HotLunches/pac.php

<?php
require_once("include/globals.php");

if (SessionActive() != 1 || ! UserLoggedIn()) {
   header("Location: /");
   exit();
}


// Ensure that only valid user types have access to this module
$AllowedUserTypes = array('SuperUser','System Administrator','Communications Administrator');
if (checkPermission($AllowedUserTypes) != 1) {
   echo("<br>\n");
   $error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
   include "form.messages.php";
   return;
}


//
// Process all actions to list and edit records
//
$naction = "";

$CurrentTable = "pac";
$DeleteField  = "position,person";
$dSeparator   = " ";
$FormFile     = "pac.form.php";
$TitleText    = $school_record['pac_name'];
$OrderBy      = "sequence,position";
$Sequence     = 'Y';



?>
 <br>
 <table width='<?php echo($default_table_width) ?>' cellpadding='5' cellspacing='5' border='0' bgcolor='#eeeeee'>
  <tr>
   <td class='menu-item' align='center'><b><?php echo($TitleText) ?> Administration</b></td>
  </tr>
  <tr>
   <td align='center' class='menu-item'>
<?php


if (array_key_exists('naction',$_GET)) $naction = $_GET['naction'];
if (array_key_exists('naction',$_POST)) $naction = $_POST['naction'];

$school_num = $school_record['record_num'];


switch (strtolower($naction)) {
   case "add":
      $next_naction = "insert";
      $active = 'Y';

      include $FormFile;
      break;

   case "insert":
      extract($_POST);

      // Get new sequence number
      if ($Sequence == 'Y') {
         $query = "select max(sequence) sequence " .
                  "from $CurrentTable " .
                  "where school_num = $school_num";
         $results = db_query($query);
         $row = db_fetch_array($results);
         $sequence = intval($row['sequence']) + 1;
      }

      $table = new Table("$CurrentTable");
      $query = $table->BuildInsert();
      db_query($query);
      $form_message = "$TitleText Has Been Inserted";     
      $naction = "list";
      break;

   case "edit":
      $next_naction = "update";

      // Get current record
      $record_num = intval($_GET['record_num']);
      $query = "select * from $CurrentTable where record_num = $record_num";
      $results = db_query($query);
      if (db_num_rows($results) == 1) {
         $row = db_fetch_array($results);
         extract($row);
         include $FormFile;
      }
      else {
         $error_message = "Error: Record Not Found";
      }
      break;

   case "update":
      extract($_POST);
      $table = new Table("$CurrentTable");
      $query = $table->BuildUpdate();
      db_query($query);
      $form_message = "$TitleText Has Been Updated";      
      $naction = "list";
      break;

   case "delete":
      $record_num = intval($_GET['record_num']);

      $query = "select * from $CurrentTable where record_num = $record_num";
      $results = db_query($query);
      if (db_num_rows($results) == 1) {
         $row = db_fetch_array($results);
         extract($row);

         $dFields = explode(",",$DeleteField);
         $dTitle = "$TitleText ";
         for ($i = 0; $i < count($dFields); $i++) {
            $dTitle .= $row[$dFields[$i]] . $dSeparator;
         }

         include "delete.form.php";
      }
      else {
         $error_message = "Error: Record Not Found";
         $naction = 'list';
      }
      break;

   case "delete-confirmed":
      $record_num = intval($_GET['record_num']);

      // Delete the current record
      $query = "delete from $CurrentTable where school_num = $school_num AND record_num = $record_num";
      db_query($query);

      $form_message = "$TitleText Has Been Deleted";
      $naction = "list";
      break;

   case "save-sort":
      // Parse the hidden fields to update the sort sequence in the database
      if (array_key_exists('row_sequence',$_POST) && strlen($_POST['row_sequence']) > 0) {
         // Update the sequence to avoid duplicate keys
         db_query("UPDATE $CurrentTable SET sequence = sequence + 1000 WHERE school_num = $school_num");

         $row_sequence = db_escape_string(trim($_POST['row_sequence'], ", "));
         $item_sequence = explode(',',$row_sequence);
         for ($i = 0; $i < count($item_sequence); $i++) {
            $rnum = $item_sequence[$i];
            $sequence = $i + 1;
            $query = "update $CurrentTable set sequence = $sequence where record_num = $rnum";
            db_query($query);
         }
      }

   default:
      $naction = "list";
      break;
}


//
// List all records if naction is "list"
//
if ($naction == "list") {

?>
 <script src="include/TableDnD.js" type="text/javascript"></script>
 <?php

   $scriptName = str_replace("/m/data1/app.hotlunches.net/","",__FILE__);
   include "help.docs.php";

   // Get records to display
   $columnHeaders = array(getLanguageText('TEXT-POSITION'),
                          getLanguageText('TEXT-NAME'),
                          getLanguageText('TEXT-EMAIL')
                          );
   $query = "select position,person,email,sequence,record_num " .
            "from $CurrentTable " .
            "where school_num = $school_num " .
            "order by $OrderBy";
   $results = db_query($query);

   $message_width = $default_data_width;
   include "form.messages.php";

   echo("<center>\n");
   echo("<p><b>$TitleText List</b></p>\n");
   echo("</center>\n");

   sortData($results,$columnHeaders,$action);
}

?>
   </td>
  </tr>
 </table>