Merge branch 'MDL-58454-master' of git://github.com/junpataleta/moodle
[moodle.git] / lib / moodlelib.php
blob6c760ddd99ea0d28f1f98be3202118ca8e31f6fd
1 <?php
2 // This file is part of Moodle - http://moodle.org/
3 //
4 // Moodle is free software: you can redistribute it and/or modify
5 // it under the terms of the GNU General Public License as published by
6 // the Free Software Foundation, either version 3 of the License, or
7 // (at your option) any later version.
8 //
9 // Moodle is distributed in the hope that it will be useful,
10 // but WITHOUT ANY WARRANTY; without even the implied warranty of
11 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 // GNU General Public License for more details.
14 // You should have received a copy of the GNU General Public License
15 // along with Moodle. If not, see <http://www.gnu.org/licenses/>.
17 /**
18 * moodlelib.php - Moodle main library
20 * Main library file of miscellaneous general-purpose Moodle functions.
21 * Other main libraries:
22 * - weblib.php - functions that produce web output
23 * - datalib.php - functions that access the database
25 * @package core
26 * @subpackage lib
27 * @copyright 1999 onwards Martin Dougiamas http://dougiamas.com
28 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
31 defined('MOODLE_INTERNAL') || die();
33 // CONSTANTS (Encased in phpdoc proper comments).
35 // Date and time constants.
36 /**
37 * Time constant - the number of seconds in a year
39 define('YEARSECS', 31536000);
41 /**
42 * Time constant - the number of seconds in a week
44 define('WEEKSECS', 604800);
46 /**
47 * Time constant - the number of seconds in a day
49 define('DAYSECS', 86400);
51 /**
52 * Time constant - the number of seconds in an hour
54 define('HOURSECS', 3600);
56 /**
57 * Time constant - the number of seconds in a minute
59 define('MINSECS', 60);
61 /**
62 * Time constant - the number of minutes in a day
64 define('DAYMINS', 1440);
66 /**
67 * Time constant - the number of minutes in an hour
69 define('HOURMINS', 60);
71 // Parameter constants - every call to optional_param(), required_param()
72 // or clean_param() should have a specified type of parameter.
74 /**
75 * PARAM_ALPHA - contains only english ascii letters a-zA-Z.
77 define('PARAM_ALPHA', 'alpha');
79 /**
80 * PARAM_ALPHAEXT the same contents as PARAM_ALPHA plus the chars in quotes: "_-" allowed
81 * NOTE: originally this allowed "/" too, please use PARAM_SAFEPATH if "/" needed
83 define('PARAM_ALPHAEXT', 'alphaext');
85 /**
86 * PARAM_ALPHANUM - expected numbers and letters only.
88 define('PARAM_ALPHANUM', 'alphanum');
90 /**
91 * PARAM_ALPHANUMEXT - expected numbers, letters only and _-.
93 define('PARAM_ALPHANUMEXT', 'alphanumext');
95 /**
96 * PARAM_AUTH - actually checks to make sure the string is a valid auth plugin
98 define('PARAM_AUTH', 'auth');
101 * PARAM_BASE64 - Base 64 encoded format
103 define('PARAM_BASE64', 'base64');
106 * PARAM_BOOL - converts input into 0 or 1, use for switches in forms and urls.
108 define('PARAM_BOOL', 'bool');
111 * PARAM_CAPABILITY - A capability name, like 'moodle/role:manage'. Actually
112 * checked against the list of capabilities in the database.
114 define('PARAM_CAPABILITY', 'capability');
117 * PARAM_CLEANHTML - cleans submitted HTML code. Note that you almost never want
118 * to use this. The normal mode of operation is to use PARAM_RAW when receiving
119 * the input (required/optional_param or formslib) and then sanitise the HTML
120 * using format_text on output. This is for the rare cases when you want to
121 * sanitise the HTML on input. This cleaning may also fix xhtml strictness.
123 define('PARAM_CLEANHTML', 'cleanhtml');
126 * PARAM_EMAIL - an email address following the RFC
128 define('PARAM_EMAIL', 'email');
131 * PARAM_FILE - safe file name, all dangerous chars are stripped, protects against XSS, SQL injections and directory traversals
133 define('PARAM_FILE', 'file');
136 * PARAM_FLOAT - a real/floating point number.
138 * Note that you should not use PARAM_FLOAT for numbers typed in by the user.
139 * It does not work for languages that use , as a decimal separator.
140 * Instead, do something like
141 * $rawvalue = required_param('name', PARAM_RAW);
142 * // ... other code including require_login, which sets current lang ...
143 * $realvalue = unformat_float($rawvalue);
144 * // ... then use $realvalue
146 define('PARAM_FLOAT', 'float');
149 * PARAM_HOST - expected fully qualified domain name (FQDN) or an IPv4 dotted quad (IP address)
151 define('PARAM_HOST', 'host');
154 * PARAM_INT - integers only, use when expecting only numbers.
156 define('PARAM_INT', 'int');
159 * PARAM_LANG - checks to see if the string is a valid installed language in the current site.
161 define('PARAM_LANG', 'lang');
164 * PARAM_LOCALURL - expected properly formatted URL as well as one that refers to the local server itself. (NOT orthogonal to the
165 * others! Implies PARAM_URL!)
167 define('PARAM_LOCALURL', 'localurl');
170 * PARAM_NOTAGS - all html tags are stripped from the text. Do not abuse this type.
172 define('PARAM_NOTAGS', 'notags');
175 * PARAM_PATH - safe relative path name, all dangerous chars are stripped, protects against XSS, SQL injections and directory
176 * traversals note: the leading slash is not removed, window drive letter is not allowed
178 define('PARAM_PATH', 'path');
181 * PARAM_PEM - Privacy Enhanced Mail format
183 define('PARAM_PEM', 'pem');
186 * PARAM_PERMISSION - A permission, one of CAP_INHERIT, CAP_ALLOW, CAP_PREVENT or CAP_PROHIBIT.
188 define('PARAM_PERMISSION', 'permission');
191 * PARAM_RAW specifies a parameter that is not cleaned/processed in any way except the discarding of the invalid utf-8 characters
193 define('PARAM_RAW', 'raw');
196 * PARAM_RAW_TRIMMED like PARAM_RAW but leading and trailing whitespace is stripped.
198 define('PARAM_RAW_TRIMMED', 'raw_trimmed');
201 * PARAM_SAFEDIR - safe directory name, suitable for include() and require()
203 define('PARAM_SAFEDIR', 'safedir');
206 * PARAM_SAFEPATH - several PARAM_SAFEDIR joined by "/", suitable for include() and require(), plugin paths, etc.
208 define('PARAM_SAFEPATH', 'safepath');
211 * PARAM_SEQUENCE - expects a sequence of numbers like 8 to 1,5,6,4,6,8,9. Numbers and comma only.
213 define('PARAM_SEQUENCE', 'sequence');
216 * PARAM_TAG - one tag (interests, blogs, etc.) - mostly international characters and space, <> not supported
218 define('PARAM_TAG', 'tag');
221 * PARAM_TAGLIST - list of tags separated by commas (interests, blogs, etc.)
223 define('PARAM_TAGLIST', 'taglist');
226 * PARAM_TEXT - general plain text compatible with multilang filter, no other html tags. Please note '<', or '>' are allowed here.
228 define('PARAM_TEXT', 'text');
231 * PARAM_THEME - Checks to see if the string is a valid theme name in the current site
233 define('PARAM_THEME', 'theme');
236 * PARAM_URL - expected properly formatted URL. Please note that domain part is required, http://localhost/ is not accepted but
237 * http://localhost.localdomain/ is ok.
239 define('PARAM_URL', 'url');
242 * PARAM_USERNAME - Clean username to only contains allowed characters. This is to be used ONLY when manually creating user
243 * accounts, do NOT use when syncing with external systems!!
245 define('PARAM_USERNAME', 'username');
248 * PARAM_STRINGID - used to check if the given string is valid string identifier for get_string()
250 define('PARAM_STRINGID', 'stringid');
252 // DEPRECATED PARAM TYPES OR ALIASES - DO NOT USE FOR NEW CODE.
254 * PARAM_CLEAN - obsoleted, please use a more specific type of parameter.
255 * It was one of the first types, that is why it is abused so much ;-)
256 * @deprecated since 2.0
258 define('PARAM_CLEAN', 'clean');
261 * PARAM_INTEGER - deprecated alias for PARAM_INT
262 * @deprecated since 2.0
264 define('PARAM_INTEGER', 'int');
267 * PARAM_NUMBER - deprecated alias of PARAM_FLOAT
268 * @deprecated since 2.0
270 define('PARAM_NUMBER', 'float');
273 * PARAM_ACTION - deprecated alias for PARAM_ALPHANUMEXT, use for various actions in forms and urls
274 * NOTE: originally alias for PARAM_APLHA
275 * @deprecated since 2.0
277 define('PARAM_ACTION', 'alphanumext');
280 * PARAM_FORMAT - deprecated alias for PARAM_ALPHANUMEXT, use for names of plugins, formats, etc.
281 * NOTE: originally alias for PARAM_APLHA
282 * @deprecated since 2.0
284 define('PARAM_FORMAT', 'alphanumext');
287 * PARAM_MULTILANG - deprecated alias of PARAM_TEXT.
288 * @deprecated since 2.0
290 define('PARAM_MULTILANG', 'text');
293 * PARAM_TIMEZONE - expected timezone. Timezone can be int +-(0-13) or float +-(0.5-12.5) or
294 * string separated by '/' and can have '-' &/ '_' (eg. America/North_Dakota/New_Salem
295 * America/Port-au-Prince)
297 define('PARAM_TIMEZONE', 'timezone');
300 * PARAM_CLEANFILE - deprecated alias of PARAM_FILE; originally was removing regional chars too
302 define('PARAM_CLEANFILE', 'file');
305 * PARAM_COMPONENT is used for full component names (aka frankenstyle) such as 'mod_forum', 'core_rating', 'auth_ldap'.
306 * Short legacy subsystem names and module names are accepted too ex: 'forum', 'rating', 'user'.
307 * Only lowercase ascii letters, numbers and underscores are allowed, it has to start with a letter.
308 * NOTE: numbers and underscores are strongly discouraged in plugin names!
310 define('PARAM_COMPONENT', 'component');
313 * PARAM_AREA is a name of area used when addressing files, comments, ratings, etc.
314 * It is usually used together with context id and component.
315 * Only lowercase ascii letters, numbers and underscores are allowed, it has to start with a letter.
317 define('PARAM_AREA', 'area');
320 * PARAM_PLUGIN is used for plugin names such as 'forum', 'glossary', 'ldap', 'paypal', 'completionstatus'.
321 * Only lowercase ascii letters, numbers and underscores are allowed, it has to start with a letter.
322 * NOTE: numbers and underscores are strongly discouraged in plugin names! Underscores are forbidden in module names.
324 define('PARAM_PLUGIN', 'plugin');
327 // Web Services.
330 * VALUE_REQUIRED - if the parameter is not supplied, there is an error
332 define('VALUE_REQUIRED', 1);
335 * VALUE_OPTIONAL - if the parameter is not supplied, then the param has no value
337 define('VALUE_OPTIONAL', 2);
340 * VALUE_DEFAULT - if the parameter is not supplied, then the default value is used
342 define('VALUE_DEFAULT', 0);
345 * NULL_NOT_ALLOWED - the parameter can not be set to null in the database
347 define('NULL_NOT_ALLOWED', false);
350 * NULL_ALLOWED - the parameter can be set to null in the database
352 define('NULL_ALLOWED', true);
354 // Page types.
357 * PAGE_COURSE_VIEW is a definition of a page type. For more information on the page class see moodle/lib/pagelib.php.
359 define('PAGE_COURSE_VIEW', 'course-view');
361 /** Get remote addr constant */
362 define('GETREMOTEADDR_SKIP_HTTP_CLIENT_IP', '1');
363 /** Get remote addr constant */
364 define('GETREMOTEADDR_SKIP_HTTP_X_FORWARDED_FOR', '2');
366 // Blog access level constant declaration.
367 define ('BLOG_USER_LEVEL', 1);
368 define ('BLOG_GROUP_LEVEL', 2);
369 define ('BLOG_COURSE_LEVEL', 3);
370 define ('BLOG_SITE_LEVEL', 4);
371 define ('BLOG_GLOBAL_LEVEL', 5);
374 // Tag constants.
376 * To prevent problems with multibytes strings,Flag updating in nav not working on the review page. this should not exceed the
377 * length of "varchar(255) / 3 (bytes / utf-8 character) = 85".
378 * TODO: this is not correct, varchar(255) are 255 unicode chars ;-)
380 * @todo define(TAG_MAX_LENGTH) this is not correct, varchar(255) are 255 unicode chars ;-)
382 define('TAG_MAX_LENGTH', 50);
384 // Password policy constants.
385 define ('PASSWORD_LOWER', 'abcdefghijklmnopqrstuvwxyz');
386 define ('PASSWORD_UPPER', 'ABCDEFGHIJKLMNOPQRSTUVWXYZ');
387 define ('PASSWORD_DIGITS', '0123456789');
388 define ('PASSWORD_NONALPHANUM', '.,;:!?_-+/*@#&$');
390 // Feature constants.
391 // Used for plugin_supports() to report features that are, or are not, supported by a module.
393 /** True if module can provide a grade */
394 define('FEATURE_GRADE_HAS_GRADE', 'grade_has_grade');
395 /** True if module supports outcomes */
396 define('FEATURE_GRADE_OUTCOMES', 'outcomes');
397 /** True if module supports advanced grading methods */
398 define('FEATURE_ADVANCED_GRADING', 'grade_advanced_grading');
399 /** True if module controls the grade visibility over the gradebook */
400 define('FEATURE_CONTROLS_GRADE_VISIBILITY', 'controlsgradevisbility');
401 /** True if module supports plagiarism plugins */
402 define('FEATURE_PLAGIARISM', 'plagiarism');
404 /** True if module has code to track whether somebody viewed it */
405 define('FEATURE_COMPLETION_TRACKS_VIEWS', 'completion_tracks_views');
406 /** True if module has custom completion rules */
407 define('FEATURE_COMPLETION_HAS_RULES', 'completion_has_rules');
409 /** True if module has no 'view' page (like label) */
410 define('FEATURE_NO_VIEW_LINK', 'viewlink');
411 /** True (which is default) if the module wants support for setting the ID number for grade calculation purposes. */
412 define('FEATURE_IDNUMBER', 'idnumber');
413 /** True if module supports groups */
414 define('FEATURE_GROUPS', 'groups');
415 /** True if module supports groupings */
416 define('FEATURE_GROUPINGS', 'groupings');
418 * True if module supports groupmembersonly (which no longer exists)
419 * @deprecated Since Moodle 2.8
421 define('FEATURE_GROUPMEMBERSONLY', 'groupmembersonly');
423 /** Type of module */
424 define('FEATURE_MOD_ARCHETYPE', 'mod_archetype');
425 /** True if module supports intro editor */
426 define('FEATURE_MOD_INTRO', 'mod_intro');
427 /** True if module has default completion */
428 define('FEATURE_MODEDIT_DEFAULT_COMPLETION', 'modedit_default_completion');
430 define('FEATURE_COMMENT', 'comment');
432 define('FEATURE_RATE', 'rate');
433 /** True if module supports backup/restore of moodle2 format */
434 define('FEATURE_BACKUP_MOODLE2', 'backup_moodle2');
436 /** True if module can show description on course main page */
437 define('FEATURE_SHOW_DESCRIPTION', 'showdescription');
439 /** True if module uses the question bank */
440 define('FEATURE_USES_QUESTIONS', 'usesquestions');
443 * Maximum filename char size
445 define('MAX_FILENAME_SIZE', 100);
447 /** Unspecified module archetype */
448 define('MOD_ARCHETYPE_OTHER', 0);
449 /** Resource-like type module */
450 define('MOD_ARCHETYPE_RESOURCE', 1);
451 /** Assignment module archetype */
452 define('MOD_ARCHETYPE_ASSIGNMENT', 2);
453 /** System (not user-addable) module archetype */
454 define('MOD_ARCHETYPE_SYSTEM', 3);
457 * Security token used for allowing access
458 * from external application such as web services.
459 * Scripts do not use any session, performance is relatively
460 * low because we need to load access info in each request.
461 * Scripts are executed in parallel.
463 define('EXTERNAL_TOKEN_PERMANENT', 0);
466 * Security token used for allowing access
467 * of embedded applications, the code is executed in the
468 * active user session. Token is invalidated after user logs out.
469 * Scripts are executed serially - normal session locking is used.
471 define('EXTERNAL_TOKEN_EMBEDDED', 1);
474 * The home page should be the site home
476 define('HOMEPAGE_SITE', 0);
478 * The home page should be the users my page
480 define('HOMEPAGE_MY', 1);
482 * The home page can be chosen by the user
484 define('HOMEPAGE_USER', 2);
487 * Hub directory url (should be moodle.org)
489 define('HUB_HUBDIRECTORYURL', "https://hubdirectory.moodle.org");
493 * Moodle.net url (should be moodle.net)
495 define('HUB_MOODLEORGHUBURL', "https://moodle.net");
496 define('HUB_OLDMOODLEORGHUBURL', "http://hub.moodle.org");
499 * Moodle mobile app service name
501 define('MOODLE_OFFICIAL_MOBILE_SERVICE', 'moodle_mobile_app');
504 * Indicates the user has the capabilities required to ignore activity and course file size restrictions
506 define('USER_CAN_IGNORE_FILE_SIZE_LIMITS', -1);
509 * Course display settings: display all sections on one page.
511 define('COURSE_DISPLAY_SINGLEPAGE', 0);
513 * Course display settings: split pages into a page per section.
515 define('COURSE_DISPLAY_MULTIPAGE', 1);
518 * Authentication constant: String used in password field when password is not stored.
520 define('AUTH_PASSWORD_NOT_CACHED', 'not cached');
523 * Email from header to never include via information.
525 define('EMAIL_VIA_NEVER', 0);
528 * Email from header to always include via information.
530 define('EMAIL_VIA_ALWAYS', 1);
533 * Email from header to only include via information if the address is no-reply.
535 define('EMAIL_VIA_NO_REPLY_ONLY', 2);
537 // PARAMETER HANDLING.
540 * Returns a particular value for the named variable, taken from
541 * POST or GET. If the parameter doesn't exist then an error is
542 * thrown because we require this variable.
544 * This function should be used to initialise all required values
545 * in a script that are based on parameters. Usually it will be
546 * used like this:
547 * $id = required_param('id', PARAM_INT);
549 * Please note the $type parameter is now required and the value can not be array.
551 * @param string $parname the name of the page parameter we want
552 * @param string $type expected type of parameter
553 * @return mixed
554 * @throws coding_exception
556 function required_param($parname, $type) {
557 if (func_num_args() != 2 or empty($parname) or empty($type)) {
558 throw new coding_exception('required_param() requires $parname and $type to be specified (parameter: '.$parname.')');
560 // POST has precedence.
561 if (isset($_POST[$parname])) {
562 $param = $_POST[$parname];
563 } else if (isset($_GET[$parname])) {
564 $param = $_GET[$parname];
565 } else {
566 print_error('missingparam', '', '', $parname);
569 if (is_array($param)) {
570 debugging('Invalid array parameter detected in required_param(): '.$parname);
571 // TODO: switch to fatal error in Moodle 2.3.
572 return required_param_array($parname, $type);
575 return clean_param($param, $type);
579 * Returns a particular array value for the named variable, taken from
580 * POST or GET. If the parameter doesn't exist then an error is
581 * thrown because we require this variable.
583 * This function should be used to initialise all required values
584 * in a script that are based on parameters. Usually it will be
585 * used like this:
586 * $ids = required_param_array('ids', PARAM_INT);
588 * Note: arrays of arrays are not supported, only alphanumeric keys with _ and - are supported
590 * @param string $parname the name of the page parameter we want
591 * @param string $type expected type of parameter
592 * @return array
593 * @throws coding_exception
595 function required_param_array($parname, $type) {
596 if (func_num_args() != 2 or empty($parname) or empty($type)) {
597 throw new coding_exception('required_param_array() requires $parname and $type to be specified (parameter: '.$parname.')');
599 // POST has precedence.
600 if (isset($_POST[$parname])) {
601 $param = $_POST[$parname];
602 } else if (isset($_GET[$parname])) {
603 $param = $_GET[$parname];
604 } else {
605 print_error('missingparam', '', '', $parname);
607 if (!is_array($param)) {
608 print_error('missingparam', '', '', $parname);
611 $result = array();
612 foreach ($param as $key => $value) {
613 if (!preg_match('/^[a-z0-9_-]+$/i', $key)) {
614 debugging('Invalid key name in required_param_array() detected: '.$key.', parameter: '.$parname);
615 continue;
617 $result[$key] = clean_param($value, $type);
620 return $result;
624 * Returns a particular value for the named variable, taken from
625 * POST or GET, otherwise returning a given default.
627 * This function should be used to initialise all optional values
628 * in a script that are based on parameters. Usually it will be
629 * used like this:
630 * $name = optional_param('name', 'Fred', PARAM_TEXT);
632 * Please note the $type parameter is now required and the value can not be array.
634 * @param string $parname the name of the page parameter we want
635 * @param mixed $default the default value to return if nothing is found
636 * @param string $type expected type of parameter
637 * @return mixed
638 * @throws coding_exception
640 function optional_param($parname, $default, $type) {
641 if (func_num_args() != 3 or empty($parname) or empty($type)) {
642 throw new coding_exception('optional_param requires $parname, $default + $type to be specified (parameter: '.$parname.')');
645 // POST has precedence.
646 if (isset($_POST[$parname])) {
647 $param = $_POST[$parname];
648 } else if (isset($_GET[$parname])) {
649 $param = $_GET[$parname];
650 } else {
651 return $default;
654 if (is_array($param)) {
655 debugging('Invalid array parameter detected in required_param(): '.$parname);
656 // TODO: switch to $default in Moodle 2.3.
657 return optional_param_array($parname, $default, $type);
660 return clean_param($param, $type);
664 * Returns a particular array value for the named variable, taken from
665 * POST or GET, otherwise returning a given default.
667 * This function should be used to initialise all optional values
668 * in a script that are based on parameters. Usually it will be
669 * used like this:
670 * $ids = optional_param('id', array(), PARAM_INT);
672 * Note: arrays of arrays are not supported, only alphanumeric keys with _ and - are supported
674 * @param string $parname the name of the page parameter we want
675 * @param mixed $default the default value to return if nothing is found
676 * @param string $type expected type of parameter
677 * @return array
678 * @throws coding_exception
680 function optional_param_array($parname, $default, $type) {
681 if (func_num_args() != 3 or empty($parname) or empty($type)) {
682 throw new coding_exception('optional_param_array requires $parname, $default + $type to be specified (parameter: '.$parname.')');
685 // POST has precedence.
686 if (isset($_POST[$parname])) {
687 $param = $_POST[$parname];
688 } else if (isset($_GET[$parname])) {
689 $param = $_GET[$parname];
690 } else {
691 return $default;
693 if (!is_array($param)) {
694 debugging('optional_param_array() expects array parameters only: '.$parname);
695 return $default;
698 $result = array();
699 foreach ($param as $key => $value) {
700 if (!preg_match('/^[a-z0-9_-]+$/i', $key)) {
701 debugging('Invalid key name in optional_param_array() detected: '.$key.', parameter: '.$parname);
702 continue;
704 $result[$key] = clean_param($value, $type);
707 return $result;
711 * Strict validation of parameter values, the values are only converted
712 * to requested PHP type. Internally it is using clean_param, the values
713 * before and after cleaning must be equal - otherwise
714 * an invalid_parameter_exception is thrown.
715 * Objects and classes are not accepted.
717 * @param mixed $param
718 * @param string $type PARAM_ constant
719 * @param bool $allownull are nulls valid value?
720 * @param string $debuginfo optional debug information
721 * @return mixed the $param value converted to PHP type
722 * @throws invalid_parameter_exception if $param is not of given type
724 function validate_param($param, $type, $allownull=NULL_NOT_ALLOWED, $debuginfo='') {
725 if (is_null($param)) {
726 if ($allownull == NULL_ALLOWED) {
727 return null;
728 } else {
729 throw new invalid_parameter_exception($debuginfo);
732 if (is_array($param) or is_object($param)) {
733 throw new invalid_parameter_exception($debuginfo);
736 $cleaned = clean_param($param, $type);
738 if ($type == PARAM_FLOAT) {
739 // Do not detect precision loss here.
740 if (is_float($param) or is_int($param)) {
741 // These always fit.
742 } else if (!is_numeric($param) or !preg_match('/^[\+-]?[0-9]*\.?[0-9]*(e[-+]?[0-9]+)?$/i', (string)$param)) {
743 throw new invalid_parameter_exception($debuginfo);
745 } else if ((string)$param !== (string)$cleaned) {
746 // Conversion to string is usually lossless.
747 throw new invalid_parameter_exception($debuginfo);
750 return $cleaned;
754 * Makes sure array contains only the allowed types, this function does not validate array key names!
756 * <code>
757 * $options = clean_param($options, PARAM_INT);
758 * </code>
760 * @param array $param the variable array we are cleaning
761 * @param string $type expected format of param after cleaning.
762 * @param bool $recursive clean recursive arrays
763 * @return array
764 * @throws coding_exception
766 function clean_param_array(array $param = null, $type, $recursive = false) {
767 // Convert null to empty array.
768 $param = (array)$param;
769 foreach ($param as $key => $value) {
770 if (is_array($value)) {
771 if ($recursive) {
772 $param[$key] = clean_param_array($value, $type, true);
773 } else {
774 throw new coding_exception('clean_param_array can not process multidimensional arrays when $recursive is false.');
776 } else {
777 $param[$key] = clean_param($value, $type);
780 return $param;
784 * Used by {@link optional_param()} and {@link required_param()} to
785 * clean the variables and/or cast to specific types, based on
786 * an options field.
787 * <code>
788 * $course->format = clean_param($course->format, PARAM_ALPHA);
789 * $selectedgradeitem = clean_param($selectedgradeitem, PARAM_INT);
790 * </code>
792 * @param mixed $param the variable we are cleaning
793 * @param string $type expected format of param after cleaning.
794 * @return mixed
795 * @throws coding_exception
797 function clean_param($param, $type) {
798 global $CFG;
800 if (is_array($param)) {
801 throw new coding_exception('clean_param() can not process arrays, please use clean_param_array() instead.');
802 } else if (is_object($param)) {
803 if (method_exists($param, '__toString')) {
804 $param = $param->__toString();
805 } else {
806 throw new coding_exception('clean_param() can not process objects, please use clean_param_array() instead.');
810 switch ($type) {
811 case PARAM_RAW:
812 // No cleaning at all.
813 $param = fix_utf8($param);
814 return $param;
816 case PARAM_RAW_TRIMMED:
817 // No cleaning, but strip leading and trailing whitespace.
818 $param = fix_utf8($param);
819 return trim($param);
821 case PARAM_CLEAN:
822 // General HTML cleaning, try to use more specific type if possible this is deprecated!
823 // Please use more specific type instead.
824 if (is_numeric($param)) {
825 return $param;
827 $param = fix_utf8($param);
828 // Sweep for scripts, etc.
829 return clean_text($param);
831 case PARAM_CLEANHTML:
832 // Clean html fragment.
833 $param = fix_utf8($param);
834 // Sweep for scripts, etc.
835 $param = clean_text($param, FORMAT_HTML);
836 return trim($param);
838 case PARAM_INT:
839 // Convert to integer.
840 return (int)$param;
842 case PARAM_FLOAT:
843 // Convert to float.
844 return (float)$param;
846 case PARAM_ALPHA:
847 // Remove everything not `a-z`.
848 return preg_replace('/[^a-zA-Z]/i', '', $param);
850 case PARAM_ALPHAEXT:
851 // Remove everything not `a-zA-Z_-` (originally allowed "/" too).
852 return preg_replace('/[^a-zA-Z_-]/i', '', $param);
854 case PARAM_ALPHANUM:
855 // Remove everything not `a-zA-Z0-9`.
856 return preg_replace('/[^A-Za-z0-9]/i', '', $param);
858 case PARAM_ALPHANUMEXT:
859 // Remove everything not `a-zA-Z0-9_-`.
860 return preg_replace('/[^A-Za-z0-9_-]/i', '', $param);
862 case PARAM_SEQUENCE:
863 // Remove everything not `0-9,`.
864 return preg_replace('/[^0-9,]/i', '', $param);
866 case PARAM_BOOL:
867 // Convert to 1 or 0.
868 $tempstr = strtolower($param);
869 if ($tempstr === 'on' or $tempstr === 'yes' or $tempstr === 'true') {
870 $param = 1;
871 } else if ($tempstr === 'off' or $tempstr === 'no' or $tempstr === 'false') {
872 $param = 0;
873 } else {
874 $param = empty($param) ? 0 : 1;
876 return $param;
878 case PARAM_NOTAGS:
879 // Strip all tags.
880 $param = fix_utf8($param);
881 return strip_tags($param);
883 case PARAM_TEXT:
884 // Leave only tags needed for multilang.
885 $param = fix_utf8($param);
886 // If the multilang syntax is not correct we strip all tags because it would break xhtml strict which is required
887 // for accessibility standards please note this cleaning does not strip unbalanced '>' for BC compatibility reasons.
888 do {
889 if (strpos($param, '</lang>') !== false) {
890 // Old and future mutilang syntax.
891 $param = strip_tags($param, '<lang>');
892 if (!preg_match_all('/<.*>/suU', $param, $matches)) {
893 break;
895 $open = false;
896 foreach ($matches[0] as $match) {
897 if ($match === '</lang>') {
898 if ($open) {
899 $open = false;
900 continue;
901 } else {
902 break 2;
905 if (!preg_match('/^<lang lang="[a-zA-Z0-9_-]+"\s*>$/u', $match)) {
906 break 2;
907 } else {
908 $open = true;
911 if ($open) {
912 break;
914 return $param;
916 } else if (strpos($param, '</span>') !== false) {
917 // Current problematic multilang syntax.
918 $param = strip_tags($param, '<span>');
919 if (!preg_match_all('/<.*>/suU', $param, $matches)) {
920 break;
922 $open = false;
923 foreach ($matches[0] as $match) {
924 if ($match === '</span>') {
925 if ($open) {
926 $open = false;
927 continue;
928 } else {
929 break 2;
932 if (!preg_match('/^<span(\s+lang="[a-zA-Z0-9_-]+"|\s+class="multilang"){2}\s*>$/u', $match)) {
933 break 2;
934 } else {
935 $open = true;
938 if ($open) {
939 break;
941 return $param;
943 } while (false);
944 // Easy, just strip all tags, if we ever want to fix orphaned '&' we have to do that in format_string().
945 return strip_tags($param);
947 case PARAM_COMPONENT:
948 // We do not want any guessing here, either the name is correct or not
949 // please note only normalised component names are accepted.
950 if (!preg_match('/^[a-z]+(_[a-z][a-z0-9_]*)?[a-z0-9]+$/', $param)) {
951 return '';
953 if (strpos($param, '__') !== false) {
954 return '';
956 if (strpos($param, 'mod_') === 0) {
957 // Module names must not contain underscores because we need to differentiate them from invalid plugin types.
958 if (substr_count($param, '_') != 1) {
959 return '';
962 return $param;
964 case PARAM_PLUGIN:
965 case PARAM_AREA:
966 // We do not want any guessing here, either the name is correct or not.
967 if (!is_valid_plugin_name($param)) {
968 return '';
970 return $param;
972 case PARAM_SAFEDIR:
973 // Remove everything not a-zA-Z0-9_- .
974 return preg_replace('/[^a-zA-Z0-9_-]/i', '', $param);
976 case PARAM_SAFEPATH:
977 // Remove everything not a-zA-Z0-9/_- .
978 return preg_replace('/[^a-zA-Z0-9\/_-]/i', '', $param);
980 case PARAM_FILE:
981 // Strip all suspicious characters from filename.
982 $param = fix_utf8($param);
983 $param = preg_replace('~[[:cntrl:]]|[&<>"`\|\':\\\\/]~u', '', $param);
984 if ($param === '.' || $param === '..') {
985 $param = '';
987 return $param;
989 case PARAM_PATH:
990 // Strip all suspicious characters from file path.
991 $param = fix_utf8($param);
992 $param = str_replace('\\', '/', $param);
994 // Explode the path and clean each element using the PARAM_FILE rules.
995 $breadcrumb = explode('/', $param);
996 foreach ($breadcrumb as $key => $crumb) {
997 if ($crumb === '.' && $key === 0) {
998 // Special condition to allow for relative current path such as ./currentdirfile.txt.
999 } else {
1000 $crumb = clean_param($crumb, PARAM_FILE);
1002 $breadcrumb[$key] = $crumb;
1004 $param = implode('/', $breadcrumb);
1006 // Remove multiple current path (./././) and multiple slashes (///).
1007 $param = preg_replace('~//+~', '/', $param);
1008 $param = preg_replace('~/(\./)+~', '/', $param);
1009 return $param;
1011 case PARAM_HOST:
1012 // Allow FQDN or IPv4 dotted quad.
1013 $param = preg_replace('/[^\.\d\w-]/', '', $param );
1014 // Match ipv4 dotted quad.
1015 if (preg_match('/(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})/', $param, $match)) {
1016 // Confirm values are ok.
1017 if ( $match[0] > 255
1018 || $match[1] > 255
1019 || $match[3] > 255
1020 || $match[4] > 255 ) {
1021 // Hmmm, what kind of dotted quad is this?
1022 $param = '';
1024 } else if ( preg_match('/^[\w\d\.-]+$/', $param) // Dots, hyphens, numbers.
1025 && !preg_match('/^[\.-]/', $param) // No leading dots/hyphens.
1026 && !preg_match('/[\.-]$/', $param) // No trailing dots/hyphens.
1028 // All is ok - $param is respected.
1029 } else {
1030 // All is not ok...
1031 $param='';
1033 return $param;
1035 case PARAM_URL:
1036 // Allow safe urls.
1037 $param = fix_utf8($param);
1038 include_once($CFG->dirroot . '/lib/validateurlsyntax.php');
1039 if (!empty($param) && validateUrlSyntax($param, 's?H?S?F?E-u-P-a?I?p?f?q?r?')) {
1040 // All is ok, param is respected.
1041 } else {
1042 // Not really ok.
1043 $param ='';
1045 return $param;
1047 case PARAM_LOCALURL:
1048 // Allow http absolute, root relative and relative URLs within wwwroot.
1049 $param = clean_param($param, PARAM_URL);
1050 if (!empty($param)) {
1052 if ($param === $CFG->wwwroot) {
1053 // Exact match;
1054 } else if (preg_match(':^/:', $param)) {
1055 // Root-relative, ok!
1056 } else if (preg_match('/^' . preg_quote($CFG->wwwroot . '/', '/') . '/i', $param)) {
1057 // Absolute, and matches our wwwroot.
1058 } else {
1059 // Relative - let's make sure there are no tricks.
1060 if (validateUrlSyntax('/' . $param, 's-u-P-a-p-f+q?r?')) {
1061 // Looks ok.
1062 } else {
1063 $param = '';
1067 return $param;
1069 case PARAM_PEM:
1070 $param = trim($param);
1071 // PEM formatted strings may contain letters/numbers and the symbols:
1072 // forward slash: /
1073 // plus sign: +
1074 // equal sign: =
1075 // , surrounded by BEGIN and END CERTIFICATE prefix and suffixes.
1076 if (preg_match('/^-----BEGIN CERTIFICATE-----([\s\w\/\+=]+)-----END CERTIFICATE-----$/', trim($param), $matches)) {
1077 list($wholething, $body) = $matches;
1078 unset($wholething, $matches);
1079 $b64 = clean_param($body, PARAM_BASE64);
1080 if (!empty($b64)) {
1081 return "-----BEGIN CERTIFICATE-----\n$b64\n-----END CERTIFICATE-----\n";
1082 } else {
1083 return '';
1086 return '';
1088 case PARAM_BASE64:
1089 if (!empty($param)) {
1090 // PEM formatted strings may contain letters/numbers and the symbols
1091 // forward slash: /
1092 // plus sign: +
1093 // equal sign: =.
1094 if (0 >= preg_match('/^([\s\w\/\+=]+)$/', trim($param))) {
1095 return '';
1097 $lines = preg_split('/[\s]+/', $param, -1, PREG_SPLIT_NO_EMPTY);
1098 // Each line of base64 encoded data must be 64 characters in length, except for the last line which may be less
1099 // than (or equal to) 64 characters long.
1100 for ($i=0, $j=count($lines); $i < $j; $i++) {
1101 if ($i + 1 == $j) {
1102 if (64 < strlen($lines[$i])) {
1103 return '';
1105 continue;
1108 if (64 != strlen($lines[$i])) {
1109 return '';
1112 return implode("\n", $lines);
1113 } else {
1114 return '';
1117 case PARAM_TAG:
1118 $param = fix_utf8($param);
1119 // Please note it is not safe to use the tag name directly anywhere,
1120 // it must be processed with s(), urlencode() before embedding anywhere.
1121 // Remove some nasties.
1122 $param = preg_replace('~[[:cntrl:]]|[<>`]~u', '', $param);
1123 // Convert many whitespace chars into one.
1124 $param = preg_replace('/\s+/u', ' ', $param);
1125 $param = core_text::substr(trim($param), 0, TAG_MAX_LENGTH);
1126 return $param;
1128 case PARAM_TAGLIST:
1129 $param = fix_utf8($param);
1130 $tags = explode(',', $param);
1131 $result = array();
1132 foreach ($tags as $tag) {
1133 $res = clean_param($tag, PARAM_TAG);
1134 if ($res !== '') {
1135 $result[] = $res;
1138 if ($result) {
1139 return implode(',', $result);
1140 } else {
1141 return '';
1144 case PARAM_CAPABILITY:
1145 if (get_capability_info($param)) {
1146 return $param;
1147 } else {
1148 return '';
1151 case PARAM_PERMISSION:
1152 $param = (int)$param;
1153 if (in_array($param, array(CAP_INHERIT, CAP_ALLOW, CAP_PREVENT, CAP_PROHIBIT))) {
1154 return $param;
1155 } else {
1156 return CAP_INHERIT;
1159 case PARAM_AUTH:
1160 $param = clean_param($param, PARAM_PLUGIN);
1161 if (empty($param)) {
1162 return '';
1163 } else if (exists_auth_plugin($param)) {
1164 return $param;
1165 } else {
1166 return '';
1169 case PARAM_LANG:
1170 $param = clean_param($param, PARAM_SAFEDIR);
1171 if (get_string_manager()->translation_exists($param)) {
1172 return $param;
1173 } else {
1174 // Specified language is not installed or param malformed.
1175 return '';
1178 case PARAM_THEME:
1179 $param = clean_param($param, PARAM_PLUGIN);
1180 if (empty($param)) {
1181 return '';
1182 } else if (file_exists("$CFG->dirroot/theme/$param/config.php")) {
1183 return $param;
1184 } else if (!empty($CFG->themedir) and file_exists("$CFG->themedir/$param/config.php")) {
1185 return $param;
1186 } else {
1187 // Specified theme is not installed.
1188 return '';
1191 case PARAM_USERNAME:
1192 $param = fix_utf8($param);
1193 $param = trim($param);
1194 // Convert uppercase to lowercase MDL-16919.
1195 $param = core_text::strtolower($param);
1196 if (empty($CFG->extendedusernamechars)) {
1197 $param = str_replace(" " , "", $param);
1198 // Regular expression, eliminate all chars EXCEPT:
1199 // alphanum, dash (-), underscore (_), at sign (@) and period (.) characters.
1200 $param = preg_replace('/[^-\.@_a-z0-9]/', '', $param);
1202 return $param;
1204 case PARAM_EMAIL:
1205 $param = fix_utf8($param);
1206 if (validate_email($param)) {
1207 return $param;
1208 } else {
1209 return '';
1212 case PARAM_STRINGID:
1213 if (preg_match('|^[a-zA-Z][a-zA-Z0-9\.:/_-]*$|', $param)) {
1214 return $param;
1215 } else {
1216 return '';
1219 case PARAM_TIMEZONE:
1220 // Can be int, float(with .5 or .0) or string seperated by '/' and can have '-_'.
1221 $param = fix_utf8($param);
1222 $timezonepattern = '/^(([+-]?(0?[0-9](\.[5|0])?|1[0-3](\.0)?|1[0-2]\.5))|(99)|[[:alnum:]]+(\/?[[:alpha:]_-])+)$/';
1223 if (preg_match($timezonepattern, $param)) {
1224 return $param;
1225 } else {
1226 return '';
1229 default:
1230 // Doh! throw error, switched parameters in optional_param or another serious problem.
1231 print_error("unknownparamtype", '', '', $type);
1236 * Whether the PARAM_* type is compatible in RTL.
1238 * Being compatible with RTL means that the data they contain can flow
1239 * from right-to-left or left-to-right without compromising the user experience.
1241 * Take URLs for example, they are not RTL compatible as they should always
1242 * flow from the left to the right. This also applies to numbers, email addresses,
1243 * configuration snippets, base64 strings, etc...
1245 * This function tries to best guess which parameters can contain localised strings.
1247 * @param string $paramtype Constant PARAM_*.
1248 * @return bool
1250 function is_rtl_compatible($paramtype) {
1251 return $paramtype == PARAM_TEXT || $paramtype == PARAM_NOTAGS;
1255 * Makes sure the data is using valid utf8, invalid characters are discarded.
1257 * Note: this function is not intended for full objects with methods and private properties.
1259 * @param mixed $value
1260 * @return mixed with proper utf-8 encoding
1262 function fix_utf8($value) {
1263 if (is_null($value) or $value === '') {
1264 return $value;
1266 } else if (is_string($value)) {
1267 if ((string)(int)$value === $value) {
1268 // Shortcut.
1269 return $value;
1271 // No null bytes expected in our data, so let's remove it.
1272 $value = str_replace("\0", '', $value);
1274 // Note: this duplicates min_fix_utf8() intentionally.
1275 static $buggyiconv = null;
1276 if ($buggyiconv === null) {
1277 $buggyiconv = (!function_exists('iconv') or @iconv('UTF-8', 'UTF-8//IGNORE', '100'.chr(130).'€') !== '100€');
1280 if ($buggyiconv) {
1281 if (function_exists('mb_convert_encoding')) {
1282 $subst = mb_substitute_character();
1283 mb_substitute_character('');
1284 $result = mb_convert_encoding($value, 'utf-8', 'utf-8');
1285 mb_substitute_character($subst);
1287 } else {
1288 // Warn admins on admin/index.php page.
1289 $result = $value;
1292 } else {
1293 $result = @iconv('UTF-8', 'UTF-8//IGNORE', $value);
1296 return $result;
1298 } else if (is_array($value)) {
1299 foreach ($value as $k => $v) {
1300 $value[$k] = fix_utf8($v);
1302 return $value;
1304 } else if (is_object($value)) {
1305 // Do not modify original.
