3 // This file is part of Moodle - http://moodle.org/
5 // Moodle is free software: you can redistribute it and/or modify
6 // it under the terms of the GNU General Public License as published by
7 // the Free Software Foundation, either version 3 of the License, or
8 // (at your option) any later version.
10 // Moodle is distributed in the hope that it will be useful,
11 // but WITHOUT ANY WARRANTY; without even the implied warranty of
12 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 // GNU General Public License for more details.
15 // You should have received a copy of the GNU General Public License
16 // along with Moodle. If not, see <http://www.gnu.org/licenses/>.
19 * Display profile for a particular user
21 * @copyright 1999 Martin Dougiamas http://dougiamas.com
22 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
26 require_once("../config.php");
27 require_once($CFG->dirroot
.'/user/profile/lib.php');
28 require_once($CFG->dirroot
.'/tag/lib.php');
30 $id = optional_param('id', 0, PARAM_INT
); // user id
31 $courseid = optional_param('course', SITEID
, PARAM_INT
); // course id (defaults to Site)
32 $enable = optional_param('enable', 0, PARAM_BOOL
); // enable email
33 $disable = optional_param('disable', 0, PARAM_BOOL
); // disable email
35 if (empty($id)) { // See your own profile by default
40 if ($courseid == SITEID
) { // Since Moodle 2.0 all site-level profiles are shown by profile.php
41 redirect($CFG->wwwroot
.'/user/profile.php?id='.$id); // Immediate redirect
44 $url = new moodle_url('/user/view.php', array('id'=>$id,'course'=>$courseid));
47 $user = $DB->get_record('user', array('id'=>$id), '*', MUST_EXIST
);
48 $course = $DB->get_record('course', array('id'=>$courseid), '*', MUST_EXIST
);
49 $currentuser = ($user->id
== $USER->id
);
51 $systemcontext = get_context_instance(CONTEXT_SYSTEM
);
52 $coursecontext = get_context_instance(CONTEXT_COURSE
, $course->id
);
53 $usercontext = get_context_instance(CONTEXT_USER
, $user->id
, MUST_EXIST
);
55 // Require login first
56 if (isguestuser($user)) {
57 // can not view profile of guest - thre is nothing to see there
58 print_error('invaliduserid');
61 $PAGE->set_context($coursecontext);
62 $PAGE->set_course($course);
63 $PAGE->set_pagetype('course-view-' . $course->format
); // To get the blocks exactly like the course
64 $PAGE->add_body_class('path-user'); // So we can style it independently
65 $PAGE->set_other_editing_capability('moodle/course:manageactivities');
70 and $DB->record_exists('role_assignments', array('userid'=>$USER->id
, 'contextid'=>$usercontext->id
))
71 and has_capability('moodle/user:viewdetails', $usercontext)) {
72 // TODO: very ugly hack - do not force "parents" to enrol into course their child is enrolled in,
73 // this way they may access the profile where they get overview of grades and child activity in course,
74 // please note this is just a guess!
79 require_login($course);
80 // what to do with users temporary accessing this course? shoudl they see the details?
