projects / platal.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Updates ChangeLog.
[platal.git] / modules / profile.php
CommitLineData
7d8b17cb 1<?php
2/***************************************************************************
8d84c630 3 * Copyright (C) 2003-2009 Polytechnique.org *
7d8b17cb 4 * http://opensource.polytechnique.org/ *
5 * *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
10 * *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
15 * *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
18 * Foundation, Inc., *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
21
22class ProfileModule extends PLModule
23{
24 function handlers()
25 {
26 return array(
eb5a266d
SJ		 27 'photo' => $this->make_hook('photo', AUTH_PUBLIC),
28 'photo/change' => $this->make_hook('photo_change', AUTH_MDP),
e49018a7 29
eb5a266d
SJ		 30 'fiche.php' => $this->make_hook('fiche', AUTH_PUBLIC),
31 'profile' => $this->make_hook('profile', AUTH_PUBLIC),
32 'profile/private' => $this->make_hook('profile', AUTH_COOKIE),
33 'profile/ax' => $this->make_hook('ax', AUTH_COOKIE, 'admin'),
34 'profile/edit' => $this->make_hook('p_edit', AUTH_MDP),
35 'profile/ajax/address' => $this->make_hook('ajax_address', AUTH_COOKIE, 'user', NO_AUTH),
36 'profile/ajax/tel' => $this->make_hook('ajax_tel', AUTH_COOKIE, 'user', NO_AUTH),
37 'profile/ajax/medal' => $this->make_hook('ajax_medal', AUTH_COOKIE, 'user', NO_AUTH),
38 'profile/ajax/job' => $this->make_hook('ajax_job', AUTH_COOKIE, 'user', NO_AUTH),
39 'profile/ajax/secteur' => $this->make_hook('ajax_secteur', AUTH_COOKIE, 'user', NO_AUTH),
40 'profile/ajax/skill' => $this->make_hook('ajax_skill', AUTH_COOKIE, 'user', NO_AUTH),
41 'javascript/applis.js' => $this->make_hook('applis_js', AUTH_COOKIE),
42 'javascript/grades.js' => $this->make_hook('grades_js', AUTH_COOKIE),
43 'profile/medal' => $this->make_hook('medal', AUTH_PUBLIC),
44 'profile/orange' => $this->make_hook('p_orange', AUTH_MDP),
45 'profile/usage' => $this->make_hook('p_usage', AUTH_MDP),
e49018a7 46
eb5a266d
SJ		 47 'referent' => $this->make_hook('referent', AUTH_COOKIE),
48 'emploi' => $this->make_hook('ref_search', AUTH_COOKIE),
49 'referent/search' => $this->make_hook('ref_search', AUTH_COOKIE),
50 'referent/ssect' => $this->make_hook('ref_sect', AUTH_COOKIE, 'user', NO_AUTH),
51 'referent/country' => $this->make_hook('ref_country', AUTH_COOKIE, 'user', NO_AUTH),
2f678da1 52
eb5a266d 53 'groupes-x' => $this->make_hook('xnet', AUTH_COOKIE),
926f16d7 54
9db0a440 55 'vcard' => $this->make_hook('vcard', AUTH_COOKIE),
eb5a266d
SJ		 56 'admin/binets' => $this->make_hook('admin_binets', AUTH_MDP, 'admin'),
57 'admin/medals' => $this->make_hook('admin_medals', AUTH_MDP, 'admin'),
58 'admin/formations' => $this->make_hook('admin_formations', AUTH_MDP, 'admin'),
59 'admin/sections' => $this->make_hook('admin_sections', AUTH_MDP, 'admin'),
60 'admin/secteurs' => $this->make_hook('admin_secteurs', AUTH_MDP, 'admin'),
61 'admin/trombino' => $this->make_hook('admin_trombino', AUTH_MDP, 'admin'),
62 'admin/ss_secteurs' => $this->make_hook('admin_ss_secteurs', AUTH_MDP, 'admin'),
63 'admin/fonctions' => $this->make_hook('admin_fonctions', AUTH_MDP, 'admin'),
92423144 64
7d8b17cb 65 );
66 }
67
e8599c21 68 /* XXX COMPAT */
69 function handler_fiche(&$page)
70 {
5e2307dc 71 return $this->handler_profile($page, Env::v('user'));
e8599c21 72 }
73
adbdf493 74 function handler_photo(&$page, $x = null, $req = null)
75 {
954cfb01 76 if (!$x || !($user = User::getSilent($x))) {
adbdf493 77 return PL_NOT_FOUND;
78 }
79
954cfb01
VZ		 80 // Retrieve the photo and its mime type.
81 $photo_data = null;
82 $photo_type = null;
adbdf493 83
cab08090 84 if ($req && S::logged()) {
adbdf493 85 include 'validations.inc.php';
954cfb01
VZ		 86 $myphoto = PhotoReq::get_request($user->id());
87 if ($myphoto) {
88 $photo_data = $myphoto->data;
89 $photo_type = $myphoto->mimetype;
90 }
adbdf493 91 } else {
08cce2ff 92 $res = XDB::query(
954cfb01 93 "SELECT attachmime, attach, pub
adbdf493 94 FROM photo
954cfb01
VZ		 95 WHERE uid = {?}", $user->id());
96 list($photo_type, $photo_data, $photo_pub) = $res->fetchOneRow();
97 if ($photo_pub != 'public' && !S::logged()) {
98 $photo_type = $photo_data = null;
adbdf493 99 }
100 }
954cfb01
VZ		 101
102 // Display the photo, or a default one when not available.
103 if ($photo_type && $photo_data != null) {
104 header('Content-type: image/' . $photo_type);
105 echo $photo_data;
106 } else {
107 header('Content-type: image/png');
108 echo file_get_contents(dirname(__FILE__).'/../htdocs/images/none.png');
109 }
adbdf493 110 exit;
111 }
112
85cc366b
FB		 113 function handler_medal(&$page, $mid)
114 {
bd6a5fe3
VZ		 115 $thumb = ($mid == 'thumb');
116 $mid = $thumb ? @func_get_arg(2) : $mid;
117
85cc366b
FB		 118 $res = XDB::query("SELECT img
119 FROM profile_medals
120 WHERE id = {?}",
121 $mid);
bd6a5fe3
VZ		 122 $img = $thumb ?
123 dirname(__FILE__).'/../htdocs/images/medals/thumb/' . $res->fetchOneCell() :
124 dirname(__FILE__).'/../htdocs/images/medals/' . $res->fetchOneCell();
85cc366b
FB		 125 $type = mime_content_type($img);
126 header("Content-Type: $type");
127 echo file_get_contents($img);
128 exit;
129 }
130
fb9a56cb 131 function handler_photo_change(&$page)
132 {
ebfdf077 133 global $globals;
8b1f8e12 134 $page->changeTpl('profile/trombino.tpl');
fb9a56cb 135
136 require_once('validations.inc.php');
137
54cabe90 138 $trombi_x = '/home/web/trombino/photos' . S::v('promo') . '/' . S::user()->login() . '.jpg';
fb9a56cb 139 if (Env::has('upload')) {
8827fc52
VZ		 140 S::assert_xsrf_token();
141
954cfb01 142 $upload = new PlUpload(S::user()->login(), 'photo');
abe7e055 143 if (!$upload->upload($_FILES['userfile']) && !$upload->download(Env::v('photo'))) {
a7d35093 144 $page->trigError('Une erreur est survenue lors du téléchargement du fichier');
abe7e055 145 } else {
5daf68f6 146 $myphoto = new PhotoReq(S::user(), $upload);
abe7e055 147 if ($myphoto->isValid()) {
148 $myphoto->submit();
fb9a56cb 149 }
fb9a56cb 150 }
151 } elseif (Env::has('trombi')) {
8827fc52
VZ		 152 S::assert_xsrf_token();
153
954cfb01 154 $upload = new PlUpload(S::user()->login(), 'photo');
abe7e055 155 if ($upload->copyFrom($trombi_x)) {
5daf68f6 156 $myphoto = new PhotoReq(S::user(), $upload);
abe7e055 157 if ($myphoto->isValid()) {
158 $myphoto->commit();
159 $myphoto->clean();
160 }
fb9a56cb 161 }
5e2307dc 162 } elseif (Env::v('suppr')) {
8827fc52
VZ		 163 S::assert_xsrf_token();
164
84868ee9
FB		 165 XDB::execute('DELETE FROM photo
166 WHERE uid = {?}',
167 S::v('uid'));
168 XDB::execute('DELETE FROM requests
169 WHERE user_id = {?} AND type="photo"',
170 S::v('uid'));
ebfdf077 171 $globals->updateNbValid();
5e2307dc 172 } elseif (Env::v('cancel')) {
8827fc52
VZ		 173 S::assert_xsrf_token();
174
84868ee9
FB		 175 $sql = XDB::query('DELETE FROM requests
176 WHERE user_id={?} AND type="photo"',
177 S::v('uid'));
ebfdf077 178 $globals->updateNbValid();
fb9a56cb 179 }
180
84868ee9
FB		 181 $sql = XDB::query('SELECT COUNT(*)
182 FROM requests
183 WHERE user_id={?} AND type="photo"',
abe7e055 184 S::v('uid'));
fb9a56cb 185 $page->assign('submited', $sql->fetchOneCell());
186 $page->assign('has_trombi_x', file_exists($trombi_x));
fb9a56cb 187 }
188
e8599c21 189 function handler_profile(&$page, $x = null)
190 {
54cabe90
VZ		 191 // TODO/note for upcoming developers:
192 // We currently maintain both $user and $login; $user is the old way of
193 // obtaining information, and eventually everything will be loaded
194 // through $login. That is the reason why in the template $user is named
195 // $x, and $login $user (sorry for the confusion).
196
197 // Determines which user to display the profile of, and retrieves basic
198 // information on this user.
e8599c21 199 if (is_null($x)) {
200 return PL_NOT_FOUND;
201 }
202
344234db
VZ		 203 $login = S::logged() ? User::get($x) : User::getSilent($x);
204 if (!$login) {
205 return PL_NOT_FOUND;
e8599c21 206 }
207
54cabe90
VZ		 208 // Now that we know this is the profile of an existing user, we can
209 // switch to the appropriate template.
210 $page->changeTpl('profile/profile.tpl', SIMPLE);
211 require_once 'user.func.inc.php';
212
213 // Determines the access level at which the profile will be displayed.
214 if (!S::logged() || Env::v('view') == 'public') {
215 $view = 'public';
216 } else if (S::logged() && Env::v('view') == 'ax') {
217 $view = 'ax';
218 } else {
219 $view = 'private';
220 }
221
222 // Determines is the user is registered, and fetches the user infos in
223 // the appropriate way.
