First Commit

ajax.StudentUpdate.php

@@ -0,0 +1,105 @@
+<?php
+$ValidAccess = 2010;
+require_once("include/globals.php");
+
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   logExit("Session is not active",$moduleName);
+   exit();
+}
+
+// Set userType
+$userType = "Parent";
+if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";
+
+// Ensure that only valid user types have access to this module
+if ($userType != 'Admin') {
+   $error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
+   logExit($error_message);
+   exit();
+}
+
+
+// CSRF token validation
+include "include/ajax.csrfToken.php";
+
+
+// Set default timezone
+date_default_timezone_set("Canada/Pacific");
+$now = date("Y-m-d H:i:s",time());
+
+$return_data = array();
+
+$moduleName = "ajax.StudentUpdate.php";
+// startLog($moduleName);
+
+
+// Get parameters
+if (array_key_exists('action', $_GET)) $action = db_escape_string($_GET['action']);
+if (array_key_exists('class_num', $_GET)) $class_num = $_GET['class_num'];
+
+if (!isset($action) || !isset($class_num)) {
+   $error_message = getLanguageText('ERRORMSG-MISSING-DATA');
+   logExit($error_message);
+   exit();
+}
+
+if (!isset($class_num)) $class_num = 0;
+writeLog("class_num: $class_num");
+
+switch ($action) {
+   case 'reset-meal-locations':
+      $new = 3;
+      if ($class_num == 'Staff') $new = 0;
+      if ($class_num == 'Customer') $new = 1;
+      $query = "UPDATE people SET meal_location = $new WHERE school_num = $school_num";
+      break;
+
+   case 'set-to-verified':
+      $query = "UPDATE people SET status = 'Verified' WHERE school_num = $school_num";
+      break;
+
+   case 'set-to-regular':
+      $price_category = 'Regular';
+      $query = "UPDATE people SET menu_price_category = '$price_category' WHERE school_num = $school_num";
+      break;
+
+   case 'update-price-category':
+      $price_category = 'Regular';
+      if (array_key_exists('price_category', $_GET)) $price_category = db_escape_string($_GET['price_category']);
+      $query = "UPDATE people SET menu_price_category = '$price_category' WHERE school_num = $school_num";
+      break;
+
+   case 'remove-flex-pricing-access':
+      $query = "UPDATE people SET access_to_multiple_item_prices = 'N' WHERE school_num = $school_num";
+      break;
+
+   case 'grant-flex-pricing-access':
+      $query = "UPDATE people SET access_to_multiple_item_prices = 'Y' WHERE school_num = $school_num";
+      break;
+
+   default:
+      logExit("Invalid Action");
+      exit();
+}
+
+switch ($class_num) {
+   case 'Staff':
+      $query .= " AND people_type = 'Staff' ";
+      break;
+
+   case 'Customer':
+      $query .= " AND people_type = 'Customer' ";
+      break;
+
+   default:
+      $class_num = intval($class_num);
+      $query .= " AND people_type = 'Student' ";
+      if ($class_num > 0) $query .= " AND class_num = $class_num";
+      break;
+}
+
+writeLog("query: $query\n");
+db_query($query);
+
+?>