First Commit

ajax.updateGrade.php

@@ -0,0 +1,96 @@
+<?php
+$ValidAccess = 2010;
+require_once("include/globals.php");
+
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   logExit("Session is not active",$moduleName);
+   exit();
+}
+
+// Set userType
+$userType = "Parent";
+if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";
+if ($userType != 'Admin') return;
+
+
+// Ensure that only valid user types have access to this module
+if ($userType != 'Admin') {
+   $error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
+   logExit($error_message);
+   exit;
+}
+
+
+// CSRF token validation
+include "include/ajax.csrfToken.php";
+
+
+// Set default timezone
+date_default_timezone_set("Canada/Pacific");
+$now = date("Y-m-d H:i:s",time());
+
+$return_data = array();
+
+$moduleName = "ajax.updateGrade.php";
+// startLog($moduleName);
+
+
+// Get parameters
+$record_num = intval($_GET['record_num']);
+$class_num = intval($_GET['class_num']);
+$gfield = $_GET['gfield'];
+
+// Ensure parameters are valid
+writeLog("record_num: $record_num");
+writeLog("class_num: $class_num");
+writeLog("gfield: $gfield");
+
+if (!is_numeric($record_num)) logExit("record_num is not numeric\n");
+if (!is_numeric($class_num)) logExit("class_num is not numeric\n");
+if ($record_num == 0) logExit("record_num is zero\n");
+if ($class_num == 0) logExit("class_num is zero\n");
+
+
+// Validate the class
+$class = "";
+switch ($class_num) {
+   case 1:
+      $class = getLanguageText('TEXT-STAFF');
+      break;
+
+   case 2:
+      $class = getLanguageText('TEXT-PARENT');
+      break;
+
+   default:
+      $query = "SELECT * FROM classes WHERE school_num = $school_num AND record_num = $class_num";
+      writeLog($query);
+      $r = db_query($query);
+      if (db_num_rows($r)) {
+         $row = db_fetch_assoc($r);
+         writeLog("gfield: $gfield");
+         writeLog("class_info: ".$row[$gfield]);
+         $class = $row[$gfield];
+      }
+      break;
+}
+
+writeLog("Class: $class");
+
+// Update people entry
+$query = "UPDATE people SET class_num = $class_num WHERE school_num = $school_num AND record_num = $record_num";
+writeLog("query: $query\n");
+db_query($query);
+
+$return['ajax_return_code'] = 0;
+$return['class'] = $class;
+$return['class_info'] = getClassInfo($class_num,'internal');
+
+writeLog($return['class']);
+writeLog($return['class_info']);
+
+echo(json_encode($return));
+
+writeLog("completed");
+?>