science-ation/admin/schools.php

<?
/* 
   This file is part of the 'Science Fair In A Box' project
   SFIAB Website: http://www.sfiab.ca

   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
   Copyright (C) 2005 James Grant <james@lightbox.org>

   This program is free software; you can redistribute it and/or
   modify it under the terms of the GNU General Public
   License as published by the Free Software Foundation, version 2.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
    General Public License for more details.

   You should have received a copy of the GNU General Public License
   along with this program; see the file COPYING.  If not, write to
   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
   Boston, MA 02111-1307, USA.
*/
?>
<?
 require("../common.inc.php");
 require_once("../user.inc.php");
 user_auth_required('admin');

function output_user_summary($userid) {
	$user = user_load($userid);
	$account = account_load($user['accounts_id']);
	if(!$user || !$account) {
		echo "Invalid User ID ($userid)";
		return;
	}
	echo i18n("Account").": ";
	if($account['username']==$account['email']) {
		echo $account['username'];
	} else {
		echo $account['username'];
		if($account['email']) echo " / ".$account['email'];
	}
	echo "<br />";
	echo i18n("Name").": ";
	echo $user['firstname']." ".$user['lastname']."<br />";
	if($user['phonework'] || $user['phonehome'] || $user['phonecell']) {
		echo i18n("Phone").": ";
		if($user['phonework']) echo "(W)".$user['phonework']." ";  
		if($user['phonehome']) echo "(H)".$user['phonehome']." ";  
		if($user['phonecell']) echo "(C)".$user['phonecell']." ";  
		echo "<br />";
	}
}


if($_POST['action']=="removeuser") {
	$schoolid=intval($_POST['schoolid']);
	if($_POST['role']=="principal") {
		$f="principal_uid";
	} else if($_POST['role']=="teacher") {
		$f="sciencehead_uid";
	}
	if($f) {
		mysql_query("UPDATE schools SET $f=NULL WHERE id='$schoolid'");
	}
	echo "ok";
	exit;
}
else if($_POST['action']=="adduser") {
	/* we have the following to work with:
		accounts_id, conferenceid, field, role, username, users_id
		*/
	
	//if accounts_id is 0, it means its a new user
	$accounts_id=intval($_POST['accounts_id']);
	$conferenceid=intval($_POST['conferenceid']);
	$schoolid=intval($_POST['schoolid']);

	if($accounts_id==0) {
		$a=account_create($_POST['username']);
		if(isEmailAddress($_POST['username']))
			account_set_email($a['id'],$_POST['username']);
		//and load it again, just so we have the most up-to-date
		$a=account_load($a['id']);
	}
	else
		$a=account_load($accounts_id);

	//now lets add the role -- this fails gracefully if they already have the role, or if its added, in both cases it returns 'ok'
	$ret=account_add_role($a['id'],$_POST['role'],$conferenceid);

	//we still need the user id
	$u=user_load_by_accounts_id($a['id']);

	if($ret=='ok' && $u['id']) {
		mysql_query("UPDATE schools SET `".mysql_real_escape_string($_POST['field'])."`='{$u['id']}' WHERE id='$schoolid'");
		echo mysql_error();
		//and update the users schools_id, yes, maybe we should use the user object and user_save() but the single query here is easier and probably waaaaaay faster
		mysql_query("UPDATE users SET schools_id='$schoolid' WHERE id='{$u['id']}'");
		echo mysql_error();
		echo "ok";
	}
	else {
		echo "error\n";
		echo "ret=$ret\n";
		echo "u="; print_r($u);
		//error ?
	}
	exit;
}

if($_GET['action']=='loaduser') {
	$schoolid=intval($_GET['schoolid']);
	$role=$_GET['role'];

	if($role=="principal") {
		$f="principal_uid";
	} else if($role=="teacher") {
		$f="sciencehead_uid";
	}
	$q=mysql_query("SELECT $f AS userid FROM schools WHERE id='$schoolid'");
	$r=mysql_fetch_object($q);

