97 lines
2.3 KiB
PHP
97 lines
2.3 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
require_once("include/globals.php");
|
|
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
logExit("Session is not active",$moduleName);
|
|
exit();
|
|
}
|
|
|
|
// Set userType
|
|
$userType = "Parent";
|
|
if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";
|
|
if ($userType != 'Admin') return;
|
|
|
|
|
|
// Ensure that only valid user types have access to this module
|
|
if ($userType != 'Admin') {
|
|
$error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
|
|
logExit($error_message);
|
|
exit;
|
|
}
|
|
|
|
|
|
// CSRF token validation
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
|
|
// Set default timezone
|
|
date_default_timezone_set("Canada/Pacific");
|
|
$now = date("Y-m-d H:i:s",time());
|
|
|
|
$return_data = array();
|
|
|
|
$moduleName = "ajax.updateGrade.php";
|
|
// startLog($moduleName);
|
|
|
|
|
|
// Get parameters
|
|
$record_num = intval($_GET['record_num']);
|
|
$class_num = intval($_GET['class_num']);
|
|
$gfield = $_GET['gfield'];
|
|
|
|
// Ensure parameters are valid
|
|
writeLog("record_num: $record_num");
|
|
writeLog("class_num: $class_num");
|
|
writeLog("gfield: $gfield");
|
|
|
|
if (!is_numeric($record_num)) logExit("record_num is not numeric\n");
|
|
if (!is_numeric($class_num)) logExit("class_num is not numeric\n");
|
|
if ($record_num == 0) logExit("record_num is zero\n");
|
|
if ($class_num == 0) logExit("class_num is zero\n");
|
|
|
|
|
|
// Validate the class
|
|
$class = "";
|
|
switch ($class_num) {
|
|
case 1:
|
|
$class = getLanguageText('TEXT-STAFF');
|
|
break;
|
|
|
|
case 2:
|
|
$class = getLanguageText('TEXT-PARENT');
|
|
break;
|
|
|
|
default:
|
|
$query = "SELECT * FROM classes WHERE school_num = $school_num AND record_num = $class_num";
|
|
writeLog($query);
|
|
$r = db_query($query);
|
|
if (db_num_rows($r)) {
|
|
$row = db_fetch_assoc($r);
|
|
writeLog("gfield: $gfield");
|
|
writeLog("class_info: ".$row[$gfield]);
|
|
$class = $row[$gfield];
|
|
}
|
|
break;
|
|
}
|
|
|
|
writeLog("Class: $class");
|
|
|
|
// Update people entry
|
|
$query = "UPDATE people SET class_num = $class_num WHERE school_num = $school_num AND record_num = $record_num";
|
|
writeLog("query: $query\n");
|
|
db_query($query);
|
|
|
|
$return['ajax_return_code'] = 0;
|
|
$return['class'] = $class;
|
|
$return['class_info'] = getClassInfo($class_num,'internal');
|
|
|
|
writeLog($return['class']);
|
|
writeLog($return['class_info']);
|
|
|
|
echo(json_encode($return));
|
|
|
|
writeLog("completed");
|
|
?>
|