106 lines
2.8 KiB
PHP
106 lines
2.8 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
require_once("include/globals.php");
|
|
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
logExit("Session is not active",$moduleName);
|
|
exit();
|
|
}
|
|
|
|
// Set userType
|
|
$userType = "Parent";
|
|
if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";
|
|
|
|
// Ensure that only valid user types have access to this module
|
|
if ($userType != 'Admin') {
|
|
$error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
|
|
logExit($error_message);
|
|
exit();
|
|
}
|
|
|
|
|
|
// CSRF token validation
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
|
|
// Set default timezone
|
|
date_default_timezone_set("Canada/Pacific");
|
|
$now = date("Y-m-d H:i:s",time());
|
|
|
|
$return_data = array();
|
|
|
|
$moduleName = "ajax.StudentUpdate.php";
|
|
// startLog($moduleName);
|
|
|
|
|
|
// Get parameters
|
|
if (array_key_exists('action', $_GET)) $action = db_escape_string($_GET['action']);
|
|
if (array_key_exists('class_num', $_GET)) $class_num = $_GET['class_num'];
|
|
|
|
if (!isset($action) || !isset($class_num)) {
|
|
$error_message = getLanguageText('ERRORMSG-MISSING-DATA');
|
|
logExit($error_message);
|
|
exit();
|
|
}
|
|
|
|
if (!isset($class_num)) $class_num = 0;
|
|
writeLog("class_num: $class_num");
|
|
|
|
switch ($action) {
|
|
case 'reset-meal-locations':
|
|
$new = 3;
|
|
if ($class_num == 'Staff') $new = 0;
|
|
if ($class_num == 'Customer') $new = 1;
|
|
$query = "UPDATE people SET meal_location = $new WHERE school_num = $school_num";
|
|
break;
|
|
|
|
case 'set-to-verified':
|
|
$query = "UPDATE people SET status = 'Verified' WHERE school_num = $school_num";
|
|
break;
|
|
|
|
case 'set-to-regular':
|
|
$price_category = 'Regular';
|
|
$query = "UPDATE people SET menu_price_category = '$price_category' WHERE school_num = $school_num";
|
|
break;
|
|
|
|
case 'update-price-category':
|
|
$price_category = 'Regular';
|
|
if (array_key_exists('price_category', $_GET)) $price_category = db_escape_string($_GET['price_category']);
|
|
$query = "UPDATE people SET menu_price_category = '$price_category' WHERE school_num = $school_num";
|
|
break;
|
|
|
|
case 'remove-flex-pricing-access':
|
|
$query = "UPDATE people SET access_to_multiple_item_prices = 'N' WHERE school_num = $school_num";
|
|
break;
|
|
|
|
case 'grant-flex-pricing-access':
|
|
$query = "UPDATE people SET access_to_multiple_item_prices = 'Y' WHERE school_num = $school_num";
|
|
break;
|
|
|
|
default:
|
|
logExit("Invalid Action");
|
|
exit();
|
|
}
|
|
|
|
switch ($class_num) {
|
|
case 'Staff':
|
|
$query .= " AND people_type = 'Staff' ";
|
|
break;
|
|
|
|
case 'Customer':
|
|
$query .= " AND people_type = 'Customer' ";
|
|
break;
|
|
|
|
default:
|
|
$class_num = intval($class_num);
|
|
$query .= " AND people_type = 'Student' ";
|
|
if ($class_num > 0) $query .= " AND class_num = $class_num";
|
|
break;
|
|
}
|
|
|
|
writeLog("query: $query\n");
|
|
db_query($query);
|
|
|
|
?>
|