Merge commit 'origin/master' into fusionax
[platal.git] / modules / profile.php
1 <?php
2 /***************************************************************************
3 * Copyright (C) 2003-2008 Polytechnique.org *
4 * http://opensource.polytechnique.org/ *
5 * *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
10 * *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
15 * *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
18 * Foundation, Inc., *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
21
22 class ProfileModule extends PLModule
23 {
24 function handlers()
25 {
26 return array(
27 'photo' => $this->make_hook('photo', AUTH_PUBLIC),
28 'photo/change' => $this->make_hook('photo_change', AUTH_MDP),
29
30 'fiche.php' => $this->make_hook('fiche', AUTH_PUBLIC),
31 'profile' => $this->make_hook('profile', AUTH_PUBLIC),
32 'profile/private' => $this->make_hook('profile', AUTH_COOKIE),
33 'profile/ax' => $this->make_hook('ax', AUTH_COOKIE, 'admin'),
34 'profile/edit' => $this->make_hook('p_edit', AUTH_MDP),
35 'profile/ajax/address' => $this->make_hook('ajax_address', AUTH_COOKIE, 'user', NO_AUTH),
36 'profile/ajax/tel' => $this->make_hook('ajax_tel', AUTH_COOKIE, 'user', NO_AUTH),
37 'profile/ajax/edu' => $this->make_hook('ajax_edu', AUTH_COOKIE, 'user', NO_AUTH),
38 'profile/ajax/medal' => $this->make_hook('ajax_medal', AUTH_COOKIE, 'user', NO_AUTH),
39 'profile/networking' => $this->make_hook('networking', AUTH_PUBLIC),
40 'profile/ajax/job' => $this->make_hook('ajax_job', AUTH_COOKIE, 'user', NO_AUTH),
41 'profile/ajax/secteur' => $this->make_hook('ajax_secteur', AUTH_COOKIE, 'user', NO_AUTH),
42 'profile/ajax/skill' => $this->make_hook('ajax_skill', AUTH_COOKIE, 'user', NO_AUTH),
43 'profile/ajax/searchname' => $this->make_hook('ajax_searchname', AUTH_COOKIE, 'user', NO_AUTH),
44 'javascript/education.js' => $this->make_hook('education_js', AUTH_COOKIE),
45 'javascript/grades.js' => $this->make_hook('grades_js', AUTH_COOKIE),
46 'profile/medal' => $this->make_hook('medal', AUTH_PUBLIC),
47 'profile/orange' => $this->make_hook('p_orange', AUTH_MDP),
48 'profile/usage' => $this->make_hook('p_usage', AUTH_MDP),
49
50 'referent' => $this->make_hook('referent', AUTH_COOKIE),
51 'emploi' => $this->make_hook('ref_search', AUTH_COOKIE),
52 'referent/search' => $this->make_hook('ref_search', AUTH_COOKIE),
53 'referent/ssect' => $this->make_hook('ref_sect', AUTH_COOKIE, 'user', NO_AUTH),
54 'referent/country' => $this->make_hook('ref_country', AUTH_COOKIE, 'user', NO_AUTH),
55
56 'groupes-x' => $this->make_hook('xnet', AUTH_COOKIE),
57
58 'vcard' => $this->make_hook('vcard', AUTH_COOKIE, 'user', NO_HTTPS),
59 'admin/binets' => $this->make_hook('admin_binets', AUTH_MDP, 'admin'),
60 'admin/medals' => $this->make_hook('admin_medals', AUTH_MDP, 'admin'),
61 'admin/education' => $this->make_hook('admin_education', AUTH_MDP, 'admin'),
62 'admin/education_field' => $this->make_hook('admin_education_field', AUTH_MDP, 'admin'),
63 'admin/education_degree' => $this->make_hook('admin_education_degree', AUTH_MDP, 'admin'),
64 'admin/education_degree_set' => $this->make_hook('admin_education_degree_set', AUTH_MDP, 'admin'),
65 'admin/sections' => $this->make_hook('admin_sections', AUTH_MDP, 'admin'),
66 'admin/secteurs' => $this->make_hook('admin_secteurs', AUTH_MDP, 'admin'),
67 'admin/networking' => $this->make_hook('admin_networking', AUTH_MDP, 'admin'),
68 'admin/trombino' => $this->make_hook('admin_trombino', AUTH_MDP, 'admin'),
69 'admin/ss_secteurs' => $this->make_hook('admin_ss_secteurs', AUTH_MDP, 'admin'),
70 'admin/fonctions' => $this->make_hook('admin_fonctions', AUTH_MDP, 'admin'),
71 'admin/corps_enum' => $this->make_hook('admin_corps_enum', AUTH_MDP, 'admin'),
72 'admin/corps_rank' => $this->make_hook('admin_corps_rank', AUTH_MDP, 'admin'),
73
74 );
75 }
76
77 /* XXX COMPAT */
78 function handler_fiche(&$page)
79 {
80 return $this->handler_profile($page, Env::v('user'));
81 }
82
83 function handler_photo(&$page, $x = null, $req = null)
84 {
85 if (!$x || !($user = User::getSilent($x))) {
86 return PL_NOT_FOUND;
87 }
88
89 // Retrieve the photo and its mime type.
