course/rest.php

   1 <?php
   2
   3 // This file is part of Moodle - http://moodle.org/
   4 //
   5 // Moodle is free software: you can redistribute it and/or modify
   6 // it under the terms of the GNU General Public License as published by
   7 // the Free Software Foundation, either version 3 of the License, or
   8 // (at your option) any later version.
   9 //
  10 // Moodle is distributed in the hope that it will be useful,
  11 // but WITHOUT ANY WARRANTY; without even the implied warranty of
  12 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  13 // GNU General Public License for more details.
  14 //
  15 // You should have received a copy of the GNU General Public License
  16 // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  17
  18 /**
  19  * Provide interface for topics AJAX course formats
  20  *
  21  * @copyright 1999 Martin Dougiamas  http://dougiamas.com
  22  * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  23  * @package course
  24  */
  25
  26 if (!defined('AJAX_SCRIPT')) {
  27     define('AJAX_SCRIPT', true);
  28 }
  29 require_once(dirname(__FILE__) . '/../config.php');
  30 require_once($CFG->dirroot.'/course/lib.php');
  31
  32 // Initialise ALL the incoming parameters here, up front.
  33 $courseid   = required_param('courseId', PARAM_INT);
  34 $class      = required_param('class', PARAM_ALPHA);
  35 $field      = optional_param('field', '', PARAM_ALPHA);
  36 $instanceid = optional_param('instanceId', 0, PARAM_INT);
  37 $sectionid  = optional_param('sectionId', 0, PARAM_INT);
  38 $beforeid   = optional_param('beforeId', 0, PARAM_INT);
  39 $value      = optional_param('value', 0, PARAM_INT);
  40 $column     = optional_param('column', 0, PARAM_ALPHA);
  41 $id         = optional_param('id', 0, PARAM_INT);
  42 $summary    = optional_param('summary', '', PARAM_RAW);
  43 $sequence   = optional_param('sequence', '', PARAM_SEQUENCE);
  44 $visible    = optional_param('visible', 0, PARAM_INT);
  45 $pageaction = optional_param('action', '', PARAM_ALPHA); // Used to simulate a DELETE command
  46 $title      = optional_param('title', '', PARAM_TEXT);
  47
  48 $PAGE->set_url('/course/rest.php', array('courseId'=>$courseid,'class'=>$class));
  49
  50 //NOTE: when making any changes here please make sure it is using the same access control as course/mod.php !!
  51
  52 $course = $DB->get_record('course', array('id' => $courseid), '*', MUST_EXIST);
  53 // Check user is logged in and set contexts if we are dealing with resource
  54 if (in_array($class, array('resource'))) {
  55     $cm = get_coursemodule_from_id(null, $id, $course->id, false, MUST_EXIST);
  56     require_login($course, false, $cm);
  57     $modcontext = get_context_instance(CONTEXT_MODULE, $cm->id);
  58 } else {
  59     require_login($course);
  60 }
  61 $coursecontext = get_context_instance(CONTEXT_COURSE, $course->id);
  62 require_sesskey();
  63
  64 echo $OUTPUT->header(); // send headers
  65
  66 // OK, now let's process the parameters and do stuff
  67 // MDL-10221 the DELETE method is not allowed on some web servers, so we simulate it with the action URL param
  68 $requestmethod = $_SERVER['REQUEST_METHOD'];
  69 if ($pageaction == 'DELETE') {
  70     $requestmethod = 'DELETE';
  71 }
  72
  73 switch($requestmethod) {
  74     case 'POST':
  75
  76         switch ($class) {
  77             case 'section':
  78
  79                 if (!$DB->record_exists('course_sections', array('course'=>$course->id, 'section'=>$id))) {
  80                     throw new moodle_exception('AJAX commands.php: Bad Section ID '.$id);
  81                 }
  82
  83                 switch ($field) {
  84                     case 'visible':
  85                         require_capability('moodle/course:sectionvisibility', $coursecontext);
  86                         $resourcestotoggle = set_section_visible($course->id, $id, $value);
  87                         echo json_encode(array('resourcestotoggle' => $resourcestotoggle));
  88                         break;
  89
  90                     case 'move':
  91                         require_capability('moodle/course:update', $coursecontext);
  92                         move_section_to($course, $id, $value);
  93                         // See if format wants to do something about it
  94                         $libfile = $CFG->dirroot.'/course/format/'.$course->format.'/lib.php';
  95                         $functionname = 'callback_'.$course->format.'_ajax_section_move';
  96                         if (!function_exists($functionname) && file_exists($libfile)) {
  97                             require_once $libfile;
  98                         }
  99                         if (function_exists($functionname)) {
 100                             echo json_encode($functionname($course));
 101                         }
 102                         break;
 103                 }
 104                 rebuild_course_cache($course->id);
 105                 break;
 106
 107             case 'resource':
 108                 switch ($field) {
 109                     case 'visible':
 110                         require_capability('moodle/course:activityvisibility', $modcontext);
 111                         set_coursemodule_visible($cm->id, $value);
 112                         break;
 113
 114                     case 'groupmode':
 115                         require_capability('moodle/course:manageactivities', $modcontext);
 116                         set_coursemodule_groupmode($cm->id, $value);
 117                         break;
 118
 119                     case 'indent':
 120                         require_capability('moodle/course:manageactivities', $modcontext);
 121                         $cm->indent = $value;
 122                         if ($cm->indent >= 0) {
 123                             $DB->update_record('course_modules', $cm);
 124                         }
 125                         break;
 126
 127                     case 'move':
 128                         require_capability('moodle/course:manageactivities', $modcontext);