83 $strpersonalprofile = get_string('personalprofile');
84 $strparticipants = get_string("participants");
85 $struser = get_string("user");
87 $fullname = fullname($user, has_capability('moodle/site:viewfullnames', $coursecontext));
89 /// Now test the actual capabilities and enrolment in course
92 if (!is_enrolled($coursecontext) and !is_viewing($coursecontext)) { // Need to have full access to a course to see the rest of own info
93 echo $OUTPUT->header();
94 echo $OUTPUT->heading(get_string('notenrolled', '', $fullname));
95 if (!empty($_SERVER['HTTP_REFERER'])) {
96 echo $OUTPUT->continue_button($_SERVER['HTTP_REFERER']);
98 echo $OUTPUT->footer();
104 $PAGE->set_title("$strpersonalprofile: ");
105 $PAGE->set_heading("$strpersonalprofile: ");
107 // check course level capabilities
108 if (!has_capability('moodle/user:viewdetails', $coursecontext) && // normal enrolled user or mnager
109 !has_capability('moodle/user:viewdetails', $usercontext)) { // usually parent
110 print_error('cannotviewprofile');
113 if (!is_enrolled($coursecontext, $user->id
)) {
114 // TODO: the only potential problem is that managers and inspectors might post in forum, but the link
115 // to profile would not work - maybe a new capability - moodle/user:freely_acessile_profile_for_anybody
116 // or test for course:inspect capability
117 if (has_capability('moodle/role:assign', $coursecontext)) {
118 $PAGE->navbar
->add($fullname);
119 echo $OUTPUT->header();
120 echo $OUTPUT->heading(get_string('notenrolled', '', $fullname));
122 echo $OUTPUT->header();
123 $PAGE->navbar
->add($struser);
124 echo $OUTPUT->heading(get_string('notenrolledprofile'));
126 if (!empty($_SERVER['HTTP_REFERER'])) {
127 echo $OUTPUT->continue_button($_SERVER['HTTP_REFERER']);
129 echo $OUTPUT->footer();
133 // If groups are in use and enforced throughout the course, then make sure we can meet in at least one course level group
134 if (groups_get_course_groupmode($course) == SEPARATEGROUPS
and $course->groupmodeforce
135 and !has_capability('moodle/site:accessallgroups', $coursecontext) and !has_capability('moodle/site:accessallgroups', $coursecontext, $user->id
)) {
136 if (!isloggedin() or isguestuser()) {
137 // do not use require_login() here because we might have already used require_login($course)
138 redirect(get_login_url());
140 $mygroups = array_keys(groups_get_all_groups($course->id
, $USER->id
, $course->defaultgroupingid
, 'g.id, g.name'));
141 $usergroups = array_keys(groups_get_all_groups($course->id
, $user->id
, $course->defaultgroupingid
, 'g.id, g.name'));
142 if (!array_intersect($mygroups, $usergroups)) {
143 print_error("groupnotamember", '', "../course/view.php?id=$course->id");
149 /// We've established they can see the user's name at least, so what about the rest?
152 $PAGE->navigation
->extend_for_user($user);
153 if ($node = $PAGE->settingsnav
->get('userviewingsettings'.$user->id
)) {
154 $node->forceopen
= true;
156 } else if ($node = $PAGE->settingsnav
->get('usercurrentsettings', navigation_node
::TYPE_CONTAINER
)) {
157 $node->forceopen
= true;
159 if ($node = $PAGE->settingsnav
->get('courseadmin')) {
160 $node->forceopen
= false;
163 $PAGE->set_title("$course->fullname: $strpersonalprofile: $fullname");
164 $PAGE->set_heading($course->fullname
);
165 $PAGE->set_pagelayout('standard');
166 echo $OUTPUT->header();
168 echo '<div class="userprofile">';
170 echo $OUTPUT->heading(fullname($user).' ('.$course->shortname
.')');
172 if ($user->deleted
) {
173 echo $OUTPUT->heading(get_string('userdeleted'));
174 if (!has_capability('moodle/user:update', $coursecontext)) {
175 echo $OUTPUT->footer();
180 /// OK, security out the way, now we are showing the user
182 add_to_log($course->id
, "user", "view", "view.php?id=$user->id&course=$course->id", "$user->id");
184 /// Get the hidden field list
185 if (has_capability('moodle/user:viewhiddendetails', $coursecontext)) {
186 $hiddenfields = array();
188 $hiddenfields = array_flip(explode(',', $CFG->hiddenuserfields
));
191 if (is_mnet_remote_user($user)) {
192 $sql = "SELECT h.id, h.name, h.wwwroot,
