Files
HotLunches/ajax.ToggleSentFlag.php
2026-10-19 15:22:52 -07:00

74 lines
1.6 KiB
PHP

<?php
$ValidAccess = 2010;
require_once("include/globals.php");
if (SessionActive() != 1 || ! UserLoggedIn()) {
logExit("Session is not active",$moduleName);
exit();
}
// Set userType
$userType = "Parent";
if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";
if ($userType != 'Admin') return;
// Ensure that only valid user types have access to this module
if ($userType != 'Admin') {
$error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
logExit($error_message);
exit;
}
// CSRF token validation
include "include/ajax.csrfToken.php";
// Set default timezone
date_default_timezone_set("Canada/Pacific");
$now = date("Y-m-d H:i:s",time());
$return_data = array();
$moduleName = "ajax.ToggleSentFlag.php";
// startLog($moduleName);
// Get parameters
$sent_flag = $_GET['sent_flag'];
$record_num = intval($_GET['record_num']);
// Ensure parameters are valid
if (!is_numeric($school_num)) logExit("School num is not numeric\n");
if ($school_num == 0) logExit("school_num is zero\n");
writeLog("record_num: $record_num\n");
writeLog("sent_flag: $sent_flag\n");
switch ($sent_flag) {
case 'Y':
$flag = 'N';
$query = "UPDATE payment_message_queue SET sent_flag = 'N' WHERE record_num = $record_num";
break;
case 'N':
default:
$flag = 'Y';
$query = "UPDATE payment_message_queue SET sent_flag = 'Y' WHERE record_num = $record_num";
break;
}
writeLog("query: $query\n");
db_query($query);
writeLog("completed\n");
$return_data["flag"] = $flag;
echo(json_encode($return_data));
?>