@@ -537,7 +554,8 @@ function emit_province_selector($name,$selected="",$extra="")
{
if($r->code == $selected) $sel="selected=\"selected\""; else $sel="";
- echo "\n";
+ echo "\n";
}
echo "\n";
diff --git a/schoolaccess.php b/schoolaccess.php
new file mode 100644
index 0000000..ad46b8c
--- /dev/null
+++ b/schoolaccess.php
@@ -0,0 +1,214 @@
+
+include "common.inc.php";
+if($_POST['schoolid'] && $_POST['accesscode'])
+{
+ $q=mysql_query("SELECT * FROM schools WHERE id='".$_POST['schoolid']."' AND accesscode='".$_POST['accesscode']."' AND year='".$config['FAIRYEAR']."'");
+ if(mysql_num_rows($q)==1)
+ {
+ $_SESSION['schoolid']=$_POST['schoolid'];
+ $_SESSION['schoolaccesscode']=$_POST['accesscode'];
+ mysql_query("UPDATE schools SET lastlogin=NOW() WHERE id='".$_POST['schoolid']."'");
+
+ }
+ else
+ $errormsg="Invalid School ID or Access Code";
+}
+send_header(i18n("School Access"));
+
+if($_GET['action']=="logout")
+{
+ unset($_SESSION['schoolid']);
+ unset($_SESSION['schoolaccesscode']);
+ echo happy(i18n("You have been logged out from the school access page"));
+}
+
+
+if($_SESSION['schoolid'] && $_SESSION['schoolaccesscode'])
+{
+ $q=mysql_query("SELECT * FROM schools WHERE id='".$_SESSION['schoolid']."' AND accesscode='".$_SESSION['schoolaccesscode']."' AND year='".$config['FAIRYEAR']."'");
+ echo mysql_error();
+ $school=mysql_fetch_object($q);
+ if($school)
+ {
+ if($_POST['action']=="save")
+ {
+ mysql_query("UPDATE schools SET
+ school='".mysql_escape_string(stripslashes($_POST['school']))."',
+ address='".mysql_escape_string(stripslashes($_POST['address']))."',
+ city='".mysql_escape_string(stripslashes($_POST['city']))."',
+ province_code='".mysql_escape_string(stripslashes($_POST['province_code']))."',
+ postalcode='".mysql_escape_string(stripslashes($_POST['postalcode']))."',
+ phone='".mysql_escape_string(stripslashes($_POST['phone']))."',
+ fax='".mysql_escape_string(stripslashes($_POST['fax']))."',
+ sciencehead='".mysql_escape_string(stripslashes($_POST['sciencehead']))."',
+ scienceheademail='".mysql_escape_string(stripslashes($_POST['scienceheademail']))."',
+ scienceheadphone='".mysql_escape_string(stripslashes($_POST['scienceheadphone']))."'
+ WHERE id='$school->id'");
+
+ if(mysql_error())
+ echo error(i18n("An Error occured trying to save the school information"));
+ else
+ echo happy(i18n("School information successfully updated"));
+
+ //and reselect it
+ $q=mysql_query("SELECT * FROM schools WHERE id='".$_SESSION['schoolid']."' AND accesscode='".$_SESSION['schoolaccesscode']."' AND year='".$config['FAIRYEAR']."'");
+ echo mysql_error();
+ $school=mysql_fetch_object($q);
+ }
+
+/*
+ if($_POST['action']=="numbers")
+ {
+ mysql_query("UPDATE schools SET
+ junior='".$_POST['junior']."',
+ intermediate='".$_POST['intermediate']."',
+ senior='".$_POST['senior']."'
+ WHERE id='$school->id'");
+
+ echo mysql_error();
+
+ $q=mysql_query("SELECT * FROM schools WHERE id='".$_SESSION['schoolid']."' AND accesscode='".$_SESSION['schoolaccesscode']."'");
+ echo "Participation Information Successfully Updated \n";
+ $school=mysql_fetch_object($q);
+
+ }
+ */
+ if($_POST['action']=="feedback")
+ {
+ $body="";
+ $body.=$_SERVER['REMOTE_ADDR']." (".$_SERVER['REMOTE_HOST'].")\n";
+ $body.=date("r")."\n";
+ $body.="School ID: $school->id\n";
+ $body.="School Name: $school->school\n";
+ $body.="Feedback:\n".$_POST['feedbacktext']."\n";
+ echo "mailing ".$config['fairmanageremail'];
+ mail($config['fairmanageremail'],"School Feedback",$body,"From: webpage@".$_SERVER['SERVER_NAME']);
+ echo happy(i18n("Thanks for your feedback!"));
+
+ }
+
+ echo "
$school->school
";
+ echo "
School Information
";
+ echo "Please make sure your school contact information is correct, make any necessary changes:";
+ echo "";
+ echo " ";
+
+ /*
+ //the participation section needs to be updated to handle the age categories as specified
+ //in the categories table and the numbers from configuration, for now, lets just not do it.
+ //this code is copied from the ORSF schoolaccess page, thats why its here, but just commented out.
+
+ echo "
Participation Information
";
+ echo "Please select the number of projects you anticipate on sending to the fair in each of the age categories";
+ echo "";
+
+ */
+ echo " ";
+ echo "