First Commit

pac.php

@@ -0,0 +1,198 @@
+<?php
+require_once("include/globals.php");
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   header("Location: /");
+   exit();
+}
+
+
+// Ensure that only valid user types have access to this module
+$AllowedUserTypes = array('SuperUser','System Administrator','Communications Administrator');
+if (checkPermission($AllowedUserTypes) != 1) {
+   echo("<br>\n");
+   $error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
+   include "form.messages.php";
+   return;
+}
+
+
+//
+// Process all actions to list and edit records
+//
+$naction = "";
+
+$CurrentTable = "pac";
+$DeleteField  = "position,person";
+$dSeparator   = " ";
+$FormFile     = "pac.form.php";
+$TitleText    = $school_record['pac_name'];
+$OrderBy      = "sequence,position";
+$Sequence     = 'Y';
+
+
+
+?>
+ <br>
+ <table width='<?php echo($default_table_width) ?>' cellpadding='5' cellspacing='5' border='0' bgcolor='#eeeeee'>
+  <tr>
+   <td class='menu-item' align='center'><b><?php echo($TitleText) ?> Administration</b></td>
+  </tr>
+  <tr>
+   <td align='center' class='menu-item'>
+<?php
+
+
+if (array_key_exists('naction',$_GET)) $naction = $_GET['naction'];
+if (array_key_exists('naction',$_POST)) $naction = $_POST['naction'];
+
+$school_num = $school_record['record_num'];
+
+
+switch (strtolower($naction)) {
+   case "add":
+      $next_naction = "insert";
+      $active = 'Y';
+
+      include $FormFile;
+      break;
+
+   case "insert":
+      extract($_POST);
+
+      // Get new sequence number
+      if ($Sequence == 'Y') {
+         $query = "select max(sequence) sequence " .
+                  "from $CurrentTable " .
+                  "where school_num = $school_num";
+         $results = db_query($query);
+         $row = db_fetch_array($results);
+         $sequence = intval($row['sequence']) + 1;
+      }
+
+      $table = new Table("$CurrentTable");
+      $query = $table->BuildInsert();
+      db_query($query);
+      $form_message = "$TitleText Has Been Inserted";     
+      $naction = "list";
+      break;
+
+   case "edit":
+      $next_naction = "update";
+
+      // Get current record
+      $record_num = intval($_GET['record_num']);
+      $query = "select * from $CurrentTable where record_num = $record_num";
+      $results = db_query($query);
+      if (db_num_rows($results) == 1) {
+         $row = db_fetch_array($results);
+         extract($row);
+         include $FormFile;
+      }
+      else {
+         $error_message = "Error: Record Not Found";
+      }
+      break;
+
+   case "update":
+      extract($_POST);
+      $table = new Table("$CurrentTable");
+      $query = $table->BuildUpdate();
+      db_query($query);
+      $form_message = "$TitleText Has Been Updated";      
+      $naction = "list";
+      break;
+
+   case "delete":
+      $record_num = intval($_GET['record_num']);
+
+      $query = "select * from $CurrentTable where record_num = $record_num";
+      $results = db_query($query);
+      if (db_num_rows($results) == 1) {
+         $row = db_fetch_array($results);
+         extract($row);
+
+         $dFields = explode(",",$DeleteField);
+         $dTitle = "$TitleText ";
+         for ($i = 0; $i < count($dFields); $i++) {
+            $dTitle .= $row[$dFields[$i]] . $dSeparator;
+         }
+
+         include "delete.form.php";
+      }
+      else {
+         $error_message = "Error: Record Not Found";
+         $naction = 'list';
+      }
+      break;
+
+   case "delete-confirmed":
+      $record_num = intval($_GET['record_num']);
+
+      // Delete the current record
+      $query = "delete from $CurrentTable where school_num = $school_num AND record_num = $record_num";
+      db_query($query);
+
+      $form_message = "$TitleText Has Been Deleted";
+      $naction = "list";
+      break;
+
+   case "save-sort":
+      // Parse the hidden fields to update the sort sequence in the database
+      if (array_key_exists('row_sequence',$_POST) && strlen($_POST['row_sequence']) > 0) {
+         // Update the sequence to avoid duplicate keys
+         db_query("UPDATE $CurrentTable SET sequence = sequence + 1000 WHERE school_num = $school_num");
+
+         $row_sequence = db_escape_string(trim($_POST['row_sequence'], ", "));
+         $item_sequence = explode(',',$row_sequence);
+         for ($i = 0; $i < count($item_sequence); $i++) {
+            $rnum = $item_sequence[$i];
+            $sequence = $i + 1;
+            $query = "update $CurrentTable set sequence = $sequence where record_num = $rnum";
+            db_query($query);
+         }
+      }
+
+   default:
+      $naction = "list";
+      break;
+}
+
+
+//
+// List all records if naction is "list"
+//
+if ($naction == "list") {
+
+?>
+ <script src="include/TableDnD.js" type="text/javascript"></script>
+ <?php
+
+   $scriptName = str_replace("/m/data1/app.hotlunches.net/","",__FILE__);
+   include "help.docs.php";
+
+   // Get records to display
+   $columnHeaders = array(getLanguageText('TEXT-POSITION'),
+                          getLanguageText('TEXT-NAME'),
+                          getLanguageText('TEXT-EMAIL')
+                          );
+   $query = "select position,person,email,sequence,record_num " .
+            "from $CurrentTable " .
+            "where school_num = $school_num " .
+            "order by $OrderBy";
+   $results = db_query($query);
+
+   $message_width = $default_data_width;
+   include "form.messages.php";
+
+   echo("<center>\n");
+   echo("<p><b>$TitleText List</b></p>\n");
+   echo("</center>\n");
+
+   sortData($results,$columnHeaders,$action);
+}
+
+?>
+   </td>
+  </tr>
+ </table>