projects / platal.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Ooops, cf ad75c91.
[platal.git] / modules / profile.php
CommitLineData
7d8b17cb 1<?php
2/***************************************************************************
8d84c630 3 * Copyright (C) 2003-2009 Polytechnique.org *
7d8b17cb 4 * http://opensource.polytechnique.org/ *
5 * *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
10 * *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
15 * *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
18 * Foundation, Inc., *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
21
22class ProfileModule extends PLModule
23{
24 function handlers()
25 {
26 return array(
eb5a266d
SJ		 27 'photo' => $this->make_hook('photo', AUTH_PUBLIC),
28 'photo/change' => $this->make_hook('photo_change', AUTH_MDP),
e49018a7 29
eb5a266d
SJ		 30 'fiche.php' => $this->make_hook('fiche', AUTH_PUBLIC),
31 'profile' => $this->make_hook('profile', AUTH_PUBLIC),
32 'profile/private' => $this->make_hook('profile', AUTH_COOKIE),
33 'profile/ax' => $this->make_hook('ax', AUTH_COOKIE, 'admin'),
34 'profile/edit' => $this->make_hook('p_edit', AUTH_MDP),
35 'profile/ajax/address' => $this->make_hook('ajax_address', AUTH_COOKIE, 'user', NO_AUTH),
36 'profile/ajax/tel' => $this->make_hook('ajax_tel', AUTH_COOKIE, 'user', NO_AUTH),
37 'profile/ajax/medal' => $this->make_hook('ajax_medal', AUTH_COOKIE, 'user', NO_AUTH),
38 'profile/ajax/job' => $this->make_hook('ajax_job', AUTH_COOKIE, 'user', NO_AUTH),
39 'profile/ajax/secteur' => $this->make_hook('ajax_secteur', AUTH_COOKIE, 'user', NO_AUTH),
40 'profile/ajax/skill' => $this->make_hook('ajax_skill', AUTH_COOKIE, 'user', NO_AUTH),
41 'javascript/applis.js' => $this->make_hook('applis_js', AUTH_COOKIE),
42 'javascript/grades.js' => $this->make_hook('grades_js', AUTH_COOKIE),
43 'profile/medal' => $this->make_hook('medal', AUTH_PUBLIC),
44 'profile/orange' => $this->make_hook('p_orange', AUTH_MDP),
45 'profile/usage' => $this->make_hook('p_usage', AUTH_MDP),
e49018a7 46
eb5a266d
SJ		 47 'referent' => $this->make_hook('referent', AUTH_COOKIE),
48 'emploi' => $this->make_hook('ref_search', AUTH_COOKIE),
49 'referent/search' => $this->make_hook('ref_search', AUTH_COOKIE),
50 'referent/ssect' => $this->make_hook('ref_sect', AUTH_COOKIE, 'user', NO_AUTH),
51 'referent/country' => $this->make_hook('ref_country', AUTH_COOKIE, 'user', NO_AUTH),
2f678da1 52
eb5a266d 53 'groupes-x' => $this->make_hook('xnet', AUTH_COOKIE),
926f16d7 54
9db0a440 55 'vcard' => $this->make_hook('vcard', AUTH_COOKIE),
eb5a266d
SJ		 56 'admin/binets' => $this->make_hook('admin_binets', AUTH_MDP, 'admin'),
57 'admin/medals' => $this->make_hook('admin_medals', AUTH_MDP, 'admin'),
58 'admin/formations' => $this->make_hook('admin_formations', AUTH_MDP, 'admin'),
59 'admin/sections' => $this->make_hook('admin_sections', AUTH_MDP, 'admin'),
60 'admin/secteurs' => $this->make_hook('admin_secteurs', AUTH_MDP, 'admin'),
61 'admin/trombino' => $this->make_hook('admin_trombino', AUTH_MDP, 'admin'),
62 'admin/ss_secteurs' => $this->make_hook('admin_ss_secteurs', AUTH_MDP, 'admin'),
63 'admin/fonctions' => $this->make_hook('admin_fonctions', AUTH_MDP, 'admin'),
92423144 64
7d8b17cb 65 );
66 }
67
e8599c21 68 /* XXX COMPAT */
69 function handler_fiche(&$page)
70 {
5e2307dc 71 return $this->handler_profile($page, Env::v('user'));
e8599c21 72 }
73
adbdf493 74 function handler_photo(&$page, $x = null, $req = null)
75 {
954cfb01 76 if (!$x || !($user = User::getSilent($x))) {
adbdf493 77 return PL_NOT_FOUND;
78 }
79
954cfb01
VZ		 80 // Retrieve the photo and its mime type.
81 $photo_data = null;
82 $photo_type = null;
adbdf493 83
cab08090 84 if ($req && S::logged()) {
adbdf493 85 include 'validations.inc.php';
954cfb01
VZ		 86 $myphoto = PhotoReq::get_request($user->id());
87 if ($myphoto) {
88 $photo_data = $myphoto->data;
89 $photo_type = $myphoto->mimetype;
90 }
adbdf493 91 } else {
08cce2ff 92 $res = XDB::query(
954cfb01 93 "SELECT attachmime, attach, pub
adbdf493 94 FROM photo
954cfb01
VZ		 95 WHERE uid = {?}", $user->id());
96 list($photo_type, $photo_data, $photo_pub) = $res->fetchOneRow();
97 if ($photo_pub != 'public' && !S::logged()) {
98 $photo_type = $photo_data = null;
adbdf493 99 }
100 }
954cfb01
VZ		 101
102 // Display the photo, or a default one when not available.
103 if ($photo_type && $photo_data != null) {
104 header('Content-type: image/' . $photo_type);
105 echo $photo_data;
106 } else {
107 header('Content-type: image/png');
108 echo file_get_contents(dirname(__FILE__).'/../htdocs/images/none.png');
109 }
adbdf493 110 exit;
111 }
112
85cc366b
FB		 113 function handler_medal(&$page, $mid)
114 {
bd6a5fe3
VZ		 115 $thumb = ($mid == 'thumb');
116 $mid = $thumb ? @func_get_arg(2) : $mid;
117
85cc366b
FB		 118 $res = XDB::query("SELECT img
119 FROM profile_medals
120 WHERE id = {?}",
121 $mid);
bd6a5fe3
VZ		 122 $img = $thumb ?
123 dirname(__FILE__).'/../htdocs/images/medals/thumb/' . $res->fetchOneCell() :
124 dirname(__FILE__).'/../htdocs/images/medals/' . $res->fetchOneCell();
85cc366b
FB		 125 $type = mime_content_type($img);
126 header("Content-Type: $type");
127 echo file_get_contents($img);
128 exit;
129 }
130
fb9a56cb 131 function handler_photo_change(&$page)
132 {
ebfdf077 133 global $globals;
8b1f8e12 134 $page->changeTpl('profile/trombino.tpl');
fb9a56cb 135
136 require_once('validations.inc.php');
137
54cabe90 138 $trombi_x = '/home/web/trombino/photos' . S::v('promo') . '/' . S::user()->login() . '.jpg';
fb9a56cb 139 if (Env::has('upload')) {
8827fc52
VZ		 140 S::assert_xsrf_token();
141
954cfb01 142 $upload = new PlUpload(S::user()->login(), 'photo');
abe7e055 143 if (!$upload->upload($_FILES['userfile']) && !$upload->download(Env::v('photo'))) {
a7d35093 144 $page->trigError('Une erreur est survenue lors du téléchargement du fichier');
abe7e055 145 } else {
5daf68f6 146 $myphoto = new PhotoReq(S::user(), $upload);
abe7e055 147 if ($myphoto->isValid()) {
148 $myphoto->submit();
fb9a56cb 149 }
fb9a56cb 150 }
151 } elseif (Env::has('trombi')) {
8827fc52
VZ		 152 S::assert_xsrf_token();
153
954cfb01 154 $upload = new PlUpload(S::user()->login(), 'photo');
abe7e055 155 if ($upload->copyFrom($trombi_x)) {
5daf68f6 156 $myphoto = new PhotoReq(S::user(), $upload);
abe7e055 157 if ($myphoto->isValid()) {
158 $myphoto->commit();
159 $myphoto->clean();
160 }
fb9a56cb 161 }
5e2307dc 162 } elseif (Env::v('suppr')) {
8827fc52
VZ		 163 S::assert_xsrf_token();
164
84868ee9
FB		 165 XDB::execute('DELETE FROM photo
166 WHERE uid = {?}',
167 S::v('uid'));
168 XDB::execute('DELETE FROM requests
169 WHERE user_id = {?} AND type="photo"',
170 S::v('uid'));
ebfdf077 171 $globals->updateNbValid();
5e2307dc 172 } elseif (Env::v('cancel')) {
8827fc52
VZ		 173 S::assert_xsrf_token();
174
84868ee9
FB		 175 $sql = XDB::query('DELETE FROM requests
176 WHERE user_id={?} AND type="photo"',
177 S::v('uid'));
ebfdf077 178 $globals->updateNbValid();
fb9a56cb 179 }
180
84868ee9
FB		 181 $sql = XDB::query('SELECT COUNT(*)
182 FROM requests
183 WHERE user_id={?} AND type="photo"',
abe7e055 184 S::v('uid'));
fb9a56cb 185 $page->assign('submited', $sql->fetchOneCell());
186 $page->assign('has_trombi_x', file_exists($trombi_x));
fb9a56cb 187 }
188
e8599c21 189 function handler_profile(&$page, $x = null)
190 {
54cabe90
VZ		 191 // TODO/note for upcoming developers:
192 // We currently maintain both $user and $login; $user is the old way of
193 // obtaining information, and eventually everything will be loaded
194 // through $login. That is the reason why in the template $user is named
195 // $x, and $login $user (sorry for the confusion).
196
197 // Determines which user to display the profile of, and retrieves basic
198 // information on this user.
e8599c21 199 if (is_null($x)) {
200 return PL_NOT_FOUND;
201 }
202
344234db
VZ		 203 $login = S::logged() ? User::get($x) : User::getSilent($x);
204 if (!$login) {
205 return PL_NOT_FOUND;
e8599c21 206 }
207
54cabe90
VZ		 208 // Now that we know this is the profile of an existing user, we can
209 // switch to the appropriate template.
210 $page->changeTpl('profile/profile.tpl', SIMPLE);
211 require_once 'user.func.inc.php';
212
213 // Determines the access level at which the profile will be displayed.
214 if (!S::logged() || Env::v('view') == 'public') {
215 $view = 'public';
216 } else if (S::logged() && Env::v('view') == 'ax') {
217 $view = 'ax';
218 } else {
219 $view = 'private';
220 }
221
222 // Determines is the user is registered, and fetches the user infos in
223 // the appropriate way.
