2 /***************************************************************************
3 * Copyright (C) 2003-2008 Polytechnique.org *
4 * http://opensource.polytechnique.org/ *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
22 class ProfileModule
extends PLModule
27 'photo' => $this->make_hook('photo', AUTH_PUBLIC
),
28 'photo/change' => $this->make_hook('photo_change', AUTH_MDP
),
30 'fiche.php' => $this->make_hook('fiche', AUTH_PUBLIC
),
31 'profile' => $this->make_hook('profile', AUTH_PUBLIC
),
32 'profile/private' => $this->make_hook('profile', AUTH_COOKIE
),
33 'profile/ax' => $this->make_hook('ax', AUTH_COOKIE
, 'admin'),
34 'profile/edit' => $this->make_hook('p_edit', AUTH_MDP
),
35 'profile/ajax/address' => $this->make_hook('ajax_address', AUTH_COOKIE
, 'user', NO_AUTH
),
36 'profile/ajax/tel' => $this->make_hook('ajax_tel', AUTH_COOKIE
, 'user', NO_AUTH
),
37 'profile/ajax/edu' => $this->make_hook('ajax_edu', AUTH_COOKIE
, 'user', NO_AUTH
),
38 'profile/ajax/medal' => $this->make_hook('ajax_medal', AUTH_COOKIE
, 'user', NO_AUTH
),
39 'profile/networking' => $this->make_hook('networking', AUTH_PUBLIC
),
40 'profile/ajax/job' => $this->make_hook('ajax_job', AUTH_COOKIE
, 'user', NO_AUTH
),
41 'profile/ajax/secteur' => $this->make_hook('ajax_secteur', AUTH_COOKIE
, 'user', NO_AUTH
),
42 'profile/ajax/ssecteur' => $this->make_hook('ajax_ssecteur', AUTH_COOKIE
, 'user', NO_AUTH
),
43 'profile/ajax/skill' => $this->make_hook('ajax_skill', AUTH_COOKIE
, 'user', NO_AUTH
),
44 'profile/ajax/searchname' => $this->make_hook('ajax_searchname', AUTH_COOKIE
, 'user', NO_AUTH
),
45 'javascript/education.js' => $this->make_hook('education_js', AUTH_COOKIE
),
46 'javascript/grades.js' => $this->make_hook('grades_js', AUTH_COOKIE
),
47 'profile/medal' => $this->make_hook('medal', AUTH_PUBLIC
),
48 'profile/orange' => $this->make_hook('p_orange', AUTH_MDP
),
49 'profile/usage' => $this->make_hook('p_usage', AUTH_MDP
),
51 'referent' => $this->make_hook('referent', AUTH_COOKIE
),
52 'emploi' => $this->make_hook('ref_search', AUTH_COOKIE
),
53 'referent/search' => $this->make_hook('ref_search', AUTH_COOKIE
),
54 'referent/ssect' => $this->make_hook('ref_sect', AUTH_COOKIE
, 'user', NO_AUTH
),
55 'referent/country' => $this->make_hook('ref_country', AUTH_COOKIE
, 'user', NO_AUTH
),
57 'groupes-x' => $this->make_hook('xnet', AUTH_COOKIE
),
59 'vcard' => $this->make_hook('vcard', AUTH_COOKIE
, 'user', NO_HTTPS
),
60 'admin/binets' => $this->make_hook('admin_binets', AUTH_MDP
, 'admin'),
61 'admin/medals' => $this->make_hook('admin_medals', AUTH_MDP
, 'admin'),
62 'admin/education' => $this->make_hook('admin_education', AUTH_MDP
, 'admin'),
63 'admin/education_field' => $this->make_hook('admin_education_field', AUTH_MDP
, 'admin'),
64 'admin/education_degree' => $this->make_hook('admin_education_degree', AUTH_MDP
, 'admin'),
65 'admin/education_degree_set' => $this->make_hook('admin_education_degree_set', AUTH_MDP
, 'admin'),
66 'admin/sections' => $this->make_hook('admin_sections', AUTH_MDP
, 'admin'),
67 'admin/secteurs' => $this->make_hook('admin_secteurs', AUTH_MDP
, 'admin'),
68 'admin/networking' => $this->make_hook('admin_networking', AUTH_MDP
, 'admin'),
69 'admin/trombino' => $this->make_hook('admin_trombino', AUTH_MDP
, 'admin'),
70 'admin/ss_secteurs' => $this->make_hook('admin_ss_secteurs', AUTH_MDP
, 'admin'),
71 'admin/fonctions' => $this->make_hook('admin_fonctions', AUTH_MDP
, 'admin'),
72 'admin/corps_enum' => $this->make_hook('admin_corps_enum', AUTH_MDP
, 'admin'),
73 'admin/corps_rank' => $this->make_hook('admin_corps_rank', AUTH_MDP
, 'admin'),
79 function handler_fiche(&$page)
81 return $this->handler_profile($page, Env
::v('user'));
84 function handler_photo(&$page, $x = null
, $req = null
)
86 if (!$x ||
!($user = User
::getSilent($x))) {
90 // Retrieve the photo and its mime type.
