First Commit

ajax/ajax.DataRecord.Delete.php

@@ -0,0 +1,76 @@
+<?php
+$ValidAccess = 2010;
+$sessionName = 'hotlunch';
+session_name($sessionName);
+session_start();
+require_once("include/globals.php");
+
+
+// Set default timezone
+date_default_timezone_set("Canada/Pacific");
+$now = date("Y-m-d H:i:s",time());
+
+$return_data = array();
+
+$moduleName = "ajax.DataRecord.Delete.php";
+// startLog($moduleName);
+
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   logExit("Session is not active\n");
+   exit;
+}
+
+include "include/ajax.csrfToken.php";
+
+
+// Get parameters
+if (array_key_exists('table_name', $_GET)) $table_name = db_escape_string($_GET['table_name']);
+if (array_key_exists('record_num', $_GET)) $record_num = intval($_GET['record_num']);
+
+
+
+// Validate parameters
+if (strlen($table_name) == 0) logExit("table_name undefined\n");
+
+
+// Ensure numeric parameters are numeric
+if (!is_numeric($record_num)) logExit("record_num is not numeric\n");
+if ($record_num == 0) logExit("record_num is zero\n");
+
+
+// Error logging
+writeLog("$moduleName: school_num: $school_num\n");
+writeLog("$moduleName: table_name: $table_name\n");
+writeLog("$moduleName: record_num: $record_num\n");
+
+$row = array();
+
+// Create query statement
+switch ($table_name) {
+   case 'people_categories':
+      $cnum = intval($_GET['cnum']);
+
+      $query = "DELETE FROM $table_name WHERE school_num = $school_num AND people_num = $record_num AND category_num = $cnum";
+      break;
+
+   case '_form_action':
+   case '_form_fields':
+      $query = "DELETE FROM $table_name WHERE record_num = $record_num";
+      break;
+
+   default:
+      $query = "DELETE FROM $table_name WHERE school_num = $school_num AND record_num = $record_num";
+      if ($table_name == 'hotlunch_order_header') logOrderChange($record_num, "ORDER DELETED", "ajax.DataRecord.Delete.php");
+      break;
+}
+
+// Error logging
+writeLog("$moduleName: query: $query\n");
+db_query($query);
+
+writeLog("$moduleName: complete\n");
+$row['ajax_return_code'] = 1;
+echo(json_encode($row));
+
+?>