344234db
VZ		 224 $res = XDB::query("SELECT perms IN ('admin','user','disabled')
225 FROM auth_user_md5
226 WHERE user_id = {?}", $login->id());
54cabe90
VZ		 227 if ($res->fetchOneCell()) {
228 $new = Env::v('modif') == 'new';
229 $user = get_user_details($login->login(), S::v('uid'), $view);
230 } else {
231 $new = false;
232 $user = array();
ba25f663 233 if (S::logged()) {
54cabe90 234 pl_redirect('marketing/public/' . $login->login());
ba25f663 235 }
e8599c21 236 }
ba25f663 237
54cabe90 238 // Profile view are logged.
e31c1c3e 239 if (S::logged()) {
b8971a3e 240 S::logger()->log('view_profile', $login->login());
e31c1c3e 241 }
e8599c21 242
54cabe90
VZ		 243 // Sets the title of the html page.
244 $page->setTitle($login->fullName());
e8599c21 245
54cabe90
VZ		 246 // Prepares the display of the user's mugshot.
247 $photo = 'photo/' . $login->login() . ($new ? '/req' : '');
248 if (!isset($user['photo_pub']) || !has_user_right($user['photo_pub'], $view)) {
249 $photo = "";
250 }
251 $page->assign('photo_url', $photo);
e8599c21 252
2f678da1 253 if (!isset($user['y']) and !isset($user['x'])) {
e8599c21 254 list($user['x'], $user['y']) = getimagesize("images/none.png");
255 }
2f678da1 256 if (!isset($user['y']) or $user['y'] < 1) $user['y']=1;
257 if (!isset($user['x']) or $user['x'] < 1) $user['x']=1;
258 if ($user['x'] > 240) {
e8599c21 259 $user['y'] = (integer)($user['y']*240/$user['x']);
260 $user['x'] = 240;
261 }
2f678da1 262 if ($user['y'] > 300) {
e8599c21 263 $user['x'] = (integer)($user['x']*300/$user['y']);
264 $user['y'] = 300;
265 }
2f678da1 266 if ($user['x'] < 160) {
e8599c21 267 $user['y'] = (integer)($user['y']*160/$user['x']);
268 $user['x'] = 160;
269 }
270
54cabe90
VZ		 271 // Determines and displays the virtual alias.
272 global $globals;
08cce2ff 273 $res = XDB::query(
54cabe90
VZ		 274 "SELECT alias
275 FROM virtual
276 INNER JOIN virtual_redirect USING (vid)
277 INNER JOIN auth_user_quick ON (user_id = {?} AND emails_alias_pub = 'public')
278 WHERE (redirect={?} OR redirect={?})
279 AND alias LIKE '%@{$globals->mail->alias_dom}'",
280 $login->id(),
281 $login->forlifeEmail(),
282 // TODO(vzanotti): get ride of all @m4x.org addresses in the
283 // virtual redirect base, and remove this über-ugly hack.
284 $login->login() . '@' . $globals->mail->domain2);
e8599c21 285 $page->assign('virtualalias', $res->fetchOneCell());
54cabe90
VZ		 286
287 // Adds miscellaneous properties to the display.
288 // Adds the global user property array to the display.
289 $page->assign_by_ref('x', $user);
290 $page->assign_by_ref('user', $login);
291 $page->assign('logged', has_user_right('private', $view));
24f4c06a 292 $page->assign('view', $view);
e8599c21 293
c99ef281 294 $page->addJsLink('close_on_esc.js');
54cabe90
VZ		 295 if (isset($user['date'])) {
296 header('Last-Modified: ' . date('r', strtotime($user['date'])));
297 }
e8599c21 298 }
299
5122b820 300 function handler_ax(&$page, $user = null)
301 {
34ca2048 302 $user = User::get($user);
5122b820 303 if (!$user) {
304 return PL_NOT_FOUND;
305 }
34ca2048
VZ		 306
307 $res = XDB::query("SELECT matricule_ax
308 FROM auth_user_md5
309 WHERE user_id = {?}", $user->id());
5122b820 310 $mat = $res->fetchOneCell();
311 if (!intval($mat)) {
34ca2048 312 $page->kill("Le matricule AX de {$user->login()} est inconnu");
5122b820 313 }
314 http_redirect("http://www.polytechniciens.com/?page=AX_FICHE_ANCIEN&anc_id=$mat");
315 }
316
46ae38a9 317 function handler_p_edit(&$page, $opened_tab = null, $mode = null)
2f678da1 318 {
319 global $globals;
320
e1635d16
FB		 321 // AX Synchronization
322 require_once 'synchro_ax.inc.php';
2f678da1 323 if (is_ax_key_missing()) {
324 $page->assign('no_private_key', true);
325 }
5e2307dc 326 if (Env::v('synchro_ax') == 'confirm' && !is_ax_key_missing()) {
b3bf7395 327 ax_synchronize(S::user()->login(), S::v('uid'));
a7d35093 328 $page->trigSuccess('Ton profil a été synchronisé avec celui du site polytechniciens.com');
2f678da1 329 }
330
7bff4cb0 331 // Build the page
c6a7beb2 332 $page->addJsLink('ajax.js');
46ae38a9
FB		 333 $page->addJsLink('applis.js');