90 $photo_data = null;
91 $photo_type = null;
92
93 if ($req && S::logged()) {
94 include 'validations.inc.php';
95 $myphoto = PhotoReq::get_request($user->id());
96 if ($myphoto) {
97 $photo_data = $myphoto->data;
98 $photo_type = $myphoto->mimetype;
99 }
100 } else {
101 $res = XDB::query(
102 "SELECT attachmime, attach, pub
103 FROM photo
104 WHERE uid = {?}", $user->id());
105 list($photo_type, $photo_data, $photo_pub) = $res->fetchOneRow();
106 if ($photo_pub != 'public' && !S::logged()) {
107 $photo_type = $photo_data = null;
108 }
109 }
110
111 // Display the photo, or a default one when not available.
112 if ($photo_type && $photo_data != null) {
113 header('Content-type: image/' . $photo_type);
114 echo $photo_data;
115 } else {
116 header('Content-type: image/png');
117 echo file_get_contents(dirname(__FILE__).'/../htdocs/images/none.png');
118 }
119 exit;
120 }
121
122 function handler_medal(&$page, $mid)
123 {
124 $thumb = ($mid == 'thumb');
125 $mid = $thumb ? @func_get_arg(2) : $mid;
126
127 $res = XDB::query("SELECT img
128 FROM profile_medals
129 WHERE id = {?}",
130 $mid);
131 $img = $thumb ?
132 dirname(__FILE__).'/../htdocs/images/medals/thumb/' . $res->fetchOneCell() :
133 dirname(__FILE__).'/../htdocs/images/medals/' . $res->fetchOneCell();
134 $type = mime_content_type($img);
135 header("Content-Type: $type");
136 echo file_get_contents($img);
137 exit;
138 }
139
140 function handler_networking(&$page, $mid)
141 {
142 $res = XDB::query("SELECT icon
143 FROM profile_networking_enum
144 WHERE network_type = {?}",
145 $mid);
146 $img = dirname(__FILE__) . '/../htdocs/images/networking/' . $res->fetchOneCell();
147 $type = mime_content_type($img);
148 header("Content-Type: $type");
149 echo file_get_contents($img);
150 exit;
151 }
152
153 function handler_photo_change(&$page)
154 {
155 global $globals;
156 $page->changeTpl('profile/trombino.tpl');
157
158 require_once('validations.inc.php');
159
160 $trombi_x = '/home/web/trombino/photos' . S::v('promo') . '/' . S::user()->login() . '.jpg';
161 if (Env::has('upload')) {
162 S::assert_xsrf_token();
163
164 $upload = new PlUpload(S::user()->login(), 'photo');
165 if (!$upload->upload($_FILES['userfile']) && !$upload->download(Env::v('photo'))) {
166 $page->trigError('Une erreur est survenue lors du téléchargement du fichier');
167 } else {
168 $myphoto = new PhotoReq(S::user(), $upload);
169 if ($myphoto->isValid()) {
170 $myphoto->submit();
171 }
172 }
173 } elseif (Env::has('trombi')) {
174 S::assert_xsrf_token();
175
176 $upload = new PlUpload(S::user()->login(), 'photo');
177 if ($upload->copyFrom($trombi_x)) {
178 $myphoto = new PhotoReq(S::user(), $upload);
179 if ($myphoto->isValid()) {
180 $myphoto->commit();
181 $myphoto->clean();
182 }
183 }
184 } elseif (Env::v('suppr')) {
185 S::assert_xsrf_token();
186
187 XDB::execute('DELETE FROM photo
188 WHERE uid = {?}',
189 S::v('uid'));
190 XDB::execute('DELETE FROM requests
191 WHERE user_id = {?} AND type="photo"',
192 S::v('uid'));
193 $globals->updateNbValid();
194 } elseif (Env::v('cancel')) {
195 S::assert_xsrf_token();
196
197 $sql = XDB::query('DELETE FROM requests
198 WHERE user_id={?} AND type="photo"',
199 S::v('uid'));
200 $globals->updateNbValid();
201 }
202
203 $sql = XDB::query('SELECT COUNT(*)
204 FROM requests
205 WHERE user_id={?} AND type="photo"',
206 S::v('uid'));
207 $page->assign('submited', $sql->fetchOneCell());
208 $page->assign('has_trombi_x', file_exists($trombi_x));
209 }
210
211 function handler_profile(&$page, $x = null)
212 {
213 // TODO/note for upcoming developers:
214 // We currently maintain both $user and $login; $user is the old way of
215 // obtaining information, and eventually everything will be loaded
216 // through $login. That is the reason why in the template $user is named
217 // $x, and $login $user (sorry for the confusion).
218
219 // Determines which user to display the profile of, and retrieves basic
220 // information on this user.
221 if (is_null($x)) {
222 return PL_NOT_FOUND;
223 }
224
225 $login = S::logged() ? User::get($x) : User::getSilent($x);
226 if (!$login) {
227 return PL_NOT_FOUND;
228 }
229
230 // Now that we know this is the profile of an existing user, we can
231 // switch to the appropriate template.
232 $page->changeTpl('profile/profile.tpl', SIMPLE);
233 require_once 'user.func.inc.php';
234
235 // Determines the access level at which the profile will be displayed.
