comment/comment_ajax.php

   1 <?php
   2 // This file is part of Moodle - http://moodle.org/
   3 //
   4 // Moodle is free software: you can redistribute it and/or modify
   5 // it under the terms of the GNU General Public License as published by
   6 // the Free Software Foundation, either version 3 of the License, or
   7 // (at your option) any later version.
   8 //
   9 // Moodle is distributed in the hope that it will be useful,
  10 // but WITHOUT ANY WARRANTY; without even the implied warranty of
  11 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12 // GNU General Public License for more details.
  13 //
  14 // You should have received a copy of the GNU General Public License
  15 // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  16
  17 /*
  18  * Handling all ajax request for comments API
  19  */
  20 define('AJAX_SCRIPT', true);
  21
  22 require_once('../config.php');
  23 require_once($CFG->dirroot . '/comment/lib.php');
  24
  25 $contextid = optional_param('contextid', SYSCONTEXTID, PARAM_INT);
  26 $action    = optional_param('action', '', PARAM_ALPHA);
  27
  28 if (empty($CFG->usecomments)) {
  29     throw new comment_exception('commentsnotenabled', 'moodle');
  30 }
  31
  32 list($context, $course, $cm) = get_context_info_array($contextid);
  33
  34 $PAGE->set_url('/comment/comment_ajax.php');
  35
  36 // Allow anonymous user to view comments providing forcelogin now enabled
  37 require_course_login($course, true, $cm);
  38 $PAGE->set_context($context);
  39 if (!empty($cm)) {
  40     $PAGE->set_cm($cm, $course);
  41 } else if (!empty($course)) {
  42     $PAGE->set_course($course);
  43 }
  44
  45 if (!confirm_sesskey()) {
  46     $error = array('error'=>get_string('invalidsesskey', 'error'));
  47     die(json_encode($error));
  48 }
  49
  50 $client_id = required_param('client_id', PARAM_ALPHANUM);
  51 $area      = optional_param('area',      '', PARAM_ALPHAEXT);
  52 $commentid = optional_param('commentid', -1, PARAM_INT);
  53 $content   = optional_param('content',   '', PARAM_RAW);
  54 $itemid    = optional_param('itemid',    '', PARAM_INT);
  55 $page      = optional_param('page',      0,  PARAM_INT);
  56 $component = optional_param('component', '',  PARAM_ALPHAEXT);
  57
  58 // initilising comment object
  59 $args = new stdClass;
  60 $args->context   = $context;
  61 $args->course    = $course;
  62 $args->cm        = $cm;
  63 $args->area      = $area;
  64 $args->itemid    = $itemid;
  65 $args->client_id = $client_id;
  66 $args->component = $component;
  67 $manager = new comment($args);
  68
  69 echo $OUTPUT->header(); // send headers
  70
  71 // process ajax request
  72 switch ($action) {
  73     case 'add':
  74         if ($manager->can_post()) {
  75             $result = $manager->add($content);
  76             if (!empty($result) && is_object($result)) {
  77                 $result->count = $manager->count();
  78                 $result->client_id = $client_id;
  79                 echo json_encode($result);
  80                 die();
  81             }
  82         }
  83         break;
  84     case 'delete':
  85         $comment_record = $DB->get_record('comments', array('id'=>$commentid));
  86         if ($manager->can_delete($commentid) || $comment_record->userid == $USER->id) {
  87             if ($manager->delete($commentid)) {
  88                 $result = array(
  89                     'client_id' => $client_id,
  90                     'commentid' => $commentid
  91                 );
  92                 echo json_encode($result);
  93                 die();
  94             }
  95         }
  96         break;
  97     case 'get':
  98     default:
  99         if ($manager->can_view()) {
 100             $comments = $manager->get_comments($page);
 101             $result = array(
 102                 'list'       => $comments,
 103                 'count'      => $manager->count(),
 104                 'pagination' => $manager->get_pagination($page),
 105                 'client_id'  => $client_id
 106             );
 107             echo json_encode($result);
 108             die();
 109         }
 110         break;
 111 }
 112
 113 if (!isloggedin()) {
 114     // tell user to log in to view comments
 115     echo json_encode(array('error'=>'require_login'));
 116 }
 117 // ignore request
 118 die;