1306 $value = clone($value);
1307 foreach ($value as $k => $v) {
1308 $value->$k = fix_utf8($v);
1310 return $value;
1312 } else {
1313 // This is some other type, no utf-8 here.
1314 return $value;
1319 * Return true if given value is integer or string with integer value
1321 * @param mixed $value String or Int
1322 * @return bool true if number, false if not
1324 function is_number($value) {
1325 if (is_int($value)) {
1326 return true;
1327 } else if (is_string($value)) {
1328 return ((string)(int)$value) === $value;
1329 } else {
1330 return false;
1335 * Returns host part from url.
1337 * @param string $url full url
1338 * @return string host, null if not found
1340 function get_host_from_url($url) {
1341 preg_match('|^[a-z]+://([a-zA-Z0-9-.]+)|i', $url, $matches);
1342 if ($matches) {
1343 return $matches[1];
1345 return null;
1349 * Tests whether anything was returned by text editor
1351 * This function is useful for testing whether something you got back from
1352 * the HTML editor actually contains anything. Sometimes the HTML editor
1353 * appear to be empty, but actually you get back a <br> tag or something.
1355 * @param string $string a string containing HTML.
1356 * @return boolean does the string contain any actual content - that is text,
1357 * images, objects, etc.
1359 function html_is_blank($string) {
1360 return trim(strip_tags($string, '<img><object><applet><input><select><textarea><hr>')) == '';
1364 * Set a key in global configuration
1366 * Set a key/value pair in both this session's {@link $CFG} global variable
1367 * and in the 'config' database table for future sessions.
1369 * Can also be used to update keys for plugin-scoped configs in config_plugin table.
1370 * In that case it doesn't affect $CFG.
1372 * A NULL value will delete the entry.
1374 * NOTE: this function is called from lib/db/upgrade.php
1376 * @param string $name the key to set
1377 * @param string $value the value to set (without magic quotes)
1378 * @param string $plugin (optional) the plugin scope, default null
1379 * @return bool true or exception
1381 function set_config($name, $value, $plugin=null) {
1382 global $CFG, $DB;
1384 if (empty($plugin)) {
1385 if (!array_key_exists($name, $CFG->config_php_settings)) {
1386 // So it's defined for this invocation at least.
1387 if (is_null($value)) {
1388 unset($CFG->$name);
1389 } else {
1390 // Settings from db are always strings.
1391 $CFG->$name = (string)$value;
1395 if ($DB->get_field('config', 'name', array('name' => $name))) {
1396 if ($value === null) {
1397 $DB->delete_records('config', array('name' => $name));
1398 } else {
1399 $DB->set_field('config', 'value', $value, array('name' => $name));
1401 } else {
1402 if ($value !== null) {
1403 $config = new stdClass();
1404 $config->name = $name;
1405 $config->value = $value;
1406 $DB->insert_record('config', $config, false);
1409 if ($name === 'siteidentifier') {
1410 cache_helper::update_site_identifier($value);
1412 cache_helper::invalidate_by_definition('core', 'config', array(), 'core');
1413 } else {
1414 // Plugin scope.
1415 if ($id = $DB->get_field('config_plugins', 'id', array('name' => $name, 'plugin' => $plugin))) {
1416 if ($value===null) {
1417 $DB->delete_records('config_plugins', array('name' => $name, 'plugin' => $plugin));
1418 } else {
1419 $DB->set_field('config_plugins', 'value', $value, array('id' => $id));
1421 } else {
1422 if ($value !== null) {
1423 $config = new stdClass();
1424 $config->plugin = $plugin;
1425 $config->name = $name;
1426 $config->value = $value;
1427 $DB->insert_record('config_plugins', $config, false);
1430 cache_helper::invalidate_by_definition('core', 'config', array(), $plugin);
1433 return true;
1437 * Get configuration values from the global config table
1438 * or the config_plugins table.
1440 * If called with one parameter, it will load all the config
1441 * variables for one plugin, and return them as an object.
1443 * If called with 2 parameters it will return a string single
1444 * value or false if the value is not found.
1446 * NOTE: this function is called from lib/db/upgrade.php
1448 * @static string|false $siteidentifier The site identifier is not cached. We use this static cache so
1449 * that we need only fetch it once per request.
1450 * @param string $plugin full component name
1451 * @param string $name default null
1452 * @return mixed hash-like object or single value, return false no config found
1453 * @throws dml_exception
1455 function get_config($plugin, $name = null) {
1456 global $CFG, $DB;
1458 static $siteidentifier = null;
1460 if ($plugin === 'moodle' || $plugin === 'core' || empty($plugin)) {
1461 $forced =& $CFG->config_php_settings;
1462 $iscore = true;
1463 $plugin = 'core';
1464 } else {
1465 if (array_key_exists($plugin, $CFG->forced_plugin_settings)) {
1466 $forced =& $CFG->forced_plugin_settings[$plugin];
1467 } else {
1468 $forced = array();
1470 $iscore = false;
1473 if ($siteidentifier === null) {
1474 try {
1475 // This may fail during installation.
1476 // If you have a look at {@link initialise_cfg()} you will see that this is how we detect the need to
1477 // install the database.
1478 $siteidentifier = $DB->get_field('config', 'value', array('name' => 'siteidentifier'));
1479 } catch (dml_exception $ex) {
1480 // Set siteidentifier to false. We don't want to trip this continually.
1481 $siteidentifier = false;
1482 throw $ex;
1486 if (!empty($name)) {
1487 if (array_key_exists($name, $forced)) {
1488 return (string)$forced[$name];
1489 } else if ($name === 'siteidentifier' && $plugin == 'core') {
1490 return $siteidentifier;
1494 $cache = cache::make('core', 'config');
1495 $result = $cache->get($plugin);
1496 if ($result === false) {
1497 // The user is after a recordset.
1498 if (!$iscore) {
1499 $result = $DB->get_records_menu('config_plugins', array('plugin' => $plugin), '', 'name,value');
1500 } else {
1501 // This part is not really used any more, but anyway...
1502 $result = $DB->get_records_menu('config', array(), '', 'name,value');;
1504 $cache->set($plugin, $result);
1507 if (!empty($name)) {
1508 if (array_key_exists($name, $result)) {
1509 return $result[$name];
1511 return false;
1514 if ($plugin === 'core') {
1515 $result['siteidentifier'] = $siteidentifier;
1518 foreach ($forced as $key => $value) {
1519 if (is_null($value) or is_array($value) or is_object($value)) {
1520 // We do not want any extra mess here, just real settings that could be saved in db.
1521 unset($result[$key]);
1522 } else {
1523 // Convert to string as if it went through the DB.
1524 $result[$key] = (string)$value;
1528 return (object)$result;
1532 * Removes a key from global configuration.
1534 * NOTE: this function is called from lib/db/upgrade.php
1536 * @param string $name the key to set
1537 * @param string $plugin (optional) the plugin scope
1538 * @return boolean whether the operation succeeded.
1540 function unset_config($name, $plugin=null) {
1541 global $CFG, $DB;
1543 if (empty($plugin)) {
1544 unset($CFG->$name);
1545 $DB->delete_records('config', array('name' => $name));
1546 cache_helper::invalidate_by_definition('core', 'config', array(), 'core');
1547 } else {
1548 $DB->delete_records('config_plugins', array('name' => $name, 'plugin' => $plugin));
1549 cache_helper::invalidate_by_definition('core', 'config', array(), $plugin);
1552 return true;
1556 * Remove all the config variables for a given plugin.
1558 * NOTE: this function is called from lib/db/upgrade.php
1560 * @param string $plugin a plugin, for example 'quiz' or 'qtype_multichoice';
1561 * @return boolean whether the operation succeeded.
1563 function unset_all_config_for_plugin($plugin) {
1564 global $DB;
1565 // Delete from the obvious config_plugins first.
1566 $DB->delete_records('config_plugins', array('plugin' => $plugin));
1567 // Next delete any suspect settings from config.
1568 $like = $DB->sql_like('name', '?', true, true, false, '|');
1569 $params = array($DB->sql_like_escape($plugin.'_', '|') . '%');
1570 $DB->delete_records_select('config', $like, $params);
1571 // Finally clear both the plugin cache and the core cache (suspect settings now removed from core).
1572 cache_helper::invalidate_by_definition('core', 'config', array(), array('core', $plugin));
1574 return true;
1578 * Use this function to get a list of users from a config setting of type admin_setting_users_with_capability.
1580 * All users are verified if they still have the necessary capability.
1582 * @param string $value the value of the config setting.
1583 * @param string $capability the capability - must match the one passed to the admin_setting_users_with_capability constructor.
1584 * @param bool $includeadmins include administrators.
1585 * @return array of user objects.
1587 function get_users_from_config($value, $capability, $includeadmins = true) {
1588 if (empty($value) or $value === '$@NONE@$') {
1589 return array();
1592 // We have to make sure that users still have the necessary capability,
1593 // it should be faster to fetch them all first and then test if they are present
1594 // instead of validating them one-by-one.
1595 $users = get_users_by_capability(context_system::instance(), $capability);
1596 if ($includeadmins) {
1597 $admins = get_admins();
1598 foreach ($admins as $admin) {
1599 $users[$admin->id] = $admin;
1603 if ($value === '$@ALL@$') {
1604 return $users;
1607 $result = array(); // Result in correct order.
1608 $allowed = explode(',', $value);
1609 foreach ($allowed as $uid) {
1610 if (isset($users[$uid])) {
1611 $user = $users[$uid];
1612 $result[$user->id] = $user;
1616 return $result;
1621 * Invalidates browser caches and cached data in temp.
1623 * @return void
1625 function purge_all_caches() {
1626 purge_caches();
1630 * Selectively invalidate different types of cache.
1632 * Purges the cache areas specified. By default, this will purge all caches but can selectively purge specific
1633 * areas alone or in combination.
1635 * @param bool[] $options Specific parts of the cache to purge. Valid options are:
1636 * 'muc' Purge MUC caches?
1637 * 'theme' Purge theme cache?
1638 * 'lang' Purge language string cache?
1639 * 'js' Purge javascript cache?
1640 * 'filter' Purge text filter cache?
1641 * 'other' Purge all other caches?
1643 function purge_caches($options = []) {
1644 $defaults = array_fill_keys(['muc', 'theme', 'lang', 'js', 'filter', 'other'], false);
1645 if (empty(array_filter($options))) {
1646 $options = array_fill_keys(array_keys($defaults), true); // Set all options to true.
1647 } else {
1648 $options = array_merge($defaults, array_intersect_key($options, $defaults)); // Override defaults with specified options.
1650 if ($options['muc']) {
1651 cache_helper::purge_all();
1653 if ($options['theme']) {
1654 theme_reset_all_caches();
1656 if ($options['lang']) {
1657 get_string_manager()->reset_caches();
1659 if ($options['js']) {
1660 js_reset_all_caches();
1662 if ($options['filter']) {
1663 reset_text_filters_cache();
1665 if ($options['other']) {
1666 purge_other_caches();
1671 * Purge all non-MUC caches not otherwise purged in purge_caches.
1673 * IMPORTANT - If you are adding anything here to do with the cache directory you should also have a look at
1674 * {@link phpunit_util::reset_dataroot()}
1676 function purge_other_caches() {
1677 global $DB, $CFG;
1678 core_text::reset_caches();
1679 if (class_exists('core_plugin_manager')) {
1680 core_plugin_manager::reset_caches();
1683 // Bump up cacherev field for all courses.
1684 try {
1685 increment_revision_number('course', 'cacherev', '');
1686 } catch (moodle_exception $e) {
1687 // Ignore exception since this function is also called before upgrade script when field course.cacherev does not exist yet.
1690 $DB->reset_caches();
1692 // Purge all other caches: rss, simplepie, etc.
1693 clearstatcache();
1694 remove_dir($CFG->cachedir.'', true);
1696 // Make sure cache dir is writable, throws exception if not.
1697 make_cache_directory('');
1699 // This is the only place where we purge local caches, we are only adding files there.
1700 // The $CFG->localcachedirpurged flag forces local directories to be purged on cluster nodes.
1701 remove_dir($CFG->localcachedir, true);
1702 set_config('localcachedirpurged', time());
1703 make_localcache_directory('', true);
1704 \core\task\manager::clear_static_caches();
1708 * Get volatile flags
1710 * @param string $type
1711 * @param int $changedsince default null
1712 * @return array records array
1714 function get_cache_flags($type, $changedsince = null) {
1715 global $DB;
1717 $params = array('type' => $type, 'expiry' => time());
1718 $sqlwhere = "flagtype = :type AND expiry >= :expiry";
1719 if ($changedsince !== null) {
1720 $params['changedsince'] = $changedsince;
1721 $sqlwhere .= " AND timemodified > :changedsince";
1723 $cf = array();
1724 if ($flags = $DB->get_records_select('cache_flags', $sqlwhere, $params, '', 'name,value')) {
1725 foreach ($flags as $flag) {
1726 $cf[$flag->name] = $flag->value;
1729 return $cf;
1733 * Get volatile flags
1735 * @param string $type
1736 * @param string $name
1737 * @param int $changedsince default null
1738 * @return string|false The cache flag value or false
1740 function get_cache_flag($type, $name, $changedsince=null) {
1741 global $DB;
1743 $params = array('type' => $type, 'name' => $name, 'expiry' => time());
1745 $sqlwhere = "flagtype = :type AND name = :name AND expiry >= :expiry";
1746 if ($changedsince !== null) {
1747 $params['changedsince'] = $changedsince;
1748 $sqlwhere .= " AND timemodified > :changedsince";
1751 return $DB->get_field_select('cache_flags', 'value', $sqlwhere, $params);
1755 * Set a volatile flag
1757 * @param string $type the "type" namespace for the key
1758 * @param string $name the key to set
1759 * @param string $value the value to set (without magic quotes) - null will remove the flag
1760 * @param int $expiry (optional) epoch indicating expiry - defaults to now()+ 24hs
1761 * @return bool Always returns true
1763 function set_cache_flag($type, $name, $value, $expiry = null) {
1764 global $DB;
1766 $timemodified = time();
1767 if ($expiry === null || $expiry < $timemodified) {
1768 $expiry = $timemodified + 24 * 60 * 60;
1769 } else {
1770 $expiry = (int)$expiry;
1773 if ($value === null) {
1774 unset_cache_flag($type, $name);
1775 return true;
1778 if ($f = $DB->get_record('cache_flags', array('name' => $name, 'flagtype' => $type), '*', IGNORE_MULTIPLE)) {
1779 // This is a potential problem in DEBUG_DEVELOPER.
1780 if ($f->value == $value and $f->expiry == $expiry and $f->timemodified == $timemodified) {
1781 return true; // No need to update.
1783 $f->value = $value;
1784 $f->expiry = $expiry;
1785 $f->timemodified = $timemodified;
1786 $DB->update_record('cache_flags', $f);
1787 } else {
1788 $f = new stdClass();
1789 $f->flagtype = $type;
1790 $f->name = $name;
1791 $f->value = $value;
1792 $f->expiry = $expiry;
1793 $f->timemodified = $timemodified;
1794 $DB->insert_record('cache_flags', $f);
1796 return true;
1800 * Removes a single volatile flag
1802 * @param string $type the "type" namespace for the key
1803 * @param string $name the key to set
1804 * @return bool
1806 function unset_cache_flag($type, $name) {
1807 global $DB;
1808 $DB->delete_records('cache_flags', array('name' => $name, 'flagtype' => $type));
1809 return true;
1813 * Garbage-collect volatile flags
1815 * @return bool Always returns true
1817 function gc_cache_flags() {
1818 global $DB;
1819 $DB->delete_records_select('cache_flags', 'expiry < ?', array(time()));
1820 return true;
1823 // USER PREFERENCE API.
1826 * Refresh user preference cache. This is used most often for $USER
1827 * object that is stored in session, but it also helps with performance in cron script.
1829 * Preferences for each user are loaded on first use on every page, then again after the timeout expires.
1831 * @package core
1832 * @category preference
1833 * @access public
1834 * @param stdClass $user User object. Preferences are preloaded into 'preference' property
1835 * @param int $cachelifetime Cache life time on the current page (in seconds)
1836 * @throws coding_exception
1837 * @return null
1839 function check_user_preferences_loaded(stdClass $user, $cachelifetime = 120) {
1840 global $DB;
1841 // Static cache, we need to check on each page load, not only every 2 minutes.
1842 static $loadedusers = array();
1844 if (!isset($user->id)) {
1845 throw new coding_exception('Invalid $user parameter in check_user_preferences_loaded() call, missing id field');
1848 if (empty($user->id) or isguestuser($user->id)) {
1849 // No permanent storage for not-logged-in users and guest.
1850 if (!isset($user->preference)) {
1851 $user->preference = array();
1853 return;
1856 $timenow = time();
1858 if (isset($loadedusers[$user->id]) and isset($user->preference) and isset($user->preference['_lastloaded'])) {
1859 // Already loaded at least once on this page. Are we up to date?
1860 if ($user->preference['_lastloaded'] + $cachelifetime > $timenow) {
1861 // No need to reload - we are on the same page and we loaded prefs just a moment ago.
1862 return;
1864 } else if (!get_cache_flag('userpreferenceschanged', $user->id, $user->preference['_lastloaded'])) {
1865 // No change since the lastcheck on this page.
1866 $user->preference['_lastloaded'] = $timenow;
1867 return;
1871 // OK, so we have to reload all preferences.
1872 $loadedusers[$user->id] = true;
1873 $user->preference = $DB->get_records_menu('user_preferences', array('userid' => $user->id), '', 'name,value'); // All values.
1874 $user->preference['_lastloaded'] = $timenow;
1878 * Called from set/unset_user_preferences, so that the prefs can be correctly reloaded in different sessions.
1880 * NOTE: internal function, do not call from other code.
1882 * @package core
1883 * @access private
1884 * @param integer $userid the user whose prefs were changed.
1886 function mark_user_preferences_changed($userid) {
1887 global $CFG;
1889 if (empty($userid) or isguestuser($userid)) {
1890 // No cache flags for guest and not-logged-in users.
1891 return;
1894 set_cache_flag('userpreferenceschanged', $userid, 1, time() + $CFG->sessiontimeout);
1898 * Sets a preference for the specified user.
1900 * If a $user object is submitted it's 'preference' property is used for the preferences cache.
1902 * When additional validation/permission check is needed it is better to use {@see useredit_update_user_preference()}
1904 * @package core
1905 * @category preference
1906 * @access public
1907 * @param string $name The key to set as preference for the specified user
1908 * @param string $value The value to set for the $name key in the specified user's
1909 * record, null means delete current value.
1910 * @param stdClass|int|null $user A moodle user object or id, null means current user
1911 * @throws coding_exception
1912 * @return bool Always true or exception
1914 function set_user_preference($name, $value, $user = null) {
1915 global $USER, $DB;
1917 if (empty($name) or is_numeric($name) or $name === '_lastloaded') {
1918 throw new coding_exception('Invalid preference name in set_user_preference() call');
1921 if (is_null($value)) {
1922 // Null means delete current.
1923 return unset_user_preference($name, $user);
1924 } else if (is_object($value)) {
1925 throw new coding_exception('Invalid value in set_user_preference() call, objects are not allowed');
1926 } else if (is_array($value)) {
1927 throw new coding_exception('Invalid value in set_user_preference() call, arrays are not allowed');
1929 // Value column maximum length is 1333 characters.
1930 $value = (string)$value;
1931 if (core_text::strlen($value) > 1333) {
1932 throw new coding_exception('Invalid value in set_user_preference() call, value is is too long for the value column');
1935 if (is_null($user)) {
1936 $user = $USER;
1937 } else if (isset($user->id)) {
1938 // It is a valid object.
1939 } else if (is_numeric($user)) {
1940 $user = (object)array('id' => (int)$user);
1941 } else {
1942 throw new coding_exception('Invalid $user parameter in set_user_preference() call');
1945 check_user_preferences_loaded($user);
1947 if (empty($user->id) or isguestuser($user->id)) {
1948 // No permanent storage for not-logged-in users and guest.
1949 $user->preference[$name] = $value;
1950 return true;
1953 if ($preference = $DB->get_record('user_preferences', array('userid' => $user->id, 'name' => $name))) {
1954 if ($preference->value === $value and isset($user->preference[$name]) and $user->preference[$name] === $value) {
1955 // Preference already set to this value.
1956 return true;
1958 $DB->set_field('user_preferences', 'value', $value, array('id' => $preference->id));
1960 } else {
1961 $preference = new stdClass();
1962 $preference->userid = $user->id;
1963 $preference->name = $name;
1964 $preference->value = $value;
1965 $DB->insert_record('user_preferences', $preference);
1968 // Update value in cache.
1969 $user->preference[$name] = $value;
1970 // Update the $USER in case where we've not a direct reference to $USER.
1971 if ($user !== $USER && $user->id == $USER->id) {
1972 $USER->preference[$name] = $value;
1975 // Set reload flag for other sessions.
1976 mark_user_preferences_changed($user->id);
1978 return true;
1982 * Sets a whole array of preferences for the current user
1984 * If a $user object is submitted it's 'preference' property is used for the preferences cache.
1986 * @package core
1987 * @category preference
1988 * @access public
1989 * @param array $prefarray An array of key/value pairs to be set
1990 * @param stdClass|int|null $user A moodle user object or id, null means current user
1991 * @return bool Always true or exception
1993 function set_user_preferences(array $prefarray, $user = null) {
1994 foreach ($prefarray as $name => $value) {
1995 set_user_preference($name, $value, $user);
1997 return true;
2001 * Unsets a preference completely by deleting it from the database
2003 * If a $user object is submitted it's 'preference' property is used for the preferences cache.
2005 * @package core
2006 * @category preference
2007 * @access public
2008 * @param string $name The key to unset as preference for the specified user
2009 * @param stdClass|int|null $user A moodle user object or id, null means current user
2010 * @throws coding_exception
2011 * @return bool Always true or exception
2013 function unset_user_preference($name, $user = null) {
2014 global $USER, $DB;
2016 if (empty($name) or is_numeric($name) or $name === '_lastloaded') {
2017 throw new coding_exception('Invalid preference name in unset_user_preference() call');
2020 if (is_null($user)) {
2021 $user = $USER;
2022 } else if (isset($user->id)) {
2023 // It is a valid object.
2024 } else if (is_numeric($user)) {
2025 $user = (object)array('id' => (int)$user);
2026 } else {
2027 throw new coding_exception('Invalid $user parameter in unset_user_preference() call');
2030 check_user_preferences_loaded($user);
2032 if (empty($user->id) or isguestuser($user->id)) {
2033 // No permanent storage for not-logged-in user and guest.
2034 unset($user->preference[$name]);
2035 return true;
2038 // Delete from DB.
2039 $DB->delete_records('user_preferences', array('userid' => $user->id, 'name' => $name));
2041 // Delete the preference from cache.
2042 unset($user->preference[$name]);
2043 // Update the $USER in case where we've not a direct reference to $USER.
2044 if ($user !== $USER && $user->id == $USER->id) {
2045 unset($USER->preference[$name]);
2048 // Set reload flag for other sessions.
2049 mark_user_preferences_changed($user->id);
2051 return true;
2055 * Used to fetch user preference(s)
2057 * If no arguments are supplied this function will return
2058 * all of the current user preferences as an array.
2060 * If a name is specified then this function
2061 * attempts to return that particular preference value. If
2062 * none is found, then the optional value $default is returned,
2063 * otherwise null.
2065 * If a $user object is submitted it's 'preference' property is used for the preferences cache.
2067 * @package core
2068 * @category preference
2069 * @access public
2070 * @param string $name Name of the key to use in finding a preference value
2071 * @param mixed|null $default Value to be returned if the $name key is not set in the user preferences
2072 * @param stdClass|int|null $user A moodle user object or id, null means current user
2073 * @throws coding_exception
2074 * @return string|mixed|null A string containing the value of a single preference. An
2075 * array with all of the preferences or null
2077 function get_user_preferences($name = null, $default = null, $user = null) {
2078 global $USER;
2080 if (is_null($name)) {
2081 // All prefs.
2082 } else if (is_numeric($name) or $name === '_lastloaded') {
2083 throw new coding_exception('Invalid preference name in get_user_preferences() call');
2086 if (is_null($user)) {
2087 $user = $USER;
2088 } else if (isset($user->id)) {
2089 // Is a valid object.
2090 } else if (is_numeric($user)) {
2091 $user = (object)array('id' => (int)$user);
2092 } else {
2093 throw new coding_exception('Invalid $user parameter in get_user_preferences() call');
2096 check_user_preferences_loaded($user);
2098 if (empty($name)) {
2099 // All values.
2100 return $user->preference;
2101 } else if (isset($user->preference[$name])) {
2102 // The single string value.
2103 return $user->preference[$name];
2104 } else {
2105 // Default value (null if not specified).
2106 return $default;
2110 // FUNCTIONS FOR HANDLING TIME.
2113 * Given Gregorian date parts in user time produce a GMT timestamp.
2115 * @package core
2116 * @category time
2117 * @param int $year The year part to create timestamp of
2118 * @param int $month The month part to create timestamp of
2119 * @param int $day The day part to create timestamp of
2120 * @param int $hour The hour part to create timestamp of
2121 * @param int $minute The minute part to create timestamp of
2122 * @param int $second The second part to create timestamp of
2123 * @param int|float|string $timezone Timezone modifier, used to calculate GMT time offset.
2124 * if 99 then default user's timezone is used {@link http://docs.moodle.org/dev/Time_API#Timezone}
2125 * @param bool $applydst Toggle Daylight Saving Time, default true, will be
2126 * applied only if timezone is 99 or string.
2127 * @return int GMT timestamp
2129 function make_timestamp($year, $month=1, $day=1, $hour=0, $minute=0, $second=0, $timezone=99, $applydst=true) {
2130 $date = new DateTime('now', core_date::get_user_timezone_object($timezone));
2131 $date->setDate((int)$year, (int)$month, (int)$day);
2132 $date->setTime((int)$hour, (int)$minute, (int)$second);
2134 $time = $date->getTimestamp();
2136 if ($time === false) {
2137 throw new coding_exception('getTimestamp() returned false, please ensure you have passed correct values.'.
2138 ' This can fail if year is more than 2038 and OS is 32 bit windows');
2141 // Moodle BC DST stuff.
2142 if (!$applydst) {
2143 $time += dst_offset_on($time, $timezone);
2146 return $time;
2151 * Format a date/time (seconds) as weeks, days, hours etc as needed
2153 * Given an amount of time in seconds, returns string
2154 * formatted nicely as years, days, hours etc as needed
2156 * @package core
2157 * @category time
2158 * @uses MINSECS
2159 * @uses HOURSECS
2160 * @uses DAYSECS
2161 * @uses YEARSECS
2162 * @param int $totalsecs Time in seconds
2163 * @param stdClass $str Should be a time object
2164 * @return string A nicely formatted date/time string
2166 function format_time($totalsecs, $str = null) {
2168 $totalsecs = abs($totalsecs);
2170 if (!$str) {
2171 // Create the str structure the slow way.
2172 $str = new stdClass();
2173 $str->day = get_string('day');
2174 $str->days = get_string('days');
2175 $str->hour = get_string('hour');
2176 $str->hours = get_string('hours');
2177 $str->min = get_string('min');
2178 $str->mins = get_string('mins');
2179 $str->sec = get_string('sec');
2180 $str->secs = get_string('secs');
2181 $str->year = get_string('year');
2182 $str->years = get_string('years');
2185 $years = floor($totalsecs/YEARSECS);
2186 $remainder = $totalsecs - ($years*YEARSECS);
2187 $days = floor($remainder/DAYSECS);
2188 $remainder = $totalsecs - ($days*DAYSECS);
2189 $hours = floor($remainder/HOURSECS);
2190 $remainder = $remainder - ($hours*HOURSECS);
2191 $mins = floor($remainder/MINSECS);
2192 $secs = $remainder - ($mins*MINSECS);
2194 $ss = ($secs == 1) ? $str->sec : $str->secs;
2195 $sm = ($mins == 1) ? $str->min : $str->mins;
2196 $sh = ($hours == 1) ? $str->hour : $str->hours;
2197 $sd = ($days == 1) ? $str->day : $str->days;
2198 $sy = ($years == 1) ? $str->year : $str->years;
2200 $oyears = '';
2201 $odays = '';
2202 $ohours = '';
2203 $omins = '';
2204 $osecs = '';
2206 if ($years) {
2207 $oyears = $years .' '. $sy;
2209 if ($days) {
2210 $odays = $days .' '. $sd;
2212 if ($hours) {
2213 $ohours = $hours .' '. $sh;
2215 if ($mins) {
2216 $omins = $mins .' '. $sm;
2218 if ($secs) {
2219 $osecs = $secs .' '. $ss;
2222 if ($years) {
2223 return trim($oyears .' '. $odays);
2225 if ($days) {
2226 return trim($odays .' '. $ohours);
2228 if ($hours) {
2229 return trim($ohours .' '. $omins);
2231 if ($mins) {
2232 return trim($omins .' '. $osecs);
2234 if ($secs) {
2235 return $osecs;
2237 return get_string('now');
2241 * Returns a formatted string that represents a date in user time.
2243 * @package core
2244 * @category time
2245 * @param int $date the timestamp in UTC, as obtained from the database.
2246 * @param string $format strftime format. You should probably get this using
2247 * get_string('strftime...', 'langconfig');
2248 * @param int|float|string $timezone by default, uses the user's time zone. if numeric and
2249 * not 99 then daylight saving will not be added.
2250 * {@link http://docs.moodle.org/dev/Time_API#Timezone}
2251 * @param bool $fixday If true (default) then the leading zero from %d is removed.
2252 * If false then the leading zero is maintained.
2253 * @param bool $fixhour If true (default) then the leading zero from %I is removed.
2254 * @return string the formatted date/time.
2256 function userdate($date, $format = '', $timezone = 99, $fixday = true, $fixhour = true) {
2257 $calendartype = \core_calendar\type_factory::get_calendar_instance();
2258 return $calendartype->timestamp_to_date_string($date, $format, $timezone, $fixday, $fixhour);
2262 * Returns a html "time" tag with both the exact user date with timezone information
2263 * as a datetime attribute in the W3C format, and the user readable date and time as text.
2265 * @package core
2266 * @category time
2267 * @param int $date the timestamp in UTC, as obtained from the database.
2268 * @param string $format strftime format. You should probably get this using
2269 * get_string('strftime...', 'langconfig');
2270 * @param int|float|string $timezone by default, uses the user's time zone. if numeric and
2271 * not 99 then daylight saving will not be added.
2272 * {@link http://docs.moodle.org/dev/Time_API#Timezone}
2273 * @param bool $fixday If true (default) then the leading zero from %d is removed.
2274 * If false then the leading zero is maintained.
2275 * @param bool $fixhour If true (default) then the leading zero from %I is removed.
2276 * @return string the formatted date/time.
2278 function userdate_htmltime($date, $format = '', $timezone = 99, $fixday = true, $fixhour = true) {
2279 $userdatestr = userdate($date, $format, $timezone, $fixday, $fixhour);
2280 if (CLI_SCRIPT && !PHPUNIT_TEST) {
2281 return $userdatestr;
2283 $machinedate = new DateTime();
2284 $machinedate->setTimestamp(intval($date));
2285 $machinedate->setTimezone(core_date::get_user_timezone_object());
2287 return html_writer::tag('time', $userdatestr, ['datetime' => $machinedate->format(DateTime::W3C)]);
2291 * Returns a formatted date ensuring it is UTF-8.
2293 * If we are running under Windows convert to Windows encoding and then back to UTF-8
2294 * (because it's impossible to specify UTF-8 to fetch locale info in Win32).
2296 * @param int $date the timestamp - since Moodle 2.9 this is a real UTC timestamp
2297 * @param string $format strftime format.
2298 * @param int|float|string $tz the user timezone
2299 * @return string the formatted date/time.
2300 * @since Moodle 2.3.3
2302 function date_format_string($date, $format, $tz = 99) {
2303 global $CFG;
2305 $localewincharset = null;
2306 // Get the calendar type user is using.
2307 if ($CFG->ostype == 'WINDOWS') {
2308 $calendartype = \core_calendar\type_factory::get_calendar_instance();
2309 $localewincharset = $calendartype->locale_win_charset();
2312 if ($localewincharset) {
2313 $format = core_text::convert($format, 'utf-8', $localewincharset);
2316 date_default_timezone_set(core_date::get_user_timezone($tz));
2317 $datestring = strftime($format, $date);
2318 core_date::set_default_server_timezone();
2320 if ($localewincharset) {
2321 $datestring = core_text::convert($datestring, $localewincharset, 'utf-8');
2324 return $datestring;
2328 * Given a $time timestamp in GMT (seconds since epoch),
2329 * returns an array that represents the Gregorian date in user time
2331 * @package core
2332 * @category time
2333 * @param int $time Timestamp in GMT
2334 * @param float|int|string $timezone user timezone
2335 * @return array An array that represents the date in user time
2337 function usergetdate($time, $timezone=99) {
2338 date_default_timezone_set(core_date::get_user_timezone($timezone));
2339 $result = getdate($time);
2340 core_date::set_default_server_timezone();
2342 return $result;
2346 * Given a GMT timestamp (seconds since epoch), offsets it by
2347 * the timezone. eg 3pm in India is 3pm GMT - 7 * 3600 seconds
2349 * NOTE: this function does not include DST properly,
2350 * you should use the PHP date stuff instead!
2352 * @package core
2353 * @category time
2354 * @param int $date Timestamp in GMT
2355 * @param float|int|string $timezone user timezone
2356 * @return int
2358 function usertime($date, $timezone=99) {
2359 $userdate = new DateTime('@' . $date);
2360 $userdate->setTimezone(core_date::get_user_timezone_object($timezone));
2361 $dst = dst_offset_on($date, $timezone);
2363 return $date - $userdate->getOffset() + $dst;
2367 * Given a time, return the GMT timestamp of the most recent midnight
2368 * for the current user.
2370 * @package core
2371 * @category time
2372 * @param int $date Timestamp in GMT
2373 * @param float|int|string $timezone user timezone
2374 * @return int Returns a GMT timestamp
2376 function usergetmidnight($date, $timezone=99) {
2378 $userdate = usergetdate($date, $timezone);
2380 // Time of midnight of this user's day, in GMT.
2381 return make_timestamp($userdate['year'], $userdate['mon'], $userdate['mday'], 0, 0, 0, $timezone);
2386 * Returns a string that prints the user's timezone
2388 * @package core
2389 * @category time
2390 * @param float|int|string $timezone user timezone
2391 * @return string
2393 function usertimezone($timezone=99) {
2394 $tz = core_date::get_user_timezone($timezone);
2395 return core_date::get_localised_timezone($tz);
2399 * Returns a float or a string which denotes the user's timezone
2400 * A float value means that a simple offset from GMT is used, while a string (it will be the name of a timezone in the database)
2401 * means that for this timezone there are also DST rules to be taken into account
2402 * Checks various settings and picks the most dominant of those which have a value
2404 * @package core
2405 * @category time
2406 * @param float|int|string $tz timezone to calculate GMT time offset before
2407 * calculating user timezone, 99 is default user timezone
2408 * {@link http://docs.moodle.org/dev/Time_API#Timezone}
2409 * @return float|string
2411 function get_user_timezone($tz = 99) {
2412 global $USER, $CFG;
2414 $timezones = array(
2415 $tz,
2416 isset($CFG->forcetimezone) ? $CFG->forcetimezone : 99,
2417 isset($USER->timezone) ? $USER->timezone : 99,
2418 isset($CFG->timezone) ? $CFG->timezone : 99,
2421 $tz = 99;
2423 // Loop while $tz is, empty but not zero, or 99, and there is another timezone is the array.
2424 foreach ($timezones as $nextvalue) {
2425 if ((empty($tz) && !is_numeric($tz)) || $tz == 99) {
2426 $tz = $nextvalue;
2429 return is_numeric($tz) ? (float) $tz : $tz;
2433 * Calculates the Daylight Saving Offset for a given date/time (timestamp)
2434 * - Note: Daylight saving only works for string timezones and not for float.
2436 * @package core
2437 * @category time
2438 * @param int $time must NOT be compensated at all, it has to be a pure timestamp
2439 * @param int|float|string $strtimezone user timezone
2440 * @return int
2442 function dst_offset_on($time, $strtimezone = null) {
2443 $tz = core_date::get_user_timezone($strtimezone);
2444 $date = new DateTime('@' . $time);
2445 $date->setTimezone(new DateTimeZone($tz));
2446 if ($date->format('I') == '1') {
2447 if ($tz === 'Australia/Lord_Howe') {
2448 return 1800;
2450 return 3600;
2452 return 0;
2456 * Calculates when the day appears in specific month
2458 * @package core
2459 * @category time
2460 * @param int $startday starting day of the month
2461 * @param int $weekday The day when week starts (normally taken from user preferences)
2462 * @param int $month The month whose day is sought
2463 * @param int $year The year of the month whose day is sought
2464 * @return int
2466 function find_day_in_month($startday, $weekday, $month, $year) {
2467 $calendartype = \core_calendar\type_factory::get_calendar_instance();
2469 $daysinmonth = days_in_month($month, $year);
2470 $daysinweek = count($calendartype->get_weekdays());
2472 if ($weekday == -1) {
2473 // Don't care about weekday, so return:
2474 // abs($startday) if $startday != -1
2475 // $daysinmonth otherwise.
2476 return ($startday == -1) ? $daysinmonth : abs($startday);
2479 // From now on we 're looking for a specific weekday.
2480 // Give "end of month" its actual value, since we know it.
2481 if ($startday == -1) {
2482 $startday = -1 * $daysinmonth;
2485 // Starting from day $startday, the sign is the direction.
2486 if ($startday < 1) {
2487 $startday = abs($startday);
2488 $lastmonthweekday = dayofweek($daysinmonth, $month, $year);
2490 // This is the last such weekday of the month.
2491 $lastinmonth = $daysinmonth + $weekday - $lastmonthweekday;
2492 if ($lastinmonth > $daysinmonth) {
2493 $lastinmonth -= $daysinweek;
2496 // Find the first such weekday <= $startday.
2497 while ($lastinmonth > $startday) {
2498 $lastinmonth -= $daysinweek;
2501 return $lastinmonth;
2502 } else {
2503 $indexweekday = dayofweek($startday, $month, $year);
2505 $diff = $weekday - $indexweekday;
2506 if ($diff < 0) {
2507 $diff += $daysinweek;
2510 // This is the first such weekday of the month equal to or after $startday.
2511 $firstfromindex = $startday + $diff;
2513 return $firstfromindex;
2518 * Calculate the number of days in a given month
2520 * @package core
2521 * @category time
2522 * @param int $month The month whose day count is sought
2523 * @param int $year The year of the month whose day count is sought
2524 * @return int
2526 function days_in_month($month, $year) {
2527 $calendartype = \core_calendar\type_factory::get_calendar_instance();
2528 return $calendartype->get_num_days_in_month($year, $month);
2532 * Calculate the position in the week of a specific calendar day
2534 * @package core
2535 * @category time
2536 * @param int $day The day of the date whose position in the week is sought
2537 * @param int $month The month of the date whose position in the week is sought
2538 * @param int $year The year of the date whose position in the week is sought
2539 * @return int
2541 function dayofweek($day, $month, $year) {
2542 $calendartype = \core_calendar\type_factory::get_calendar_instance();
2543 return $calendartype->get_weekday($year, $month, $day);
2546 // USER AUTHENTICATION AND LOGIN.
2549 * Returns full login url.
2551 * @return string login url
2553 function get_login_url() {
2554 global $CFG;
2556 return "$CFG->wwwroot/login/index.php";
2560 * This function checks that the current user is logged in and has the
2561 * required privileges
2563 * This function checks that the current user is logged in, and optionally
2564 * whether they are allowed to be in a particular course and view a particular
2565 * course module.
2566 * If they are not logged in, then it redirects them to the site login unless
2567 * $autologinguest is set and {@link $CFG}->autologinguests is set to 1 in which
2568 * case they are automatically logged in as guests.
2569 * If $courseid is given and the user is not enrolled in that course then the
2570 * user is redirected to the course enrolment page.
2571 * If $cm is given and the course module is hidden and the user is not a teacher
2572 * in the course then the user is redirected to the course home page.
2574 * When $cm parameter specified, this function sets page layout to 'module'.
2575 * You need to change it manually later if some other layout needed.
2577 * @package core_access
2578 * @category access
2580 * @param mixed $courseorid id of the course or course object
2581 * @param bool $autologinguest default true
2582 * @param object $cm course module object
2583 * @param bool $setwantsurltome Define if we want to set $SESSION->wantsurl, defaults to
2584 * true. Used to avoid (=false) some scripts (file.php...) to set that variable,
2585 * in order to keep redirects working properly. MDL-14495
2586 * @param bool $preventredirect set to true in scripts that can not redirect (CLI, rss feeds, etc.), throws exceptions
2587 * @return mixed Void, exit, and die depending on path
2588 * @throws coding_exception
2589 * @throws require_login_exception
2590 * @throws moodle_exception
2592 function require_login($courseorid = null, $autologinguest = true, $cm = null, $setwantsurltome = true, $preventredirect = false) {
2593 global $CFG, $SESSION, $USER, $PAGE, $SITE, $DB, $OUTPUT;
2595 // Must not redirect when byteserving already started.
2596 if (!empty($_SERVER['HTTP_RANGE'])) {
2597 $preventredirect = true;
2600 if (AJAX_SCRIPT) {
2601 // We cannot redirect for AJAX scripts either.
2602 $preventredirect = true;
2605 // Setup global $COURSE, themes, language and locale.
2606 if (!empty($courseorid)) {
2607 if (is_object($courseorid)) {
2608 $course = $courseorid;
2609 } else if ($courseorid == SITEID) {
2610 $course = clone($SITE);
2611 } else {
2612 $course = $DB->get_record('course', array('id' => $courseorid), '*', MUST_EXIST);
2614 if ($cm) {
2615 if ($cm->course != $course->id) {
2616 throw new coding_exception('course and cm parameters in require_login() call do not match!!');
2618 // Make sure we have a $cm from get_fast_modinfo as this contains activity access details.
2619 if (!($cm instanceof cm_info)) {
2620 // Note: nearly all pages call get_fast_modinfo anyway and it does not make any
2621 // db queries so this is not really a performance concern, however it is obviously
2622 // better if you use get_fast_modinfo to get the cm before calling this.
2623 $modinfo = get_fast_modinfo($course);
2624 $cm = $modinfo->get_cm($cm->id);
2627 } else {
2628 // Do not touch global $COURSE via $PAGE->set_course(),
2629 // the reasons is we need to be able to call require_login() at any time!!
2630 $course = $SITE;
2631 if ($cm) {
2632 throw new coding_exception('cm parameter in require_login() requires valid course parameter!');
2636 // If this is an AJAX request and $setwantsurltome is true then we need to override it and set it to false.
2637 // Otherwise the AJAX request URL will be set to $SESSION->wantsurl and events such as self enrolment in the future
2638 // risk leading the user back to the AJAX request URL.
