<?php
$ValidAccess = 2010;
require_once("include/globals.php");


if (SessionActive() != 1 || ! UserLoggedIn()) {
   logExit("Session is not active",$moduleName);
   exit();
}

// Set userType
$userType = "Parent";
if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";

// Ensure that only valid user types have access to this module
if ($userType != 'Admin') {
   $error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
   logExit($error_message);
   exit();
}


// CSRF token validation
include "include/ajax.csrfToken.php";


// Set default timezone
date_default_timezone_set("Canada/Pacific");
$now = date("Y-m-d H:i:s",time());

$return_data = array();

$moduleName = "ajax.StudentUpdate.php";
// startLog($moduleName);


// Get parameters
if (array_key_exists('action', $_GET)) $action = db_escape_string($_GET['action']);
if (array_key_exists('class_num', $_GET)) $class_num = $_GET['class_num'];

if (!isset($action) || !isset($class_num)) {
   $error_message = getLanguageText('ERRORMSG-MISSING-DATA');
   logExit($error_message);
   exit();
}

if (!isset($class_num)) $class_num = 0;
writeLog("class_num: $class_num");

switch ($action) {
   case 'reset-meal-locations':
      $new = 3;
      if ($class_num == 'Staff') $new = 0;
      if ($class_num == 'Customer') $new = 1;
      $query = "UPDATE people SET meal_location = $new WHERE school_num = $school_num";
      break;

   case 'set-to-verified':
      $query = "UPDATE people SET status = 'Verified' WHERE school_num = $school_num";
      break;

   case 'set-to-regular':
      $price_category = 'Regular';
      $query = "UPDATE people SET menu_price_category = '$price_category' WHERE school_num = $school_num";
      break;

   case 'update-price-category':
      $price_category = 'Regular';
      if (array_key_exists('price_category', $_GET)) $price_category = db_escape_string($_GET['price_category']);
      $query = "UPDATE people SET menu_price_category = '$price_category' WHERE school_num = $school_num";
      break;

   case 'remove-flex-pricing-access':
      $query = "UPDATE people SET access_to_multiple_item_prices = 'N' WHERE school_num = $school_num";
      break;

   case 'grant-flex-pricing-access':
      $query = "UPDATE people SET access_to_multiple_item_prices = 'Y' WHERE school_num = $school_num";
      break;

   default:
      logExit("Invalid Action");
      exit();
}

switch ($class_num) {
   case 'Staff':
      $query .= " AND people_type = 'Staff' ";
      break;

   case 'Customer':
      $query .= " AND people_type = 'Customer' ";
      break;

   default:
      $class_num = intval($class_num);
      $query .= " AND people_type = 'Student' ";
      if ($class_num > 0) $query .= " AND class_num = $class_num";
      break;
}

writeLog("query: $query\n");
db_query($query);

?>