 129                         if (!$section = $DB->get_record('course_sections', array('course'=>$course->id, 'section'=>$sectionid))) {
 130                             throw new moodle_exception('AJAX commands.php: Bad section ID '.$sectionid);
 131                         }
 132
 133                         if ($beforeid > 0){
 134                             $beforemod = get_coursemodule_from_id('', $beforeid, $course->id);
 135                             $beforemod = $DB->get_record('course_modules', array('id'=>$beforeid));
 136                         } else {
 137                             $beforemod = NULL;
 138                         }
 139
 140                         moveto_module($cm, $section, $beforemod);
 141                         echo json_encode(array('visible' => $cm->visible));
 142                         break;
 143                     case 'gettitle':
 144                         require_capability('moodle/course:manageactivities', $modcontext);
 145                         $cm = get_coursemodule_from_id('', $id, 0, false, MUST_EXIST);
 146                         $module = new stdClass();
 147                         $module->id = $cm->instance;
 148
 149                         // Don't pass edit strings through multilang filters - we need the entire string
 150                         echo json_encode(array('instancename' => $cm->name));
 151                         break;
 152                     case 'updatetitle':
 153                         require_capability('moodle/course:manageactivities', $modcontext);
 154                         require_once($CFG->libdir . '/gradelib.php');
 155                         $cm = get_coursemodule_from_id('', $id, 0, false, MUST_EXIST);
 156                         $module = new stdClass();
 157                         $module->id = $cm->instance;
 158
 159                         // Escape strings as they would be by mform
 160                         if (!empty($CFG->formatstringstriptags)) {
 161                             $module->name = clean_param($title, PARAM_TEXT);
 162                         } else {
 163                             $module->name = clean_param($title, PARAM_CLEANHTML);
 164                         }
 165
 166                         if (!empty($module->name)) {
 167                             $DB->update_record($cm->modname, $module);
 168                         } else {
 169                             $module->name = $cm->name;
 170                         }
 171
 172                         // Attempt to update the grade item if relevant
 173                         $grademodule = $DB->get_record($cm->modname, array('id' => $cm->instance));
 174                         $grademodule->cmidnumber = $cm->idnumber;
 175                         $grademodule->modname = $cm->modname;
 176                         grade_update_mod_grades($grademodule);
 177
 178                         // We need to return strings after they've been through filters for multilang
 179                         $stringoptions = new stdClass;
 180                         $stringoptions->context = $coursecontext;
 181                         echo json_encode(array('instancename' => html_entity_decode(format_string($module->name, true,  $stringoptions))));
 182                         break;
 183                 }
 184                 rebuild_course_cache($course->id);
 185                 break;
 186
 187             case 'course':
 188                 switch($field) {
 189                     case 'marker':
 190                         require_capability('moodle/course:setcurrentsection', $coursecontext);
 191                         course_set_marker($course->id, $value);
 192                         break;
 193                 }
 194                 break;
 195         }
 196         break;
 197
 198     case 'DELETE':
 199         switch ($class) {
 200             case 'resource':
 201                 require_capability('moodle/course:manageactivities', $modcontext);
 202                 $modlib = "$CFG->dirroot/mod/$cm->modname/lib.php";
 203
 204                 if (file_exists($modlib)) {
 205                     include_once($modlib);
 206                 } else {
 207                     throw new moodle_exception("Ajax rest.php: This module is missing mod/$cm->modname/lib.php");
 208                 }
 209                 $deleteinstancefunction = $cm->modname."_delete_instance";
 210
 211                 // Run the module's cleanup funtion.
 212                 if (!$deleteinstancefunction($cm->instance)) {
 213                     throw new moodle_exception("Ajax rest.php: Could not delete the $cm->modname $cm->name (instance)");
 214                     die;
 215                 }
 216
 217                 // remove all module files in case modules forget to do that
 218                 $fs = get_file_storage();
 219                 $fs->delete_area_files($modcontext->id);
 220
 221                 if (!delete_course_module($cm->id)) {
 222                     throw new moodle_exception("Ajax rest.php: Could not delete the $cm->modname $cm->name (coursemodule)");
 223                 }
 224                 // Remove the course_modules entry.
 225                 if (!delete_mod_from_section($cm->id, $cm->section)) {
 226                     throw new moodle_exception("Ajax rest.php: Could not delete the $cm->modname $cm->name from section");
 227                 }
 228
 229                 // Trigger a mod_deleted event with information about this module.
 230                 $eventdata = new stdClass();
 231                 $eventdata->modulename = $cm->modname;
 232                 $eventdata->cmid       = $cm->id;
 233                 $eventdata->courseid   = $course->id;
 234                 $eventdata->userid     = $USER->id;
 235                 events_trigger('mod_deleted', $eventdata);
 236
 237                 rebuild_course_cache($course->id);
 238
 239                 add_to_log($courseid, "course", "delete mod",
 240                            "view.php?id=$courseid",
 241                            "$cm->modname $cm->instance", $cm->id);
 242                 break;
 243         }
 244         break;
 245 }