2639 if ($setwantsurltome && defined('AJAX_SCRIPT') && AJAX_SCRIPT) {
2640 $setwantsurltome = false;
2643 // Redirect to the login page if session has expired, only with dbsessions enabled (MDL-35029) to maintain current behaviour.
2644 if ((!isloggedin() or isguestuser()) && !empty($SESSION->has_timed_out) && !empty($CFG->dbsessions)) {
2645 if ($preventredirect) {
2646 throw new require_login_session_timeout_exception();
2647 } else {
2648 if ($setwantsurltome) {
2649 $SESSION->wantsurl = qualified_me();
2651 redirect(get_login_url());
2655 // If the user is not even logged in yet then make sure they are.
2656 if (!isloggedin()) {
2657 if ($autologinguest and !empty($CFG->guestloginbutton) and !empty($CFG->autologinguests)) {
2658 if (!$guest = get_complete_user_data('id', $CFG->siteguest)) {
2659 // Misconfigured site guest, just redirect to login page.
2660 redirect(get_login_url());
2661 exit; // Never reached.
2663 $lang = isset($SESSION->lang) ? $SESSION->lang : $CFG->lang;
2664 complete_user_login($guest);
2665 $USER->autologinguest = true;
2666 $SESSION->lang = $lang;
2667 } else {
2668 // NOTE: $USER->site check was obsoleted by session test cookie, $USER->confirmed test is in login/index.php.
2669 if ($preventredirect) {
2670 throw new require_login_exception('You are not logged in');
2673 if ($setwantsurltome) {
2674 $SESSION->wantsurl = qualified_me();
2677 $referer = get_local_referer(false);
2678 if (!empty($referer)) {
2679 $SESSION->fromurl = $referer;
2682 // Give auth plugins an opportunity to authenticate or redirect to an external login page
2683 $authsequence = get_enabled_auth_plugins(true); // auths, in sequence
2684 foreach($authsequence as $authname) {
2685 $authplugin = get_auth_plugin($authname);
2686 $authplugin->pre_loginpage_hook();
2687 if (isloggedin()) {
2688 break;
2692 // If we're still not logged in then go to the login page
2693 if (!isloggedin()) {
2694 redirect(get_login_url());
2695 exit; // Never reached.
2700 // Loginas as redirection if needed.
2701 if ($course->id != SITEID and \core\session\manager::is_loggedinas()) {
2702 if ($USER->loginascontext->contextlevel == CONTEXT_COURSE) {
2703 if ($USER->loginascontext->instanceid != $course->id) {
2704 print_error('loginasonecourse', '', $CFG->wwwroot.'/course/view.php?id='.$USER->loginascontext->instanceid);
2709 // Check whether the user should be changing password (but only if it is REALLY them).
2710 if (get_user_preferences('auth_forcepasswordchange') && !\core\session\manager::is_loggedinas()) {
2711 $userauth = get_auth_plugin($USER->auth);
2712 if ($userauth->can_change_password() and !$preventredirect) {
2713 if ($setwantsurltome) {
2714 $SESSION->wantsurl = qualified_me();
2716 if ($changeurl = $userauth->change_password_url()) {
2717 // Use plugin custom url.
2718 redirect($changeurl);
2719 } else {
2720 // Use moodle internal method.
2721 redirect($CFG->wwwroot .'/login/change_password.php');
2723 } else if ($userauth->can_change_password()) {
2724 throw new moodle_exception('forcepasswordchangenotice');
2725 } else {
2726 throw new moodle_exception('nopasswordchangeforced', 'auth');
2730 // Check that the user account is properly set up. If we can't redirect to
2731 // edit their profile and this is not a WS request, perform just the lax check.
2732 // It will allow them to use filepicker on the profile edit page.
2734 if ($preventredirect && !WS_SERVER) {
2735 $usernotfullysetup = user_not_fully_set_up($USER, false);
2736 } else {
2737 $usernotfullysetup = user_not_fully_set_up($USER, true);
2740 if ($usernotfullysetup) {
2741 if ($preventredirect) {
2742 throw new moodle_exception('usernotfullysetup');
2744 if ($setwantsurltome) {
2745 $SESSION->wantsurl = qualified_me();
2747 redirect($CFG->wwwroot .'/user/edit.php?id='. $USER->id .'&amp;course='. SITEID);
2750 // Make sure the USER has a sesskey set up. Used for CSRF protection.
2751 sesskey();
2753 // Do not bother admins with any formalities, except for activities pending deletion.
2754 if (is_siteadmin() && !($cm && $cm->deletioninprogress)) {
2755 // Set the global $COURSE.
2756 if ($cm) {
2757 $PAGE->set_cm($cm, $course);
2758 $PAGE->set_pagelayout('incourse');
2759 } else if (!empty($courseorid)) {
2760 $PAGE->set_course($course);
2762 // Set accesstime or the user will appear offline which messes up messaging.
2763 user_accesstime_log($course->id);
2764 return;
2767 // Scripts have a chance to declare that $USER->policyagreed should not be checked.
2768 // This is mostly for places where users are actually accepting the policies, to avoid the redirect loop.
2769 if (!defined('NO_SITEPOLICY_CHECK')) {
2770 define('NO_SITEPOLICY_CHECK', false);
2773 // Check that the user has agreed to a site policy if there is one - do not test in case of admins.
2774 // Do not test if the script explicitly asked for skipping the site policies check.
2775 if (!$USER->policyagreed && !is_siteadmin() && !NO_SITEPOLICY_CHECK) {
2776 $manager = new \core_privacy\local\sitepolicy\manager();
2777 if ($policyurl = $manager->get_redirect_url(isguestuser())) {
2778 if ($preventredirect) {
2779 throw new moodle_exception('sitepolicynotagreed', 'error', '', $policyurl->out());
2781 if ($setwantsurltome) {
2782 $SESSION->wantsurl = qualified_me();
2784 redirect($policyurl);
2788 // Fetch the system context, the course context, and prefetch its child contexts.
2789 $sysctx = context_system::instance();
2790 $coursecontext = context_course::instance($course->id, MUST_EXIST);
2791 if ($cm) {
2792 $cmcontext = context_module::instance($cm->id, MUST_EXIST);
2793 } else {
2794 $cmcontext = null;
2797 // If the site is currently under maintenance, then print a message.
2798 if (!empty($CFG->maintenance_enabled) and !has_capability('moodle/site:maintenanceaccess', $sysctx)) {
2799 if ($preventredirect) {
2800 throw new require_login_exception('Maintenance in progress');
2802 $PAGE->set_context(null);
2803 print_maintenance_message();
2806 // Make sure the course itself is not hidden.
2807 if ($course->id == SITEID) {
2808 // Frontpage can not be hidden.
2809 } else {
2810 if (is_role_switched($course->id)) {
2811 // When switching roles ignore the hidden flag - user had to be in course to do the switch.
2812 } else {
2813 if (!$course->visible and !has_capability('moodle/course:viewhiddencourses', $coursecontext)) {
2814 // Originally there was also test of parent category visibility, BUT is was very slow in complex queries
2815 // involving "my courses" now it is also possible to simply hide all courses user is not enrolled in :-).
2816 if ($preventredirect) {
2817 throw new require_login_exception('Course is hidden');
2819 $PAGE->set_context(null);
2820 // We need to override the navigation URL as the course won't have been added to the navigation and thus
2821 // the navigation will mess up when trying to find it.
2822 navigation_node::override_active_url(new moodle_url('/'));
2823 notice(get_string('coursehidden'), $CFG->wwwroot .'/');
2828 // Is the user enrolled?
2829 if ($course->id == SITEID) {
2830 // Everybody is enrolled on the frontpage.
2831 } else {
2832 if (\core\session\manager::is_loggedinas()) {
2833 // Make sure the REAL person can access this course first.
2834 $realuser = \core\session\manager::get_realuser();
2835 if (!is_enrolled($coursecontext, $realuser->id, '', true) and
2836 !is_viewing($coursecontext, $realuser->id) and !is_siteadmin($realuser->id)) {
2837 if ($preventredirect) {
2838 throw new require_login_exception('Invalid course login-as access');
2840 $PAGE->set_context(null);
2841 echo $OUTPUT->header();
2842 notice(get_string('studentnotallowed', '', fullname($USER, true)), $CFG->wwwroot .'/');
2846 $access = false;
2848 if (is_role_switched($course->id)) {
2849 // Ok, user had to be inside this course before the switch.
2850 $access = true;
2852 } else if (is_viewing($coursecontext, $USER)) {
2853 // Ok, no need to mess with enrol.
2854 $access = true;
2856 } else {
2857 if (isset($USER->enrol['enrolled'][$course->id])) {
2858 if ($USER->enrol['enrolled'][$course->id] > time()) {
2859 $access = true;
2860 if (isset($USER->enrol['tempguest'][$course->id])) {
2861 unset($USER->enrol['tempguest'][$course->id]);
2862 remove_temp_course_roles($coursecontext);
2864 } else {
2865 // Expired.
2866 unset($USER->enrol['enrolled'][$course->id]);
2869 if (isset($USER->enrol['tempguest'][$course->id])) {
2870 if ($USER->enrol['tempguest'][$course->id] == 0) {
2871 $access = true;
2872 } else if ($USER->enrol['tempguest'][$course->id] > time()) {
2873 $access = true;
2874 } else {
2875 // Expired.
2876 unset($USER->enrol['tempguest'][$course->id]);
2877 remove_temp_course_roles($coursecontext);
2881 if (!$access) {
2882 // Cache not ok.
2883 $until = enrol_get_enrolment_end($coursecontext->instanceid, $USER->id);
2884 if ($until !== false) {
2885 // Active participants may always access, a timestamp in the future, 0 (always) or false.
2886 if ($until == 0) {
2887 $until = ENROL_MAX_TIMESTAMP;
2889 $USER->enrol['enrolled'][$course->id] = $until;
2890 $access = true;
2892 } else {
2893 $params = array('courseid' => $course->id, 'status' => ENROL_INSTANCE_ENABLED);
2894 $instances = $DB->get_records('enrol', $params, 'sortorder, id ASC');
2895 $enrols = enrol_get_plugins(true);
2896 // First ask all enabled enrol instances in course if they want to auto enrol user.
2897 foreach ($instances as $instance) {
2898 if (!isset($enrols[$instance->enrol])) {
2899 continue;
2901 // Get a duration for the enrolment, a timestamp in the future, 0 (always) or false.
2902 $until = $enrols[$instance->enrol]->try_autoenrol($instance);
2903 if ($until !== false) {
2904 if ($until == 0) {
2905 $until = ENROL_MAX_TIMESTAMP;
2907 $USER->enrol['enrolled'][$course->id] = $until;
2908 $access = true;
2909 break;
2912 // If not enrolled yet try to gain temporary guest access.
2913 if (!$access) {
2914 foreach ($instances as $instance) {
2915 if (!isset($enrols[$instance->enrol])) {
2916 continue;
2918 // Get a duration for the guest access, a timestamp in the future or false.
2919 $until = $enrols[$instance->enrol]->try_guestaccess($instance);
2920 if ($until !== false and $until > time()) {
2921 $USER->enrol['tempguest'][$course->id] = $until;
2922 $access = true;
2923 break;
2931 if (!$access) {
2932 if ($preventredirect) {
2933 throw new require_login_exception('Not enrolled');
2935 if ($setwantsurltome) {
2936 $SESSION->wantsurl = qualified_me();
2938 redirect($CFG->wwwroot .'/enrol/index.php?id='. $course->id);
2942 // Check whether the activity has been scheduled for deletion. If so, then deny access, even for admins.
2943 if ($cm && $cm->deletioninprogress) {
2944 if ($preventredirect) {
2945 throw new moodle_exception('activityisscheduledfordeletion');
2947 require_once($CFG->dirroot . '/course/lib.php');
2948 redirect(course_get_url($course), get_string('activityisscheduledfordeletion', 'error'));
2951 // Check visibility of activity to current user; includes visible flag, conditional availability, etc.
2952 if ($cm && !$cm->uservisible) {
2953 if ($preventredirect) {
2954 throw new require_login_exception('Activity is hidden');
2956 // Get the error message that activity is not available and why (if explanation can be shown to the user).
2957 $PAGE->set_course($course);
2958 $renderer = $PAGE->get_renderer('course');
2959 $message = $renderer->course_section_cm_unavailable_error_message($cm);
2960 redirect(course_get_url($course), $message, null, \core\output\notification::NOTIFY_ERROR);
2963 // Set the global $COURSE.
2964 if ($cm) {
2965 $PAGE->set_cm($cm, $course);
2966 $PAGE->set_pagelayout('incourse');
2967 } else if (!empty($courseorid)) {
2968 $PAGE->set_course($course);
2971 // Finally access granted, update lastaccess times.
2972 user_accesstime_log($course->id);
2977 * This function just makes sure a user is logged out.
2979 * @package core_access
2980 * @category access
2982 function require_logout() {
2983 global $USER, $DB;
2985 if (!isloggedin()) {
2986 // This should not happen often, no need for hooks or events here.
2987 \core\session\manager::terminate_current();
2988 return;
2991 // Execute hooks before action.
2992 $authplugins = array();
2993 $authsequence = get_enabled_auth_plugins();
2994 foreach ($authsequence as $authname) {
2995 $authplugins[$authname] = get_auth_plugin($authname);
2996 $authplugins[$authname]->prelogout_hook();
2999 // Store info that gets removed during logout.
3000 $sid = session_id();
3001 $event = \core\event\user_loggedout::create(
3002 array(
3003 'userid' => $USER->id,
3004 'objectid' => $USER->id,
3005 'other' => array('sessionid' => $sid),
3008 if ($session = $DB->get_record('sessions', array('sid'=>$sid))) {
3009 $event->add_record_snapshot('sessions', $session);
3012 // Clone of $USER object to be used by auth plugins.
3013 $user = fullclone($USER);
3015 // Delete session record and drop $_SESSION content.
3016 \core\session\manager::terminate_current();
3018 // Trigger event AFTER action.
3019 $event->trigger();
3021 // Hook to execute auth plugins redirection after event trigger.
3022 foreach ($authplugins as $authplugin) {
3023 $authplugin->postlogout_hook($user);
3028 * Weaker version of require_login()
3030 * This is a weaker version of {@link require_login()} which only requires login
3031 * when called from within a course rather than the site page, unless
3032 * the forcelogin option is turned on.
3033 * @see require_login()
3035 * @package core_access
3036 * @category access
3038 * @param mixed $courseorid The course object or id in question
3039 * @param bool $autologinguest Allow autologin guests if that is wanted
3040 * @param object $cm Course activity module if known
3041 * @param bool $setwantsurltome Define if we want to set $SESSION->wantsurl, defaults to
3042 * true. Used to avoid (=false) some scripts (file.php...) to set that variable,
3043 * in order to keep redirects working properly. MDL-14495
3044 * @param bool $preventredirect set to true in scripts that can not redirect (CLI, rss feeds, etc.), throws exceptions
3045 * @return void
3046 * @throws coding_exception
3048 function require_course_login($courseorid, $autologinguest = true, $cm = null, $setwantsurltome = true, $preventredirect = false) {
3049 global $CFG, $PAGE, $SITE;
3050 $issite = ((is_object($courseorid) and $courseorid->id == SITEID)
3051 or (!is_object($courseorid) and $courseorid == SITEID));
3052 if ($issite && !empty($cm) && !($cm instanceof cm_info)) {
3053 // Note: nearly all pages call get_fast_modinfo anyway and it does not make any
3054 // db queries so this is not really a performance concern, however it is obviously
3055 // better if you use get_fast_modinfo to get the cm before calling this.
3056 if (is_object($courseorid)) {
3057 $course = $courseorid;
3058 } else {
3059 $course = clone($SITE);
3061 $modinfo = get_fast_modinfo($course);
3062 $cm = $modinfo->get_cm($cm->id);
3064 if (!empty($CFG->forcelogin)) {
3065 // Login required for both SITE and courses.
3066 require_login($courseorid, $autologinguest, $cm, $setwantsurltome, $preventredirect);
3068 } else if ($issite && !empty($cm) and !$cm->uservisible) {
3069 // Always login for hidden activities.
3070 require_login($courseorid, $autologinguest, $cm, $setwantsurltome, $preventredirect);
3072 } else if (isloggedin() && !isguestuser()) {
3073 // User is already logged in. Make sure the login is complete (user is fully setup, policies agreed).
3074 require_login($courseorid, $autologinguest, $cm, $setwantsurltome, $preventredirect);
3076 } else if ($issite) {
3077 // Login for SITE not required.
3078 // We still need to instatiate PAGE vars properly so that things that rely on it like navigation function correctly.
3079 if (!empty($courseorid)) {
3080 if (is_object($courseorid)) {
3081 $course = $courseorid;
3082 } else {
3083 $course = clone $SITE;
3085 if ($cm) {
3086 if ($cm->course != $course->id) {
3087 throw new coding_exception('course and cm parameters in require_course_login() call do not match!!');
3089 $PAGE->set_cm($cm, $course);
3090 $PAGE->set_pagelayout('incourse');
3091 } else {
3092 $PAGE->set_course($course);
3094 } else {
3095 // If $PAGE->course, and hence $PAGE->context, have not already been set up properly, set them up now.
3096 $PAGE->set_course($PAGE->course);
3098 user_accesstime_log(SITEID);
3099 return;
3101 } else {
3102 // Course login always required.
3103 require_login($courseorid, $autologinguest, $cm, $setwantsurltome, $preventredirect);
3108 * Validates a user key, checking if the key exists, is not expired and the remote ip is correct.
3110 * @param string $keyvalue the key value
3111 * @param string $script unique script identifier
3112 * @param int $instance instance id
3113 * @return stdClass the key entry in the user_private_key table
3114 * @since Moodle 3.2
3115 * @throws moodle_exception
3117 function validate_user_key($keyvalue, $script, $instance) {
3118 global $DB;
3120 if (!$key = $DB->get_record('user_private_key', array('script' => $script, 'value' => $keyvalue, 'instance' => $instance))) {
3121 print_error('invalidkey');
3124 if (!empty($key->validuntil) and $key->validuntil < time()) {
3125 print_error('expiredkey');
3128 if ($key->iprestriction) {
3129 $remoteaddr = getremoteaddr(null);
3130 if (empty($remoteaddr) or !address_in_subnet($remoteaddr, $key->iprestriction)) {
3131 print_error('ipmismatch');
3134 return $key;
3138 * Require key login. Function terminates with error if key not found or incorrect.
3140 * @uses NO_MOODLE_COOKIES
3141 * @uses PARAM_ALPHANUM
3142 * @param string $script unique script identifier
3143 * @param int $instance optional instance id
3144 * @param string $keyvalue The key. If not supplied, this will be fetched from the current session.
3145 * @return int Instance ID
3147 function require_user_key_login($script, $instance = null, $keyvalue = null) {
3148 global $DB;
3150 if (!NO_MOODLE_COOKIES) {
3151 print_error('sessioncookiesdisable');
3154 // Extra safety.
3155 \core\session\manager::write_close();
3157 if (null === $keyvalue) {
3158 $keyvalue = required_param('key', PARAM_ALPHANUM);
3161 $key = validate_user_key($keyvalue, $script, $instance);
3163 if (!$user = $DB->get_record('user', array('id' => $key->userid))) {
3164 print_error('invaliduserid');
3167 // Emulate normal session.
3168 enrol_check_plugins($user);
3169 \core\session\manager::set_user($user);
3171 // Note we are not using normal login.
3172 if (!defined('USER_KEY_LOGIN')) {
3173 define('USER_KEY_LOGIN', true);
3176 // Return instance id - it might be empty.
3177 return $key->instance;
3181 * Creates a new private user access key.
3183 * @param string $script unique target identifier
3184 * @param int $userid
3185 * @param int $instance optional instance id
3186 * @param string $iprestriction optional ip restricted access
3187 * @param int $validuntil key valid only until given data
3188 * @return string access key value
3190 function create_user_key($script, $userid, $instance=null, $iprestriction=null, $validuntil=null) {
3191 global $DB;
3193 $key = new stdClass();
3194 $key->script = $script;
3195 $key->userid = $userid;
3196 $key->instance = $instance;
3197 $key->iprestriction = $iprestriction;
3198 $key->validuntil = $validuntil;
3199 $key->timecreated = time();
3201 // Something long and unique.
3202 $key->value = md5($userid.'_'.time().random_string(40));
3203 while ($DB->record_exists('user_private_key', array('value' => $key->value))) {
3204 // Must be unique.
3205 $key->value = md5($userid.'_'.time().random_string(40));
3207 $DB->insert_record('user_private_key', $key);
3208 return $key->value;
3212 * Delete the user's new private user access keys for a particular script.
3214 * @param string $script unique target identifier
3215 * @param int $userid
3216 * @return void
3218 function delete_user_key($script, $userid) {
3219 global $DB;
3220 $DB->delete_records('user_private_key', array('script' => $script, 'userid' => $userid));
3224 * Gets a private user access key (and creates one if one doesn't exist).
3226 * @param string $script unique target identifier
3227 * @param int $userid
3228 * @param int $instance optional instance id
3229 * @param string $iprestriction optional ip restricted access
3230 * @param int $validuntil key valid only until given date
3231 * @return string access key value
3233 function get_user_key($script, $userid, $instance=null, $iprestriction=null, $validuntil=null) {
3234 global $DB;
3236 if ($key = $DB->get_record('user_private_key', array('script' => $script, 'userid' => $userid,
3237 'instance' => $instance, 'iprestriction' => $iprestriction,
3238 'validuntil' => $validuntil))) {
3239 return $key->value;
3240 } else {
3241 return create_user_key($script, $userid, $instance, $iprestriction, $validuntil);
3247 * Modify the user table by setting the currently logged in user's last login to now.
3249 * @return bool Always returns true
3251 function update_user_login_times() {
3252 global $USER, $DB;
3254 if (isguestuser()) {
3255 // Do not update guest access times/ips for performance.
3256 return true;
3259 $now = time();
3261 $user = new stdClass();
3262 $user->id = $USER->id;
3264 // Make sure all users that logged in have some firstaccess.
3265 if ($USER->firstaccess == 0) {
3266 $USER->firstaccess = $user->firstaccess = $now;
3269 // Store the previous current as lastlogin.
3270 $USER->lastlogin = $user->lastlogin = $USER->currentlogin;
3272 $USER->currentlogin = $user->currentlogin = $now;
3274 // Function user_accesstime_log() may not update immediately, better do it here.
3275 $USER->lastaccess = $user->lastaccess = $now;
3276 $USER->lastip = $user->lastip = getremoteaddr();
3278 // Note: do not call user_update_user() here because this is part of the login process,
3279 // the login event means that these fields were updated.
3280 $DB->update_record('user', $user);
3281 return true;
3285 * Determines if a user has completed setting up their account.
3287 * The lax mode (with $strict = false) has been introduced for special cases
3288 * only where we want to skip certain checks intentionally. This is valid in
3289 * certain mnet or ajax scenarios when the user cannot / should not be
3290 * redirected to edit their profile. In most cases, you should perform the
3291 * strict check.
3293 * @param stdClass $user A {@link $USER} object to test for the existence of a valid name and email
3294 * @param bool $strict Be more strict and assert id and custom profile fields set, too
3295 * @return bool
3297 function user_not_fully_set_up($user, $strict = true) {
3298 global $CFG;
3299 require_once($CFG->dirroot.'/user/profile/lib.php');
3301 if (isguestuser($user)) {
3302 return false;
3305 if (empty($user->firstname) or empty($user->lastname) or empty($user->email) or over_bounce_threshold($user)) {
3306 return true;
3309 if ($strict) {
3310 if (empty($user->id)) {
3311 // Strict mode can be used with existing accounts only.
3312 return true;
3314 if (!profile_has_required_custom_fields_set($user->id)) {
3315 return true;
3319 return false;
3323 * Check whether the user has exceeded the bounce threshold
3325 * @param stdClass $user A {@link $USER} object
3326 * @return bool true => User has exceeded bounce threshold
3328 function over_bounce_threshold($user) {
3329 global $CFG, $DB;
3331 if (empty($CFG->handlebounces)) {
3332 return false;
3335 if (empty($user->id)) {
3336 // No real (DB) user, nothing to do here.
3337 return false;
3340 // Set sensible defaults.
3341 if (empty($CFG->minbounces)) {
3342 $CFG->minbounces = 10;
3344 if (empty($CFG->bounceratio)) {
3345 $CFG->bounceratio = .20;
3347 $bouncecount = 0;
3348 $sendcount = 0;
3349 if ($bounce = $DB->get_record('user_preferences', array ('userid' => $user->id, 'name' => 'email_bounce_count'))) {
3350 $bouncecount = $bounce->value;
3352 if ($send = $DB->get_record('user_preferences', array('userid' => $user->id, 'name' => 'email_send_count'))) {
3353 $sendcount = $send->value;
3355 return ($bouncecount >= $CFG->minbounces && $bouncecount/$sendcount >= $CFG->bounceratio);
3359 * Used to increment or reset email sent count
3361 * @param stdClass $user object containing an id
3362 * @param bool $reset will reset the count to 0
3363 * @return void
3365 function set_send_count($user, $reset=false) {
3366 global $DB;
3368 if (empty($user->id)) {
3369 // No real (DB) user, nothing to do here.
3370 return;
3373 if ($pref = $DB->get_record('user_preferences', array('userid' => $user->id, 'name' => 'email_send_count'))) {
3374 $pref->value = (!empty($reset)) ? 0 : $pref->value+1;
3375 $DB->update_record('user_preferences', $pref);
3376 } else if (!empty($reset)) {
3377 // If it's not there and we're resetting, don't bother. Make a new one.
3378 $pref = new stdClass();
3379 $pref->name = 'email_send_count';
3380 $pref->value = 1;
3381 $pref->userid = $user->id;
3382 $DB->insert_record('user_preferences', $pref, false);
3387 * Increment or reset user's email bounce count
3389 * @param stdClass $user object containing an id
3390 * @param bool $reset will reset the count to 0
3392 function set_bounce_count($user, $reset=false) {
3393 global $DB;
3395 if ($pref = $DB->get_record('user_preferences', array('userid' => $user->id, 'name' => 'email_bounce_count'))) {
3396 $pref->value = (!empty($reset)) ? 0 : $pref->value+1;
3397 $DB->update_record('user_preferences', $pref);
3398 } else if (!empty($reset)) {
3399 // If it's not there and we're resetting, don't bother. Make a new one.
3400 $pref = new stdClass();
3401 $pref->name = 'email_bounce_count';
3402 $pref->value = 1;
3403 $pref->userid = $user->id;
3404 $DB->insert_record('user_preferences', $pref, false);
3409 * Determines if the logged in user is currently moving an activity
3411 * @param int $courseid The id of the course being tested
3412 * @return bool
3414 function ismoving($courseid) {
3415 global $USER;
3417 if (!empty($USER->activitycopy)) {
3418 return ($USER->activitycopycourse == $courseid);
3420 return false;
3424 * Returns a persons full name
3426 * Given an object containing all of the users name values, this function returns a string with the full name of the person.
3427 * The result may depend on system settings or language. 'override' will force both names to be used even if system settings
3428 * specify one.
3430 * @param stdClass $user A {@link $USER} object to get full name of.
3431 * @param bool $override If true then the name will be firstname followed by lastname rather than adhering to fullnamedisplay.
3432 * @return string
3434 function fullname($user, $override=false) {
3435 global $CFG, $SESSION;
3437 if (!isset($user->firstname) and !isset($user->lastname)) {
3438 return '';
3441 // Get all of the name fields.
3442 $allnames = get_all_user_name_fields();
3443 if ($CFG->debugdeveloper) {
3444 foreach ($allnames as $allname) {
3445 if (!property_exists($user, $allname)) {
3446 // If all the user name fields are not set in the user object, then notify the programmer that it needs to be fixed.
3447 debugging('You need to update your sql to include additional name fields in the user object.', DEBUG_DEVELOPER);
3448 // Message has been sent, no point in sending the message multiple times.
3449 break;
3454 if (!$override) {
3455 if (!empty($CFG->forcefirstname)) {
3456 $user->firstname = $CFG->forcefirstname;
3458 if (!empty($CFG->forcelastname)) {
3459 $user->lastname = $CFG->forcelastname;
3463 if (!empty($SESSION->fullnamedisplay)) {
3464 $CFG->fullnamedisplay = $SESSION->fullnamedisplay;
3467 $template = null;
3468 // If the fullnamedisplay setting is available, set the template to that.
3469 if (isset($CFG->fullnamedisplay)) {
3470 $template = $CFG->fullnamedisplay;
3472 // If the template is empty, or set to language, return the language string.
3473 if ((empty($template) || $template == 'language') && !$override) {
3474 return get_string('fullnamedisplay', null, $user);
3477 // Check to see if we are displaying according to the alternative full name format.
3478 if ($override) {
3479 if (empty($CFG->alternativefullnameformat) || $CFG->alternativefullnameformat == 'language') {
3480 // Default to show just the user names according to the fullnamedisplay string.
3481 return get_string('fullnamedisplay', null, $user);
3482 } else {
3483 // If the override is true, then change the template to use the complete name.
3484 $template = $CFG->alternativefullnameformat;
3488 $requirednames = array();
3489 // With each name, see if it is in the display name template, and add it to the required names array if it is.
3490 foreach ($allnames as $allname) {
3491 if (strpos($template, $allname) !== false) {
3492 $requirednames[] = $allname;
3496 $displayname = $template;
3497 // Switch in the actual data into the template.
3498 foreach ($requirednames as $altname) {
3499 if (isset($user->$altname)) {
3500 // Using empty() on the below if statement causes breakages.
3501 if ((string)$user->$altname == '') {
3502 $displayname = str_replace($altname, 'EMPTY', $displayname);
3503 } else {
3504 $displayname = str_replace($altname, $user->$altname, $displayname);
3506 } else {
3507 $displayname = str_replace($altname, 'EMPTY', $displayname);
3510 // Tidy up any misc. characters (Not perfect, but gets most characters).
3511 // Don't remove the "u" at the end of the first expression unless you want garbled characters when combining hiragana or
3512 // katakana and parenthesis.
3513 $patterns = array();
3514 // This regular expression replacement is to fix problems such as 'James () Kirk' Where 'Tiberius' (middlename) has not been
3515 // filled in by a user.
3516 // The special characters are Japanese brackets that are common enough to make allowances for them (not covered by :punct:).
3517 $patterns[] = '/[[:punct:]「」]*EMPTY[[:punct:]「」]*/u';
3518 // This regular expression is to remove any double spaces in the display name.
3519 $patterns[] = '/\s{2,}/u';
3520 foreach ($patterns as $pattern) {
3521 $displayname = preg_replace($pattern, ' ', $displayname);
3524 // Trimming $displayname will help the next check to ensure that we don't have a display name with spaces.
3525 $displayname = trim($displayname);
3526 if (empty($displayname)) {
3527 // Going with just the first name if no alternate fields are filled out. May be changed later depending on what
3528 // people in general feel is a good setting to fall back on.
3529 $displayname = $user->firstname;
3531 return $displayname;
3535 * A centralised location for the all name fields. Returns an array / sql string snippet.
3537 * @param bool $returnsql True for an sql select field snippet.
3538 * @param string $tableprefix table query prefix to use in front of each field.
3539 * @param string $prefix prefix added to the name fields e.g. authorfirstname.
3540 * @param string $fieldprefix sql field prefix e.g. id AS userid.
3541 * @param bool $order moves firstname and lastname to the top of the array / start of the string.
3542 * @return array|string All name fields.
3544 function get_all_user_name_fields($returnsql = false, $tableprefix = null, $prefix = null, $fieldprefix = null, $order = false) {
3545 // This array is provided in this order because when called by fullname() (above) if firstname is before
3546 // firstnamephonetic str_replace() will change the wrong placeholder.
3547 $alternatenames = array('firstnamephonetic' => 'firstnamephonetic',
3548 'lastnamephonetic' => 'lastnamephonetic',
3549 'middlename' => 'middlename',
3550 'alternatename' => 'alternatename',
3551 'firstname' => 'firstname',
3552 'lastname' => 'lastname');
3554 // Let's add a prefix to the array of user name fields if provided.
3555 if ($prefix) {
3556 foreach ($alternatenames as $key => $altname) {
3557 $alternatenames[$key] = $prefix . $altname;
3561 // If we want the end result to have firstname and lastname at the front / top of the result.
3562 if ($order) {
3563 // Move the last two elements (firstname, lastname) off the array and put them at the top.
3564 for ($i = 0; $i < 2; $i++) {
3565 // Get the last element.
3566 $lastelement = end($alternatenames);
3567 // Remove it from the array.
3568 unset($alternatenames[$lastelement]);
3569 // Put the element back on the top of the array.
3570 $alternatenames = array_merge(array($lastelement => $lastelement), $alternatenames);
3574 // Create an sql field snippet if requested.
3575 if ($returnsql) {
3576 if ($tableprefix) {
3577 if ($fieldprefix) {
3578 foreach ($alternatenames as $key => $altname) {
3579 $alternatenames[$key] = $tableprefix . '.' . $altname . ' AS ' . $fieldprefix . $altname;
3581 } else {
3582 foreach ($alternatenames as $key => $altname) {
3583 $alternatenames[$key] = $tableprefix . '.' . $altname;
3587 $alternatenames = implode(',', $alternatenames);
3589 return $alternatenames;
3593 * Reduces lines of duplicated code for getting user name fields.
3595 * See also {@link user_picture::unalias()}
3597 * @param object $addtoobject Object to add user name fields to.
3598 * @param object $secondobject Object that contains user name field information.
3599 * @param string $prefix prefix to be added to all fields (including $additionalfields) e.g. authorfirstname.
3600 * @param array $additionalfields Additional fields to be matched with data in the second object.
3601 * The key can be set to the user table field name.
3602 * @return object User name fields.
3604 function username_load_fields_from_object($addtoobject, $secondobject, $prefix = null, $additionalfields = null) {
3605 $fields = get_all_user_name_fields(false, null, $prefix);
3606 if ($additionalfields) {
3607 // Additional fields can specify their own 'alias' such as 'id' => 'userid'. This checks to see if
3608 // the key is a number and then sets the key to the array value.
3609 foreach ($additionalfields as $key => $value) {
3610 if (is_numeric($key)) {
3611 $additionalfields[$value] = $prefix . $value;
3612 unset($additionalfields[$key]);
3613 } else {
3614 $additionalfields[$key] = $prefix . $value;
3617 $fields = array_merge($fields, $additionalfields);
3619 foreach ($fields as $key => $field) {
3620 // Important that we have all of the user name fields present in the object that we are sending back.
3621 $addtoobject->$key = '';
3622 if (isset($secondobject->$field)) {
3623 $addtoobject->$key = $secondobject->$field;
3626 return $addtoobject;
3630 * Returns an array of values in order of occurance in a provided string.
3631 * The key in the result is the character postion in the string.
3633 * @param array $values Values to be found in the string format
3634 * @param string $stringformat The string which may contain values being searched for.
3635 * @return array An array of values in order according to placement in the string format.
3637 function order_in_string($values, $stringformat) {
3638 $valuearray = array();
3639 foreach ($values as $value) {
3640 $pattern = "/$value\b/";
3641 // Using preg_match as strpos() may match values that are similar e.g. firstname and firstnamephonetic.
3642 if (preg_match($pattern, $stringformat)) {
3643 $replacement = "thing";
3644 // Replace the value with something more unique to ensure we get the right position when using strpos().
3645 $newformat = preg_replace($pattern, $replacement, $stringformat);
3646 $position = strpos($newformat, $replacement);
3647 $valuearray[$position] = $value;
3650 ksort($valuearray);
3651 return $valuearray;
3655 * Checks if current user is shown any extra fields when listing users.
3657 * @param object $context Context
3658 * @param array $already Array of fields that we're going to show anyway
3659 * so don't bother listing them
3660 * @return array Array of field names from user table, not including anything
3661 * listed in $already
3663 function get_extra_user_fields($context, $already = array()) {
3664 global $CFG;
3666 // Only users with permission get the extra fields.
3667 if (!has_capability('moodle/site:viewuseridentity', $context)) {
3668 return array();
3671 // Split showuseridentity on comma (filter needed in case the showuseridentity is empty).
3672 $extra = array_filter(explode(',', $CFG->showuseridentity));
3674 foreach ($extra as $key => $field) {
3675 if (in_array($field, $already)) {
3676 unset($extra[$key]);
3680 // If the identity fields are also among hidden fields, make sure the user can see them.
3681 $hiddenfields = array_filter(explode(',', $CFG->hiddenuserfields));
3682 $hiddenidentifiers = array_intersect($extra, $hiddenfields);
3684 if ($hiddenidentifiers) {
3685 if ($context->get_course_context(false)) {
3686 // We are somewhere inside a course.
3687 $canviewhiddenuserfields = has_capability('moodle/course:viewhiddenuserfields', $context);
3689 } else {
3690 // We are not inside a course.
3691 $canviewhiddenuserfields = has_capability('moodle/user:viewhiddendetails', $context);
3694 if (!$canviewhiddenuserfields) {
3695 // Remove hidden identifiers from the list.
3696 $extra = array_diff($extra, $hiddenidentifiers);
3700 // Re-index the entries.
3701 $extra = array_values($extra);
3703 return $extra;
3707 * If the current user is to be shown extra user fields when listing or
3708 * selecting users, returns a string suitable for including in an SQL select
3709 * clause to retrieve those fields.
3711 * @param context $context Context
3712 * @param string $alias Alias of user table, e.g. 'u' (default none)
3713 * @param string $prefix Prefix for field names using AS, e.g. 'u_' (default none)
3714 * @param array $already Array of fields that we're going to include anyway so don't list them (default none)
3715 * @return string Partial SQL select clause, beginning with comma, for example ',u.idnumber,u.department' unless it is blank
3717 function get_extra_user_fields_sql($context, $alias='', $prefix='', $already = array()) {
3718 $fields = get_extra_user_fields($context, $already);
3719 $result = '';
3720 // Add punctuation for alias.
3721 if ($alias !== '') {
3722 $alias .= '.';
3724 foreach ($fields as $field) {
3725 $result .= ', ' . $alias . $field;
3726 if ($prefix) {
3727 $result .= ' AS ' . $prefix . $field;
3730 return $result;
3734 * Returns the display name of a field in the user table. Works for most fields that are commonly displayed to users.
3735 * @param string $field Field name, e.g. 'phone1'
3736 * @return string Text description taken from language file, e.g. 'Phone number'
3738 function get_user_field_name($field) {
3739 // Some fields have language strings which are not the same as field name.
3740 switch ($field) {
3741 case 'url' : {
3742 return get_string('webpage');
3744 case 'icq' : {
3745 return get_string('icqnumber');
3747 case 'skype' : {
3748 return get_string('skypeid');
3750 case 'aim' : {
3751 return get_string('aimid');
3753 case 'yahoo' : {
3754 return get_string('yahooid');
3756 case 'msn' : {
3757 return get_string('msnid');
3759 case 'picture' : {
3760 return get_string('pictureofuser');
3763 // Otherwise just use the same lang string.
3764 return get_string($field);
3768 * Returns whether a given authentication plugin exists.
3770 * @param string $auth Form of authentication to check for. Defaults to the global setting in {@link $CFG}.
3771 * @return boolean Whether the plugin is available.
3773 function exists_auth_plugin($auth) {
3774 global $CFG;
3776 if (file_exists("{$CFG->dirroot}/auth/$auth/auth.php")) {
3777 return is_readable("{$CFG->dirroot}/auth/$auth/auth.php");
3779 return false;
3783 * Checks if a given plugin is in the list of enabled authentication plugins.
3785 * @param string $auth Authentication plugin.
3786 * @return boolean Whether the plugin is enabled.
3788 function is_enabled_auth($auth) {
3789 if (empty($auth)) {
3790 return false;
3793 $enabled = get_enabled_auth_plugins();
3795 return in_array($auth, $enabled);
3799 * Returns an authentication plugin instance.
3801 * @param string $auth name of authentication plugin
3802 * @return auth_plugin_base An instance of the required authentication plugin.
3804 function get_auth_plugin($auth) {
3805 global $CFG;
3807 // Check the plugin exists first.
3808 if (! exists_auth_plugin($auth)) {
3809 print_error('authpluginnotfound', 'debug', '', $auth);
3812 // Return auth plugin instance.
3813 require_once("{$CFG->dirroot}/auth/$auth/auth.php");
3814 $class = "auth_plugin_$auth";
3815 return new $class;
3819 * Returns array of active auth plugins.
3821 * @param bool $fix fix $CFG->auth if needed
3822 * @return array
3824 function get_enabled_auth_plugins($fix=false) {
3825 global $CFG;
3827 $default = array('manual', 'nologin');
3829 if (empty($CFG->auth)) {
3830 $auths = array();
3831 } else {
3832 $auths = explode(',', $CFG->auth);
3835 if ($fix) {
3836 $auths = array_unique($auths);
3837 foreach ($auths as $k => $authname) {
3838 if (!exists_auth_plugin($authname) or in_array($authname, $default)) {
3839 unset($auths[$k]);
3842 $newconfig = implode(',', $auths);
3843 if (!isset($CFG->auth) or $newconfig != $CFG->auth) {
3844 set_config('auth', $newconfig);
3848 return (array_merge($default, $auths));
3852 * Returns true if an internal authentication method is being used.
3853 * if method not specified then, global default is assumed
3855 * @param string $auth Form of authentication required
3856 * @return bool
3858 function is_internal_auth($auth) {
3859 // Throws error if bad $auth.
3860 $authplugin = get_auth_plugin($auth);
3861 return $authplugin->is_internal();
3865 * Returns true if the user is a 'restored' one.
3867 * Used in the login process to inform the user and allow him/her to reset the password
3869 * @param string $username username to be checked
3870 * @return bool
3872 function is_restored_user($username) {
3873 global $CFG, $DB;
3875 return $DB->record_exists('user', array('username' => $username, 'mnethostid' => $CFG->mnet_localhost_id, 'password' => 'restored'));
3879 * Returns an array of user fields
3881 * @return array User field/column names
3883 function get_user_fieldnames() {
3884 global $DB;
3886 $fieldarray = $DB->get_columns('user');
3887 unset($fieldarray['id']);
3888 $fieldarray = array_keys($fieldarray);
3890 return $fieldarray;
3894 * Creates a bare-bones user record
3896 * @todo Outline auth types and provide code example
3898 * @param string $username New user's username to add to record
3899 * @param string $password New user's password to add to record
3900 * @param string $auth Form of authentication required
3901 * @return stdClass A complete user object
3903 function create_user_record($username, $password, $auth = 'manual') {
3904 global $CFG, $DB;
3905 require_once($CFG->dirroot.'/user/profile/lib.php');
3906 require_once($CFG->dirroot.'/user/lib.php');
3908 // Just in case check text case.
