lang = $CFG->lang;
|
|
$user->confirmed = 1;
|
|
$user->timemodified = time();
|
|
|
|
if (! $user->id = insert_record("user", $user)) {
|
|
if (!$user = get_record("user", "username", "changeme")) { // half finished user from another time
|
|
error("Could not start a new user!");
|
|
}
|
|
}
|
|
|
|
redirect("$CFG->wwwroot/user/edit.php?id=$user->id&course=$site->id");
|
|
|
|
} else { // List all users for editing
|
|
|
|
if (!has_capability('moodle/user:update', $context)) {
|
|
error('You do not have the required permission to edit users.');
|
|
}
|
|
|
|
$stredituser = get_string("edituser");
|
|
$stradministration = get_string("administration");
|
|
$strusers = get_string("users");
|
|
$stredit = get_string("edit");
|
|
$strdelete = get_string("delete");
|
|
$strdeletecheck = get_string("deletecheck");
|
|
$strsearch = get_string("search");
|
|
$strshowallusers = get_string("showallusers");
|
|
|
|
if ($firstinitial or $lastinitial or $search or $page) {
|
|
print_header("$site->shortname: $stredituser", $site->fullname,
|
|
"<a href=\"index.php\">$stradministration</a> -> ".
|
|
"<a href=\"users.php\">$strusers</a> -> ".
|
|
"<a href=\"user.php\">$stredituser</a>");
|
|
} else {
|
|
print_header("$site->shortname: $stredituser", $site->fullname,
|
|
"<a href=\"index.php\">$stradministration</a> -> ".
|
|
"<a href=\"users.php\">$strusers</a> -> $stredituser");
|
|
}
|
|
|
|
if ($confirmuser and confirm_sesskey()) {
|
|
if (!$user = get_record("user", "id", "$confirmuser")) {
|
|
error("No such user!");
|
|
}
|
|
|
|
$confirmeduser = new object();
|
|
$confirmeduser->id = $confirmuser;
|
|
$confirmeduser->confirmed = 1;
|
|
$confirmeduser->timemodified = time();
|
|
|
|
if (update_record("user", $confirmeduser)) {
|
|
notify(get_string("userconfirmed", "", fullname($user, true)) );
|
|
} else {
|
|
notify(get_string("usernotconfirmed", "", fullname($user, true)));
|
|
}
|
|
|
|
} else if ($delete and confirm_sesskey()) { // Delete a selected user, after confirmation
|
|
|
|
if (!has_capability('moodle/user:delete', $context)) {
|
|
error('You do not have the required permission to delete a user.');
|
|
}
|
|
|
|
if (!$user = get_record("user", "id", "$delete")) {
|
|
error("No such user!");
|
|
}
|
|
|
|
$primaryadmin = get_admin();
|
|
if ($user->id == $primaryadmin->id) {
|
|
error("You are not allowed to delete the primary admin user!");
|
|
}
|
|
|
|
if ($confirm != md5($delete)) {
|
|
$fullname = fullname($user, true);
|
|
notice_yesno(get_string("deletecheckfull", "", "'$fullname'"),
|
|
"user.php?delete=$delete&confirm=".md5($delete)."&sesskey=$USER->sesskey", "user.php");
|
|
|
|
exit;
|
|
} else if (!$user->deleted) {
|
|
$updateuser = new object();
|
|
$updateuser->id = $user->id;
|
|
$updateuser->deleted = "1";
|
|
$updateuser->username = "$user->email.".time(); // Remember it just in case
|
|
$updateuser->email = ""; // Clear this field to free it up
|
|
$updateuser->idnumber = ""; // Clear this field to free it up