334 $page->addJsLink('grades.js');
16594a1a 335 $page->addJsLink('profile.js');
4b4b4b67 336 $page->addJsLink('jquery.autocomplete.js');
6d20fb1d 337 $wiz = new PlWizard('Profil', PlPage::getCoreTpl('plwizard.tpl'), true, true);
460d8f55 338 $this->load('page.inc.php');
e1635d16 339 $wiz->addPage('ProfileGeneral', 'Général', 'general');
0b14f91d 340 $wiz->addPage('ProfileAddresses', 'Adresses personnelles', 'adresses');
e1635d16 341 $wiz->addPage('ProfileGroups', 'Groupes X - Binets', 'poly');
a7c28fff 342 $wiz->addPage('ProfileDecos', 'Décorations - Medailles', 'deco');
3950bc21 343 $wiz->addPage('ProfileJobs', 'Informations professionnelles', 'emploi');
e1635d16
FB		 344 $wiz->addPage('ProfileSkills', 'Compétences diverses', 'skill');
345 $wiz->addPage('ProfileMentor', 'Mentoring', 'mentor');
46ae38a9 346 $wiz->apply($page, 'profile/edit', $opened_tab, $mode);
35aedff2 347
7bff4cb0
FB		 348 // Misc checks
349 $res = XDB::query("SELECT user_id
350 FROM auth_user_md5
351 WHERE user_id = {?} AND naissance = '0000-00-00'", S::i('uid'));
352 if ($res->numRows()) {
a7d35093 353 $page->trigWarning("Ta date de naissance n'est pas renseignée, ce qui t'empêcheras de réaliser"
ec82a63f 354 . " la procédure de récupération de mot de passe si un jour tu le perdais.");
7bff4cb0
FB		 355 }
356
46f272fe 357 $page->setTitle('Mon Profil');
2f678da1 358 }
359
46ae38a9
FB		 360 function handler_applis_js(&$page)
361 {
362 header('Content-Type: text/javascript; charset=utf-8');
363 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
364 header('Last-Modified:' . gmdate('D, d M Y H:i:s') . ' GMT');
365 header('Cache-Control: no-cache, must-revalidate');
366 header('Pragma: no-cache');
367 $page->changeTpl('profile/applis.js.tpl', NO_SKIN);
368 require_once "applis.func.inc.php";
369 }
370
371 function handler_grades_js(&$page)
372 {
373 header('Content-Type: text/javascript; charset=utf-8');
374 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
375 header('Last-Modified:' . gmdate('D, d M Y H:i:s') . ' GMT');
376 header('Cache-Control: no-cache, must-revalidate');
377 header('Pragma: no-cache');
378 $page->changeTpl('profile/grades.js.tpl', NO_SKIN);
379 $res = XDB::iterator("SELECT *
380 FROM profile_medals_grades
381 ORDER BY mid, pos");
382 $grades = array();
383 while ($tmp = $res->next()) {
384 $grades[$tmp['mid']][] = $tmp;
385 }
386 $page->assign('grades', $grades);
387
388 $res = XDB::iterator("SELECT *, FIND_IN_SET('validation', flags) AS validate
389 FROM profile_medals
390 ORDER BY type, text");
391 $mlist = array();
392 while ($tmp = $res->next()) {
393 $mlist[$tmp['type']][] = $tmp;
394 }
395 $page->assign('medal_list', $mlist);
396 }
397
c6a7beb2
FB		 398 function handler_ajax_address(&$page, $adid)
399 {
46ae38a9 400 header('Content-Type: text/html; charset=utf-8');
c6a7beb2
FB		 401 $page->changeTpl('profile/adresses.address.tpl', NO_SKIN);
402 $page->assign('i', $adid);
403 $page->assign('adr', array());
c6a7beb2
FB		 404 }
405
406 function handler_ajax_tel(&$page, $adid, $telid)
407 {
46ae38a9 408 header('Content-Type: text/html; charset=utf-8');
c6a7beb2
FB		 409 $page->changeTpl('profile/adresses.tel.tpl', NO_SKIN);
410 $page->assign('i', $adid);
411 $page->assign('adid', "addresses_$adid");
412 $page->assign('adpref', "addresses[$adid]");
413 $page->assign('t', $telid);
414 $page->assign('tel', array());
c6a7beb2
FB		 415 }
416
85cc366b
FB		 417 function handler_ajax_medal(&$page, $id)
418 {
46ae38a9 419 header('Content-Type: text/html; charset=utf-8');
85cc366b
FB		 420 $page->changeTpl('profile/deco.medal.tpl', NO_SKIN);
421 $page->assign('id', $id);
422 $page->assign('medal', array('valid' => 0, 'grade' => 0));
85cc366b
FB		 423 }
424
2dcac0f5
FB		 425 function handler_ajax_job(&$page, $id)
426 {
46ae38a9 427 header('Content-Type: text/html; charset=utf-8');
2dcac0f5
FB		 428 $page->changeTpl('profile/jobs.job.tpl', NO_SKIN);
429 $page->assign('i', $id);
430 $page->assign('job', array());
2dcac0f5 431 $page->assign('new', true);
daa66175
SJ		 432 $res = XDB::query("SELECT id, label
433 FROM emploi_secteur");
434 $page->assign('secteurs', $res->fetchAllAssoc());