3909 $username = trim(core_text::strtolower($username));
3911 $authplugin = get_auth_plugin($auth);
3912 $customfields = $authplugin->get_custom_user_profile_fields();
3913 $newuser = new stdClass();
3914 if ($newinfo = $authplugin->get_userinfo($username)) {
3915 $newinfo = truncate_userinfo($newinfo);
3916 foreach ($newinfo as $key => $value) {
3917 if (in_array($key, $authplugin->userfields) || (in_array($key, $customfields))) {
3918 $newuser->$key = $value;
3923 if (!empty($newuser->email)) {
3924 if (email_is_not_allowed($newuser->email)) {
3925 unset($newuser->email);
3929 if (!isset($newuser->city)) {
3930 $newuser->city = '';
3933 $newuser->auth = $auth;
3934 $newuser->username = $username;
3936 // Fix for MDL-8480
3937 // user CFG lang for user if $newuser->lang is empty
3938 // or $user->lang is not an installed language.
3939 if (empty($newuser->lang) || !get_string_manager()->translation_exists($newuser->lang)) {
3940 $newuser->lang = $CFG->lang;
3942 $newuser->confirmed = 1;
3943 $newuser->lastip = getremoteaddr();
3944 $newuser->timecreated = time();
3945 $newuser->timemodified = $newuser->timecreated;
3946 $newuser->mnethostid = $CFG->mnet_localhost_id;
3948 $newuser->id = user_create_user($newuser, false, false);
3950 // Save user profile data.
3951 profile_save_data($newuser);
3953 $user = get_complete_user_data('id', $newuser->id);
3954 if (!empty($CFG->{'auth_'.$newuser->auth.'_forcechangepassword'})) {
3955 set_user_preference('auth_forcepasswordchange', 1, $user);
3957 // Set the password.
3958 update_internal_user_password($user, $password);
3960 // Trigger event.
3961 \core\event\user_created::create_from_userid($newuser->id)->trigger();
3963 return $user;
3967 * Will update a local user record from an external source (MNET users can not be updated using this method!).
3969 * @param string $username user's username to update the record
3970 * @return stdClass A complete user object
3972 function update_user_record($username) {
3973 global $DB, $CFG;
3974 // Just in case check text case.
3975 $username = trim(core_text::strtolower($username));
3977 $oldinfo = $DB->get_record('user', array('username' => $username, 'mnethostid' => $CFG->mnet_localhost_id), '*', MUST_EXIST);
3978 return update_user_record_by_id($oldinfo->id);
3982 * Will update a local user record from an external source (MNET users can not be updated using this method!).
3984 * @param int $id user id
3985 * @return stdClass A complete user object
3987 function update_user_record_by_id($id) {
3988 global $DB, $CFG;
3989 require_once($CFG->dirroot."/user/profile/lib.php");
3990 require_once($CFG->dirroot.'/user/lib.php');
3992 $params = array('mnethostid' => $CFG->mnet_localhost_id, 'id' => $id, 'deleted' => 0);
3993 $oldinfo = $DB->get_record('user', $params, '*', MUST_EXIST);
3995 $newuser = array();
3996 $userauth = get_auth_plugin($oldinfo->auth);
3998 if ($newinfo = $userauth->get_userinfo($oldinfo->username)) {
3999 $newinfo = truncate_userinfo($newinfo);
4000 $customfields = $userauth->get_custom_user_profile_fields();
4002 foreach ($newinfo as $key => $value) {
4003 $iscustom = in_array($key, $customfields);
4004 if (!$iscustom) {
4005 $key = strtolower($key);
4007 if ((!property_exists($oldinfo, $key) && !$iscustom) or $key === 'username' or $key === 'id'
4008 or $key === 'auth' or $key === 'mnethostid' or $key === 'deleted') {
4009 // Unknown or must not be changed.
4010 continue;
4012 if (empty($userauth->config->{'field_updatelocal_' . $key}) || empty($userauth->config->{'field_lock_' . $key})) {
4013 continue;
4015 $confval = $userauth->config->{'field_updatelocal_' . $key};
4016 $lockval = $userauth->config->{'field_lock_' . $key};
4017 if ($confval === 'onlogin') {
4018 // MDL-4207 Don't overwrite modified user profile values with
4019 // empty LDAP values when 'unlocked if empty' is set. The purpose
4020 // of the setting 'unlocked if empty' is to allow the user to fill
4021 // in a value for the selected field _if LDAP is giving
4022 // nothing_ for this field. Thus it makes sense to let this value
4023 // stand in until LDAP is giving a value for this field.
4024 if (!(empty($value) && $lockval === 'unlockedifempty')) {
4025 if ($iscustom || (in_array($key, $userauth->userfields) &&
4026 ((string)$oldinfo->$key !== (string)$value))) {
4027 $newuser[$key] = (string)$value;
4032 if ($newuser) {
4033 $newuser['id'] = $oldinfo->id;
4034 $newuser['timemodified'] = time();
4035 user_update_user((object) $newuser, false, false);
4037 // Save user profile data.
4038 profile_save_data((object) $newuser);
4040 // Trigger event.
4041 \core\event\user_updated::create_from_userid($newuser['id'])->trigger();
4045 return get_complete_user_data('id', $oldinfo->id);
4049 * Will truncate userinfo as it comes from auth_get_userinfo (from external auth) which may have large fields.
4051 * @param array $info Array of user properties to truncate if needed
4052 * @return array The now truncated information that was passed in
4054 function truncate_userinfo(array $info) {
4055 // Define the limits.
4056 $limit = array(
4057 'username' => 100,
4058 'idnumber' => 255,
4059 'firstname' => 100,
4060 'lastname' => 100,
4061 'email' => 100,
4062 'icq' => 15,
4063 'phone1' => 20,
4064 'phone2' => 20,
4065 'institution' => 255,
4066 'department' => 255,
4067 'address' => 255,
4068 'city' => 120,
4069 'country' => 2,
4070 'url' => 255,
4073 // Apply where needed.
4074 foreach (array_keys($info) as $key) {
4075 if (!empty($limit[$key])) {
4076 $info[$key] = trim(core_text::substr($info[$key], 0, $limit[$key]));
4080 return $info;
4084 * Marks user deleted in internal user database and notifies the auth plugin.
4085 * Also unenrols user from all roles and does other cleanup.
4087 * Any plugin that needs to purge user data should register the 'user_deleted' event.
4089 * @param stdClass $user full user object before delete
4090 * @return boolean success
4091 * @throws coding_exception if invalid $user parameter detected
4093 function delete_user(stdClass $user) {
4094 global $CFG, $DB, $SESSION;
4095 require_once($CFG->libdir.'/grouplib.php');
4096 require_once($CFG->libdir.'/gradelib.php');
4097 require_once($CFG->dirroot.'/message/lib.php');
4098 require_once($CFG->dirroot.'/user/lib.php');
4100 // Make sure nobody sends bogus record type as parameter.
4101 if (!property_exists($user, 'id') or !property_exists($user, 'username')) {
4102 throw new coding_exception('Invalid $user parameter in delete_user() detected');
4105 // Better not trust the parameter and fetch the latest info this will be very expensive anyway.
4106 if (!$user = $DB->get_record('user', array('id' => $user->id))) {
4107 debugging('Attempt to delete unknown user account.');
4108 return false;
4111 // There must be always exactly one guest record, originally the guest account was identified by username only,
4112 // now we use $CFG->siteguest for performance reasons.
4113 if ($user->username === 'guest' or isguestuser($user)) {
4114 debugging('Guest user account can not be deleted.');
4115 return false;
4118 // Admin can be theoretically from different auth plugin, but we want to prevent deletion of internal accoutns only,
4119 // if anything goes wrong ppl may force somebody to be admin via config.php setting $CFG->siteadmins.
4120 if ($user->auth === 'manual' and is_siteadmin($user)) {
4121 debugging('Local administrator accounts can not be deleted.');
4122 return false;
4125 // Allow plugins to use this user object before we completely delete it.
4126 if ($pluginsfunction = get_plugins_with_function('pre_user_delete')) {
4127 foreach ($pluginsfunction as $plugintype => $plugins) {
4128 foreach ($plugins as $pluginfunction) {
4129 $pluginfunction($user);
4134 // Keep user record before updating it, as we have to pass this to user_deleted event.
4135 $olduser = clone $user;
4137 // Keep a copy of user context, we need it for event.
4138 $usercontext = context_user::instance($user->id);
4140 // Delete all grades - backup is kept in grade_grades_history table.
4141 grade_user_delete($user->id);
4143 // TODO: remove from cohorts using standard API here.
4145 // Remove user tags.
4146 core_tag_tag::remove_all_item_tags('core', 'user', $user->id);
4148 // Unconditionally unenrol from all courses.
4149 enrol_user_delete($user);
4151 // Unenrol from all roles in all contexts.
4152 // This might be slow but it is really needed - modules might do some extra cleanup!
4153 role_unassign_all(array('userid' => $user->id));
4155 // Now do a brute force cleanup.
4157 // Remove from all cohorts.
4158 $DB->delete_records('cohort_members', array('userid' => $user->id));
4160 // Remove from all groups.
4161 $DB->delete_records('groups_members', array('userid' => $user->id));
4163 // Brute force unenrol from all courses.
4164 $DB->delete_records('user_enrolments', array('userid' => $user->id));
4166 // Purge user preferences.
4167 $DB->delete_records('user_preferences', array('userid' => $user->id));
4169 // Purge user extra profile info.
4170 $DB->delete_records('user_info_data', array('userid' => $user->id));
4172 // Purge log of previous password hashes.
4173 $DB->delete_records('user_password_history', array('userid' => $user->id));
4175 // Last course access not necessary either.
4176 $DB->delete_records('user_lastaccess', array('userid' => $user->id));
4177 // Remove all user tokens.
4178 $DB->delete_records('external_tokens', array('userid' => $user->id));
4180 // Unauthorise the user for all services.
4181 $DB->delete_records('external_services_users', array('userid' => $user->id));
4183 // Remove users private keys.
4184 $DB->delete_records('user_private_key', array('userid' => $user->id));
4186 // Remove users customised pages.
4187 $DB->delete_records('my_pages', array('userid' => $user->id, 'private' => 1));
4189 // Delete user from $SESSION->bulk_users.
4190 if (isset($SESSION->bulk_users[$user->id])) {
4191 unset($SESSION->bulk_users[$user->id]);
4194 // Force logout - may fail if file based sessions used, sorry.
4195 \core\session\manager::kill_user_sessions($user->id);
4197 // Generate username from email address, or a fake email.
4198 $delemail = !empty($user->email) ? $user->email : $user->username . '.' . $user->id . '@unknownemail.invalid';
4199 $delname = clean_param($delemail . "." . time(), PARAM_USERNAME);
4201 // Workaround for bulk deletes of users with the same email address.
4202 while ($DB->record_exists('user', array('username' => $delname))) { // No need to use mnethostid here.
4203 $delname++;
4206 // Mark internal user record as "deleted".
4207 $updateuser = new stdClass();
4208 $updateuser->id = $user->id;
4209 $updateuser->deleted = 1;
4210 $updateuser->username = $delname; // Remember it just in case.
4211 $updateuser->email = md5($user->username);// Store hash of username, useful importing/restoring users.
4212 $updateuser->idnumber = ''; // Clear this field to free it up.
4213 $updateuser->picture = 0;
4214 $updateuser->timemodified = time();
4216 // Don't trigger update event, as user is being deleted.
4217 user_update_user($updateuser, false, false);
4219 // Delete all content associated with the user context, but not the context itself.
4220 $usercontext->delete_content();
4222 // Any plugin that needs to cleanup should register this event.
4223 // Trigger event.
4224 $event = \core\event\user_deleted::create(
4225 array(
4226 'objectid' => $user->id,
4227 'relateduserid' => $user->id,
4228 'context' => $usercontext,
4229 'other' => array(
4230 'username' => $user->username,
4231 'email' => $user->email,
4232 'idnumber' => $user->idnumber,
4233 'picture' => $user->picture,
4234 'mnethostid' => $user->mnethostid
4238 $event->add_record_snapshot('user', $olduser);
4239 $event->trigger();
4241 // We will update the user's timemodified, as it will be passed to the user_deleted event, which
4242 // should know about this updated property persisted to the user's table.
4243 $user->timemodified = $updateuser->timemodified;
4245 // Notify auth plugin - do not block the delete even when plugin fails.
4246 $authplugin = get_auth_plugin($user->auth);
4247 $authplugin->user_delete($user);
4249 return true;
4253 * Retrieve the guest user object.
4255 * @return stdClass A {@link $USER} object
4257 function guest_user() {
4258 global $CFG, $DB;
4260 if ($newuser = $DB->get_record('user', array('id' => $CFG->siteguest))) {
4261 $newuser->confirmed = 1;
4262 $newuser->lang = $CFG->lang;
4263 $newuser->lastip = getremoteaddr();
4266 return $newuser;
4270 * Authenticates a user against the chosen authentication mechanism
4272 * Given a username and password, this function looks them
4273 * up using the currently selected authentication mechanism,
4274 * and if the authentication is successful, it returns a
4275 * valid $user object from the 'user' table.
4277 * Uses auth_ functions from the currently active auth module
4279 * After authenticate_user_login() returns success, you will need to
4280 * log that the user has logged in, and call complete_user_login() to set
4281 * the session up.
4283 * Note: this function works only with non-mnet accounts!
4285 * @param string $username User's username (or also email if $CFG->authloginviaemail enabled)
4286 * @param string $password User's password
4287 * @param bool $ignorelockout useful when guessing is prevented by other mechanism such as captcha or SSO
4288 * @param int $failurereason login failure reason, can be used in renderers (it may disclose if account exists)
4289 * @return stdClass|false A {@link $USER} object or false if error
4291 function authenticate_user_login($username, $password, $ignorelockout=false, &$failurereason=null) {
4292 global $CFG, $DB;
4293 require_once("$CFG->libdir/authlib.php");
4295 if ($user = get_complete_user_data('username', $username, $CFG->mnet_localhost_id)) {
4296 // we have found the user
4298 } else if (!empty($CFG->authloginviaemail)) {
4299 if ($email = clean_param($username, PARAM_EMAIL)) {
4300 $select = "mnethostid = :mnethostid AND LOWER(email) = LOWER(:email) AND deleted = 0";
4301 $params = array('mnethostid' => $CFG->mnet_localhost_id, 'email' => $email);
4302 $users = $DB->get_records_select('user', $select, $params, 'id', 'id', 0, 2);
4303 if (count($users) === 1) {
4304 // Use email for login only if unique.
4305 $user = reset($users);
4306 $user = get_complete_user_data('id', $user->id);
4307 $username = $user->username;
4309 unset($users);
4313 $authsenabled = get_enabled_auth_plugins();
4315 if ($user) {
4316 // Use manual if auth not set.
4317 $auth = empty($user->auth) ? 'manual' : $user->auth;
4319 if (in_array($user->auth, $authsenabled)) {
4320 $authplugin = get_auth_plugin($user->auth);
4321 $authplugin->pre_user_login_hook($user);
4324 if (!empty($user->suspended)) {
4325 $failurereason = AUTH_LOGIN_SUSPENDED;
4327 // Trigger login failed event.
4328 $event = \core\event\user_login_failed::create(array('userid' => $user->id,
4329 'other' => array('username' => $username, 'reason' => $failurereason)));
4330 $event->trigger();
4331 error_log('[client '.getremoteaddr()."] $CFG->wwwroot Suspended Login: $username ".$_SERVER['HTTP_USER_AGENT']);
4332 return false;
4334 if ($auth=='nologin' or !is_enabled_auth($auth)) {
4335 // Legacy way to suspend user.
4336 $failurereason = AUTH_LOGIN_SUSPENDED;
4338 // Trigger login failed event.
4339 $event = \core\event\user_login_failed::create(array('userid' => $user->id,
4340 'other' => array('username' => $username, 'reason' => $failurereason)));
4341 $event->trigger();
4342 error_log('[client '.getremoteaddr()."] $CFG->wwwroot Disabled Login: $username ".$_SERVER['HTTP_USER_AGENT']);
4343 return false;
4345 $auths = array($auth);
4347 } else {
4348 // Check if there's a deleted record (cheaply), this should not happen because we mangle usernames in delete_user().
4349 if ($DB->get_field('user', 'id', array('username' => $username, 'mnethostid' => $CFG->mnet_localhost_id, 'deleted' => 1))) {
4350 $failurereason = AUTH_LOGIN_NOUSER;
4352 // Trigger login failed event.
4353 $event = \core\event\user_login_failed::create(array('other' => array('username' => $username,
4354 'reason' => $failurereason)));
4355 $event->trigger();
4356 error_log('[client '.getremoteaddr()."] $CFG->wwwroot Deleted Login: $username ".$_SERVER['HTTP_USER_AGENT']);
4357 return false;
4360 // User does not exist.
4361 $auths = $authsenabled;
4362 $user = new stdClass();
4363 $user->id = 0;
4366 if ($ignorelockout) {
4367 // Some other mechanism protects against brute force password guessing, for example login form might include reCAPTCHA
4368 // or this function is called from a SSO script.
4369 } else if ($user->id) {
4370 // Verify login lockout after other ways that may prevent user login.
4371 if (login_is_lockedout($user)) {
4372 $failurereason = AUTH_LOGIN_LOCKOUT;
4374 // Trigger login failed event.
4375 $event = \core\event\user_login_failed::create(array('userid' => $user->id,
4376 'other' => array('username' => $username, 'reason' => $failurereason)));
4377 $event->trigger();
4379 error_log('[client '.getremoteaddr()."] $CFG->wwwroot Login lockout: $username ".$_SERVER['HTTP_USER_AGENT']);
4380 return false;
4382 } else {
4383 // We can not lockout non-existing accounts.
4386 foreach ($auths as $auth) {
4387 $authplugin = get_auth_plugin($auth);
4389 // On auth fail fall through to the next plugin.
4390 if (!$authplugin->user_login($username, $password)) {
4391 continue;
4394 // Successful authentication.
4395 if ($user->id) {
4396 // User already exists in database.
4397 if (empty($user->auth)) {
4398 // For some reason auth isn't set yet.
4399 $DB->set_field('user', 'auth', $auth, array('id' => $user->id));
4400 $user->auth = $auth;
4403 // If the existing hash is using an out-of-date algorithm (or the legacy md5 algorithm), then we should update to
4404 // the current hash algorithm while we have access to the user's password.
4405 update_internal_user_password($user, $password);
4407 if ($authplugin->is_synchronised_with_external()) {
4408 // Update user record from external DB.
4409 $user = update_user_record_by_id($user->id);
4411 } else {
4412 // The user is authenticated but user creation may be disabled.
4413 if (!empty($CFG->authpreventaccountcreation)) {
4414 $failurereason = AUTH_LOGIN_UNAUTHORISED;
4416 // Trigger login failed event.
4417 $event = \core\event\user_login_failed::create(array('other' => array('username' => $username,
4418 'reason' => $failurereason)));
4419 $event->trigger();
4421 error_log('[client '.getremoteaddr()."] $CFG->wwwroot Unknown user, can not create new accounts: $username ".
4422 $_SERVER['HTTP_USER_AGENT']);
4423 return false;
4424 } else {
4425 $user = create_user_record($username, $password, $auth);
4429 $authplugin->sync_roles($user);
4431 foreach ($authsenabled as $hau) {
4432 $hauth = get_auth_plugin($hau);
4433 $hauth->user_authenticated_hook($user, $username, $password);
4436 if (empty($user->id)) {
4437 $failurereason = AUTH_LOGIN_NOUSER;
4438 // Trigger login failed event.
4439 $event = \core\event\user_login_failed::create(array('other' => array('username' => $username,
4440 'reason' => $failurereason)));
4441 $event->trigger();
4442 return false;
4445 if (!empty($user->suspended)) {
4446 // Just in case some auth plugin suspended account.
4447 $failurereason = AUTH_LOGIN_SUSPENDED;
4448 // Trigger login failed event.
4449 $event = \core\event\user_login_failed::create(array('userid' => $user->id,
4450 'other' => array('username' => $username, 'reason' => $failurereason)));
4451 $event->trigger();
4452 error_log('[client '.getremoteaddr()."] $CFG->wwwroot Suspended Login: $username ".$_SERVER['HTTP_USER_AGENT']);
4453 return false;
4456 login_attempt_valid($user);
4457 $failurereason = AUTH_LOGIN_OK;
4458 return $user;
4461 // Failed if all the plugins have failed.
4462 if (debugging('', DEBUG_ALL)) {
4463 error_log('[client '.getremoteaddr()."] $CFG->wwwroot Failed Login: $username ".$_SERVER['HTTP_USER_AGENT']);
4466 if ($user->id) {
4467 login_attempt_failed($user);
4468 $failurereason = AUTH_LOGIN_FAILED;
4469 // Trigger login failed event.
4470 $event = \core\event\user_login_failed::create(array('userid' => $user->id,
4471 'other' => array('username' => $username, 'reason' => $failurereason)));
4472 $event->trigger();
4473 } else {
4474 $failurereason = AUTH_LOGIN_NOUSER;
4475 // Trigger login failed event.
4476 $event = \core\event\user_login_failed::create(array('other' => array('username' => $username,
4477 'reason' => $failurereason)));
4478 $event->trigger();
4481 return false;
4485 * Call to complete the user login process after authenticate_user_login()
4486 * has succeeded. It will setup the $USER variable and other required bits
4487 * and pieces.
4489 * NOTE:
4490 * - It will NOT log anything -- up to the caller to decide what to log.
4491 * - this function does not set any cookies any more!
4493 * @param stdClass $user
4494 * @return stdClass A {@link $USER} object - BC only, do not use
4496 function complete_user_login($user) {
4497 global $CFG, $DB, $USER, $SESSION;
4499 \core\session\manager::login_user($user);
4501 // Reload preferences from DB.
4502 unset($USER->preference);
4503 check_user_preferences_loaded($USER);
4505 // Update login times.
4506 update_user_login_times();
4508 // Extra session prefs init.
4509 set_login_session_preferences();
4511 // Trigger login event.
4512 $event = \core\event\user_loggedin::create(
4513 array(
4514 'userid' => $USER->id,
4515 'objectid' => $USER->id,
4516 'other' => array('username' => $USER->username),
4519 $event->trigger();
4521 // Queue migrating the messaging data, if we need to.
4522 if (!get_user_preferences('core_message_migrate_data', false, $USER->id)) {
4523 // Check if there are any legacy messages to migrate.
4524 if (\core_message\helper::legacy_messages_exist($USER->id)) {
4525 \core_message\task\migrate_message_data::queue_task($USER->id);
4526 } else {
4527 set_user_preference('core_message_migrate_data', true, $USER->id);
4531 if (isguestuser()) {
4532 // No need to continue when user is THE guest.
4533 return $USER;
4536 if (CLI_SCRIPT) {
4537 // We can redirect to password change URL only in browser.
4538 return $USER;
4541 // Select password change url.
4542 $userauth = get_auth_plugin($USER->auth);
4544 // Check whether the user should be changing password.
4545 if (get_user_preferences('auth_forcepasswordchange', false)) {
4546 if ($userauth->can_change_password()) {
4547 if ($changeurl = $userauth->change_password_url()) {
4548 redirect($changeurl);
4549 } else {
4550 require_once($CFG->dirroot . '/login/lib.php');
4551 $SESSION->wantsurl = core_login_get_return_url();
4552 redirect($CFG->wwwroot.'/login/change_password.php');
4554 } else {
4555 print_error('nopasswordchangeforced', 'auth');
4558 return $USER;
4562 * Check a password hash to see if it was hashed using the legacy hash algorithm (md5).
4564 * @param string $password String to check.
4565 * @return boolean True if the $password matches the format of an md5 sum.
4567 function password_is_legacy_hash($password) {
4568 return (bool) preg_match('/^[0-9a-f]{32}$/', $password);
4572 * Compare password against hash stored in user object to determine if it is valid.
4574 * If necessary it also updates the stored hash to the current format.
4576 * @param stdClass $user (Password property may be updated).
4577 * @param string $password Plain text password.
4578 * @return bool True if password is valid.
4580 function validate_internal_user_password($user, $password) {
4581 global $CFG;
4583 if ($user->password === AUTH_PASSWORD_NOT_CACHED) {
4584 // Internal password is not used at all, it can not validate.
4585 return false;
4588 // If hash isn't a legacy (md5) hash, validate using the library function.
4589 if (!password_is_legacy_hash($user->password)) {
4590 return password_verify($password, $user->password);
4593 // Otherwise we need to check for a legacy (md5) hash instead. If the hash
4594 // is valid we can then update it to the new algorithm.
4596 $sitesalt = isset($CFG->passwordsaltmain) ? $CFG->passwordsaltmain : '';
4597 $validated = false;
4599 if ($user->password === md5($password.$sitesalt)
4600 or $user->password === md5($password)
4601 or $user->password === md5(addslashes($password).$sitesalt)
4602 or $user->password === md5(addslashes($password))) {
4603 // Note: we are intentionally using the addslashes() here because we
4604 // need to accept old password hashes of passwords with magic quotes.
4605 $validated = true;
4607 } else {
4608 for ($i=1; $i<=20; $i++) { // 20 alternative salts should be enough, right?
4609 $alt = 'passwordsaltalt'.$i;
4610 if (!empty($CFG->$alt)) {
4611 if ($user->password === md5($password.$CFG->$alt) or $user->password === md5(addslashes($password).$CFG->$alt)) {
4612 $validated = true;
4613 break;
4619 if ($validated) {
4620 // If the password matches the existing md5 hash, update to the
4621 // current hash algorithm while we have access to the user's password.
4622 update_internal_user_password($user, $password);
4625 return $validated;
4629 * Calculate hash for a plain text password.
4631 * @param string $password Plain text password to be hashed.
4632 * @param bool $fasthash If true, use a low cost factor when generating the hash
4633 * This is much faster to generate but makes the hash
4634 * less secure. It is used when lots of hashes need to
4635 * be generated quickly.
4636 * @return string The hashed password.
4638 * @throws moodle_exception If a problem occurs while generating the hash.
4640 function hash_internal_user_password($password, $fasthash = false) {
4641 global $CFG;
4643 // Set the cost factor to 4 for fast hashing, otherwise use default cost.
4644 $options = ($fasthash) ? array('cost' => 4) : array();
4646 $generatedhash = password_hash($password, PASSWORD_DEFAULT, $options);
4648 if ($generatedhash === false || $generatedhash === null) {
4649 throw new moodle_exception('Failed to generate password hash.');
4652 return $generatedhash;
4656 * Update password hash in user object (if necessary).
4658 * The password is updated if:
4659 * 1. The password has changed (the hash of $user->password is different
4660 * to the hash of $password).
4661 * 2. The existing hash is using an out-of-date algorithm (or the legacy
4662 * md5 algorithm).
4664 * Updating the password will modify the $user object and the database
4665 * record to use the current hashing algorithm.
4666 * It will remove Web Services user tokens too.
4668 * @param stdClass $user User object (password property may be updated).
4669 * @param string $password Plain text password.
4670 * @param bool $fasthash If true, use a low cost factor when generating the hash
4671 * This is much faster to generate but makes the hash
4672 * less secure. It is used when lots of hashes need to
4673 * be generated quickly.
4674 * @return bool Always returns true.
4676 function update_internal_user_password($user, $password, $fasthash = false) {
4677 global $CFG, $DB;
4679 // Figure out what the hashed password should be.
4680 if (!isset($user->auth)) {
4681 debugging('User record in update_internal_user_password() must include field auth',
4682 DEBUG_DEVELOPER);
4683 $user->auth = $DB->get_field('user', 'auth', array('id' => $user->id));
4685 $authplugin = get_auth_plugin($user->auth);
4686 if ($authplugin->prevent_local_passwords()) {
4687 $hashedpassword = AUTH_PASSWORD_NOT_CACHED;
4688 } else {
4689 $hashedpassword = hash_internal_user_password($password, $fasthash);
4692 $algorithmchanged = false;
4694 if ($hashedpassword === AUTH_PASSWORD_NOT_CACHED) {
4695 // Password is not cached, update it if not set to AUTH_PASSWORD_NOT_CACHED.
4696 $passwordchanged = ($user->password !== $hashedpassword);
4698 } else if (isset($user->password)) {
4699 // If verification fails then it means the password has changed.
4700 $passwordchanged = !password_verify($password, $user->password);
4701 $algorithmchanged = password_needs_rehash($user->password, PASSWORD_DEFAULT);
4702 } else {
4703 // While creating new user, password in unset in $user object, to avoid
4704 // saving it with user_create()
4705 $passwordchanged = true;
4708 if ($passwordchanged || $algorithmchanged) {
4709 $DB->set_field('user', 'password', $hashedpassword, array('id' => $user->id));
4710 $user->password = $hashedpassword;
4712 // Trigger event.
4713 $user = $DB->get_record('user', array('id' => $user->id));
4714 \core\event\user_password_updated::create_from_user($user)->trigger();
4716 // Remove WS user tokens.
4717 if (!empty($CFG->passwordchangetokendeletion)) {
4718 require_once($CFG->dirroot.'/webservice/lib.php');
4719 webservice::delete_user_ws_tokens($user->id);
4723 return true;
4727 * Get a complete user record, which includes all the info in the user record.
4729 * Intended for setting as $USER session variable
4731 * @param string $field The user field to be checked for a given value.
4732 * @param string $value The value to match for $field.
4733 * @param int $mnethostid
4734 * @return mixed False, or A {@link $USER} object.
4736 function get_complete_user_data($field, $value, $mnethostid = null) {
4737 global $CFG, $DB;
4739 if (!$field || !$value) {
4740 return false;
4743 // Build the WHERE clause for an SQL query.
4744 $params = array('fieldval' => $value);
4745 $constraints = "$field = :fieldval AND deleted <> 1";
4747 // If we are loading user data based on anything other than id,
4748 // we must also restrict our search based on mnet host.
4749 if ($field != 'id') {
4750 if (empty($mnethostid)) {
4751 // If empty, we restrict to local users.
4752 $mnethostid = $CFG->mnet_localhost_id;
4755 if (!empty($mnethostid)) {
4756 $params['mnethostid'] = $mnethostid;
4757 $constraints .= " AND mnethostid = :mnethostid";
4760 // Get all the basic user data.
4761 if (! $user = $DB->get_record_select('user', $constraints, $params)) {
4762 return false;
4765 // Get various settings and preferences.
4767 // Preload preference cache.
4768 check_user_preferences_loaded($user);
4770 // Load course enrolment related stuff.
4771 $user->lastcourseaccess = array(); // During last session.
4772 $user->currentcourseaccess = array(); // During current session.
4773 if ($lastaccesses = $DB->get_records('user_lastaccess', array('userid' => $user->id))) {
4774 foreach ($lastaccesses as $lastaccess) {
4775 $user->lastcourseaccess[$lastaccess->courseid] = $lastaccess->timeaccess;
4779 $sql = "SELECT g.id, g.courseid
4780 FROM {groups} g, {groups_members} gm
4781 WHERE gm.groupid=g.id AND gm.userid=?";
4783 // This is a special hack to speedup calendar display.
4784 $user->groupmember = array();
4785 if (!isguestuser($user)) {
4786 if ($groups = $DB->get_records_sql($sql, array($user->id))) {
4787 foreach ($groups as $group) {
4788 if (!array_key_exists($group->courseid, $user->groupmember)) {
4789 $user->groupmember[$group->courseid] = array();
4791 $user->groupmember[$group->courseid][$group->id] = $group->id;
4796 // Add cohort theme.
4797 if (!empty($CFG->allowcohortthemes)) {
4798 require_once($CFG->dirroot . '/cohort/lib.php');
4799 if ($cohorttheme = cohort_get_user_cohort_theme($user->id)) {
4800 $user->cohorttheme = $cohorttheme;
4804 // Add the custom profile fields to the user record.
4805 $user->profile = array();
4806 if (!isguestuser($user)) {
4807 require_once($CFG->dirroot.'/user/profile/lib.php');
4808 profile_load_custom_fields($user);
4811 // Rewrite some variables if necessary.
4812 if (!empty($user->description)) {
4813 // No need to cart all of it around.
4814 $user->description = true;
4816 if (isguestuser($user)) {
4817 // Guest language always same as site.
4818 $user->lang = $CFG->lang;
4819 // Name always in current language.
4820 $user->firstname = get_string('guestuser');
4821 $user->lastname = ' ';
4824 return $user;
4828 * Validate a password against the configured password policy
4830 * @param string $password the password to be checked against the password policy
4831 * @param string $errmsg the error message to display when the password doesn't comply with the policy.
4832 * @return bool true if the password is valid according to the policy. false otherwise.
4834 function check_password_policy($password, &$errmsg) {
4835 global $CFG;
4837 if (!empty($CFG->passwordpolicy)) {
4838 $errmsg = '';
4839 if (core_text::strlen($password) < $CFG->minpasswordlength) {
4840 $errmsg .= '<div>'. get_string('errorminpasswordlength', 'auth', $CFG->minpasswordlength) .'</div>';
4842 if (preg_match_all('/[[:digit:]]/u', $password, $matches) < $CFG->minpassworddigits) {
4843 $errmsg .= '<div>'. get_string('errorminpassworddigits', 'auth', $CFG->minpassworddigits) .'</div>';
4845 if (preg_match_all('/[[:lower:]]/u', $password, $matches) < $CFG->minpasswordlower) {
4846 $errmsg .= '<div>'. get_string('errorminpasswordlower', 'auth', $CFG->minpasswordlower) .'</div>';
4848 if (preg_match_all('/[[:upper:]]/u', $password, $matches) < $CFG->minpasswordupper) {
4849 $errmsg .= '<div>'. get_string('errorminpasswordupper', 'auth', $CFG->minpasswordupper) .'</div>';
4851 if (preg_match_all('/[^[:upper:][:lower:][:digit:]]/u', $password, $matches) < $CFG->minpasswordnonalphanum) {
4852 $errmsg .= '<div>'. get_string('errorminpasswordnonalphanum', 'auth', $CFG->minpasswordnonalphanum) .'</div>';
4854 if (!check_consecutive_identical_characters($password, $CFG->maxconsecutiveidentchars)) {
4855 $errmsg .= '<div>'. get_string('errormaxconsecutiveidentchars', 'auth', $CFG->maxconsecutiveidentchars) .'</div>';
4859 // Fire any additional password policy functions from plugins.
4860 // Plugin functions should output an error message string or empty string for success.
4861 $pluginsfunction = get_plugins_with_function('check_password_policy');
4862 foreach ($pluginsfunction as $plugintype => $plugins) {
4863 foreach ($plugins as $pluginfunction) {
4864 $pluginerr = $pluginfunction($password);
4865 if ($pluginerr) {
4866 $errmsg .= '<div>'. $pluginerr .'</div>';
4871 if ($errmsg == '') {
4872 return true;
4873 } else {
4874 return false;
4880 * When logging in, this function is run to set certain preferences for the current SESSION.
4882 function set_login_session_preferences() {
4883 global $SESSION;
4885 $SESSION->justloggedin = true;
4887 unset($SESSION->lang);
4888 unset($SESSION->forcelang);
4889 unset($SESSION->load_navigation_admin);
4894 * Delete a course, including all related data from the database, and any associated files.
4896 * @param mixed $courseorid The id of the course or course object to delete.
4897 * @param bool $showfeedback Whether to display notifications of each action the function performs.
4898 * @return bool true if all the removals succeeded. false if there were any failures. If this
4899 * method returns false, some of the removals will probably have succeeded, and others
4900 * failed, but you have no way of knowing which.
4902 function delete_course($courseorid, $showfeedback = true) {
4903 global $DB;
4905 if (is_object($courseorid)) {
4906 $courseid = $courseorid->id;
4907 $course = $courseorid;
4908 } else {
4909 $courseid = $courseorid;
4910 if (!$course = $DB->get_record('course', array('id' => $courseid))) {
4911 return false;
4914 $context = context_course::instance($courseid);
4916 // Frontpage course can not be deleted!!
4917 if ($courseid == SITEID) {
4918 return false;
4921 // Allow plugins to use this course before we completely delete it.
4922 if ($pluginsfunction = get_plugins_with_function('pre_course_delete')) {
4923 foreach ($pluginsfunction as $plugintype => $plugins) {
4924 foreach ($plugins as $pluginfunction) {
4925 $pluginfunction($course);
4930 // Make the course completely empty.
4931 remove_course_contents($courseid, $showfeedback);
4933 // Delete the course and related context instance.
4934 context_helper::delete_instance(CONTEXT_COURSE, $courseid);
4936 $DB->delete_records("course", array("id" => $courseid));
4937 $DB->delete_records("course_format_options", array("courseid" => $courseid));
4939 // Reset all course related caches here.
4940 if (class_exists('format_base', false)) {
4941 format_base::reset_course_cache($courseid);
4944 // Trigger a course deleted event.
4945 $event = \core\event\course_deleted::create(array(
4946 'objectid' => $course->id,
4947 'context' => $context,
4948 'other' => array(
4949 'shortname' => $course->shortname,
4950 'fullname' => $course->fullname,
4951 'idnumber' => $course->idnumber
4954 $event->add_record_snapshot('course', $course);
4955 $event->trigger();
4957 return true;
4961 * Clear a course out completely, deleting all content but don't delete the course itself.
4963 * This function does not verify any permissions.
4965 * Please note this function also deletes all user enrolments,
4966 * enrolment instances and role assignments by default.
4968 * $options:
4969 * - 'keep_roles_and_enrolments' - false by default
4970 * - 'keep_groups_and_groupings' - false by default
4972 * @param int $courseid The id of the course that is being deleted
4973 * @param bool $showfeedback Whether to display notifications of each action the function performs.
4974 * @param array $options extra options
4975 * @return bool true if all the removals succeeded. false if there were any failures. If this
4976 * method returns false, some of the removals will probably have succeeded, and others
4977 * failed, but you have no way of knowing which.
4979 function remove_course_contents($courseid, $showfeedback = true, array $options = null) {
4980 global $CFG, $DB, $OUTPUT;
4982 require_once($CFG->libdir.'/badgeslib.php');
4983 require_once($CFG->libdir.'/completionlib.php');
4984 require_once($CFG->libdir.'/questionlib.php');
4985 require_once($CFG->libdir.'/gradelib.php');
4986 require_once($CFG->dirroot.'/group/lib.php');
4987 require_once($CFG->dirroot.'/comment/lib.php');
4988 require_once($CFG->dirroot.'/rating/lib.php');
4989 require_once($CFG->dirroot.'/notes/lib.php');
4991 // Handle course badges.
4992 badges_handle_course_deletion($courseid);
4994 // NOTE: these concatenated strings are suboptimal, but it is just extra info...
4995 $strdeleted = get_string('deleted').' - ';
4997 // Some crazy wishlist of stuff we should skip during purging of course content.
4998 $options = (array)$options;
5000 $course = $DB->get_record('course', array('id' => $courseid), '*', MUST_EXIST);
5001 $coursecontext = context_course::instance($courseid);
5002 $fs = get_file_storage();
5004 // Delete course completion information, this has to be done before grades and enrols.
5005 $cc = new completion_info($course);
5006 $cc->clear_criteria();
5007 if ($showfeedback) {
5008 echo $OUTPUT->notification($strdeleted.get_string('completion', 'completion'), 'notifysuccess');
5011 // Remove all data from gradebook - this needs to be done before course modules
5012 // because while deleting this information, the system may need to reference
5013 // the course modules that own the grades.
5014 remove_course_grades($courseid, $showfeedback);
5015 remove_grade_letters($coursecontext, $showfeedback);
5017 // Delete course blocks in any all child contexts,
5018 // they may depend on modules so delete them first.
5019 $childcontexts = $coursecontext->get_child_contexts(); // Returns all subcontexts since 2.2.
5020 foreach ($childcontexts as $childcontext) {
5021 blocks_delete_all_for_context($childcontext->id);
5023 unset($childcontexts);
5024 blocks_delete_all_for_context($coursecontext->id);
5025 if ($showfeedback) {
5026 echo $OUTPUT->notification($strdeleted.get_string('type_block_plural', 'plugin'), 'notifysuccess');
5029 // Get the list of all modules that are properly installed.
5030 $allmodules = $DB->get_records_menu('modules', array(), '', 'name, id');
5032 // Delete every instance of every module,
5033 // this has to be done before deleting of course level stuff.
5034 $locations = core_component::get_plugin_list('mod');
5035 foreach ($locations as $modname => $moddir) {
5036 if ($modname === 'NEWMODULE') {
5037 continue;
5039 if (array_key_exists($modname, $allmodules)) {
5040 $sql = "SELECT cm.*, m.id AS modinstance, m.name, '$modname' AS modname
5041 FROM {".$modname."} m
5042 LEFT JOIN {course_modules} cm ON cm.instance = m.id AND cm.module = :moduleid
5043 WHERE m.course = :courseid";
5044 $instances = $DB->get_records_sql($sql, array('courseid' => $course->id,
5045 'modulename' => $modname, 'moduleid' => $allmodules[$modname]));
5047 include_once("$moddir/lib.php"); // Shows php warning only if plugin defective.
5048 $moddelete = $modname .'_delete_instance'; // Delete everything connected to an instance.
5050 if ($instances) {
5051 foreach ($instances as $cm) {
5052 if ($cm->id) {
5053 // Delete activity context questions and question categories.
5054 question_delete_activity($cm, $showfeedback);
5055 // Notify the competency subsystem.
5056 \core_competency\api::hook_course_module_deleted($cm);
5058 if (function_exists($moddelete)) {
5059 // This purges all module data in related tables, extra user prefs, settings, etc.
5060 $moddelete($cm->modinstance);
5061 } else {
5062 // NOTE: we should not allow installation of modules with missing delete support!
5063 debugging("Defective module '$modname' detected when deleting course contents: missing function $moddelete()!");
5064 $DB->delete_records($modname, array('id' => $cm->modinstance));
5067 if ($cm->id) {
5068 // Delete cm and its context - orphaned contexts are purged in cron in case of any race condition.
5069 context_helper::delete_instance(CONTEXT_MODULE, $cm->id);
5070 $DB->delete_records('course_modules', array('id' => $cm->id));
5074 if ($instances and $showfeedback) {
5075 echo $OUTPUT->notification($strdeleted.get_string('pluginname', $modname), 'notifysuccess');
5077 } else {
5078 // Ooops, this module is not properly installed, force-delete it in the next block.
5082 // We have tried to delete everything the nice way - now let's force-delete any remaining module data.
5084 // Delete completion defaults.
5085 $DB->delete_records("course_completion_defaults", array("course" => $courseid));
5087 // Remove all data from availability and completion tables that is associated
5088 // with course-modules belonging to this course. Note this is done even if the
5089 // features are not enabled now, in case they were enabled previously.
5090 $DB->delete_records_select('course_modules_completion',
5091 'coursemoduleid IN (SELECT id from {course_modules} WHERE course=?)',
5092 array($courseid));
5094 // Remove course-module data that has not been removed in modules' _delete_instance callbacks.
5095 $cms = $DB->get_records('course_modules', array('course' => $course->id));
5096 $allmodulesbyid = array_flip($allmodules);
5097 foreach ($cms as $cm) {
5098 if (array_key_exists($cm->module, $allmodulesbyid)) {
5099 try {
5100 $DB->delete_records($allmodulesbyid[$cm->module], array('id' => $cm->instance));
5101 } catch (Exception $e) {
5102 // Ignore weird or missing table problems.
