. /** * Display profile for a particular user * * @copyright 1999 Martin Dougiamas http://dougiamas.com * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later * @package user */ require_once("../config.php"); require_once($CFG->dirroot.'/user/profile/lib.php'); require_once($CFG->dirroot.'/tag/lib.php'); require_once($CFG->libdir . '/filelib.php'); $id = optional_param('id', 0, PARAM_INT); // user id $courseid = optional_param('course', SITEID, PARAM_INT); // course id (defaults to Site) if (empty($id)) { // See your own profile by default require_login(); $id = $USER->id; } if ($courseid == SITEID) { // Since Moodle 2.0 all site-level profiles are shown by profile.php redirect($CFG->wwwroot.'/user/profile.php?id='.$id); // Immediate redirect } $PAGE->set_url('/user/view.php', array('id'=>$id,'course'=>$courseid)); $user = $DB->get_record('user', array('id'=>$id), '*', MUST_EXIST); $course = $DB->get_record('course', array('id'=>$courseid), '*', MUST_EXIST); $currentuser = ($user->id == $USER->id); $systemcontext = get_context_instance(CONTEXT_SYSTEM); $coursecontext = get_context_instance(CONTEXT_COURSE, $course->id); $usercontext = get_context_instance(CONTEXT_USER, $user->id, MUST_EXIST); // Require login first if (isguestuser($user)) { // can not view profile of guest - thre is nothing to see there print_error('invaliduserid'); } if (!empty($CFG->forceloginforprofiles)) { require_login(); // we can not log in to course due to the parent hack bellow if (isguestuser()) { $SESSION->wantsurl = $PAGE->url->out(false); redirect(get_login_url()); } } $PAGE->set_context($coursecontext); $PAGE->set_course($course); $PAGE->set_pagetype('course-view-' . $course->format); // To get the blocks exactly like the course $PAGE->add_body_class('path-user'); // So we can style it independently $PAGE->set_other_editing_capability('moodle/course:manageactivities'); $isparent = false; if (!$currentuser and $DB->record_exists('role_assignments', array('userid'=>$USER->id, 'contextid'=>$usercontext->id)) and has_capability('moodle/user:viewdetails', $usercontext)) { // TODO: very ugly hack - do not force "parents" to enrol into course their child is enrolled in, // this way they may access the profile where they get overview of grades and child activity in course, // please note this is just a guess! require_login(); $isparent = true; $PAGE->navigation->set_userid_for_parent_checks($id); } else { // normal course require_login($course); // what to do with users temporary accessing this course? should they see the details? } $strpersonalprofile = get_string('personalprofile'); $strparticipants = get_string("participants"); $struser = get_string("user"); $fullname = fullname($user, has_capability('moodle/site:viewfullnames', $coursecontext)); /// Now test the actual capabilities and enrolment in course if ($currentuser) { // me if (!is_enrolled($coursecontext) and !is_viewing($coursecontext)) { // Need to have full access to a course to see the rest of own info echo $OUTPUT->header(); echo $OUTPUT->heading(get_string('notenrolled', '', $fullname)); if (!empty($_SERVER['HTTP_REFERER'])) { echo $OUTPUT->continue_button($_SERVER['HTTP_REFERER']); } echo $OUTPUT->footer(); die; } } else { // somebody else $PAGE->set_title("$strpersonalprofile: "); $PAGE->set_heading("$strpersonalprofile: "); // check course level capabilities if (!has_capability('moodle/user:viewdetails', $coursecontext) && // normal enrolled user or mnager !has_capability('moodle/user:viewdetails', $usercontext)) { // usually parent print_error('cannotviewprofile'); } if (!is_enrolled($coursecontext, $user->id)) { // TODO: the only potential problem is that managers and inspectors might post in forum, but the link // to profile would not work - maybe a new capability - moodle/user:freely_acessile_profile_for_anybody // or test for course:inspect capability if (has_capability('moodle/role:assign', $coursecontext)) { $PAGE->navbar->add($fullname); echo $OUTPUT->header(); echo $OUTPUT->heading(get_string('notenrolled', '', $fullname)); } else { echo $OUTPUT->header(); $PAGE->navbar->add($struser); echo $OUTPUT->heading(get_string('notenrolledprofile')); } if (!empty($_SERVER['HTTP_REFERER'])) { echo $OUTPUT->continue_button($_SERVER['HTTP_REFERER']); } echo $OUTPUT->footer(); exit; } // If groups are in use and enforced throughout the course, then make sure we can meet in at least one course level group if (groups_get_course_groupmode($course) == SEPARATEGROUPS and $course->groupmodeforce and !has_capability('moodle/site:accessallgroups', $coursecontext) and !has_capability('moodle/site:accessallgroups', $coursecontext, $user->id)) { if (!isloggedin() or isguestuser()) { // do not use require_login() here because we might have already used require_login($course) redirect(get_login_url()); } $mygroups = array_keys(groups_get_all_groups($course->id, $USER->id, $course->defaultgroupingid, 'g.id, g.name')); $usergroups = array_keys(groups_get_all_groups($course->id, $user->id, $course->defaultgroupingid, 'g.id, g.name')); if (!array_intersect($mygroups, $usergroups)) { print_error("groupnotamember", '', "../course/view.php?id=$course->id"); } } } /// We've established they can see the user's name at least, so what about the rest? if (!$currentuser) { $PAGE->navigation->extend_for_user($user); if ($node = $PAGE->settingsnav->get('userviewingsettings'.$user->id)) { $node->forceopen = true; } } else if ($node = $PAGE->settingsnav->get('usercurrentsettings', navigation_node::TYPE_CONTAINER)) { $node->forceopen = true; } if ($node = $PAGE->settingsnav->get('courseadmin')) { $node->forceopen = false; } $PAGE->set_title("$course->fullname: $strpersonalprofile: $fullname"); $PAGE->set_heading($course->fullname); $PAGE->set_pagelayout('standard'); echo $OUTPUT->header(); echo '
'; echo $OUTPUT->heading(fullname($user).' ('.$course->shortname.')'); if ($user->deleted) { echo $OUTPUT->heading(get_string('userdeleted')); if (!has_capability('moodle/user:update', $coursecontext)) { echo $OUTPUT->footer(); die; } } /// OK, security out the way, now we are showing the user add_to_log($course->id, "user", "view", "view.php?id=$user->id&course=$course->id", "$user->id"); /// Get the hidden field list if (has_capability('moodle/user:viewhiddendetails', $coursecontext)) { $hiddenfields = array(); } else { $hiddenfields = array_flip(explode(',', $CFG->hiddenuserfields)); } if (is_mnet_remote_user($user)) { $sql = "SELECT h.id, h.name, h.wwwroot, a.name as application, a.display_name FROM {mnet_host} h, {mnet_application} a WHERE h.id = ? AND h.applicationid = a.id"; $remotehost = $DB->get_record_sql($sql, array($user->mnethostid)); $a = new stdclass(); $a->remotetype = $remotehost->display_name; $a->remotename = $remotehost->name; $a->remoteurl = $remotehost->wwwroot; echo $OUTPUT->box(get_string('remoteuserinfo', 'mnet', $a), 'remoteuserinfo'); } echo '
'; echo $OUTPUT->user_picture($user, array('size'=>100)); echo '
'; // Print the description echo '
'; if ($user->description && !isset($hiddenfields['description'])) { if (!empty($CFG->profilesforenrolledusersonly) && !$DB->record_exists('role_assignments', array('userid'=>$id))) { echo get_string('profilenotshown', 'moodle'); } else { if ($courseid == SITEID) { $user->description = file_rewrite_pluginfile_urls($user->description, 'pluginfile.php', $usercontext->id, 'user', 'profile', null); } else { // we have to make a little detour thought the course context to verify the access control for course profile $user->description = file_rewrite_pluginfile_urls($user->description, 'pluginfile.php', $coursecontext->id, 'user', 'profile', $user->id); } $options = array('overflowdiv'=>true); echo format_text($user->description, $user->descriptionformat, $options); } } echo '