344234db
VZ		 224 $res = XDB::query("SELECT perms IN ('admin','user','disabled')
225 FROM auth_user_md5
226 WHERE user_id = {?}", $login->id());
54cabe90
VZ		 227 if ($res->fetchOneCell()) {
228 $new = Env::v('modif') == 'new';
229 $user = get_user_details($login->login(), S::v('uid'), $view);
230 } else {
231 $new = false;
232 $user = array();
ba25f663 233 if (S::logged()) {
54cabe90 234 pl_redirect('marketing/public/' . $login->login());
ba25f663 235 }
e8599c21 236 }
ba25f663 237
54cabe90 238 // Profile view are logged.
e31c1c3e 239 if (S::logged()) {
b8971a3e 240 S::logger()->log('view_profile', $login->login());
e31c1c3e 241 }
e8599c21 242
54cabe90
VZ		 243 // Sets the title of the html page.
244 $page->setTitle($login->fullName());
e8599c21 245
54cabe90
VZ		 246 // Prepares the display of the user's mugshot.
247 $photo = 'photo/' . $login->login() . ($new ? '/req' : '');
248 if (!isset($user['photo_pub']) || !has_user_right($user['photo_pub'], $view)) {
249 $photo = "";
250 }
251 $page->assign('photo_url', $photo);
e8599c21 252
2f678da1 253 if (!isset($user['y']) and !isset($user['x'])) {
e8599c21 254 list($user['x'], $user['y']) = getimagesize("images/none.png");
255 }
2f678da1 256 if (!isset($user['y']) or $user['y'] < 1) $user['y']=1;
257 if (!isset($user['x']) or $user['x'] < 1) $user['x']=1;
258 if ($user['x'] > 240) {
e8599c21 259 $user['y'] = (integer)($user['y']*240/$user['x']);
260 $user['x'] = 240;
261 }
2f678da1 262 if ($user['y'] > 300) {
e8599c21 263 $user['x'] = (integer)($user['x']*300/$user['y']);
264 $user['y'] = 300;
265 }
2f678da1 266 if ($user['x'] < 160) {
e8599c21 267 $user['y'] = (integer)($user['y']*160/$user['x']);
268 $user['x'] = 160;
269 }
270
54cabe90
VZ		 271 // Determines and displays the virtual alias.
272 global $globals;
08cce2ff 273 $res = XDB::query(
54cabe90
VZ		 274 "SELECT alias
275 FROM virtual
276 INNER JOIN virtual_redirect USING (vid)
277 INNER JOIN auth_user_quick ON (user_id = {?} AND emails_alias_pub = 'public')
278 WHERE (redirect={?} OR redirect={?})
279 AND alias LIKE '%@{$globals->mail->alias_dom}'",
280 $login->id(),
281 $login->forlifeEmail(),
282 // TODO(vzanotti): get ride of all @m4x.org addresses in the
283 // virtual redirect base, and remove this über-ugly hack.
284 $login->login() . '@' . $globals->mail->domain2);
e8599c21 285 $page->assign('virtualalias', $res->fetchOneCell());
54cabe90
VZ		 286
287 // Adds miscellaneous properties to the display.
288 // Adds the global user property array to the display.
289 $page->assign_by_ref('x', $user);
290 $page->assign_by_ref('user', $login);
291 $page->assign('logged', has_user_right('private', $view));
24f4c06a 292 $page->assign('view', $view);
e8599c21 293
c99ef281 294 $page->addJsLink('close_on_esc.js');
54cabe90
VZ		 295 if (isset($user['date'])) {
296 header('Last-Modified: ' . date('r', strtotime($user['date'])));
297 }
e8599c21 298 }
299
5122b820 300 function handler_ax(&$page, $user = null)
301 {
34ca2048 302 $user = User::get($user);
5122b820 303 if (!$user) {
304 return PL_NOT_FOUND;
305 }
34ca2048
VZ		 306
307 $res = XDB::query("SELECT matricule_ax
308 FROM auth_user_md5
309 WHERE user_id = {?}", $user->id());
5122b820 310 $mat = $res->fetchOneCell();
311 if (!intval($mat)) {
34ca2048 312 $page->kill("Le matricule AX de {$user->login()} est inconnu");
5122b820 313 }
314 http_redirect("http://www.polytechniciens.com/?page=AX_FICHE_ANCIEN&anc_id=$mat");
315 }
316
eb563236 317 function handler_p_edit(&$page, $opened_tab = null, $mode = null, $success = null)
2f678da1 318 {
319 global $globals;
320
e1635d16
FB		 321 // AX Synchronization
322 require_once 'synchro_ax.inc.php';
2f678da1 323 if (is_ax_key_missing()) {
324 $page->assign('no_private_key', true);
325 }
5e2307dc 326 if (Env::v('synchro_ax') == 'confirm' && !is_ax_key_missing()) {
b3bf7395 327 ax_synchronize(S::user()->login(), S::v('uid'));
a7d35093 328 $page->trigSuccess('Ton profil a été synchronisé avec celui du site polytechniciens.com');
2f678da1 329 }
330
7bff4cb0 331 // Build the page
c6a7beb2 332 $page->addJsLink('ajax.js');
46ae38a9
FB		 333 $page->addJsLink('applis.js');
334 $page->addJsLink('grades.js');