5105 context_helper::delete_instance(CONTEXT_MODULE, $cm->id);
5106 $DB->delete_records('course_modules', array('id' => $cm->id));
5109 if ($showfeedback) {
5110 echo $OUTPUT->notification($strdeleted.get_string('type_mod_plural', 'plugin'), 'notifysuccess');
5113 // Delete questions and question categories.
5114 question_delete_course($course, $showfeedback);
5115 if ($showfeedback) {
5116 echo $OUTPUT->notification($strdeleted.get_string('questions', 'question'), 'notifysuccess');
5119 // Make sure there are no subcontexts left - all valid blocks and modules should be already gone.
5120 $childcontexts = $coursecontext->get_child_contexts(); // Returns all subcontexts since 2.2.
5121 foreach ($childcontexts as $childcontext) {
5122 $childcontext->delete();
5124 unset($childcontexts);
5126 // Remove all roles and enrolments by default.
5127 if (empty($options['keep_roles_and_enrolments'])) {
5128 // This hack is used in restore when deleting contents of existing course.
5129 role_unassign_all(array('contextid' => $coursecontext->id, 'component' => ''), true);
5130 enrol_course_delete($course);
5131 if ($showfeedback) {
5132 echo $OUTPUT->notification($strdeleted.get_string('type_enrol_plural', 'plugin'), 'notifysuccess');
5136 // Delete any groups, removing members and grouping/course links first.
5137 if (empty($options['keep_groups_and_groupings'])) {
5138 groups_delete_groupings($course->id, $showfeedback);
5139 groups_delete_groups($course->id, $showfeedback);
5142 // Filters be gone!
5143 filter_delete_all_for_context($coursecontext->id);
5145 // Notes, you shall not pass!
5146 note_delete_all($course->id);
5148 // Die comments!
5149 comment::delete_comments($coursecontext->id);
5151 // Ratings are history too.
5152 $delopt = new stdclass();
5153 $delopt->contextid = $coursecontext->id;
5154 $rm = new rating_manager();
5155 $rm->delete_ratings($delopt);
5157 // Delete course tags.
5158 core_tag_tag::remove_all_item_tags('core', 'course', $course->id);
5160 // Notify the competency subsystem.
5161 \core_competency\api::hook_course_deleted($course);
5163 // Delete calendar events.
5164 $DB->delete_records('event', array('courseid' => $course->id));
5165 $fs->delete_area_files($coursecontext->id, 'calendar');
5167 // Delete all related records in other core tables that may have a courseid
5168 // This array stores the tables that need to be cleared, as
5169 // table_name => column_name that contains the course id.
5170 $tablestoclear = array(
5171 'backup_courses' => 'courseid', // Scheduled backup stuff.
5172 'user_lastaccess' => 'courseid', // User access info.
5174 foreach ($tablestoclear as $table => $col) {
5175 $DB->delete_records($table, array($col => $course->id));
5178 // Delete all course backup files.
5179 $fs->delete_area_files($coursecontext->id, 'backup');
5181 // Cleanup course record - remove links to deleted stuff.
5182 $oldcourse = new stdClass();
5183 $oldcourse->id = $course->id;
5184 $oldcourse->summary = '';
5185 $oldcourse->cacherev = 0;
5186 $oldcourse->legacyfiles = 0;
5187 if (!empty($options['keep_groups_and_groupings'])) {
5188 $oldcourse->defaultgroupingid = 0;
5190 $DB->update_record('course', $oldcourse);
5192 // Delete course sections.
5193 $DB->delete_records('course_sections', array('course' => $course->id));
5195 // Delete legacy, section and any other course files.
5196 $fs->delete_area_files($coursecontext->id, 'course'); // Files from summary and section.
5198 // Delete all remaining stuff linked to context such as files, comments, ratings, etc.
5199 if (empty($options['keep_roles_and_enrolments']) and empty($options['keep_groups_and_groupings'])) {
5200 // Easy, do not delete the context itself...
5201 $coursecontext->delete_content();
5202 } else {
5203 // Hack alert!!!!
5204 // We can not drop all context stuff because it would bork enrolments and roles,
5205 // there might be also files used by enrol plugins...
5208 // Delete legacy files - just in case some files are still left there after conversion to new file api,
5209 // also some non-standard unsupported plugins may try to store something there.
5210 fulldelete($CFG->dataroot.'/'.$course->id);
5212 // Delete from cache to reduce the cache size especially makes sense in case of bulk course deletion.
5213 $cachemodinfo = cache::make('core', 'coursemodinfo');
5214 $cachemodinfo->delete($courseid);
5216 // Trigger a course content deleted event.
5217 $event = \core\event\course_content_deleted::create(array(
5218 'objectid' => $course->id,
5219 'context' => $coursecontext,
5220 'other' => array('shortname' => $course->shortname,
5221 'fullname' => $course->fullname,
5222 'options' => $options) // Passing this for legacy reasons.
5224 $event->add_record_snapshot('course', $course);
5225 $event->trigger();
5227 return true;
5231 * Change dates in module - used from course reset.
5233 * @param string $modname forum, assignment, etc
5234 * @param array $fields array of date fields from mod table
5235 * @param int $timeshift time difference
5236 * @param int $courseid
5237 * @param int $modid (Optional) passed if specific mod instance in course needs to be updated.
5238 * @return bool success
5240 function shift_course_mod_dates($modname, $fields, $timeshift, $courseid, $modid = 0) {
5241 global $CFG, $DB;
5242 include_once($CFG->dirroot.'/mod/'.$modname.'/lib.php');
5244 $return = true;
5245 $params = array($timeshift, $courseid);
5246 foreach ($fields as $field) {
5247 $updatesql = "UPDATE {".$modname."}
5248 SET $field = $field + ?
5249 WHERE course=? AND $field<>0";
5250 if ($modid) {
5251 $updatesql .= ' AND id=?';
5252 $params[] = $modid;
5254 $return = $DB->execute($updatesql, $params) && $return;
5257 return $return;
5261 * This function will empty a course of user data.
5262 * It will retain the activities and the structure of the course.
5264 * @param object $data an object containing all the settings including courseid (without magic quotes)
5265 * @return array status array of array component, item, error
5267 function reset_course_userdata($data) {
5268 global $CFG, $DB;
5269 require_once($CFG->libdir.'/gradelib.php');
5270 require_once($CFG->libdir.'/completionlib.php');
5271 require_once($CFG->dirroot.'/completion/criteria/completion_criteria_date.php');
5272 require_once($CFG->dirroot.'/group/lib.php');
5274 $data->courseid = $data->id;
5275 $context = context_course::instance($data->courseid);
5277 $eventparams = array(
5278 'context' => $context,
5279 'courseid' => $data->id,
5280 'other' => array(
5281 'reset_options' => (array) $data
5284 $event = \core\event\course_reset_started::create($eventparams);
5285 $event->trigger();
5287 // Calculate the time shift of dates.
5288 if (!empty($data->reset_start_date)) {
5289 // Time part of course startdate should be zero.
5290 $data->timeshift = $data->reset_start_date - usergetmidnight($data->reset_start_date_old);
5291 } else {
5292 $data->timeshift = 0;
5295 // Result array: component, item, error.
5296 $status = array();
5298 // Start the resetting.
5299 $componentstr = get_string('general');
5301 // Move the course start time.
5302 if (!empty($data->reset_start_date) and $data->timeshift) {
5303 // Change course start data.
5304 $DB->set_field('course', 'startdate', $data->reset_start_date, array('id' => $data->courseid));
5305 // Update all course and group events - do not move activity events.
5306 $updatesql = "UPDATE {event}
5307 SET timestart = timestart + ?
5308 WHERE courseid=? AND instance=0";
5309 $DB->execute($updatesql, array($data->timeshift, $data->courseid));
5311 // Update any date activity restrictions.
5312 if ($CFG->enableavailability) {
5313 \availability_date\condition::update_all_dates($data->courseid, $data->timeshift);
5316 // Update completion expected dates.
5317 if ($CFG->enablecompletion) {
5318 $modinfo = get_fast_modinfo($data->courseid);
5319 $changed = false;
5320 foreach ($modinfo->get_cms() as $cm) {
5321 if ($cm->completion && !empty($cm->completionexpected)) {
5322 $DB->set_field('course_modules', 'completionexpected', $cm->completionexpected + $data->timeshift,
5323 array('id' => $cm->id));
5324 $changed = true;
5328 // Clear course cache if changes made.
5329 if ($changed) {
5330 rebuild_course_cache($data->courseid, true);
5333 // Update course date completion criteria.
5334 \completion_criteria_date::update_date($data->courseid, $data->timeshift);
5337 $status[] = array('component' => $componentstr, 'item' => get_string('datechanged'), 'error' => false);
5340 if (!empty($data->reset_end_date)) {
5341 // If the user set a end date value respect it.
5342 $DB->set_field('course', 'enddate', $data->reset_end_date, array('id' => $data->courseid));
5343 } else if ($data->timeshift > 0 && $data->reset_end_date_old) {
5344 // If there is a time shift apply it to the end date as well.
5345 $enddate = $data->reset_end_date_old + $data->timeshift;
5346 $DB->set_field('course', 'enddate', $enddate, array('id' => $data->courseid));
5349 if (!empty($data->reset_events)) {
5350 $DB->delete_records('event', array('courseid' => $data->courseid));
5351 $status[] = array('component' => $componentstr, 'item' => get_string('deleteevents', 'calendar'), 'error' => false);
5354 if (!empty($data->reset_notes)) {
5355 require_once($CFG->dirroot.'/notes/lib.php');
5356 note_delete_all($data->courseid);
5357 $status[] = array('component' => $componentstr, 'item' => get_string('deletenotes', 'notes'), 'error' => false);
5360 if (!empty($data->delete_blog_associations)) {
5361 require_once($CFG->dirroot.'/blog/lib.php');
5362 blog_remove_associations_for_course($data->courseid);
5363 $status[] = array('component' => $componentstr, 'item' => get_string('deleteblogassociations', 'blog'), 'error' => false);
5366 if (!empty($data->reset_completion)) {
5367 // Delete course and activity completion information.
5368 $course = $DB->get_record('course', array('id' => $data->courseid));
5369 $cc = new completion_info($course);
5370 $cc->delete_all_completion_data();
5371 $status[] = array('component' => $componentstr,
5372 'item' => get_string('deletecompletiondata', 'completion'), 'error' => false);
5375 if (!empty($data->reset_competency_ratings)) {
5376 \core_competency\api::hook_course_reset_competency_ratings($data->courseid);
5377 $status[] = array('component' => $componentstr,
5378 'item' => get_string('deletecompetencyratings', 'core_competency'), 'error' => false);
5381 $componentstr = get_string('roles');
5383 if (!empty($data->reset_roles_overrides)) {
5384 $children = $context->get_child_contexts();
5385 foreach ($children as $child) {
5386 $child->delete_capabilities();
5388 $context->delete_capabilities();
5389 $status[] = array('component' => $componentstr, 'item' => get_string('deletecourseoverrides', 'role'), 'error' => false);
5392 if (!empty($data->reset_roles_local)) {
5393 $children = $context->get_child_contexts();
5394 foreach ($children as $child) {
5395 role_unassign_all(array('contextid' => $child->id));
5397 $status[] = array('component' => $componentstr, 'item' => get_string('deletelocalroles', 'role'), 'error' => false);
5400 // First unenrol users - this cleans some of related user data too, such as forum subscriptions, tracking, etc.
5401 $data->unenrolled = array();
5402 if (!empty($data->unenrol_users)) {
5403 $plugins = enrol_get_plugins(true);
5404 $instances = enrol_get_instances($data->courseid, true);
5405 foreach ($instances as $key => $instance) {
5406 if (!isset($plugins[$instance->enrol])) {
5407 unset($instances[$key]);
5408 continue;
5412 foreach ($data->unenrol_users as $withroleid) {
5413 if ($withroleid) {
5414 $sql = "SELECT ue.*
5415 FROM {user_enrolments} ue
5416 JOIN {enrol} e ON (e.id = ue.enrolid AND e.courseid = :courseid)
5417 JOIN {context} c ON (c.contextlevel = :courselevel AND c.instanceid = e.courseid)
5418 JOIN {role_assignments} ra ON (ra.contextid = c.id AND ra.roleid = :roleid AND ra.userid = ue.userid)";
5419 $params = array('courseid' => $data->courseid, 'roleid' => $withroleid, 'courselevel' => CONTEXT_COURSE);
5421 } else {
5422 // Without any role assigned at course context.
5423 $sql = "SELECT ue.*
5424 FROM {user_enrolments} ue
5425 JOIN {enrol} e ON (e.id = ue.enrolid AND e.courseid = :courseid)
5426 JOIN {context} c ON (c.contextlevel = :courselevel AND c.instanceid = e.courseid)
5427 LEFT JOIN {role_assignments} ra ON (ra.contextid = c.id AND ra.userid = ue.userid)
5428 WHERE ra.id IS null";
5429 $params = array('courseid' => $data->courseid, 'courselevel' => CONTEXT_COURSE);
5432 $rs = $DB->get_recordset_sql($sql, $params);
5433 foreach ($rs as $ue) {
5434 if (!isset($instances[$ue->enrolid])) {
5435 continue;
5437 $instance = $instances[$ue->enrolid];
5438 $plugin = $plugins[$instance->enrol];
5439 if (!$plugin->allow_unenrol($instance) and !$plugin->allow_unenrol_user($instance, $ue)) {
5440 continue;
5443 $plugin->unenrol_user($instance, $ue->userid);
5444 $data->unenrolled[$ue->userid] = $ue->userid;
5446 $rs->close();
5449 if (!empty($data->unenrolled)) {
5450 $status[] = array(
5451 'component' => $componentstr,
5452 'item' => get_string('unenrol', 'enrol').' ('.count($data->unenrolled).')',
5453 'error' => false
5457 $componentstr = get_string('groups');
5459 // Remove all group members.
5460 if (!empty($data->reset_groups_members)) {
5461 groups_delete_group_members($data->courseid);
5462 $status[] = array('component' => $componentstr, 'item' => get_string('removegroupsmembers', 'group'), 'error' => false);
5465 // Remove all groups.
5466 if (!empty($data->reset_groups_remove)) {
5467 groups_delete_groups($data->courseid, false);
5468 $status[] = array('component' => $componentstr, 'item' => get_string('deleteallgroups', 'group'), 'error' => false);
5471 // Remove all grouping members.
5472 if (!empty($data->reset_groupings_members)) {
5473 groups_delete_groupings_groups($data->courseid, false);
5474 $status[] = array('component' => $componentstr, 'item' => get_string('removegroupingsmembers', 'group'), 'error' => false);
5477 // Remove all groupings.
5478 if (!empty($data->reset_groupings_remove)) {
5479 groups_delete_groupings($data->courseid, false);
5480 $status[] = array('component' => $componentstr, 'item' => get_string('deleteallgroupings', 'group'), 'error' => false);
5483 // Look in every instance of every module for data to delete.
5484 $unsupportedmods = array();
5485 if ($allmods = $DB->get_records('modules') ) {
5486 foreach ($allmods as $mod) {
5487 $modname = $mod->name;
5488 $modfile = $CFG->dirroot.'/mod/'. $modname.'/lib.php';
5489 $moddeleteuserdata = $modname.'_reset_userdata'; // Function to delete user data.
5490 if (file_exists($modfile)) {
5491 if (!$DB->count_records($modname, array('course' => $data->courseid))) {
5492 continue; // Skip mods with no instances.
5494 include_once($modfile);
5495 if (function_exists($moddeleteuserdata)) {
5496 $modstatus = $moddeleteuserdata($data);
5497 if (is_array($modstatus)) {
5498 $status = array_merge($status, $modstatus);
5499 } else {
5500 debugging('Module '.$modname.' returned incorrect staus - must be an array!');
5502 } else {
5503 $unsupportedmods[] = $mod;
5505 } else {
5506 debugging('Missing lib.php in '.$modname.' module!');
5508 // Update calendar events for all modules.
5509 course_module_bulk_update_calendar_events($modname, $data->courseid);
5513 // Mention unsupported mods.
5514 if (!empty($unsupportedmods)) {
5515 foreach ($unsupportedmods as $mod) {
5516 $status[] = array(
5517 'component' => get_string('modulenameplural', $mod->name),
5518 'item' => '',
5519 'error' => get_string('resetnotimplemented')
5524 $componentstr = get_string('gradebook', 'grades');
5525 // Reset gradebook,.
5526 if (!empty($data->reset_gradebook_items)) {
5527 remove_course_grades($data->courseid, false);
5528 grade_grab_course_grades($data->courseid);
5529 grade_regrade_final_grades($data->courseid);
5530 $status[] = array('component' => $componentstr, 'item' => get_string('removeallcourseitems', 'grades'), 'error' => false);
5532 } else if (!empty($data->reset_gradebook_grades)) {
5533 grade_course_reset($data->courseid);
5534 $status[] = array('component' => $componentstr, 'item' => get_string('removeallcoursegrades', 'grades'), 'error' => false);
5536 // Reset comments.
5537 if (!empty($data->reset_comments)) {
5538 require_once($CFG->dirroot.'/comment/lib.php');
5539 comment::reset_course_page_comments($context);
5542 $event = \core\event\course_reset_ended::create($eventparams);
5543 $event->trigger();
5545 return $status;
5549 * Generate an email processing address.
5551 * @param int $modid
5552 * @param string $modargs
5553 * @return string Returns email processing address
5555 function generate_email_processing_address($modid, $modargs) {
5556 global $CFG;
5558 $header = $CFG->mailprefix . substr(base64_encode(pack('C', $modid)), 0, 2).$modargs;
5559 return $header . substr(md5($header.get_site_identifier()), 0, 16).'@'.$CFG->maildomain;
5565 * @todo Finish documenting this function
5567 * @param string $modargs
5568 * @param string $body Currently unused
5570 function moodle_process_email($modargs, $body) {
5571 global $DB;
5573 // The first char should be an unencoded letter. We'll take this as an action.
5574 switch ($modargs{0}) {
5575 case 'B': { // Bounce.
5576 list(, $userid) = unpack('V', base64_decode(substr($modargs, 1, 8)));
5577 if ($user = $DB->get_record("user", array('id' => $userid), "id,email")) {
5578 // Check the half md5 of their email.
5579 $md5check = substr(md5($user->email), 0, 16);
5580 if ($md5check == substr($modargs, -16)) {
5581 set_bounce_count($user);
5583 // Else maybe they've already changed it?
5586 break;
5587 // Maybe more later?
5591 // CORRESPONDENCE.
5594 * Get mailer instance, enable buffering, flush buffer or disable buffering.
5596 * @param string $action 'get', 'buffer', 'close' or 'flush'
5597 * @return moodle_phpmailer|null mailer instance if 'get' used or nothing
5599 function get_mailer($action='get') {
5600 global $CFG;
5602 /** @var moodle_phpmailer $mailer */
5603 static $mailer = null;
5604 static $counter = 0;
5606 if (!isset($CFG->smtpmaxbulk)) {
5607 $CFG->smtpmaxbulk = 1;
5610 if ($action == 'get') {
5611 $prevkeepalive = false;
5613 if (isset($mailer) and $mailer->Mailer == 'smtp') {
5614 if ($counter < $CFG->smtpmaxbulk and !$mailer->isError()) {
5615 $counter++;
5616 // Reset the mailer.
5617 $mailer->Priority = 3;
5618 $mailer->CharSet = 'UTF-8'; // Our default.
5619 $mailer->ContentType = "text/plain";
5620 $mailer->Encoding = "8bit";
5621 $mailer->From = "root@localhost";
5622 $mailer->FromName = "Root User";
5623 $mailer->Sender = "";
5624 $mailer->Subject = "";
5625 $mailer->Body = "";
5626 $mailer->AltBody = "";
5627 $mailer->ConfirmReadingTo = "";
5629 $mailer->clearAllRecipients();
5630 $mailer->clearReplyTos();
5631 $mailer->clearAttachments();
5632 $mailer->clearCustomHeaders();
5633 return $mailer;
5636 $prevkeepalive = $mailer->SMTPKeepAlive;
5637 get_mailer('flush');
5640 require_once($CFG->libdir.'/phpmailer/moodle_phpmailer.php');
5641 $mailer = new moodle_phpmailer();
5643 $counter = 1;
5645 if ($CFG->smtphosts == 'qmail') {
5646 // Use Qmail system.
5647 $mailer->isQmail();
5649 } else if (empty($CFG->smtphosts)) {
5650 // Use PHP mail() = sendmail.
5651 $mailer->isMail();
5653 } else {
5654 // Use SMTP directly.
5655 $mailer->isSMTP();
5656 if (!empty($CFG->debugsmtp)) {
5657 $mailer->SMTPDebug = 3;
5659 // Specify main and backup servers.
5660 $mailer->Host = $CFG->smtphosts;
5661 // Specify secure connection protocol.
5662 $mailer->SMTPSecure = $CFG->smtpsecure;
5663 // Use previous keepalive.
5664 $mailer->SMTPKeepAlive = $prevkeepalive;
5666 if ($CFG->smtpuser) {
5667 // Use SMTP authentication.
5668 $mailer->SMTPAuth = true;
5669 $mailer->Username = $CFG->smtpuser;
5670 $mailer->Password = $CFG->smtppass;
5674 return $mailer;
5677 $nothing = null;
5679 // Keep smtp session open after sending.
5680 if ($action == 'buffer') {
5681 if (!empty($CFG->smtpmaxbulk)) {
5682 get_mailer('flush');
5683 $m = get_mailer();
5684 if ($m->Mailer == 'smtp') {
5685 $m->SMTPKeepAlive = true;
5688 return $nothing;
5691 // Close smtp session, but continue buffering.
5692 if ($action == 'flush') {
5693 if (isset($mailer) and $mailer->Mailer == 'smtp') {
5694 if (!empty($mailer->SMTPDebug)) {
5695 echo '<pre>'."\n";
5697 $mailer->SmtpClose();
5698 if (!empty($mailer->SMTPDebug)) {
5699 echo '</pre>';
5702 return $nothing;
5705 // Close smtp session, do not buffer anymore.
5706 if ($action == 'close') {
5707 if (isset($mailer) and $mailer->Mailer == 'smtp') {
5708 get_mailer('flush');
5709 $mailer->SMTPKeepAlive = false;
5711 $mailer = null; // Better force new instance.
5712 return $nothing;
5717 * A helper function to test for email diversion
5719 * @param string $email
5720 * @return bool Returns true if the email should be diverted
5722 function email_should_be_diverted($email) {
5723 global $CFG;
5725 if (empty($CFG->divertallemailsto)) {
5726 return false;
5729 if (empty($CFG->divertallemailsexcept)) {
5730 return true;
5733 $patterns = array_map('trim', explode(',', $CFG->divertallemailsexcept));
5734 foreach ($patterns as $pattern) {
5735 if (preg_match("/$pattern/", $email)) {
5736 return false;
5740 return true;
5744 * Generate a unique email Message-ID using the moodle domain and install path
5746 * @param string $localpart An optional unique message id prefix.
5747 * @return string The formatted ID ready for appending to the email headers.
5749 function generate_email_messageid($localpart = null) {
5750 global $CFG;
5752 $urlinfo = parse_url($CFG->wwwroot);
5753 $base = '@' . $urlinfo['host'];
5755 // If multiple moodles are on the same domain we want to tell them
5756 // apart so we add the install path to the local part. This means
5757 // that the id local part should never contain a / character so
5758 // we can correctly parse the id to reassemble the wwwroot.
5759 if (isset($urlinfo['path'])) {
5760 $base = $urlinfo['path'] . $base;
5763 if (empty($localpart)) {
5764 $localpart = uniqid('', true);
5767 // Because we may have an option /installpath suffix to the local part
5768 // of the id we need to escape any / chars which are in the $localpart.
5769 $localpart = str_replace('/', '%2F', $localpart);
5771 return '<' . $localpart . $base . '>';
5775 * Send an email to a specified user
5777 * @param stdClass $user A {@link $USER} object
5778 * @param stdClass $from A {@link $USER} object
5779 * @param string $subject plain text subject line of the email
5780 * @param string $messagetext plain text version of the message
5781 * @param string $messagehtml complete html version of the message (optional)
5782 * @param string $attachment a file on the filesystem, either relative to $CFG->dataroot or a full path to a file in $CFG->tempdir
5783 * @param string $attachname the name of the file (extension indicates MIME)
5784 * @param bool $usetrueaddress determines whether $from email address should
5785 * be sent out. Will be overruled by user profile setting for maildisplay
5786 * @param string $replyto Email address to reply to
5787 * @param string $replytoname Name of reply to recipient
5788 * @param int $wordwrapwidth custom word wrap width, default 79
5789 * @return bool Returns true if mail was sent OK and false if there was an error.
5791 function email_to_user($user, $from, $subject, $messagetext, $messagehtml = '', $attachment = '', $attachname = '',
5792 $usetrueaddress = true, $replyto = '', $replytoname = '', $wordwrapwidth = 79) {
5794 global $CFG, $PAGE, $SITE;
5796 if (empty($user) or empty($user->id)) {
5797 debugging('Can not send email to null user', DEBUG_DEVELOPER);
5798 return false;
5801 if (empty($user->email)) {
5802 debugging('Can not send email to user without email: '.$user->id, DEBUG_DEVELOPER);
5803 return false;
5806 if (!empty($user->deleted)) {
5807 debugging('Can not send email to deleted user: '.$user->id, DEBUG_DEVELOPER);
5808 return false;
5811 if (defined('BEHAT_SITE_RUNNING')) {
5812 // Fake email sending in behat.
5813 return true;
5816 if (!empty($CFG->noemailever)) {
5817 // Hidden setting for development sites, set in config.php if needed.
5818 debugging('Not sending email due to $CFG->noemailever config setting', DEBUG_NORMAL);
5819 return true;
5822 if (email_should_be_diverted($user->email)) {
5823 $subject = "[DIVERTED {$user->email}] $subject";
5824 $user = clone($user);
5825 $user->email = $CFG->divertallemailsto;
5828 // Skip mail to suspended users.
5829 if ((isset($user->auth) && $user->auth=='nologin') or (isset($user->suspended) && $user->suspended)) {
5830 return true;
5833 if (!validate_email($user->email)) {
5834 // We can not send emails to invalid addresses - it might create security issue or confuse the mailer.
5835 debugging("email_to_user: User $user->id (".fullname($user).") email ($user->email) is invalid! Not sending.");
5836 return false;
5839 if (over_bounce_threshold($user)) {
5840 debugging("email_to_user: User $user->id (".fullname($user).") is over bounce threshold! Not sending.");
5841 return false;
5844 // TLD .invalid is specifically reserved for invalid domain names.
5845 // For More information, see {@link http://tools.ietf.org/html/rfc2606#section-2}.
5846 if (substr($user->email, -8) == '.invalid') {
5847 debugging("email_to_user: User $user->id (".fullname($user).") email domain ($user->email) is invalid! Not sending.");
5848 return true; // This is not an error.
5851 // If the user is a remote mnet user, parse the email text for URL to the
5852 // wwwroot and modify the url to direct the user's browser to login at their
5853 // home site (identity provider - idp) before hitting the link itself.
5854 if (is_mnet_remote_user($user)) {
5855 require_once($CFG->dirroot.'/mnet/lib.php');
5857 $jumpurl = mnet_get_idp_jump_url($user);
5858 $callback = partial('mnet_sso_apply_indirection', $jumpurl);
5860 $messagetext = preg_replace_callback("%($CFG->wwwroot[^[:space:]]*)%",
5861 $callback,
5862 $messagetext);
5863 $messagehtml = preg_replace_callback("%href=[\"'`]($CFG->wwwroot[\w_:\?=#&@/;.~-]*)[\"'`]%",
5864 $callback,
5865 $messagehtml);
5867 $mail = get_mailer();
5869 if (!empty($mail->SMTPDebug)) {
5870 echo '<pre>' . "\n";
5873 $temprecipients = array();
5874 $tempreplyto = array();
5876 // Make sure that we fall back onto some reasonable no-reply address.
5877 $noreplyaddressdefault = 'noreply@' . get_host_from_url($CFG->wwwroot);
5878 $noreplyaddress = empty($CFG->noreplyaddress) ? $noreplyaddressdefault : $CFG->noreplyaddress;
5880 if (!validate_email($noreplyaddress)) {
5881 debugging('email_to_user: Invalid noreply-email '.s($noreplyaddress));
5882 $noreplyaddress = $noreplyaddressdefault;
5885 // Make up an email address for handling bounces.
5886 if (!empty($CFG->handlebounces)) {
5887 $modargs = 'B'.base64_encode(pack('V', $user->id)).substr(md5($user->email), 0, 16);
5888 $mail->Sender = generate_email_processing_address(0, $modargs);
5889 } else {
5890 $mail->Sender = $noreplyaddress;
5893 // Make sure that the explicit replyto is valid, fall back to the implicit one.
5894 if (!empty($replyto) && !validate_email($replyto)) {
5895 debugging('email_to_user: Invalid replyto-email '.s($replyto));
5896 $replyto = $noreplyaddress;
5899 if (is_string($from)) { // So we can pass whatever we want if there is need.
5900 $mail->From = $noreplyaddress;
5901 $mail->FromName = $from;
5902 // Check if using the true address is true, and the email is in the list of allowed domains for sending email,
5903 // and that the senders email setting is either displayed to everyone, or display to only other users that are enrolled
5904 // in a course with the sender.
5905 } else if ($usetrueaddress && can_send_from_real_email_address($from, $user)) {
5906 if (!validate_email($from->email)) {
5907 debugging('email_to_user: Invalid from-email '.s($from->email).' - not sending');
5908 // Better not to use $noreplyaddress in this case.
5909 return false;
5911 $mail->From = $from->email;
5912 $fromdetails = new stdClass();
5913 $fromdetails->name = fullname($from);
5914 $fromdetails->url = preg_replace('#^https?://#', '', $CFG->wwwroot);
5915 $fromdetails->siteshortname = format_string($SITE->shortname);
5916 $fromstring = $fromdetails->name;
5917 if ($CFG->emailfromvia == EMAIL_VIA_ALWAYS) {
5918 $fromstring = get_string('emailvia', 'core', $fromdetails);
5920 $mail->FromName = $fromstring;
5921 if (empty($replyto)) {
5922 $tempreplyto[] = array($from->email, fullname($from));
5924 } else {
5925 $mail->From = $noreplyaddress;
5926 $fromdetails = new stdClass();
5927 $fromdetails->name = fullname($from);
5928 $fromdetails->url = preg_replace('#^https?://#', '', $CFG->wwwroot);
5929 $fromdetails->siteshortname = format_string($SITE->shortname);
5930 $fromstring = $fromdetails->name;
5931 if ($CFG->emailfromvia != EMAIL_VIA_NEVER) {
5932 $fromstring = get_string('emailvia', 'core', $fromdetails);
5934 $mail->FromName = $fromstring;
5935 if (empty($replyto)) {
5936 $tempreplyto[] = array($noreplyaddress, get_string('noreplyname'));
5940 if (!empty($replyto)) {
5941 $tempreplyto[] = array($replyto, $replytoname);
5944 $temprecipients[] = array($user->email, fullname($user));
5946 // Set word wrap.
5947 $mail->WordWrap = $wordwrapwidth;
5949 if (!empty($from->customheaders)) {
5950 // Add custom headers.
5951 if (is_array($from->customheaders)) {
5952 foreach ($from->customheaders as $customheader) {
5953 $mail->addCustomHeader($customheader);
5955 } else {
5956 $mail->addCustomHeader($from->customheaders);
5960 // If the X-PHP-Originating-Script email header is on then also add an additional
5961 // header with details of where exactly in moodle the email was triggered from,
5962 // either a call to message_send() or to email_to_user().
5963 if (ini_get('mail.add_x_header')) {
5965 $stack = debug_backtrace(false);
5966 $origin = $stack[0];
5968 foreach ($stack as $depth => $call) {
5969 if ($call['function'] == 'message_send') {
5970 $origin = $call;
5974 $originheader = $CFG->wwwroot . ' => ' . gethostname() . ':'
5975 . str_replace($CFG->dirroot . '/', '', $origin['file']) . ':' . $origin['line'];
5976 $mail->addCustomHeader('X-Moodle-Originating-Script: ' . $originheader);
5979 if (!empty($from->priority)) {
5980 $mail->Priority = $from->priority;
5983 $renderer = $PAGE->get_renderer('core');
5984 $context = array(
5985 'sitefullname' => $SITE->fullname,
5986 'siteshortname' => $SITE->shortname,
5987 'sitewwwroot' => $CFG->wwwroot,
5988 'subject' => $subject,
5989 'to' => $user->email,
5990 'toname' => fullname($user),
5991 'from' => $mail->From,
5992 'fromname' => $mail->FromName,
5994 if (!empty($tempreplyto[0])) {
5995 $context['replyto'] = $tempreplyto[0][0];
5996 $context['replytoname'] = $tempreplyto[0][1];
5998 if ($user->id > 0) {
5999 $context['touserid'] = $user->id;
6000 $context['tousername'] = $user->username;
6003 if (!empty($user->mailformat) && $user->mailformat == 1) {
6004 // Only process html templates if the user preferences allow html email.
6006 if ($messagehtml) {
6007 // If html has been given then pass it through the template.
6008 $context['body'] = $messagehtml;
6009 $messagehtml = $renderer->render_from_template('core/email_html', $context);
6011 } else {
6012 // If no html has been given, BUT there is an html wrapping template then
6013 // auto convert the text to html and then wrap it.
6014 $autohtml = trim(text_to_html($messagetext));
6015 $context['body'] = $autohtml;
6016 $temphtml = $renderer->render_from_template('core/email_html', $context);
6017 if ($autohtml != $temphtml) {
6018 $messagehtml = $temphtml;
6023 $context['body'] = $messagetext;
6024 $mail->Subject = $renderer->render_from_template('core/email_subject', $context);
6025 $mail->FromName = $renderer->render_from_template('core/email_fromname', $context);
6026 $messagetext = $renderer->render_from_template('core/email_text', $context);
6028 // Autogenerate a MessageID if it's missing.
6029 if (empty($mail->MessageID)) {
6030 $mail->MessageID = generate_email_messageid();
6033 if ($messagehtml && !empty($user->mailformat) && $user->mailformat == 1) {
6034 // Don't ever send HTML to users who don't want it.
6035 $mail->isHTML(true);
6036 $mail->Encoding = 'quoted-printable';
6037 $mail->Body = $messagehtml;
6038 $mail->AltBody = "\n$messagetext\n";
6039 } else {
6040 $mail->IsHTML(false);
6041 $mail->Body = "\n$messagetext\n";
6044 if ($attachment && $attachname) {
6045 if (preg_match( "~\\.\\.~" , $attachment )) {
6046 // Security check for ".." in dir path.
6047 $supportuser = core_user::get_support_user();
6048 $temprecipients[] = array($supportuser->email, fullname($supportuser, true));
6049 $mail->addStringAttachment('Error in attachment. User attempted to attach a filename with a unsafe name.', 'error.txt', '8bit', 'text/plain');
6050 } else {
6051 require_once($CFG->libdir.'/filelib.php');
6052 $mimetype = mimeinfo('type', $attachname);
6054 $attachmentpath = $attachment;
6056 // Before doing the comparison, make sure that the paths are correct (Windows uses slashes in the other direction).
6057 $attachpath = str_replace('\\', '/', $attachmentpath);
6058 // Make sure both variables are normalised before comparing.
6059 $temppath = str_replace('\\', '/', realpath($CFG->tempdir));
6061 // If the attachment is a full path to a file in the tempdir, use it as is,
6062 // otherwise assume it is a relative path from the dataroot (for backwards compatibility reasons).
6063 if (strpos($attachpath, $temppath) !== 0) {
6064 $attachmentpath = $CFG->dataroot . '/' . $attachmentpath;
6067 $mail->addAttachment($attachmentpath, $attachname, 'base64', $mimetype);
6071 // Check if the email should be sent in an other charset then the default UTF-8.
6072 if ((!empty($CFG->sitemailcharset) || !empty($CFG->allowusermailcharset))) {
6074 // Use the defined site mail charset or eventually the one preferred by the recipient.
6075 $charset = $CFG->sitemailcharset;
6076 if (!empty($CFG->allowusermailcharset)) {
6077 if ($useremailcharset = get_user_preferences('mailcharset', '0', $user->id)) {
6078 $charset = $useremailcharset;
6082 // Convert all the necessary strings if the charset is supported.
6083 $charsets = get_list_of_charsets();
6084 unset($charsets['UTF-8']);
6085 if (in_array($charset, $charsets)) {
6086 $mail->CharSet = $charset;
6087 $mail->FromName = core_text::convert($mail->FromName, 'utf-8', strtolower($charset));
6088 $mail->Subject = core_text::convert($mail->Subject, 'utf-8', strtolower($charset));
6089 $mail->Body = core_text::convert($mail->Body, 'utf-8', strtolower($charset));
6090 $mail->AltBody = core_text::convert($mail->AltBody, 'utf-8', strtolower($charset));
6092 foreach ($temprecipients as $key => $values) {
6093 $temprecipients[$key][1] = core_text::convert($values[1], 'utf-8', strtolower($charset));
6095 foreach ($tempreplyto as $key => $values) {
6096 $tempreplyto[$key][1] = core_text::convert($values[1], 'utf-8', strtolower($charset));
6101 foreach ($temprecipients as $values) {
6102 $mail->addAddress($values[0], $values[1]);
6104 foreach ($tempreplyto as $values) {
6105 $mail->addReplyTo($values[0], $values[1]);
6108 if ($mail->send()) {
6109 set_send_count($user);
6110 if (!empty($mail->SMTPDebug)) {
6111 echo '</pre>';
6113 return true;
6114 } else {
6115 // Trigger event for failing to send email.
6116 $event = \core\event\email_failed::create(array(
6117 'context' => context_system::instance(),
6118 'userid' => $from->id,
6119 'relateduserid' => $user->id,
6120 'other' => array(
6121 'subject' => $subject,
6122 'message' => $messagetext,
6123 'errorinfo' => $mail->ErrorInfo
6126 $event->trigger();
6127 if (CLI_SCRIPT) {
6128 mtrace('Error: lib/moodlelib.php email_to_user(): '.$mail->ErrorInfo);
6130 if (!empty($mail->SMTPDebug)) {
6131 echo '</pre>';
6133 return false;
6138 * Check to see if a user's real email address should be used for the "From" field.
6140 * @param object $from The user object for the user we are sending the email from.
6141 * @param object $user The user object that we are sending the email to.
6142 * @param array $unused No longer used.
6143 * @return bool Returns true if we can use the from user's email adress in the "From" field.
6145 function can_send_from_real_email_address($from, $user, $unused = null) {
6146 global $CFG;
6147 if (!isset($CFG->allowedemaildomains) || empty(trim($CFG->allowedemaildomains))) {
6148 return false;
6150 $alloweddomains = array_map('trim', explode("\n", $CFG->allowedemaildomains));
6151 // Email is in the list of allowed domains for sending email,
6152 // and the senders email setting is either displayed to everyone, or display to only other users that are enrolled
6153 // in a course with the sender.
6154 if (\core\ip_utils::is_domain_in_allowed_list(substr($from->email, strpos($from->email, '@') + 1), $alloweddomains)
6155 && ($from->maildisplay == core_user::MAILDISPLAY_EVERYONE
6156 || ($from->maildisplay == core_user::MAILDISPLAY_COURSE_MEMBERS_ONLY
6157 && enrol_get_shared_courses($user, $from, false, true)))) {
6158 return true;
6160 return false;
6164 * Generate a signoff for emails based on support settings
6166 * @return string
6168 function generate_email_signoff() {
6169 global $CFG;
6171 $signoff = "\n";
6172 if (!empty($CFG->supportname)) {
6173 $signoff .= $CFG->supportname."\n";
6175 if (!empty($CFG->supportemail)) {
6176 $signoff .= $CFG->supportemail."\n";
6178 if (!empty($CFG->supportpage)) {
6179 $signoff .= $CFG->supportpage."\n";
6181 return $signoff;
6185 * Sets specified user's password and send the new password to the user via email.
6187 * @param stdClass $user A {@link $USER} object
6188 * @param bool $fasthash If true, use a low cost factor when generating the hash for speed.
6189 * @return bool|string Returns "true" if mail was sent OK and "false" if there was an error
6191 function setnew_password_and_mail($user, $fasthash = false) {
6192 global $CFG, $DB;
6194 // We try to send the mail in language the user understands,
6195 // unfortunately the filter_string() does not support alternative langs yet
6196 // so multilang will not work properly for site->fullname.
6197 $lang = empty($user->lang) ? $CFG->lang : $user->lang;
6199 $site = get_site();
6201 $supportuser = core_user::get_support_user();
6203 $newpassword = generate_password();
6205 update_internal_user_password($user, $newpassword, $fasthash);
6207 $a = new stdClass();
6208 $a->firstname = fullname($user, true);
6209 $a->sitename = format_string($site->fullname);
6210 $a->username = $user->username;
6211 $a->newpassword = $newpassword;
6212 $a->link = $CFG->wwwroot .'/login/?lang='.$lang;
6213 $a->signoff = generate_email_signoff();
6215 $message = (string)new lang_string('newusernewpasswordtext', '', $a, $lang);
6217 $subject = format_string($site->fullname) .': '. (string)new lang_string('newusernewpasswordsubj', '', $a, $lang);
6219 // Directly email rather than using the messaging system to ensure its not routed to a popup or jabber.
6220 return email_to_user($user, $supportuser, $subject, $message);
6225 * Resets specified user's password and send the new password to the user via email.
6227 * @param stdClass $user A {@link $USER} object
6228 * @return bool Returns true if mail was sent OK and false if there was an error.
6230 function reset_password_and_mail($user) {
6231 global $CFG;
6233 $site = get_site();
6234 $supportuser = core_user::get_support_user();
6236 $userauth = get_auth_plugin($user->auth);
6237 if (!$userauth->can_reset_password() or !is_enabled_auth($user->auth)) {
6238 trigger_error("Attempt to reset user password for user $user->username with Auth $user->auth.");
6239 return false;
6242 $newpassword = generate_password();
6244 if (!$userauth->user_update_password($user, $newpassword)) {
6245 print_error("cannotsetpassword");
6248 $a = new stdClass();
6249 $a->firstname = $user->firstname;
6250 $a->lastname = $user->lastname;
6251 $a->sitename = format_string($site->fullname);
6252 $a->username = $user->username;
6253 $a->newpassword = $newpassword;
6254 $a->link = $CFG->wwwroot .'/login/change_password.php';
6255 $a->signoff = generate_email_signoff();
6257 $message = get_string('newpasswordtext', '', $a);
6259 $subject = format_string($site->fullname) .': '. get_string('changedpassword');
6261 unset_user_preference('create_password', $user); // Prevent cron from generating the password.
6263 // Directly email rather than using the messaging system to ensure its not routed to a popup or jabber.