236 if (!S::logged() || Env::v('view') == 'public') {
237 $view = 'public';
238 } else if (S::logged() && Env::v('view') == 'ax') {
239 $view = 'ax';
240 } else {
241 $view = 'private';
242 }
243
244 // Determines is the user is registered, and fetches the user infos in
245 // the appropriate way.
246 $res = XDB::query("SELECT perms IN ('admin','user','disabled')
247 FROM auth_user_md5
248 WHERE user_id = {?}", $login->id());
249 if ($res->fetchOneCell()) {
250 $new = Env::v('modif') == 'new';
251 $user = get_user_details($login->login(), S::v('uid'), $view);
252 } else {
253 $new = false;
254 $user = array();
255 if (S::logged()) {
256 pl_redirect('marketing/public/' . $login->login());
257 }
258 }
259
260 // Profile view are logged.
261 if (S::logged()) {
262 S::logger()->log('view_profile', $login->login());
263 }
264
265 // Sets the title of the html page.
266 $page->setTitle($login->fullName());
267
268 // Prepares the display of the user's mugshot.
269 $photo = 'photo/' . $login->login() . ($new ? '/req' : '');
270 if (!isset($user['photo_pub']) || !has_user_right($user['photo_pub'], $view)) {
271 $photo = "";
272 }
273 $page->assign('photo_url', $photo);
274
275 if (!isset($user['y']) and !isset($user['x'])) {
276 list($user['x'], $user['y']) = getimagesize("images/none.png");
277 }
278 if (!isset($user['y']) or $user['y'] < 1) $user['y']=1;
279 if (!isset($user['x']) or $user['x'] < 1) $user['x']=1;
280 if ($user['x'] > 240) {
281 $user['y'] = (integer)($user['y']*240/$user['x']);
282 $user['x'] = 240;
283 }
284 if ($user['y'] > 300) {
285 $user['x'] = (integer)($user['x']*300/$user['y']);
286 $user['y'] = 300;
287 }
288 if ($user['x'] < 160) {
289 $user['y'] = (integer)($user['y']*160/$user['x']);
290 $user['x'] = 160;
291 }
292
293 // Determines and displays the virtual alias.
294 global $globals;
295 $res = XDB::query(
296 "SELECT alias
297 FROM virtual
298 INNER JOIN virtual_redirect USING (vid)
299 INNER JOIN auth_user_quick ON (user_id = {?} AND emails_alias_pub = 'public')
300 WHERE (redirect={?} OR redirect={?})
301 AND alias LIKE '%@{$globals->mail->alias_dom}'",
302 $login->id(),
303 $login->forlifeEmail(),
304 // TODO(vzanotti): get ride of all @m4x.org addresses in the
305 // virtual redirect base, and remove this über-ugly hack.
306 $login->login() . '@' . $globals->mail->domain2);
307 $page->assign('virtualalias', $res->fetchOneCell());
308
309 // Adds miscellaneous properties to the display.
310 // Adds the global user property array to the display.
311 $page->assign_by_ref('x', $user);
312 $page->assign_by_ref('user', $login);
313 $page->assign('logged', has_user_right('private', $view));
314 $page->assign('view', $view);
315
316 $page->addJsLink('close_on_esc.js');
317 if (isset($user['date'])) {
318 header('Last-Modified: ' . date('r', strtotime($user['date'])));
319 }
320 }
321
322 function handler_ax(&$page, $user = null)
323 {
324 $user = User::get($user);
325 if (!$user) {
326 return PL_NOT_FOUND;
327 }
328
329 $res = XDB::query("SELECT matricule_ax
330 FROM auth_user_md5
331 WHERE user_id = {?}", $user->id());
332 $mat = $res->fetchOneCell();
333 if (!intval($mat)) {
334 $page->kill("Le matricule AX de {$user->login()} est inconnu");
335 }
336 http_redirect("http://www.polytechniciens.com/?page=AX_FICHE_ANCIEN&anc_id=$mat");
337 }
338
339 function handler_p_edit(&$page, $opened_tab = null, $mode = null)
340 {
341 global $globals;
342
343 // AX Synchronization
344 require_once 'synchro_ax.inc.php';
345 if (is_ax_key_missing()) {
346 $page->assign('no_private_key', true);
347 }
348 if (Env::v('synchro_ax') == 'confirm' && !is_ax_key_missing()) {
349 ax_synchronize(S::user()->login(), S::v('uid'));
350 $page->trigSuccess('Ton profil a été synchronisé avec celui du site polytechniciens.com');
351 }
352
353 // Build the page
354 $page->addJsLink('ajax.js');
355 $page->addJsLink('education.js');
356 $page->addJsLink('grades.js');
357 $page->addJsLink('profile.js');
358 $page->addJsLink('jquery.autocomplete.js');
359 $wiz = new PlWizard('Profil', PlPage::getCoreTpl('plwizard.tpl'), true, true);
360 $this->load('page.inc.php');
361 $wiz->addPage('ProfileGeneral', 'Général', 'general');
362 $wiz->addPage('ProfileAddresses', 'Adresses personnelles', 'adresses');
363 $wiz->addPage('ProfileGroups', 'Groupes X - Binets', 'poly');