94 if ($req && S
::logged()) {
95 include 'validations.inc.php';
96 $myphoto = PhotoReq
::get_request($user->id());
98 $photo_data = $myphoto->data
;
99 $photo_type = $myphoto->mimetype
;
103 "SELECT attachmime, attach, pub
105 WHERE uid = {?}", $user->id());
106 list($photo_type, $photo_data, $photo_pub) = $res->fetchOneRow();
107 if ($photo_pub != 'public' && !S
::logged()) {
108 $photo_type = $photo_data = null
;
112 // Display the photo, or a default one when not available.
113 if ($photo_type && $photo_data != null
) {
114 header('Content-type: image/' . $photo_type);
117 header('Content-type: image/png');
118 echo file_get_contents(dirname(__FILE__
).'/../htdocs/images/none.png');
123 function handler_medal(&$page, $mid)
125 $thumb = ($mid == 'thumb');
126 $mid = $thumb ? @func_get_arg
(2) : $mid;
128 $res = XDB
::query("SELECT img
133 dirname(__FILE__
).'/../htdocs/images/medals/thumb/' . $res->fetchOneCell() :
134 dirname(__FILE__
).'/../htdocs/images/medals/' . $res->fetchOneCell();
135 $type = mime_content_type($img);
136 header("Content-Type: $type");
137 echo file_get_contents($img);
141 function handler_networking(&$page, $mid)
143 $res = XDB
::query("SELECT icon
144 FROM profile_networking_enum
145 WHERE network_type = {?}",
147 $img = dirname(__FILE__
) . '/../htdocs/images/networking/' . $res->fetchOneCell();
148 $type = mime_content_type($img);
149 header("Content-Type: $type");
150 echo file_get_contents($img);
154 function handler_photo_change(&$page)
157 $page->changeTpl('profile/trombino.tpl');
159 require_once('validations.inc.php');
161 $trombi_x = '/home/web/trombino/photos' . S
::v('promo') . '/' . S
::user()->login() . '.jpg';
162 if (Env
::has('upload')) {
163 S
::assert_xsrf_token();
165 $upload = new PlUpload(S
::user()->login(), 'photo');
166 if (!$upload->upload($_FILES['userfile']) && !$upload->download(Env
::v('photo'))) {
167 $page->trigError('Une erreur est survenue lors du téléchargement du fichier');
169 $myphoto = new PhotoReq(S
::user(), $upload);
170 if ($myphoto->isValid()) {
174 } elseif (Env
::has('trombi')) {
175 S
::assert_xsrf_token();
177 $upload = new PlUpload(S
::user()->login(), 'photo');
178 if ($upload->copyFrom($trombi_x)) {
179 $myphoto = new PhotoReq(S
::user(), $upload);
180 if ($myphoto->isValid()) {
185 } elseif (Env
::v('suppr')) {
186 S
::assert_xsrf_token();
188 XDB
::execute('DELETE FROM photo
191 XDB
::execute('DELETE FROM requests
192 WHERE user_id = {?} AND type="photo"',
194 $globals->updateNbValid();
195 } elseif (Env
::v('cancel')) {
196 S
::assert_xsrf_token();
198 $sql = XDB
::query('DELETE FROM requests
199 WHERE user_id={?} AND type="photo"',
201 $globals->updateNbValid();
204 $sql = XDB
::query('SELECT COUNT(*)
206 WHERE user_id={?} AND type="photo"',
208 $page->assign('submited', $sql->fetchOneCell());
209 $page->assign('has_trombi_x', file_exists($trombi_x));
212 function handler_profile(&$page, $x = null
)
214 // TODO/note for upcoming developers:
215 // We currently maintain both $user and $login; $user is the old way of
216 // obtaining information, and eventually everything will be loaded
217 // through $login. That is the reason why in the template $user is named
218 // $x, and $login $user (sorry for the confusion).
220 // Determines which user to display the profile of, and retrieves basic
221 // information on this user.
226 $login = (!is_numeric($x) || S
::has_perms()) ? Profile
::get($x) : null
;
229 $page->trigError($x . ' inconnu dans l\'annuaire');
234 // Now that we know this is the profile of an existing user, we can
235 // switch to the appropriate template.
236 $page->changeTpl('profile/profile.tpl', SIMPLE
);
237 require_once 'user.func.inc.php';
239 // Determines the access level at which the profile will be displayed.
240 if (!S
::logged() || Env
::v('view') == 'public') {
242 } else if (S
::logged() && Env
::v('view') == 'ax') {
248 // Determines is the user is registered, and fetches the user infos in
249 // the appropriate way.