16594a1a 335 $page->addJsLink('profile.js');
4b4b4b67 336 $page->addJsLink('jquery.autocomplete.js');
6d20fb1d 337 $wiz = new PlWizard('Profil', PlPage::getCoreTpl('plwizard.tpl'), true, true);
460d8f55 338 $this->load('page.inc.php');
e1635d16 339 $wiz->addPage('ProfileGeneral', 'Général', 'general');
0b14f91d 340 $wiz->addPage('ProfileAddresses', 'Adresses personnelles', 'adresses');
e1635d16 341 $wiz->addPage('ProfileGroups', 'Groupes X - Binets', 'poly');
a7c28fff 342 $wiz->addPage('ProfileDecos', 'Décorations - Medailles', 'deco');
3950bc21 343 $wiz->addPage('ProfileJobs', 'Informations professionnelles', 'emploi');
e1635d16
FB		 344 $wiz->addPage('ProfileSkills', 'Compétences diverses', 'skill');
345 $wiz->addPage('ProfileMentor', 'Mentoring', 'mentor');
46ae38a9 346 $wiz->apply($page, 'profile/edit', $opened_tab, $mode);
35aedff2 347
7bff4cb0
FB		 348 // Misc checks
349 $res = XDB::query("SELECT user_id
350 FROM auth_user_md5
351 WHERE user_id = {?} AND naissance = '0000-00-00'", S::i('uid'));
352 if ($res->numRows()) {
a7d35093 353 $page->trigWarning("Ta date de naissance n'est pas renseignée, ce qui t'empêcheras de réaliser"
ec82a63f 354 . " la procédure de récupération de mot de passe si un jour tu le perdais.");
7bff4cb0
FB		 355 }
356
46f272fe 357 $page->setTitle('Mon Profil');
eb563236
SJ		 358 if (isset($success) && $success) {
359 $page->trigSuccess('Ton profil a bien été mis à jour.');
360 }
2f678da1 361 }
362
46ae38a9
FB		 363 function handler_applis_js(&$page)
364 {
365 header('Content-Type: text/javascript; charset=utf-8');
366 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
367 header('Last-Modified:' . gmdate('D, d M Y H:i:s') . ' GMT');
368 header('Cache-Control: no-cache, must-revalidate');
369 header('Pragma: no-cache');
370 $page->changeTpl('profile/applis.js.tpl', NO_SKIN);
371 require_once "applis.func.inc.php";
372 }
373
374 function handler_grades_js(&$page)
375 {
376 header('Content-Type: text/javascript; charset=utf-8');
377 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
378 header('Last-Modified:' . gmdate('D, d M Y H:i:s') . ' GMT');
379 header('Cache-Control: no-cache, must-revalidate');
380 header('Pragma: no-cache');
381 $page->changeTpl('profile/grades.js.tpl', NO_SKIN);
382 $res = XDB::iterator("SELECT *
383 FROM profile_medals_grades
384 ORDER BY mid, pos");
385 $grades = array();
386 while ($tmp = $res->next()) {
387 $grades[$tmp['mid']][] = $tmp;
388 }
389 $page->assign('grades', $grades);
390
391 $res = XDB::iterator("SELECT *, FIND_IN_SET('validation', flags) AS validate
392 FROM profile_medals
393 ORDER BY type, text");
394 $mlist = array();
395 while ($tmp = $res->next()) {
396 $mlist[$tmp['type']][] = $tmp;
397 }
398 $page->assign('medal_list', $mlist);
399 }
400
c6a7beb2
FB		 401 function handler_ajax_address(&$page, $adid)
402 {
46ae38a9 403 header('Content-Type: text/html; charset=utf-8');
c6a7beb2
FB		 404 $page->changeTpl('profile/adresses.address.tpl', NO_SKIN);
405 $page->assign('i', $adid);
406 $page->assign('adr', array());
c6a7beb2
FB		 407 }
408
409 function handler_ajax_tel(&$page, $adid, $telid)
410 {
46ae38a9 411 header('Content-Type: text/html; charset=utf-8');
c6a7beb2
FB		 412 $page->changeTpl('profile/adresses.tel.tpl', NO_SKIN);
413 $page->assign('i', $adid);
414 $page->assign('adid', "addresses_$adid");
415 $page->assign('adpref', "addresses[$adid]");
416 $page->assign('t', $telid);
417 $page->assign('tel', array());
c6a7beb2
FB		 418 }
419
85cc366b
FB		 420 function handler_ajax_medal(&$page, $id)
421 {
46ae38a9 422 header('Content-Type: text/html; charset=utf-8');
85cc366b
FB		 423 $page->changeTpl('profile/deco.medal.tpl', NO_SKIN);
424 $page->assign('id', $id);
425 $page->assign('medal', array('valid' => 0, 'grade' => 0));
85cc366b
FB		 426 }
427
2dcac0f5
FB		 428 function handler_ajax_job(&$page, $id)
429 {
46ae38a9 430 header('Content-Type: text/html; charset=utf-8');
2dcac0f5
FB		 431 $page->changeTpl('profile/jobs.job.tpl', NO_SKIN);
432 $page->assign('i', $id);
433 $page->assign('job', array());
2dcac0f5 434 $page->assign('new', true);
daa66175
SJ		 435 $res = XDB::query("SELECT id, label