435 $res = XDB::query("SELECT id, fonction_fr, FIND_IN_SET('titre', flags) AS title
436 FROM fonctions_def
437 ORDER BY id");
438 $page->assign('fonctions', $res->fetchAllAssoc());
2dcac0f5
FB		 439 }
440
441 function handler_ajax_secteur(&$page, $id, $sect, $ssect = -1)
442 {
46ae38a9 443 header('Content-Type: text/html; charset=utf-8');
2dcac0f5
FB		 444 $res = XDB::iterator("SELECT id, label
445 FROM emploi_ss_secteur
446 WHERE secteur = {?}", $sect);
447 $page->changeTpl('profile/jobs.secteur.tpl', NO_SKIN);
448 $page->assign('id', $id);
449 $page->assign('ssecteurs', $res);
450 $page->assign('sel', $ssect);
451 }
452
f25e1a56
FB		 453 function handler_ajax_skill(&$page, $cat, $id)
454 {
46ae38a9 455 header('Content-Type: text/html; charset=utf-8');
f25e1a56 456 $page->changeTpl('profile/skill.skill.tpl', NO_SKIN);
f25e1a56
FB		 457 $page->assign('cat', $cat);
458 $page->assign('id', $id);
459 if ($cat == 'competences') {
460 $page->assign('levels', array('initié' => 'initié',
461 'bonne connaissance' => 'bonne connaissance',
462 'expert' => 'expert'));
463 } else {
464 $page->assign('levels', array(1 => 'connaissance basique',
465 2 => 'maîtrise des bases',
466 3 => 'maîtrise limitée',
467 4 => 'maîtrise générale',
468 5 => 'bonne maîtrise',
469 6 => 'maîtrise complète'));
470 }
471 }
472
9b0fa329 473 function handler_p_orange(&$page)
474 {
8b1f8e12 475 $page->changeTpl('profile/orange.tpl');
9b0fa329 476
477 require_once 'validations.inc.php';
9b0fa329 478
08cce2ff 479 $res = XDB::query(
2f678da1 480 "SELECT u.promo, u.promo_sortie
9b0fa329 481 FROM auth_user_md5 AS u
cab08090 482 WHERE user_id={?}", S::v('uid'));
9b0fa329 483
2f678da1 484 list($promo, $promo_sortie_old) = $res->fetchOneRow();
9b0fa329 485 $page->assign('promo_sortie_old', $promo_sortie_old);
486 $page->assign('promo', $promo);
487
488 if (!Env::has('promo_sortie')) {
fd8f77de 489 return;
8827fc52
VZ		 490 } else {
491 S::assert_xsrf_token();
9b0fa329 492 }
493
5e2307dc 494 $promo_sortie = Env::i('promo_sortie');
9b0fa329 495
496 if ($promo_sortie < 1000 || $promo_sortie > 9999) {
a7d35093 497 $page->trigError('L\'année de sortie doit être un nombre de quatre chiffres');
9b0fa329 498 }
499 elseif ($promo_sortie < $promo + 3) {
a7d35093 500 $page->trigError('Trop tôt');
9b0fa329 501 }
502 elseif ($promo_sortie == $promo_sortie_old) {
a7d35093 503 $page->trigWarning('Tu appartiens déjà à la promotion correspondante à cette année de sortie.');
9b0fa329 504 }
505 elseif ($promo_sortie == $promo + 3) {
08cce2ff 506 XDB::execute(
e1635d16 507 "UPDATE auth_user_md5 set promo_sortie={?}
cab08090 508 WHERE user_id={?}", $promo_sortie, S::v('uid'));
a7d35093 509 $page->trigSuccess('Ton statut "orange" a été supprimé.');
9b0fa329 510 $page->assign('promo_sortie_old', $promo_sortie);
511 }
512 else {
513 $page->assign('promo_sortie', $promo_sortie);
514
515 if (Env::has('submit')) {
5daf68f6 516 $myorange = new OrangeReq(S::user(), $promo_sortie);
9b0fa329 517 $myorange->submit();
518 $page->assign('myorange', $myorange);
519 }
520 }
9b0fa329 521 }
522
2f678da1 523 function handler_referent(&$page, $x = null)
28e16d4d 524 {
28e16d4d 525 require_once 'user.func.inc.php';
8b1f8e12 526 $page->changeTpl('profile/fiche_referent.tpl', SIMPLE);
28e16d4d 527
b3bf7395
VZ		 528 $user = User::get($x);
529 if ($user == null) {
28e16d4d 530 return PL_NOT_FOUND;
531 }
532
b3bf7395
VZ		 533 $res = XDB::query("SELECT cv FROM auth_user_md5 WHERE user_id = {?}", $user->id());
534 $cv = $res->fetchOneCell();
28e16d4d 535
b3bf7395
VZ		 536 $page->assign_by_ref('user', $user);
537 $page->assign('cv', MiniWiki::WikiToHTML($cv, true));
538 $page->assign('adr_pro', get_user_details_pro($user->id()));
28e16d4d 539
540 ///// recuperations infos referent
541
542 //expertise
b3bf7395 543 $res = XDB::query("SELECT expertise FROM mentor WHERE uid = {?}", $user->id());
28e16d4d 544 $page->assign('expertise', $res->fetchOneCell());
545
546 //secteurs
547 $secteurs = $ss_secteurs = Array();
08cce2ff 548 $res = XDB::iterRow(
28e16d4d 549 "SELECT s.label, ss.label
550 FROM mentor_secteurs AS m