250 $res = XDB
::query("SELECT perms IN ('admin','user','disabled')
252 WHERE user_id = {?}", $login->id());
253 if ($res->fetchOneCell()) {
254 $new = Env
::v('modif') == 'new';
255 $user = get_user_details($login->hrid(), S
::v('uid'), $view);
260 pl_redirect('marketing/public/' . $login->hrid());
264 // Profile view are logged.
266 S
::logger()->log('view_profile', $login->hrid());
269 // Sets the title of the html page.
270 $page->setTitle($login->fullName());
272 // Prepares the display of the user's mugshot.
273 $photo = 'photo/' . $login->hrid() . ($new ?
'/req' : '');
274 if (!isset($user['photo_pub']) ||
!has_user_right($user['photo_pub'], $view)) {
277 $page->assign('photo_url', $photo);
279 if (!isset($user['y']) and !isset($user['x'])) {
280 list($user['x'], $user['y']) = getimagesize("images/none.png");
282 if (!isset($user['y']) or $user['y'] < 1) $user['y']=1;
283 if (!isset($user['x']) or $user['x'] < 1) $user['x']=1;
284 if ($user['x'] > 240) {
285 $user['y'] = (integer)($user['y']*240/$user['x']);
288 if ($user['y'] > 300) {
289 $user['x'] = (integer)($user['x']*300/$user['y']);
292 if ($user['x'] < 160) {
293 $user['y'] = (integer)($user['y']*160/$user['x']);
297 // Determines and displays the virtual alias.
299 $owner = $login->owner();
301 $page->assign('virtualalias', $owner->emailAlias());
304 // Adds miscellaneous properties to the display.
305 // Adds the global user property array to the display.
306 $page->assign_by_ref('x', $user);
307 $page->assign_by_ref('user', $owner);
308 $page->assign('logged', has_user_right('private', $view));
309 $page->assign('view', $view);
311 $page->addJsLink('close_on_esc.js');
312 if (isset($user['date'])) {
313 header('Last-Modified: ' . date('r', strtotime($user['date'])));
317 function handler_ax(&$page, $user = null
)
319 $user = User
::get($user);
324 $res = XDB
::query("SELECT matricule_ax
326 WHERE user_id = {?}", $user->id());
327 $mat = $res->fetchOneCell();
329 $page->kill("Le matricule AX de {$user->login()} est inconnu");
331 http_redirect("http://www.polytechniciens.com/?page=AX_FICHE_ANCIEN&anc_id=$mat");
334 function handler_p_edit(&$page, $opened_tab = null
, $mode = null
)
338 // AX Synchronization
339 require_once 'synchro_ax.inc.php';
340 if (is_ax_key_missing()) {
341 $page->assign('no_private_key', true
);
343 if (Env
::v('synchro_ax') == 'confirm' && !is_ax_key_missing()) {
344 ax_synchronize(S
::user()->login(), S
::v('uid'));
345 $page->trigSuccess('Ton profil a été synchronisé avec celui du site polytechniciens.com');
349 $page->addJsLink('ajax.js');
350 $page->addJsLink('education.js');
351 $page->addJsLink('grades.js');
352 $page->addJsLink('profile.js');
353 $page->addJsLink('jquery.autocomplete.js');
354 $wiz = new PlWizard('Profil', PlPage
::getCoreTpl('plwizard.tpl'), true
, true
);
355 $this->load('page.inc.php');
356 $wiz->addPage('ProfileGeneral', 'Général', 'general');
357 $wiz->addPage('ProfileAddresses', 'Adresses personnelles', 'adresses');
358 $wiz->addPage('ProfileGroups', 'Groupes X - Binets', 'poly');
359 $wiz->addPage('ProfileDecos', 'Décorations - Medailles', 'deco');
360 $wiz->addPage('ProfileJobs', 'Informations professionnelles', 'emploi');
361 $wiz->addPage('ProfileSkills', 'Compétences diverses', 'skill');
362 $wiz->addPage('ProfileMentor', 'Mentoring', 'mentor');
363 $wiz->apply($page, 'profile/edit', $opened_tab, $mode);
366 $res = XDB
::query("SELECT user_id
368 WHERE user_id = {?} AND naissance = '0000-00-00'", S
::i('uid'));
369 if ($res->numRows()) {
370 $page->trigWarning("Ta date de naissance n'est pas renseignée, ce qui t'empêcheras de réaliser"
371 . " la procédure de récupération de mot de passe si un jour tu le perdais");
374 $page->setTitle('Mon Profil');
377 function handler_education_js(&$page)
379 header('Content-Type: text/javascript; charset=utf-8');
380 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
381 header('Last-Modified:' . gmdate('D, d M Y H:i:s') . ' GMT');
382 header('Cache-Control: no-cache, must-revalidate');
383 header('Pragma: no-cache');