	if($r->userid > 0) {
		//we already have one, so just display teh details, with the option to remove or edit
		echo "<td align=\"right\">";
		echo "<a onclick=\"return openeditor($r->userid); return false;\" href=\"#\"><img border=\"0\" src=\"".$config['SFIABDIRECTORY']."/images/16/edit.".$config['icon_extension']."\"></a>";
		echo "&nbsp;";
		echo "<a onclick=\"return removeUserFromSchool('$role',$schoolid)\"
		href=\"#\"><img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\"></a>";
		echo "</td><td>";
		output_user_summary($r->userid);
		echo "</td>";

		echo "</tr>";
	}
	else {
		echo "<td align=\"right\">".i18n("Email/username")." </td>";
		echo "<td>";
		emit_user_selector($f,$conference['id'],$role);
		echo "</td>";
	}
	exit;

}



function emit_user_selector($name,$conferenceid,$role,$allowcreate=true) {
	echo "<!--begin emit_user_selector ($name,$conferenceid,$role,$allowcreate)-->\n";
	echo "<input type=\"hidden\" id=\"{$name}_role\" name=\"{$name}_role\" value=\"$role\">";
	echo "<input type=\"hidden\" id=\"{$name}_conferenceid\" name=\"{$name}_conferenceid\" value=\"$conferenceid\">";
	echo "<input type=\"text\" class=\"user_select_autocomplete\" size=\"45\" id=\"{$name}\" name=\"{$name}\">";
	echo "<!--end emit_user_selector-->\n";
}


	if($_POST['save']=="edit" || $_POST['save']=="add") {
		if($_POST['save']=="add") {
			$q=mysql_query("INSERT INTO schools (conferences_id) VALUES ('".$conference['id']."')");
			$id=mysql_insert_id();
		}
		else
			$id=intval($_POST['id']);

		$atrisk = $_POST['atrisk'] == 'yes' ? 'yes' : 'no';

		$exec="UPDATE schools SET ".
			"school='".mysql_escape_string(stripslashes($_POST['school']))."', ".
			"schoollang='".mysql_escape_string(stripslashes($_POST['schoollang']))."', ".
			"designate='".mysql_escape_string(stripslashes($_POST['schooldesignate']))."', ".
			"schoollevel='".mysql_escape_string(stripslashes($_POST['schoollevel']))."', ".
			"school='".mysql_escape_string(stripslashes($_POST['school']))."', ".
			"board='".mysql_escape_string(stripslashes($_POST['board']))."', ".
			"district='".mysql_escape_string(stripslashes($_POST['district']))."', ".
			"address='".mysql_escape_string(stripslashes($_POST['address']))."', ".
			"city='".mysql_escape_string(stripslashes($_POST['city']))."', ".
			"province_code='".mysql_escape_string(stripslashes($_POST['province_code']))."', ".
			"postalcode='".mysql_escape_string(stripslashes($_POST['postalcode']))."', ".
			"schoolemail='".mysql_escape_string(stripslashes($_POST['schoolemail']))."', ".
			"phone='".mysql_escape_string(stripslashes($_POST['phone']))."', ".
			"fax='".mysql_escape_string(stripslashes($_POST['fax']))."', ".
			"registration_password='".mysql_escape_string(stripslashes($_POST['registration_password']))."', ".
			"projectlimit='".mysql_escape_string(stripslashes($_POST['projectlimit']))."', ".
			"projectlimitper='".mysql_escape_string(stripslashes($_POST['projectlimitper']))."', ".
			"accesscode='".mysql_escape_string(stripslashes($_POST['accesscode']))."', ".
			"atrisk='$atrisk' ".
			"WHERE id='$id'";
		mysql_query($exec);
		echo mysql_error();

