73 lines
1.7 KiB
PHP
73 lines
1.7 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
require_once("include/globals.php");
|
|
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
logExit("Session is not active",$moduleName);
|
|
exit();
|
|
}
|
|
|
|
// Set userType
|
|
$userType = "Parent";
|
|
if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";
|
|
if ($userType != 'Admin') return;
|
|
|
|
|
|
// Ensure that only valid user types have access to this module
|
|
if ($userType != 'Admin') {
|
|
$error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
|
|
logExit($error_message);
|
|
exit;
|
|
}
|
|
|
|
|
|
// CSRF token validation
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
|
|
|
|
$school_num = intval($_GET['school_num']);
|
|
$user_num = intval($_GET['record_num']);
|
|
|
|
|
|
$return_data = array();
|
|
|
|
$moduleName = "ajax.UserPassword.Update.php";
|
|
// startLog($moduleName);
|
|
|
|
|
|
// Error logging
|
|
writeLog("school_num: $school_num\n");
|
|
writeLog("user_num: $user_num\n");
|
|
|
|
|
|
// Get user record
|
|
$query = "SELECT * FROM users WHERE school_num = $base_school_num AND record_num = $user_num";
|
|
writeLog("query: $query\n");
|
|
$r = db_query($query);
|
|
$user = db_fetch_assoc($r);
|
|
// writeLog(print_r($user,true));
|
|
|
|
if (!is_array($user)) exit();
|
|
extract($user);
|
|
|
|
writeLog($userid);
|
|
$userid = str_replace(' ','',$userid);
|
|
writeLog($userid);
|
|
|
|
$password = $userid;
|
|
$password_crypt = encrypt_password($password);
|
|
writeLog("password: $password\n");
|
|
writeLog("date_added: $date_added\n");
|
|
writeLog("password_crypt: $password_crypt\n");
|
|
|
|
$query = "UPDATE users SET userid = '$userid', password = '', password_crypt = '$password_crypt' " .
|
|
"WHERE school_num = $school_num AND record_num = $user_num";
|
|
writeLog("query: $query\n");
|
|
db_query($query);
|
|
|
|
writeLog("complete\n\n");
|
|
|
|
?>
|