364 $wiz->addPage('ProfileDecos', 'Décorations - Medailles', 'deco');
365 $wiz->addPage('ProfileJobs', 'Informations professionnelles', 'emploi');
366 $wiz->addPage('ProfileSkills', 'Compétences diverses', 'skill');
367 $wiz->addPage('ProfileMentor', 'Mentoring', 'mentor');
368 $wiz->apply($page, 'profile/edit', $opened_tab, $mode);
369
370 // Misc checks
371 $res = XDB::query("SELECT user_id
372 FROM auth_user_md5
373 WHERE user_id = {?} AND naissance = '0000-00-00'", S::i('uid'));
374 if ($res->numRows()) {
375 $page->trigWarning("Ta date de naissance n'est pas renseignée, ce qui t'empêcheras de réaliser"
376 . " la procédure de récupération de mot de passe si un jour tu le perdais");
377 }
378
379 $page->setTitle('Mon Profil');
380 }
381
382 function handler_education_js(&$page)
383 {
384 header('Content-Type: text/javascript; charset=utf-8');
385 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
386 header('Last-Modified:' . gmdate('D, d M Y H:i:s') . ' GMT');
387 header('Cache-Control: no-cache, must-revalidate');
388 header('Pragma: no-cache');
389 $page->changeTpl('profile/education.js.tpl', NO_SKIN);
390 require_once "education.func.inc.php";
391 }
392
393 function handler_grades_js(&$page)
394 {
395 header('Content-Type: text/javascript; charset=utf-8');
396 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
397 header('Last-Modified:' . gmdate('D, d M Y H:i:s') . ' GMT');
398 header('Cache-Control: no-cache, must-revalidate');
399 header('Pragma: no-cache');
400 $page->changeTpl('profile/grades.js.tpl', NO_SKIN);
401 $res = XDB::iterator("SELECT *
402 FROM profile_medals_grades
403 ORDER BY mid, pos");
404 $grades = array();
405 while ($tmp = $res->next()) {
406 $grades[$tmp['mid']][] = $tmp;
407 }
408 $page->assign('grades', $grades);
409
410 $res = XDB::iterator("SELECT *, FIND_IN_SET('validation', flags) AS validate
411 FROM profile_medals
412 ORDER BY type, text");
413 $mlist = array();
414 while ($tmp = $res->next()) {
415 $mlist[$tmp['type']][] = $tmp;
416 }
417 $page->assign('medal_list', $mlist);
418 }
419
420 function handler_ajax_address(&$page, $adid)
421 {
422 header('Content-Type: text/html; charset=utf-8');
423 $page->changeTpl('profile/adresses.address.tpl', NO_SKIN);
424 $page->assign('i', $adid);
425 $page->assign('adr', array());
426 }
427
428 function handler_ajax_tel(&$page, $prefid, $prefname, $telid)
429 {
430 header('Content-Type: text/html; charset=utf-8');
431 $page->changeTpl('profile/phone.tpl', NO_SKIN);
432 $page->assign('prefid', $prefid);
433 $page->assign('prefname', $prefname);
434 $page->assign('telid', $telid);
435 $page->assign('tel', array());
436 }
437
438 function handler_ajax_edu(&$page, $eduid, $class)
439 {
440 header('Content-Type: text/html; charset=utf-8');
441 $page->changeTpl('profile/edu.tpl', NO_SKIN);
442 $res = XDB::iterator("SELECT id, field
443 FROM profile_education_field_enum
444 ORDER BY field");
445 $page->assign('edu_fields', $res->fetchAllAssoc());
446 $page->assign('eduid', $eduid);
447 $page->assign('class', $class);
448 require_once "education.func.inc.php";
449 }
450
451 function handler_ajax_medal(&$page, $id)
452 {
453 header('Content-Type: text/html; charset=utf-8');
454 $page->changeTpl('profile/deco.medal.tpl', NO_SKIN);
455 $page->assign('id', $id);
456 $page->assign('medal', array('valid' => 0, 'grade' => 0));
457 }
458
459 function handler_ajax_job(&$page, $id)
460 {
461 header('Content-Type: text/html; charset=utf-8');
462 $page->changeTpl('profile/jobs.job.tpl', NO_SKIN);
463 $page->assign('i', $id);
464 $page->assign('job', array());
465 $page->assign('new', true);
466 $page->assign('secteurs', XDB::iterator("SELECT id, label
467 FROM emploi_secteur"));
468 $page->assign('fonctions', XDB::iterator("SELECT id, fonction_fr, FIND_IN_SET('titre', flags) AS title
469 FROM fonctions_def
470 ORDER BY id"));
471 }
472
473 function handler_ajax_secteur(&$page, $id, $sect, $ssect = -1)
474 {
475 header('Content-Type: text/html; charset=utf-8');
476 $res = XDB::iterator("SELECT id, label
477 FROM emploi_ss_secteur
478 WHERE secteur = {?}", $sect);
479 $page->changeTpl('profile/jobs.secteur.tpl', NO_SKIN);
480 $page->assign('id', $id);
481 $page->assign('ssecteurs', $res);
482 $page->assign('sel', $ssect);
483 }
484
485 function handler_ajax_skill(&$page, $cat, $id)
486 {
487 header('Content-Type: text/html; charset=utf-8');
