First Commit

ajax/ajax.UserUpdate.php

@@ -0,0 +1,72 @@
+<?php
+$ValidAccess = 2010;
+$sessionName = 'hotlunch';
+session_name($sessionName);
+session_start();
+require_once("include/globals.php");
+
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   logExit("Session is not active");
+   exit;
+}
+
+include "include/ajax.csrfToken.php";
+
+
+
+// Set default timezone
+date_default_timezone_set("Canada/Pacific");
+$now = date("Y-m-d H:i:s",time());
+
+$return_data = array();
+$sequence_flag = 'N';
+
+$moduleName = "ajax.UserUpdate.php";
+// startLog($moduleName);
+
+
+
+// Get parameters
+extract($_REQUEST);
+
+
+// Validate parameters
+
+
+// Ensure numeric parameters are numeric
+if (!is_numeric($amount)) logExit("Amount is not numeric\n");
+
+$school_num = $school_record['record_num'];
+
+
+// Error logging
+writeLog("amount: $user_num\n");
+
+
+switch ($naction) {
+   case 'Clear':
+      $query = "UPDATE users " .
+               "SET can_order = 'Y' " .
+               "WHERE school_num = $school_num " .
+               "AND balance_owing <= $amount";
+      writeLog("query: $query\n");
+      db_query($query);
+      break;
+
+   case 'Block':
+   default:
+      $query = "UPDATE users " .
+               "SET can_order = 'B' " .
+               "WHERE school_num = $school_num " .
+               "AND balance_owing >= $amount";
+      writeLog("query: $query\n");
+      db_query($query);
+      break;
+}
+
+
+writeLog("complete\n");
+echo(json_encode($return_data));
+
+?>