436 FROM emploi_secteur");
437 $page->assign('secteurs', $res->fetchAllAssoc());
438 $res = XDB::query("SELECT id, fonction_fr, FIND_IN_SET('titre', flags) AS title
439 FROM fonctions_def
440 ORDER BY id");
441 $page->assign('fonctions', $res->fetchAllAssoc());
2dcac0f5
FB		 442 }
443
444 function handler_ajax_secteur(&$page, $id, $sect, $ssect = -1)
445 {
46ae38a9 446 header('Content-Type: text/html; charset=utf-8');
2dcac0f5
FB		 447 $res = XDB::iterator("SELECT id, label
448 FROM emploi_ss_secteur
449 WHERE secteur = {?}", $sect);
450 $page->changeTpl('profile/jobs.secteur.tpl', NO_SKIN);
451 $page->assign('id', $id);
452 $page->assign('ssecteurs', $res);
453 $page->assign('sel', $ssect);
454 }
455
f25e1a56
FB		 456 function handler_ajax_skill(&$page, $cat, $id)
457 {
46ae38a9 458 header('Content-Type: text/html; charset=utf-8');
f25e1a56 459 $page->changeTpl('profile/skill.skill.tpl', NO_SKIN);
f25e1a56
FB		 460 $page->assign('cat', $cat);
461 $page->assign('id', $id);
462 if ($cat == 'competences') {
463 $page->assign('levels', array('initié' => 'initié',
464 'bonne connaissance' => 'bonne connaissance',
465 'expert' => 'expert'));
466 } else {
467 $page->assign('levels', array(1 => 'connaissance basique',
468 2 => 'maîtrise des bases',
469 3 => 'maîtrise limitée',
470 4 => 'maîtrise générale',
471 5 => 'bonne maîtrise',
472 6 => 'maîtrise complète'));
473 }
474 }
475
9b0fa329 476 function handler_p_orange(&$page)
477 {
8b1f8e12 478 $page->changeTpl('profile/orange.tpl');
9b0fa329 479
480 require_once 'validations.inc.php';
9b0fa329 481
08cce2ff 482 $res = XDB::query(
2f678da1 483 "SELECT u.promo, u.promo_sortie
9b0fa329 484 FROM auth_user_md5 AS u
cab08090 485 WHERE user_id={?}", S::v('uid'));
9b0fa329 486
2f678da1 487 list($promo, $promo_sortie_old) = $res->fetchOneRow();
9b0fa329 488 $page->assign('promo_sortie_old', $promo_sortie_old);
489 $page->assign('promo', $promo);
490
491 if (!Env::has('promo_sortie')) {
fd8f77de 492 return;
8827fc52
VZ		 493 } else {
494 S::assert_xsrf_token();
9b0fa329 495 }
496
5e2307dc 497 $promo_sortie = Env::i('promo_sortie');
9b0fa329 498
499 if ($promo_sortie < 1000 || $promo_sortie > 9999) {
a7d35093 500 $page->trigError('L\'année de sortie doit être un nombre de quatre chiffres');
9b0fa329 501 }
502 elseif ($promo_sortie < $promo + 3) {
a7d35093 503 $page->trigError('Trop tôt');
9b0fa329 504 }
505 elseif ($promo_sortie == $promo_sortie_old) {
a7d35093 506 $page->trigWarning('Tu appartiens déjà à la promotion correspondante à cette année de sortie.');
9b0fa329 507 }
508 elseif ($promo_sortie == $promo + 3) {
08cce2ff 509 XDB::execute(
e1635d16 510 "UPDATE auth_user_md5 set promo_sortie={?}
cab08090 511 WHERE user_id={?}", $promo_sortie, S::v('uid'));
a7d35093 512 $page->trigSuccess('Ton statut "orange" a été supprimé.');
9b0fa329 513 $page->assign('promo_sortie_old', $promo_sortie);
514 }
515 else {
516 $page->assign('promo_sortie', $promo_sortie);
517
518 if (Env::has('submit')) {
5daf68f6 519 $myorange = new OrangeReq(S::user(), $promo_sortie);
9b0fa329 520 $myorange->submit();
521 $page->assign('myorange', $myorange);
522 }
523 }
9b0fa329 524 }
525
2f678da1 526 function handler_referent(&$page, $x = null)
28e16d4d 527 {
28e16d4d 528 require_once 'user.func.inc.php';
8b1f8e12 529 $page->changeTpl('profile/fiche_referent.tpl', SIMPLE);
28e16d4d 530
b3bf7395
VZ		 531 $user = User::get($x);
532 if ($user == null) {
28e16d4d 533 return PL_NOT_FOUND;
534 }
535
b3bf7395
VZ		 536 $res = XDB::query("SELECT cv FROM auth_user_md5 WHERE user_id = {?}", $user->id());
537 $cv = $res->fetchOneCell();
28e16d4d 538
b3bf7395
VZ		 539 $page->assign_by_ref('user', $user);
540 $page->assign('cv', MiniWiki::WikiToHTML($cv, true));
541 $page->assign('adr_pro', get_user_details_pro($user->id()));
28e16d4d 542
543 ///// recuperations infos referent
544
545 //expertise
b3bf7395 546 $res = XDB::query("SELECT expertise FROM mentor WHERE uid = {?}", $user->id());
28e16d4d 547 $page->assign('expertise', $res->fetchOneCell());
548
549 //secteurs
550 $secteurs = $ss_secteurs = Array();
08cce2ff 551 $res = XDB::iterRow(
28e16d4d 552 "SELECT s.label, ss.label