488 $page->changeTpl('profile/skill.skill.tpl', NO_SKIN);
489 $page->assign('cat', $cat);
490 $page->assign('id', $id);
491 if ($cat == 'competences') {
492 $page->assign('levels', array('initié' => 'initié',
493 'bonne connaissance' => 'bonne connaissance',
494 'expert' => 'expert'));
495 } else {
496 $page->assign('levels', array(1 => 'connaissance basique',
497 2 => 'maîtrise des bases',
498 3 => 'maîtrise limitée',
499 4 => 'maîtrise générale',
500 5 => 'bonne maîtrise',
501 6 => 'maîtrise complète'));
502 }
503 }
504
505 function handler_ajax_searchname(&$page, $snid)
506 {
507 header('Content-Type: text/html; charset=utf-8');
508 $page->changeTpl('profile/general.searchname.tpl', NO_SKIN);
509 $page->assign('i', $snid);
510 $page->assign('sn', array());
511 $page->assign('newsn', true);
512 }
513
514 function handler_p_orange(&$page)
515 {
516 $page->changeTpl('profile/orange.tpl');
517
518 require_once 'validations.inc.php';
519
520 $res = XDB::query(
521 "SELECT u.promo, u.promo_sortie
522 FROM auth_user_md5 AS u
523 WHERE user_id={?}", S::v('uid'));
524
525 list($promo, $promo_sortie_old) = $res->fetchOneRow();
526 $page->assign('promo_sortie_old', $promo_sortie_old);
527 $page->assign('promo', $promo);
528
529 if (!Env::has('promo_sortie')) {
530 return;
531 } else {
532 S::assert_xsrf_token();
533 }
534
535 $promo_sortie = Env::i('promo_sortie');
536
537 if ($promo_sortie < 1000 || $promo_sortie > 9999) {
538 $page->trigError('L\'année de sortie doit être un nombre de quatre chiffres');
539 }
540 elseif ($promo_sortie < $promo + 3) {
541 $page->trigError('Trop tôt');
542 }
543 elseif ($promo_sortie == $promo_sortie_old) {
544 $page->trigWarning('Tu appartiens déjà à la promotion correspondante à cette année de sortie.');
545 }
546 elseif ($promo_sortie == $promo + 3) {
547 XDB::execute(
548 "UPDATE auth_user_md5 set promo_sortie={?}
549 WHERE user_id={?}", $promo_sortie, S::v('uid'));
550 $page->trigSuccess('Ton statut "orange" a été supprimé.');
551 $page->assign('promo_sortie_old', $promo_sortie);
552 }
553 else {
554 $page->assign('promo_sortie', $promo_sortie);
555
556 if (Env::has('submit')) {
557 $myorange = new OrangeReq(S::user(), $promo_sortie);
558 $myorange->submit();
559 $page->assign('myorange', $myorange);
560 }
561 }
562 }
563
564 function handler_referent(&$page, $x = null)
565 {
566 require_once 'user.func.inc.php';
567 $page->changeTpl('profile/fiche_referent.tpl', SIMPLE);
568
569 $user = User::get($x);
570 if ($user == null) {
571 return PL_NOT_FOUND;
572 }
573
574 $res = XDB::query("SELECT cv FROM auth_user_md5 WHERE user_id = {?}", $user->id());
575 $cv = $res->fetchOneCell();
576
577 $page->assign_by_ref('user', $user);
578 $page->assign('cv', MiniWiki::WikiToHTML($cv, true));
579 $page->assign('adr_pro', get_user_details_pro($user->id()));
580
581 ///// recuperations infos referent
582
583 //expertise
584 $res = XDB::query("SELECT expertise FROM mentor WHERE uid = {?}", $user->id());
585 $page->assign('expertise', $res->fetchOneCell());
586
587 //secteurs
588 $secteurs = $ss_secteurs = Array();
589 $res = XDB::iterRow(
590 "SELECT s.label, ss.label
591 FROM mentor_secteurs AS m
592 LEFT JOIN emploi_secteur AS s ON(m.secteur = s.id)
593 LEFT JOIN emploi_ss_secteur AS ss ON(m.secteur = ss.secteur AND m.ss_secteur = ss.id)
594 WHERE uid = {?}", $user->id());
595 while (list($sec, $ssec) = $res->next()) {
596 $secteurs[] = $sec;
597 $ss_secteurs[] = $ssec;
598 }
599 $page->assign_by_ref('secteurs', $secteurs);
600 $page->assign_by_ref('ss_secteurs', $ss_secteurs);
601
602 //pays
603 $res = XDB::query(
604 "SELECT gp.pays
605 FROM mentor_pays AS m
606 LEFT JOIN geoloc_pays AS gp ON(m.pid = gp.a2)
607 WHERE uid = {?}", $user->id());
608 $page->assign('pays', $res->fetchColumn());
609
610 $page->addJsLink('close_on_esc.js');
611 }
612
613 function handler_ref_search(&$page, $action = null, $subaction = null)
614 {
615 $wp = new PlWikiPage('Docs.Emploi');
616 $wp->buildCache();
617
618 $page->setTitle('Conseil Pro');
619
620 //recuperation des noms de secteurs
621 $res = XDB::iterRow("SELECT id, label FROM emploi_secteur");
622 $secteurs[''] = '';
623 while (list($tmp_id, $tmp_label) = $res->next()) {
624 $secteurs[$tmp_id] = $tmp_label;
625 }
626 $page->assign_by_ref('secteurs', $secteurs);
627
628 // nb de mentors
629 $res = XDB::query("SELECT count(*) FROM mentor");