384 $page->changeTpl('profile/education.js.tpl', NO_SKIN
);
385 require_once "education.func.inc.php";
388 function handler_grades_js(&$page)
390 header('Content-Type: text/javascript; charset=utf-8');
391 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
392 header('Last-Modified:' . gmdate('D, d M Y H:i:s') . ' GMT');
393 header('Cache-Control: no-cache, must-revalidate');
394 header('Pragma: no-cache');
395 $page->changeTpl('profile/grades.js.tpl', NO_SKIN
);
396 $res = XDB
::iterator("SELECT *
397 FROM profile_medals_grades
400 while ($tmp = $res->next()) {
401 $grades[$tmp['mid']][] = $tmp;
403 $page->assign('grades', $grades);
405 $res = XDB
::iterator("SELECT *, FIND_IN_SET('validation', flags) AS validate
407 ORDER BY type, text");
409 while ($tmp = $res->next()) {
410 $mlist[$tmp['type']][] = $tmp;
412 $page->assign('medal_list', $mlist);
415 function handler_ajax_address(&$page, $adid)
417 header('Content-Type: text/html; charset=utf-8');
418 $page->changeTpl('profile/adresses.address.tpl', NO_SKIN
);
419 $page->assign('i', $adid);
420 $page->assign('adr', array());
423 function handler_ajax_tel(&$page, $prefid, $prefname, $telid)
425 header('Content-Type: text/html; charset=utf-8');
426 $page->changeTpl('profile/phone.tpl', NO_SKIN
);
427 $page->assign('prefid', $prefid);
428 $page->assign('prefname', $prefname);
429 $page->assign('telid', $telid);
430 $page->assign('tel', array());
433 function handler_ajax_edu(&$page, $eduid, $class)
435 header('Content-Type: text/html; charset=utf-8');
436 $page->changeTpl('profile/edu.tpl', NO_SKIN
);
437 $res = XDB
::iterator("SELECT id, field
438 FROM profile_education_field_enum
440 $page->assign('edu_fields', $res->fetchAllAssoc());
441 $page->assign('eduid', $eduid);
442 $page->assign('class', $class);
443 require_once "education.func.inc.php";
446 function handler_ajax_medal(&$page, $id)
448 header('Content-Type: text/html; charset=utf-8');
449 $page->changeTpl('profile/deco.medal.tpl', NO_SKIN
);
450 $page->assign('id', $id);
451 $page->assign('medal', array('valid' => 0, 'grade' => 0));
454 function handler_ajax_job(&$page, $id)
456 header('Content-Type: text/html; charset=utf-8');
457 $page->changeTpl('profile/jobs.job.tpl', NO_SKIN
);
458 $page->assign('i', $id);
459 $page->assign('job', array());
460 $page->assign('new', true
);
461 $res = XDB
::query("SELECT id, name AS label
462 FROM profile_job_sector_enum");
463 $page->assign('secteurs', $res->fetchAllAssoc());
464 $res = XDB
::query("SELECT id, fonction_fr, FIND_IN_SET('titre', flags) AS title
467 $page->assign('fonctions', $res->fetchAllAssoc());
468 require_once "emails.combobox.inc.php";
469 fill_email_combobox($page);
472 function handler_ajax_secteur(&$page, $id, $jobid, $jobpref, $sect, $ssect = -1)
474 header('Content-Type: text/html; charset=utf-8');
475 $res = XDB
::iterator("SELECT id, name AS label, FIND_IN_SET('optgroup', flags) AS optgroup
476 FROM profile_job_subsector_enum
477 WHERE sectorid = {?}", $sect);
478 $page->changeTpl('profile/jobs.secteur.tpl', NO_SKIN
);
479 $page->assign('id', $id);
480 $page->assign('ssecteurs', $res);
481 $page->assign('sel', $ssect);
483 $page->assign('change', 1);
484 $page->assign('jobid', $jobid);
485 $page->assign('jobpref', $jobpref);
489 function handler_ajax_ssecteur(&$page, $id, $ssect, $sssect = -1)
491 header('Content-Type: text/html; charset=utf-8');
492 $res = XDB
::iterator("SELECT id, name AS label
493 FROM profile_job_subsubsector_enum
494 WHERE subsectorid = {?}", $ssect);
495 $page->changeTpl('profile/jobs.soussecteur.tpl', NO_SKIN
);
496 $page->assign('id', $id);
497 $page->assign('sssecteurs', $res);
498 $page->assign('sel', $sssect);
501 function handler_ajax_skill(&$page, $cat, $id)
503 header('Content-Type: text/html; charset=utf-8');
504 $page->changeTpl('profile/skill.skill.tpl', NO_SKIN
);
505 $page->assign('cat', $cat);
506 $page->assign('id', $id);
507 if ($cat == 'competences') {
508 $page->assign('levels', array('initié' => 'initié',
509 'bonne connaissance' => 'bonne connaissance',
510 'expert' => 'expert'));