553 FROM mentor_secteurs AS m
554 LEFT JOIN emploi_secteur AS s ON(m.secteur = s.id)
555 LEFT JOIN emploi_ss_secteur AS ss ON(m.secteur = ss.secteur AND m.ss_secteur = ss.id)
b3bf7395 556 WHERE uid = {?}", $user->id());
28e16d4d 557 while (list($sec, $ssec) = $res->next()) {
558 $secteurs[] = $sec;
559 $ss_secteurs[] = $ssec;
560 }
561 $page->assign_by_ref('secteurs', $secteurs);
562 $page->assign_by_ref('ss_secteurs', $ss_secteurs);
563
564 //pays
08cce2ff 565 $res = XDB::query(
28e16d4d 566 "SELECT gp.pays
567 FROM mentor_pays AS m
568 LEFT JOIN geoloc_pays AS gp ON(m.pid = gp.a2)
b3bf7395 569 WHERE uid = {?}", $user->id());
28e16d4d 570 $page->assign('pays', $res->fetchColumn());
571
c99ef281 572 $page->addJsLink('close_on_esc.js');
28e16d4d 573 }
574
ff3eb9b7 575 function handler_ref_search(&$page, $action = null, $subaction = null)
2f678da1 576 {
8f201b69
FB		 577 $wp = new PlWikiPage('Docs.Emploi');
578 $wp->buildCache();
579
46f272fe 580 $page->setTitle('Conseil Pro');
2f678da1 581
2f678da1 582 //recuperation des noms de secteurs
08cce2ff 583 $res = XDB::iterRow("SELECT id, label FROM emploi_secteur");
2f678da1 584 $secteurs[''] = '';
585 while (list($tmp_id, $tmp_label) = $res->next()) {
586 $secteurs[$tmp_id] = $tmp_label;
587 }
588 $page->assign_by_ref('secteurs', $secteurs);
589
2f678da1 590 // nb de mentors
08cce2ff 591 $res = XDB::query("SELECT count(*) FROM mentor");
2f678da1 592 $page->assign('mentors_number', $res->fetchOneCell());
593
2f678da1 594 // On vient d'un formulaire
ff3eb9b7 595 $where = array();
596 $pays_sel = XDB::escape(Env::v('pays_sel'));
597 $secteur_sel = XDB::escape(Env::v('secteur'));
598 $ss_secteur_sel = XDB::escape(Env::v('ss_secteur'));
599 $expertise_champ = XDB::escape(Env::v('expertise'));
600
601 if ($pays_sel != "''") {
602 $where[] = "mp.pid = $pays_sel";
603 }
604 if ($secteur_sel != "''") {
605 $where[] = "ms.secteur = $secteur_sel";
606 if ($ss_secteur_sel != "''") {
607 $where[] = "ms.ss_secteur = $ss_secteur_sel";
2f678da1 608 }
609 }
ff3eb9b7 610 if ($expertise_champ != "''") {
611 $where[] = "MATCH(m.expertise) AGAINST($expertise_champ)";
2f678da1 612 }
613
614 if ($where) {
615 $where = join(' AND ', $where);
616
e1635d16
FB		 617 $set = new UserSet("INNER JOIN mentor AS m ON (m.uid = u.user_id)
618 LEFT JOIN mentor_pays AS mp ON (mp.uid = m.uid)
ff3eb9b7 619 LEFT JOIN mentor_secteurs AS ms ON (ms.uid = m.uid)",
620 $where);
621 $set->addMod('mentor', 'Référents');
622 $set->apply('referent/search', $page, $action, $subaction);
623 if ($set->count() > 100) {
e1635d16 624 $page->assign('recherche_trop_large', true);
2f678da1 625 }
ff3eb9b7 626 }
e1635d16 627 $page->changeTpl('profile/referent.tpl');
ff3eb9b7 628 }
2f678da1 629
e1635d16 630 function handler_ref_sect(&$page, $sect)
ff3eb9b7 631 {
632 header('Content-Type: text/html; charset=utf-8');
05cb05c0 633 $page->changeTpl('include/field.select.tpl', NO_SKIN);
ff3eb9b7 634 $page->assign('onchange', 'setSSecteurs()');
635 $page->assign('id', 'ssect_field');
636 $page->assign('name', 'ss_secteur');
637 $it = XDB::iterator("SELECT id,label AS field
e1635d16 638 FROM emploi_ss_secteur
ff3eb9b7 639 WHERE secteur = {?}", $sect);
640 $page->assign('list', $it);
641 }
2f678da1 642
ff3eb9b7 643 function handler_ref_country(&$page, $sect, $ssect = '')
644 {
645 header('Content-Type: text/html; charset=utf-8');
05cb05c0 646 $page->changeTpl('include/field.select.tpl', NO_SKIN);
ff3eb9b7 647 $page->assign('name', 'pays_sel');
648 $where = ($ssect ? ' AND ms.ss_secteur = {?}' : '');
649 $it = XDB::iterator("SELECT a2 AS id, pays AS field
650 FROM geoloc_pays AS g
651 INNER JOIN mentor_pays AS mp ON (mp.pid = g.a2)
652 INNER JOIN mentor_secteurs AS ms ON (ms.uid = mp.uid)
653 WHERE ms.secteur = {?} $where
654 GROUP BY a2
655 ORDER BY pays", $sect, $ssect);
656 $page->assign('list', $it);
2f678da1 657 }
658
926f16d7 659 function handler_p_usage(&$page)
660 {
8b1f8e12 661 $page->changeTpl('profile/nomusage.tpl');
926f16d7 662
663 require_once 'validations.inc.php';
926f16d7 664
08cce2ff 665 $res = XDB::query(
2f678da1 666 "SELECT u.nom, u.nom_usage, u.flags, e.alias
