\n"; $assessmentlangs = GetAdditionalLanguagesFromSurveyID($surveyid); $baselang = GetBaseLanguageFromSurveyID($surveyid); array_unshift($assessmentlangs,$baselang); // makes an array with ALL the languages supported by the survey -> $assessmentlangs if (!bHasSurveyPermission($surveyid, 'assessments','read')) { $action = "assessment"; include("access_denied.php"); include("admin.php"); exit; } if ($action == "assessmentadd" && bHasSurveyPermission($surveyid, 'assessments','create')) { $inserttable=$dbprefix."assessments"; $first=true; foreach ($assessmentlangs as $assessmentlang) { if (!isset($_POST['gid'])) $_POST['gid']=0; $datarray=array( 'sid' => $surveyid, 'scope' => $_POST['scope'], 'gid' => $_POST['gid'], 'minimum' => $_POST['minimum'], 'maximum' => $_POST['maximum'], 'name' => $_POST['name_'.$assessmentlang], 'language' => $assessmentlang, 'message' => $_POST['assessmentmessage_'.$assessmentlang]); if ($first==false) { $datarray['id']=$aid; } $query = $connect->GetInsertSQL($inserttable, $datarray, 0); $result=$connect->Execute($query) or safe_die("Error inserting
$query
".$connect->ErrorMsg()); if ($first==true) { $first=false; $aid=$connect->Insert_ID(db_table_name_nq('assessments'),"id"); } } } elseif ($action == "assessmentupdate" && bHasSurveyPermission($surveyid, 'assessments','update')) { if ($filterxsshtml) { require_once("../classes/inputfilter/class.inputfilter_clean.php"); $myFilter = new InputFilter('','',1,1,1); } foreach ($assessmentlangs as $assessmentlang) { if (!isset($_POST['gid'])) $_POST['gid']=0; if ($filterxsshtml) { $_POST['name_'.$assessmentlang]=$myFilter->process($_POST['name_'.$assessmentlang]); $_POST['assessmentmessage_'.$assessmentlang]=$myFilter->process($_POST['assessmentmessage_'.$assessmentlang]); } $query = "UPDATE {$dbprefix}assessments SET scope='".db_quote($_POST['scope'],true)."', gid=".sanitize_int($_POST['gid']).", minimum='".sanitize_signedint($_POST['minimum'])."', maximum='".sanitize_signedint($_POST['maximum'])."', name='".db_quote($_POST['name_'.$assessmentlang],true)."', message='".db_quote($_POST['assessmentmessage_'.$assessmentlang],true)."' WHERE language='$assessmentlang' and id=".sanitize_int($_POST['id']); $result = $connect->Execute($query) or safe_die("Error updating
$query
".$connect->ErrorMsg()); } } elseif ($action == "assessmentdelete" && bHasSurveyPermission($surveyid, 'assessments','delete')) { $query = "DELETE FROM {$dbprefix}assessments WHERE id=".sanitize_int($_POST['id']); $result=$connect->Execute($query); } if (bHasSurveyPermission($surveyid, 'assessments','read')) { $assessmentsoutput=PrepareEditorScript(); $assessmentsoutput.="\n"; $assessmentsoutput.="\n"; $assessmentsoutput .= "

 

"; //CSS Firefox 2 transition fix if ($surveyid == "") { $assessmentsoutput.= $clang->gT("No SID Provided"); exit; } $assessments=getAssessments($surveyid); //$assessmentsoutput.= "
";print_r($assessments);echo "
"; $groups=getGroups($surveyid); $groupselect="\n"; $headings=array($clang->gT("Scope"), $clang->gT("Question group"), $clang->gT("Minimum"), $clang->gT("Maximum")); $actiontitle=$clang->gT("Add"); $actionvalue="assessmentadd"; $thisid=""; if ($action == "assessmentedit" && bHasSurveyPermission($surveyid, 'assessments','update')) { $query = "SELECT * FROM {$dbprefix}assessments WHERE id=".sanitize_int($_POST['id'])." and language='$baselang'"; $results = db_execute_assoc($query); while($row=$results->FetchRow()) { $editdata=$row; } $groupselect=str_replace("'".$editdata['gid']."'", "'".$editdata['gid']."' selected", $groupselect); $actiontitle=$clang->gT("Edit"); $actionvalue="assessmentupdate"; $thisid=$editdata['id']; } //$assessmentsoutput.= "
"; print_r($edits); $assessmentsoutput.= "
"; //PRESENT THE PAGE $assessmentsoutput.= "
".$clang->gT("Assessment rules")."
" ."" ."\n"; foreach ($headings as $head) { $assessmentsoutput.= "\n"; } $assessmentsoutput.= ""; $assessmentsoutput.= "\n"; $flipflop=true; foreach($assessments as $assess) { $flipflop=!$flipflop; $assessmentsoutput.= "\n"; if ($flipflop==true){$assessmentsoutput.= "\n";} else {$assessmentsoutput.= "\n";} $assessmentsoutput.= "\n"; $assessmentsoutput.= "\n"; if ($assess['scope'] == "T") { $assessmentsoutput.= "\n"; $assessmentsoutput.= "\n"; } else { $assessmentsoutput.= "\n"; $assessmentsoutput.= "\n"; } $assessmentsoutput.= "\n"; $assessmentsoutput.= "\n"; $assessmentsoutput.= "\n"; $assessmentsoutput.= "\n"; $assessmentsoutput.= "\n"; } $assessmentsoutput.= "
".$clang->gT("ID")."".$clang->gT("Actions")."".$clang->gT("SID")."$head".$clang->gT("Title")."".$clang->gT("Message")."
".$assess['id'].""; if (bHasSurveyPermission($surveyid, 'assessments','update')) { $assessmentsoutput.="
"; } if (bHasSurveyPermission($surveyid, 'assessments','delete')) { $assessmentsoutput.="
"; } $assessmentsoutput.= "
".$assess['sid']."".$clang->gT("Total")."-".$clang->gT("Question group")."".$groups[$assess['gid']]['group_name']." (".$assess['gid'].")".$assess['minimum']."".$assess['maximum']."".stripslashes($assess['name'])."".strip_tags(strip_javascript($assess['message']))."
"; if ((bHasSurveyPermission($surveyid, 'assessments','update') && $actionvalue=="assessmentupdate") || (bHasSurveyPermission($surveyid, 'assessments','create')&& $actionvalue=="assessmentadd")) { //now present edit/insert form $assessmentsoutput.= "
\n"; $assessmentsoutput.= "$actiontitle
\n"; $assessmentsoutput.="