		if($_POST['save']=="add")
			$notice = 'added';
		else
			$notice = 'saved';
	}
	else if($_POST['action'] == "save_participation") {
		// update the schools' participation in fairs an olympics to reflect the settings submitted
		$olympicSet = array();
		$fairSet = array();
		foreach($_POST as $idx => $value){
			if(preg_match('/_olympics$/', $idx)){
				$parts = explode('_', $idx);
				$olympicSet[] = $parts[0];
			}else if(preg_match('/_fairs$/', $idx)){
				$parts = explode('_', $idx);
				$fairSet[] = $parts[0];
			}
		}
		$fairString = '(' . implode(',', $fairSet) . ')';
		$olympicString = '(' . implode(',', $olympicSet) . ')';
		mysql_query("UPDATE schools SET include_fairs = TRUE WHERE id IN $fairString");
		mysql_query("UPDATE schools SET include_fairs = FALSE WHERE id NOT IN $fairString");
		mysql_query("UPDATE schools SET include_olympics = TRUE WHERE id IN $olympicString");
		mysql_query("UPDATE schools SET include_olympics = FALSE WHERE id NOT IN $olympicString");
	}
	else if($_POST['action']=="copy") {
		$oldConfId=intval($_POST['copyconference']);
		$newConfId=intval($conference['id']);
		if($oldConfId && $newConfId) {

			$q=mysql_query("SELECT * FROM schools WHERE conferences_id=$oldConfId");

			while($r=mysql_fetch_object($q)) {
				//FIXME: we need to roll the userid's to new ones for the new conference, if we use the same ones its not gonna work
				//nobody should be copying for now, so we should be safe for a few months
				//2011-02-22
				$puid = ($r->principal_uid == null) ? 'NULL' : ("'".intval($r->principal_uid)."'");
				$shuid = ($r->sciencehead_uid == null) ? 'NULL' : ("'".intval($r->sciencehead_uid)."'");

				mysql_query("INSERT INTO schools (school,schoollang,schoollevel,board,district,phone,fax,address,city,province_code,postalcode,principal_uid,schoolemail,sciencehead_uid,accesscode,lastlogin,junior,intermediate,senior,registration_password,projectlimit,projectlimitper,conferences_id) VALUES (
					'".mysql_real_escape_string($r->school)."',
					'".mysql_real_escape_string($r->schoollang)."',
					'".mysql_real_escape_string($r->schoollevel)."',
					'".mysql_real_escape_string($r->board)."',
					'".mysql_real_escape_string($r->district)."',
					'".mysql_real_escape_string($r->phone)."',
					'".mysql_real_escape_string($r->fax)."',
					'".mysql_real_escape_string($r->address)."',
					'".mysql_real_escape_string($r->city)."',
					'".mysql_real_escape_string($r->province_code)."',
					'".mysql_real_escape_string($r->postalcode)."',$puid,
					'".mysql_real_escape_string($r->schoolemail)."',$shuid,
					'".mysql_real_escape_string($r->accesscode)."',
					NULL,
					'".mysql_real_escape_string($r->junior)."',
					'".mysql_real_escape_string($r->intermediate)."',
					'".mysql_real_escape_string($r->senior)."',
					'".mysql_real_escape_string($r->registration_password)."',
					'".mysql_real_escape_string($r->projectlimit)."',
					'".mysql_real_escape_string($r->projectlimitper)."',
					'".mysql_real_escape_string($newConfId)."')");
			}
			$notice="copied";
		}
	}

	if($_GET['action']=="delete" && $_GET['delete']) {
		mysql_query("DELETE FROM schools WHERE id='".$_GET['delete']."'");
		$notice = 'deleted';
	}

	if($_GET['action']=="clearaccesscodes") {
		mysql_query("UPDATE schools SET accesscode=NULL WHERE conferences_id='{$conference['id']}'");
		$notice = 'clearaccess';
	}

	if($_GET['action']=="makeaccesscodes") {
		$q=mysql_query("SELECT id FROM schools WHERE conferences_id='{$conference['id']}' AND (accesscode IS NULL OR accesscode='')");
		while($r=mysql_fetch_object($q)) {
			$ac=generatePassword(5);
			mysql_query("UPDATE schools SET accesscode='$ac' WHERE id='$r->id' AND conferences_id='{$conference['id']}'");