|
|
$updateuser->timemodified = time();
|
|
if (update_record("user", $updateuser)) {
|
|
unenrol_student($user->id); // From all courses
|
|
remove_teacher($user->id); // From all courses
|
|
remove_admin($user->id);
|
|
notify(get_string("deletedactivity", "", fullname($user, true)) );
|
|
} else {
|
|
notify(get_string("deletednot", "", fullname($user, true)));
|
|
}
|
|
}
|
|
}
|
|
|
|
// Carry on with the user listing
|
|
|
|
$columns = array("firstname", "lastname", "email", "city", "country", "lastaccess");
|
|
|
|
foreach ($columns as $column) {
|
|
$string[$column] = get_string("$column");
|
|
if ($sort != $column) {
|
|
$columnicon = "";
|
|
if ($column == "lastaccess") {
|
|
$columndir = "DESC";
|
|
} else {
|
|
$columndir = "ASC";
|
|
}
|
|
} else {
|
|
$columndir = $dir == "ASC" ? "DESC":"ASC";
|
|
if ($column == "lastaccess") {
|
|
$columnicon = $dir == "ASC" ? "up":"down";
|
|
} else {
|
|
$columnicon = $dir == "ASC" ? "down":"up";
|
|
}
|
|
$columnicon = " <img src=\"$CFG->pixpath/t/$columnicon.gif\" alt=\"\" />";
|
|
|
|
}
|
|
$$column = "<a href=\"user.php?sort=$column&dir=$columndir&search=".urlencode(stripslashes($search))."&firstinitial=$firstinitial&lastinitial=$lastinitial\">".$string[$column]."</a>$columnicon";
|
|
}
|
|
|
|
if ($sort == "name") {
|
|
$sort = "firstname";
|
|
}
|
|
|
|
$users = get_users_listing($sort, $dir, $page*$perpage, $perpage, $search, $firstinitial, $lastinitial);
|
|
$usercount = get_users(false);
|
|
$usersearchcount = get_users(false, $search, true, "", "", $firstinitial, $lastinitial);
|
|
|
|
if ($search or $firstinitial or $lastinitial) {
|
|
print_heading("$usersearchcount / $usercount ".get_string("users"));
|
|
$usercount = $usersearchcount;
|
|
} else {
|
|
print_heading("$usercount ".get_string("users"));
|
|
}
|
|
|
|
$alphabet = explode(',', get_string('alphabet'));
|
|
$strall = get_string("all");
|
|
|
|
|
|
/// Bar of first initials
|
|
|
|
echo "<center><p align=\"center\">";
|
|
echo get_string("firstname")." : ";
|
|
if ($firstinitial) {
|
|
echo " <a href=\"user.php?sort=firstname&dir=ASC&".
|
|
"perpage=$perpage&lastinitial=$lastinitial\">$strall</a> ";
|
|
} else {
|
|
echo " <b>$strall</b> ";
|
|
}
|
|
foreach ($alphabet as $letter) {
|
|
if ($letter == $firstinitial) {
|
|
echo " <b>$letter</b> ";
|
|
} else {
|
|
echo " <a href=\"user.php?sort=firstname&dir=ASC&".
|
|
"perpage=$perpage&lastinitial=$lastinitial&firstinitial=$letter\">$letter</a> ";
|
|
}
|
|
}
|
|
echo "<br />";
|
|
|
|
/// Bar of last initials
|
|
|
|
echo get_string("lastname")." : ";
|
|
if ($lastinitial) {
|
|
echo " <a href=\"user.php?sort=lastname&dir=ASC&".
|
|
"perpage=$perpage&firstinitial=$firstinitial\">$strall</a> ";
|
|
} else {
|
|
echo " <b>$strall</b> ";
|
|
}
|
|
foreach ($alphabet as $letter) {
|
|
if ($letter == $lastinitial) {
|
|
echo " <b>$letter</b> ";
|
|
} else {
|
|
echo " <a href=\"user.php?sort=lastname&dir=ASC&".
