First Commit

ajax.ResetAdminAccount.php

@@ -0,0 +1,73 @@
+<?php
+$ValidAccess = 2010;
+require_once("include/globals.php");
+
+$moduleName = "ajax.ResetAdminAccount.php";
+// startLog($moduleName);
+
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   logExit("Session is not active",$moduleName);
+   exit();
+}
+
+// Set userType
+$userType = "Parent";
+if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";
+if ($userType != 'Admin') return;
+
+
+// Ensure that only valid user types have access to this module
+if ($userType != 'Admin') {
+   $error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
+   logExit($error_message);
+   exit;
+}
+
+
+
+// CSRF token validation
+include "include/ajax.csrfToken.php";
+
+
+// Set default timezone
+date_default_timezone_set("Canada/Pacific");
+$now = date("Y-m-d H:i:s",time());
+
+$return_data = array();
+
+
+// Get parameters
+if (array_key_exists('snum', $_GET)) $snum = intval($_GET['snum']);
+if (array_key_exists('unum', $_GET)) $unum = intval($_GET['unum']);
+
+// Ensure parameters are valid
+
+if (!isset($snum) || !is_numeric($snum)) logExit("School num is not numeric\n");
+if (!isset($unum) || !is_numeric($unum)) logExit("User num is not numeric\n");
+if ($unum == 0) logExit("unum is zero\n");
+
+writeLog("snum: $snum\n");
+writeLog("unum: $unum\n");
+
+
+// Get user account
+$query = "SELECT * FROM users WHERE school_num = $snum AND userid = 'admin' AND record_num = $unum";
+writeLog("query: $query\n");
+$results = db_query($query);
+if (db_num_rows($results) != 1) logExit("DB record not found");
+
+$user = db_fetch_assoc($results);
+$date_added = $user['date_added'];
+
+$password = 'admin';
+$password_crypt = encrypt_password($password);
+
+$query = "UPDATE users SET password = 'admin', password_crypt = '$password_crypt' WHERE school_num = $snum AND userid = 'admin' AND record_num = $unum";
+writeLog("query: $query\n");
+db_query($query);
+
+echo(json_encode($return_data));
+writeLog("completed\n");
+
+?>