\n";
$assessmentlangs = GetAdditionalLanguagesFromSurveyID($surveyid);
$baselang = GetBaseLanguageFromSurveyID($surveyid);
array_unshift($assessmentlangs,$baselang); // makes an array with ALL the languages supported by the survey -> $assessmentlangs
if (!bHasSurveyPermission($surveyid, 'assessments','read'))
{
$action = "assessment";
include("access_denied.php");
include("admin.php");
exit;
}
if ($action == "assessmentadd" && bHasSurveyPermission($surveyid, 'assessments','create')) {
$inserttable=$dbprefix."assessments";
$first=true;
foreach ($assessmentlangs as $assessmentlang)
{
if (!isset($_POST['gid'])) $_POST['gid']=0;
$datarray=array(
'sid' => $surveyid,
'scope' => $_POST['scope'],
'gid' => $_POST['gid'],
'minimum' => $_POST['minimum'],
'maximum' => $_POST['maximum'],
'name' => $_POST['name_'.$assessmentlang],
'language' => $assessmentlang,
'message' => $_POST['assessmentmessage_'.$assessmentlang]);
if ($first==false)
{
$datarray['id']=$aid;
}
$query = $connect->GetInsertSQL($inserttable, $datarray, 0);
$result=$connect->Execute($query) or safe_die("Error inserting
$query
".$connect->ErrorMsg());
if ($first==true)
{
$first=false;
$aid=$connect->Insert_ID(db_table_name_nq('assessments'),"id");
}
}
} elseif ($action == "assessmentupdate" && bHasSurveyPermission($surveyid, 'assessments','update')) {
if ($filterxsshtml)
{
require_once("../classes/inputfilter/class.inputfilter_clean.php");
$myFilter = new InputFilter('','',1,1,1);
}
foreach ($assessmentlangs as $assessmentlang)
{
if (!isset($_POST['gid'])) $_POST['gid']=0;
if ($filterxsshtml)
{
$_POST['name_'.$assessmentlang]=$myFilter->process($_POST['name_'.$assessmentlang]);
$_POST['assessmentmessage_'.$assessmentlang]=$myFilter->process($_POST['assessmentmessage_'.$assessmentlang]);
}
$query = "UPDATE {$dbprefix}assessments
SET scope='".db_quote($_POST['scope'],true)."',
gid=".sanitize_int($_POST['gid']).",
minimum='".sanitize_signedint($_POST['minimum'])."',
maximum='".sanitize_signedint($_POST['maximum'])."',
name='".db_quote($_POST['name_'.$assessmentlang],true)."',
message='".db_quote($_POST['assessmentmessage_'.$assessmentlang],true)."'
WHERE language='$assessmentlang' and id=".sanitize_int($_POST['id']);
$result = $connect->Execute($query) or safe_die("Error updating
$query
".$connect->ErrorMsg());
}
} elseif ($action == "assessmentdelete" && bHasSurveyPermission($surveyid, 'assessments','delete')) {
$query = "DELETE FROM {$dbprefix}assessments
WHERE id=".sanitize_int($_POST['id']);
$result=$connect->Execute($query);
}
if (bHasSurveyPermission($surveyid, 'assessments','read'))
{
$assessmentsoutput=PrepareEditorScript();
$assessmentsoutput.="\n";
$assessmentsoutput.="
"; //CSS Firefox 2 transition fix if ($surveyid == "") { $assessmentsoutput.= $clang->gT("No SID Provided"); exit; } $assessments=getAssessments($surveyid); //$assessmentsoutput.= "
";print_r($assessments);echo ""; $groups=getGroups($surveyid); $groupselect="\n"; $headings=array($clang->gT("Scope"), $clang->gT("Question group"), $clang->gT("Minimum"), $clang->gT("Maximum")); $actiontitle=$clang->gT("Add"); $actionvalue="assessmentadd"; $thisid=""; if ($action == "assessmentedit" && bHasSurveyPermission($surveyid, 'assessments','update')) { $query = "SELECT * FROM {$dbprefix}assessments WHERE id=".sanitize_int($_POST['id'])." and language='$baselang'"; $results = db_execute_assoc($query); while($row=$results->FetchRow()) { $editdata=$row; } $groupselect=str_replace("'".$editdata['gid']."'", "'".$editdata['gid']."' selected", $groupselect); $actiontitle=$clang->gT("Edit"); $actionvalue="assessmentupdate"; $thisid=$editdata['id']; } //$assessmentsoutput.= "
"; print_r($edits); $assessmentsoutput.= ""; //PRESENT THE PAGE $assessmentsoutput.= "" ."
| ".$clang->gT("ID")." | ".$clang->gT("Actions")." | ".$clang->gT("SID")." | \n"; foreach ($headings as $head) { $assessmentsoutput.= "$head | \n"; } $assessmentsoutput.= "".$clang->gT("Title")." | ".$clang->gT("Message")." | "; $assessmentsoutput.= "|||||
|---|---|---|---|---|---|---|---|---|---|---|
| ".$assess['id']." | \n"; $assessmentsoutput.= ""; if (bHasSurveyPermission($surveyid, 'assessments','update')) { $assessmentsoutput.=""; } if (bHasSurveyPermission($surveyid, 'assessments','delete')) { $assessmentsoutput.=""; } $assessmentsoutput.= " | ".$assess['sid']." | \n"; if ($assess['scope'] == "T") { $assessmentsoutput.= "".$clang->gT("Total")." | \n"; $assessmentsoutput.= "- | \n"; } else { $assessmentsoutput.= "".$clang->gT("Question group")." | \n"; $assessmentsoutput.= "".$groups[$assess['gid']]['group_name']." (".$assess['gid'].") | \n"; } $assessmentsoutput.= "".$assess['minimum']." | \n"; $assessmentsoutput.= "".$assess['maximum']." | \n"; $assessmentsoutput.= "".stripslashes($assess['name'])." | \n"; $assessmentsoutput.= "".strip_tags(strip_javascript($assess['message']))." | \n"; $assessmentsoutput.= "