59 lines
1.7 KiB
PHP
59 lines
1.7 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
$sessionName = 'hotlunch';
|
|
session_name($sessionName);
|
|
session_start();
|
|
require_once("include/globals.php");
|
|
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
logExit("Session is not active\n");
|
|
exit;
|
|
}
|
|
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
|
|
|
|
// Set default timezone
|
|
date_default_timezone_set("Canada/Pacific");
|
|
$now = date("Y-m-d H:i:s",time());
|
|
|
|
$return_data = array();
|
|
|
|
$moduleName = "ajax.UpdateDBField.php";
|
|
startLog($moduleName);
|
|
|
|
|
|
// Get parameters
|
|
if (array_key_exists('table_name', $_GET)) $table_name = db_escape_string($_GET['table_name']);
|
|
if (array_key_exists('field_name', $_GET)) $field_name = db_escape_string($_GET['field_name']);
|
|
if (array_key_exists('field_value', $_GET)) $field_value = db_escape_string($_GET['field_value']);
|
|
if (array_key_exists('record_num', $_GET)) $record_num = intval($_GET['record_num']);
|
|
|
|
|
|
// Ensure parameters are valid
|
|
if (!is_numeric($school_num)) logExit("School num is not numeric\n");
|
|
if ($school_num == 0) logExit("school_num is zero\n");
|
|
if (!isset($table_name)) logExit("ajax.UpdateDBField.php - table_name is not set");
|
|
if (!isset($field_name)) logExit("ajax.UpdateDBField.php - field_name is not set");
|
|
|
|
$field_name = str_replace('-','_',$field_name);
|
|
|
|
writeLog("table_name: $table_name\n");
|
|
writeLog("field_name: $field_name\n");
|
|
writeLog("field_value: $field_value\n");
|
|
writeLog("record_num: $record_num\n");
|
|
|
|
|
|
$query = "UPDATE $table_name SET $field_name = '$field_value' WHERE record_num = $record_num";
|
|
writeLog("query: $query\n");
|
|
db_query($query);
|
|
$return_data['rows_updated'] = db_affected_rows();
|
|
|
|
writeLog("completed\n");
|
|
|
|
$return_data["flag"] = $field_value;
|
|
echo(json_encode($return_data));
|
|
?>
|