512 $page->assign('levels', array(1 => 'connaissance basique',
513 2 => 'maîtrise des bases',
514 3 => 'maîtrise limitée',
515 4 => 'maîtrise générale',
516 5 => 'bonne maîtrise',
517 6 => 'maîtrise complète'));
521 function handler_ajax_searchname(&$page, $snid)
523 header('Content-Type: text/html; charset=utf-8');
524 $page->changeTpl('profile/general.searchname.tpl', NO_SKIN
);
525 $page->assign('i', $snid);
526 $page->assign('sn', array());
527 $page->assign('newsn', true
);
530 function handler_p_orange(&$page)
532 $page->changeTpl('profile/orange.tpl');
534 require_once 'validations.inc.php';
536 $res = XDB
::query("SELECT e.entry_year, e.grad_year, d.promo, FIND_IN_SET('femme', u.flags) AS sexe
537 FROM auth_user_md5 AS u
538 INNER JOIN profile_display AS d ON (d.pid = u.user_id)
539 INNER JOIN profile_education AS e ON (e.uid = u.user_id AND FIND_IN_SET('primary', e.flags))
540 WHERE u.user_id = {?}", S
::v('uid'));
542 list($promo, $promo_sortie_old, $promo_display, $sexe) = $res->fetchOneRow();
543 $page->assign('promo_sortie_old', $promo_sortie_old);
544 $page->assign('promo', $promo);
545 $page->assign('promo_display', $promo_display);
546 $page->assign('sexe', $sexe);
548 if (!Env
::has('promo_sortie')) {
551 S
::assert_xsrf_token();
554 $promo_sortie = Env
::i('promo_sortie');
556 if ($promo_sortie < 1000 ||
$promo_sortie > 9999) {
557 $page->trigError('L\'année de sortie doit être un nombre de quatre chiffres.');
559 elseif ($promo_sortie < $promo +
3) {
560 $page->trigError('Trop tôt !');
562 elseif ($promo_sortie == $promo_sortie_old) {
563 $page->trigWarning('Tu appartiens déjà à la promotion correspondante à cette année de sortie.');
565 elseif ($promo_sortie == $promo +
3) {
566 XDB
::execute("UPDATE profile_education
568 WHERE uid = {?} AND FIND_IN_SET('primary', flags)", $promo_sortie, S
::v('uid'));
569 $page->trigSuccess('Ton statut "orange" a été supprimé.');
570 $page->assign('promo_sortie_old', $promo_sortie);
573 $page->assign('promo_sortie', $promo_sortie);
575 if (Env
::has('submit')) {
576 $myorange = new OrangeReq(S
::user(), $promo_sortie);
578 $page->assign('myorange', $myorange);
583 function handler_referent(&$page, $x = null
)
585 require_once 'user.func.inc.php';
586 $page->changeTpl('profile/fiche_referent.tpl', SIMPLE
);
588 $user = User
::get($x);
593 $res = XDB
::query("SELECT cv FROM auth_user_md5 WHERE user_id = {?}", $user->id());
594 $cv = $res->fetchOneCell();
596 $page->assign_by_ref('user', $user);
597 $page->assign('cv', MiniWiki
::WikiToHTML($cv, true
));
598 $page->assign('adr_pro', get_user_details_pro($user->id()));
600 ///// recuperations infos referent
603 $res = XDB
::query("SELECT expertise FROM profile_mentor WHERE uid = {?}", $user->id());
604 $page->assign('expertise', $res->fetchOneCell());
607 $secteurs = $ss_secteurs = Array();
609 "SELECT s.name AS label, ss.name AS label
610 FROM profile_mentor_sector AS m
611 LEFT JOIN profile_job_sector_enum AS s ON(m.sectorid = s.id)
612 LEFT JOIN profile_job_subsector_enum AS ss ON(m.sectorid = ss.sectorid AND m.subsectorid = ss.id)
613 WHERE uid = {?}", $user->id());
614 while (list($sec, $ssec) = $res->next()) {
616 $ss_secteurs[] = $ssec;
618 $page->assign_by_ref('secteurs', $secteurs);
619 $page->assign_by_ref('ss_secteurs', $ss_secteurs);
624 FROM profile_mentor_country AS m
625 LEFT JOIN geoloc_pays AS gp ON (m.country = gp.a2)
626 WHERE uid = {?}", $user->id());
627 $page->assign('pays', $res->fetchColumn());
629 $page->addJsLink('close_on_esc.js');
632 function handler_ref_search(&$page, $action = null
, $subaction = null
)
634 $wp = new PlWikiPage('Docs.Emploi');
637 $page->setTitle('Conseil Pro');
639 //recuperation des noms de secteurs
640 $res = XDB
::iterRow("SELECT id, name AS label FROM profile_job_sector_enum");
642 while (list($tmp_id, $tmp_label) = $res->next()) {
643 $secteurs[$tmp_id] = $tmp_label;
645 $page->assign_by_ref('secteurs', $secteurs);
648 $res = XDB
::query("SELECT count(*) FROM profile_mentor");
649 $page->assign('mentors_number', $res->fetchOneCell());
651 // On vient d'un formulaire