		}
		$notice = 'makeaccess';
	}

	if($_GET['action']=="edit" || $_GET['action']=="add") {
 		send_header(($_GET['action']=='edit') ? "Edit School" : "Add New School",

 		array('Committee Main' => 'committee_main.php',
			'Administration' => 'admin/index.php',
			'School Management' => 'admin/schools.php'),
            "schools_management"
				);
		$schoolid=intval($_GET['edit']);

?>
<script type="text/javascript">
function removeUserFromSchool(role,schoolid) {
	if(!confirmClick('Are you sure you want to remove this '+role+' from the school?'))
		return false;
	else {
		$.post('schools.php',{action: 'removeuser', role: role, schoolid: schoolid},function() { updateUser(role,schoolid); });
		return false;
	}
}

var global_schoolid;

function updateUser(role,schoolid) {
	global_schoolid=schoolid;

	$("#"+role+"_row").load('schools.php?action=loaduser&role='+role+'&schoolid='+schoolid,null,function() {
		$(".user_select_autocomplete").autocomplete({ 
		source: "user_select_autocomplete.php",
		select: function(event,ui) {
			var accounts_id=ui.item.accounts_id;
			var users_id=ui.item.users_id;
			var username=$(this).val();
			var field=$(this).attr("name");
			var conferenceid=$("#"+field+'_conferenceid').val();
			var role=$("#"+field+'_role').val();

			var options={action: 'adduser', accounts_id: accounts_id, users_id: users_id, username: username, field: field, conferenceid: conferenceid, schoolid: global_schoolid, role: role };

			$.post("schools.php",options,function() {
				updateUser(role,global_schoolid);
				});
			}
		});
	});
}

$(document).ready(function() {
	updateUser('principal',<?=$schoolid?>);
	updateUser('teacher',<?=$schoolid?>);

});

</script>

<?


		if($_GET['action']=="edit") {
			$buttontext="Save School";
			$q=mysql_query("SELECT * FROM schools WHERE id='$schoolid'");
			$r=mysql_fetch_object($q);
		}
		else if($_GET['action']=="add")
		{
			$buttontext="Add School";
		}
		$buttontext=i18n($buttontext);

		echo "<form method=\"post\" action=\"schools.php\">\n";
		echo "<input type=\"hidden\" name=\"save\" value=\"".$_GET['action']."\">\n";

		if($_GET['action']=="edit")
			echo "<input type=\"hidden\" name=\"id\" value=\"".$schoolid."\">\n";

		echo "<table>\n";
		echo "<tr><td>".i18n("School Name")."</td><td><input type=\"text\" name=\"school\" value=\"".htmlspecialchars($r->school)."\" size=\"60\" maxlength=\"64\" /></td></tr>\n";
		echo "<tr><td>".i18n("School Language")."</td><td>";
		echo "<select name=\"schoollang\">";
		echo "<option value=\"\">".i18n("Choose")."</option>\n";
		foreach($config['languages'] AS $k=>$l)
		{
			if($r->schoollang==$k) $sel="selected=\"selected\""; else $sel="";
			echo "<option $sel value=\"$k\">".i18n($l)."</option>\n";
		}
		echo "</select>";

