77 lines
1.9 KiB
PHP
77 lines
1.9 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
$sessionName = 'hotlunch';
|
|
session_name($sessionName);
|
|
session_start();
|
|
require_once("include/globals.php");
|
|
|
|
|
|
// Set default timezone
|
|
date_default_timezone_set("Canada/Pacific");
|
|
$now = date("Y-m-d H:i:s",time());
|
|
|
|
$return_data = array();
|
|
|
|
$moduleName = "ajax.DataRecord.Delete.php";
|
|
// startLog($moduleName);
|
|
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
logExit("Session is not active\n");
|
|
exit;
|
|
}
|
|
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
|
|
// Get parameters
|
|
if (array_key_exists('table_name', $_GET)) $table_name = db_escape_string($_GET['table_name']);
|
|
if (array_key_exists('record_num', $_GET)) $record_num = intval($_GET['record_num']);
|
|
|
|
|
|
|
|
// Validate parameters
|
|
if (strlen($table_name) == 0) logExit("table_name undefined\n");
|
|
|
|
|
|
// Ensure numeric parameters are numeric
|
|
if (!is_numeric($record_num)) logExit("record_num is not numeric\n");
|
|
if ($record_num == 0) logExit("record_num is zero\n");
|
|
|
|
|
|
// Error logging
|
|
writeLog("$moduleName: school_num: $school_num\n");
|
|
writeLog("$moduleName: table_name: $table_name\n");
|
|
writeLog("$moduleName: record_num: $record_num\n");
|
|
|
|
$row = array();
|
|
|
|
// Create query statement
|
|
switch ($table_name) {
|
|
case 'people_categories':
|
|
$cnum = intval($_GET['cnum']);
|
|
|
|
$query = "DELETE FROM $table_name WHERE school_num = $school_num AND people_num = $record_num AND category_num = $cnum";
|
|
break;
|
|
|
|
case '_form_action':
|
|
case '_form_fields':
|
|
$query = "DELETE FROM $table_name WHERE record_num = $record_num";
|
|
break;
|
|
|
|
default:
|
|
$query = "DELETE FROM $table_name WHERE school_num = $school_num AND record_num = $record_num";
|
|
if ($table_name == 'hotlunch_order_header') logOrderChange($record_num, "ORDER DELETED", "ajax.DataRecord.Delete.php");
|
|
break;
|
|
}
|
|
|
|
// Error logging
|
|
writeLog("$moduleName: query: $query\n");
|
|
db_query($query);
|
|
|
|
writeLog("$moduleName: complete\n");
|
|
$row['ajax_return_code'] = 1;
|
|
echo(json_encode($row));
|
|
|
|
?>
|