65 lines
2.2 KiB
PHP
65 lines
2.2 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
require_once("include/globals.php");
|
|
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
logExit("Session is not active",$moduleName);
|
|
exit();
|
|
}
|
|
|
|
// Set userType
|
|
$userType = "Parent";
|
|
if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";
|
|
if ($userType != 'Admin') return;
|
|
|
|
|
|
// Ensure that only valid user types have access to this module
|
|
if ($userType != 'Admin') {
|
|
$error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
|
|
logExit($error_message);
|
|
exit;
|
|
}
|
|
|
|
|
|
// CSRF token validation
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
|
|
// Set default timezone
|
|
date_default_timezone_set("Canada/Pacific");
|
|
$now = date("Y-m-d H:i:s",time());
|
|
|
|
$return_data = array();
|
|
|
|
$moduleName = "ajax.mergeUserAccounts.php";
|
|
// startLog($moduleName);
|
|
|
|
|
|
// Get parameters
|
|
if (array_key_exists('source', $_GET)) $source = intval($_GET['source']);
|
|
if (array_key_exists('destination', $_GET)) $destination = intval($_GET['destination']);
|
|
|
|
if (!isset($source) || $source == 0) logExit("Source User Num is not set");
|
|
if (!isset($destination) || $destination == 0) logExit("Destination User Num is not set");
|
|
|
|
|
|
// Update source account to move transactions and people
|
|
$entered = time();
|
|
$trx_datetime = date("Y-m-d H:i:s",$entered);
|
|
$unum = intval($_SESSION['UserInfo']['record_num']);
|
|
|
|
$dname = db_getVal("SELECT concat(first_name,' ',last_name) FROM users WHERE school_num = $base_school_num AND record_num = $destination");
|
|
|
|
db_query("UPDATE people SET user_num = $destination WHERE school_num = $base_school_num AND user_num = $source");
|
|
db_query("UPDATE user_account SET user_num = $destination WHERE school_num = $school_num AND user_num = $source AND deleted != 'Y'");
|
|
db_query("INSERT INTO user_account " .
|
|
"(school_num,user_num,schedule_num,order_num,people_num,transaction_datetime,transaction_type,note,transaction_amount,transaction_fee,entered_by_user_num,entered_time,deleted) " .
|
|
"VALUES ($school_num,$source,0,0,0,'$trx_datetime','TRX Note','All Transactions Moved to Account $dname',0.00,0.00,$unum,$entered,'N')");
|
|
|
|
writeLog("complete\n");
|
|
$return_data['ajax_return_code'] = 0;
|
|
echo(json_encode($return_data));
|
|
|
|
?>
|