		echo "</td></tr>\n";
		echo "<tr><td>".i18n("School Designation")."</td><td>";
		$des = array('' => 'Choose', 'public' => 'Public',
				'independent' => 'Independent/Private',
				'home' => 'Home School');
		echo "<select name=\"schooldesignate\">";
		foreach($des as $k=>$v) {
			$sel=($r->designate == $k) ?'selected="selected"' : '';
			echo "<option $sel value=\"$k\">".i18n($v)."</option>\n";
		}
		echo "</select></td></tr>\n";
		echo "<tr><td>".i18n("School Level")."</td><td><input type=\"text\" name=\"schoollevel\" value=\"".htmlspecialchars($r->schoollevel)."\" size=\"32\" maxlength=\"32\" /></td></tr>\n";
		echo "<tr><td>".i18n("School Board")."</td><td><input type=\"text\" name=\"board\" value=\"".htmlspecialchars($r->board)."\" size=\"60\" maxlength=\"64\" /></td></tr>\n";
		echo "<tr><td>".i18n("School District")."</td><td><input type=\"text\" name=\"district\" value=\"".htmlspecialchars($r->district)."\" size=\"60\" maxlength=\"64\" /></td></tr>\n";
		echo "<tr><td>".i18n("Address")."</td><td><input type=\"text\" name=\"address\" value=\"".htmlspecialchars($r->address)."\" size=\"60\" maxlength=\"64\" /></td></tr>\n";
		echo "<tr><td>".i18n("City")."</td><td><input type=\"text\" name=\"city\" value=\"".htmlspecialchars($r->city)."\" size=\"32\" maxlength=\"32\" /></td></tr>\n";
		echo "<tr><td>".i18n($config['provincestate'])."</td><td>";
			emit_province_selector("province_code",$r->province_code);
		echo "</td></tr>\n";
		echo "<tr><td>".i18n($config['postalzip'])."</td><td><input type=\"text\" name=\"postalcode\" value=\"$r->postalcode\" size=\"8\" maxlength=\"7\" /></td></tr>\n";
		echo "<tr><td>".i18n("Phone")."</td><td><input type=\"text\" name=\"phone\" value=\"".htmlspecialchars($r->phone)."\" size=\"16\" maxlength=\"16\" /></td></tr>\n";
		echo "<tr><td>".i18n("Fax")."</td><td><input type=\"text\" name=\"fax\" value=\"".htmlspecialchars($r->fax)."\" size=\"16\" maxlength=\"16\" /></td></tr>\n";

		echo "<tr><td>".i18n("School Email")."</td><td><input type=\"text\" name=\"schoolemail\" value=\"".htmlspecialchars($r->schoolemail)."\" size=\"60\" maxlength=\"128\" /></td></tr>\n";
		echo "<tr><td>".i18n("Access Code")."</td><td><input type=\"text\" name=\"accesscode\" value=\"".htmlspecialchars($r->accesscode)."\" size=\"32\" maxlength=\"32\" /></td></tr>\n";

		echo "<tr><td colspan=2><br /><b>".i18n("Principal")."</b></td></tr>";
		echo "<tr id=\"principal_row\">";
		//this gets filled in by javascript/jquery
		echo "</tr>";

		echo "<tr><td colspan=2><br /><b>".i18n("Science head/teacher or science fair contact at school")."</b></td></tr>";
		echo "<tr id=\"teacher_row\">";
		//this gets filled in by javascript/jquery
		echo "</tr>";

		if($config['participant_registration_type']=="schoolpassword") {
			echo "<tr><td colspan=2><br /><b>".i18n("Participant Registration Password")."</b></td></tr>";
			echo "<tr><td>".i18n("Password")."</td><td><input type=\"text\" name=\"registration_password\" value=\"".htmlspecialchars($r->registration_password)."\" size=\"32\" maxlength=\"32\" /></td></tr>\n";
		}
		echo "<tr><td colspan=2><br /><b>".i18n("Participant Registration Limits")."</b></td></tr>";
		if($config['participant_registration_type']=="invite") {
			echo "<tr><td colspan=2>".i18n("Set to 0 to have no registration limit")."</td></tr>";
			echo "<tr><td colspan=2>".i18n("Maximum of")."&nbsp;";
			echo "<input type=\"text\" name=\"projectlimit\" value=\"".htmlspecialchars($r->projectlimit)."\" size=\"4\" maxlength=\"4\" />";
			echo "&nbsp;";
			echo i18n("projects");
			echo "&nbsp;";
			echo "<select name=\"projectlimitper\">";
			if($r->projectlimitper=="total") $sel="selected=\"selected\""; else $sel="";
			echo "<option $sel value=\"total\">".i18n("total")."</option>\n";
			if($r->projectlimitper=="agecategory") $sel="selected=\"selected\""; else $sel="";
			echo "<option $sel value=\"agecategory\">".i18n("per age category")."</option>\n";
			echo "</select>";
			echo "</td></tr>\n";
		}
		else
		{
			echo "<tr><td colspan=2>".i18n("Participant registration limits are currently disabled.  In order to use participant registration limits for schools, the participant registration type must be set to 'invite' in Configuration / Configuration Variables")."</td></tr>";
			

		}
		echo "<tr><td colspan=2><br /><b>".i18n("Demographic Information")."</b></td></tr>";

		$ch = ($r->atrisk) == 'yes' ? 'checked="checked"' : '';
		echo "<tr><td align=\"right\"><input type=\"checkbox\" name=\"atrisk\" value=\"yes\" $ch /></td><td>".i18n("Inner City or At-Risk school")."</td></tr>\n";
		echo "<tr><td colspan=\"2\">&nbsp;</td></tr>";
		echo "<tr><td colspan=\"2\" align=\"center\"><input type=\"submit\" value=\"$buttontext\" /></td></tr>\n";

		echo "</table>\n";
		echo "</form>\n";



	}
	else if($_GET['action'] == 'participation')
	{
		send_header(
			"Conference Participation",
	 		array(
				'Committee Main' => 'committee_main.php',
				'Administration' => 'admin/index.php',
				'School Management' => 'admin/schools.php'
			),
			"participation"
		);

		echo "<form method=\"post\" action=\"schools.php\">\n";
		echo "<table class=\"tableview\">";
		echo "<thead><tr>";
		echo " <th>".i18n("School")."</th>";
		echo " <th>".i18n("Participation")."</th>";
		echo "</tr></thead>\n";

		$query = mysql_query("SELECT id, school, include_fairs, include_olympics  FROM schools WHERE conferences_id='".$conference['id']."' ORDER BY school");
		while($record = mysql_fetch_array($query)){
			echo "<tr><td>" . $record['school'] . "</td>";
			echo "<td><label style=\"margin-right: 2em\">";
			echo '<input type="checkbox" name="' . $record['id'] . '_fairs' . '"';
			if($record['include_fairs'] == true) echo " CHECKED";
			echo "> " . i18n("fairs") . "</label>";

			echo "<label>";
			echo '<input type="checkbox" name="' . $record['id'] . '_olympics' . '"';
			if($record['include_olympics'] == true) echo " CHECKED";
			echo "> " . i18n("olympics") . "</label>";
			echo "</td></tr>";
		}
		echo "<tr><td colspan=\"2\" align=\"center\"><input type=\"submit\" value=\"" . i18n('Save') . "\" /></td></tr>\n";
		echo "</table>\n";
		echo '<input type="hidden" name="action" value="save_participation"></input>' . "\n";
		echo "</form>\n";

	}
	else if($_GET['action']=="copy") {
 		send_header("School Management",
 		array('Committee Main' => 'committee_main.php',
			'Administration' => 'admin/index.php'),
            "schools_management"
				);
		echo "<form method=\"post\" action=\"schools.php\">";
		echo "<input type=\"hidden\" name=\"action\" value=\"copy\">\n";
		echo i18n("Choose a conference to copy schools from");
		echo "<br />";
		$q=mysql_query("SELECT * FROM conferences WHERE id!='{$conference['id']}' ORDER BY id DESC");
		echo mysql_error();
		echo "<select name=\"copyconference\">";
		echo "<option value=\"\">".i18n("Choose a Conference")."</option>\n";
		while($r=mysql_fetch_object($q)) {
			$numq=mysql_query("SELECT COUNT(*) AS c FROM schools WHERE conferences_id='{$r->id}'");
			$numr=mysql_fetch_object($numq);
			echo "<option value=\"{$r->id}\">{$r->name} ($numr->c schools)</option>\n";
		}
		echo "</select>\n";
		echo "<input type=\"submit\" value=\"".i18n("Copy Schools")."\">";
		echo "</form>\n";