|
|
"perpage=$perpage&firstinitial=$firstinitial&lastinitial=$letter\">$letter</a> ";
|
|
}
|
|
}
|
|
echo "</p>";
|
|
echo "</center>";
|
|
|
|
print_paging_bar($usercount, $page, $perpage,
|
|
"user.php?sort=$sort&dir=$dir&perpage=$perpage&firstinitial=$firstinitial&lastinitial=$lastinitial&search=".urlencode(stripslashes($search))."&");
|
|
|
|
flush();
|
|
|
|
|
|
if (!$users) {
|
|
$match = array();
|
|
if ($search !== '') {
|
|
$match[] = s($search);
|
|
}
|
|
if ($firstinitial) {
|
|
$match[] = get_string("firstname").": $firstinitial"."___";
|
|
}
|
|
if ($lastinitial) {
|
|
$match[] = get_string("lastname").": $lastinitial"."___";
|
|
}
|
|
$matchstring = implode(", ", $match);
|
|
print_heading(get_string("nousersmatching", "", $matchstring));
|
|
|
|
$table = NULL;
|
|
|
|
} else {
|
|
|
|
$countries = get_list_of_countries();
|
|
|
|
foreach ($users as $key => $user) {
|
|
if (!empty($user->country)) {
|
|
$users[$key]->country = $countries[$user->country];
|
|
}
|
|
}
|
|
if ($sort == "country") { // Need to resort by full country name, not code
|
|
foreach ($users as $user) {
|
|
$susers[$user->id] = $user->country;
|
|
}
|
|
asort($susers);
|
|
foreach ($susers as $key => $value) {
|
|
$nusers[] = $users[$key];
|
|
}
|
|
$users = $nusers;
|
|
}
|
|
|
|
$table->head = array ("$firstname / $lastname", $email, $city, $country, $lastaccess, "", "", "");
|
|
$table->align = array ("left", "left", "left", "left", "left", "center", "center", "center");
|
|
$table->width = "95%";
|
|
foreach ($users as $user) {
|
|
if ($user->id == $USER->id or $user->username == "changeme") {
|
|
$deletebutton = "";
|
|
} else {
|
|
if (has_capability('moodle/user:delete', $context)) {
|
|
$deletebutton = "<a href=\"user.php?delete=$user->id&sesskey=$USER->sesskey\">$strdelete</a>"; } else {
|
|
$deletebutton ="";
|
|
}
|
|
}
|
|
if ($user->lastaccess) {
|
|
$strlastaccess = format_time(time() - $user->lastaccess);
|
|
} else {
|
|
$strlastaccess = get_string("never");
|
|
}
|
|
if ($user->confirmed == 0) {
|
|
$confirmbutton = "<a href=\"user.php?confirmuser=$user->id&sesskey=$USER->sesskey\">" . get_string("confirm") . "</a>";
|
|
} else {
|
|
$confirmbutton = "";
|
|
}
|
|
$fullname = fullname($user, true);
|
|
|
|
if (has_capability('moodle/user:edit', $context)) {
|
|
|
|
$table->data[] = array ("<a href=\"../user/view.php?id=$user->id&course=$site->id\">$fullname</a>",
|
|
"$user->email",
|
|
"$user->city",
|
|
"$user->country",
|
|
$strlastaccess,
|
|
"<a href=\"../user/edit.php?id=$user->id&course=$site->id\">$stredit</a>",
|
|
$deletebutton,
|
|
$confirmbutton);
|
|
} else {
|
|
$table->data[] = array ("<a href=\"../user/view.php?id=$user->id&course=$site->id\">$fullname</a>",
|
|
"$user->email",
|
|
"$user->city",
|
|
"$user->country",
|
|
$strlastaccess,
|
|
$deletebutton,
|
|
$confirmbutton);
|
|
|
|
}
|
|
}
|
|
}
|
|
|
|
echo "<table class=\"searchbox\" align=\"center\" cellpadding=\"10\"><tr><td>";
|
|
echo "<form action=\"user.php\" method=\"get\">";
|
|
echo "<input type=\"text\" name=\"search\" value=\"".s($search, true)."\" size=\"20\" />";
|
|
echo "<input type=\"submit\" value=\"$strsearch\" />";
|
|
if ($search) {
|
|
echo "<input type=\"button\" onclick=\"document.location='user.php';\" value=\"$strshowallusers\" />";
|
|
}
|
|
echo "</form>";
|
|
echo "</td></tr></table>";
|
|
|
|
if (has_capability('moodle/user:create', $context)) {
|
|
print_heading("<a href=\"user.php?newuser=true&sesskey=$USER->sesskey\">".get_string("addnewuser")."</a>");
|
|
}
|
|
if (!empty($table)) {
|
|
print_table($table);
|
|
print_paging_bar($usercount, $page, $perpage,
|
|
"user.php?sort=$sort&dir=$dir&perpage=$perpage".
|
|
"&firstinitial=$firstinitial&lastinitial=$lastinitial&search=".urlencode(stripslashes($search))."&");
|
|
if (has_capability('moodle/user:create', $context)) {
|
|
print_heading("<a href=\"user.php?newuser=true&sesskey=$USER->sesskey\">".get_string("addnewuser")."</a>");
|
|
}
|
|
}
|
|
|
|
|
|
print_footer();
|
|
}
|
|
|
|
?>
|