630 $page->assign('mentors_number', $res->fetchOneCell());
631
632 // On vient d'un formulaire
633 $where = array();
634 $pays_sel = XDB::escape(Env::v('pays_sel'));
635 $secteur_sel = XDB::escape(Env::v('secteur'));
636 $ss_secteur_sel = XDB::escape(Env::v('ss_secteur'));
637 $expertise_champ = XDB::escape(Env::v('expertise'));
638
639 if ($pays_sel != "''") {
640 $where[] = "mp.pid = $pays_sel";
641 }
642 if ($secteur_sel != "''") {
643 $where[] = "ms.secteur = $secteur_sel";
644 if ($ss_secteur_sel != "''") {
645 $where[] = "ms.ss_secteur = $ss_secteur_sel";
646 }
647 }
648 if ($expertise_champ != "''") {
649 $where[] = "MATCH(m.expertise) AGAINST($expertise_champ)";
650 }
651
652 if ($where) {
653 $where = join(' AND ', $where);
654
655 $set = new UserSet("INNER JOIN mentor AS m ON (m.uid = u.user_id)
656 LEFT JOIN mentor_pays AS mp ON (mp.uid = m.uid)
657 LEFT JOIN mentor_secteurs AS ms ON (ms.uid = m.uid)",
658 $where);
659 $set->addMod('mentor', 'Référents');
660 $set->apply('referent/search', $page, $action, $subaction);
661 if ($set->count() > 100) {
662 $page->assign('recherche_trop_large', true);
663 }
664 }
665 $page->changeTpl('profile/referent.tpl');
666 }
667
668 function handler_ref_sect(&$page, $sect)
669 {
670 header('Content-Type: text/html; charset=utf-8');
671 $page->changeTpl('include/field.select.tpl', NO_SKIN);
672 $page->assign('onchange', 'setSSecteurs()');
673 $page->assign('id', 'ssect_field');
674 $page->assign('name', 'ss_secteur');
675 $it = XDB::iterator("SELECT id,label AS field
676 FROM emploi_ss_secteur
677 WHERE secteur = {?}", $sect);
678 $page->assign('list', $it);
679 }
680
681 function handler_ref_country(&$page, $sect, $ssect = '')
682 {
683 header('Content-Type: text/html; charset=utf-8');
684 $page->changeTpl('include/field.select.tpl', NO_SKIN);
685 $page->assign('name', 'pays_sel');
686 $where = ($ssect ? ' AND ms.ss_secteur = {?}' : '');
687 $it = XDB::iterator("SELECT a2 AS id, pays AS field
688 FROM geoloc_pays AS g
689 INNER JOIN mentor_pays AS mp ON (mp.pid = g.a2)
690 INNER JOIN mentor_secteurs AS ms ON (ms.uid = mp.uid)
691 WHERE ms.secteur = {?} $where
692 GROUP BY a2
693 ORDER BY pays", $sect, $ssect);
694 $page->assign('list', $it);
695 }
696
697 function handler_p_usage(&$page)
698 {
699 $page->changeTpl('profile/nomusage.tpl');
700
701 require_once 'validations.inc.php';
702
703 $res = XDB::query(
704 "SELECT u.nom, u.nom_usage, u.flags, e.alias
705 FROM auth_user_md5 AS u
706 LEFT JOIN aliases AS e ON(u.user_id = e.id
707 AND FIND_IN_SET('usage', e.flags))
708 WHERE user_id={?}", S::v('uid'));
709
710 list($nom, $usage_old, $flags, $alias_old) = $res->fetchOneRow();
711 $flags = new PlFlagSet($flags);
712 $page->assign('usage_old', $usage_old);
713 $page->assign('alias_old', $alias_old);
714
715 $nom_usage = replace_accent(trim(Env::v('nom_usage')));
716 $nom_usage = strtoupper($nom_usage);
717 $page->assign('usage_req', $nom_usage);
718
719 if (Env::has('submit') && ($nom_usage != $usage_old)) {
720 S::assert_xsrf_token();
721
722 // on vient de recevoir une requete, differente de l'ancien nom d'usage
723 if ($nom_usage == $nom) {
724 $page->trigWarning('Le nom d\'usage que tu demandes est identique à ton nom à l\'X, '
725 . 'aucune modification n\'a donc été effectuée.');
726 $page->assign('same', true);
727 } else { // le nom de mariage est distinct du nom à l'X
728 // on calcule l'alias pour l'afficher
729 $reason = Env::v('reason');
730 if ($reason == 'other') {
731 $reason = Env::v('other_reason');
732 }
733 $myusage = new UsageReq(S::user(), $nom_usage, $reason);
734 $myusage->submit();
735 $page->assign('myusage', $myusage);
736 }
737 }
738 }
739
740 function handler_xnet(&$page)
741 {
742 $page->changeTpl('profile/groupesx.tpl');
743 $page->setTitle('Promo, Groupes X, Binets');
744
745 $req = XDB::query('
746 SELECT m.asso_id, a.nom, diminutif, a.logo IS NOT NULL AS has_logo,
747 COUNT(e.eid) AS events, mail_domain AS lists
748 FROM groupex.membres AS m
749 INNER JOIN groupex.asso AS a ON(m.asso_id = a.id)
750 LEFT JOIN groupex.evenements AS e ON(e.asso_id = m.asso_id AND e.archive = 0)
751 WHERE uid = {?} GROUP BY m.asso_id ORDER BY a.nom', S::i('uid'));
752 $page->assign('assos', $req->fetchAllAssoc());
753 }
754
755 function handler_vcard(&$page, $x = null)
756 {
757 if (is_null($x)) {
758 return PL_NOT_FOUND;