6264 return email_to_user($user, $supportuser, $subject, $message);
6268 * Send email to specified user with confirmation text and activation link.
6270 * @param stdClass $user A {@link $USER} object
6271 * @param string $confirmationurl user confirmation URL
6272 * @return bool Returns true if mail was sent OK and false if there was an error.
6274 function send_confirmation_email($user, $confirmationurl = null) {
6275 global $CFG;
6277 $site = get_site();
6278 $supportuser = core_user::get_support_user();
6280 $data = new stdClass();
6281 $data->firstname = fullname($user);
6282 $data->sitename = format_string($site->fullname);
6283 $data->admin = generate_email_signoff();
6285 $subject = get_string('emailconfirmationsubject', '', format_string($site->fullname));
6287 if (empty($confirmationurl)) {
6288 $confirmationurl = '/login/confirm.php';
6291 $confirmationurl = new moodle_url($confirmationurl);
6292 // Remove data parameter just in case it was included in the confirmation so we can add it manually later.
6293 $confirmationurl->remove_params('data');
6294 $confirmationpath = $confirmationurl->out(false);
6296 // We need to custom encode the username to include trailing dots in the link.
6297 // Because of this custom encoding we can't use moodle_url directly.
6298 // Determine if a query string is present in the confirmation url.
6299 $hasquerystring = strpos($confirmationpath, '?') !== false;
6300 // Perform normal url encoding of the username first.
6301 $username = urlencode($user->username);
6302 // Prevent problems with trailing dots not being included as part of link in some mail clients.
6303 $username = str_replace('.', '%2E', $username);
6305 $data->link = $confirmationpath . ( $hasquerystring ? '&' : '?') . 'data='. $user->secret .'/'. $username;
6307 $message = get_string('emailconfirmation', '', $data);
6308 $messagehtml = text_to_html(get_string('emailconfirmation', '', $data), false, false, true);
6310 $user->mailformat = 1; // Always send HTML version as well.
6312 // Directly email rather than using the messaging system to ensure its not routed to a popup or jabber.
6313 return email_to_user($user, $supportuser, $subject, $message, $messagehtml);
6317 * Sends a password change confirmation email.
6319 * @param stdClass $user A {@link $USER} object
6320 * @param stdClass $resetrecord An object tracking metadata regarding password reset request
6321 * @return bool Returns true if mail was sent OK and false if there was an error.
6323 function send_password_change_confirmation_email($user, $resetrecord) {
6324 global $CFG;
6326 $site = get_site();
6327 $supportuser = core_user::get_support_user();
6328 $pwresetmins = isset($CFG->pwresettime) ? floor($CFG->pwresettime / MINSECS) : 30;
6330 $data = new stdClass();
6331 $data->firstname = $user->firstname;
6332 $data->lastname = $user->lastname;
6333 $data->username = $user->username;
6334 $data->sitename = format_string($site->fullname);
6335 $data->link = $CFG->wwwroot .'/login/forgot_password.php?token='. $resetrecord->token;
6336 $data->admin = generate_email_signoff();
6337 $data->resetminutes = $pwresetmins;
6339 $message = get_string('emailresetconfirmation', '', $data);
6340 $subject = get_string('emailresetconfirmationsubject', '', format_string($site->fullname));
6342 // Directly email rather than using the messaging system to ensure its not routed to a popup or jabber.
6343 return email_to_user($user, $supportuser, $subject, $message);
6348 * Sends an email containinginformation on how to change your password.
6350 * @param stdClass $user A {@link $USER} object
6351 * @return bool Returns true if mail was sent OK and false if there was an error.
6353 function send_password_change_info($user) {
6354 global $CFG;
6356 $site = get_site();
6357 $supportuser = core_user::get_support_user();
6358 $systemcontext = context_system::instance();
6360 $data = new stdClass();
6361 $data->firstname = $user->firstname;
6362 $data->lastname = $user->lastname;
6363 $data->username = $user->username;
6364 $data->sitename = format_string($site->fullname);
6365 $data->admin = generate_email_signoff();
6367 $userauth = get_auth_plugin($user->auth);
6369 if (!is_enabled_auth($user->auth) or $user->auth == 'nologin') {
6370 $message = get_string('emailpasswordchangeinfodisabled', '', $data);
6371 $subject = get_string('emailpasswordchangeinfosubject', '', format_string($site->fullname));
6372 // Directly email rather than using the messaging system to ensure its not routed to a popup or jabber.
6373 return email_to_user($user, $supportuser, $subject, $message);
6376 if ($userauth->can_change_password() and $userauth->change_password_url()) {
6377 // We have some external url for password changing.
6378 $data->link .= $userauth->change_password_url();
6380 } else {
6381 // No way to change password, sorry.
6382 $data->link = '';
6385 if (!empty($data->link) and has_capability('moodle/user:changeownpassword', $systemcontext, $user->id)) {
6386 $message = get_string('emailpasswordchangeinfo', '', $data);
6387 $subject = get_string('emailpasswordchangeinfosubject', '', format_string($site->fullname));
6388 } else {
6389 $message = get_string('emailpasswordchangeinfofail', '', $data);
6390 $subject = get_string('emailpasswordchangeinfosubject', '', format_string($site->fullname));
6393 // Directly email rather than using the messaging system to ensure its not routed to a popup or jabber.
6394 return email_to_user($user, $supportuser, $subject, $message);
6399 * Check that an email is allowed. It returns an error message if there was a problem.
6401 * @param string $email Content of email
6402 * @return string|false
6404 function email_is_not_allowed($email) {
6405 global $CFG;
6407 if (!empty($CFG->allowemailaddresses)) {
6408 $allowed = explode(' ', $CFG->allowemailaddresses);
6409 foreach ($allowed as $allowedpattern) {
6410 $allowedpattern = trim($allowedpattern);
6411 if (!$allowedpattern) {
6412 continue;
6414 if (strpos($allowedpattern, '.') === 0) {
6415 if (strpos(strrev($email), strrev($allowedpattern)) === 0) {
6416 // Subdomains are in a form ".example.com" - matches "xxx@anything.example.com".
6417 return false;
6420 } else if (strpos(strrev($email), strrev('@'.$allowedpattern)) === 0) {
6421 return false;
6424 return get_string('emailonlyallowed', '', $CFG->allowemailaddresses);
6426 } else if (!empty($CFG->denyemailaddresses)) {
6427 $denied = explode(' ', $CFG->denyemailaddresses);
6428 foreach ($denied as $deniedpattern) {
6429 $deniedpattern = trim($deniedpattern);
6430 if (!$deniedpattern) {
6431 continue;
6433 if (strpos($deniedpattern, '.') === 0) {
6434 if (strpos(strrev($email), strrev($deniedpattern)) === 0) {
6435 // Subdomains are in a form ".example.com" - matches "xxx@anything.example.com".
6436 return get_string('emailnotallowed', '', $CFG->denyemailaddresses);
6439 } else if (strpos(strrev($email), strrev('@'.$deniedpattern)) === 0) {
6440 return get_string('emailnotallowed', '', $CFG->denyemailaddresses);
6445 return false;
6448 // FILE HANDLING.
6451 * Returns local file storage instance
6453 * @return file_storage
6455 function get_file_storage($reset = false) {
6456 global $CFG;
6458 static $fs = null;
6460 if ($reset) {
6461 $fs = null;
6462 return;
6465 if ($fs) {
6466 return $fs;
6469 require_once("$CFG->libdir/filelib.php");
6471 $fs = new file_storage();
6473 return $fs;
6477 * Returns local file storage instance
6479 * @return file_browser
6481 function get_file_browser() {
6482 global $CFG;
6484 static $fb = null;
6486 if ($fb) {
6487 return $fb;
6490 require_once("$CFG->libdir/filelib.php");
6492 $fb = new file_browser();
6494 return $fb;
6498 * Returns file packer
6500 * @param string $mimetype default application/zip
6501 * @return file_packer
6503 function get_file_packer($mimetype='application/zip') {
6504 global $CFG;
6506 static $fp = array();
6508 if (isset($fp[$mimetype])) {
6509 return $fp[$mimetype];
6512 switch ($mimetype) {
6513 case 'application/zip':
6514 case 'application/vnd.moodle.profiling':
6515 $classname = 'zip_packer';
6516 break;
6518 case 'application/x-gzip' :
6519 $classname = 'tgz_packer';
6520 break;
6522 case 'application/vnd.moodle.backup':
6523 $classname = 'mbz_packer';
6524 break;
6526 default:
6527 return false;
6530 require_once("$CFG->libdir/filestorage/$classname.php");
6531 $fp[$mimetype] = new $classname();
6533 return $fp[$mimetype];
6537 * Returns current name of file on disk if it exists.
6539 * @param string $newfile File to be verified
6540 * @return string Current name of file on disk if true
6542 function valid_uploaded_file($newfile) {
6543 if (empty($newfile)) {
6544 return '';
6546 if (is_uploaded_file($newfile['tmp_name']) and $newfile['size'] > 0) {
6547 return $newfile['tmp_name'];
6548 } else {
6549 return '';
6554 * Returns the maximum size for uploading files.
6556 * There are seven possible upload limits:
6557 * 1. in Apache using LimitRequestBody (no way of checking or changing this)
6558 * 2. in php.ini for 'upload_max_filesize' (can not be changed inside PHP)
6559 * 3. in .htaccess for 'upload_max_filesize' (can not be changed inside PHP)
6560 * 4. in php.ini for 'post_max_size' (can not be changed inside PHP)
6561 * 5. by the Moodle admin in $CFG->maxbytes
6562 * 6. by the teacher in the current course $course->maxbytes
6563 * 7. by the teacher for the current module, eg $assignment->maxbytes
6565 * These last two are passed to this function as arguments (in bytes).
6566 * Anything defined as 0 is ignored.
6567 * The smallest of all the non-zero numbers is returned.
6569 * @todo Finish documenting this function
6571 * @param int $sitebytes Set maximum size
6572 * @param int $coursebytes Current course $course->maxbytes (in bytes)
6573 * @param int $modulebytes Current module ->maxbytes (in bytes)
6574 * @param bool $unused This parameter has been deprecated and is not used any more.
6575 * @return int The maximum size for uploading files.
6577 function get_max_upload_file_size($sitebytes=0, $coursebytes=0, $modulebytes=0, $unused = false) {
6579 if (! $filesize = ini_get('upload_max_filesize')) {
6580 $filesize = '5M';
6582 $minimumsize = get_real_size($filesize);
6584 if ($postsize = ini_get('post_max_size')) {
6585 $postsize = get_real_size($postsize);
6586 if ($postsize < $minimumsize) {
6587 $minimumsize = $postsize;
6591 if (($sitebytes > 0) and ($sitebytes < $minimumsize)) {
6592 $minimumsize = $sitebytes;
6595 if (($coursebytes > 0) and ($coursebytes < $minimumsize)) {
6596 $minimumsize = $coursebytes;
6599 if (($modulebytes > 0) and ($modulebytes < $minimumsize)) {
6600 $minimumsize = $modulebytes;
6603 return $minimumsize;
6607 * Returns the maximum size for uploading files for the current user
6609 * This function takes in account {@link get_max_upload_file_size()} the user's capabilities
6611 * @param context $context The context in which to check user capabilities
6612 * @param int $sitebytes Set maximum size
6613 * @param int $coursebytes Current course $course->maxbytes (in bytes)
6614 * @param int $modulebytes Current module ->maxbytes (in bytes)
6615 * @param stdClass $user The user
6616 * @param bool $unused This parameter has been deprecated and is not used any more.
6617 * @return int The maximum size for uploading files.
6619 function get_user_max_upload_file_size($context, $sitebytes = 0, $coursebytes = 0, $modulebytes = 0, $user = null,
6620 $unused = false) {
6621 global $USER;
6623 if (empty($user)) {
6624 $user = $USER;
6627 if (has_capability('moodle/course:ignorefilesizelimits', $context, $user)) {
6628 return USER_CAN_IGNORE_FILE_SIZE_LIMITS;
6631 return get_max_upload_file_size($sitebytes, $coursebytes, $modulebytes);
6635 * Returns an array of possible sizes in local language
6637 * Related to {@link get_max_upload_file_size()} - this function returns an
6638 * array of possible sizes in an array, translated to the
6639 * local language.
6641 * The list of options will go up to the minimum of $sitebytes, $coursebytes or $modulebytes.
6643 * If $coursebytes or $sitebytes is not 0, an option will be included for "Course/Site upload limit (X)"
6644 * with the value set to 0. This option will be the first in the list.
6646 * @uses SORT_NUMERIC
6647 * @param int $sitebytes Set maximum size
6648 * @param int $coursebytes Current course $course->maxbytes (in bytes)
6649 * @param int $modulebytes Current module ->maxbytes (in bytes)
6650 * @param int|array $custombytes custom upload size/s which will be added to list,
6651 * Only value/s smaller then maxsize will be added to list.
6652 * @return array
6654 function get_max_upload_sizes($sitebytes = 0, $coursebytes = 0, $modulebytes = 0, $custombytes = null) {
6655 global $CFG;
6657 if (!$maxsize = get_max_upload_file_size($sitebytes, $coursebytes, $modulebytes)) {
6658 return array();
6661 if ($sitebytes == 0) {
6662 // Will get the minimum of upload_max_filesize or post_max_size.
6663 $sitebytes = get_max_upload_file_size();
6666 $filesize = array();
6667 $sizelist = array(10240, 51200, 102400, 512000, 1048576, 2097152,
6668 5242880, 10485760, 20971520, 52428800, 104857600,
6669 262144000, 524288000, 786432000, 1073741824,
6670 2147483648, 4294967296, 8589934592);
6672 // If custombytes is given and is valid then add it to the list.
6673 if (is_number($custombytes) and $custombytes > 0) {
6674 $custombytes = (int)$custombytes;
6675 if (!in_array($custombytes, $sizelist)) {
6676 $sizelist[] = $custombytes;
6678 } else if (is_array($custombytes)) {
6679 $sizelist = array_unique(array_merge($sizelist, $custombytes));
6682 // Allow maxbytes to be selected if it falls outside the above boundaries.
6683 if (isset($CFG->maxbytes) && !in_array(get_real_size($CFG->maxbytes), $sizelist)) {
6684 // Note: get_real_size() is used in order to prevent problems with invalid values.
6685 $sizelist[] = get_real_size($CFG->maxbytes);
6688 foreach ($sizelist as $sizebytes) {
6689 if ($sizebytes < $maxsize && $sizebytes > 0) {
6690 $filesize[(string)intval($sizebytes)] = display_size($sizebytes);
6694 $limitlevel = '';
6695 $displaysize = '';
6696 if ($modulebytes &&
6697 (($modulebytes < $coursebytes || $coursebytes == 0) &&
6698 ($modulebytes < $sitebytes || $sitebytes == 0))) {
6699 $limitlevel = get_string('activity', 'core');
6700 $displaysize = display_size($modulebytes);
6701 $filesize[$modulebytes] = $displaysize; // Make sure the limit is also included in the list.
6703 } else if ($coursebytes && ($coursebytes < $sitebytes || $sitebytes == 0)) {
6704 $limitlevel = get_string('course', 'core');
6705 $displaysize = display_size($coursebytes);
6706 $filesize[$coursebytes] = $displaysize; // Make sure the limit is also included in the list.
6708 } else if ($sitebytes) {
6709 $limitlevel = get_string('site', 'core');
6710 $displaysize = display_size($sitebytes);
6711 $filesize[$sitebytes] = $displaysize; // Make sure the limit is also included in the list.
6714 krsort($filesize, SORT_NUMERIC);
6715 if ($limitlevel) {
6716 $params = (object) array('contextname' => $limitlevel, 'displaysize' => $displaysize);
6717 $filesize = array('0' => get_string('uploadlimitwithsize', 'core', $params)) + $filesize;
6720 return $filesize;
6724 * Returns an array with all the filenames in all subdirectories, relative to the given rootdir.
6726 * If excludefiles is defined, then that file/directory is ignored
6727 * If getdirs is true, then (sub)directories are included in the output
6728 * If getfiles is true, then files are included in the output
6729 * (at least one of these must be true!)
6731 * @todo Finish documenting this function. Add examples of $excludefile usage.
6733 * @param string $rootdir A given root directory to start from
6734 * @param string|array $excludefiles If defined then the specified file/directory is ignored
6735 * @param bool $descend If true then subdirectories are recursed as well
6736 * @param bool $getdirs If true then (sub)directories are included in the output
6737 * @param bool $getfiles If true then files are included in the output
6738 * @return array An array with all the filenames in all subdirectories, relative to the given rootdir
6740 function get_directory_list($rootdir, $excludefiles='', $descend=true, $getdirs=false, $getfiles=true) {
6742 $dirs = array();
6744 if (!$getdirs and !$getfiles) { // Nothing to show.
6745 return $dirs;
6748 if (!is_dir($rootdir)) { // Must be a directory.
6749 return $dirs;
6752 if (!$dir = opendir($rootdir)) { // Can't open it for some reason.
6753 return $dirs;
6756 if (!is_array($excludefiles)) {
6757 $excludefiles = array($excludefiles);
6760 while (false !== ($file = readdir($dir))) {
6761 $firstchar = substr($file, 0, 1);
6762 if ($firstchar == '.' or $file == 'CVS' or in_array($file, $excludefiles)) {
6763 continue;
6765 $fullfile = $rootdir .'/'. $file;
6766 if (filetype($fullfile) == 'dir') {
6767 if ($getdirs) {
6768 $dirs[] = $file;
6770 if ($descend) {
6771 $subdirs = get_directory_list($fullfile, $excludefiles, $descend, $getdirs, $getfiles);
6772 foreach ($subdirs as $subdir) {
6773 $dirs[] = $file .'/'. $subdir;
6776 } else if ($getfiles) {
6777 $dirs[] = $file;
6780 closedir($dir);
6782 asort($dirs);
6784 return $dirs;
6789 * Adds up all the files in a directory and works out the size.
6791 * @param string $rootdir The directory to start from
6792 * @param string $excludefile A file to exclude when summing directory size
6793 * @return int The summed size of all files and subfiles within the root directory
6795 function get_directory_size($rootdir, $excludefile='') {
6796 global $CFG;
6798 // Do it this way if we can, it's much faster.
6799 if (!empty($CFG->pathtodu) && is_executable(trim($CFG->pathtodu))) {
6800 $command = trim($CFG->pathtodu).' -sk '.escapeshellarg($rootdir);
6801 $output = null;
6802 $return = null;
6803 exec($command, $output, $return);
6804 if (is_array($output)) {
6805 // We told it to return k.
6806 return get_real_size(intval($output[0]).'k');
6810 if (!is_dir($rootdir)) {
6811 // Must be a directory.
6812 return 0;
6815 if (!$dir = @opendir($rootdir)) {
6816 // Can't open it for some reason.
6817 return 0;
6820 $size = 0;
6822 while (false !== ($file = readdir($dir))) {
6823 $firstchar = substr($file, 0, 1);
6824 if ($firstchar == '.' or $file == 'CVS' or $file == $excludefile) {
6825 continue;
6827 $fullfile = $rootdir .'/'. $file;
6828 if (filetype($fullfile) == 'dir') {
6829 $size += get_directory_size($fullfile, $excludefile);
6830 } else {
6831 $size += filesize($fullfile);
6834 closedir($dir);
6836 return $size;
6840 * Converts bytes into display form
6842 * @static string $gb Localized string for size in gigabytes
6843 * @static string $mb Localized string for size in megabytes
6844 * @static string $kb Localized string for size in kilobytes
6845 * @static string $b Localized string for size in bytes
6846 * @param int $size The size to convert to human readable form
6847 * @return string
6849 function display_size($size) {
6851 static $gb, $mb, $kb, $b;
6853 if ($size === USER_CAN_IGNORE_FILE_SIZE_LIMITS) {
6854 return get_string('unlimited');
6857 if (empty($gb)) {
6858 $gb = get_string('sizegb');
6859 $mb = get_string('sizemb');
6860 $kb = get_string('sizekb');
6861 $b = get_string('sizeb');
6864 if ($size >= 1073741824) {
6865 $size = round($size / 1073741824 * 10) / 10 . $gb;
6866 } else if ($size >= 1048576) {
6867 $size = round($size / 1048576 * 10) / 10 . $mb;
6868 } else if ($size >= 1024) {
6869 $size = round($size / 1024 * 10) / 10 . $kb;
6870 } else {
6871 $size = intval($size) .' '. $b; // File sizes over 2GB can not work in 32bit PHP anyway.
6873 return $size;
6877 * Cleans a given filename by removing suspicious or troublesome characters
6879 * @see clean_param()
6880 * @param string $string file name
6881 * @return string cleaned file name
6883 function clean_filename($string) {
6884 return clean_param($string, PARAM_FILE);
6887 // STRING TRANSLATION.
6890 * Returns the code for the current language
6892 * @category string
6893 * @return string
6895 function current_language() {
6896 global $CFG, $USER, $SESSION, $COURSE;
6898 if (!empty($SESSION->forcelang)) {
6899 // Allows overriding course-forced language (useful for admins to check
6900 // issues in courses whose language they don't understand).
6901 // Also used by some code to temporarily get language-related information in a
6902 // specific language (see force_current_language()).
6903 $return = $SESSION->forcelang;
6905 } else if (!empty($COURSE->id) and $COURSE->id != SITEID and !empty($COURSE->lang)) {
6906 // Course language can override all other settings for this page.
6907 $return = $COURSE->lang;
6909 } else if (!empty($SESSION->lang)) {
6910 // Session language can override other settings.
6911 $return = $SESSION->lang;
6913 } else if (!empty($USER->lang)) {
6914 $return = $USER->lang;
6916 } else if (isset($CFG->lang)) {
6917 $return = $CFG->lang;
6919 } else {
6920 $return = 'en';
6923 // Just in case this slipped in from somewhere by accident.
6924 $return = str_replace('_utf8', '', $return);
6926 return $return;
6930 * Returns parent language of current active language if defined
6932 * @category string
6933 * @param string $lang null means current language
6934 * @return string
6936 function get_parent_language($lang=null) {
6938 // Let's hack around the current language.
6939 if (!empty($lang)) {
6940 $oldforcelang = force_current_language($lang);
6943 $parentlang = get_string('parentlanguage', 'langconfig');
6944 if ($parentlang === 'en') {
6945 $parentlang = '';
6948 // Let's hack around the current language.
6949 if (!empty($lang)) {
6950 force_current_language($oldforcelang);
6953 return $parentlang;
6957 * Force the current language to get strings and dates localised in the given language.
6959 * After calling this function, all strings will be provided in the given language
6960 * until this function is called again, or equivalent code is run.
6962 * @param string $language
6963 * @return string previous $SESSION->forcelang value
6965 function force_current_language($language) {
6966 global $SESSION;
6967 $sessionforcelang = isset($SESSION->forcelang) ? $SESSION->forcelang : '';
6968 if ($language !== $sessionforcelang) {
6969 // Seting forcelang to null or an empty string disables it's effect.
6970 if (empty($language) || get_string_manager()->translation_exists($language, false)) {
6971 $SESSION->forcelang = $language;
6972 moodle_setlocale();
6975 return $sessionforcelang;
6979 * Returns current string_manager instance.
6981 * The param $forcereload is needed for CLI installer only where the string_manager instance
6982 * must be replaced during the install.php script life time.
6984 * @category string
6985 * @param bool $forcereload shall the singleton be released and new instance created instead?
6986 * @return core_string_manager
6988 function get_string_manager($forcereload=false) {
6989 global $CFG;
6991 static $singleton = null;
6993 if ($forcereload) {
6994 $singleton = null;
6996 if ($singleton === null) {
6997 if (empty($CFG->early_install_lang)) {
6999 if (empty($CFG->langlist)) {
7000 $translist = array();
7001 } else {
7002 $translist = explode(',', $CFG->langlist);
7003 $translist = array_map('trim', $translist);
7006 if (!empty($CFG->config_php_settings['customstringmanager'])) {
7007 $classname = $CFG->config_php_settings['customstringmanager'];
7009 if (class_exists($classname)) {
7010 $implements = class_implements($classname);
7012 if (isset($implements['core_string_manager'])) {
7013 $singleton = new $classname($CFG->langotherroot, $CFG->langlocalroot, $translist);
7014 return $singleton;
7016 } else {
7017 debugging('Unable to instantiate custom string manager: class '.$classname.
7018 ' does not implement the core_string_manager interface.');
7021 } else {
7022 debugging('Unable to instantiate custom string manager: class '.$classname.' can not be found.');
7026 $singleton = new core_string_manager_standard($CFG->langotherroot, $CFG->langlocalroot, $translist);
7028 } else {
7029 $singleton = new core_string_manager_install();
7033 return $singleton;
7037 * Returns a localized string.
7039 * Returns the translated string specified by $identifier as
7040 * for $module. Uses the same format files as STphp.
7041 * $a is an object, string or number that can be used
7042 * within translation strings
7044 * eg 'hello {$a->firstname} {$a->lastname}'
7045 * or 'hello {$a}'
7047 * If you would like to directly echo the localized string use
7048 * the function {@link print_string()}
7050 * Example usage of this function involves finding the string you would
7051 * like a local equivalent of and using its identifier and module information
7052 * to retrieve it.<br/>
7053 * If you open moodle/lang/en/moodle.php and look near line 278
7054 * you will find a string to prompt a user for their word for 'course'
7055 * <code>
7056 * $string['course'] = 'Course';
7057 * </code>
7058 * So if you want to display the string 'Course'
7059 * in any language that supports it on your site
7060 * you just need to use the identifier 'course'
7061 * <code>
7062 * $mystring = '<strong>'. get_string('course') .'</strong>';
7063 * or
7064 * </code>
7065 * If the string you want is in another file you'd take a slightly
7066 * different approach. Looking in moodle/lang/en/calendar.php you find
7067 * around line 75:
7068 * <code>
7069 * $string['typecourse'] = 'Course event';
7070 * </code>
7071 * If you want to display the string "Course event" in any language
7072 * supported you would use the identifier 'typecourse' and the module 'calendar'
7073 * (because it is in the file calendar.php):
7074 * <code>
7075 * $mystring = '<h1>'. get_string('typecourse', 'calendar') .'</h1>';
7076 * </code>
7078 * As a last resort, should the identifier fail to map to a string
7079 * the returned string will be [[ $identifier ]]
7081 * In Moodle 2.3 there is a new argument to this function $lazyload.
7082 * Setting $lazyload to true causes get_string to return a lang_string object
7083 * rather than the string itself. The fetching of the string is then put off until
7084 * the string object is first used. The object can be used by calling it's out
7085 * method or by casting the object to a string, either directly e.g.
7086 * (string)$stringobject
7087 * or indirectly by using the string within another string or echoing it out e.g.
7088 * echo $stringobject
7089 * return "<p>{$stringobject}</p>";
7090 * It is worth noting that using $lazyload and attempting to use the string as an
7091 * array key will cause a fatal error as objects cannot be used as array keys.
7092 * But you should never do that anyway!
7093 * For more information {@link lang_string}
7095 * @category string
7096 * @param string $identifier The key identifier for the localized string
7097 * @param string $component The module where the key identifier is stored,
7098 * usually expressed as the filename in the language pack without the
7099 * .php on the end but can also be written as mod/forum or grade/export/xls.
7100 * If none is specified then moodle.php is used.
7101 * @param string|object|array $a An object, string or number that can be used
7102 * within translation strings
7103 * @param bool $lazyload If set to true a string object is returned instead of
7104 * the string itself. The string then isn't calculated until it is first used.
7105 * @return string The localized string.
7106 * @throws coding_exception
7108 function get_string($identifier, $component = '', $a = null, $lazyload = false) {
7109 global $CFG;
7111 // If the lazy load argument has been supplied return a lang_string object
7112 // instead.
7113 // We need to make sure it is true (and a bool) as you will see below there
7114 // used to be a forth argument at one point.
7115 if ($lazyload === true) {
7116 return new lang_string($identifier, $component, $a);
7119 if ($CFG->debugdeveloper && clean_param($identifier, PARAM_STRINGID) === '') {
7120 throw new coding_exception('Invalid string identifier. The identifier cannot be empty. Please fix your get_string() call.', DEBUG_DEVELOPER);
7123 // There is now a forth argument again, this time it is a boolean however so
7124 // we can still check for the old extralocations parameter.
7125 if (!is_bool($lazyload) && !empty($lazyload)) {
7126 debugging('extralocations parameter in get_string() is not supported any more, please use standard lang locations only.');
7129 if (strpos($component, '/') !== false) {
7130 debugging('The module name you passed to get_string is the deprecated format ' .
7131 'like mod/mymod or block/myblock. The correct form looks like mymod, or block_myblock.' , DEBUG_DEVELOPER);
7132 $componentpath = explode('/', $component);
7134 switch ($componentpath[0]) {
7135 case 'mod':
7136 $component = $componentpath[1];
7137 break;
7138 case 'blocks':
7139 case 'block':
7140 $component = 'block_'.$componentpath[1];
7141 break;
7142 case 'enrol':
7143 $component = 'enrol_'.$componentpath[1];
7144 break;
7145 case 'format':
7146 $component = 'format_'.$componentpath[1];
7147 break;
7148 case 'grade':
7149 $component = 'grade'.$componentpath[1].'_'.$componentpath[2];
7150 break;
7154 $result = get_string_manager()->get_string($identifier, $component, $a);
7156 // Debugging feature lets you display string identifier and component.
7157 if (isset($CFG->debugstringids) && $CFG->debugstringids && optional_param('strings', 0, PARAM_INT)) {
7158 $result .= ' {' . $identifier . '/' . $component . '}';
7160 return $result;
7164 * Converts an array of strings to their localized value.
7166 * @param array $array An array of strings
7167 * @param string $component The language module that these strings can be found in.
7168 * @return stdClass translated strings.
7170 function get_strings($array, $component = '') {
7171 $string = new stdClass;
7172 foreach ($array as $item) {
7173 $string->$item = get_string($item, $component);
7175 return $string;
7179 * Prints out a translated string.
7181 * Prints out a translated string using the return value from the {@link get_string()} function.
7183 * Example usage of this function when the string is in the moodle.php file:<br/>
7184 * <code>
7185 * echo '<strong>';
7186 * print_string('course');
7187 * echo '</strong>';
7188 * </code>
7190 * Example usage of this function when the string is not in the moodle.php file:<br/>
7191 * <code>
7192 * echo '<h1>';
7193 * print_string('typecourse', 'calendar');
7194 * echo '</h1>';
7195 * </code>
7197 * @category string
7198 * @param string $identifier The key identifier for the localized string
7199 * @param string $component The module where the key identifier is stored. If none is specified then moodle.php is used.
7200 * @param string|object|array $a An object, string or number that can be used within translation strings
7202 function print_string($identifier, $component = '', $a = null) {
7203 echo get_string($identifier, $component, $a);
7207 * Returns a list of charset codes
7209 * Returns a list of charset codes. It's hardcoded, so they should be added manually
7210 * (checking that such charset is supported by the texlib library!)
7212 * @return array And associative array with contents in the form of charset => charset
7214 function get_list_of_charsets() {
7216 $charsets = array(
7217 'EUC-JP' => 'EUC-JP',
7218 'ISO-2022-JP'=> 'ISO-2022-JP',
7219 'ISO-8859-1' => 'ISO-8859-1',
7220 'SHIFT-JIS' => 'SHIFT-JIS',
7221 'GB2312' => 'GB2312',
7222 'GB18030' => 'GB18030', // GB18030 not supported by typo and mbstring.
7223 'UTF-8' => 'UTF-8');
7225 asort($charsets);
7227 return $charsets;
7231 * Returns a list of valid and compatible themes
7233 * @return array
7235 function get_list_of_themes() {
7236 global $CFG;
7238 $themes = array();
7240 if (!empty($CFG->themelist)) { // Use admin's list of themes.
7241 $themelist = explode(',', $CFG->themelist);
7242 } else {
7243 $themelist = array_keys(core_component::get_plugin_list("theme"));
7246 foreach ($themelist as $key => $themename) {
7247 $theme = theme_config::load($themename);
7248 $themes[$themename] = $theme;
7251 core_collator::asort_objects_by_method($themes, 'get_theme_name');
7253 return $themes;
7257 * Factory function for emoticon_manager
7259 * @return emoticon_manager singleton
7261 function get_emoticon_manager() {
7262 static $singleton = null;
7264 if (is_null($singleton)) {
7265 $singleton = new emoticon_manager();
7268 return $singleton;
7272 * Provides core support for plugins that have to deal with emoticons (like HTML editor or emoticon filter).
7274 * Whenever this manager mentiones 'emoticon object', the following data
7275 * structure is expected: stdClass with properties text, imagename, imagecomponent,
7276 * altidentifier and altcomponent
7278 * @see admin_setting_emoticons
7280 * @copyright 2010 David Mudrak
7281 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
7283 class emoticon_manager {
7286 * Returns the currently enabled emoticons
7288 * @return array of emoticon objects
7290 public function get_emoticons() {
7291 global $CFG;
7293 if (empty($CFG->emoticons)) {
7294 return array();
7297 $emoticons = $this->decode_stored_config($CFG->emoticons);
7299 if (!is_array($emoticons)) {
7300 // Something is wrong with the format of stored setting.
7301 debugging('Invalid format of emoticons setting, please resave the emoticons settings form', DEBUG_NORMAL);
7302 return array();
7305 return $emoticons;
7309 * Converts emoticon object into renderable pix_emoticon object
7311 * @param stdClass $emoticon emoticon object
7312 * @param array $attributes explicit HTML attributes to set
7313 * @return pix_emoticon
7315 public function prepare_renderable_emoticon(stdClass $emoticon, array $attributes = array()) {
7316 $stringmanager = get_string_manager();
7317 if ($stringmanager->string_exists($emoticon->altidentifier, $emoticon->altcomponent)) {
7318 $alt = get_string($emoticon->altidentifier, $emoticon->altcomponent);
7319 } else {
7320 $alt = s($emoticon->text);
7322 return new pix_emoticon($emoticon->imagename, $alt, $emoticon->imagecomponent, $attributes);
7326 * Encodes the array of emoticon objects into a string storable in config table
7328 * @see self::decode_stored_config()
7329 * @param array $emoticons array of emtocion objects
7330 * @return string
7332 public function encode_stored_config(array $emoticons) {
7333 return json_encode($emoticons);
7337 * Decodes the string into an array of emoticon objects
7339 * @see self::encode_stored_config()
7340 * @param string $encoded
7341 * @return string|null
7343 public function decode_stored_config($encoded) {
7344 $decoded = json_decode($encoded);
7345 if (!is_array($decoded)) {
7346 return null;
7348 return $decoded;
7352 * Returns default set of emoticons supported by Moodle
7354 * @return array of sdtClasses
7356 public function default_emoticons() {
7357 return array(
7358 $this->prepare_emoticon_object(":-)", 's/smiley', 'smiley'),
7359 $this->prepare_emoticon_object(":)", 's/smiley', 'smiley'),
7360 $this->prepare_emoticon_object(":-D", 's/biggrin', 'biggrin'),
7361 $this->prepare_emoticon_object(";-)", 's/wink', 'wink'),
7362 $this->prepare_emoticon_object(":-/", 's/mixed', 'mixed'),
7363 $this->prepare_emoticon_object("V-.", 's/thoughtful', 'thoughtful'),
7364 $this->prepare_emoticon_object(":-P", 's/tongueout', 'tongueout'),
7365 $this->prepare_emoticon_object(":-p", 's/tongueout', 'tongueout'),
7366 $this->prepare_emoticon_object("B-)", 's/cool', 'cool'),
7367 $this->prepare_emoticon_object("^-)", 's/approve', 'approve'),
7368 $this->prepare_emoticon_object("8-)", 's/wideeyes', 'wideeyes'),
7369 $this->prepare_emoticon_object(":o)", 's/clown', 'clown'),
7370 $this->prepare_emoticon_object(":-(", 's/sad', 'sad'),
7371 $this->prepare_emoticon_object(":(", 's/sad', 'sad'),
7372 $this->prepare_emoticon_object("8-.", 's/shy', 'shy'),
7373 $this->prepare_emoticon_object(":-I", 's/blush', 'blush'),
7374 $this->prepare_emoticon_object(":-X", 's/kiss', 'kiss'),
7375 $this->prepare_emoticon_object("8-o", 's/surprise', 'surprise'),
7376 $this->prepare_emoticon_object("P-|", 's/blackeye', 'blackeye'),
7377 $this->prepare_emoticon_object("8-[", 's/angry', 'angry'),
7378 $this->prepare_emoticon_object("(grr)", 's/angry', 'angry'),
7379 $this->prepare_emoticon_object("xx-P", 's/dead', 'dead'),
7380 $this->prepare_emoticon_object("|-.", 's/sleepy', 'sleepy'),
7381 $this->prepare_emoticon_object("}-]", 's/evil', 'evil'),
7382 $this->prepare_emoticon_object("(h)", 's/heart', 'heart'),
7383 $this->prepare_emoticon_object("(heart)", 's/heart', 'heart'),
7384 $this->prepare_emoticon_object("(y)", 's/yes', 'yes', 'core'),
7385 $this->prepare_emoticon_object("(n)", 's/no', 'no', 'core'),
7386 $this->prepare_emoticon_object("(martin)", 's/martin', 'martin'),
7387 $this->prepare_emoticon_object("( )", 's/egg', 'egg'),
7392 * Helper method preparing the stdClass with the emoticon properties
7394 * @param string|array $text or array of strings
7395 * @param string $imagename to be used by {@link pix_emoticon}
7396 * @param string $altidentifier alternative string identifier, null for no alt
7397 * @param string $altcomponent where the alternative string is defined
7398 * @param string $imagecomponent to be used by {@link pix_emoticon}
7399 * @return stdClass
7401 protected function prepare_emoticon_object($text, $imagename, $altidentifier = null,
7402 $altcomponent = 'core_pix', $imagecomponent = 'core') {
7403 return (object)array(
7404 'text' => $text,
7405 'imagename' => $imagename,
7406 'imagecomponent' => $imagecomponent,
7407 'altidentifier' => $altidentifier,
7408 'altcomponent' => $altcomponent,
7413 // ENCRYPTION.
7416 * rc4encrypt
7418 * @param string $data Data to encrypt.
7419 * @return string The now encrypted data.
7421 function rc4encrypt($data) {
7422 return endecrypt(get_site_identifier(), $data, '');
7426 * rc4decrypt
7428 * @param string $data Data to decrypt.
7429 * @return string The now decrypted data.
7431 function rc4decrypt($data) {
7432 return endecrypt(get_site_identifier(), $data, 'de');
7436 * Based on a class by Mukul Sabharwal [mukulsabharwal @ yahoo.com]
7438 * @todo Finish documenting this function
7440 * @param string $pwd The password to use when encrypting or decrypting
7441 * @param string $data The data to be decrypted/encrypted
7442 * @param string $case Either 'de' for decrypt or '' for encrypt
7443 * @return string
7445 function endecrypt ($pwd, $data, $case) {
7447 if ($case == 'de') {
7448 $data = urldecode($data);
7451 $key[] = '';
7452 $box[] = '';
7453 $pwdlength = strlen($pwd);
7455 for ($i = 0; $i <= 255; $i++) {
7456 $key[$i] = ord(substr($pwd, ($i % $pwdlength), 1));
7457 $box[$i] = $i;
7460 $x = 0;
7462 for ($i = 0; $i <= 255; $i++) {
7463 $x = ($x + $box[$i] + $key[$i]) % 256;
7464 $tempswap = $box[$i];
7465 $box[$i] = $box[$x];
7466 $box[$x] = $tempswap;
7469 $cipher = '';
7471 $a = 0;
7472 $j = 0;
7474 for ($i = 0; $i < strlen($data); $i++) {
7475 $a = ($a + 1) % 256;
7476 $j = ($j + $box[$a]) % 256;
7477 $temp = $box[$a];
7478 $box[$a] = $box[$j];
7479 $box[$j] = $temp;
7480 $k = $box[(($box[$a] + $box[$j]) % 256)];
7481 $cipherby = ord(substr($data, $i, 1)) ^ $k;
7482 $cipher .= chr($cipherby);
7485 if ($case == 'de') {
7486 $cipher = urldecode(urlencode($cipher));
7487 } else {
7488 $cipher = urlencode($cipher);
7491 return $cipher;
7494 // ENVIRONMENT CHECKING.
7497 * This method validates a plug name. It is much faster than calling clean_param.
7499 * @param string $name a string that might be a plugin name.
7500 * @return bool if this string is a valid plugin name.
7502 function is_valid_plugin_name($name) {
7503 // This does not work for 'mod', bad luck, use any other type.
7504 return core_component::is_valid_plugin_name('tool', $name);
7508 * Get a list of all the plugins of a given type that define a certain API function
7509 * in a certain file. The plugin component names and function names are returned.
7511 * @param string $plugintype the type of plugin, e.g. 'mod' or 'report'.
7512 * @param string $function the part of the name of the function after the
7513 * frankenstyle prefix. e.g 'hook' if you are looking for functions with
7514 * names like report_courselist_hook.
7515 * @param string $file the name of file within the plugin that defines the
7516 * function. Defaults to lib.php.
7517 * @return array with frankenstyle plugin names as keys (e.g. 'report_courselist', 'mod_forum')
7518 * and the function names as values (e.g. 'report_courselist_hook', 'forum_hook').
7520 function get_plugin_list_with_function($plugintype, $function, $file = 'lib.php') {
7521 global $CFG;
7523 // We don't include here as all plugin types files would be included.
7524 $plugins = get_plugins_with_function($function, $file, false);
7526 if (empty($plugins[$plugintype])) {
7527 return array();
7530 $allplugins = core_component::get_plugin_list($plugintype);
7532 // Reformat the array and include the files.
7533 $pluginfunctions = array();
7534 foreach ($plugins[$plugintype] as $pluginname => $functionname) {
7536 // Check that it has not been removed and the file is still available.
7537 if (!empty($allplugins[$pluginname])) {
7539 $filepath = $allplugins[$pluginname] . DIRECTORY_SEPARATOR . $file;
7540 if (file_exists($filepath)) {
7541 include_once($filepath);
7542 $pluginfunctions[$plugintype . '_' . $pluginname] = $functionname;
7547 return $pluginfunctions;
7551 * Get a list of all the plugins that define a certain API function in a certain file.
7553 * @param string $function the part of the name of the function after the
7554 * frankenstyle prefix. e.g 'hook' if you are looking for functions with
7555 * names like report_courselist_hook.
7556 * @param string $file the name of file within the plugin that defines the
7557 * function. Defaults to lib.php.
7558 * @param bool $include Whether to include the files that contain the functions or not.
7559 * @return array with [plugintype][plugin] = functionname
7561 function get_plugins_with_function($function, $file = 'lib.php', $include = true) {
7562 global $CFG;
7564 if (during_initial_install() || isset($CFG->upgraderunning)) {
7565 // API functions _must not_ be called during an installation or upgrade.
7566 return [];
7569 $cache = \cache::make('core', 'plugin_functions');
7571 // Including both although I doubt that we will find two functions definitions with the same name.