	}

	else {
 		send_header("School Management",
 		array('Committee Main' => 'committee_main.php',
			'Administration' => 'admin/index.php'),
            "schools_management"
				);

		switch($notice) {
		case 'added':
			echo happy(i18n("School successfully added"));
			break;
		case 'saved':
			echo happy(i18n("Successfully saved changes to school"));
			break;
		case 'deleted':
			echo happy(i18n("School successfully deleted"));
			break;
		case 'clearaccess':
			echo happy(i18n("Access Codes successfully cleared from all schools"));
			break;
		case 'makeaccess':
			echo happy(i18n("Access Codes successfully set for schools that didn't have one"));
			break;
		case 'copied':
			echo happy(i18n("Schools successfully copied from other conference"));
			break;
		}

		echo "<br />";
		echo "<a href=\"schools.php?action=add\">".i18n("Add new school")."</a>\n";
		echo "<br />";
		echo "<a href=\"schools.php?action=copy\">".i18n("Copy schools from a difference conference")."</a>\n";
		echo "<br />";
		echo "<a href=\"schoolsimport.php?action=add\">".i18n("Import schools from CSV")."</a>\n";
		echo "<br />";
		echo "<a href=\"schools.php?action=makeaccesscodes\">".i18n("Create Access Code for any school without one")."</a>\n";
		echo "<br />";
		echo "<a onclick=\"return confirmClick('".i18n("Are you sure you want to remove all access codes from all schools?")."')\" href=\"schools.php?action=clearaccesscodes\">".i18n("Remove Access Codes from all schools")."</a>\n";
		echo "<br />";
		// we only need to see this option if we are managing both types of conferences
		$q = mysql_fetch_array(mysql_query('SELECT COUNT(DISTINCT(`type`)) as taly FROM conferences'));
		if($q['tally'] > 1){
			echo "<a href=\"schools.php?action=participation\">".i18n("Set SFIAB/SOIAB participation")."</a>\n";
			echo "<br />";
		}
		echo "<table class=\"tableview\">";
		echo "<thead><tr>";
		echo " <th>".i18n("School")."</th>";
		echo " <th>".i18n("Address")."</th>";
		echo " <th>".i18n("Phone")."</th>";
		echo " <th>".i18n("Science Head")."</th>";
		echo " <th>".i18n("Science Head Email")."</th>";
		if($config['participant_registration_type']=="schoolpassword")
			echo " <th>".i18n("Reg Pass")."</th>";
		echo " <th>".i18n("Access Code")."</th>";
		echo " <th>".i18n("Action")."</th>";
		echo "</tr></thead>\n";

		$q=mysql_query("SELECT * FROM schools WHERE conferences_id='".$conference['id']."' ORDER BY school");
		while($r=mysql_fetch_object($q))
		{
			echo "<tr>\n";
			echo " <td>$r->school</td>\n";
			echo " <td>$r->address, $r->city, $r->postalcode</td>\n";
			echo " <td>$r->phone</td>\n";
			$sciencehead = '';
			$scienceheademail = '';
			if($r->sciencehead_uid > 0) {
				$sh = user_load($r->sciencehead_uid);
				$sciencehead = $sh['name'];
				if(!$sciencehead) $sciencehead="<i>no name set</i>";
//				print_r($sh);
				$sha=account_load($sh['accounts_id']);
				if($sha['email']) {
					$scienceheademail=$sha['email'];
					$pending="";
				}
				else {
					$scienceheademail=$sha['pendingemail'];
					$pending="(unconfirmed)";
				}

			}
			echo " <td>$sciencehead</td>\n";
			echo " <td><a href=\"mailto:$scienceheademail\">$scienceheademail</a> $pending</td>\n";
			if($config['participant_registration_type']=="schoolpassword")
				echo " <td>$r->registration_password</td>\n";
			echo " <td>$r->accesscode</td>\n";

			echo " <td align=\"center\">";
			echo "<a href=\"schools.php?action=edit&edit=$r->id\"><img border=\"0\" src=\"".$config['SFIABDIRECTORY']."/images/16/edit.".$config['icon_extension']."\"></a>";
			echo "&nbsp;";
			echo "<a onclick=\"return confirmClick('Are you sure you want to remove this school?')\" href=\"schools.php?action=delete&delete=$r->id\"><img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\"></a>";


			echo " </td>\n";
			echo "</tr>\n";
		}

		echo "</table>\n";


	}

	send_footer();

?>