926f16d7 667 FROM auth_user_md5 AS u
2f678da1 668 LEFT JOIN aliases AS e ON(u.user_id = e.id
669 AND FIND_IN_SET('usage', e.flags))
cab08090 670 WHERE user_id={?}", S::v('uid'));
926f16d7 671
2f678da1 672 list($nom, $usage_old, $flags, $alias_old) = $res->fetchOneRow();
113f6de8 673 $flags = new PlFlagSet($flags);
926f16d7 674 $page->assign('usage_old', $usage_old);
675 $page->assign('alias_old', $alias_old);
676
e1635d16 677 $nom_usage = replace_accent(trim(Env::v('nom_usage')));
926f16d7 678 $nom_usage = strtoupper($nom_usage);
679 $page->assign('usage_req', $nom_usage);
680
681 if (Env::has('submit') && ($nom_usage != $usage_old)) {
8827fc52
VZ		 682 S::assert_xsrf_token();
683
926f16d7 684 // on vient de recevoir une requete, differente de l'ancien nom d'usage
685 if ($nom_usage == $nom) {
44b071c2
SJ		 686 $page->trigWarning('Le nom d\'usage que tu demandes est identique à ton nom à l\'X, '
687 . 'aucune modification n\'a donc été effectuée.');
926f16d7 688 $page->assign('same', true);
a7de4ef7 689 } else { // le nom de mariage est distinct du nom à l'X
926f16d7 690 // on calcule l'alias pour l'afficher
5e2307dc 691 $reason = Env::v('reason');
926f16d7 692 if ($reason == 'other') {
5e2307dc 693 $reason = Env::v('other_reason');
926f16d7 694 }
5daf68f6 695 $myusage = new UsageReq(S::user(), $nom_usage, $reason);
926f16d7 696 $myusage->submit();
697 $page->assign('myusage', $myusage);
698 }
699 }
926f16d7 700 }
701
a1d79217 702 function handler_xnet(&$page)
703 {
8b1f8e12 704 $page->changeTpl('profile/groupesx.tpl');
46f272fe 705 $page->setTitle('Promo, Groupes X, Binets');
e1635d16 706
a1d79217 707 $req = XDB::query('
e1635d16 708 SELECT m.asso_id, a.nom, diminutif, a.logo IS NOT NULL AS has_logo,
46e1d3ba 709 COUNT(e.eid) AS events, mail_domain AS lists
e1635d16 710 FROM groupex.membres AS m
46e1d3ba 711 INNER JOIN groupex.asso AS a ON(m.asso_id = a.id)
712 LEFT JOIN groupex.evenements AS e ON(e.asso_id = m.asso_id AND e.archive = 0)
713 WHERE uid = {?} GROUP BY m.asso_id ORDER BY a.nom', S::i('uid'));
a1d79217 714 $page->assign('assos', $req->fetchAllAssoc());
715 }
e1635d16 716
e49018a7 717 function handler_vcard(&$page, $x = null)
718 {
719 if (is_null($x)) {
720 return PL_NOT_FOUND;
721 }
722
723 global $globals;
724
725 if (substr($x, -4) == '.vcf') {
726 $x = substr($x, 0, strlen($x) - 4);
727 }
728
5d42c993
FB		 729 $vcard = new VCard();
730 $vcard->addUser($x);
731 $vcard->show();
e49018a7 732 }
92423144 733
54cabe90 734 function handler_admin_trombino(&$page, $login = null, $action = null) {
8b1f8e12 735 $page->changeTpl('profile/admin_trombino.tpl');
46f272fe 736 $page->setTitle('Administration - Trombino');
e1635d16 737
54cabe90
VZ		 738 if (!$login || !($user = User::get($login))) {
739 return PL_NOT_FOUND;
740 } else {
741 $page->assign_by_ref('user', $user);
742 }
e1635d16 743
92423144 744 switch ($action) {
92423144 745 case "original":
746 header("Content-type: image/jpeg");
54cabe90 747 readfile("/home/web/trombino/photos" . $user->promo() . "/" . $user->login() . ".jpg");
92423144 748 exit;
749 break;
e1635d16 750
92423144 751 case "new":
8827fc52
VZ		 752 S::assert_xsrf_token();
753
92423144 754 $data = file_get_contents($_FILES['userfile']['tmp_name']);
755 list($x, $y) = getimagesize($_FILES['userfile']['tmp_name']);
756 $mimetype = substr($_FILES['userfile']['type'], 6);
757 unlink($_FILES['userfile']['tmp_name']);
758 XDB::execute(
759 "REPLACE INTO photo SET uid={?}, attachmime = {?}, attach={?}, x={?}, y={?}",
54cabe90 760 $user->id(), $mimetype, $data, $x, $y);
92423144 761 break;
e1635d16 762
92423144 763 case "delete":
8827fc52
VZ		 764 S::assert_xsrf_token();
765
54cabe90 766 XDB::execute('DELETE FROM photo WHERE uid = {?}', $user->id());
92423144 767 break;
768 }
92423144 769 }
770 function handler_admin_binets(&$page, $action = 'list', $id = null) {
46f272fe 771 $page->setTitle('Administration - Binets');
92423144 772 $page->assign('title', 'Gestion des binets');
773 $table_editor = new PLTableEditor('admin/binets', 'binets_def', 'id');
774 $table_editor->add_join_table('binets_ins','binet_id',true);
a7de4ef7 775 $table_editor->describe('text','intitulé',true);
