--- loncom/homework/grades.pm 2015/02/22 01:34:48 1.732 +++ loncom/homework/grades.pm 2015/06/09 21:22:48 1.736 @@ -1,7 +1,7 @@ # The LearningOnline Network with CAPA # The LON-CAPA Grading handler # -# $Id: grades.pm,v 1.732 2015/02/22 01:34:48 raeburn Exp $ +# $Id: grades.pm,v 1.736 2015/06/09 21:22:48 damieng Exp $ # # Copyright Michigan State University Board of Trustees # @@ -857,10 +857,11 @@ sub listStudents { my $res_error; my ($partlist,$handgrade,$responseType) = &response_type($symb,\$res_error); - my %lt = &Apache::lonlocal::texthash ( + my %js_lt = &Apache::lonlocal::texthash ( 'multiple' => 'Please select a student or group of students before clicking on the Next button.', 'single' => 'Please select the student before clicking on the Next button.', ); + &js_escape(\%js_lt); $request->print(&Apache::lonhtmlcommon::scripttag(<<LISTJAVASCRIPT)); function checkSelect(checkBox) { var ctr=0; @@ -871,12 +872,12 @@ sub listStudents { ctr++; } } - sense = '$lt{'multiple'}'; + sense = '$js_lt{'multiple'}'; } else { if (checkBox.checked) { ctr = 1; } - sense = '$lt{'single'}'; + sense = '$js_lt{'single'}'; } if (ctr == 0) { alert(sense); @@ -1177,7 +1178,8 @@ sub processGroup { #--- Javascript to handle the submission page functionality --- sub sub_page_js { my $request = shift; - my $alertmsg = &mt('A number equal or greater than 0 is expected. Entered value = '); + my $alertmsg = &mt('A number equal or greater than 0 is expected. Entered value = '); + &js_escape(\$alertmsg); $request->print(&Apache::lonhtmlcommon::scripttag(<<SUBJAVASCRIPT)); function updateRadio(formname,id,weight) { var gradeBox = formname["GD_BOX"+id]; @@ -1422,10 +1424,21 @@ INNERJS my $docopen=&Apache::lonhtmlcommon::javascript_docopen(); $docopen=~s/^document\.//; - my %lt = &Apache::lonlocal::texthash( + my %js_lt = &Apache::lonlocal::texthash( keyw => 'Keywords list, separated by a space. Add/delete to list if desired.', plse => 'Please select a word or group of words from document and then click this link.', adds => 'Add selection to keyword list? Edit if desired.', + col1 => 'red', + col2 => 'green', + col3 => 'blue', + siz1 => 'normal', + siz2 => '+1', + siz3 => '+2', + sty1 => 'normal', + sty2 => 'italic', + sty3 => 'bold', + ); + my %html_js_lt = &Apache::lonlocal::texthash( comp => 'Compose Message for: ', incl => 'Include', type => 'Type', @@ -1438,21 +1451,15 @@ INNERJS txtc => 'Text Color', font => 'Font Size', fnst => 'Font Style', - col1 => 'red', - col2 => 'green', - col3 => 'blue', - siz1 => 'normal', - siz2 => '+1', - siz3 => '+2', - sty1 => 'normal', - sty2 => 'italic', - sty3 => 'bold', ); + &js_escape(\%js_lt); + &html_escape(\%html_js_lt); + &js_escape(\%html_js_lt); $request->print(&Apache::lonhtmlcommon::scripttag(<<SUBJAVASCRIPT)); //===================== Show list of keywords ==================== function keywords(formname) { - var nret = prompt("$lt{'keyw'}",formname.keywords.value); + var nret = prompt("$js_lt{'keyw'}",formname.keywords.value); if (nret==null) return; formname.keywords.value = nret; @@ -1479,10 +1486,10 @@ INNERJS else return; var cleantxt = txt.replace(new RegExp('([\\f\\n\\r\\t\\v ])+', 'g')," "); if (cleantxt=="") { - alert("$lt{'plse'}"); + alert("$js_lt{'plse'}"); return; } - var nret = prompt("$lt{'adds'}",cleantxt); + var nret = prompt("$js_lt{'adds'}",cleantxt); if (nret==null) return; document.SCORE.keywords.value = document.SCORE.keywords.value+" "+nret; if (document.SCORE.keywords.value != "") { @@ -1562,16 +1569,16 @@ INNERJS pDoc.write("<form action=\\"inactive\\" name=\\"msgcenter\\">"); pDoc.write("<input value=\\""+usrctr+"\\" name=\\"usrctr\\" type=\\"hidden\\">"); - pDoc.write("<h1> $lt{'comp'}\"+fullname+\"<\\/h1>"); + pDoc.write("<h1> $html_js_lt{'comp'}\"+fullname+\"<\\/h1>"); pDoc.write('<table style="border:1px solid black;"><tr>'); - pDoc.write("<td><b>$lt{'incl'}<\\/b><\\/td><td><b>$lt{'type'}<\\/b><\\/td><td><b>$lt{'mesa'}<\\/td><\\/tr>"); + pDoc.write("<td><b>$html_js_lt{'incl'}<\\/b><\\/td><td><b>$html_js_lt{'type'}<\\/b><\\/td><td><b>$html_js_lt{'mesa'}<\\/td><\\/tr>"); } function displaySubject(msg,shwsel) { pDoc = pWin.document; pDoc.write("<tr>"); pDoc.write("<td align=\\"center\\"><input name=\\"subchk\\" type=\\"checkbox\\"" +shwsel+"><\\/td>"); - pDoc.write("<td>$lt{'subj'}<\\/td>"); + pDoc.write("<td>$html_js_lt{'subj'}<\\/td>"); pDoc.write("<td><input name=\\"msgsub\\" type=\\"text\\" value=\\""+msg+"\\"size=\\"40\\" maxlength=\\"80\\"><\\/td><\\/tr>"); } @@ -1587,7 +1594,7 @@ INNERJS pDoc = pWin.document; pDoc.write("<tr>"); pDoc.write("<td align=\\"center\\"><input name=\\"newmsgchk\\" type=\\"checkbox\\"" +shwsel+"><\\/td>"); - pDoc.write("<td align=\\"center\\">$lt{'new'}<\\/td>"); + pDoc.write("<td align=\\"center\\">$html_js_lt{'new'}<\\/td>"); pDoc.write("<td><textarea name=\\"newmsg\\" cols=\\"60\\" rows=\\"3\\" onchange=\\"javascript:this.form.newmsgchk.checked=true\\" >"+newmsg+"<\\/textarea><\\/td><\\/tr>"); } @@ -1595,8 +1602,8 @@ INNERJS pDoc = pWin.document; //pDoc.write("<\\/table>"); pDoc.write("<\\/td><\\/tr><\\/table> "); - pDoc.write("<input type=\\"button\\" value=\\"$lt{'save'}\\" onclick=\\"javascript:checkInput()\\"> "); - pDoc.write("<input type=\\"button\\" value=\\"$lt{'canc'}\\" onclick=\\"self.close()\\"><br /><br />"); + pDoc.write("<input type=\\"button\\" value=\\"$html_js_lt{'save'}\\" onclick=\\"javascript:checkInput()\\"> "); + pDoc.write("<input type=\\"button\\" value=\\"$html_js_lt{'canc'}\\" onclick=\\"self.close()\\"><br /><br />"); pDoc.write("<\\/form>"); pDoc.write('$end_page_msg_central'); pDoc.close(); @@ -1610,15 +1617,15 @@ INNERJS var redsel = ""; var grnsel = ""; var blusel = ""; - var txtcol1 = "$lt{'col1'}"; - var txtcol2 = "$lt{'col2'}"; - var txtcol3 = "$lt{'col3'}"; - var txtsiz1 = "$lt{'siz1'}"; - var txtsiz2 = "$lt{'siz2'}"; - var txtsiz3 = "$lt{'siz3'}"; - var txtsty1 = "$lt{'sty1'}"; - var txtsty2 = "$lt{'sty2'}"; - var txtsty3 = "$lt{'sty3'}"; + var txtcol1 = "$js_lt{'col1'}"; + var txtcol2 = "$js_lt{'col2'}"; + var txtcol3 = "$js_lt{'col3'}"; + var txtsiz1 = "$js_lt{'siz1'}"; + var txtsiz2 = "$js_lt{'siz2'}"; + var txtsiz3 = "$js_lt{'siz3'}"; + var txtsty1 = "$js_lt{'sty1'}"; + var txtsty2 = "$js_lt{'sty2'}"; + var txtsty3 = "$js_lt{'sty3'}"; if (kwclr=="red") {var redsel="checked='checked'"}; if (kwclr=="green") {var grnsel="checked='checked'"}; if (kwclr=="blue") {var blusel="checked='checked'"}; @@ -1655,10 +1662,10 @@ INNERJS hDoc.