First Commit

ajax.ResetStaffPasswords.php

@@ -0,0 +1,71 @@
+<?php
+$ValidAccess = 2010;
+require_once("include/globals.php");
+
+if (session_status() != PHP_SESSION_ACTIVE) {
+   session_name($sessionName);
+   session_start();
+}
+
+
+
+$moduleName = "ajax.ResetStaffPasswords.php";
+// startLog($moduleName);
+
+
+// CSRF token validation
+include "include/ajax.csrfToken.php";
+
+
+logActivity("Staff.ResetPasswords");
+
+
+$return_data = array();
+$sequence_flag = 'N';
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   header("Location: /?error_message=" . urlencode(getLanguageText('ERRORMSG-SESSION-EXPIRED')));
+   exit;
+}
+
+
+// Ensure that only valid user types have access to this module
+$AllowedUserTypes = array('SuperUser','System Administrator','Application Administrator','Communications Administrator');
+if (checkPermission($AllowedUserTypes) != 1) {
+   exit();
+}
+
+
+// Get parameters
+extract($_REQUEST);
+
+
+// Validate parameters
+writeLog("table_name: ".$table_name);
+if (strlen($table_name) == 0) logExit("Invalid Access\n");
+
+
+
+// Error logging
+writeLog("table_name: $table_name\n");
+
+
+$query = "SELECT * FROM users WHERE school_num = $base_school_num AND type IN ('Staff')";
+writeLog($query);
+$Staff = db_query($query);
+
+while ($row = db_fetch_assoc($Staff)) {
+   extract($row);
+   $password = db_escape_string($userid);
+   $password_crypt = encrypt_password($password);
+   $query = "UPDATE users SET password = '', password_crypt = '$password_crypt' " .
+            "WHERE school_num = $school_num AND record_num = $record_num";
+   writeLog($query);
+   db_query($query);
+}
+
+$return_data["ajax_return_code"] = 0;
+echo(json_encode($return_data));
+writeLog("completed\n");
+
+?>