MDL-22631 Added some clean_param calls to clean the $_GET data and also added lots...
[moodle.git] / calendar / set.php
blob67326eaabca1fdba319729ab0a7657fabfa1b447
1 <?php // $Id$
3 /////////////////////////////////////////////////////////////////////////////
4 // //
5 // NOTICE OF COPYRIGHT //
6 // //
7 // Moodle - Calendar extension //
8 // //
9 // Copyright (C) 2003-2004 Greek School Network www.sch.gr //
10 // //
11 // Designed by: //
12 // Avgoustos Tsinakos (tsinakos@teikav.edu.gr) //
13 // Jon Papaioannou (pj@moodle.org) //
14 // //
15 // Programming and development: //
16 // Jon Papaioannou (pj@moodle.org) //
17 // //
18 // For bugs, suggestions, etc contact: //
19 // Jon Papaioannou (pj@moodle.org) //
20 // //
21 // The current module was developed at the University of Macedonia //
22 // (www.uom.gr) under the funding of the Greek School Network (www.sch.gr) //
23 // The aim of this project is to provide additional and improved //
24 // functionality to the Asynchronous Distance Education service that the //
25 // Greek School Network deploys. //
26 // //
27 // This program is free software; you can redistribute it and/or modify //
28 // it under the terms of the GNU General Public License as published by //
29 // the Free Software Foundation; either version 2 of the License, or //
30 // (at your option) any later version. //
31 // //
32 // This program is distributed in the hope that it will be useful, //
33 // but WITHOUT ANY WARRANTY; without even the implied warranty of //
34 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the //
35 // GNU General Public License for more details: //
36 // //
37 // http://www.gnu.org/copyleft/gpl.html //
38 // //
39 /////////////////////////////////////////////////////////////////////////////
41 require_once('../config.php');
42 require_once($CFG->dirroot.'/calendar/lib.php');
44 $from = required_param('from');
45 $var = required_param('var');
46 $value = optional_param('value');
47 $id = optional_param('id');
48 $cal_d = optional_param('cal_d');
49 $cal_m = optional_param('cal_m');
50 $cal_y = optional_param('cal_y');
52 // Initialize the session variables
53 calendar_session_vars();
55 // Ensure course id passed if relevant
56 // Required due to changes in view/lib.php mainly (calendar_session_vars())
57 $courseid = '';
58 if (!empty($id)) {
59 $courseid = '&amp;course='.$id;
62 switch($var) {
63 case 'setuser':
64 // Not implemented yet (or possibly at all)
65 break;
66 case 'setcourse':
67 $id = intval($id);
68 if($id == 0) {
69 $SESSION->cal_courses_shown = array();
70 calendar_set_referring_course(0);
72 else if($id == 1) {
73 $SESSION->cal_courses_shown = calendar_get_default_courses(true);
74 calendar_set_referring_course(0);
76 else {
77 if(get_record('course', 'id', $id) === false) {
78 // There is no such course
79 $SESSION->cal_courses_shown = array();
80 calendar_set_referring_course(0);
82 else {
83 calendar_set_referring_course($id);
84 $SESSION->cal_courses_shown = $id;
87 break;
88 case 'showgroups':
89 $SESSION->cal_show_groups = !$SESSION->cal_show_groups;
90 set_user_preference('calendar_savedflt', calendar_get_filters_status());
91 break;
92 case 'showcourses':
93 $SESSION->cal_show_course = !$SESSION->cal_show_course;
94 set_user_preference('calendar_savedflt', calendar_get_filters_status());
95 break;
96 case 'showglobal':
97 $SESSION->cal_show_global = !$SESSION->cal_show_global;
98 set_user_preference('calendar_savedflt', calendar_get_filters_status());
99 break;
100 case 'showuser':
101 $SESSION->cal_show_user = !$SESSION->cal_show_user;
102 set_user_preference('calendar_savedflt', calendar_get_filters_status());
103 break;
106 switch($from) {
107 case 'event':
108 redirect(CALENDAR_URL.'event.php?action='.$action.'&amp;type='.$type.'&amp;id='.intval($id));
109 break;
110 case 'month':
111 redirect(CALENDAR_URL.'view.php?view=month'.$courseid.'&cal_d='.$cal_d.'&cal_m='.$cal_m.'&cal_y='.$cal_y);
112 break;
113 case 'upcoming':
114 redirect(CALENDAR_URL.'view.php?view=upcoming'.$courseid);
115 break;
116 case 'day':
117 redirect(CALENDAR_URL.'view.php?view=day'.$courseid.'&cal_d='.$cal_d.'&cal_m='.$cal_m.'&cal_y='.$cal_y);
118 break;
119 case 'course':
120 redirect($CFG->wwwroot.'/course/view.php?id='.intval($id));
121 break;
122 default: