73 lines
1.3 KiB
PHP
73 lines
1.3 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
$sessionName = 'hotlunch';
|
|
session_name($sessionName);
|
|
session_start();
|
|
require_once("include/globals.php");
|
|
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
logExit("Session is not active");
|
|
exit;
|
|
}
|
|
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
|
|
|
|
// Set default timezone
|
|
date_default_timezone_set("Canada/Pacific");
|
|
$now = date("Y-m-d H:i:s",time());
|
|
|
|
$return_data = array();
|
|
$sequence_flag = 'N';
|
|
|
|
$moduleName = "ajax.UserUpdate.php";
|
|
// startLog($moduleName);
|
|
|
|
|
|
|
|
// Get parameters
|
|
extract($_REQUEST);
|
|
|
|
|
|
// Validate parameters
|
|
|
|
|
|
// Ensure numeric parameters are numeric
|
|
if (!is_numeric($amount)) logExit("Amount is not numeric\n");
|
|
|
|
$school_num = $school_record['record_num'];
|
|
|
|
|
|
// Error logging
|
|
writeLog("amount: $user_num\n");
|
|
|
|
|
|
switch ($naction) {
|
|
case 'Clear':
|
|
$query = "UPDATE users " .
|
|
"SET can_order = 'Y' " .
|
|
"WHERE school_num = $school_num " .
|
|
"AND balance_owing <= $amount";
|
|
writeLog("query: $query\n");
|
|
db_query($query);
|
|
break;
|
|
|
|
case 'Block':
|
|
default:
|
|
$query = "UPDATE users " .
|
|
"SET can_order = 'B' " .
|
|
"WHERE school_num = $school_num " .
|
|
"AND balance_owing >= $amount";
|
|
writeLog("query: $query\n");
|
|
db_query($query);
|
|
break;
|
|
}
|
|
|
|
|
|
writeLog("complete\n");
|
|
echo(json_encode($return_data));
|
|
|
|
?>
|