759 }
760
761 global $globals;
762
763 if (substr($x, -4) == '.vcf') {
764 $x = substr($x, 0, strlen($x) - 4);
765 }
766
767 $vcard = new VCard();
768 $vcard->addUser($x);
769 $vcard->show();
770 }
771
772 function handler_admin_trombino(&$page, $login = null, $action = null) {
773 $page->changeTpl('profile/admin_trombino.tpl');
774 $page->setTitle('Administration - Trombino');
775
776 if (!$login || !($user = User::get($login))) {
777 return PL_NOT_FOUND;
778 } else {
779 $page->assign_by_ref('user', $user);
780 }
781
782 switch ($action) {
783 case "original":
784 header("Content-type: image/jpeg");
785 readfile("/home/web/trombino/photos" . $user->promo() . "/" . $user->login() . ".jpg");
786 exit;
787 break;
788
789 case "new":
790 S::assert_xsrf_token();
791
792 $data = file_get_contents($_FILES['userfile']['tmp_name']);
793 list($x, $y) = getimagesize($_FILES['userfile']['tmp_name']);
794 $mimetype = substr($_FILES['userfile']['type'], 6);
795 unlink($_FILES['userfile']['tmp_name']);
796 XDB::execute(
797 "REPLACE INTO photo SET uid={?}, attachmime = {?}, attach={?}, x={?}, y={?}",
798 $user->id(), $mimetype, $data, $x, $y);
799 break;
800
801 case "delete":
802 S::assert_xsrf_token();
803
804 XDB::execute('DELETE FROM photo WHERE uid = {?}', $user->id());
805 break;
806 }
807 }
808 function handler_admin_binets(&$page, $action = 'list', $id = null) {
809 $page->setTitle('Administration - Binets');
810 $page->assign('title', 'Gestion des binets');
811 $table_editor = new PLTableEditor('admin/binets', 'binets_def', 'id');
812 $table_editor->add_join_table('binets_ins','binet_id',true);
813 $table_editor->describe('text','intitulé',true);
814 $table_editor->apply($page, $action, $id);
815 }
816 function handler_admin_education(&$page, $action = 'list', $id = null) {
817 $page->setTitle('Administration - Formations');
818 $page->assign('title', 'Gestion des formations');
819 $table_editor = new PLTableEditor('admin/education', 'profile_education_enum', 'id');
820 $table_editor->add_join_table('profile_education', 'eduid', true);
821 $table_editor->add_join_table('profile_education_degree', 'eduid', true);
822 $table_editor->describe('name', 'intitulé', true);
823 $table_editor->describe('url', 'site web', false);
824 $table_editor->apply($page, $action, $id);
825 }
826 function handler_admin_education_field(&$page, $action = 'list', $id = null) {
827 $page->setTitle('Administration - Domaines de formation');
828 $page->assign('title', 'Gestion des domaines de formation');
829 $table_editor = new PLTableEditor('admin/education_field', 'profile_education_field_enum', 'id', true);
830 $table_editor->add_join_table('profile_education', 'fieldid', true);
831 $table_editor->describe('field', 'domaine', true);
832 $table_editor->apply($page, $action, $id);
833 }
834 function handler_admin_education_degree(&$page, $action = 'list', $id = null) {
835 $page->setTitle('Administration - Niveau de formation');
836 $page->assign('title', 'Gestion des niveau de formation');
837 $table_editor = new PLTableEditor('admin/education_degree', 'profile_education_degree_enum', 'id', true);
838 $table_editor->add_join_table('profile_education_degree', 'degreeid', true);
839 $table_editor->add_join_table('profile_education', 'degreeid', true);
840 $table_editor->describe('degree', 'niveau', true);
841 $table_editor->apply($page, $action, $id);
842 }
843 function handler_admin_education_degree_set(&$page, $action = 'list', $id = null) {
844 $page->setTitle('Administration - Correspondances formations - niveau de formation');
845 $page->assign('title', 'Gestion des correspondances formations - niveau de formation');
846 $table_editor = new PLTableEditor('admin/education_degree_set', 'profile_education_degree', 'eduid', true);
847 $table_editor->describe('eduid', 'formation', true);
848 $table_editor->describe('degreeid', 'niveau', true);
849 $table_editor->apply($page, $action, $id);
850 }
851 function handler_admin_sections(&$page, $action = 'list', $id = null) {
852 $page->setTitle('Administration - Sections');
853 $page->assign('title', 'Gestion des sections');
854 $table_editor = new PLTableEditor('admin/sections','sections','id');
855 $table_editor->describe('text','intitulé',true);
856 $table_editor->apply($page, $action, $id);
857 }
858 function handler_admin_ss_secteurs(&$page, $action = 'list', $id = null) {