92423144 776 $table_editor->apply($page, $action, $id);
777 }
778 function handler_admin_formations(&$page, $action = 'list', $id = null) {
46f272fe 779 $page->setTitle('Administration - Formations');
92423144 780 $page->assign('title', 'Gestion des formations');
781 $table_editor = new PLTableEditor('admin/formations','applis_def','id');
e1635d16 782 $table_editor->add_join_table('applis_ins','aid',true);
a7de4ef7 783 $table_editor->describe('text','intitulé',true);
92423144 784 $table_editor->describe('url','site web',false);
785 $table_editor->apply($page, $action, $id);
e1635d16 786 }
b09690be 787 function handler_admin_sections(&$page, $action = 'list', $id = null) {
46f272fe 788 $page->setTitle('Administration - Sections');
a20aab02 789 $page->assign('title', 'Gestion des sections');
b09690be 790 $table_editor = new PLTableEditor('admin/sections','sections','id');
791 $table_editor->describe('text','intitulé',true);
792 $table_editor->apply($page, $action, $id);
e1635d16 793 }
a20aab02 794 function handler_admin_ss_secteurs(&$page, $action = 'list', $id = null) {
46f272fe 795 $page->setTitle('Administration - Sous-secteurs');
a20aab02
SJ		 796 $page->assign('title', 'Gestion des sous-secteurs');
797 $table_editor = new PLTableEditor('admin/ss_secteurs', 'emploi_ss_secteur', 'id', true);
798 $table_editor->describe('label', 'intitulé', true);
799 $table_editor->apply($page, $action, $id);
800 }
801 function handler_admin_fonctions(&$page, $action = 'list', $id = null) {
46f272fe 802 $page->setTitle('Administration - Fonctions');
a20aab02
SJ		 803 $page->assign('title', 'Gestion des fonctions');
804 $table_editor = new PLTableEditor('admin/fonctions', 'fonctions_def', 'id', true);
805 $table_editor->describe('fonction_fr', 'intitulé', true);
806 $table_editor->describe('fonction_en', 'intitulé (ang)', true);
807 $table_editor->describe('flags', 'titre', true);
808 $table_editor->apply($page, $action, $id);
809 }
b09690be 810 function handler_admin_secteurs(&$page, $action = 'list', $id = null) {
46f272fe 811 $page->setTitle('Administration - Secteurs');
a20aab02
SJ		 812 $page->assign('title', 'Gestion des secteurs');
813 $table_editor = new PLTableEditor('admin/secteurs', 'emploi_secteur', 'id', true);
814 $table_editor->describe('label', 'intitulé', true);
b09690be 815 $table_editor->apply($page, $action, $id);
e1635d16 816 }
92423144 817 function handler_admin_medals(&$page, $action = 'list', $id = null) {
46f272fe 818 $page->setTitle('Administration - Distinctions');
92423144 819 $page->assign('title', 'Gestion des Distinctions');
820 $table_editor = new PLTableEditor('admin/medals','profile_medals','id');
a7de4ef7 821 $table_editor->describe('text', 'intitulé', true);
92423144 822 $table_editor->describe('img', 'nom de l\'image', false);
d02b8359 823 $table_editor->describe('flags', 'valider', true);
92423144 824 $table_editor->apply($page, $action, $id);
825 if ($id && $action == 'edit') {
8b1f8e12 826 $page->changeTpl('profile/admin_decos.tpl');
e1635d16 827
92423144 828 $mid = $id;
e1635d16 829
92423144 830 if (Post::v('act') == 'del') {
75a17710
FB		 831 XDB::execute('DELETE FROM profile_medals_grades
832 WHERE mid={?} AND gid={?}', $mid, Post::i('gid'));
92423144 833 } else {
834 foreach (Post::v('grades', array()) as $gid=>$text) {
154ee23a
OLF		 835 if ($gid === 0) {
836 if (!empty($text)) {
837 $res = XDB::query('SELECT MAX(gid)
838 FROM profile_medals_grades
839 WHERE mid = {?}', $mid);
840 $gid = $res->fetchOneCell() + 1;
841
842 XDB::execute('INSERT INTO profile_medals_grades (mid, gid, text, pos)
843 VALUES ({?}, {?}, {?}, {?})',
844 $mid, $gid, $text, $_POST['pos']['0']);
845 }
846 } else {
847 XDB::execute('UPDATE profile_medals_grades
848 SET pos={?}, text={?}
849 WHERE gid={?} AND mid={?}', $_POST['pos'][$gid], $text, $gid, $mid);
850 }
92423144 851 }
852 }
853 $res = XDB::iterator('SELECT gid, text, pos FROM profile_medals_grades WHERE mid={?} ORDER BY pos', $mid);
854 $page->assign('grades', $res);
855 }
e1635d16 856 }
7d8b17cb 857}
858
a7de4ef7 859// vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
7d8b17cb 860?>
plat/al