193 a.name as application, a.display_name
194 FROM {mnet_host} h, {mnet_application} a
195 WHERE h.id = ? AND h.applicationid = a.id";
197 $remotehost = $DB->get_record_sql($sql, array($user->mnethostid
));
199 $a->remotetype
= $remotehost->display_name
;
200 $a->remotename
= $remotehost->name
;
201 $a->remoteurl
= $remotehost->wwwroot
;
203 echo $OUTPUT->box(get_string('remoteuserinfo', 'mnet', $a), 'remoteuserinfo');
206 echo '<div class="userprofilebox clearfix"><div class="profilepicture">';
207 echo $OUTPUT->user_picture($user, array('size'=>100));
210 // Print the description
211 echo '<div class="descriptionbox"><div class="description">';
212 if ($user->description
&& !isset($hiddenfields['description'])) {
213 if (!empty($CFG->profilesforenrolledusersonly
) && !$DB->record_exists('role_assignments', array('userid'=>$id))) {
214 echo get_string('profilenotshown', 'moodle');
216 if ($courseid == SITEID
) {
217 $user->description
= file_rewrite_pluginfile_urls($user->description
, 'pluginfile.php', $usercontext->id
, 'user', 'profile', null);
219 // we have to make a little detour thought the course context to verify the access control for course profile
220 $user->description
= file_rewrite_pluginfile_urls($user->description
, 'pluginfile.php', $coursecontext->id
, 'user', 'profile', $user->id
);
222 echo format_text($user->description
, $user->descriptionformat
);
228 // Print all the little details in a list
230 echo '<table class="list" summary="">';
232 // Show last time this user accessed this course
233 if (!isset($hiddenfields['lastaccess'])) {
234 if ($lastaccess = $DB->get_record('user_lastaccess', array('userid'=>$user->id
, 'courseid'=>$course->id
))) {
235 $datestring = userdate($lastaccess->timeaccess
)." (".format_time(time() - $lastaccess->timeaccess
).")";
237 $datestring = get_string("never");
239 print_row(get_string("lastaccess").":", $datestring);
242 // Show roles in this course
243 if ($rolestring = get_user_roles_in_course($id, $course->id
)) {
244 print_row(get_string('roles').':', $rolestring);
247 // Show groups this user is in
248 if (!isset($hiddenfields['groups'])) {
249 if ($course->groupmode
!= SEPARATEGROUPS
or has_capability('moodle/site:accessallgroups', $coursecontext)) {
250 if ($usergroups = groups_get_all_groups($course->id
, $user->id
)) {
252 foreach ($usergroups as $group){
253 $groupstr .= ' <a href="'.$CFG->wwwroot
.'/user/index.php?id='.$course->id
.'&group='.$group->id
.'">'.format_string($group->name
).'</a>,';
255 print_row(get_string("group").":", rtrim($groupstr, ', '));
260 // Show other courses they may be in
261 if (!isset($hiddenfields['mycourses'])) {
262 if ($mycourses = enrol_get_users_courses($user->id
, true, NULL, 'visible DESC,sortorder ASC')) {
265 foreach ($mycourses as $mycourse) {
266 if ($mycourse->category
) {
267 if ($mycourse->id
!= $course->id
){
269 if ($mycourse->visible
== 0) {
270 $ccontext = get_context_instance(CONTEXT_COURSE
, $mycourse->id
);
271 if (!has_capability('moodle/course:viewhiddencourses', $ccontext)) {
274 $class = 'class="dimmed"';
276 $courselisting .= "<a href=\"{$CFG->wwwroot}/user/view.php?id={$user->id}&course={$mycourse->id}\" $class >"
277 . format_string($mycourse->fullname
) . "</a>, ";
279 $courselisting .= format_string($mycourse->fullname
) . ", ";
280 $PAGE->navbar
->add($mycourse->fullname
);
285 $courselisting .= "...";
289 print_row(get_string('courseprofiles').':', rtrim($courselisting,', '));
293 echo "</table></div></div>";
295 echo '<div class="fullprofilelink">';
296 echo html_writer
::link($CFG->wwwroot
.'/user/profile.php?id='.$id, get_string('fullprofile'));
299 /// TODO Add more useful overview info for teachers here, see below
301 /// Show links to notes made about this student (must click to display, for privacy)
303 /// Recent comments made in this course
305 /// Recent blogs associated with this course and items in it
309 echo '</div>'; // userprofile class
311 echo $OUTPUT->footer();
313 /// Functions ///////
315 function print_row($left, $right) {
316 echo "\n<tr><td class=\"label c0\">$left</td><td class=\"info c1\">$right</td></tr>\n";