Files
HotLunches/ajax/ajax.SequenceRecords.php
T
2026-10-19 15:22:52 -07:00

95 lines
2.6 KiB
PHP

<?php
$ValidAccess = 2010;
$sessionName = 'hotlunch';
session_name($sessionName);
session_start();
require_once("include/globals.php");
if (SessionActive() != 1 || ! UserLoggedIn()) {
logExit("Session is not active",$moduleName);
exit;
}
// CSRF token validation
include "include/ajax.csrfToken.php";
// Set default timezone
date_default_timezone_set("Canada/Pacific");
$now = date("Y-m-d H:i:s",time());
$return_data = array();
$moduleName = "ajax.SequenceRecords.php";
startLog($moduleName);
// Get parameters
$table_name = db_escape_string($_GET['table']);
$dset = "";
if (array_key_exists('dset', $_GET)) $dset = db_escape_string($_GET['dset']);
writeLog("table_name: $table_name");
writeLog("dset: $dset");
if (!isset($dset) || strlen($dset) == 0) $dset = "row_ids";
$row_ids = $_GET[$dset];
if (array_key_exists('$school_num',$_GET)) $school_num = intval($_GET['school_num']);
if (!isset($school_num) || $school_num == 0) $school_num = $school_record['record_num'];
// Ensure parameters are valid
if (strlen($table_name) == 0) logExit("Table name is undefined\n");
// Map table name if required
if ($table_name == 'form-fields') $table_name = '_form_fields';
if (strstr($table_name,' ') !== FALSE) logExit("Invalid table name\n");
if (!is_array($row_ids)) logExit("Invalid Access\n");
$numRows = count($row_ids);
writeLog("count: $numRows\n");
// Sequence records
$sequence = 1;
for ($i = 0; $i < $numRows; $i++) {
$rowid = $row_ids[$i];
if (strlen($rowid)) {
$rnum = intval(str_replace("row_","",$rowid));
switch ($table_name) {
case 'how_to_guides':
case 'how_to_guide_categories':
case 'videos':
case '_form_fields':
$query = "UPDATE $table_name SET sequence = $sequence WHERE record_num = $rnum";
writeLog("query: $query\n");
db_query($query);
break;
case 'hotlunch_menu_items':
$query = "UPDATE $table_name SET sequence = $sequence WHERE school_num = $school_num AND record_num = $rnum";
writeLog("query: $query\n");
db_query($query);
// Update linked menus
$query = "update $table_name set sequence = $sequence where school_num = $school_num AND source_item = $rnum";
writeLog("query: $query\n");
db_query($query);
break;
default:
$query = "UPDATE $table_name SET sequence = $sequence WHERE school_num = $school_num AND record_num = $rnum";
writeLog("query: $query\n");
db_query($query);
break;
}
$sequence++;
}
}
?>