7572 // Clearning the filename as cache_helper::hash_key only allows a-zA-Z0-9_.
7573 $key = $function . '_' . clean_param($file, PARAM_ALPHA);
7574 $pluginfunctions = $cache->get($key);
7576 // Use the plugin manager to check that plugins are currently installed.
7577 $pluginmanager = \core_plugin_manager::instance();
7579 if ($pluginfunctions !== false) {
7581 // Checking that the files are still available.
7582 foreach ($pluginfunctions as $plugintype => $plugins) {
7584 $allplugins = \core_component::get_plugin_list($plugintype);
7585 $installedplugins = $pluginmanager->get_installed_plugins($plugintype);
7586 foreach ($plugins as $plugin => $function) {
7587 if (!isset($installedplugins[$plugin])) {
7588 // Plugin code is still present on disk but it is not installed.
7589 unset($pluginfunctions[$plugintype][$plugin]);
7590 continue;
7593 // Cache might be out of sync with the codebase, skip the plugin if it is not available.
7594 if (empty($allplugins[$plugin])) {
7595 unset($pluginfunctions[$plugintype][$plugin]);
7596 continue;
7599 $fileexists = file_exists($allplugins[$plugin] . DIRECTORY_SEPARATOR . $file);
7600 if ($include && $fileexists) {
7601 // Include the files if it was requested.
7602 include_once($allplugins[$plugin] . DIRECTORY_SEPARATOR . $file);
7603 } else if (!$fileexists) {
7604 // If the file is not available any more it should not be returned.
7605 unset($pluginfunctions[$plugintype][$plugin]);
7609 return $pluginfunctions;
7612 $pluginfunctions = array();
7614 // To fill the cached. Also, everything should continue working with cache disabled.
7615 $plugintypes = \core_component::get_plugin_types();
7616 foreach ($plugintypes as $plugintype => $unused) {
7618 // We need to include files here.
7619 $pluginswithfile = \core_component::get_plugin_list_with_file($plugintype, $file, true);
7620 $installedplugins = $pluginmanager->get_installed_plugins($plugintype);
7621 foreach ($pluginswithfile as $plugin => $notused) {
7623 if (!isset($installedplugins[$plugin])) {
7624 continue;
7627 $fullfunction = $plugintype . '_' . $plugin . '_' . $function;
7629 $pluginfunction = false;
7630 if (function_exists($fullfunction)) {
7631 // Function exists with standard name. Store, indexed by frankenstyle name of plugin.
7632 $pluginfunction = $fullfunction;
7634 } else if ($plugintype === 'mod') {
7635 // For modules, we also allow plugin without full frankenstyle but just starting with the module name.
7636 $shortfunction = $plugin . '_' . $function;
7637 if (function_exists($shortfunction)) {
7638 $pluginfunction = $shortfunction;
7642 if ($pluginfunction) {
7643 if (empty($pluginfunctions[$plugintype])) {
7644 $pluginfunctions[$plugintype] = array();
7646 $pluginfunctions[$plugintype][$plugin] = $pluginfunction;
7651 $cache->set($key, $pluginfunctions);
7653 return $pluginfunctions;
7658 * Lists plugin-like directories within specified directory
7660 * This function was originally used for standard Moodle plugins, please use
7661 * new core_component::get_plugin_list() now.
7663 * This function is used for general directory listing and backwards compatility.
7665 * @param string $directory relative directory from root
7666 * @param string $exclude dir name to exclude from the list (defaults to none)
7667 * @param string $basedir full path to the base dir where $plugin resides (defaults to $CFG->dirroot)
7668 * @return array Sorted array of directory names found under the requested parameters
7670 function get_list_of_plugins($directory='mod', $exclude='', $basedir='') {
7671 global $CFG;
7673 $plugins = array();
7675 if (empty($basedir)) {
7676 $basedir = $CFG->dirroot .'/'. $directory;
7678 } else {
7679 $basedir = $basedir .'/'. $directory;
7682 if ($CFG->debugdeveloper and empty($exclude)) {
7683 // Make sure devs do not use this to list normal plugins,
7684 // this is intended for general directories that are not plugins!
7686 $subtypes = core_component::get_plugin_types();
7687 if (in_array($basedir, $subtypes)) {
7688 debugging('get_list_of_plugins() should not be used to list real plugins, use core_component::get_plugin_list() instead!', DEBUG_DEVELOPER);
7690 unset($subtypes);
7693 if (file_exists($basedir) && filetype($basedir) == 'dir') {
7694 if (!$dirhandle = opendir($basedir)) {
7695 debugging("Directory permission error for plugin ({$directory}). Directory exists but cannot be read.", DEBUG_DEVELOPER);
7696 return array();
7698 while (false !== ($dir = readdir($dirhandle))) {
7699 // Func: strpos is marginally but reliably faster than substr($dir, 0, 1).
7700 if (strpos($dir, '.') === 0 or $dir === 'CVS' or $dir === '_vti_cnf' or $dir === 'simpletest' or $dir === 'yui' or
7701 $dir === 'tests' or $dir === 'classes' or $dir === $exclude) {
7702 continue;
7704 if (filetype($basedir .'/'. $dir) != 'dir') {
7705 continue;
7707 $plugins[] = $dir;
7709 closedir($dirhandle);
7711 if ($plugins) {
7712 asort($plugins);
7714 return $plugins;
7718 * Invoke plugin's callback functions
7720 * @param string $type plugin type e.g. 'mod'
7721 * @param string $name plugin name
7722 * @param string $feature feature name
7723 * @param string $action feature's action
7724 * @param array $params parameters of callback function, should be an array
7725 * @param mixed $default default value if callback function hasn't been defined, or if it retursn null.
7726 * @return mixed
7728 * @todo Decide about to deprecate and drop plugin_callback() - MDL-30743
7730 function plugin_callback($type, $name, $feature, $action, $params = null, $default = null) {
7731 return component_callback($type . '_' . $name, $feature . '_' . $action, (array) $params, $default);
7735 * Invoke component's callback functions
7737 * @param string $component frankenstyle component name, e.g. 'mod_quiz'
7738 * @param string $function the rest of the function name, e.g. 'cron' will end up calling 'mod_quiz_cron'
7739 * @param array $params parameters of callback function
7740 * @param mixed $default default value if callback function hasn't been defined, or if it retursn null.
7741 * @return mixed
7743 function component_callback($component, $function, array $params = array(), $default = null) {
7745 $functionname = component_callback_exists($component, $function);
7747 if ($functionname) {
7748 // Function exists, so just return function result.
7749 $ret = call_user_func_array($functionname, $params);
7750 if (is_null($ret)) {
7751 return $default;
7752 } else {
7753 return $ret;
7756 return $default;
7760 * Determine if a component callback exists and return the function name to call. Note that this
7761 * function will include the required library files so that the functioname returned can be
7762 * called directly.
7764 * @param string $component frankenstyle component name, e.g. 'mod_quiz'
7765 * @param string $function the rest of the function name, e.g. 'cron' will end up calling 'mod_quiz_cron'
7766 * @return mixed Complete function name to call if the callback exists or false if it doesn't.
7767 * @throws coding_exception if invalid component specfied
7769 function component_callback_exists($component, $function) {
7770 global $CFG; // This is needed for the inclusions.
7772 $cleancomponent = clean_param($component, PARAM_COMPONENT);
7773 if (empty($cleancomponent)) {
7774 throw new coding_exception('Invalid component used in plugin/component_callback():' . $component);
7776 $component = $cleancomponent;
7778 list($type, $name) = core_component::normalize_component($component);
7779 $component = $type . '_' . $name;
7781 $oldfunction = $name.'_'.$function;
7782 $function = $component.'_'.$function;
7784 $dir = core_component::get_component_directory($component);
7785 if (empty($dir)) {
7786 throw new coding_exception('Invalid component used in plugin/component_callback():' . $component);
7789 // Load library and look for function.
7790 if (file_exists($dir.'/lib.php')) {
7791 require_once($dir.'/lib.php');
7794 if (!function_exists($function) and function_exists($oldfunction)) {
7795 if ($type !== 'mod' and $type !== 'core') {
7796 debugging("Please use new function name $function instead of legacy $oldfunction", DEBUG_DEVELOPER);
7798 $function = $oldfunction;
7801 if (function_exists($function)) {
7802 return $function;
7804 return false;
7808 * Call the specified callback method on the provided class.
7810 * If the callback returns null, then the default value is returned instead.
7811 * If the class does not exist, then the default value is returned.
7813 * @param string $classname The name of the class to call upon.
7814 * @param string $methodname The name of the staticically defined method on the class.
7815 * @param array $params The arguments to pass into the method.
7816 * @param mixed $default The default value.
7817 * @return mixed The return value.
7819 function component_class_callback($classname, $methodname, array $params, $default = null) {
7820 if (!class_exists($classname)) {
7821 return $default;
7824 if (!method_exists($classname, $methodname)) {
7825 return $default;
7828 $fullfunction = $classname . '::' . $methodname;
7829 $result = call_user_func_array($fullfunction, $params);
7831 if (null === $result) {
7832 return $default;
7833 } else {
7834 return $result;
7839 * Checks whether a plugin supports a specified feature.
7841 * @param string $type Plugin type e.g. 'mod'
7842 * @param string $name Plugin name e.g. 'forum'
7843 * @param string $feature Feature code (FEATURE_xx constant)
7844 * @param mixed $default default value if feature support unknown
7845 * @return mixed Feature result (false if not supported, null if feature is unknown,
7846 * otherwise usually true but may have other feature-specific value such as array)
7847 * @throws coding_exception
7849 function plugin_supports($type, $name, $feature, $default = null) {
7850 global $CFG;
7852 if ($type === 'mod' and $name === 'NEWMODULE') {
7853 // Somebody forgot to rename the module template.
7854 return false;
7857 $component = clean_param($type . '_' . $name, PARAM_COMPONENT);
7858 if (empty($component)) {
7859 throw new coding_exception('Invalid component used in plugin_supports():' . $type . '_' . $name);
7862 $function = null;
7864 if ($type === 'mod') {
7865 // We need this special case because we support subplugins in modules,
7866 // otherwise it would end up in infinite loop.
7867 if (file_exists("$CFG->dirroot/mod/$name/lib.php")) {
7868 include_once("$CFG->dirroot/mod/$name/lib.php");
7869 $function = $component.'_supports';
7870 if (!function_exists($function)) {
7871 // Legacy non-frankenstyle function name.
7872 $function = $name.'_supports';
7876 } else {
7877 if (!$path = core_component::get_plugin_directory($type, $name)) {
7878 // Non existent plugin type.
7879 return false;
7881 if (file_exists("$path/lib.php")) {
7882 include_once("$path/lib.php");
7883 $function = $component.'_supports';
7887 if ($function and function_exists($function)) {
7888 $supports = $function($feature);
7889 if (is_null($supports)) {
7890 // Plugin does not know - use default.
7891 return $default;
7892 } else {
7893 return $supports;
7897 // Plugin does not care, so use default.
7898 return $default;
7902 * Returns true if the current version of PHP is greater that the specified one.
7904 * @todo Check PHP version being required here is it too low?
7906 * @param string $version The version of php being tested.
7907 * @return bool
7909 function check_php_version($version='5.2.4') {
7910 return (version_compare(phpversion(), $version) >= 0);
7914 * Determine if moodle installation requires update.
7916 * Checks version numbers of main code and all plugins to see
7917 * if there are any mismatches.
7919 * @return bool
7921 function moodle_needs_upgrading() {
7922 global $CFG;
7924 if (empty($CFG->version)) {
7925 return true;
7928 // There is no need to purge plugininfo caches here because
7929 // these caches are not used during upgrade and they are purged after
7930 // every upgrade.
7932 if (empty($CFG->allversionshash)) {
7933 return true;
7936 $hash = core_component::get_all_versions_hash();
7938 return ($hash !== $CFG->allversionshash);
7942 * Returns the major version of this site
7944 * Moodle version numbers consist of three numbers separated by a dot, for
7945 * example 1.9.11 or 2.0.2. The first two numbers, like 1.9 or 2.0, represent so
7946 * called major version. This function extracts the major version from either
7947 * $CFG->release (default) or eventually from the $release variable defined in
7948 * the main version.php.
7950 * @param bool $fromdisk should the version if source code files be used
7951 * @return string|false the major version like '2.3', false if could not be determined
7953 function moodle_major_version($fromdisk = false) {
7954 global $CFG;
7956 if ($fromdisk) {
7957 $release = null;
7958 require($CFG->dirroot.'/version.php');
7959 if (empty($release)) {
7960 return false;
7963 } else {
7964 if (empty($CFG->release)) {
7965 return false;
7967 $release = $CFG->release;
7970 if (preg_match('/^[0-9]+\.[0-9]+/', $release, $matches)) {
7971 return $matches[0];
7972 } else {
7973 return false;
7977 // MISCELLANEOUS.
7980 * Sets the system locale
7982 * @category string
7983 * @param string $locale Can be used to force a locale
7985 function moodle_setlocale($locale='') {
7986 global $CFG;
7988 static $currentlocale = ''; // Last locale caching.
7990 $oldlocale = $currentlocale;
7992 // Fetch the correct locale based on ostype.
7993 if ($CFG->ostype == 'WINDOWS') {
7994 $stringtofetch = 'localewin';
7995 } else {
7996 $stringtofetch = 'locale';
7999 // The priority is the same as in get_string() - parameter, config, course, session, user, global language.
8000 if (!empty($locale)) {
8001 $currentlocale = $locale;
8002 } else if (!empty($CFG->locale)) { // Override locale for all language packs.
8003 $currentlocale = $CFG->locale;
8004 } else {
8005 $currentlocale = get_string($stringtofetch, 'langconfig');
8008 // Do nothing if locale already set up.
8009 if ($oldlocale == $currentlocale) {
8010 return;
8013 // Due to some strange BUG we cannot set the LC_TIME directly, so we fetch current values,
8014 // set LC_ALL and then set values again. Just wondering why we cannot set LC_ALL only??? - stronk7
8015 // Some day, numeric, monetary and other categories should be set too, I think. :-/.
8017 // Get current values.
8018 $monetary= setlocale (LC_MONETARY, 0);
8019 $numeric = setlocale (LC_NUMERIC, 0);
8020 $ctype = setlocale (LC_CTYPE, 0);
8021 if ($CFG->ostype != 'WINDOWS') {
8022 $messages= setlocale (LC_MESSAGES, 0);
8024 // Set locale to all.
8025 $result = setlocale (LC_ALL, $currentlocale);
8026 // If setting of locale fails try the other utf8 or utf-8 variant,
8027 // some operating systems support both (Debian), others just one (OSX).
8028 if ($result === false) {
8029 if (stripos($currentlocale, '.UTF-8') !== false) {
8030 $newlocale = str_ireplace('.UTF-8', '.UTF8', $currentlocale);
8031 setlocale (LC_ALL, $newlocale);
8032 } else if (stripos($currentlocale, '.UTF8') !== false) {
8033 $newlocale = str_ireplace('.UTF8', '.UTF-8', $currentlocale);
8034 setlocale (LC_ALL, $newlocale);
8037 // Set old values.
8038 setlocale (LC_MONETARY, $monetary);
8039 setlocale (LC_NUMERIC, $numeric);
8040 if ($CFG->ostype != 'WINDOWS') {
8041 setlocale (LC_MESSAGES, $messages);
8043 if ($currentlocale == 'tr_TR' or $currentlocale == 'tr_TR.UTF-8') {
8044 // To workaround a well-known PHP problem with Turkish letter Ii.
8045 setlocale (LC_CTYPE, $ctype);
8050 * Count words in a string.
8052 * Words are defined as things between whitespace.
8054 * @category string
8055 * @param string $string The text to be searched for words.
8056 * @return int The count of words in the specified string
8058 function count_words($string) {
8059 $string = strip_tags($string);
8060 // Decode HTML entities.
8061 $string = html_entity_decode($string);
8062 // Replace underscores (which are classed as word characters) with spaces.
8063 $string = preg_replace('/_/u', ' ', $string);
8064 // Remove any characters that shouldn't be treated as word boundaries.
8065 $string = preg_replace('/[\'"’-]/u', '', $string);
8066 // Remove dots and commas from within numbers only.
8067 $string = preg_replace('/([0-9])[.,]([0-9])/u', '$1$2', $string);
8069 return count(preg_split('/\w\b/u', $string)) - 1;
8073 * Count letters in a string.
8075 * Letters are defined as chars not in tags and different from whitespace.
8077 * @category string
8078 * @param string $string The text to be searched for letters.
8079 * @return int The count of letters in the specified text.
8081 function count_letters($string) {
8082 $string = strip_tags($string); // Tags are out now.
8083 $string = preg_replace('/[[:space:]]*/', '', $string); // Whitespace are out now.
8085 return core_text::strlen($string);
8089 * Generate and return a random string of the specified length.
8091 * @param int $length The length of the string to be created.
8092 * @return string
8094 function random_string($length=15) {
8095 $randombytes = random_bytes_emulate($length);
8096 $pool = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
8097 $pool .= 'abcdefghijklmnopqrstuvwxyz';
8098 $pool .= '0123456789';
8099 $poollen = strlen($pool);
8100 $string = '';
8101 for ($i = 0; $i < $length; $i++) {
8102 $rand = ord($randombytes[$i]);
8103 $string .= substr($pool, ($rand%($poollen)), 1);
8105 return $string;
8109 * Generate a complex random string (useful for md5 salts)
8111 * This function is based on the above {@link random_string()} however it uses a
8112 * larger pool of characters and generates a string between 24 and 32 characters
8114 * @param int $length Optional if set generates a string to exactly this length
8115 * @return string
8117 function complex_random_string($length=null) {
8118 $pool = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
8119 $pool .= '`~!@#%^&*()_+-=[];,./<>?:{} ';
8120 $poollen = strlen($pool);
8121 if ($length===null) {
8122 $length = floor(rand(24, 32));
8124 $randombytes = random_bytes_emulate($length);
8125 $string = '';
8126 for ($i = 0; $i < $length; $i++) {
8127 $rand = ord($randombytes[$i]);
8128 $string .= $pool[($rand%$poollen)];
8130 return $string;
8134 * Try to generates cryptographically secure pseudo-random bytes.
8136 * Note this is achieved by fallbacking between:
8137 * - PHP 7 random_bytes().
8138 * - OpenSSL openssl_random_pseudo_bytes().
8139 * - In house random generator getting its entropy from various, hard to guess, pseudo-random sources.
8141 * @param int $length requested length in bytes
8142 * @return string binary data
8144 function random_bytes_emulate($length) {
8145 global $CFG;
8146 if ($length <= 0) {
8147 debugging('Invalid random bytes length', DEBUG_DEVELOPER);
8148 return '';
8150 if (function_exists('random_bytes')) {
8151 // Use PHP 7 goodness.
8152 $hash = @random_bytes($length);
8153 if ($hash !== false) {
8154 return $hash;
8157 if (function_exists('openssl_random_pseudo_bytes')) {
8158 // If you have the openssl extension enabled.
8159 $hash = openssl_random_pseudo_bytes($length);
8160 if ($hash !== false) {
8161 return $hash;
8165 // Bad luck, there is no reliable random generator, let's just slowly hash some unique stuff that is hard to guess.
8166 $staticdata = serialize($CFG) . serialize($_SERVER);
8167 $hash = '';
8168 do {
8169 $hash .= sha1($staticdata . microtime(true) . uniqid('', true), true);
8170 } while (strlen($hash) < $length);
8172 return substr($hash, 0, $length);
8176 * Given some text (which may contain HTML) and an ideal length,
8177 * this function truncates the text neatly on a word boundary if possible
8179 * @category string
8180 * @param string $text text to be shortened
8181 * @param int $ideal ideal string length
8182 * @param boolean $exact if false, $text will not be cut mid-word
8183 * @param string $ending The string to append if the passed string is truncated
8184 * @return string $truncate shortened string
8186 function shorten_text($text, $ideal=30, $exact = false, $ending='...') {
8187 // If the plain text is shorter than the maximum length, return the whole text.
8188 if (core_text::strlen(preg_replace('/<.*?>/', '', $text)) <= $ideal) {
8189 return $text;
8192 // Splits on HTML tags. Each open/close/empty tag will be the first thing
8193 // and only tag in its 'line'.
8194 preg_match_all('/(<.+?>)?([^<>]*)/s', $text, $lines, PREG_SET_ORDER);
8196 $totallength = core_text::strlen($ending);
8197 $truncate = '';
8199 // This array stores information about open and close tags and their position
8200 // in the truncated string. Each item in the array is an object with fields
8201 // ->open (true if open), ->tag (tag name in lower case), and ->pos
8202 // (byte position in truncated text).
8203 $tagdetails = array();
8205 foreach ($lines as $linematchings) {
8206 // If there is any html-tag in this line, handle it and add it (uncounted) to the output.
8207 if (!empty($linematchings[1])) {
8208 // If it's an "empty element" with or without xhtml-conform closing slash (f.e. <br/>).
8209 if (!preg_match('/^<(\s*.+?\/\s*|\s*(img|br|input|hr|area|base|basefont|col|frame|isindex|link|meta|param)(\s.+?)?)>$/is', $linematchings[1])) {
8210 if (preg_match('/^<\s*\/([^\s]+?)\s*>$/s', $linematchings[1], $tagmatchings)) {
8211 // Record closing tag.
8212 $tagdetails[] = (object) array(
8213 'open' => false,
8214 'tag' => core_text::strtolower($tagmatchings[1]),
8215 'pos' => core_text::strlen($truncate),
8218 } else if (preg_match('/^<\s*([^\s>!]+).*?>$/s', $linematchings[1], $tagmatchings)) {
8219 // Record opening tag.
8220 $tagdetails[] = (object) array(
8221 'open' => true,
8222 'tag' => core_text::strtolower($tagmatchings[1]),
8223 'pos' => core_text::strlen($truncate),
8225 } else if (preg_match('/^<!--\[if\s.*?\]>$/s', $linematchings[1], $tagmatchings)) {
8226 $tagdetails[] = (object) array(
8227 'open' => true,
8228 'tag' => core_text::strtolower('if'),
8229 'pos' => core_text::strlen($truncate),
8231 } else if (preg_match('/^<!--<!\[endif\]-->$/s', $linematchings[1], $tagmatchings)) {
8232 $tagdetails[] = (object) array(
8233 'open' => false,
8234 'tag' => core_text::strtolower('if'),
8235 'pos' => core_text::strlen($truncate),
8239 // Add html-tag to $truncate'd text.
8240 $truncate .= $linematchings[1];
8243 // Calculate the length of the plain text part of the line; handle entities as one character.
8244 $contentlength = core_text::strlen(preg_replace('/&[0-9a-z]{2,8};|&#[0-9]{1,7};|&#x[0-9a-f]{1,6};/i', ' ', $linematchings[2]));
8245 if ($totallength + $contentlength > $ideal) {
8246 // The number of characters which are left.
8247 $left = $ideal - $totallength;
8248 $entitieslength = 0;
8249 // Search for html entities.
8250 if (preg_match_all('/&[0-9a-z]{2,8};|&#[0-9]{1,7};|&#x[0-9a-f]{1,6};/i', $linematchings[2], $entities, PREG_OFFSET_CAPTURE)) {
8251 // Calculate the real length of all entities in the legal range.
8252 foreach ($entities[0] as $entity) {
8253 if ($entity[1]+1-$entitieslength <= $left) {
8254 $left--;
8255 $entitieslength += core_text::strlen($entity[0]);
8256 } else {
8257 // No more characters left.
8258 break;
8262 $breakpos = $left + $entitieslength;
8264 // If the words shouldn't be cut in the middle...
8265 if (!$exact) {
8266 // Search the last occurence of a space.
8267 for (; $breakpos > 0; $breakpos--) {
8268 if ($char = core_text::substr($linematchings[2], $breakpos, 1)) {
8269 if ($char === '.' or $char === ' ') {
8270 $breakpos += 1;
8271 break;
8272 } else if (strlen($char) > 2) {
8273 // Chinese/Japanese/Korean text can be truncated at any UTF-8 character boundary.
8274 $breakpos += 1;
8275 break;
8280 if ($breakpos == 0) {
8281 // This deals with the test_shorten_text_no_spaces case.
8282 $breakpos = $left + $entitieslength;
8283 } else if ($breakpos > $left + $entitieslength) {
8284 // This deals with the previous for loop breaking on the first char.
8285 $breakpos = $left + $entitieslength;
8288 $truncate .= core_text::substr($linematchings[2], 0, $breakpos);
8289 // Maximum length is reached, so get off the loop.
8290 break;
8291 } else {
8292 $truncate .= $linematchings[2];
8293 $totallength += $contentlength;
8296 // If the maximum length is reached, get off the loop.
8297 if ($totallength >= $ideal) {
8298 break;
8302 // Add the defined ending to the text.
8303 $truncate .= $ending;
8305 // Now calculate the list of open html tags based on the truncate position.
8306 $opentags = array();
8307 foreach ($tagdetails as $taginfo) {
8308 if ($taginfo->open) {
8309 // Add tag to the beginning of $opentags list.
8310 array_unshift($opentags, $taginfo->tag);
8311 } else {
8312 // Can have multiple exact same open tags, close the last one.
8313 $pos = array_search($taginfo->tag, array_reverse($opentags, true));
8314 if ($pos !== false) {
8315 unset($opentags[$pos]);
8320 // Close all unclosed html-tags.
8321 foreach ($opentags as $tag) {
8322 if ($tag === 'if') {
8323 $truncate .= '<!--<![endif]-->';
8324 } else {
8325 $truncate .= '</' . $tag . '>';
8329 return $truncate;
8333 * Shortens a given filename by removing characters positioned after the ideal string length.
8334 * When the filename is too long, the file cannot be created on the filesystem due to exceeding max byte size.
8335 * Limiting the filename to a certain size (considering multibyte characters) will prevent this.
8337 * @param string $filename file name
8338 * @param int $length ideal string length
8339 * @param bool $includehash Whether to include a file hash in the shortened version. This ensures uniqueness.
8340 * @return string $shortened shortened file name
8342 function shorten_filename($filename, $length = MAX_FILENAME_SIZE, $includehash = false) {
8343 $shortened = $filename;
8344 // Extract a part of the filename if it's char size exceeds the ideal string length.
8345 if (core_text::strlen($filename) > $length) {
8346 // Exclude extension if present in filename.
8347 $mimetypes = get_mimetypes_array();
8348 $extension = pathinfo($filename, PATHINFO_EXTENSION);
8349 if ($extension && !empty($mimetypes[$extension])) {
8350 $basename = pathinfo($filename, PATHINFO_FILENAME);
8351 $hash = empty($includehash) ? '' : ' - ' . substr(sha1($basename), 0, 10);
8352 $shortened = core_text::substr($basename, 0, $length - strlen($hash)) . $hash;
8353 $shortened .= '.' . $extension;
8354 } else {
8355 $hash = empty($includehash) ? '' : ' - ' . substr(sha1($filename), 0, 10);
8356 $shortened = core_text::substr($filename, 0, $length - strlen($hash)) . $hash;
8359 return $shortened;
8363 * Shortens a given array of filenames by removing characters positioned after the ideal string length.
8365 * @param array $path The paths to reduce the length.
8366 * @param int $length Ideal string length
8367 * @param bool $includehash Whether to include a file hash in the shortened version. This ensures uniqueness.
8368 * @return array $result Shortened paths in array.
8370 function shorten_filenames(array $path, $length = MAX_FILENAME_SIZE, $includehash = false) {
8371 $result = null;
8373 $result = array_reduce($path, function($carry, $singlepath) use ($length, $includehash) {
8374 $carry[] = shorten_filename($singlepath, $length, $includehash);
8375 return $carry;
8376 }, []);
8378 return $result;
8382 * Given dates in seconds, how many weeks is the date from startdate
8383 * The first week is 1, the second 2 etc ...
8385 * @param int $startdate Timestamp for the start date
8386 * @param int $thedate Timestamp for the end date
8387 * @return string
8389 function getweek ($startdate, $thedate) {
8390 if ($thedate < $startdate) {
8391 return 0;
8394 return floor(($thedate - $startdate) / WEEKSECS) + 1;
8398 * Returns a randomly generated password of length $maxlen. inspired by
8400 * {@link http://www.phpbuilder.com/columns/jesus19990502.php3} and
8401 * {@link http://es2.php.net/manual/en/function.str-shuffle.php#73254}
8403 * @param int $maxlen The maximum size of the password being generated.
8404 * @return string
8406 function generate_password($maxlen=10) {
8407 global $CFG;
8409 if (empty($CFG->passwordpolicy)) {
8410 $fillers = PASSWORD_DIGITS;
8411 $wordlist = file($CFG->wordlist);
8412 $word1 = trim($wordlist[rand(0, count($wordlist) - 1)]);
8413 $word2 = trim($wordlist[rand(0, count($wordlist) - 1)]);
8414 $filler1 = $fillers[rand(0, strlen($fillers) - 1)];
8415 $password = $word1 . $filler1 . $word2;
8416 } else {
8417 $minlen = !empty($CFG->minpasswordlength) ? $CFG->minpasswordlength : 0;
8418 $digits = $CFG->minpassworddigits;
8419 $lower = $CFG->minpasswordlower;
8420 $upper = $CFG->minpasswordupper;
8421 $nonalphanum = $CFG->minpasswordnonalphanum;
8422 $total = $lower + $upper + $digits + $nonalphanum;
8423 // Var minlength should be the greater one of the two ( $minlen and $total ).
8424 $minlen = $minlen < $total ? $total : $minlen;
8425 // Var maxlen can never be smaller than minlen.
8426 $maxlen = $minlen > $maxlen ? $minlen : $maxlen;
8427 $additional = $maxlen - $total;
8429 // Make sure we have enough characters to fulfill
8430 // complexity requirements.
8431 $passworddigits = PASSWORD_DIGITS;
8432 while ($digits > strlen($passworddigits)) {
8433 $passworddigits .= PASSWORD_DIGITS;
8435 $passwordlower = PASSWORD_LOWER;
8436 while ($lower > strlen($passwordlower)) {
8437 $passwordlower .= PASSWORD_LOWER;
8439 $passwordupper = PASSWORD_UPPER;
8440 while ($upper > strlen($passwordupper)) {
8441 $passwordupper .= PASSWORD_UPPER;
8443 $passwordnonalphanum = PASSWORD_NONALPHANUM;
8444 while ($nonalphanum > strlen($passwordnonalphanum)) {
8445 $passwordnonalphanum .= PASSWORD_NONALPHANUM;
8448 // Now mix and shuffle it all.
8449 $password = str_shuffle (substr(str_shuffle ($passwordlower), 0, $lower) .
8450 substr(str_shuffle ($passwordupper), 0, $upper) .
8451 substr(str_shuffle ($passworddigits), 0, $digits) .
8452 substr(str_shuffle ($passwordnonalphanum), 0 , $nonalphanum) .
8453 substr(str_shuffle ($passwordlower .
8454 $passwordupper .
8455 $passworddigits .
8456 $passwordnonalphanum), 0 , $additional));
8459 return substr ($password, 0, $maxlen);
8463 * Given a float, prints it nicely.
8464 * Localized floats must not be used in calculations!
8466 * The stripzeros feature is intended for making numbers look nicer in small
8467 * areas where it is not necessary to indicate the degree of accuracy by showing
8468 * ending zeros. If you turn it on with $decimalpoints set to 3, for example,
8469 * then it will display '5.4' instead of '5.400' or '5' instead of '5.000'.
8471 * @param float $float The float to print
8472 * @param int $decimalpoints The number of decimal places to print.
8473 * @param bool $localized use localized decimal separator
8474 * @param bool $stripzeros If true, removes final zeros after decimal point
8475 * @return string locale float
8477 function format_float($float, $decimalpoints=1, $localized=true, $stripzeros=false) {
8478 if (is_null($float)) {
8479 return '';
8481 if ($localized) {
8482 $separator = get_string('decsep', 'langconfig');
8483 } else {
8484 $separator = '.';
8486 $result = number_format($float, $decimalpoints, $separator, '');
8487 if ($stripzeros) {
8488 // Remove zeros and final dot if not needed.
8489 $result = preg_replace('~(' . preg_quote($separator) . ')?0+$~', '', $result);
8491 return $result;
8495 * Converts locale specific floating point/comma number back to standard PHP float value
8496 * Do NOT try to do any math operations before this conversion on any user submitted floats!
8498 * @param string $localefloat locale aware float representation
8499 * @param bool $strict If true, then check the input and return false if it is not a valid number.
8500 * @return mixed float|bool - false or the parsed float.
8502 function unformat_float($localefloat, $strict = false) {
8503 $localefloat = trim($localefloat);
8505 if ($localefloat == '') {
8506 return null;
8509 $localefloat = str_replace(' ', '', $localefloat); // No spaces - those might be used as thousand separators.
8510 $localefloat = str_replace(get_string('decsep', 'langconfig'), '.', $localefloat);
8512 if ($strict && !is_numeric($localefloat)) {
8513 return false;
8516 return (float)$localefloat;
8520 * Given a simple array, this shuffles it up just like shuffle()
8521 * Unlike PHP's shuffle() this function works on any machine.
8523 * @param array $array The array to be rearranged
8524 * @return array
8526 function swapshuffle($array) {
8528 $last = count($array) - 1;
8529 for ($i = 0; $i <= $last; $i++) {
8530 $from = rand(0, $last);
8531 $curr = $array[$i];
8532 $array[$i] = $array[$from];
8533 $array[$from] = $curr;
8535 return $array;
8539 * Like {@link swapshuffle()}, but works on associative arrays
8541 * @param array $array The associative array to be rearranged
8542 * @return array
8544 function swapshuffle_assoc($array) {
8546 $newarray = array();
8547 $newkeys = swapshuffle(array_keys($array));
8549 foreach ($newkeys as $newkey) {
8550 $newarray[$newkey] = $array[$newkey];
8552 return $newarray;
8556 * Given an arbitrary array, and a number of draws,
8557 * this function returns an array with that amount
8558 * of items. The indexes are retained.
8560 * @todo Finish documenting this function
8562 * @param array $array
8563 * @param int $draws
8564 * @return array
8566 function draw_rand_array($array, $draws) {
8568 $return = array();
8570 $last = count($array);
8572 if ($draws > $last) {
8573 $draws = $last;
8576 while ($draws > 0) {
8577 $last--;
8579 $keys = array_keys($array);
8580 $rand = rand(0, $last);
8582 $return[$keys[$rand]] = $array[$keys[$rand]];
8583 unset($array[$keys[$rand]]);
8585 $draws--;
8588 return $return;
8592 * Calculate the difference between two microtimes
8594 * @param string $a The first Microtime
8595 * @param string $b The second Microtime
8596 * @return string
8598 function microtime_diff($a, $b) {
8599 list($adec, $asec) = explode(' ', $a);
8600 list($bdec, $bsec) = explode(' ', $b);
8601 return $bsec - $asec + $bdec - $adec;
8605 * Given a list (eg a,b,c,d,e) this function returns
8606 * an array of 1->a, 2->b, 3->c etc
8608 * @param string $list The string to explode into array bits
8609 * @param string $separator The separator used within the list string
8610 * @return array The now assembled array
8612 function make_menu_from_list($list, $separator=',') {
8614 $array = array_reverse(explode($separator, $list), true);
8615 foreach ($array as $key => $item) {
8616 $outarray[$key+1] = trim($item);
8618 return $outarray;
8622 * Creates an array that represents all the current grades that
8623 * can be chosen using the given grading type.
8625 * Negative numbers
8626 * are scales, zero is no grade, and positive numbers are maximum
8627 * grades.
8629 * @todo Finish documenting this function or better deprecated this completely!
8631 * @param int $gradingtype
8632 * @return array
8634 function make_grades_menu($gradingtype) {
8635 global $DB;
8637 $grades = array();
8638 if ($gradingtype < 0) {
8639 if ($scale = $DB->get_record('scale', array('id'=> (-$gradingtype)))) {
8640 return make_menu_from_list($scale->scale);
8642 } else if ($gradingtype > 0) {
8643 for ($i=$gradingtype; $i>=0; $i--) {
8644 $grades[$i] = $i .' / '. $gradingtype;
8646 return $grades;
8648 return $grades;
8652 * make_unique_id_code
8654 * @todo Finish documenting this function
8656 * @uses $_SERVER
8657 * @param string $extra Extra string to append to the end of the code
8658 * @return string
8660 function make_unique_id_code($extra = '') {
8662 $hostname = 'unknownhost';
8663 if (!empty($_SERVER['HTTP_HOST'])) {
8664 $hostname = $_SERVER['HTTP_HOST'];
8665 } else if (!empty($_ENV['HTTP_HOST'])) {
8666 $hostname = $_ENV['HTTP_HOST'];
8667 } else if (!empty($_SERVER['SERVER_NAME'])) {
8668 $hostname = $_SERVER['SERVER_NAME'];
8669 } else if (!empty($_ENV['SERVER_NAME'])) {
8670 $hostname = $_ENV['SERVER_NAME'];
8673 $date = gmdate("ymdHis");
8675 $random = random_string(6);
8677 if ($extra) {
8678 return $hostname .'+'. $date .'+'. $random .'+'. $extra;
8679 } else {
8680 return $hostname .'+'. $date .'+'. $random;
8686 * Function to check the passed address is within the passed subnet
8688 * The parameter is a comma separated string of subnet definitions.
8689 * Subnet strings can be in one of three formats:
8690 * 1: xxx.xxx.xxx.xxx/nn or xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/nnn (number of bits in net mask)
8691 * 2: xxx.xxx.xxx.xxx-yyy or xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx::xxxx-yyyy (a range of IP addresses in the last group)
8692 * 3: xxx.xxx or xxx.xxx. or xxx:xxx:xxxx or xxx:xxx:xxxx. (incomplete address, a bit non-technical ;-)
8693 * Code for type 1 modified from user posted comments by mediator at
8694 * {@link http://au.php.net/manual/en/function.ip2long.php}
8696 * @param string $addr The address you are checking
8697 * @param string $subnetstr The string of subnet addresses
8698 * @return bool
8700 function address_in_subnet($addr, $subnetstr) {
8702 if ($addr == '0.0.0.0') {
8703 return false;
8705 $subnets = explode(',', $subnetstr);
8706 $found = false;
8707 $addr = trim($addr);
8708 $addr = cleanremoteaddr($addr, false); // Normalise.
8709 if ($addr === null) {
8710 return false;
8712 $addrparts = explode(':', $addr);
8714 $ipv6 = strpos($addr, ':');
8716 foreach ($subnets as $subnet) {
8717 $subnet = trim($subnet);
8718 if ($subnet === '') {
8719 continue;
8722 if (strpos($subnet, '/') !== false) {
8723 // 1: xxx.xxx.xxx.xxx/nn or xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/nnn.
8724 list($ip, $mask) = explode('/', $subnet);
8725 $mask = trim($mask);
8726 if (!is_number($mask)) {
8727 continue; // Incorect mask number, eh?
8729 $ip = cleanremoteaddr($ip, false); // Normalise.
8730 if ($ip === null) {
8731 continue;
8733 if (strpos($ip, ':') !== false) {
8734 // IPv6.
8735 if (!$ipv6) {
8736 continue;
8738 if ($mask > 128 or $mask < 0) {
8739 continue; // Nonsense.
8741 if ($mask == 0) {
8742 return true; // Any address.
8744 if ($mask == 128) {
8745 if ($ip === $addr) {
8746 return true;
8748 continue;
8750 $ipparts = explode(':', $ip);
8751 $modulo = $mask % 16;
8752 $ipnet = array_slice($ipparts, 0, ($mask-$modulo)/16);
8753 $addrnet = array_slice($addrparts, 0, ($mask-$modulo)/16);
8754 if (implode(':', $ipnet) === implode(':', $addrnet)) {
8755 if ($modulo == 0) {
8756 return true;
8758 $pos = ($mask-$modulo)/16;
8759 $ipnet = hexdec($ipparts[$pos]);
8760 $addrnet = hexdec($addrparts[$pos]);
8761 $mask = 0xffff << (16 - $modulo);
8762 if (($addrnet & $mask) == ($ipnet & $mask)) {
8763 return true;
8767 } else {
8768 // IPv4.
8769 if ($ipv6) {
8770 continue;
8772 if ($mask > 32 or $mask < 0) {
8773 continue; // Nonsense.
8775 if ($mask == 0) {
8776 return true;
8778 if ($mask == 32) {
8779 if ($ip === $addr) {
8780 return true;
8782 continue;
8784 $mask = 0xffffffff << (32 - $mask);
8785 if (((ip2long($addr) & $mask) == (ip2long($ip) & $mask))) {
8786 return true;
8790 } else if (strpos($subnet, '-') !== false) {
8791 // 2: xxx.xxx.xxx.xxx-yyy or xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx::xxxx-yyyy. A range of IP addresses in the last group.
8792 $parts = explode('-', $subnet);
8793 if (count($parts) != 2) {
8794 continue;
8797 if (strpos($subnet, ':') !== false) {
8798 // IPv6.
8799 if (!$ipv6) {
8800 continue;
8802 $ipstart = cleanremoteaddr(trim($parts[0]), false); // Normalise.
8803 if ($ipstart === null) {
8804 continue;
8806 $ipparts = explode(':', $ipstart);
8807 $start = hexdec(array_pop($ipparts));
8808 $ipparts[] = trim($parts[1]);
8809 $ipend = cleanremoteaddr(implode(':', $ipparts), false); // Normalise.
8810 if ($ipend === null) {
8811 continue;
8813 $ipparts[7] = '';
8814 $ipnet = implode(':', $ipparts);
8815 if (strpos($addr, $ipnet) !== 0) {
8816 continue;
8818 $ipparts = explode(':', $ipend);
8819 $end = hexdec($ipparts[7]);
8821 $addrend = hexdec($addrparts[7]);
8823 if (($addrend >= $start) and ($addrend <= $end)) {
8824 return true;
8827 } else {
8828 // IPv4.
8829 if ($ipv6) {
8830 continue;
8832 $ipstart = cleanremoteaddr(trim($parts[0]), false); // Normalise.
8833 if ($ipstart === null) {
8834 continue;
8836 $ipparts = explode('.', $ipstart);
8837 $ipparts[3] = trim($parts[1]);
8838 $ipend = cleanremoteaddr(implode('.', $ipparts), false); // Normalise.
8839 if ($ipend === null) {
8840 continue;
8843 if ((ip2long($addr) >= ip2long($ipstart)) and (ip2long($addr) <= ip2long($ipend))) {
8844 return true;
8848 } else {
8849 // 3: xxx.xxx or xxx.xxx. or xxx:xxx:xxxx or xxx:xxx:xxxx.
8850 if (strpos($subnet, ':') !== false) {
8851 // IPv6.
8852 if (!$ipv6) {
8853 continue;
8855 $parts = explode(':', $subnet);
8856 $count = count($parts);
8857 if ($parts[$count-1] === '') {
8858 unset($parts[$count-1]); // Trim trailing :'s.