551 LEFT JOIN emploi_secteur AS s ON(m.secteur = s.id)
552 LEFT JOIN emploi_ss_secteur AS ss ON(m.secteur = ss.secteur AND m.ss_secteur = ss.id)
b3bf7395 553 WHERE uid = {?}", $user->id());
28e16d4d 554 while (list($sec, $ssec) = $res->next()) {
555 $secteurs[] = $sec;
556 $ss_secteurs[] = $ssec;
557 }
558 $page->assign_by_ref('secteurs', $secteurs);
559 $page->assign_by_ref('ss_secteurs', $ss_secteurs);
560
561 //pays
08cce2ff 562 $res = XDB::query(
28e16d4d 563 "SELECT gp.pays
564 FROM mentor_pays AS m
565 LEFT JOIN geoloc_pays AS gp ON(m.pid = gp.a2)
b3bf7395 566 WHERE uid = {?}", $user->id());
28e16d4d 567 $page->assign('pays', $res->fetchColumn());
568
c99ef281 569 $page->addJsLink('close_on_esc.js');
28e16d4d 570 }
571
ff3eb9b7 572 function handler_ref_search(&$page, $action = null, $subaction = null)
2f678da1 573 {
8f201b69
FB		 574 $wp = new PlWikiPage('Docs.Emploi');
575 $wp->buildCache();
576
46f272fe 577 $page->setTitle('Conseil Pro');
2f678da1 578
2f678da1 579 //recuperation des noms de secteurs
08cce2ff 580 $res = XDB::iterRow("SELECT id, label FROM emploi_secteur");
2f678da1 581 $secteurs[''] = '';
582 while (list($tmp_id, $tmp_label) = $res->next()) {
583 $secteurs[$tmp_id] = $tmp_label;
584 }
585 $page->assign_by_ref('secteurs', $secteurs);
586
2f678da1 587 // nb de mentors
08cce2ff 588 $res = XDB::query("SELECT count(*) FROM mentor");
2f678da1 589 $page->assign('mentors_number', $res->fetchOneCell());
590
2f678da1 591 // On vient d'un formulaire
ff3eb9b7 592 $where = array();
593 $pays_sel = XDB::escape(Env::v('pays_sel'));
594 $secteur_sel = XDB::escape(Env::v('secteur'));
595 $ss_secteur_sel = XDB::escape(Env::v('ss_secteur'));
596 $expertise_champ = XDB::escape(Env::v('expertise'));
597
598 if ($pays_sel != "''") {
599 $where[] = "mp.pid = $pays_sel";
600 }
601 if ($secteur_sel != "''") {
602 $where[] = "ms.secteur = $secteur_sel";
603 if ($ss_secteur_sel != "''") {
604 $where[] = "ms.ss_secteur = $ss_secteur_sel";
2f678da1 605 }
606 }
ff3eb9b7 607 if ($expertise_champ != "''") {
608 $where[] = "MATCH(m.expertise) AGAINST($expertise_champ)";
2f678da1 609 }
610
611 if ($where) {
612 $where = join(' AND ', $where);
613
e1635d16
FB		 614 $set = new UserSet("INNER JOIN mentor AS m ON (m.uid = u.user_id)
615 LEFT JOIN mentor_pays AS mp ON (mp.uid = m.uid)
ff3eb9b7 616 LEFT JOIN mentor_secteurs AS ms ON (ms.uid = m.uid)",
617 $where);
618 $set->addMod('mentor', 'Référents');
619 $set->apply('referent/search', $page, $action, $subaction);
620 if ($set->count() > 100) {
e1635d16 621 $page->assign('recherche_trop_large', true);
2f678da1 622 }
ff3eb9b7 623 }
e1635d16 624 $page->changeTpl('profile/referent.tpl');
ff3eb9b7 625 }
2f678da1 626
e1635d16 627 function handler_ref_sect(&$page, $sect)
ff3eb9b7 628 {
629 header('Content-Type: text/html; charset=utf-8');
05cb05c0 630 $page->changeTpl('include/field.select.tpl', NO_SKIN);
ff3eb9b7 631 $page->assign('onchange', 'setSSecteurs()');
632 $page->assign('id', 'ssect_field');
633 $page->assign('name', 'ss_secteur');
634 $it = XDB::iterator("SELECT id,label AS field
e1635d16 635 FROM emploi_ss_secteur
ff3eb9b7 636 WHERE secteur = {?}", $sect);
637 $page->assign('list', $it);
638 }
2f678da1 639
ff3eb9b7 640 function handler_ref_country(&$page, $sect, $ssect = '')
641 {
642 header('Content-Type: text/html; charset=utf-8');
05cb05c0 643 $page->changeTpl('include/field.select.tpl', NO_SKIN);
ff3eb9b7 644 $page->assign('name', 'pays_sel');
645 $where = ($ssect ? ' AND ms.ss_secteur = {?}' : '');
646 $it = XDB::iterator("SELECT a2 AS id, pays AS field
647 FROM geoloc_pays AS g
648 INNER JOIN mentor_pays AS mp ON (mp.pid = g.a2)
649 INNER JOIN mentor_secteurs AS ms ON (ms.uid = mp.uid)
650 WHERE ms.secteur = {?} $where
651 GROUP BY a2
652 ORDER BY pays", $sect, $ssect);
653 $page->assign('list', $it);
2f678da1 654 }
655
926f16d7 656 function handler_p_usage(&$page)
657 {
8b1f8e12 658 $page->changeTpl('profile/nomusage.tpl');
926f16d7 659
660 require_once 'validations.inc.php';
926f16d7 661
08cce2ff 662 $res = XDB::query(
2f678da1 663 "SELECT u.nom, u.nom_usage, u.flags, e.alias
926f16d7 664 FROM auth_user_md5 AS u