653 $pays_sel = XDB
::escape(Env
::v('pays_sel'));
654 $secteur_sel = XDB
::escape(Env
::v('secteur'));
655 $ss_secteur_sel = XDB
::escape(Env
::v('ss_secteur'));
656 $expertise_champ = XDB
::escape(Env
::v('expertise'));
658 if ($pays_sel != "''") {
659 $where[] = "mp.country = $pays_sel";
661 if ($secteur_sel != "''") {
662 $where[] = "ms.sectorid = $secteur_sel";
663 if ($ss_secteur_sel != "''") {
664 $where[] = "ms.subsectorid = $ss_secteur_sel";
667 if ($expertise_champ != "''") {
668 $where[] = "MATCH(m.expertise) AGAINST($expertise_champ)";
672 $where = join(' AND ', $where);
674 $set = new UserSet("INNER JOIN profile_mentor AS m ON (m.uid = u.user_id)
675 LEFT JOIN profile_mentor_country AS mp ON (mp.uid = m.uid)
676 LEFT JOIN profile_mentor_sector AS ms ON (ms.uid = m.uid)",
678 $set->addMod('mentor', 'Référents');
679 $set->apply('referent/search', $page, $action, $subaction);
680 if ($set->count() > 100) {
681 $page->assign('recherche_trop_large', true
);
684 $page->changeTpl('profile/referent.tpl');
687 function handler_ref_sect(&$page, $sect)
689 header('Content-Type: text/html; charset=utf-8');
690 $page->changeTpl('include/field.select.tpl', NO_SKIN
);
691 $page->assign('onchange', 'setSSecteurs()');
692 $page->assign('id', 'ssect_field');
693 $page->assign('name', 'ss_secteur');
694 $it = XDB
::iterator("SELECT id, name AS field
695 FROM profile_job_subsector_enum
696 WHERE sectorid = {?}", $sect);
697 $page->assign('list', $it);
700 function handler_ref_country(&$page, $sect, $ssect = '')
702 header('Content-Type: text/html; charset=utf-8');
703 $page->changeTpl('include/field.select.tpl', NO_SKIN
);
704 $page->assign('name', 'pays_sel');
705 $where = ($ssect ?
' AND ms.subsectorid = {?}' : '');
706 $it = XDB
::iterator("SELECT a2 AS id, pays AS field
707 FROM geoloc_pays AS g
708 INNER JOIN profile_mentor_country AS mp ON (mp.country = g.a2)
709 INNER JOIN profile_mentor_sector AS ms ON (ms.uid = mp.uid)
710 WHERE ms.sectorid = {?} $where
712 ORDER BY pays", $sect, $ssect);
713 $page->assign('list', $it);
716 function handler_p_usage(&$page)
718 $page->changeTpl('profile/nomusage.tpl');
720 require_once 'validations.inc.php';
723 "SELECT u.nom, u.nom_usage, u.flags, e.alias
724 FROM auth_user_md5 AS u
725 LEFT JOIN aliases AS e ON(u.user_id = e.id
726 AND FIND_IN_SET('usage', e.flags))
727 WHERE user_id={?}", S
::v('uid'));
729 list($nom, $usage_old, $flags, $alias_old) = $res->fetchOneRow();
730 $flags = new PlFlagSet($flags);
731 $page->assign('usage_old', $usage_old);
732 $page->assign('alias_old', $alias_old);
734 $nom_usage = replace_accent(trim(Env
::v('nom_usage')));
735 $nom_usage = strtoupper($nom_usage);
736 $page->assign('usage_req', $nom_usage);
738 if (Env
::has('submit') && ($nom_usage != $usage_old)) {
739 S
::assert_xsrf_token();
741 // on vient de recevoir une requete, differente de l'ancien nom d'usage
742 if ($nom_usage == $nom) {
743 $page->trigWarning('Le nom d\'usage que tu demandes est identique à ton nom à l\'X, '
744 . 'aucune modification n\'a donc été effectuée.');
745 $page->assign('same', true
);
746 } else { // le nom de mariage est distinct du nom à l'X
747 // on calcule l'alias pour l'afficher
748 $reason = Env
::v('reason');
749 if ($reason == 'other') {
750 $reason = Env
::v('other_reason');
752 $myusage = new UsageReq(S
::user(), $nom_usage, $reason);
754 $page->assign('myusage', $myusage);
759 function handler_xnet(&$page)
761 $page->changeTpl('profile/groupesx.tpl');
762 $page->setTitle('Promo, Groupes X, Binets');
765 SELECT m.asso_id, a.nom, diminutif, a.logo IS NOT NULL AS has_logo,
766 COUNT(e.eid) AS events, mail_domain AS lists
767 FROM groupex.membres AS m
768 INNER JOIN groupex.asso AS a ON(m.asso_id = a.id)
769 LEFT JOIN groupex.evenements AS e ON(e.asso_id = m.asso_id AND e.archive = 0)
770 WHERE uid = {?} GROUP BY m.asso_id ORDER BY a.nom', S
::i('uid'));
771 $page->assign('assos', $req->fetchAllAssoc());
774 function handler_vcard(&$page, $x = null
)
782 if (substr($x, -4) == '.vcf') {
783 $x = substr($x, 0, strlen($x) - 4);
