编辑文件 - RemoveAccess.php

✏️ 正在编辑: RemoveAccess.php

路径: /home/eblama1/sms.karnplayinland.com/modules/Custom/RemoveAccess.php
提示: 您可以编辑任何文件（包括二进制文件），但请注意不当修改可能导致文件损坏。

<?php
/**
 * Remove Access for selected Students
 * and Associated Parents.
 * Grant Access back.
 *
 * @since 4.8
 *
 * @package RosarioSIS
 */

// Remove or grant access for students.
$accessfunc = empty( $_REQUEST['accessfunc'] ) ? '' : 'grant';

if ( $_REQUEST['modfunc'] === 'save'
	&& AllowEdit() )
{
	if ( ! empty( $_REQUEST['st_arr'] ) )
	{
		// @since 5.9 Move REMOVE_ACCESS_USERNAME_PREFIX_ADD from program_config (per school) to config (all schools, 0).
		$username_prefix_add = Config(
			'REMOVE_ACCESS_USERNAME_PREFIX_ADD',
			issetVal( $_REQUEST['username_prefix_add'] )
		);

$st_list = implode( ',', array_map( 'intval', $_REQUEST['st_arr'] ) );

$update_sql = "UPDATE students
			SET USERNAME=CONCAT('" . DBEscapeString( $username_prefix_add ) . "', USERNAME)
			WHERE STUDENT_ID IN (" . $st_list . ")";

if ( $accessfunc === 'grant' )
		{
			// @since 11.0 SQL Fix replacement in case the "username" contains the prefix
			$update_sql = "UPDATE students
				SET USERNAME=CONCAT(
					REPLACE(
						SUBSTRING(USERNAME, 1, LENGTH('" . DBEscapeString( $username_prefix_add ) . "')),
						'" . DBEscapeString( $username_prefix_add ) . "',
						''),
					SUBSTR(USERNAME, LENGTH('" . DBEscapeString( $username_prefix_add ) . "')+1, 100))
				WHERE STUDENT_ID IN (" . $st_list . ")";
		}

DBQuery( $update_sql );

if ( ! empty( $_REQUEST['parents_no_access'] ) )
		{
			$profile_from = $accessfunc === 'grant' ? 'none' : 'parent';

$profile_to = $accessfunc === 'grant' ? 'parent' : 'none';

DBQuery( "UPDATE staff
				SET PROFILE='" . $profile_to . "'
				WHERE PROFILE='" . $profile_from . "'
				AND STAFF_ID IN(SELECT STAFF_ID
					FROM students_join_users
					WHERE STUDENT_ID IN (" . $st_list . "))
				AND SYEAR='" . UserSyear() . "'" );
		}

$note[] = button( 'check' ) . '&nbsp;' . _( 'Done.' );
	}
	else
	{
		$error[] = _( 'You must choose at least one student.' );
	}

RedirectURL( [ 'modfunc', 'st_arr' ] );
}

if ( ! $_REQUEST['modfunc'] )
{
	if ( $accessfunc === 'grant' )
	{
		DrawHeader( '<span class="module-icon Students"></span> ' . _( 'Grant Access' ) );

$access_header = '<a href="' . URLEscape( 'Modules.php?modname=' . $_REQUEST['modname'] ) . '"><b>' .
			_( 'Remove Access' ) . '</b></a>';

$button_label = _( 'Grant Access for Selected Students' );

$checkbox_parents_label = _( 'Grant Access for Associated Parents' );
	}
	else
	{
		DrawHeader( ProgramTitle() );

$access_header = '<a href="' . URLEscape( 'Modules.php?modname=' . $_REQUEST['modname'] . '&accessfunc=grant' ) . '"><b>' .
			_( 'Grant Access' ) . '</b></a>';

$button_label = _( 'Remove Access for Selected Students' );

$checkbox_parents_label = _( 'Remove Access for Associated Parents' );
	}

DrawHeader( $access_header );

echo ErrorMessage( $error );

echo ErrorMessage( $note, 'note' );

$username_prefix_add = Config( 'REMOVE_ACCESS_USERNAME_PREFIX_ADD' );

if ( $_REQUEST['search_modfunc'] === 'list' )
	{
		echo '<form action="' . URLEscape( 'Modules.php?modname=' . $_REQUEST['modname'] .
			'&modfunc=save&include_inactive=' . issetVal( $_REQUEST['include_inactive'], '' ) .
			'&_search_all_schools=' . issetVal( $_REQUEST['_search_all_schools'], '' ) .
			'&accessfunc=' . $accessfunc  ) . '" method="POST">';

$extra['header_right'] = SubmitButton( $button_label );

$extra['extra_header_left'] = '';

if ( $accessfunc !== 'grant' )
		{
			$extra['extra_header_left'] .= TextInput(
				$username_prefix_add,
				'username_prefix_add',
				_( 'Add prefix to username' ),
				'required',
				false
			) . '<br />';
		}

$extra['extra_header_left'] .= CheckboxInput(
			( $accessfunc === 'grant' ? 'Y' : '' ),
			'parents_no_access',
			$checkbox_parents_label,
			'autocomplete="off"',
			true
		);
	}

// Students having Username, Password set.
	$extra['WHERE'] = " AND s.USERNAME IS NOT NULL
		AND s.PASSWORD IS NOT NULL";

if ( $accessfunc === 'grant' )
	{
		if ( ! $username_prefix_add )
		{
			$extra['WHERE'] .= " AND s.USERNAME LIKE 'no_username_prefix_set...%'";
		}
		else
		{
			// Student already being blocked.
			$extra['WHERE'] .= " AND s.USERNAME LIKE '" . DBEscapeString( $username_prefix_add ) . "%'";
		}
	}
	elseif ( $username_prefix_add )
	{
		// Student not already being blocked.
		$extra['WHERE'] .= " AND s.USERNAME NOT LIKE '" . DBEscapeString( $username_prefix_add ) . "%'";
	}

$extra['columns_after'] = [ 'USERNAME' => _( 'Username' ) ];

$extra['SELECT'] = issetVal( $extra['SELECT'], '' );
	$extra['SELECT'] .= ",s.STUDENT_ID AS CHECKBOX,s.USERNAME";
	$extra['link'] = [ 'FULL_NAME' => false ];
	$extra['functions'] = [ 'CHECKBOX' => 'MakeChooseCheckbox' ];
	$extra['columns_before'] = [ 'CHECKBOX' => MakeChooseCheckbox( 'Y_required', '', 'st_arr' ) ];
	$extra['new'] = true;

$extra['action'] = '&accessfunc=' . $accessfunc;

$extra['search_title'] = $accessfunc === 'grant' ?
		_( 'Students without Access' ) :
		_( 'Students with Access' );

Search( 'student_id', $extra );

if ( $_REQUEST['search_modfunc'] === 'list' )
	{
		echo '<br /><div class="center">' .

SubmitButton( $button_label ) . '</div></form>';
	}
}

← 返回文件管理器