$docopen; hDoc.write('$start_page_highlight_central'); hDoc.write("<form action=\\"inactive\\" name=\\"hlCenter\\">"); - hDoc.write("<h1>$lt{'kehi'}<\\/h1>"); + hDoc.write("<h1>$html_js_lt{'kehi'}<\\/h1>"); hDoc.write('<table border="0" width="100%"><tr style="background-color:#A1D676">'); - hDoc.write("<th>$lt{'txtc'}<\\/th><th>$lt{'font'}<\\/th><th>$lt{'fnst'}<\\/th><\\/tr>"); + hDoc.write("<th>$html_js_lt{'txtc'}<\\/th><th>$html_js_lt{'font'}<\\/th><th>$html_js_lt{'fnst'}<\\/th><\\/tr>"); } function highlightbody(clrval,clrtxt,clrsel,szval,sztxt,szsel,syval,sytxt,sysel) { @@ -1676,8 +1683,8 @@ INNERJS function highlightend() { var hDoc = hwdWin.document; hDoc.write("<\\/table><br \\/>"); - hDoc.write("<input type=\\"button\\" value=\\"$lt{'save'}\\" onclick=\\"javascript:updateChoice(1)\\" \\/> "); - hDoc.write("<input type=\\"button\\" value=\\"$lt{'canc'}\\" onclick=\\"self.close()\\" \\/><br /><br />"); + hDoc.write("<input type=\\"button\\" value=\\"$html_js_lt{'save'}\\" onclick=\\"javascript:updateChoice(1)\\" \\/> "); + hDoc.write("<input type=\\"button\\" value=\\"$html_js_lt{'canc'}\\" onclick=\\"self.close()\\" \\/><br /><br />"); hDoc.write("<\\/form>"); hDoc.write('$end_page_highlight_central'); hDoc.close(); @@ -2231,11 +2238,7 @@ sub submission { if ($hide eq 'rand') { $type = 'randomizetry'; $trial = $record{"resource.$partid.tries"}; - if (exists($record{"resource.$partid.rawrndseed"})) { - $rndseed = $record{"resource.$partid.rawrndseed"}; - } else { - $rndseed = $record{"resource.$partid.rndseed"}; - } + $rndseed = $record{"resource.$partid.rndseed"}; } if ($env{'form.checkPlag'}) { my ($oname,$odom,$ocrsid,$oessay,$osim)= @@ -3383,6 +3386,7 @@ sub viewgrades_js { my ($request) = shift; my $alertmsg = &mt('A number equal or greater than 0 is expected. Entered value = '); + &js_escape(\$alertmsg); $request->print(&Apache::lonhtmlcommon::scripttag(<<VIEWJAVASCRIPT)); function writePoint(partid,weight,point) { var radioButton = document.classgrade["RADVAL_"+partid]; @@ -4032,6 +4036,8 @@ sub split_part_type { sub csvupload_javascript_reverse_associate { my $error1=&mt('You need to specify the username or the student/employee ID'); my $error2=&mt('You need to specify at least one grading field'); + &js_escape(\$error1); + &js_escape(\$error2); return(<<ENDPICK); function verify(vf) { var foundsomething=0; @@ -4072,6 +4078,8 @@ ENDPICK sub csvupload_javascript_forward_associate { my $error1=&mt('You need to specify the username or the student/employee ID'); my $error2=&mt('You need to specify at least one grading field'); + &js_escape(\$error1); + &js_escape(\$error2); return(<<ENDPICK); function verify(vf) { var foundsomething=0; @@ -4180,6 +4188,7 @@ ENDPICK sub checkforfile_js { my $alertmsg = &mt('Please use the browse button to select a file from your local directory.'); + &js_escape(\$alertmsg); my $result = &Apache::lonhtmlcommon::scripttag(<<CSVFORMJS); function checkUpload(formname) { if (formname.upfile.value == "") { @@ -4449,6 +4458,7 @@ sub pickStudentPage { my ($request,$symb) = @_; my $alertmsg = &mt('Please select the student you wish to grade.'); + &js_escape(\$alertmsg); $request->print(&Apache::lonhtmlcommon::scripttag(<<LISTJAVASCRIPT)); function checkPickOne(formname) { @@ -4810,7 +4820,7 @@ sub displaySubByDates { my $interaction; my $no_increment = 1; - my %lastrndseed; + my (%lastrndseed,%lasttype); for ($version=1;$version<=$$record{'version'};$version++) { my $timestamp = &Apache::lonlocal::locallocaltime($$record{$version.':timestamp'}); @@ -4861,23 +4871,21 @@ sub displaySubByDates { my ($trial,$rndseed,$newvariation); if ($type eq 'randomizetry') { $trial = $$record{"$where.$partid.tries"}; - if (exists($$record{"$where.$partid.rawrndseed"})) { - $rndseed = $$record{"$where.$partid.rawrndseed"}; - } else { - $rndseed = $$record{"$where.$partid.rndseed"}; - } + $rndseed = $$record{"$where.$partid.rndseed"}; } if ($$record{"$where.$partid.tries"} eq '') { $displaySub[0].=&mt('Trial not counted'); } else { $displaySub[0].=&mt('Trial: [_1]', $$record{"$where.$partid.tries"}); - if ($rndseed || $lastrndseed{$partid}) { - if ($rndseed ne $lastrndseed{$partid}) { + if (($rndseed ne '') && ($lastrndseed{$partid} ne '')) { + if (($rndseed ne $lastrndseed{$partid}) && + (($type eq 'randomizetry') || ($lasttype{$partid} eq 'randomizetry'))) { $newvariation = ' ('.&mt('New variation this try').')'; } } $lastrndseed{$partid} = $rndseed; + $lasttype{$partid} = $type; } my $responseType=($isTask ? 'Task' : $responseType->{$partid}->{$responseId}); @@ -5488,10 +5496,12 @@ sub scantron_selectphase { my $default_form_data=&defaultFormData($symb); my $cdom= $env{'course.'.$env{'request.course.id'}.'.domain'}; my $cnum= $env{'course.'.$env{'request.course.id'}.'.num'}; + my $alertmsg = &mt('Please use the browse button to select a file from your local directory.'); + &js_escape(\$alertmsg); $r->print(&Apache::lonhtmlcommon::scripttag(' function checkUpload(formname) { if (formname.upfile.value == "") { - alert("'.&mt('Please use the browse button to select a file from your local directory.').'"); + alert("'.$alertmsg.'"); return false; } formname.submit(); @@ -7478,6 +7488,7 @@ sub verify_bubbles_checked { my (@ansnums) = @_; my $ansnumstr = join('","',@ansnums); my $warning = &mt("A bubble or 'No bubble' selection has not been made for one or more lines."); + &js_escape(\$warning); my $output = &Apache::lonhtmlcommon::scripttag((<<ENDSCRIPT)); function verify_bubble_radio(form) { var ansnumArray = new Array ("$ansnumstr"); @@ -8668,7 +8679,9 @@ sub scantron_upload_scantron_data { (' 'x2).&mt('(shows course personnel)'); my $default_form_data=&defaultFormData($symb); my $nofile_alert = &mt('Please use the browse button to select a file from your local directory.'); + &js_escape(\$nofile_alert); my $nocourseid_alert = &mt("Please use the 'Select Course' link to open a separate window where you can search for a course to which a file can be uploaded."); + &js_escape(\$nocourseid_alert); $r->print(&Apache::lonhtmlcommon::scripttag(' function checkUpload(formname) { if (formname.upfile.value == "") {