8859 $count--;
8860 $subnet = implode('.', $parts);
8862 $isip = cleanremoteaddr($subnet, false); // Normalise.
8863 if ($isip !== null) {
8864 if ($isip === $addr) {
8865 return true;
8867 continue;
8868 } else if ($count > 8) {
8869 continue;
8871 $zeros = array_fill(0, 8-$count, '0');
8872 $subnet = $subnet.':'.implode(':', $zeros).'/'.($count*16);
8873 if (address_in_subnet($addr, $subnet)) {
8874 return true;
8877 } else {
8878 // IPv4.
8879 if ($ipv6) {
8880 continue;
8882 $parts = explode('.', $subnet);
8883 $count = count($parts);
8884 if ($parts[$count-1] === '') {
8885 unset($parts[$count-1]); // Trim trailing .
8886 $count--;
8887 $subnet = implode('.', $parts);
8889 if ($count == 4) {
8890 $subnet = cleanremoteaddr($subnet, false); // Normalise.
8891 if ($subnet === $addr) {
8892 return true;
8894 continue;
8895 } else if ($count > 4) {
8896 continue;
8898 $zeros = array_fill(0, 4-$count, '0');
8899 $subnet = $subnet.'.'.implode('.', $zeros).'/'.($count*8);
8900 if (address_in_subnet($addr, $subnet)) {
8901 return true;
8907 return false;
8911 * For outputting debugging info
8913 * @param string $string The string to write
8914 * @param string $eol The end of line char(s) to use
8915 * @param string $sleep Period to make the application sleep
8916 * This ensures any messages have time to display before redirect
8918 function mtrace($string, $eol="\n", $sleep=0) {
8919 global $CFG;
8921 if (isset($CFG->mtrace_wrapper) && function_exists($CFG->mtrace_wrapper)) {
8922 $fn = $CFG->mtrace_wrapper;
8923 $fn($string, $eol);
8924 return;
8925 } else if (defined('STDOUT') && !PHPUNIT_TEST && !defined('BEHAT_TEST')) {
8926 fwrite(STDOUT, $string.$eol);
8927 } else {
8928 echo $string . $eol;
8931 flush();
8933 // Delay to keep message on user's screen in case of subsequent redirect.
8934 if ($sleep) {
8935 sleep($sleep);
8940 * Replace 1 or more slashes or backslashes to 1 slash
8942 * @param string $path The path to strip
8943 * @return string the path with double slashes removed
8945 function cleardoubleslashes ($path) {
8946 return preg_replace('/(\/|\\\){1,}/', '/', $path);
8950 * Is the current ip in a given list?
8952 * @param string $list
8953 * @return bool
8955 function remoteip_in_list($list) {
8956 $inlist = false;
8957 $clientip = getremoteaddr(null);
8959 if (!$clientip) {
8960 // Ensure access on cli.
8961 return true;
8964 $list = explode("\n", $list);
8965 foreach ($list as $line) {
8966 $tokens = explode('#', $line);
8967 $subnet = trim($tokens[0]);
8968 if (address_in_subnet($clientip, $subnet)) {
8969 $inlist = true;
8970 break;
8973 return $inlist;
8977 * Returns most reliable client address
8979 * @param string $default If an address can't be determined, then return this
8980 * @return string The remote IP address
8982 function getremoteaddr($default='0.0.0.0') {
8983 global $CFG;
8985 if (empty($CFG->getremoteaddrconf)) {
8986 // This will happen, for example, before just after the upgrade, as the
8987 // user is redirected to the admin screen.
8988 $variablestoskip = 0;
8989 } else {
8990 $variablestoskip = $CFG->getremoteaddrconf;
8992 if (!($variablestoskip & GETREMOTEADDR_SKIP_HTTP_CLIENT_IP)) {
8993 if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
8994 $address = cleanremoteaddr($_SERVER['HTTP_CLIENT_IP']);
8995 return $address ? $address : $default;
8998 if (!($variablestoskip & GETREMOTEADDR_SKIP_HTTP_X_FORWARDED_FOR)) {
8999 if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
9000 $forwardedaddresses = explode(",", $_SERVER['HTTP_X_FORWARDED_FOR']);
9001 $address = $forwardedaddresses[0];
9003 if (substr_count($address, ":") > 1) {
9004 // Remove port and brackets from IPv6.
9005 if (preg_match("/\[(.*)\]:/", $address, $matches)) {
9006 $address = $matches[1];
9008 } else {
9009 // Remove port from IPv4.
9010 if (substr_count($address, ":") == 1) {
9011 $parts = explode(":", $address);
9012 $address = $parts[0];
9016 $address = cleanremoteaddr($address);
9017 return $address ? $address : $default;
9020 if (!empty($_SERVER['REMOTE_ADDR'])) {
9021 $address = cleanremoteaddr($_SERVER['REMOTE_ADDR']);
9022 return $address ? $address : $default;
9023 } else {
9024 return $default;
9029 * Cleans an ip address. Internal addresses are now allowed.
9030 * (Originally local addresses were not allowed.)
9032 * @param string $addr IPv4 or IPv6 address
9033 * @param bool $compress use IPv6 address compression
9034 * @return string normalised ip address string, null if error
9036 function cleanremoteaddr($addr, $compress=false) {
9037 $addr = trim($addr);
9039 if (strpos($addr, ':') !== false) {
9040 // Can be only IPv6.
9041 $parts = explode(':', $addr);
9042 $count = count($parts);
9044 if (strpos($parts[$count-1], '.') !== false) {
9045 // Legacy ipv4 notation.
9046 $last = array_pop($parts);
9047 $ipv4 = cleanremoteaddr($last, true);
9048 if ($ipv4 === null) {
9049 return null;
9051 $bits = explode('.', $ipv4);
9052 $parts[] = dechex($bits[0]).dechex($bits[1]);
9053 $parts[] = dechex($bits[2]).dechex($bits[3]);
9054 $count = count($parts);
9055 $addr = implode(':', $parts);
9058 if ($count < 3 or $count > 8) {
9059 return null; // Severly malformed.
9062 if ($count != 8) {
9063 if (strpos($addr, '::') === false) {
9064 return null; // Malformed.
9066 // Uncompress.
9067 $insertat = array_search('', $parts, true);
9068 $missing = array_fill(0, 1 + 8 - $count, '0');
9069 array_splice($parts, $insertat, 1, $missing);
9070 foreach ($parts as $key => $part) {
9071 if ($part === '') {
9072 $parts[$key] = '0';
9077 $adr = implode(':', $parts);
9078 if (!preg_match('/^([0-9a-f]{1,4})(:[0-9a-f]{1,4})*$/i', $adr)) {
9079 return null; // Incorrect format - sorry.
9082 // Normalise 0s and case.
9083 $parts = array_map('hexdec', $parts);
9084 $parts = array_map('dechex', $parts);
9086 $result = implode(':', $parts);
9088 if (!$compress) {
9089 return $result;
9092 if ($result === '0:0:0:0:0:0:0:0') {
9093 return '::'; // All addresses.
9096 $compressed = preg_replace('/(:0)+:0$/', '::', $result, 1);
9097 if ($compressed !== $result) {
9098 return $compressed;
9101 $compressed = preg_replace('/^(0:){2,7}/', '::', $result, 1);
9102 if ($compressed !== $result) {
9103 return $compressed;
9106 $compressed = preg_replace('/(:0){2,6}:/', '::', $result, 1);
9107 if ($compressed !== $result) {
9108 return $compressed;
9111 return $result;
9114 // First get all things that look like IPv4 addresses.
9115 $parts = array();
9116 if (!preg_match('/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/', $addr, $parts)) {
9117 return null;
9119 unset($parts[0]);
9121 foreach ($parts as $key => $match) {
9122 if ($match > 255) {
9123 return null;
9125 $parts[$key] = (int)$match; // Normalise 0s.
9128 return implode('.', $parts);
9133 * Is IP address a public address?
9135 * @param string $ip The ip to check
9136 * @return bool true if the ip is public
9138 function ip_is_public($ip) {
9139 return (bool) filter_var($ip, FILTER_VALIDATE_IP, (FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE));
9143 * This function will make a complete copy of anything it's given,
9144 * regardless of whether it's an object or not.
9146 * @param mixed $thing Something you want cloned
9147 * @return mixed What ever it is you passed it
9149 function fullclone($thing) {
9150 return unserialize(serialize($thing));
9154 * Used to make sure that $min <= $value <= $max
9156 * Make sure that value is between min, and max
9158 * @param int $min The minimum value
9159 * @param int $value The value to check
9160 * @param int $max The maximum value
9161 * @return int
9163 function bounded_number($min, $value, $max) {
9164 if ($value < $min) {
9165 return $min;
9167 if ($value > $max) {
9168 return $max;
9170 return $value;
9174 * Check if there is a nested array within the passed array
9176 * @param array $array
9177 * @return bool true if there is a nested array false otherwise
9179 function array_is_nested($array) {
9180 foreach ($array as $value) {
9181 if (is_array($value)) {
9182 return true;
9185 return false;
9189 * get_performance_info() pairs up with init_performance_info()
9190 * loaded in setup.php. Returns an array with 'html' and 'txt'
9191 * values ready for use, and each of the individual stats provided
9192 * separately as well.
9194 * @return array
9196 function get_performance_info() {
9197 global $CFG, $PERF, $DB, $PAGE;
9199 $info = array();
9200 $info['txt'] = me() . ' '; // Holds log-friendly representation.
9202 $info['html'] = '';
9203 if (!empty($CFG->themedesignermode)) {
9204 // Attempt to avoid devs debugging peformance issues, when its caused by css building and so on.
9205 $info['html'] .= '<p><strong>Warning: Theme designer mode is enabled.</strong></p>';
9207 $info['html'] .= '<ul class="list-unstyled m-l-1 row">'; // Holds userfriendly HTML representation.
9209 $info['realtime'] = microtime_diff($PERF->starttime, microtime());
9211 $info['html'] .= '<li class="timeused col-sm-4">'.$info['realtime'].' secs</li> ';
9212 $info['txt'] .= 'time: '.$info['realtime'].'s ';
9214 // GET/POST (or NULL if $_SERVER['REQUEST_METHOD'] is undefined) is useful for txt logged information.
9215 $info['txt'] .= 'method: ' . ($_SERVER['REQUEST_METHOD'] ?? "NULL") . ' ';
9217 if (function_exists('memory_get_usage')) {
9218 $info['memory_total'] = memory_get_usage();
9219 $info['memory_growth'] = memory_get_usage() - $PERF->startmemory;
9220 $info['html'] .= '<li class="memoryused col-sm-4">RAM: '.display_size($info['memory_total']).'</li> ';
9221 $info['txt'] .= 'memory_total: '.$info['memory_total'].'B (' . display_size($info['memory_total']).') memory_growth: '.
9222 $info['memory_growth'].'B ('.display_size($info['memory_growth']).') ';
9225 if (function_exists('memory_get_peak_usage')) {
9226 $info['memory_peak'] = memory_get_peak_usage();
9227 $info['html'] .= '<li class="memoryused col-sm-4">RAM peak: '.display_size($info['memory_peak']).'</li> ';
9228 $info['txt'] .= 'memory_peak: '.$info['memory_peak'].'B (' . display_size($info['memory_peak']).') ';
9231 $info['html'] .= '</ul><ul class="list-unstyled m-l-1 row">';
9232 $inc = get_included_files();
9233 $info['includecount'] = count($inc);
9234 $info['html'] .= '<li class="included col-sm-4">Included '.$info['includecount'].' files</li> ';
9235 $info['txt'] .= 'includecount: '.$info['includecount'].' ';
9237 if (!empty($CFG->early_install_lang) or empty($PAGE)) {
9238 // We can not track more performance before installation or before PAGE init, sorry.
9239 return $info;
9242 $filtermanager = filter_manager::instance();
9243 if (method_exists($filtermanager, 'get_performance_summary')) {
9244 list($filterinfo, $nicenames) = $filtermanager->get_performance_summary();
9245 $info = array_merge($filterinfo, $info);
9246 foreach ($filterinfo as $key => $value) {
9247 $info['html'] .= "<li class='$key col-sm-4'>$nicenames[$key]: $value </li> ";
9248 $info['txt'] .= "$key: $value ";
9252 $stringmanager = get_string_manager();
9253 if (method_exists($stringmanager, 'get_performance_summary')) {
9254 list($filterinfo, $nicenames) = $stringmanager->get_performance_summary();
9255 $info = array_merge($filterinfo, $info);
9256 foreach ($filterinfo as $key => $value) {
9257 $info['html'] .= "<li class='$key col-sm-4'>$nicenames[$key]: $value </li> ";
9258 $info['txt'] .= "$key: $value ";
9262 if (!empty($PERF->logwrites)) {
9263 $info['logwrites'] = $PERF->logwrites;
9264 $info['html'] .= '<li class="logwrites col-sm-4">Log DB writes '.$info['logwrites'].'</li> ';
9265 $info['txt'] .= 'logwrites: '.$info['logwrites'].' ';
9268 $info['dbqueries'] = $DB->perf_get_reads().'/'.($DB->perf_get_writes() - $PERF->logwrites);
9269 $info['html'] .= '<li class="dbqueries col-sm-4">DB reads/writes: '.$info['dbqueries'].'</li> ';
9270 $info['txt'] .= 'db reads/writes: '.$info['dbqueries'].' ';
9272 $info['dbtime'] = round($DB->perf_get_queries_time(), 5);
9273 $info['html'] .= '<li class="dbtime col-sm-4">DB queries time: '.$info['dbtime'].' secs</li> ';
9274 $info['txt'] .= 'db queries time: ' . $info['dbtime'] . 's ';
9276 if (function_exists('posix_times')) {
9277 $ptimes = posix_times();
9278 if (is_array($ptimes)) {
9279 foreach ($ptimes as $key => $val) {
9280 $info[$key] = $ptimes[$key] - $PERF->startposixtimes[$key];
9282 $info['html'] .= "<li class=\"posixtimes col-sm-4\">ticks: $info[ticks] user: $info[utime]";
9283 $info['html'] .= "sys: $info[stime] cuser: $info[cutime] csys: $info[cstime]</li> ";
9284 $info['txt'] .= "ticks: $info[ticks] user: $info[utime] sys: $info[stime] cuser: $info[cutime] csys: $info[cstime] ";
9288 // Grab the load average for the last minute.
9289 // /proc will only work under some linux configurations
9290 // while uptime is there under MacOSX/Darwin and other unices.
9291 if (is_readable('/proc/loadavg') && $loadavg = @file('/proc/loadavg')) {
9292 list($serverload) = explode(' ', $loadavg[0]);
9293 unset($loadavg);
9294 } else if ( function_exists('is_executable') && is_executable('/usr/bin/uptime') && $loadavg = `/usr/bin/uptime` ) {
9295 if (preg_match('/load averages?: (\d+[\.,:]\d+)/', $loadavg, $matches)) {
9296 $serverload = $matches[1];
9297 } else {
9298 trigger_error('Could not parse uptime output!');
9301 if (!empty($serverload)) {
9302 $info['serverload'] = $serverload;
9303 $info['html'] .= '<li class="serverload col-sm-4">Load average: '.$info['serverload'].'</li> ';
9304 $info['txt'] .= "serverload: {$info['serverload']} ";
9307 // Display size of session if session started.
9308 if ($si = \core\session\manager::get_performance_info()) {
9309 $info['sessionsize'] = $si['size'];
9310 $info['html'] .= "<li class=\"serverload col-sm-4\">" . $si['html'] . "</li>";
9311 $info['txt'] .= $si['txt'];
9314 $info['html'] .= '</ul>';
9315 if ($stats = cache_helper::get_stats()) {
9316 $html = '<ul class="cachesused list-unstyled m-l-1 row">';
9317 $html .= '<li class="cache-stats-heading font-weight-bold">Caches used (hits/misses/sets)</li>';
9318 $html .= '</ul><ul class="cachesused list-unstyled m-l-1">';
9319 $text = 'Caches used (hits/misses/sets): ';
9320 $hits = 0;
9321 $misses = 0;
9322 $sets = 0;
9323 foreach ($stats as $definition => $details) {
9324 switch ($details['mode']) {
9325 case cache_store::MODE_APPLICATION:
9326 $modeclass = 'application';
9327 $mode = ' <span title="application cache">[a]</span>';
9328 break;
9329 case cache_store::MODE_SESSION:
9330 $modeclass = 'session';
9331 $mode = ' <span title="session cache">[s]</span>';
9332 break;
9333 case cache_store::MODE_REQUEST:
9334 $modeclass = 'request';
9335 $mode = ' <span title="request cache">[r]</span>';
9336 break;
9338 $html .= '<ul class="cache-definition-stats list-unstyled m-l-1 m-b-1 cache-mode-'.$modeclass.' card d-inline-block">';
9339 $html .= '<li class="cache-definition-stats-heading p-t-1 card-header bg-dark bg-inverse font-weight-bold">' .
9340 $definition . $mode.'</li>';
9341 $text .= "$definition {";
9342 foreach ($details['stores'] as $store => $data) {
9343 $hits += $data['hits'];
9344 $misses += $data['misses'];
9345 $sets += $data['sets'];
9346 if ($data['hits'] == 0 and $data['misses'] > 0) {
9347 $cachestoreclass = 'nohits text-danger';
9348 } else if ($data['hits'] < $data['misses']) {
9349 $cachestoreclass = 'lowhits text-warning';
9350 } else {
9351 $cachestoreclass = 'hihits text-success';
9353 $text .= "$store($data[hits]/$data[misses]/$data[sets]) ";
9354 $html .= "<li class=\"cache-store-stats $cachestoreclass p-x-1\">" .
9355 "$store: $data[hits] / $data[misses] / $data[sets]</li>";
9356 // This makes boxes of same sizes.
9357 if (count($details['stores']) == 1) {
9358 $html .= "<li class=\"cache-store-stats $cachestoreclass p-x-1\">&nbsp;</li>";
9361 $html .= '</ul>';
9362 $text .= '} ';
9364 $html .= '</ul> ';
9365 $html .= "<div class='cache-total-stats row'>Total: $hits / $misses / $sets</div>";
9366 $info['cachesused'] = "$hits / $misses / $sets";
9367 $info['html'] .= $html;
9368 $info['txt'] .= $text.'. ';
9369 } else {
9370 $info['cachesused'] = '0 / 0 / 0';
9371 $info['html'] .= '<div class="cachesused">Caches used (hits/misses/sets): 0/0/0</div>';
9372 $info['txt'] .= 'Caches used (hits/misses/sets): 0/0/0 ';
9375 $info['html'] = '<div class="performanceinfo siteinfo container-fluid">'.$info['html'].'</div>';
9376 return $info;
9380 * Delete directory or only its content
9382 * @param string $dir directory path
9383 * @param bool $contentonly
9384 * @return bool success, true also if dir does not exist
9386 function remove_dir($dir, $contentonly=false) {
9387 if (!file_exists($dir)) {
9388 // Nothing to do.
9389 return true;
9391 if (!$handle = opendir($dir)) {
9392 return false;
9394 $result = true;
9395 while (false!==($item = readdir($handle))) {
9396 if ($item != '.' && $item != '..') {
9397 if (is_dir($dir.'/'.$item)) {
9398 $result = remove_dir($dir.'/'.$item) && $result;
9399 } else {
9400 $result = unlink($dir.'/'.$item) && $result;
9404 closedir($handle);
9405 if ($contentonly) {
9406 clearstatcache(); // Make sure file stat cache is properly invalidated.
9407 return $result;
9409 $result = rmdir($dir); // If anything left the result will be false, no need for && $result.
9410 clearstatcache(); // Make sure file stat cache is properly invalidated.
9411 return $result;
9415 * Detect if an object or a class contains a given property
9416 * will take an actual object or the name of a class
9418 * @param mix $obj Name of class or real object to test
9419 * @param string $property name of property to find
9420 * @return bool true if property exists
9422 function object_property_exists( $obj, $property ) {
9423 if (is_string( $obj )) {
9424 $properties = get_class_vars( $obj );
9425 } else {
9426 $properties = get_object_vars( $obj );
9428 return array_key_exists( $property, $properties );
9432 * Converts an object into an associative array
9434 * This function converts an object into an associative array by iterating
9435 * over its public properties. Because this function uses the foreach
9436 * construct, Iterators are respected. It works recursively on arrays of objects.
9437 * Arrays and simple values are returned as is.
9439 * If class has magic properties, it can implement IteratorAggregate
9440 * and return all available properties in getIterator()
9442 * @param mixed $var
9443 * @return array
9445 function convert_to_array($var) {
9446 $result = array();
9448 // Loop over elements/properties.
9449 foreach ($var as $key => $value) {
9450 // Recursively convert objects.
9451 if (is_object($value) || is_array($value)) {
9452 $result[$key] = convert_to_array($value);
9453 } else {
9454 // Simple values are untouched.
9455 $result[$key] = $value;
9458 return $result;
9462 * Detect a custom script replacement in the data directory that will
9463 * replace an existing moodle script
9465 * @return string|bool full path name if a custom script exists, false if no custom script exists
9467 function custom_script_path() {
9468 global $CFG, $SCRIPT;
9470 if ($SCRIPT === null) {
9471 // Probably some weird external script.
9472 return false;
9475 $scriptpath = $CFG->customscripts . $SCRIPT;
9477 // Check the custom script exists.
9478 if (file_exists($scriptpath) and is_file($scriptpath)) {
9479 return $scriptpath;
9480 } else {
9481 return false;
9486 * Returns whether or not the user object is a remote MNET user. This function
9487 * is in moodlelib because it does not rely on loading any of the MNET code.
9489 * @param object $user A valid user object
9490 * @return bool True if the user is from a remote Moodle.
9492 function is_mnet_remote_user($user) {
9493 global $CFG;
9495 if (!isset($CFG->mnet_localhost_id)) {
9496 include_once($CFG->dirroot . '/mnet/lib.php');
9497 $env = new mnet_environment();
9498 $env->init();
9499 unset($env);
9502 return (!empty($user->mnethostid) && $user->mnethostid != $CFG->mnet_localhost_id);
9506 * This function will search for browser prefereed languages, setting Moodle
9507 * to use the best one available if $SESSION->lang is undefined
9509 function setup_lang_from_browser() {
9510 global $CFG, $SESSION, $USER;
9512 if (!empty($SESSION->lang) or !empty($USER->lang) or empty($CFG->autolang)) {
9513 // Lang is defined in session or user profile, nothing to do.
9514 return;
9517 if (!isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])) { // There isn't list of browser langs, nothing to do.
9518 return;
9521 // Extract and clean langs from headers.
9522 $rawlangs = $_SERVER['HTTP_ACCEPT_LANGUAGE'];
9523 $rawlangs = str_replace('-', '_', $rawlangs); // We are using underscores.
9524 $rawlangs = explode(',', $rawlangs); // Convert to array.
9525 $langs = array();
9527 $order = 1.0;
9528 foreach ($rawlangs as $lang) {
9529 if (strpos($lang, ';') === false) {
9530 $langs[(string)$order] = $lang;
9531 $order = $order-0.01;
9532 } else {
9533 $parts = explode(';', $lang);
9534 $pos = strpos($parts[1], '=');
9535 $langs[substr($parts[1], $pos+1)] = $parts[0];
9538 krsort($langs, SORT_NUMERIC);
9540 // Look for such langs under standard locations.
9541 foreach ($langs as $lang) {
9542 // Clean it properly for include.
9543 $lang = strtolower(clean_param($lang, PARAM_SAFEDIR));
9544 if (get_string_manager()->translation_exists($lang, false)) {
9545 // Lang exists, set it in session.
9546 $SESSION->lang = $lang;
9547 // We have finished. Go out.
9548 break;
9551 return;
9555 * Check if $url matches anything in proxybypass list
9557 * Any errors just result in the proxy being used (least bad)
9559 * @param string $url url to check
9560 * @return boolean true if we should bypass the proxy
9562 function is_proxybypass( $url ) {
9563 global $CFG;
9565 // Sanity check.
9566 if (empty($CFG->proxyhost) or empty($CFG->proxybypass)) {
9567 return false;
9570 // Get the host part out of the url.
9571 if (!$host = parse_url( $url, PHP_URL_HOST )) {
9572 return false;
9575 // Get the possible bypass hosts into an array.
9576 $matches = explode( ',', $CFG->proxybypass );
9578 // Check for a match.
9579 // (IPs need to match the left hand side and hosts the right of the url,
9580 // but we can recklessly check both as there can't be a false +ve).
9581 foreach ($matches as $match) {
9582 $match = trim($match);
9584 // Try for IP match (Left side).
9585 $lhs = substr($host, 0, strlen($match));
9586 if (strcasecmp($match, $lhs)==0) {
9587 return true;
9590 // Try for host match (Right side).
9591 $rhs = substr($host, -strlen($match));
9592 if (strcasecmp($match, $rhs)==0) {
9593 return true;
9597 // Nothing matched.
9598 return false;
9602 * Check if the passed navigation is of the new style
9604 * @param mixed $navigation
9605 * @return bool true for yes false for no
9607 function is_newnav($navigation) {
9608 if (is_array($navigation) && !empty($navigation['newnav'])) {
9609 return true;
9610 } else {
9611 return false;
9616 * Checks whether the given variable name is defined as a variable within the given object.
9618 * This will NOT work with stdClass objects, which have no class variables.
9620 * @param string $var The variable name
9621 * @param object $object The object to check
9622 * @return boolean
9624 function in_object_vars($var, $object) {
9625 $classvars = get_class_vars(get_class($object));
9626 $classvars = array_keys($classvars);
9627 return in_array($var, $classvars);
9631 * Returns an array without repeated objects.
9632 * This function is similar to array_unique, but for arrays that have objects as values
9634 * @param array $array
9635 * @param bool $keepkeyassoc
9636 * @return array
9638 function object_array_unique($array, $keepkeyassoc = true) {
9639 $duplicatekeys = array();
9640 $tmp = array();
9642 foreach ($array as $key => $val) {
9643 // Convert objects to arrays, in_array() does not support objects.
9644 if (is_object($val)) {
9645 $val = (array)$val;
9648 if (!in_array($val, $tmp)) {
9649 $tmp[] = $val;
9650 } else {
9651 $duplicatekeys[] = $key;
9655 foreach ($duplicatekeys as $key) {
9656 unset($array[$key]);
9659 return $keepkeyassoc ? $array : array_values($array);
9663 * Is a userid the primary administrator?
9665 * @param int $userid int id of user to check
9666 * @return boolean
9668 function is_primary_admin($userid) {
9669 $primaryadmin = get_admin();
9671 if ($userid == $primaryadmin->id) {
9672 return true;
9673 } else {
9674 return false;
9679 * Returns the site identifier
9681 * @return string $CFG->siteidentifier, first making sure it is properly initialised.
9683 function get_site_identifier() {
9684 global $CFG;
9685 // Check to see if it is missing. If so, initialise it.
9686 if (empty($CFG->siteidentifier)) {
9687 set_config('siteidentifier', random_string(32) . $_SERVER['HTTP_HOST']);
9689 // Return it.
9690 return $CFG->siteidentifier;
9694 * Check whether the given password has no more than the specified
9695 * number of consecutive identical characters.
9697 * @param string $password password to be checked against the password policy
9698 * @param integer $maxchars maximum number of consecutive identical characters
9699 * @return bool
9701 function check_consecutive_identical_characters($password, $maxchars) {
9703 if ($maxchars < 1) {
9704 return true; // Zero 0 is to disable this check.
9706 if (strlen($password) <= $maxchars) {
9707 return true; // Too short to fail this test.
9710 $previouschar = '';
9711 $consecutivecount = 1;
9712 foreach (str_split($password) as $char) {
9713 if ($char != $previouschar) {
9714 $consecutivecount = 1;
9715 } else {
9716 $consecutivecount++;
9717 if ($consecutivecount > $maxchars) {
9718 return false; // Check failed already.
9722 $previouschar = $char;
9725 return true;
9729 * Helper function to do partial function binding.
9730 * so we can use it for preg_replace_callback, for example
9731 * this works with php functions, user functions, static methods and class methods
9732 * it returns you a callback that you can pass on like so:
9734 * $callback = partial('somefunction', $arg1, $arg2);
9735 * or
9736 * $callback = partial(array('someclass', 'somestaticmethod'), $arg1, $arg2);
9737 * or even
9738 * $obj = new someclass();
9739 * $callback = partial(array($obj, 'somemethod'), $arg1, $arg2);
9741 * and then the arguments that are passed through at calltime are appended to the argument list.
9743 * @param mixed $function a php callback
9744 * @param mixed $arg1,... $argv arguments to partially bind with
9745 * @return array Array callback
9747 function partial() {
9748 if (!class_exists('partial')) {
9750 * Used to manage function binding.
9751 * @copyright 2009 Penny Leach
9752 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
9754 class partial{
9755 /** @var array */
9756 public $values = array();
9757 /** @var string The function to call as a callback. */
9758 public $func;
9760 * Constructor
9761 * @param string $func
9762 * @param array $args
9764 public function __construct($func, $args) {
9765 $this->values = $args;
9766 $this->func = $func;
9769 * Calls the callback function.
9770 * @return mixed
9772 public function method() {
9773 $args = func_get_args();
9774 return call_user_func_array($this->func, array_merge($this->values, $args));
9778 $args = func_get_args();
9779 $func = array_shift($args);
9780 $p = new partial($func, $args);
9781 return array($p, 'method');
9785 * helper function to load up and initialise the mnet environment
9786 * this must be called before you use mnet functions.
9788 * @return mnet_environment the equivalent of old $MNET global
9790 function get_mnet_environment() {
9791 global $CFG;
9792 require_once($CFG->dirroot . '/mnet/lib.php');
9793 static $instance = null;
9794 if (empty($instance)) {
9795 $instance = new mnet_environment();
9796 $instance->init();
9798 return $instance;
9802 * during xmlrpc server code execution, any code wishing to access
9803 * information about the remote peer must use this to get it.
9805 * @return mnet_remote_client the equivalent of old $MNETREMOTE_CLIENT global
9807 function get_mnet_remote_client() {
9808 if (!defined('MNET_SERVER')) {
9809 debugging(get_string('notinxmlrpcserver', 'mnet'));
9810 return false;
9812 global $MNET_REMOTE_CLIENT;
9813 if (isset($MNET_REMOTE_CLIENT)) {
9814 return $MNET_REMOTE_CLIENT;
9816 return false;
9820 * during the xmlrpc server code execution, this will be called
9821 * to setup the object returned by {@link get_mnet_remote_client}
9823 * @param mnet_remote_client $client the client to set up
9824 * @throws moodle_exception
9826 function set_mnet_remote_client($client) {
9827 if (!defined('MNET_SERVER')) {
9828 throw new moodle_exception('notinxmlrpcserver', 'mnet');
9830 global $MNET_REMOTE_CLIENT;
9831 $MNET_REMOTE_CLIENT = $client;
9835 * return the jump url for a given remote user
9836 * this is used for rewriting forum post links in emails, etc
9838 * @param stdclass $user the user to get the idp url for
9840 function mnet_get_idp_jump_url($user) {
9841 global $CFG;
9843 static $mnetjumps = array();
9844 if (!array_key_exists($user->mnethostid, $mnetjumps)) {
9845 $idp = mnet_get_peer_host($user->mnethostid);
9846 $idpjumppath = mnet_get_app_jumppath($idp->applicationid);
9847 $mnetjumps[$user->mnethostid] = $idp->wwwroot . $idpjumppath . '?hostwwwroot=' . $CFG->wwwroot . '&wantsurl=';
9849 return $mnetjumps[$user->mnethostid];
9853 * Gets the homepage to use for the current user
9855 * @return int One of HOMEPAGE_*
9857 function get_home_page() {
9858 global $CFG;
9860 if (isloggedin() && !isguestuser() && !empty($CFG->defaulthomepage)) {
9861 if ($CFG->defaulthomepage == HOMEPAGE_MY) {
9862 return HOMEPAGE_MY;
9863 } else {
9864 return (int)get_user_preferences('user_home_page_preference', HOMEPAGE_MY);
9867 return HOMEPAGE_SITE;
9871 * Gets the name of a course to be displayed when showing a list of courses.
9872 * By default this is just $course->fullname but user can configure it. The
9873 * result of this function should be passed through print_string.
9874 * @param stdClass|core_course_list_element $course Moodle course object
9875 * @return string Display name of course (either fullname or short + fullname)
9877 function get_course_display_name_for_list($course) {
9878 global $CFG;
9879 if (!empty($CFG->courselistshortnames)) {
9880 if (!($course instanceof stdClass)) {
9881 $course = (object)convert_to_array($course);
9883 return get_string('courseextendednamedisplay', '', $course);
9884 } else {
9885 return $course->fullname;
9890 * Safe analogue of unserialize() that can only parse arrays
9892 * Arrays may contain only integers or strings as both keys and values. Nested arrays are allowed.
9893 * Note: If any string (key or value) has semicolon (;) as part of the string parsing will fail.
9894 * This is a simple method to substitute unnecessary unserialize() in code and not intended to cover all possible cases.
9896 * @param string $expression
9897 * @return array|bool either parsed array or false if parsing was impossible.
9899 function unserialize_array($expression) {
9900 $subs = [];
9901 // Find nested arrays, parse them and store in $subs , substitute with special string.
9902 while (preg_match('/([\^;\}])(a:\d+:\{[^\{\}]*\})/', $expression, $matches) && strlen($matches[2]) < strlen($expression)) {
9903 $key = '--SUB' . count($subs) . '--';
9904 $subs[$key] = unserialize_array($matches[2]);
9905 if ($subs[$key] === false) {
9906 return false;
9908 $expression = str_replace($matches[2], $key . ';', $expression);
9911 // Check the expression is an array.
9912 if (!preg_match('/^a:(\d+):\{([^\}]*)\}$/', $expression, $matches1)) {
9913 return false;
9915 // Get the size and elements of an array (key;value;key;value;....).
9916 $parts = explode(';', $matches1[2]);
9917 $size = intval($matches1[1]);
9918 if (count($parts) < $size * 2 + 1) {
9919 return false;
9921 // Analyze each part and make sure it is an integer or string or a substitute.
9922 $value = [];
9923 for ($i = 0; $i < $size * 2; $i++) {
9924 if (preg_match('/^i:(\d+)$/', $parts[$i], $matches2)) {
9925 $parts[$i] = (int)$matches2[1];
9926 } else if (preg_match('/^s:(\d+):"(.*)"$/', $parts[$i], $matches3) && strlen($matches3[2]) == (int)$matches3[1]) {
9927 $parts[$i] = $matches3[2];
9928 } else if (preg_match('/^--SUB\d+--$/', $parts[$i])) {
9929 $parts[$i] = $subs[$parts[$i]];
9930 } else {
9931 return false;
9934 // Combine keys and values.
9935 for ($i = 0; $i < $size * 2; $i += 2) {
9936 $value[$parts[$i]] = $parts[$i+1];
9938 return $value;
9942 * The lang_string class
9944 * This special class is used to create an object representation of a string request.
9945 * It is special because processing doesn't occur until the object is first used.
9946 * The class was created especially to aid performance in areas where strings were
9947 * required to be generated but were not necessarily used.
9948 * As an example the admin tree when generated uses over 1500 strings, of which
9949 * normally only 1/3 are ever actually printed at any time.
9950 * The performance advantage is achieved by not actually processing strings that
9951 * arn't being used, as such reducing the processing required for the page.
9953 * How to use the lang_string class?
9954 * There are two methods of using the lang_string class, first through the
9955 * forth argument of the get_string function, and secondly directly.
9956 * The following are examples of both.
9957 * 1. Through get_string calls e.g.
9958 * $string = get_string($identifier, $component, $a, true);
9959 * $string = get_string('yes', 'moodle', null, true);
9960 * 2. Direct instantiation
9961 * $string = new lang_string($identifier, $component, $a, $lang);
9962 * $string = new lang_string('yes');
9964 * How do I use a lang_string object?
9965 * The lang_string object makes use of a magic __toString method so that you
9966 * are able to use the object exactly as you would use a string in most cases.
9967 * This means you are able to collect it into a variable and then directly
9968 * echo it, or concatenate it into another string, or similar.
9969 * The other thing you can do is manually get the string by calling the
9970 * lang_strings out method e.g.
9971 * $string = new lang_string('yes');
9972 * $string->out();
9973 * Also worth noting is that the out method can take one argument, $lang which
9974 * allows the developer to change the language on the fly.
9976 * When should I use a lang_string object?
9977 * The lang_string object is designed to be used in any situation where a
9978 * string may not be needed, but needs to be generated.
9979 * The admin tree is a good example of where lang_string objects should be
9980 * used.
9981 * A more practical example would be any class that requries strings that may
9982 * not be printed (after all classes get renderer by renderers and who knows
9983 * what they will do ;))
9985 * When should I not use a lang_string object?
9986 * Don't use lang_strings when you are going to use a string immediately.
9987 * There is no need as it will be processed immediately and there will be no
9988 * advantage, and in fact perhaps a negative hit as a class has to be
9989 * instantiated for a lang_string object, however get_string won't require
9990 * that.
9992 * Limitations:
9993 * 1. You cannot use a lang_string object as an array offset. Doing so will
9994 * result in PHP throwing an error. (You can use it as an object property!)
9996 * @package core
9997 * @category string
9998 * @copyright 2011 Sam Hemelryk
9999 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
10001 class lang_string {
10003 /** @var string The strings identifier */
10004 protected $identifier;
10005 /** @var string The strings component. Default '' */
10006 protected $component = '';
10007 /** @var array|stdClass Any arguments required for the string. Default null */
10008 protected $a = null;
10009 /** @var string The language to use when processing the string. Default null */
10010 protected $lang = null;
10012 /** @var string The processed string (once processed) */
10013 protected $string = null;
10016 * A special boolean. If set to true then the object has been woken up and
10017 * cannot be regenerated. If this is set then $this->string MUST be used.
10018 * @var bool
10020 protected $forcedstring = false;
10023 * Constructs a lang_string object
10025 * This function should do as little processing as possible to ensure the best
10026 * performance for strings that won't be used.
10028 * @param string $identifier The strings identifier
10029 * @param string $component The strings component
10030 * @param stdClass|array $a Any arguments the string requires
10031 * @param string $lang The language to use when processing the string.
10032 * @throws coding_exception
10034 public function __construct($identifier, $component = '', $a = null, $lang = null) {
10035 if (empty($component)) {
10036 $component = 'moodle';
10039 $this->identifier = $identifier;
10040 $this->component = $component;
10041 $this->lang = $lang;
10043 // We MUST duplicate $a to ensure that it if it changes by reference those
10044 // changes are not carried across.
10045 // To do this we always ensure $a or its properties/values are strings
10046 // and that any properties/values that arn't convertable are forgotten.
10047 if (!empty($a)) {
10048 if (is_scalar($a)) {
10049 $this->a = $a;
10050 } else if ($a instanceof lang_string) {
10051 $this->a = $a->out();
10052 } else if (is_object($a) or is_array($a)) {
10053 $a = (array)$a;
10054 $this->a = array();
10055 foreach ($a as $key => $value) {
10056 // Make sure conversion errors don't get displayed (results in '').
10057 if (is_array($value)) {
10058 $this->a[$key] = '';
10059 } else if (is_object($value)) {
10060 if (method_exists($value, '__toString')) {
10061 $this->a[$key] = $value->__toString();
10062 } else {
10063 $this->a[$key] = '';
10065 } else {
10066 $this->a[$key] = (string)$value;
10072 if (debugging(false, DEBUG_DEVELOPER)) {
10073 if (clean_param($this->identifier, PARAM_STRINGID) == '') {
10074 throw new coding_exception('Invalid string identifier. Most probably some illegal character is part of the string identifier. Please check your string definition');
10076 if (!empty($this->component) && clean_param($this->component, PARAM_COMPONENT) == '') {
10077 throw new coding_exception('Invalid string compontent. Please check your string definition');
10079 if (!get_string_manager()->string_exists($this->identifier, $this->component)) {
10080 debugging('String does not exist. Please check your string definition for '.$this->identifier.'/'.$this->component, DEBUG_DEVELOPER);
10086 * Processes the string.
10088 * This function actually processes the string, stores it in the string property
10089 * and then returns it.
10090 * You will notice that this function is VERY similar to the get_string method.
10091 * That is because it is pretty much doing the same thing.
10092 * However as this function is an upgrade it isn't as tolerant to backwards
10093 * compatibility.
10095 * @return string
10096 * @throws coding_exception
10098 protected function get_string() {
10099 global $CFG;
10101 // Check if we need to process the string.
10102 if ($this->string === null) {
10103 // Check the quality of the identifier.
10104 if ($CFG->debugdeveloper && clean_param($this->identifier, PARAM_STRINGID) === '') {
10105 throw new coding_exception('Invalid string identifier. Most probably some illegal character is part of the string identifier. Please check your string definition', DEBUG_DEVELOPER);
10108 // Process the string.
10109 $this->string = get_string_manager()->get_string($this->identifier, $this->component, $this->a, $this->lang);
10110 // Debugging feature lets you display string identifier and component.
10111 if (isset($CFG->debugstringids) && $CFG->debugstringids && optional_param('strings', 0, PARAM_INT)) {
10112 $this->string .= ' {' . $this->identifier . '/' . $this->component . '}';
10115 // Return the string.
10116 return $this->string;
10120 * Returns the string
10122 * @param string $lang The langauge to use when processing the string
10123 * @return string
10125 public function out($lang = null) {
10126 if ($lang !== null && $lang != $this->lang && ($this->lang == null && $lang != current_language())) {
10127 if ($this->forcedstring) {
10128 debugging('lang_string objects that have been used cannot be printed in another language. ('.$this->lang.' used)', DEBUG_DEVELOPER);
10129 return $this->get_string();
10131 $translatedstring = new lang_string($this->identifier, $this->component, $this->a, $lang);
10132 return $translatedstring->out();
10134 return $this->get_string();
10138 * Magic __toString method for printing a string
10140 * @return string
10142 public function __toString() {
10143 return $this->get_string();
10147 * Magic __set_state method used for var_export
10149 * @return string
10151 public function __set_state() {
10152 return $this->get_string();
10156 * Prepares the lang_string for sleep and stores only the forcedstring and
10157 * string properties... the string cannot be regenerated so we need to ensure
10158 * it is generated for this.
10160 * @return string
10162 public function __sleep() {
10163 $this->get_string();
10164 $this->forcedstring = true;
10165 return array('forcedstring', 'string', 'lang');
10169 * Returns the identifier.
10171 * @return string
10173 public function get_identifier() {
10174 return $this->identifier;
10178 * Returns the component.
10180 * @return string
10182 public function get_component() {
10183 return $this->component;
10188 * Get human readable name describing the given callable.
10190 * This performs syntax check only to see if the given param looks like a valid function, method or closure.
10191 * It does not check if the callable actually exists.
10193 * @param callable|string|array $callable
10194 * @return string|bool Human readable name of callable, or false if not a valid callable.
10196 function get_callable_name($callable) {
10198 if (!is_callable($callable, true, $name)) {
10199 return false;
10201 } else {
10202 return $name;