2f678da1 665 LEFT JOIN aliases AS e ON(u.user_id = e.id
666 AND FIND_IN_SET('usage', e.flags))
cab08090 667 WHERE user_id={?}", S::v('uid'));
926f16d7 668
2f678da1 669 list($nom, $usage_old, $flags, $alias_old) = $res->fetchOneRow();
113f6de8 670 $flags = new PlFlagSet($flags);
926f16d7 671 $page->assign('usage_old', $usage_old);
672 $page->assign('alias_old', $alias_old);
673
e1635d16 674 $nom_usage = replace_accent(trim(Env::v('nom_usage')));
926f16d7 675 $nom_usage = strtoupper($nom_usage);
676 $page->assign('usage_req', $nom_usage);
677
678 if (Env::has('submit') && ($nom_usage != $usage_old)) {
8827fc52
VZ		 679 S::assert_xsrf_token();
680
926f16d7 681 // on vient de recevoir une requete, differente de l'ancien nom d'usage
682 if ($nom_usage == $nom) {
44b071c2
SJ		 683 $page->trigWarning('Le nom d\'usage que tu demandes est identique à ton nom à l\'X, '
684 . 'aucune modification n\'a donc été effectuée.');
926f16d7 685 $page->assign('same', true);
a7de4ef7 686 } else { // le nom de mariage est distinct du nom à l'X
926f16d7 687 // on calcule l'alias pour l'afficher
5e2307dc 688 $reason = Env::v('reason');
926f16d7 689 if ($reason == 'other') {
5e2307dc 690 $reason = Env::v('other_reason');
926f16d7 691 }
5daf68f6 692 $myusage = new UsageReq(S::user(), $nom_usage, $reason);
926f16d7 693 $myusage->submit();
694 $page->assign('myusage', $myusage);
695 }
696 }
926f16d7 697 }
698
a1d79217 699 function handler_xnet(&$page)
700 {
8b1f8e12 701 $page->changeTpl('profile/groupesx.tpl');
46f272fe 702 $page->setTitle('Promo, Groupes X, Binets');
e1635d16 703
a1d79217 704 $req = XDB::query('
e1635d16 705 SELECT m.asso_id, a.nom, diminutif, a.logo IS NOT NULL AS has_logo,
46e1d3ba 706 COUNT(e.eid) AS events, mail_domain AS lists
e1635d16 707 FROM groupex.membres AS m
46e1d3ba 708 INNER JOIN groupex.asso AS a ON(m.asso_id = a.id)
709 LEFT JOIN groupex.evenements AS e ON(e.asso_id = m.asso_id AND e.archive = 0)
710 WHERE uid = {?} GROUP BY m.asso_id ORDER BY a.nom', S::i('uid'));
a1d79217 711 $page->assign('assos', $req->fetchAllAssoc());
712 }
e1635d16 713
e49018a7 714 function handler_vcard(&$page, $x = null)
715 {
716 if (is_null($x)) {
717 return PL_NOT_FOUND;
718 }
719
720 global $globals;
721
722 if (substr($x, -4) == '.vcf') {
723 $x = substr($x, 0, strlen($x) - 4);
724 }
725
5d42c993
FB		 726 $vcard = new VCard();
727 $vcard->addUser($x);
728 $vcard->show();
e49018a7 729 }
92423144 730
54cabe90 731 function handler_admin_trombino(&$page, $login = null, $action = null) {
8b1f8e12 732 $page->changeTpl('profile/admin_trombino.tpl');
46f272fe 733 $page->setTitle('Administration - Trombino');
e1635d16 734
54cabe90
VZ		 735 if (!$login || !($user = User::get($login))) {
736 return PL_NOT_FOUND;
737 } else {
738 $page->assign_by_ref('user', $user);
739 }
e1635d16 740
92423144 741 switch ($action) {
92423144 742 case "original":
743 header("Content-type: image/jpeg");
54cabe90 744 readfile("/home/web/trombino/photos" . $user->promo() . "/" . $user->login() . ".jpg");
92423144 745 exit;
746 break;
e1635d16 747
92423144 748 case "new":
8827fc52
VZ		 749 S::assert_xsrf_token();
750
92423144 751 $data = file_get_contents($_FILES['userfile']['tmp_name']);
752 list($x, $y) = getimagesize($_FILES['userfile']['tmp_name']);
753 $mimetype = substr($_FILES['userfile']['type'], 6);
754 unlink($_FILES['userfile']['tmp_name']);
755 XDB::execute(
756 "REPLACE INTO photo SET uid={?}, attachmime = {?}, attach={?}, x={?}, y={?}",
54cabe90 757 $user->id(), $mimetype, $data, $x, $y);
92423144 758 break;
e1635d16 759
92423144 760 case "delete":
8827fc52
VZ		 761 S::assert_xsrf_token();
762
54cabe90 763 XDB::execute('DELETE FROM photo WHERE uid = {?}', $user->id());
92423144 764 break;
765 }
92423144 766 }
767 function handler_admin_binets(&$page, $action = 'list', $id = null) {
46f272fe 768 $page->setTitle('Administration - Binets');
92423144 769 $page->assign('title', 'Gestion des binets');
770 $table_editor = new PLTableEditor('admin/binets', 'binets_def', 'id');
771 $table_editor->add_join_table('binets_ins','binet_id',true);
a7de4ef7 772 $table_editor->describe('text','intitulé',true);