'; // Print all the little details in a list echo ''; //checks were performed above that ensure that if we've got to here either the user //is viewing their own profile ($USER->id == $user->id) or $user is enrolled in the course if ($currentuser or $user->maildisplay == 1 //allow everyone to see email address or ($user->maildisplay == 2 && is_enrolled($coursecontext, $USER)) //fellow course members can see email. Already know $user is enrolled or has_capability('moodle/course:useremail', $coursecontext)) { print_row(get_string("email").":", obfuscate_mailto($user->email, '')); } // Show last time this user accessed this course if (!isset($hiddenfields['lastaccess'])) { if ($lastaccess = $DB->get_record('user_lastaccess', array('userid'=>$user->id, 'courseid'=>$course->id))) { $datestring = userdate($lastaccess->timeaccess)."  (".format_time(time() - $lastaccess->timeaccess).")"; } else { $datestring = get_string("never"); } print_row(get_string("lastaccess").":", $datestring); } // Show roles in this course if ($rolestring = get_user_roles_in_course($id, $course->id)) { print_row(get_string('roles').':', $rolestring); } // Show groups this user is in if (!isset($hiddenfields['groups'])) { $accessallgroups = has_capability('moodle/site:accessallgroups', $coursecontext); if ($usergroups = groups_get_all_groups($course->id, $user->id)) { $groupstr = ''; foreach ($usergroups as $group){ if ($course->groupmode == SEPARATEGROUPS and !$accessallgroups and $user->id != $USER->id) { if (!groups_is_member($group->id, $user->id)) { continue; } } if ($course->groupmode != NOGROUPS) { $groupstr .= ' '.format_string($group->name).','; } else { $groupstr .= ' '.format_string($group->name); // the user/index.php shows groups only when course in group mode } } if ($groupstr !== '') { print_row(get_string("group").":", rtrim($groupstr, ', ')); } } } // Show other courses they may be in if (!isset($hiddenfields['mycourses'])) { if ($mycourses = enrol_get_users_courses($user->id, true, NULL, 'visible DESC,sortorder ASC')) { $shown = 0; $courselisting = ''; foreach ($mycourses as $mycourse) { if ($mycourse->category) { if ($mycourse->id != $course->id){ $class = ''; if ($mycourse->visible == 0) { $ccontext = get_context_instance(CONTEXT_COURSE, $mycourse->id); if (!has_capability('moodle/course:viewhiddencourses', $ccontext)) { continue; } $class = 'class="dimmed"'; } $courselisting .= "wwwroot}/user/view.php?id={$user->id}&course={$mycourse->id}\" $class >" . format_string($mycourse->fullname) . ", "; } else { $courselisting .= format_string($mycourse->fullname) . ", "; $PAGE->navbar->add($mycourse->fullname); } } $shown++; if ($shown >= 20) { $courselisting .= "..."; break; } } print_row(get_string('courseprofiles').':', rtrim($courselisting,', ')); } } echo "
"; // Print messaging link if allowed if (isloggedin() && has_capability('moodle/site:sendmessage', $usercontext) && !empty($CFG->messaging) && !isguestuser() && !isguestuser($user) && ($USER->id != $user->id)) { echo '
'; echo ''.get_string('messageselectadd').''; echo '
'; } if ($currentuser || has_capability('moodle/user:viewdetails', $usercontext) || has_coursecontact_role($id)) { echo ''; } /// TODO Add more useful overview info for teachers here, see below /// Show links to notes made about this student (must click to display, for privacy) /// Recent comments made in this course /// Recent blogs associated with this course and items in it echo '
'; // userprofile class echo $OUTPUT->footer(); /// Functions /////// function print_row($left, $right) { echo "\n$left$right\n"; }