786 $vcard = new VCard();
791 function handler_admin_trombino(&$page, $login = null
, $action = null
) {
792 $page->changeTpl('profile/admin_trombino.tpl');
793 $page->setTitle('Administration - Trombino');
795 if (!$login ||
!($user = User
::get($login))) {
798 $page->assign_by_ref('user', $user);
803 header("Content-type: image/jpeg");
804 readfile("/home/web/trombino/photos" . $user->promo() . "/" . $user->login() . ".jpg");
809 S
::assert_xsrf_token();
811 $data = file_get_contents($_FILES['userfile']['tmp_name']);
812 list($x, $y) = getimagesize($_FILES['userfile']['tmp_name']);
813 $mimetype = substr($_FILES['userfile']['type'], 6);
814 unlink($_FILES['userfile']['tmp_name']);
816 "REPLACE INTO photo SET uid={?}, attachmime = {?}, attach={?}, x={?}, y={?}",
817 $user->id(), $mimetype, $data, $x, $y);
821 S
::assert_xsrf_token();
823 XDB
::execute('DELETE FROM photo WHERE uid = {?}', $user->id());
827 function handler_admin_binets(&$page, $action = 'list', $id = null
) {
828 $page->setTitle('Administration - Binets');
829 $page->assign('title', 'Gestion des binets');
830 $table_editor = new PLTableEditor('admin/binets', 'binets_def', 'id');
831 $table_editor->add_join_table('binets_ins','binet_id',true
);
832 $table_editor->describe('text','intitulé',true
);
833 $table_editor->apply($page, $action, $id);
835 function handler_admin_education(&$page, $action = 'list', $id = null
) {
836 $page->setTitle('Administration - Formations');
837 $page->assign('title', 'Gestion des formations');
838 $table_editor = new PLTableEditor('admin/education', 'profile_education_enum', 'id');
839 $table_editor->add_join_table('profile_education', 'eduid', true
);
840 $table_editor->add_join_table('profile_education_degree', 'eduid', true
);
841 $table_editor->describe('name', 'intitulé', true
);
842 $table_editor->describe('url', 'site web', false
);
843 $table_editor->apply($page, $action, $id);
845 function handler_admin_education_field(&$page, $action = 'list', $id = null
) {
846 $page->setTitle('Administration - Domaines de formation');
847 $page->assign('title', 'Gestion des domaines de formation');
848 $table_editor = new PLTableEditor('admin/education_field', 'profile_education_field_enum', 'id', true
);
849 $table_editor->add_join_table('profile_education', 'fieldid', true
);
850 $table_editor->describe('field', 'domaine', true
);
851 $table_editor->apply($page, $action, $id);
853 function handler_admin_education_degree(&$page, $action = 'list', $id = null
) {
854 $page->setTitle('Administration - Niveau de formation');
855 $page->assign('title', 'Gestion des niveau de formation');
856 $table_editor = new PLTableEditor('admin/education_degree', 'profile_education_degree_enum', 'id', true
);
857 $table_editor->add_join_table('profile_education_degree', 'degreeid', true
);
858 $table_editor->add_join_table('profile_education', 'degreeid', true
);
859 $table_editor->describe('degree', 'niveau', true
);
860 $table_editor->apply($page, $action, $id);
862 function handler_admin_education_degree_set(&$page, $action = 'list', $id = null
) {
863 $page->setTitle('Administration - Correspondances formations - niveau de formation');
864 $page->assign('title', 'Gestion des correspondances formations - niveau de formation');
865 $table_editor = new PLTableEditor('admin/education_degree_set', 'profile_education_degree', 'eduid', true
);
866 $table_editor->describe('eduid', 'formation', true
);
867 $table_editor->describe('degreeid', 'niveau', true
);
868 $table_editor->apply($page, $action, $id);
870 function handler_admin_sections(&$page, $action = 'list', $id = null
) {
871 $page->setTitle('Administration - Sections');
872 $page->assign('title', 'Gestion des sections');
873 $table_editor = new PLTableEditor('admin/sections','sections','id');
874 $table_editor->describe('text','intitulé',true
);
875 $table_editor->apply($page, $action, $id);
877 function handler_admin_ss_secteurs(&$page, $action = 'list', $id = null
) {
878 $page->setTitle('Administration - Sous-secteurs');
879 $page->assign('title', 'Gestion des sous-secteurs');