859 $page->setTitle('Administration - Sous-secteurs');
860 $page->assign('title', 'Gestion des sous-secteurs');
861 $table_editor = new PLTableEditor('admin/ss_secteurs', 'emploi_ss_secteur', 'id', true);
862 $table_editor->describe('label', 'intitulé', true);
863 $table_editor->apply($page, $action, $id);
864 }
865 function handler_admin_fonctions(&$page, $action = 'list', $id = null) {
866 $page->setTitle('Administration - Fonctions');
867 $page->assign('title', 'Gestion des fonctions');
868 $table_editor = new PLTableEditor('admin/fonctions', 'fonctions_def', 'id', true);
869 $table_editor->describe('fonction_fr', 'intitulé', true);
870 $table_editor->describe('fonction_en', 'intitulé (ang)', true);
871 $table_editor->describe('flags', 'titre', true);
872 $table_editor->apply($page, $action, $id);
873 }
874 function handler_admin_secteurs(&$page, $action = 'list', $id = null) {
875 $page->setTitle('Administration - Secteurs');
876 $page->assign('title', 'Gestion des secteurs');
877 $table_editor = new PLTableEditor('admin/secteurs', 'emploi_secteur', 'id', true);
878 $table_editor->describe('label', 'intitulé', true);
879 $table_editor->apply($page, $action, $id);
880 }
881 function handler_admin_networking(&$page, $action = 'list', $id = null) {
882 $page->assign('xorg_title', 'Polytechnique.org - Administration - Networking');
883 $page->assign('title', 'Gestion des types de networking');
884 $table_editor = new PLTableEditor('admin/networking', 'profile_networking_enum', 'network_type');
885 $table_editor->describe('name', 'intitulé', true);
886 $table_editor->describe('icon', 'nom de l\'icône', false);
887 $table_editor->describe('filter', 'filtre', true);
888 $table_editor->describe('link', 'lien web', true);
889 $table_editor->apply($page, $action, $id);
890 }
891 function handler_admin_corps_enum(&$page, $action = 'list', $id = null) {
892 $page->setTitle('Administration - Corps');
893 $page->assign('title', 'Gestion des Corps');
894 $table_editor = new PLTableEditor('admin/corps_enum', 'profile_corps_enum', 'id');
895 $table_editor->describe('name', 'intitulé', true);
896 $table_editor->describe('abbreviation', 'abbréviation', true);
897 $table_editor->describe('still_exists', 'existe encore ?', true);
898 $table_editor->apply($page, $action, $id);
899 }
900 function handler_admin_corps_rank(&$page, $action = 'list', $id = null) {
901 $page->setTitle('Administration - Grade dans les Corps');
902 $page->assign('title', 'Gestion des grade dans les Corps');
903 $table_editor = new PLTableEditor('admin/corps_rank', 'profile_corps_rank_enum', 'id');
904 $table_editor->describe('name', 'intitulé', true);
905 $table_editor->describe('abbreviation', 'abbréviation', true);
906 $table_editor->apply($page, $action, $id);
907 }
908 function handler_admin_medals(&$page, $action = 'list', $id = null) {
909 $page->setTitle('Administration - Distinctions');
910 $page->assign('title', 'Gestion des Distinctions');
911 $table_editor = new PLTableEditor('admin/medals','profile_medals','id');
912 $table_editor->describe('text', 'intitulé', true);
913 $table_editor->describe('img', 'nom de l\'image', false);
914 $table_editor->describe('flags', 'valider', true);
915 $table_editor->apply($page, $action, $id);
916 if ($id && $action == 'edit') {
917 $page->changeTpl('profile/admin_decos.tpl');
918
919 $mid = $id;
920
921 if (Post::v('act') == 'del') {
922 XDB::execute('DELETE FROM profile_medals_grades
923 WHERE mid={?} AND gid={?}', $mid, Post::i('gid'));
924 } else {
925 foreach (Post::v('grades', array()) as $gid=>$text) {
926 if ($gid === 0) {
927 if (!empty($text)) {
928 $res = XDB::query('SELECT MAX(gid)
929 FROM profile_medals_grades
930 WHERE mid = {?}', $mid);
931 $gid = $res->fetchOneCell() + 1;
932
933 XDB::execute('INSERT INTO profile_medals_grades (mid, gid, text, pos)
934 VALUES ({?}, {?}, {?}, {?})',
935 $mid, $gid, $text, $_POST['pos']['0']);
936 }
937 } else {
938 XDB::execute('UPDATE profile_medals_grades
939 SET pos={?}, text={?}
940 WHERE gid={?} AND mid={?}', $_POST['pos'][$gid], $text, $gid, $mid);
941 }
942 }
943 }
944 $res = XDB::iterator('SELECT gid, text, pos FROM profile_medals_grades WHERE mid={?} ORDER BY pos', $mid);
945 $page->assign('grades', $res);
946 }
947 }
948 }
949
950 // vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
951 ?>