92423144 773 $table_editor->apply($page, $action, $id);
774 }
775 function handler_admin_formations(&$page, $action = 'list', $id = null) {
46f272fe 776 $page->setTitle('Administration - Formations');
92423144 777 $page->assign('title', 'Gestion des formations');
778 $table_editor = new PLTableEditor('admin/formations','applis_def','id');
e1635d16 779 $table_editor->add_join_table('applis_ins','aid',true);
a7de4ef7 780 $table_editor->describe('text','intitulé',true);
92423144 781 $table_editor->describe('url','site web',false);
782 $table_editor->apply($page, $action, $id);
e1635d16 783 }
b09690be 784 function handler_admin_sections(&$page, $action = 'list', $id = null) {
46f272fe 785 $page->setTitle('Administration - Sections');
a20aab02 786 $page->assign('title', 'Gestion des sections');
b09690be 787 $table_editor = new PLTableEditor('admin/sections','sections','id');
788 $table_editor->describe('text','intitulé',true);
789 $table_editor->apply($page, $action, $id);
e1635d16 790 }
a20aab02 791 function handler_admin_ss_secteurs(&$page, $action = 'list', $id = null) {
46f272fe 792 $page->setTitle('Administration - Sous-secteurs');
a20aab02
SJ		 793 $page->assign('title', 'Gestion des sous-secteurs');
794 $table_editor = new PLTableEditor('admin/ss_secteurs', 'emploi_ss_secteur', 'id', true);
795 $table_editor->describe('label', 'intitulé', true);
796 $table_editor->apply($page, $action, $id);
797 }
798 function handler_admin_fonctions(&$page, $action = 'list', $id = null) {
46f272fe 799 $page->setTitle('Administration - Fonctions');
a20aab02
SJ		 800 $page->assign('title', 'Gestion des fonctions');
801 $table_editor = new PLTableEditor('admin/fonctions', 'fonctions_def', 'id', true);
802 $table_editor->describe('fonction_fr', 'intitulé', true);
803 $table_editor->describe('fonction_en', 'intitulé (ang)', true);
804 $table_editor->describe('flags', 'titre', true);
805 $table_editor->apply($page, $action, $id);
806 }
b09690be 807 function handler_admin_secteurs(&$page, $action = 'list', $id = null) {
46f272fe 808 $page->setTitle('Administration - Secteurs');
a20aab02
SJ		 809 $page->assign('title', 'Gestion des secteurs');
810 $table_editor = new PLTableEditor('admin/secteurs', 'emploi_secteur', 'id', true);
811 $table_editor->describe('label', 'intitulé', true);
b09690be 812 $table_editor->apply($page, $action, $id);
e1635d16 813 }
92423144 814 function handler_admin_medals(&$page, $action = 'list', $id = null) {
46f272fe 815 $page->setTitle('Administration - Distinctions');
92423144 816 $page->assign('title', 'Gestion des Distinctions');
817 $table_editor = new PLTableEditor('admin/medals','profile_medals','id');
a7de4ef7 818 $table_editor->describe('text', 'intitulé', true);
92423144 819 $table_editor->describe('img', 'nom de l\'image', false);
d02b8359 820 $table_editor->describe('flags', 'valider', true);
92423144 821 $table_editor->apply($page, $action, $id);
822 if ($id && $action == 'edit') {
8b1f8e12 823 $page->changeTpl('profile/admin_decos.tpl');
e1635d16 824
92423144 825 $mid = $id;
e1635d16 826
92423144 827 if (Post::v('act') == 'del') {
75a17710
FB		 828 XDB::execute('DELETE FROM profile_medals_grades
829 WHERE mid={?} AND gid={?}', $mid, Post::i('gid'));
92423144 830 } else {
831 foreach (Post::v('grades', array()) as $gid=>$text) {
154ee23a
OLF		 832 if ($gid === 0) {
833 if (!empty($text)) {
834 $res = XDB::query('SELECT MAX(gid)
835 FROM profile_medals_grades
836 WHERE mid = {?}', $mid);
837 $gid = $res->fetchOneCell() + 1;
838
839 XDB::execute('INSERT INTO profile_medals_grades (mid, gid, text, pos)
840 VALUES ({?}, {?}, {?}, {?})',
841 $mid, $gid, $text, $_POST['pos']['0']);
842 }
843 } else {
844 XDB::execute('UPDATE profile_medals_grades
845 SET pos={?}, text={?}
846 WHERE gid={?} AND mid={?}', $_POST['pos'][$gid], $text, $gid, $mid);
847 }
92423144 848 }
849 }
850 $res = XDB::iterator('SELECT gid, text, pos FROM profile_medals_grades WHERE mid={?} ORDER BY pos', $mid);
851 $page->assign('grades', $res);
852 }
e1635d16 853 }
7d8b17cb 854}
855
a7de4ef7 856// vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
7d8b17cb 857?>
plat/al