880 $table_editor = new PLTableEditor('admin/ss_secteurs', 'emploi_ss_secteur', 'id', true
);
881 $table_editor->describe('label', 'intitulé', true
);
882 $table_editor->apply($page, $action, $id);
884 function handler_admin_fonctions(&$page, $action = 'list', $id = null
) {
885 $page->setTitle('Administration - Fonctions');
886 $page->assign('title', 'Gestion des fonctions');
887 $table_editor = new PLTableEditor('admin/fonctions', 'fonctions_def', 'id', true
);
888 $table_editor->describe('fonction_fr', 'intitulé', true
);
889 $table_editor->describe('fonction_en', 'intitulé (ang)', true
);
890 $table_editor->describe('flags', 'titre', true
);
891 $table_editor->apply($page, $action, $id);
893 function handler_admin_secteurs(&$page, $action = 'list', $id = null
) {
894 $page->setTitle('Administration - Secteurs');
895 $page->assign('title', 'Gestion des secteurs');
896 $table_editor = new PLTableEditor('admin/secteurs', 'emploi_secteur', 'id', true
);
897 $table_editor->describe('label', 'intitulé', true
);
898 $table_editor->apply($page, $action, $id);
900 function handler_admin_networking(&$page, $action = 'list', $id = null
) {
901 $page->assign('xorg_title', 'Polytechnique.org - Administration - Networking');
902 $page->assign('title', 'Gestion des types de networking');
903 $table_editor = new PLTableEditor('admin/networking', 'profile_networking_enum', 'network_type');
904 $table_editor->describe('name', 'intitulé', true
);
905 $table_editor->describe('icon', 'nom de l\'icône', false
);
906 $table_editor->describe('filter', 'filtre', true
);
907 $table_editor->describe('link', 'lien web', true
);
908 $table_editor->apply($page, $action, $id);
910 function handler_admin_corps_enum(&$page, $action = 'list', $id = null
) {
911 $page->setTitle('Administration - Corps');
912 $page->assign('title', 'Gestion des Corps');
913 $table_editor = new PLTableEditor('admin/corps_enum', 'profile_corps_enum', 'id');
914 $table_editor->describe('name', 'intitulé', true
);
915 $table_editor->describe('abbreviation', 'abbréviation', true
);
916 $table_editor->describe('still_exists', 'existe encore ?', true
);
917 $table_editor->apply($page, $action, $id);
919 function handler_admin_corps_rank(&$page, $action = 'list', $id = null
) {
920 $page->setTitle('Administration - Grade dans les Corps');
921 $page->assign('title', 'Gestion des grade dans les Corps');
922 $table_editor = new PLTableEditor('admin/corps_rank', 'profile_corps_rank_enum', 'id');
923 $table_editor->describe('name', 'intitulé', true
);
924 $table_editor->describe('abbreviation', 'abbréviation', true
);
925 $table_editor->apply($page, $action, $id);
927 function handler_admin_medals(&$page, $action = 'list', $id = null
) {
928 $page->setTitle('Administration - Distinctions');
929 $page->assign('title', 'Gestion des Distinctions');
930 $table_editor = new PLTableEditor('admin/medals','profile_medals','id');
931 $table_editor->describe('text', 'intitulé', true
);
932 $table_editor->describe('img', 'nom de l\'image', false
);
933 $table_editor->describe('flags', 'valider', true
);
934 $table_editor->apply($page, $action, $id);
935 if ($id && $action == 'edit') {
936 $page->changeTpl('profile/admin_decos.tpl');
940 if (Post
::v('act') == 'del') {
941 XDB
::execute('DELETE FROM profile_medals_grades
942 WHERE mid={?} AND gid={?}', $mid, Post
::i('gid'));
944 foreach (Post
::v('grades', array()) as $gid=>$text) {
947 $res = XDB
::query('SELECT MAX(gid)
948 FROM profile_medals_grades
949 WHERE mid = {?}', $mid);
950 $gid = $res->fetchOneCell() +
1;
952 XDB
::execute('INSERT INTO profile_medals_grades (mid, gid, text, pos)
953 VALUES ({?}, {?}, {?}, {?})',
954 $mid, $gid, $text, $_POST['pos']['0']);
957 XDB
::execute('UPDATE profile_medals_grades
958 SET pos={?}, text={?}
959 WHERE gid={?} AND mid={?}', $_POST['pos'][$gid], $text, $gid, $mid);
963 $res = XDB
::iterator('SELECT gid, text, pos FROM profile_medals_grades WHERE mid={?} ORDER BY pos', $mid);
964 $page->assign('grades', $res);
969 // vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8: