示例#1
0
 }
 echo "<SELECT name=course onChange='this.form.submit();'>";
 if (count($RET) > 0) {
     foreach ($RET as $course) {
         echo "<OPTION id={$course['COURSE_ID']} value={$course['COURSE_ID']}" . (UserCourse() == $course['COURSE_ID'] ? ' SELECTED' : '') . ">" . $course['COURSE_TITLE'] . "</OPTION>";
     }
 } else {
     echo '<OPTION value="">n/a</OPTION>';
 }
 echo "</SELECT>";
 //===================================================================================================
 echo "</FORM></td><td></td>";
 echo "<td><FORM name=head_frm id=head_frm action=Side.php?modfunc=update&btnn={$btn}&nsc={$ns}&act=period method=POST><INPUT type=hidden name=modcat value='' id=modcat_input>";
 $QI = DBQuery("SELECT cpv.ID,cp.COURSE_PERIOD_ID,cp.MARKING_PERIOD_ID,cp.COURSE_ID,cp.TITLE,cp.SCHOOL_ID,cpv.PERIOD_ID FROM course_periods cp,course_period_var cpv WHERE cp.SYEAR='" . UserSyear() . "' AND cp.COURSE_PERIOD_ID=cpv.COURSE_PERIOD_ID AND cp.SCHOOL_ID='" . UserSchool() . "' AND cp.COURSE_ID='" . UserCourse() . "' AND (TEACHER_ID='" . User('STAFF_ID') . "' OR SECONDARY_TEACHER_ID='" . User('STAFF_ID') . "') AND (MARKING_PERIOD_ID IN (" . GetAllMP($allMP, UserMP()) . ") OR (MARKING_PERIOD_ID IS NULL)) group by (cp.COURSE_PERIOD_ID)");
 $RET = DBGet($QI);
 $user_profile_ret = DBGet(DBQuery(" SELECT PROFILE FROM staff WHERE STAFF_ID=" . UserID()));
 if (!CpvId()) {
     $_SESSION['CpvId'] = $RET[1]['ID'];
 }
 $fy_id = DBGet(DBQuery("SELECT MARKING_PERIOD_ID FROM school_years WHERE SYEAR='" . UserSyear() . "' AND SCHOOL_ID='" . UserSchool() . "'"));
 $fy_id = $fy_id[1]['MARKING_PERIOD_ID'];
 if (!UserCoursePeriod()) {
     $_SESSION['UserCoursePeriod'] = $RET[1]['COURSE_PERIOD_ID'];
 }
 echo "<SELECT name=period onChange='this.form.submit();'>";
 if (count($RET) > 0) {
     $flag = 0;
     foreach ($RET as $period) {
         $x_sel = "";
         $period_det = DBGet(DBQuery('SELECT sp.TITLE as PERIOD_NAME,cpv.DAYS,cpv.COURSE_PERIOD_DATE FROM course_period_var cpv,school_periods sp WHERE cpv.ID=' . $period['ID'] . ' AND cpv.PERIOD_ID=sp.PERIOD_ID'));
         $period_det = $period_det[1];
示例#2
0
    $period_select .= "<OPTION value='na' selected>N/A</OPTION>";
    $fi = array();
    foreach ($RET as $period) {
        $date1 = ucfirst(date("l", strtotime($redate)));
        $fi = str_split($period['DAYS']);
        $days_arr = array("Monday" => 'M', "Tuesday" => 'T', "Wednesday" => 'W', "Thursday" => 'H', "Friday" => 'F', "Saturday" => 'S', "Sunday" => 'U');
        $d = $days_arr[$date1];
        $period_select .= "<OPTION value={$period['ID']}" . (in_array($d, $fi) ? ' SELECTED' : '') . ">" . $period['SHORT_NAME'] . ($period['MARKING_PERIOD_ID'] != $fy_id ? ' ' . GetMP($period['MARKING_PERIOD_ID'], 'SHORT_NAME') : '') . (strlen($period['DAYS']) < 5 ? ' ' . $period['DAYS'] : '') . ' - ' . $period['COURSE_TITLE'] . "</OPTION>";
        if (CpvId() == $period['ID']) {
            $_SESSION['UserPeriod'] = $period['PERIOD_ID'];
        }
    }
    $period_select .= "</SELECT>";
    DrawHeader($period_select);
}
$profile_check = DBGet(DBQuery("SELECT PROFILE FROM staff WHERE STAFF_ID=" . UserID()));
$profile_check = $profile_check[1]['PROFILE'];
if ($profile_check == 'admin') {
    if (count($stu_RET) != 0 && count($course_RET) != 0) {
        DrawHeader(DateInputAY($date, 'date', 1) . $date_note, SubmitButton('Save', '', 'class=btn_medium'));
    } else {
        echo '<div style="float:left;">';
        DrawHeader(DateInputAY($date, 'date', 2) . $date_note);
        echo '</div>';
    }
} else {
    if (count($stu_RET) != 0 && count($course_RET) != 0) {
        DrawHeader(DateInputAY($date, 'date', 3) . $date_note, SubmitButton('Save', '', 'class=btn_medium'));
    } else {
        echo '<div style="float:left;">';
        DrawHeader(DateInputAY($date, 'date', 4) . $date_note);
示例#3
0
             if ($flag == 0 && $seats_availabe[$cpd['COURSE_PERIOD_ID']] > 0) {
                 $schedule[$rd[1]['STUDENT_ID']]['COURSE_PERIOD_ID'] = $cpd['COURSE_PERIOD_ID'];
                 $schedule[$rd[1]['STUDENT_ID']]['COURSE_ID'] = $cpd['COURSE_ID'];
                 $schedule[$rd[1]['STUDENT_ID']]['MP'] = $cpd['MP'];
                 $schedule[$rd[1]['STUDENT_ID']]['MARKING_PERIOD_ID'] = $cpd['MARKING_PERIOD_ID'];
                 $schedule[$rd[1]['STUDENT_ID']]['CALENDAR_ID'] = $cpd['CALENDAR_ID'];
                 $schedule[$rd[1]['STUDENT_ID']]['TEACHER_ID'] = $cpd['TEACHER_ID'];
                 $schedule[$rd[1]['STUDENT_ID']]['REQUEST_ID'] = $rd[1]['REQUEST_ID'];
                 $seats_availabe[$cpd['COURSE_PERIOD_ID']] = $cpd['TOTAL_SEATS'] - ($cpd['FILLED_SEATS'] + 1);
                 break 1;
             }
         }
     }
 }
 foreach ($schedule as $stu_id => $cp_id) {
     DBQuery('INSERT INTO schedule (SYEAR,SCHOOL_ID,STUDENT_ID,START_DATE,MODIFIED_BY,COURSE_ID,COURSE_PERIOD_ID,MP,MARKING_PERIOD_ID,DROPPED) VALUES (' . UserSyear() . ',' . UserSchool() . ',' . $stu_id . ',\'' . $s_date . '\',' . UserID() . ',\'' . $cp_id['COURSE_ID'] . '\',\'' . $cp_id['COURSE_PERIOD_ID'] . '\',\'' . ($cp_id['MARKING_PERIOD_ID'] != '' ? $cp_id['MP'] : 'FY') . '\',\'' . ($cp_id['MARKING_PERIOD_ID'] != '' ? $cp_id['MARKING_PERIOD_ID'] : GetMPId('FY')) . '\',\'N\')');
     DBQuery('DELETE FROM schedule_requests WHERE REQUEST_ID=' . $cp_id['REQUEST_ID']);
     if (strtotime($s_date) <= strtotime(date('Y-m-d'))) {
         $check_d_att = DBGet(DBQuery('SELECT * FROM course_period_var WHERE COURSE_PERIOD_ID=' . $cp_id['COURSE_PERIOD_ID'] . ' AND DOES_ATTENDANCE=\'Y\''));
         if (count($check_d_att) > 0) {
             for ($j = strtotime($s_date); $j < strtotime(date('Y-m-d')); $j = $j + 86400) {
                 $chk_date = DBGet(DBQuery('SELECT COUNT(*) as REC_EX FROM attendance_calendar WHERE SCHOOL_ID=' . UserSchool() . ' AND SYEAR=' . UserSyear() . ' AND SCHOOL_DATE=\'' . date('Y-m-d', $j) . '\' AND CALENDAR_ID=' . $cp_id['CALENDAR_ID']));
                 if ($chk_date[1]['REC_EX'] != 0) {
                     foreach ($check_d_att as $catt) {
                         DBQuery('INSERT INTO missing_attendance (SCHOOL_ID,SYEAR,SCHOOL_DATE,COURSE_PERIOD_ID,PERIOD_ID,TEACHER_ID) VALUES (' . UserSchool() . ',' . UserSyear() . ',' . date('Y-m-d', $j) . ',' . $cp_id['COURSE_PERIOD_ID'] . ',' . $catt['PERIOD_ID'] . ',' . $cp_id['TEACHER_ID'] . ')');
                     }
                 }
             }
         }
     }
 }
示例#4
0
     $_REQUEST['modfunc'] = '';
 } else {
     $fields = $values = '';
     foreach ($_REQUEST['values'] as $column => $value) {
         if ($column != 'ID' && $value) {
             $value = paramlib_validation($column, trim($value));
             $fields .= ',' . $column;
             $values .= ",\"" . str_replace("'", "''", str_replace("\\'", "''", trim($value))) . " \"";
         }
     }
     if ($fields && $values) {
         $id = DBGet(DBQuery('SHOW TABLE STATUS LIKE \'schools\''));
         $id = $id[1]['AUTO_INCREMENT'];
         $sql = 'INSERT INTO schools (SYEAR' . $fields . ') values(' . UserSyear() . '' . $values . ')';
         DBQuery($sql);
         DBQuery('INSERT INTO  staff_school_relationship(staff_id,school_id,syear) VALUES (' . UserID() . ',' . $id . ',' . UserSyear() . ')');
         if (User('PROFILE_ID') != 0) {
             $super_id = DBGet(DBQuery('SELECT STAFF_ID FROM staff WHERE PROFILE_ID=0 AND PROFILE=\'admin\''));
             DBQuery('INSERT INTO  staff_school_relationship(staff_id,school_id,syear) VALUES (' . $super_id[1]['STAFF_ID'] . ',' . $id . ',' . UserSyear() . ')');
         }
         DBQuery('INSERT INTO school_years (MARKING_PERIOD_ID,SYEAR,SCHOOL_ID,TITLE,SHORT_NAME,SORT_ORDER,START_DATE,END_DATE,POST_START_DATE,POST_END_DATE,DOES_GRADES,DOES_EXAM,DOES_COMMENTS,ROLLOVER_ID) SELECT fn_marking_period_seq(),SYEAR,\'' . $id . '\' AS SCHOOL_ID,TITLE,SHORT_NAME,SORT_ORDER,START_DATE,END_DATE,POST_START_DATE,POST_END_DATE,DOES_GRADES,DOES_EXAM,DOES_COMMENTS,MARKING_PERIOD_ID FROM school_years WHERE SYEAR=\'' . UserSyear() . '\' AND SCHOOL_ID=\'' . UserSchool() . '\' ORDER BY MARKING_PERIOD_ID');
         DBQuery('INSERT INTO system_preference(school_id, full_day_minute, half_day_minute) VALUES (' . $id . ', NULL, NULL)');
         DBQuery('INSERT INTO program_config (SCHOOL_ID,SYEAR,PROGRAM,TITLE,VALUE) VALUES(\'' . $id . '\',\'' . UserSyear() . '\',\'MissingAttendance\',\'LAST_UPDATE\',\'' . date('Y-m-d') . '\')');
         $_SESSION['UserSchool'] = $id;
         unset($_REQUEST['new_school']);
     }
     echo '<FORM action=Modules.php?modname=' . strip_tags(trim($_REQUEST['modname'])) . ' method=POST>';
     echo '<script language=JavaScript>parent.side.location="' . $_SESSION['Side_PHP_SELF'] . '?modcat="+parent.side.document.forms[0].modcat.value;</script>';
     echo "<br><br>";
     DrawHeaderHome('<IMG SRC=assets/check.gif> &nbsp; A new school called <strong>' . GetSchool(UserSchool()) . '</strong> has been created. To finish the operation, click OK button.', '<INPUT  type=submit value=OK class="btn_medium">');
     echo '<input type="hidden" name="copy" value="done"/>';
示例#5
0
function GetStuListAttn(&$extra)
{
    global $contacts_RET, $view_other_RET, $_openSIS;
    if ((!$extra['SELECT_ONLY'] || strpos($extra['SELECT_ONLY'], 'GRADE_ID') !== false) && !$extra['functions']['GRADE_ID']) {
        $functions = array('GRADE_ID' => 'GetGrade');
    } else {
        $functions = array();
    }
    if ($extra['functions']) {
        $functions += $extra['functions'];
    }
    if (!$extra['DATE']) {
        $queryMP = UserMP();
        $extra['DATE'] = DBDate();
    } else {
        $queryMP = UserMP();
    }
    if ($_REQUEST['expanded_view'] == 'true') {
        if (!$extra['columns_after']) {
            $extra['columns_after'] = array();
        }
        #############################################################################################
        //Commented as it crashing for Linux due to  Blank Database tables
        #############################################################################################
        $view_address_RET = DBGet(DBQuery('SELECT VALUE FROM program_user_config WHERE PROGRAM=\'StudentFieldsView\' AND TITLE=\'ADDRESS\' AND USER_ID=\'' . User('STAFF_ID') . '\''));
        $view_address_RET = $view_address_RET[1]['VALUE'];
        $view_other_RET = DBGet(DBQuery('SELECT TITLE,VALUE FROM program_user_config WHERE PROGRAM=\'StudentFieldsView\' AND TITLE IN (\'CONTACT_INFO\',\'HOME_PHONE\',\'GUARDIANS\',\'ALL_CONTACTS\') AND USER_ID=\'' . User('STAFF_ID') . '\''), array(), array('TITLE'));
        if (!count($view_fields_RET) && !isset($view_address_RET) && !isset($view_other_RET['CONTACT_INFO'])) {
            $extra['columns_after'] = array('CONTACT_INFO' => '<IMG SRC=assets/down_phone_button.gif border=0>', 'gender' => 'Gender', 'ethnicity' => 'Ethnicity', 'ADDRESS' => 'Mailing Address', 'CITY' => 'City', 'STATE' => 'State', 'ZIPCODE' => 'Zipcode') + $extra['columns_after'];
            $select = ',s.STUDENT_ID AS CONTACT_INFO,s.GENDER,s.ETHNICITY,a.STREET_ADDRESS_1 as ADDRESS,a.CITY,a.STATE,a.ZIPCODE';
            $extra['FROM'] = ' LEFT OUTER JOIN student_address a ON (ssm.STUDENT_ID=a.STUDENT_ID AND a.TYPE=\'Mail\')  ' . $extra['FROM'];
            $functions['CONTACT_INFO'] = 'makeContactInfo';
            // if gender is converted to codeds type
            //$functions['CUSTOM_200000000'] = 'DeCodeds';
            $extra['singular'] = 'Student Address';
            $extra['plural'] = 'Student Addresses';
            $extra2['NoSearchTerms'] = true;
            $extra2['SELECT_ONLY'] = 'ssm.STUDENT_ID,p.STAFF_ID AS PERSON_ID,p.FIRST_NAME,p.LAST_NAME,sjp.RELATIONSHIP as STUDENT_RELATION,p.TITLE,s.PHONE,a.ID AS ADDRESS_ID ';
            $extra2['FROM'] .= ',student_address a LEFT OUTER JOIN students_join_people sjp ON (a.STUDENT_ID=sjp.STUDENT_ID AND (p.CUSTODY=\'Y\' OR sjp.IS_EMERGENCY=\'Y\')) LEFT OUTER JOIN people p ON (p.STAFF_ID=sjp.PERSON_ID) ';
            $extra2['WHERE'] .= ' AND a.STUDENT_ID=sjp.STUDENT_ID AND sjp.STUDENT_ID=ssm.STUDENT_ID ';
            $extra2['ORDER_BY'] .= 'COALESCE(p.CUSTODY,\'N\') DESC';
            $extra2['group'] = array('STUDENT_ID', 'PERSON_ID');
            // EXPANDED VIEW AND ADDR BREAKS THIS QUERY ... SO, TURN 'EM OFF
            if (!$_REQUEST['_openSIS_PDF']) {
                $expanded_view = $_REQUEST['expanded_view'];
                $_REQUEST['expanded_view'] = false;
                $addr = $_REQUEST['addr'];
                unset($_REQUEST['addr']);
                $contacts_RET = GetStuList($extra2);
                $_REQUEST['expanded_view'] = $expanded_view;
                $_REQUEST['addr'] = $addr;
            } else {
                unset($extra2['columns_after']['CONTACT_INFO']);
            }
        } else {
            if ($view_other_RET['CONTACT_INFO'][1]['VALUE'] == 'Y' && !$_REQUEST['_openSIS_PDF']) {
                $select .= ',NULL AS CONTACT_INFO ';
                $extra['columns_after']['CONTACT_INFO'] = '<IMG SRC=assets/down_phone_button.gif border=0>';
                $functions['CONTACT_INFO'] = 'makeContactInfo';
                $extra2 = $extra;
                $extra2['NoSearchTerms'] = true;
                $extra2['SELECT'] = '';
                $extra2['SELECT_ONLY'] = 'ssm.STUDENT_ID,p.STAFF_ID AS PERSON_ID,p.FIRST_NAME,p.LAST_NAME,sjp.RELATIONSHIP AS STUDENT_RELATION,p.TITLE,s.PHONE,a.ID AS ADDRESS_ID,COALESCE(p.CUSTODY,\'N\') ';
                $extra2['FROM'] .= ',student_address a LEFT OUTER JOIN students_join_people sjp ON (a.STUDENT_ID=sjp.STUDENT_ID AND (p.CUSTODY=\'Y\' OR sjp.IS_EMERGENCY=\'Y\')) LEFT OUTER JOIN people p ON (p.STAFF_ID=sjp.PERSON_ID)  ';
                $extra2['WHERE'] .= ' AND a.STUDENT_ID=sjp.STUDENT_ID AND sjp.STUDENT_ID=ssm.STUDENT_ID ';
                $extra2['ORDER_BY'] .= 'COALESCE(p.CUSTODY,\'N\') DESC';
                $extra2['group'] = array('STUDENT_ID', 'PERSON_ID');
                $extra2['functions'] = array();
                $extra2['link'] = array();
                // EXPANDED VIEW AND ADDR BREAKS THIS QUERY ... SO, TURN 'EM OFF
                $expanded_view = $_REQUEST['expanded_view'];
                $_REQUEST['expanded_view'] = false;
                $addr = $_REQUEST['addr'];
                unset($_REQUEST['addr']);
                $contacts_RET = GetStuList($extra2);
                $_REQUEST['expanded_view'] = $expanded_view;
                $_REQUEST['addr'] = $addr;
            }
            foreach ($view_fields_RET as $field) {
                $extra['columns_after']['CUSTOM_' . $field['ID']] = $field['TITLE'];
                if ($field['TYPE'] == 'date') {
                    $functions['CUSTOM_' . $field['ID']] = 'ProperDate';
                } elseif ($field['TYPE'] == 'numeric') {
                    $functions['CUSTOM_' . $field['ID']] = 'removeDot00';
                } elseif ($field['TYPE'] == 'codeds') {
                    $functions['CUSTOM_' . $field['ID']] = 'DeCodeds';
                }
                $select .= ',s.CUSTOM_' . $field['ID'];
            }
            if ($view_address_RET) {
                if ($view_address_RET == 'RESIDENCE') {
                    $extra['FROM'] = ' LEFT OUTER JOIN student_address a ON (ssm.STUDENT_ID=a.STUDENT_ID AND a.TYPE=\'Home Address\')  ' . $extra['FROM'];
                } elseif ($view_address_RET == 'MAILING') {
                    $extra['FROM'] = ' LEFT OUTER JOIN student_address a ON (ssm.STUDENT_ID=a.STUDENT_ID AND a.TYPE=\'Mail\') ' . $extra['FROM'];
                } elseif ($view_address_RET == 'BUS_PICKUP') {
                    $extra['FROM'] = ' LEFT OUTER JOIN student_address a ON (a.STUDENT_ID=a.STUDENT_ID AND a.BUS_PICKUP=\'Y\') ' . $extra['FROM'];
                } else {
                    $extra['FROM'] = ' LEFT OUTER JOIN student_address a ON (a.STUDENT_ID=a.STUDENT_ID AND a.BUS_DROPOFF=\'Y\') ' . $extra['FROM'];
                }
                $extra['columns_after'] += array('ADDRESS' => ucwords(strtolower(str_replace('_', ' ', $view_address_RET))) . ' Address', 'CITY' => 'City', 'STATE' => 'State', 'ZIPCODE' => 'Zipcode');
                $select .= ',a.ID AS ADDRESS_ID,a.STREET_ADDRESS_1 as ADDRESS,a.CITY,a.STATE,a.ZIPCODE,s.PHONE,ssm.STUDENT_ID AS PARENTS';
                $extra['singular'] = 'Student Address';
                $extra['plural'] = 'Student Addresses';
                if ($view_other_RET['HOME_PHONE'][1]['VALUE'] == 'Y') {
                    $functions['PHONE'] = 'makePhone';
                    $extra['columns_after']['PHONE'] = 'Home Phone';
                }
                if ($view_other_RET['GUARDIANS'][1]['VALUE'] == 'Y' || $view_other_RET['ALL_CONTACTS'][1]['VALUE'] == 'Y') {
                    $functions['PARENTS'] = 'makeParents';
                    if ($view_other_RET['ALL_CONTACTS'][1]['VALUE'] == 'Y') {
                        $extra['columns_after']['PARENTS'] = 'Contacts';
                    } else {
                        $extra['columns_after']['PARENTS'] = 'Guardians';
                    }
                }
            } elseif ($_REQUEST['addr'] || $extra['addr']) {
                $extra['FROM'] = ' LEFT OUTER JOIN student_address a ON (ssm.STUDENT_ID=a.STUDENT_ID) ' . $extra['FROM'];
                $distinct = 'DISTINCT ';
            }
        }
        $extra['SELECT'] .= $select;
    } elseif ($_REQUEST['addr'] || $extra['addr']) {
        $extra['FROM'] = ' LEFT OUTER JOIN student_address a ON (ssm.STUDENT_ID=a.STUDENT_ID) ' . $extra['FROM'];
        $distinct = 'DISTINCT ';
    }
    switch (User('PROFILE')) {
        case 'admin':
            $sql = 'SELECT ';
            if ($extra['SELECT_ONLY']) {
                $sql .= $extra['SELECT_ONLY'];
            } else {
                if (Preferences('NAME') == 'Common') {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',coalesce(s.COMMON_NAME,s.FIRST_NAME)) AS FULL_NAME,';
                } else {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',s.FIRST_NAME,\' \',COALESCE(s.MIDDLE_NAME,\' \')) AS FULL_NAME,';
                }
                $sql .= 's.LAST_NAME,s.FIRST_NAME,s.MIDDLE_NAME,s.STUDENT_ID,ssm.SCHOOL_ID AS LIST_SCHOOL_ID,ssm.GRADE_ID ' . $extra['SELECT'];
                if ($_REQUEST['include_inactive'] == 'Y') {
                    $sql .= ',' . db_case(array('(ssm.SYEAR=\'' . UserSyear() . '\' AND (ssm.START_DATE IS NOT NULL AND (\'' . date('Y-m-d', strtotime($extra['DATE'])) . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL)))', 'true', "'<FONT color=green>Active</FONT>'", "'<FONT color=red>Inactive</FONT>'")) . ' AS ACTIVE ';
                }
            }
            $sql .= ' FROM students s,student_enrollment ssm ' . $extra['FROM'] . ' WHERE ssm.STUDENT_ID=s.STUDENT_ID ';
            if ($_REQUEST['include_inactive'] == 'Y') {
                $sql .= ' AND ssm.ID=(SELECT ID FROM student_enrollment WHERE STUDENT_ID=ssm.STUDENT_ID AND SYEAR<=\'' . UserSyear() . '\' ORDER BY START_DATE DESC LIMIT 1)';
            } else {
                $sql .= ' AND ssm.SYEAR=\'' . UserSyear() . '\' AND (ssm.START_DATE IS NOT NULL AND (\'' . date('Y-m-d', strtotime($extra['DATE'])) . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL)) ';
            }
            if (UserSchool() && $_REQUEST['_search_all_schools'] != 'Y') {
                $sql .= ' AND ssm.SCHOOL_ID=\'' . UserSchool() . '\'';
            } else {
                //
                $sql .= ' AND ssm.SCHOOL_ID IN (' . GetUserSchools(UserID(), true) . ') ';
                $extra['columns_after']['LIST_SCHOOL_ID'] = 'School';
                $functions['LIST_SCHOOL_ID'] = 'GetSchool';
            }
            if (!$extra['SELECT_ONLY'] && $_REQUEST['include_inactive'] == 'Y') {
                $extra['columns_after']['ACTIVE'] = 'Status';
            }
            break;
        case 'teacher':
            $sql = 'SELECT ';
            if ($extra['SELECT_ONLY']) {
                $sql .= $extra['SELECT_ONLY'];
            } else {
                if (Preferences('NAME') == 'Common') {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',coalesce(s.COMMON_NAME,s.FIRST_NAME)) AS FULL_NAME,';
                } else {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',s.FIRST_NAME,\' \',COALESCE(s.MIDDLE_NAME,\' \')) AS FULL_NAME,';
                }
                $sql .= 's.LAST_NAME,s.FIRST_NAME,s.MIDDLE_NAME,s.STUDENT_ID,ssm.SCHOOL_ID,ssm.GRADE_ID ' . $extra['SELECT'];
                if ($_REQUEST['include_inactive'] == 'Y') {
                    $sql .= ',' . db_case(array('(ssm.START_DATE IS NOT NULL AND  (\'' . $extra['DATE'] . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL))', 'true', "'<FONT color=green>Active</FONT>'", "'<FONT color=red>Inactive</FONT>'")) . ' AS ACTIVE';
                    $sql .= ',' . db_case(array('(\'' . $extra['DATE'] . '\'>=ss.START_DATE AND (\'' . $extra['DATE'] . '\'<=ss.END_DATE OR ss.END_DATE IS NULL))', 'true', "'<FONT color=green>Active</FONT>'", "'<FONT color=red>Inactive</FONT>'")) . ' AS ACTIVE_SCHEDULE';
                }
            }
            //
            $sql .= ' FROM students s,course_periods cp,schedule ss,student_enrollment ssm,course_period_var cpv ' . $extra['FROM'] . ' WHERE ssm.STUDENT_ID=s.STUDENT_ID AND cpv.COURSE_PERIOD_ID=cp.COURSE_PERIOD_ID AND cpv.ID="' . $extra['ID'] . '" AND ssm.STUDENT_ID=ss.STUDENT_ID AND ssm.SCHOOL_ID=\'' . UserSchool() . '\' AND ssm.SYEAR=\'' . UserSyear() . '\' AND ssm.SYEAR=cp.SYEAR AND ssm.SYEAR=ss.SYEAR AND ' . db_case(array(User('STAFF_ID'), 'cp.teacher_id', ' cp.teacher_id=' . User('STAFF_ID'), 'cp.secondary_teacher_id', ' cp.secondary_teacher_id=' . User('STAFF_ID'), 'cp.course_period_id IN(SELECT course_period_id from teacher_reassignment tra WHERE cp.course_period_id=tra.course_period_id AND tra.pre_teacher_id=' . User('STAFF_ID') . ')')) . ' AND cp.COURSE_PERIOD_ID=\'' . UserCoursePeriod() . '\' AND cp.COURSE_ID=ss.COURSE_ID AND cp.COURSE_PERIOD_ID=ss.COURSE_PERIOD_ID';
            if ($extra['cpvdate'] != '') {
                $sql .= $extra['cpvdate'];
            }
            if ($_REQUEST['include_inactive'] == 'Y') {
                $sql .= ' AND ssm.ID=(SELECT ID FROM student_enrollment WHERE STUDENT_ID=ssm.STUDENT_ID AND SYEAR=ssm.SYEAR ORDER BY START_DATE DESC LIMIT 1)';
                $sql .= ' AND ss.START_DATE=(SELECT START_DATE FROM schedule WHERE STUDENT_ID=ssm.STUDENT_ID AND SYEAR=ssm.SYEAR AND MARKING_PERIOD_ID IN (' . GetAllMP('', $queryMP) . ') AND COURSE_ID=cp.COURSE_ID AND COURSE_PERIOD_ID=cp.COURSE_PERIOD_ID ORDER BY START_DATE DESC LIMIT 1)';
            } else {
                $sql .= ' AND (ssm.START_DATE IS NOT NULL  AND \'' . $extra['DATE'] . '\'>=ssm.START_DATE AND (\'' . $extra['DATE'] . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL))';
                $sql .= ' AND (\'' . $extra['DATE'] . '\'>=ss.START_DATE AND (\'' . $extra['DATE'] . '\'<=ss.END_DATE OR ss.END_DATE IS NULL))';
            }
            if (!$extra['SELECT_ONLY'] && $_REQUEST['include_inactive'] == 'Y') {
                $extra['columns_after']['ACTIVE'] = 'School Status';
                $extra['columns_after']['ACTIVE_SCHEDULE'] = 'Course Status';
            }
            break;
        case 'parent':
        case 'student':
            $sql = 'SELECT ';
            if ($extra['SELECT_ONLY']) {
                $sql .= $extra['SELECT_ONLY'];
            } else {
                if (Preferences('NAME') == 'Common') {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',coalesce(s.COMMON_NAME,s.FIRST_NAME)) AS FULL_NAME,';
                } else {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',s.FIRST_NAME,\' \',COALESCE(s.MIDDLE_NAME,\' \')) AS FULL_NAME,';
                }
                $sql .= 's.LAST_NAME,s.FIRST_NAME,s.MIDDLE_NAME,s.STUDENT_ID,ssm.SCHOOL_ID,ssm.GRADE_ID ' . $extra['SELECT'];
            }
            $sql .= ' FROM students s,student_enrollment ssm ' . $extra['FROM'] . '
					WHERE ssm.STUDENT_ID=s.STUDENT_ID AND ssm.SYEAR=\'' . UserSyear() . '\' AND ssm.SCHOOL_ID=\'' . UserSchool() . '\' AND (\'' . DBDate() . '\' BETWEEN ssm.START_DATE AND ssm.END_DATE OR (ssm.END_DATE IS NULL AND \'' . DBDate() . '\'>ssm.START_DATE)) AND ssm.STUDENT_ID' . ($extra['ASSOCIATED'] ? ' IN (SELECT STUDENT_ID FROM students_join_users WHERE STAFF_ID=\'' . $extra['ASSOCIATED'] . '\')' : '=\'' . UserStudentID() . '\'');
            break;
        default:
            exit('Error');
    }
    $sql = appendSQL($sql, $extra);
    $sql .= $extra['WHERE'] . ' ';
    $sql .= CustomFields('where');
    if ($extra['GROUP']) {
        $sql .= ' GROUP BY ' . $extra['GROUP'];
    }
    if (!$extra['ORDER_BY'] && !$extra['SELECT_ONLY']) {
        if (Preferences('SORT') == 'Grade') {
            $sql .= ' ORDER BY (SELECT SORT_ORDER FROM school_gradelevels WHERE ID=ssm.GRADE_ID),FULL_NAME';
        } else {
            $sql .= ' ORDER BY FULL_NAME';
        }
        $sql .= $extra['ORDER'];
    } elseif ($extra['ORDER_BY']) {
        $sql .= ' ORDER BY ' . $extra['ORDER_BY'];
    }
    if ($extra['DEBUG'] === true) {
        echo '<!--' . $sql . '-->';
    }
    return DBGet(DBQuery($sql), $functions, $extra['group']);
}
示例#6
0
     $user1 = "SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM login_authentication,staff WHERE login_authentication.user_id=staff.staff_id AND TRIM( IFNULL( USERNAME, '' ) ) <> '' AND TRIM( IFNULL( PASSWORD, '' ) ) <> '' and login_authentication.profile_id not in(3,4)";
     $user2 = "SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM login_authentication,students WHERE login_authentication.user_id=students.student_id AND login_authentication.profile_id=3 AND TRIM( IFNULL( USERNAME, '' ) ) <> '' AND TRIM( IFNULL( PASSWORD, '' ) ) <> '' and login_authentication.profile_id=3";
     $user3 = "SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM login_authentication,people WHERE login_authentication.user_id=people.staff_id AND TRIM( IFNULL( USERNAME, '' ) ) <> '' AND TRIM( IFNULL( PASSWORD, '' ) ) <> '' AND login_authentication.profile_id=4";
 }
 if (User('PROFILE') == 'teacher') {
     $user1 = "SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM login_authentication,staff WHERE login_authentication.user_id=staff.staff_id AND TRIM( IFNULL( USERNAME, '' ) ) <> '' AND TRIM( IFNULL( PASSWORD, '' ) ) <> '' and login_authentication.profile_id in(0,1,5)";
     //all types of admin
     $user2 = "SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM students,login_authentication WHERE profile_id=3 and login_authentication.user_id=students.student_id and  TRIM( IFNULL( USERNAME, '' ) ) <> '' AND  TRIM( IFNULL( PASSWORD, '' ) ) <> ''  AND student_id IN (SELECT DISTINCT student_id FROM course_periods INNER JOIN schedule USING ( course_period_id ) WHERE course_periods.teacher_id = " . UserID() . ")";
     //scheduled students
     $user3 = 'SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM login_authentication,people WHERE login_authentication.user_id=people.staff_id and login_authentication.profile_id=4 AND TRIM( IFNULL( USERNAME, \'\' ) ) <> \'\' AND user_id IN (SELECT DISTINCT person_id FROM students_join_people WHERE student_id IN (SELECT student_id FROM students WHERE student_id IN (SELECT DISTINCT student_id FROM course_periods INNER JOIN schedule USING (course_period_id ) WHERE course_periods.teacher_id = \'' . UserID() . '\')))';
     //parents
 }
 if (User('PROFILE') == 'parent') {
     $user1 = "SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM login_authentication,staff WHERE login_authentication.user_id=staff.staff_id AND TRIM( IFNULL( USERNAME, '' ) ) <> '' AND TRIM( IFNULL( PASSWORD, '' ) ) <> '' and login_authentication.profile_id in(0,1,5)";
     //all types of admin
     $user2 = "SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM login_authentication,staff WHERE login_authentication.user_id=staff.staff_id and login_authentication.profile_id=2 and staff.PROFILE_ID={$profile} AND  TRIM( IFNULL( USERNAME, '' ) ) <> '' AND  TRIM( IFNULL( PASSWORD, '' ) ) <> '' AND staff_id NOT IN (Select distinct person_id from students_join_people where person_id<>" . UserID() . ")";
     //parents
     //                   $user2="SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM login_authentication,staff WHERE login_authentication.user_id=staff.staff_id and login_authentication.profile_id=2 and staff.PROFILE_ID=$profile AND  TRIM( IFNULL( USERNAME, '' ) ) <> '' AND  TRIM( IFNULL( PASSWORD, '' ) ) <> '' AND staff_id IN(Select distinct student_id from students_join_users where staff_id=".UserID().")";//parents
 }
 if (User('PROFILE') == 'student') {
     $user1 = "SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM login_authentication,staff WHERE login_authentication.user_id=staff.staff_id AND TRIM( IFNULL( USERNAME, '' ) ) <> '' AND TRIM( IFNULL( PASSWORD, '' ) ) <> '' and login_authentication.profile_id in(0,1,5)";
     //all types of admin
     $user2 = "SELECT username,LAST_NAME,first_name,login_authentication.profile_id,is_disable,login_authentication.user_id FROM login_authentication,staff WHERE login_authentication.user_id=staff.staff_id and login_authentication.profile_id=2 and staff.PROFILE_ID={$profile} AND  TRIM( IFNULL( USERNAME, '' ) ) <> '' AND  TRIM( IFNULL( PASSWORD, '' ) ) <> '' AND staff_id IN(Select distinct teacher_id from course_periods INNER JOIN schedule using(course_period_id) where schedule.student_id=" . UserStudentID() . ")";
     //teachers
 }
 if ($lastName != "") {
     $user1 = $user1 . " AND LAST_NAME LIKE '{$lastName}%' ";
     $user2 = $user2 . " AND LAST_NAME LIKE '{$lastName}%' ";
     if (User('PROFILE') == 'admin' || User('PROFILE') == 'teacher') {
         $user3 = $user3 . " AND LAST_NAME LIKE '{$lastName}%' ";
     }
示例#7
0
         $admin_COMMON_WHERE .= " AND sma.STUDENT_ID=s.STUDENT_ID ";
         $_SESSION['sma'] = '1';
     }
     if ($_REQUEST['nv_day'] || $_REQUEST['nv_month'] || $_REQUEST['nv_year'] || $_REQUEST['reason'] || $_REQUEST['result'] || $_REQUEST['med_vist_comments'] || $_SESSION['smv']) {
         $admin_COMMON_FROM .= " ,student_medical_visits smv   ";
         $admin_COMMON_WHERE .= " AND smv.STUDENT_ID=s.STUDENT_ID ";
         $_SESSION['smv'] = '1';
     }
     $admin_COMMON = $admin_COMMON_FROM . $admin_COMMON_WHERE;
 }
 /////////////////////////////////// Teacher section ///////////////////////////////////
 if (User('PROFILE') == 'teacher') {
     $teacher_COMMON_FROM = " FROM students s, student_enrollment ssm, course_periods cp,\r\n\tschedule ss,student_address a ";
     $teacher_COMMON_WHERE = " WHERE a.STUDENT_ID=s.STUDENT_ID AND a.TYPE='Home Address' AND s.STUDENT_ID=ssm.STUDENT_ID AND ssm.STUDENT_ID=ss.STUDENT_ID AND ssm.SYEAR=cp.SYEAR AND ssm.SYEAR=ss.SYEAR AND cp.COURSE_ID=ss.COURSE_ID AND cp.COURSE_PERIOD_ID=ss.COURSE_PERIOD_ID AND ss.MARKING_PERIOD_ID IN (" . GetAllMP('', $queryMP) . ")\r\n\t\t\t\t\t\tAND (cp.TEACHER_ID='" . User('STAFF_ID') . "' OR cp.SECONDARY_TEACHER_ID='" . User('STAFF_ID') . "') AND cp.COURSE_PERIOD_ID='" . UserCoursePeriod() . "' AND ssm.SYEAR=" . UserSyear() . " AND ssm.SCHOOL_ID=" . UserSchool() . " ";
     if ($_REQUEST['_search_all_schools'] == 'Y' || $_SESSION['_search_all'] == 1) {
         $teacher_COMMON_WHERE = " WHERE a.STUDENT_ID=s.STUDENT_ID AND a.TYPE='Home Address'  AND s.STUDENT_ID=ssm.STUDENT_ID AND ssm.STUDENT_ID=ss.STUDENT_ID AND ssm.SYEAR=cp.SYEAR AND ssm.SYEAR=ss.SYEAR AND cp.COURSE_ID=ss.COURSE_ID AND cp.COURSE_PERIOD_ID=ss.COURSE_PERIOD_ID AND ss.MARKING_PERIOD_ID IN (" . GetAllMP('', $queryMP) . ")\r\n\t\t\t\t\t\tAND (cp.TEACHER_ID='" . User('STAFF_ID') . "' OR cp.SECONDARY_TEACHER_ID='" . User('STAFF_ID') . "') AND cp.COURSE_PERIOD_ID='" . UserCoursePeriod() . "' AND ssm.SYEAR=" . UserSyear() . " AND ssm.SCHOOL_ID IN (" . GetUserSchools(UserID(), true) . ") ";
         $_SESSION['_search_all'] = 1;
     } else {
         $teacher_COMMON_WHERE = " WHERE a.STUDENT_ID=s.STUDENT_ID AND a.TYPE='Home Address' AND s.STUDENT_ID=ssm.STUDENT_ID AND ssm.STUDENT_ID=ss.STUDENT_ID AND ssm.SYEAR=cp.SYEAR AND ssm.SYEAR=ss.SYEAR AND cp.COURSE_ID=ss.COURSE_ID AND cp.COURSE_PERIOD_ID=ss.COURSE_PERIOD_ID AND ss.MARKING_PERIOD_ID IN (" . GetAllMP('', $queryMP) . ")\r\n\t\t\t\t\t\tAND (cp.TEACHER_ID='" . User('STAFF_ID') . "' OR cp.SECONDARY_TEACHER_ID='" . User('STAFF_ID') . "') AND cp.COURSE_PERIOD_ID='" . UserCoursePeriod() . "' AND ssm.SYEAR=" . UserSyear() . " AND ssm.SCHOOL_ID=" . UserSchool() . " ";
     }
     if ($_REQUEST['mp_comment'] || $_SESSION['smc']) {
         $teacher_COMMON_FROM .= " ,student_mp_comments smc";
         $teacher_COMMON_WHERE .= " AND smc.STUDENT_ID=s.STUDENT_ID ";
         $_SESSION['smc'] = '1';
     }
     if ($_REQUEST['goal_description'] || $_REQUEST['goal_title'] || $_SESSION['g']) {
         $teacher_COMMON_FROM .= " ,student_goal g ";
         $teacher_COMMON_WHERE .= " AND g.STUDENT_ID=s.STUDENT_ID ";
         $_SESSION['g'] = '1';
     }
     if ($_REQUEST['progress_name'] || $_REQUEST['progress_description'] || $_SESSION['p']) {
示例#8
0
文件: Group.php 项目: jicheng17/fh
         $_arr['USER_ID'] = $profile[$k]['STUDENT_ID'];
         $_arr['FIRST_NAME'] = $userlist[$key]['LAST_NAME'] . ' ' . $userlist[$key]['FIRST_NAME'];
         $_arr['PROFILE_ID'] = $profile[$k]['PROFILE'];
         $_arr['IS_DISABLE'] = $userlist[$key]['IS_DISABLE'];
         array_push($final_arr, $_arr);
     }
 } else {
     if ($userlist[$key]['PROFILE_ID'] == 4) {
         //                        $sql = "select student_id from  students_join_people where person_id=".$userlist[$key]['USER_ID'];
         //                        $fetch = DBGet(DBQuery($sql));
         //                        foreach($fetch as $k1=>$v1){
         if (User('PROFILE') == 'student') {
             $select = "SELECT se.*,up.* FROM student_enrollment se,user_profiles up WHERE up.ID=" . $userlist[$key]['PROFILE_ID'] . " and se.school_id=" . UserSchool() . " AND se.student_id=" . UserStudentID() . "";
         }
         if (User('PROFILE') == 'teacher') {
             $select = "SELECT se.*,up.* FROM student_enrollment se,user_profiles up WHERE up.ID=" . $userlist[$key]['PROFILE_ID'] . " and se.school_id=" . UserSchool() . " AND se.student_id in (select schedule.student_id from  schedule,course_periods,students_join_people where course_periods.course_period_id=schedule.course_period_id  and  schedule.student_id=students_join_people.student_id and students_join_people.person_id=" . $userlist[$key]['USER_ID'] . " and teacher_id=" . UserID() . ")";
         } else {
             $select = "SELECT se.*,up.* FROM student_enrollment se,user_profiles up WHERE up.ID=" . $userlist[$key]['PROFILE_ID'] . " and se.school_id=" . UserSchool() . " AND se.student_id in (select student_id from  students_join_people where person_id=" . $userlist[$key]['USER_ID'] . ")";
         }
         $profile = DBGet(DBQuery($select));
         foreach ($profile as $k => $v) {
             $_arr['USERNAME'] = $userlist[$key]['USERNAME'];
             $_arr['LAST_NAME'] = $userlist[$key]['LAST_NAME'];
             $_arr['USER_ID'] = $userlist[$key]['USER_ID'];
             $_arr['FIRST_NAME'] = $userlist[$key]['LAST_NAME'] . ' ' . $userlist[$key]['FIRST_NAME'];
             $_arr['PROFILE_ID'] = $profile[$k]['PROFILE'];
             $_arr['IS_DISABLE'] = $userlist[$key]['IS_DISABLE'];
             array_push($final_arr, $_arr);
         }
         //                    }
     } else {
示例#9
0
} else {
    if ($id) {
        $f->find_values($id);
        $TicketNo = $id;
        echo "&nbsp<a href=\"" . $sess->url("/SupportComments.php") . $sess->add_query(array("cmd" => "Add", "TicketNo" => $TicketNo)) . "\">Add Comment</a>&nbsp\n";
        echo "&nbsp;<a href=SupportTickets.php>Back to Support Tickets List</a>";
        $SrchLocation = $Location;
    }
}
include 'phplib/locations.inc';
$id = $TicketNo;
echo "<h2>{$cmd} Support Ticket {$id} </h2> ";
$origcmd = $cmd;
switch ($cmd) {
    case "View":
        if ($UID = UserID($UserName)) {
            echo "<h3>User Information</h3>\n";
            $mf = new my_userinfoform();
            $mf->find_values($UID);
            $mf->freeze();
            $mf->display();
        }
        echo "</td><td valign=top>";
        echo "<h3>Ticket Details</h3>\n";
        $cmd = $origcmd;
    case "Delete":
    case "Close":
        $f->freeze();
    case "Add":
    case "Edit":
        if (!isset($Location) and isset($SrchLocation)) {
 $columns = array('GRADE_COURSE' => 'Course');
 $link = array();
 $link['GRADE_COURSE']['link'] = "ForWindow.php?modname={$_REQUEST['modname']}&subject_id={$_REQUEST['subject_id']}";
 $link['GRADE_COURSE']['variables'] = array('course_id' => 'COURSE_ID');
 if ($_REQUEST['modfunc'] != 'choose_course') {
     $link['add']['link'] = "ForWindow.php?modname={$_REQUEST['modname']}&subject_id={$_REQUEST['subject_id']}&course_id=new";
 } else {
     $link['GRADE_COURSE']['link'] .= "&modfunc={$_REQUEST['modfunc']}";
 }
 ListOutput($courses_RET, $columns, 'Course', 'Courses', $link, array(), $LO_options, 'ForWindow');
 echo '</TD>';
 if ($_REQUEST['course_id'] && $_REQUEST['course_id'] != 'new') {
     if ($message_my_class != 'yes') {
         $sql = "SELECT COURSE_PERIOD_ID,TITLE,COALESCE(TOTAL_SEATS-FILLED_SEATS,0) AS AVAILABLE_SEATS FROM course_periods WHERE COURSE_ID='{$_REQUEST['course_id']}' AND (marking_period_id IN(" . GetAllMP(GetMPTable(GetMP(UserMP(), 'TABLE')), UserMP()) . ") OR (CURDATE() <= end_date AND marking_period_id IS NULL)) ORDER BY TITLE";
     } else {
         $sql = "SELECT COURSE_PERIOD_ID,TITLE,COALESCE(TOTAL_SEATS-FILLED_SEATS,0) AS AVAILABLE_SEATS FROM course_periods WHERE COURSE_ID='{$_REQUEST['course_id']}' AND (marking_period_id IN(" . GetAllMP(GetMPTable(GetMP(UserMP(), 'TABLE')), UserMP()) . ") OR (CURDATE() <= end_date AND marking_period_id IS NULL)) AND (TEACHER_ID='" . UserID() . "' OR SECONDARY_TEACHER_ID='" . UserID() . "') ORDER BY TITLE";
     }
     $QI = DBQuery($sql);
     $periods_RET = DBGet($QI);
     if (count($periods_RET)) {
         if ($_REQUEST['course_period_id']) {
             foreach ($periods_RET as $key => $value) {
                 if ($value['COURSE_PERIOD_ID'] == $_REQUEST['course_period_id']) {
                     $periods_RET[$key]['row_color'] = Preferences('HIGHLIGHT');
                 }
             }
         }
     }
     echo '<TD valign=top>';
     $columns = array('TITLE' => 'Course Period');
     if ($_REQUEST['modname'] == 'scheduling/Schedule.php') {
示例#11
0
}
$st = new my_SupportTicketsform();
$st->find_values($TicketNo);
echo "<font class=bigTextBold>Support Ticket {$TicketNo}</font> ";
$origcmd = $cmd;
switch ($cmd) {
    case "View":
    case "Delete":
        $f->freeze();
    case "Send":
    case "Add":
        $db->query("select id from userinfo where UserName='******'");
        $db->next_record();
        $ContID = $db->f(0);
        /* logged in user */
        $ContactID = UserID($UserName);
        /* looked up user */
        if (!$perm->have_perm("admin") and !$perm->have_perm("support")) {
            if ($ContID != $ContactID and $EnteredBy != $auth->auth["uname"]) {
                $str1 = "SupportComments: Access Denied ";
                $str2 = "{$auth->auth}[uname] {$EnteredBy} {$UserName}";
                Eventlog($str1, $str2, "Warning");
                echo $str1 . $str2;
                break;
            }
        }
    case "Edit":
        echo "<font class=bigTextBold>{$cmd} Support Comments <a href=SupportTickets.php>Back to Support Tickets List</a></font>\n";
        echo "<table cellspacing=10><tr><td valign=top>";
        $cmd = "View";
        if ($ContactID) {
示例#12
0
function SelfStaffProfile($option)
{
    $prof = DBGet(DBQuery('SELECT ' . $option . ' FROM staff WHERE STAFF_ID=' . UserID()));
    return $prof[1][$option];
}
示例#13
0
function SupportEmail($TicketNo, $OldStatus = "")
{
    global $UserName, $Name, $Company, $StreetAddress, $Town, $State, $PostCode, $CO, $OtherDetail;
    global $Quantity, $ProductCode, $PartNo, $Description, $Price, $Duration, $Rate, $Details, $Email, $Comment, $ByContact;
    global $HomePhone, $WorkPhone, $Mobile, $Status, $ShortDesc, $EngineerEmail, $Created, $EnteredBy, $SequenceNo;
    global $AssignedTo, $ByUser;
    if ($TicketNo < 1) {
        return false;
    }
    $Level = 0;
    $db = new DB_hotspot();
    $stf = new SupportTicketsform();
    $stf->find_values($TicketNo);
    $mf = new userinfoform();
    $mf->find_values(UserID($UserName));
    $EngineerEmail = get_email($AssignedTo);
    if ($OldStatus) {
        $Status = $OldStatus . "->" . $Status;
    }
    $subj = "Ticket: {$TicketNo}, {$Status}, {$ShortDesc}";
    $Msg = "Job for: <b>{$UserName}, {$Name}</b><br>\n";
    if ($StreetAddress . $Town . $State . $PostCode) {
        $Msg .= "at: <b>";
        if ($StreetAddress) {
            $Msg .= "{$StreetAddress}, ";
        }
        if ($Town) {
            $Msg .= "{$Town}, ";
        }
        if ($State) {
            $Msg .= "{$State}, ";
        }
        if ($PostCode) {
            $Msg .= "{$PostCode}";
        }
        $Msg .= "</b><br>\n";
    }
    if (isset($HomePhone)) {
        $Msg .= "HomePhone: <b>{$HomePhone}</b><br>\n";
    }
    if (isset($WorkPhone)) {
        $Msg .= "WorkPhone: <b>{$WorkPhone}</b><br>\n";
    }
    if (isset($Mobile)) {
        $Msg .= "Mob: <b>{$Mobile}</b><br>\n";
    }
    if (isset($Mail)) {
        $Msg .= "Email: <b>{$Mail}</b><br>\n";
    }
    $Msg .= "------------------------------------------------------------<br>\n";
    $Msg .= "Entered By: <b>{$EnteredBy}</b><br>\n";
    $Msg .= "Date: <b>{$Created}</b><br>\n";
    if (isset($Location)) {
        $Msg .= "Location: <b>{$Location}</b><br>\n";
    }
    if (isset($RoomNo)) {
        $Msg .= "Room No: <b>{$RoomNo}</b><br>\n";
    }
    if (isset($Severity)) {
        $Msg .= "Severity: <b>{$Severity}</b><br>\n";
    }
    if ($Level > 0) {
        $Msg .= "Level: <b>{$Level}</b><br>\n";
    }
    $Msg .= "Description: <b>{$ShortDesc}</b> {$OtherDetail}<br>\n";
    $Msg .= "------------------------------------------------------------<br>\n";
    /*
    	$db->query("select id from SupportParts where TicketNo='".$TicketNo."'");
    	$sp = new SupportPartsform;
    	while ($db->next_record()) {
    		$sp->find_values($db->f(0));
    		$Msg .= "Part: <b>$Quantity x $ProductCode, $PartNo, $Description @ $Price</b><br>\n";
    	}
    	$db->query("select id from SupportDetails where TicketNo='".$TicketNo."'");
    	$sd = new SupportDetailsform;
    	while ($db->next_record()) {
    		$sd->find_values($db->f(0));
    		$Msg .= "Work: <b>$Duration minutes @ $Rate /hour, $Details</b><br>\n";
    	}
    */
    $db->query("select distinct FileName from SupportFiles where TicketNo='" . $TicketNo . "'");
    while ($db->next_record()) {
        $Msg .= "Attachment: http://os.{$CO}.com.au/files/{$TicketNo}/" . $db->f(0) . "<br>\n";
    }
    $db->query("select id from SupportComments where TicketNo='" . $TicketNo . "'");
    $sc = new SupportCommentsform();
    while ($db->next_record()) {
        $sc->find_values($db->f(0));
        $mf->find_values($ByContact);
        $Msg .= "Comment by <b>{$ByUser}:</b> ";
        $Msg .= str_replace('" src="/candy/', '" src="http://os.' . $CO . '.com.au/candy/', $Comment);
        $Msg .= "<br>\n";
    }
    $url = "https://os.{$CO}.com.au/SupportTickets.php?cmd=View&id=" . $TicketNo;
    $Msg .= "<a href='{$url}'>{$url}</a><br>\n";
    $hdrs = "From: ticket+{$TicketNo}@{$CO}.net.au";
    if ($EngineerEmail) {
        $hdrs .= "\r\nTo: {$EngineerEmail}";
    }
    htmlMail("info@{$CO}.com.au", $subj, $Msg, $hdrs);
    //, $text="", $name="", $type="Application/Octet-Stream", $data="", $name2="", $display2="")
    echo "<pre>";
    echo $hdrs;
    echo $subj;
    echo "\n";
    echo $Msg;
    echo "</pre>";
}
示例#14
0
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#  GNU General Public License for more details.
#
#  You should have received a copy of the GNU General Public License
#  along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
#***************************************************************************************
error_reporting(0);
include "Data.php";
include "Warehouse.php";
$keyword = $_REQUEST['str'];
$block_id = $_REQUEST['block_id'];
if (User('PROFILE') == 'student') {
    $user_id = UserStudentID();
} else {
    $user_id = UserID();
}
$username_user = DBGet(DBQuery('SELECT USERNAME FROM login_authentication WHERE USER_ID=' . $user_id . ' AND PROFILE_ID=' . User('PROFILE_ID')));
$username_user = $username_user[1]['USERNAME'];
if (User('PROFILE_ID') == 0) {
    $tmp_q = '';
    $tmp_a = array();
    $tmp_stu_arr = array();
    $tmp_stf_arr = array();
    $tmp_p_arr = array();
    $tmp_q = DBGet(DBQuery('SELECT STUDENT_ID FROM students'));
    foreach ($tmp_q as $tmp_a) {
        $tmp_stu_arr[] = $tmp_a['STUDENT_ID'];
    }
    $tmp_q = '';
    $tmp_a = array();
示例#15
0
     FROM portal_notes pn
     WHERE pn.SYEAR=\'' . UserSyear() . '\' 
         AND pn.START_DATE<=CURRENT_DATE AND (pn.END_DATE>=CURRENT_DATE OR pn.END_DATE IS NULL) 
         AND (pn.school_id IS NULL OR pn.school_id IN(' . GetUserSchools(UserID(), true) . '))
         AND (' . (User('PROFILE_ID') == '' ? ' FIND_IN_SET(\'parent\', pn.PUBLISHED_PROFILES)>0' : ' FIND_IN_SET(' . User('PROFILE_ID') . ',pn.PUBLISHED_PROFILES)>0)') . '
         ORDER BY pn.SORT_ORDER,pn.PUBLISHED_DATE DESC'), array('PUBLISHED_DATE' => 'ProperDate', 'CONTENT' => '_nl2br'));
 if (count($notes_RET)) {
     echo '<p>';
     ListOutput($notes_RET, array('PUBLISHED_DATE' => 'Date Posted', 'TITLE' => 'Title', 'CONTENT' => 'Note', 'SCHOOL' => 'School'), 'Note', 'Notes', array(), array(), array('save' => false, 'search' => false));
     echo '</p>';
 }
 $events_RET = DBGet(DBQuery('SELECT ce.TITLE,ce.DESCRIPTION,ce.SCHOOL_DATE,s.TITLE AS SCHOOL 
         FROM calendar_events ce,calendar_events_visibility cev,schools s
         WHERE ce.SCHOOL_DATE BETWEEN CURRENT_DATE AND CURRENT_DATE + INTERVAL 30 DAY 
             AND ce.SYEAR=\'' . UserSyear() . '\'
             AND ce.school_id IN(' . GetUserSchools(UserID(), true) . ')
             AND s.ID=ce.SCHOOL_ID AND ce.CALENDAR_ID=cev.CALENDAR_ID 
             AND ' . (User('PROFILE_ID') == '' ? 'cev.PROFILE=\'parent\'' : 'cev.PROFILE_ID=' . User('PROFILE_ID')) . ' 
             ORDER BY ce.SCHOOL_DATE,s.TITLE'), array('SCHOOL_DATE' => 'ProperDate'));
 $events_RET1 = DBGet(DBQuery('SELECT ce.TITLE,ce.DESCRIPTION,ce.SCHOOL_DATE,s.TITLE AS SCHOOL 
         FROM calendar_events ce,schools s
         WHERE ce.SCHOOL_DATE BETWEEN CURRENT_DATE AND CURRENT_DATE + INTERVAL 30 DAY 
             AND ce.SYEAR=\'' . UserSyear() . '\'
             AND s.ID=ce.SCHOOL_ID AND ce.CALENDAR_ID=0 ORDER BY ce.SCHOOL_DATE,s.TITLE'), array('SCHOOL_DATE' => 'ProperDate'));
 $event_count = count($events_RET) + 1;
 foreach ($events_RET1 as $events_RET_key => $events_RET_value) {
     $events_RET[$event_count] = $events_RET_value;
     $event_count++;
 }
 if (count($events_RET)) {
     echo '<p>';
示例#16
0
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#  GNU General Public License for more details.
#
#  You should have received a copy of the GNU General Public License
#  along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
#***************************************************************************************
include '../../RedirectModulesInc.php';
$st_flag = false;
$error = false;
$error_school = '';
if ($_REQUEST['staff_id'] != 'new') {
    $profile = DBGet(DBQuery("SELECT id FROM user_profiles WHERE profile='parent'"));
    if (UserID() && !$_REQUEST['staff_id']) {
        $user_profile = DBGet(DBQuery("SELECT profile_id FROM people WHERE staff_id='" . UserID() . "'"));
    } else {
        $user_profile = DBGet(DBQuery("SELECT profile_id FROM people WHERE staff_id='" . $_REQUEST['staff_id'] . "'"));
    }
    if ($profile[1]['ID'] == $user_profile[1]['PROFILE_ID']) {
        $_SESSION['fn'] = 'user';
    } else {
        $_SESSION['fn'] = 'staff';
    }
} else {
    $_SESSION['fn'] = '';
}
###########################################
#print_r($_REQUEST);
if (isset($_REQUEST['staff_id']) && $_REQUEST['staff_id'] != 'new') {
    if (User('PROFILE') == 'admin') {
示例#17
0
function GetStuList_Absence_Summary(&$extra)
{
    global $contacts_RET, $view_other_RET, $_openSIS;
    $offset = 'GRADE_ID';
    if ((!$extra['SELECT_ONLY'] || strpos($extra['SELECT_ONLY'], $offset) !== false) && !$extra['functions']['GRADE_ID']) {
        $functions = array('GRADE_ID' => 'GetGrade');
    } else {
        $functions = array();
    }
    if ($extra['functions']) {
        $functions += $extra['functions'];
    }
    if (!$extra['DATE']) {
        $queryMP = UserMP();
        $extra['DATE'] = DBDate();
    } else {
        $queryMP = GetCurrentMP('QTR', $extra['DATE'], false);
    }
    if ($_REQUEST['expanded_view'] == 'true') {
        if (!$extra['columns_after']) {
            $extra['columns_after'] = array();
        }
        #############################################################################################
        //Commented as it crashing for Linux due to  Blank Database tables
        $view_fields_RET = DBGet(DBQuery('SELECT cf.ID,cf.TYPE,cf.TITLE FROM program_user_config puc,custom_fields cf WHERE puc.TITLE=cf.ID AND puc.PROGRAM=\'StudentFieldsView\' AND puc.USER_ID=\'' . User('STAFF_ID') . '\' AND puc.VALUE=\'Y\''));
        #############################################################################################
        $view_address_RET = DBGet(DBQuery('SELECT VALUE FROM program_user_config WHERE PROGRAM=\'StudentFieldsView\' AND TITLE=\'ADDRESS\' AND USER_ID=\'' . User('STAFF_ID') . '\''));
        $view_address_RET = $view_address_RET[1]['VALUE'];
        $view_other_RET = DBGet(DBQuery('SELECT TITLE,VALUE FROM program_user_config WHERE PROGRAM=\'StudentFieldsView\' AND TITLE IN (\'PHONE\',\'HOME_PHONE\',\'GUARDIANS\',\'ALL_CONTACTS\') AND USER_ID=\'' . User('STAFF_ID') . '\''), array(), array('TITLE'));
        if (!count($view_fields_RET) && !isset($view_address_RET) && !isset($view_other_RET['CONTACT_INFO'])) {
            $extra['columns_after'] = array('PHONE' => 'Phone', 'GENDER' => 'Gender', 'ETHNICITY' => 'Ethnicity', 'ADDRESS' => 'Mailing Address', 'CITY' => 'City', 'STATE' => 'State', 'ZIPCODE' => 'Zipcode') + $extra['columns_after'];
            $select = ',s.PHONE,s.GENDER,s.ETHNICITY,COALESCE(a.MAIL_ADDRESS,a.ADDRESS) AS ADDRESS,COALESCE(a.MAIL_CITY,a.CITY) AS CITY,COALESCE(a.MAIL_STATE,a.STATE) AS STATE,COALESCE(a.MAIL_ZIPCODE,a.ZIPCODE) AS ZIPCODE ';
            #$extra['FROM'] = " LEFT OUTER JOIN students_join_address sam ON (ssm.STUDENT_ID=sam.STUDENT_ID AND sam.MAILING='Y') LEFT OUTER JOIN address a ON (sam.ADDRESS_ID=a.ADDRESS_ID) ".$extra['FROM'];
            $extra['FROM'] = ' LEFT OUTER JOIN students_join_address sam ON (ssm.STUDENT_ID=sam.STUDENT_ID ) LEFT OUTER JOIN address a ON (sam.ADDRESS_ID=a.ADDRESS_ID) ' . $extra['FROM'];
            $functions['CONTACT_INFO'] = 'makeContactInfo';
            // if gender is converted to codeds type
            //$functions['CUSTOM_200000000'] = 'DeCodeds';
            $extra['singular'] = 'Student Address';
            $extra['plural'] = 'Student Addresses';
            $extra2['NoSearchTerms'] = true;
            $extra2['SELECT_ONLY'] = 'ssm.STUDENT_ID,p.PERSON_ID,p.FIRST_NAME,p.LAST_NAME,sjp.STUDENT_RELATION,pjc.TITLE,pjc.VALUE,a.PHONE,sjp.ADDRESS_ID ';
            $extra2['FROM'] .= ',address a,students_join_address sja LEFT OUTER JOIN students_join_people sjp ON (sja.STUDENT_ID=sjp.STUDENT_ID AND sja.ADDRESS_ID=sjp.ADDRESS_ID AND (sjp.CUSTODY=\'Y\' OR sjp.EMERGENCY=\'Y\')) LEFT OUTER JOIN people p ON (p.PERSON_ID=sjp.PERSON_ID) LEFT OUTER JOIN people_join_contacts pjc ON (pjc.PERSON_ID=p.PERSON_ID) ';
            $extra2['WHERE'] .= ' AND a.ADDRESS_ID=sja.ADDRESS_ID AND sja.STUDENT_ID=ssm.STUDENT_ID ';
            $extra2['ORDER_BY'] .= 'COALESCE(sjp.CUSTODY,\'N\') DESC';
            $extra2['group'] = array('STUDENT_ID', 'PERSON_ID');
            // EXPANDED VIEW AND ADDR BREAKS THIS QUERY ... SO, TURN 'EM OFF
            if (!$_REQUEST['_openSIS_PDF']) {
                $expanded_view = $_REQUEST['expanded_view'];
                $_REQUEST['expanded_view'] = false;
                $addr = $_REQUEST['addr'];
                unset($_REQUEST['addr']);
                $contacts_RET = GetStuList($extra2);
                $_REQUEST['expanded_view'] = $expanded_view;
                $_REQUEST['addr'] = $addr;
            } else {
                unset($extra2['columns_after']['CONTACT_INFO']);
            }
        } else {
            if ($view_other_RET['CONTACT_INFO'][1]['VALUE'] == 'Y' && !$_REQUEST['_openSIS_PDF']) {
                $select .= ',NULL AS CONTACT_INFO ';
                $extra['columns_after']['CONTACT_INFO'] = '<IMG SRC=assets/down_phone_button.gif border=0>';
                $functions['CONTACT_INFO'] = 'makeContactInfo';
                $extra2 = $extra;
                $extra2['NoSearchTerms'] = true;
                $extra2['SELECT'] = '';
                $extra2['SELECT_ONLY'] = 'ssm.STUDENT_ID,p.PERSON_ID,p.FIRST_NAME,p.LAST_NAME,sjp.STUDENT_RELATION,pjc.TITLE,pjc.VALUE,a.PHONE,sjp.ADDRESS_ID,COALESCE(sjp.CUSTODY,\'N\') ';
                $extra2['FROM'] .= ',address a,students_join_address sja LEFT OUTER JOIN students_join_people sjp ON (sja.STUDENT_ID=sjp.STUDENT_ID AND sja.ADDRESS_ID=sjp.ADDRESS_ID AND (sjp.CUSTODY=\'Y\' OR sjp.EMERGENCY=\'Y\')) LEFT OUTER JOIN people p ON (p.PERSON_ID=sjp.PERSON_ID) LEFT OUTER JOIN people_join_contacts pjc ON (pjc.PERSON_ID=p.PERSON_ID) ';
                $extra2['WHERE'] .= ' AND a.ADDRESS_ID=sja.ADDRESS_ID AND sja.STUDENT_ID=ssm.STUDENT_ID ';
                $extra2['ORDER_BY'] .= 'COALESCE(sjp.CUSTODY,\'N\') DESC';
                $extra2['group'] = array('STUDENT_ID', 'PERSON_ID');
                $extra2['functions'] = array();
                $extra2['link'] = array();
                // EXPANDED VIEW AND ADDR BREAKS THIS QUERY ... SO, TURN 'EM OFF
                $expanded_view = $_REQUEST['expanded_view'];
                $_REQUEST['expanded_view'] = false;
                $addr = $_REQUEST['addr'];
                unset($_REQUEST['addr']);
                $contacts_RET = GetStuList($extra2);
                $_REQUEST['expanded_view'] = $expanded_view;
                $_REQUEST['addr'] = $addr;
            }
            foreach ($view_fields_RET as $field) {
                $custom = DBGet(DBQuery('SHOW COLUMNS FROM students WHERE FIELD=\'CUSTOM_' . $field['ID'] . '\''));
                $custom = $custom[1];
                if ($custom) {
                    $extra['columns_after']['CUSTOM_' . $field['ID']] = $field['TITLE'];
                    if ($field['TYPE'] == 'date') {
                        $functions['CUSTOM_' . $field['ID']] = 'ProperDate';
                    } elseif ($field['TYPE'] == 'numeric') {
                        $functions['CUSTOM_' . $field['ID']] = 'removeDot00';
                    } elseif ($field['TYPE'] == 'codeds') {
                        $functions['CUSTOM_' . $field['ID']] = 'DeCodeds';
                    }
                    $select .= ',s.CUSTOM_' . $field['ID'];
                } else {
                    $custom_stu = DBGet(DBQuery("SELECT TYPE,TITLE FROM custom_fields WHERE ID='" . $field['ID'] . "'"));
                    $custom_stu = $custom_stu[1];
                    if ($custom_stu['TYPE'] == 'date') {
                        $functions[strtolower(str_replace(" ", "_", $custom_stu['TITLE']))] = 'ProperDate';
                    } elseif ($custom_stu['TYPE'] == 'numeric') {
                        $functions[strtolower(str_replace(" ", "_", $custom_stu['TITLE']))] = 'removeDot00';
                    } elseif ($custom_stu['TYPE'] == 'codeds') {
                        $functions[strtolower(str_replace(" ", "_", $custom_stu['TITLE']))] = 'DeCodeds';
                    }
                    $select .= ',s.' . strtoupper(str_replace(" ", "_", $custom_stu['TITLE']));
                    $extra['columns_after'] += array(strtoupper(str_replace(" ", "_", $custom_stu['TITLE'])) => $custom_stu['TITLE']);
                }
            }
            if ($view_address_RET) {
                $extra['FROM'] = ' LEFT OUTER JOIN students_join_address sam ON (ssm.STUDENT_ID=sam.STUDENT_ID AND sam.' . $view_address_RET . '=\'Y\') LEFT OUTER JOIN address a ON (sam.ADDRESS_ID=a.ADDRESS_ID) ' . $extra['FROM'];
                $extra['columns_after'] += array('ADDRESS' => ucwords(strtolower(str_replace('_', ' ', $view_address_RET))) . ' Address', 'CITY' => 'City', 'STATE' => 'State', 'ZIPCODE' => 'Zipcode');
                if ($view_address_RET != 'MAILING') {
                    $select .= ',a.ADDRESS_ID,a.ADDRESS,a.CITY,a.STATE,a.ZIPCODE,a.PHONE,ssm.STUDENT_ID AS PARENTS';
                } else {
                    $select .= ',a.ADDRESS_ID,COALESCE(a.MAIL_ADDRESS,a.ADDRESS) AS ADDRESS,COALESCE(a.MAIL_CITY,a.CITY) AS CITY,COALESCE(a.MAIL_STATE,a.STATE) AS STATE,COALESCE(a.MAIL_ZIPCODE,a.ZIPCODE) AS ZIPCODE,a.PHONE,ssm.STUDENT_ID AS PARENTS ';
                }
                $extra['singular'] = 'Student Address';
                $extra['plural'] = 'Student Addresses';
                if ($view_other_RET['HOME_PHONE'][1]['VALUE'] == 'Y') {
                    $functions['PHONE'] = 'makePhone';
                    $extra['columns_after']['PHONE'] = 'Home Phone';
                }
                if ($view_other_RET['GUARDIANS'][1]['VALUE'] == 'Y' || $view_other_RET['ALL_CONTACTS'][1]['VALUE'] == 'Y') {
                    $functions['PARENTS'] = 'makeParents';
                    if ($view_other_RET['ALL_CONTACTS'][1]['VALUE'] == 'Y') {
                        $extra['columns_after']['PARENTS'] = 'Contacts';
                    } else {
                        $extra['columns_after']['PARENTS'] = 'Guardians';
                    }
                }
            } elseif ($_REQUEST['addr'] || $extra['addr']) {
                $extra['FROM'] = ' LEFT OUTER JOIN students_join_address sam ON (ssm.STUDENT_ID=sam.STUDENT_ID ' . $extra['students_join_address'] . ') LEFT OUTER JOIN address a ON (sam.ADDRESS_ID=a.ADDRESS_ID) ' . $extra['FROM'];
                $distinct = 'DISTINCT ';
            }
        }
        $extra['SELECT'] .= $select;
    } elseif ($_REQUEST['addr'] || $extra['addr']) {
        $extra['FROM'] = ' LEFT OUTER JOIN students_join_address sam ON (ssm.STUDENT_ID=sam.STUDENT_ID ' . $extra['students_join_address'] . ') LEFT OUTER JOIN address a ON (sam.ADDRESS_ID=a.ADDRESS_ID) ' . $extra['FROM'];
        $distinct = 'DISTINCT ';
    }
    $_SESSION['new_customsql'] = $extra['SELECT'];
    switch (User('PROFILE')) {
        case 'admin':
            $sql = 'SELECT ';
            if ($extra['SELECT_ONLY']) {
                $sql .= $extra['SELECT_ONLY'];
            } else {
                if (Preferences('NAME') == 'Common') {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',coalesce(s.COMMON_NAME,s.FIRST_NAME)) AS FULL_NAME,';
                } else {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',s.FIRST_NAME,\' \',COALESCE(s.MIDDLE_NAME,\' \')) AS FULL_NAME,';
                }
                $_SESSION['new_sql'] = $sql;
                $sql .= 's.LAST_NAME,s.FIRST_NAME,s.MIDDLE_NAME,s.STUDENT_ID,s.PHONE,ssm.SCHOOL_ID,s.ALT_ID,ssm.SCHOOL_ID AS LIST_SCHOOL_ID,ssm.GRADE_ID' . $extra['SELECT'];
                $_SESSION['new_sql'] .= 's.LAST_NAME,s.FIRST_NAME,s.MIDDLE_NAME,s.STUDENT_ID,s.PHONE,ssm.SCHOOL_ID,s.ALT_ID,ssm.SCHOOL_ID AS LIST_SCHOOL_ID,ssm.GRADE_ID' . $_SESSION['new_customsql'];
                if ($_REQUEST['include_inactive'] == 'Y') {
                    $sql .= ',' . db_case(array('(ssm.SYEAR=\'' . UserSyear() . '\' AND ( (ssm.START_DATE IS NOT NULL AND \'' . date('Y-m-d', strtotime($extra['DATE'])) . '\'>=ssm.START_DATE) AND(\'' . date('Y-m-d', strtotime($extra['DATE'])) . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL)))', 'true', "'<FONT color=green>Active</FONT>'", "'<FONT color=red>Inactive</FONT>'")) . ' AS ACTIVE ';
                }
                $_SESSION['new_sql'] .= ',' . db_case(array('(ssm.SYEAR=\'' . UserSyear() . '\' AND ( (ssm.START_DATE IS NOT NULL AND \'' . date('Y-m-d', strtotime($extra['DATE'])) . '\'>=ssm.START_DATE) AND(\'' . date('Y-m-d', strtotime($extra['DATE'])) . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL)))', 'true', "'<FONT color=green>Active</FONT>'", "'<FONT color=red>Inactive</FONT>'")) . ' AS ACTIVE ';
            }
            $sql .= ' FROM students s ';
            $_SESSION['new_sql'] .= ' FROM students s ';
            if ($_REQUEST['mp_comment']) {
                $sql .= ",student_mp_comments smc ";
                $_SESSION['newsql'] .= ',student_mp_comments smc ';
            }
            if ($_REQUEST['goal_title'] || $_REQUEST['goal_description']) {
                $sql .= ',goal g ';
                $_SESSION['newsql'] .= ',goal g ';
            }
            if ($_REQUEST['progress_name'] || $_REQUEST['progress_description']) {
                $sql .= ",progress p ";
                $_SESSION['newsql'] .= ',progress p ';
            }
            if ($_REQUEST['doctors_note_comments'] || $_REQUEST['med_day'] || $_REQUEST['med_month'] || $_REQUEST['med_year']) {
                $sql .= ",student_medical_notes smn ";
                $_SESSION['newsql'] .= ',student_medical_notes smn ';
            }
            if ($_REQUEST['type'] || $_REQUEST['imm_comments'] || $_REQUEST['imm_day'] || $_REQUEST['imm_month'] || $_REQUEST['imm_year']) {
                $sql .= ',student_immunization sm ';
                $_SESSION['newsql'] .= ',student_immunization sm ';
            }
            if ($_REQUEST['med_alrt_title'] || $_REQUEST['ma_day'] || $_REQUEST['ma_month'] || $_REQUEST['ma_year']) {
                $sql .= ",student_medical_alerts sma ";
                $_SESSION['newsql'] .= ',student_medical_alerts sma ';
            }
            if ($_REQUEST['reason'] || $_REQUEST['result'] || $_REQUEST['med_vist_comments'] || $_REQUEST['nv_day'] || $_REQUEST['nv_month'] || $_REQUEST['nv_year']) {
                $sql .= ",student_medical_visits smv ";
                $_SESSION['newsql'] .= ',student_medical_visits smv ';
            }
            $_SESSION['new_sql'] .= $_SESSION['newsql'];
            $sql .= ',student_enrollment ssm ';
            $_SESSION['new_sql'] .= ',student_enrollment ssm ';
            $sql .= $extra['FROM'] . ' WHERE ssm.STUDENT_ID=s.STUDENT_ID ';
            $_SESSION['new_sql'] .= $extra['FROM'] . ' WHERE ssm.STUDENT_ID=s.STUDENT_ID ';
            if ($_REQUEST['include_inactive'] == 'Y') {
                $sql .= ' AND ssm.ID=(SELECT ID FROM student_enrollment WHERE STUDENT_ID=ssm.STUDENT_ID AND SYEAR =\'' . UserSyear() . '\' ORDER BY START_DATE DESC LIMIT 1)';
                $_SESSION['new_sql'] .= ' AND ssm.ID=(SELECT ID FROM student_enrollment WHERE STUDENT_ID=ssm.STUDENT_ID AND SYEAR =\'' . UserSyear() . '\' ORDER BY START_DATE DESC LIMIT 1)';
            } else {
                $sql .= $_SESSION['inactive_stu_filter'] = ' AND ssm.SYEAR=\'' . UserSyear() . '\' AND ((ssm.START_DATE IS NOT NULL AND \'' . date('Y-m-d', strtotime($extra['DATE'])) . '\'>=ssm.START_DATE) AND (\'' . date('Y-m-d', strtotime($extra['DATE'])) . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL)) ';
                //$sql .= " AND ssm.SYEAR='".UserSyear()."' AND ('".date('Y-m-d',strtotime($extra['DATE']))."'>=ssm.START_DATE AND ('".date('Y-m-d',strtotime($extra['DATE']))."'<=ssm.END_DATE OR ssm.END_DATE IS NULL)) ";
                $_SESSION['new_sql'] .= ' AND ssm.SYEAR=\'' . UserSyear() . '\' AND ((ssm.START_DATE IS NOT NULL AND \'' . date('Y-m-d', strtotime($extra['DATE'])) . '\'>=ssm.START_DATE) AND (\'' . date('Y-m-d', strtotime($extra['DATE'])) . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL)) ';
            }
            if (UserSchool() && $_REQUEST['_search_all_schools'] != 'Y') {
                $sql .= ' AND ssm.SYEAR=\'' . UserSyear() . '\' AND ssm.SCHOOL_ID=\'' . UserSchool() . '\'';
                $_SESSION['new_sql'] .= ' AND ssm.SYEAR=\'' . UserSyear() . '\' AND ssm.SCHOOL_ID=\'' . UserSchool() . '\'';
            } else {
                //				if(User('SCHOOLS'))
                //                                {
                $sql .= ' AND ssm.SCHOOL_ID IN (' . GetUserSchools(UserID(), true) . ') ';
                $_SESSION['new_sql'] .= ' AND ssm.SCHOOL_ID IN (' . GetUserSchools(UserID(), true) . ') ';
                //                                }
                $extra['columns_after']['LIST_SCHOOL_ID'] = 'School';
                $functions['LIST_SCHOOL_ID'] = 'GetSchool';
            }
            if (!$extra['SELECT_ONLY'] && $_REQUEST['include_inactive'] == 'Y') {
                $extra['columns_after']['ACTIVE'] = 'Status';
            }
            break;
        case 'teacher':
            $sql = 'SELECT ';
            if ($extra['SELECT_ONLY']) {
                $sql .= $extra['SELECT_ONLY'];
            } else {
                if (Preferences('NAME') == 'Common') {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',coalesce(s.COMMON_NAME,s.FIRST_NAME)) AS FULL_NAME,';
                } else {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',s.FIRST_NAME,\' \',COALESCE(s.MIDDLE_NAME,\' \')) AS FULL_NAME,';
                }
                $_SESSION['new_sql'] = $sql;
                $sql .= 's.LAST_NAME,s.FIRST_NAME,s.MIDDLE_NAME,s.STUDENT_ID,s.PHONE,s.ALT_ID,ssm.SCHOOL_ID,ssm.GRADE_ID ' . $extra['SELECT'];
                $_SESSION['new_sql'] .= 's.LAST_NAME,s.FIRST_NAME,s.MIDDLE_NAME,s.STUDENT_ID,s.PHONE,s.ALT_ID,ssm.SCHOOL_ID,ssm.GRADE_ID ' . $_SESSION['new_customsql'];
                if ($_REQUEST['include_inactive'] == 'Y') {
                    $sql .= ',' . db_case(array('(ssm.START_DATE IS NOT NULL AND (\'' . $extra['DATE'] . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL))', 'true', "'<FONT color=green>Active</FONT>'", "'<FONT color=red>Inactive</FONT>'")) . ' AS ACTIVE';
                    $sql .= ',' . db_case(array('(ssm.START_DATE IS NOT NULL AND (\'' . $extra['DATE'] . '\'<=ss.END_DATE OR ss.END_DATE IS NULL))', 'true', "'<FONT color=green>Active</FONT>'", "'<FONT color=red>Inactive</FONT>'")) . ' AS ACTIVE_SCHEDULE';
                    $_SESSION['new_sql'] .= ',' . db_case(array('(ssm.START_DATE IS NOT NULL AND (\'' . $extra['DATE'] . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL))', 'true', "'<FONT color=green>Active</FONT>'", "'<FONT color=red>Inactive</FONT>'")) . ' AS ACTIVE';
                    $_SESSION['new_sql'] .= ',' . db_case(array('(ssm.START_DATE IS NOT NULL AND (\'' . $extra['DATE'] . '\'<=ss.END_DATE OR ss.END_DATE IS NULL))', 'true', "'<FONT color=green>Active</FONT>'", "'<FONT color=red>Inactive</FONT>'")) . ' AS ACTIVE_SCHEDULE';
                }
            }
            $sql .= ' FROM students s,course_periods cp,schedule ss ';
            $_SESSION['new_sql'] .= ' FROM students s,course_periods cp,schedule ss ';
            if ($_REQUEST['mp_comment']) {
                $sql .= ',student_mp_comments smc ';
                $_SESSION['newsql'] .= ',student_mp_comments smc ';
            }
            if ($_REQUEST['goal_title'] || $_REQUEST['goal_description']) {
                $sql .= ',goal g ';
                $_SESSION['newsql'] .= ',goal g ';
            }
            if ($_REQUEST['progress_name'] || $_REQUEST['progress_description']) {
                $sql .= ',progress p ';
                $_SESSION['newsql'] .= ',progress p ';
            }
            if ($_REQUEST['doctors_note_comments'] || $_REQUEST['med_day'] || $_REQUEST['med_month'] || $_REQUEST['med_year']) {
                $sql .= ',student_medical_notes smn ';
                $_SESSION['newsql'] .= ',student_medical_notes smn ';
            }
            if ($_REQUEST['type'] || $_REQUEST['imm_comments'] || $_REQUEST['imm_day'] || $_REQUEST['imm_month'] || $_REQUEST['imm_year']) {
                $sql .= ',student_immunization sm ';
                $_SESSION['newsql'] .= ',student_immunization sm ';
            }
            if ($_REQUEST['med_alrt_title'] || $_REQUEST['ma_day'] || $_REQUEST['ma_month'] || $_REQUEST['ma_year']) {
                $sql .= ',student_medical_alerts sma ';
                $_SESSION['newsql'] .= ',student_medical_alerts sma ';
            }
            if ($_REQUEST['reason'] || $_REQUEST['result'] || $_REQUEST['med_vist_comments'] || $_REQUEST['nv_day'] || $_REQUEST['nv_month'] || $_REQUEST['nv_year']) {
                $sql .= ',student_medical_visits smv ';
                $_SESSION['newsql'] .= ',student_medical_visits smv ';
            }
            $_SESSION['new_sql'] .= $_SESSION['newsql'];
            $sql .= ' ,student_enrollment ssm ';
            $_SESSION['new_sql'] .= ' ,student_enrollment ssm ';
            $sql .= $extra['FROM'] . ' WHERE ssm.STUDENT_ID=s.STUDENT_ID AND ssm.STUDENT_ID=ss.STUDENT_ID
					AND ssm.SCHOOL_ID=\'' . UserSchool() . '\' AND ssm.SYEAR=\'' . UserSyear() . '\' AND ssm.SYEAR=cp.SYEAR AND ssm.SYEAR=ss.SYEAR
					AND (ss.MARKING_PERIOD_ID IN (' . GetAllMP('', $queryMP) . ')  OR (ss.START_DATE<=\'' . date('Y-m-d') . '\'  AND (ss.END_DATE>=\'' . date('Y-m-d') . '\'  OR ss.END_DATE IS NULL)))
					AND (cp.TEACHER_ID=\'' . User('STAFF_ID') . '\' OR cp.SECONDARY_TEACHER_ID=\'' . User('STAFF_ID') . '\') AND cp.COURSE_PERIOD_ID=\'' . UserCoursePeriod() . '\'
					AND cp.COURSE_ID=ss.COURSE_ID AND cp.COURSE_PERIOD_ID=ss.COURSE_PERIOD_ID';
            $_SESSION['new_sql'] .= $extra['FROM'] . ' WHERE ssm.STUDENT_ID=s.STUDENT_ID AND ssm.STUDENT_ID=ss.STUDENT_ID
					AND ssm.SCHOOL_ID=\'' . UserSchool() . '\' AND ssm.SYEAR=\'' . UserSyear() . '\' AND ssm.SYEAR=cp.SYEAR AND ssm.SYEAR=ss.SYEAR
					AND (ss.MARKING_PERIOD_ID IN (' . GetAllMP('', $queryMP) . ')   OR (ss.START_DATE<=\'' . date('Y-m-d') . '\'  AND (ss.END_DATE>=\'' . date('Y-m-d') . '\'  OR ss.END_DATE IS NULL)))
					AND (cp.TEACHER_ID=\'' . User('STAFF_ID') . '\' OR cp.SECONDARY_TEACHER_ID=\'' . User('STAFF_ID') . '\') AND cp.COURSE_PERIOD_ID=\'' . UserCoursePeriod() . '\'
					AND cp.COURSE_ID=ss.COURSE_ID AND cp.COURSE_PERIOD_ID=ss.COURSE_PERIOD_ID';
            if ($_REQUEST['include_inactive'] == 'Y') {
                $sql .= ' AND ssm.ID=(SELECT ID FROM student_enrollment WHERE STUDENT_ID=ssm.STUDENT_ID AND SYEAR=ssm.SYEAR ORDER BY START_DATE DESC LIMIT 1)';
                $sql .= ' AND ss.START_DATE=(SELECT START_DATE FROM schedule WHERE STUDENT_ID=ssm.STUDENT_ID AND SYEAR=ssm.SYEAR AND MARKING_PERIOD_ID IN (' . GetAllMP('', $queryMP) . ') AND COURSE_ID=cp.COURSE_ID AND COURSE_PERIOD_ID=cp.COURSE_PERIOD_ID ORDER BY START_DATE DESC LIMIT 1)';
                $_SESSION['new_sql'] .= ' AND ssm.ID=(SELECT ID FROM student_enrollment WHERE STUDENT_ID=ssm.STUDENT_ID AND SYEAR=ssm.SYEAR ORDER BY START_DATE DESC LIMIT 1)';
                $_SESSION['new_sql'] .= ' AND ss.START_DATE=(SELECT START_DATE FROM schedule WHERE STUDENT_ID=ssm.STUDENT_ID AND SYEAR=ssm.SYEAR AND MARKING_PERIOD_ID IN (' . GetAllMP('', $queryMP) . ') AND COURSE_ID=cp.COURSE_ID AND COURSE_PERIOD_ID=cp.COURSE_PERIOD_ID ORDER BY START_DATE DESC LIMIT 1)';
            } else {
                $sql .= $_SESSION['inactive_stu_filter'] = ' AND (ssm.START_DATE IS NOT NULL AND (\'' . $extra['DATE'] . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL))';
                $sql .= $_SESSION['inactive_stu_filter'] = ' AND (ssm.START_DATE IS NOT NULL AND (\'' . $extra['DATE'] . '\'<=ss.END_DATE OR ss.END_DATE IS NULL))';
                // $sql .= " AND ('".$extra['DATE']."'>=ssm.START_DATE AND ('".$extra['DATE']."'<=ssm.END_DATE OR ssm.END_DATE IS NULL))";
                //$sql .= " AND ('".$extra['DATE']."'>=ss.START_DATE AND ('".$extra['DATE']."'<=ss.END_DATE OR ss.END_DATE IS NULL))";
                $_SESSION['new_sql'] .= ' AND (ssm.START_DATE IS NOT NULL AND (\'' . $extra['DATE'] . '\'<=ssm.END_DATE OR ssm.END_DATE IS NULL))';
                $_SESSION['new_sql'] .= ' AND (ssm.START_DATE IS NOT NULL AND (\'' . $extra['DATE'] . '\'<=ss.END_DATE OR ss.END_DATE IS NULL))';
            }
            if (!$extra['SELECT_ONLY'] && $_REQUEST['include_inactive'] == 'Y') {
                $extra['columns_after']['ACTIVE'] = 'School Status';
                $extra['columns_after']['ACTIVE_SCHEDULE'] = 'Course Status';
            }
            break;
        case 'parent':
        case 'student':
            $sql = 'SELECT ';
            if ($extra['SELECT_ONLY']) {
                $sql .= $extra['SELECT_ONLY'];
            } else {
                if (Preferences('NAME') == 'Common') {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',coalesce(s.COMMON_NAME,s.FIRST_NAME)) AS FULL_NAME,';
                } else {
                    $sql .= 'CONCAT(s.LAST_NAME,\', \',s.FIRST_NAME,\' \',COALESCE(s.MIDDLE_NAME,\' \')) AS FULL_NAME,';
                }
                $sql .= 's.LAST_NAME,s.FIRST_NAME,s.MIDDLE_NAME,s.STUDENT_ID,s.ALT_ID,ssm.SCHOOL_ID,ssm.GRADE_ID ' . $extra['SELECT'];
            }
            $sql .= ' FROM students s,student_enrollment ssm ' . $extra['FROM'] . '
					WHERE ssm.STUDENT_ID=s.STUDENT_ID AND ssm.SYEAR=\'' . UserSyear() . '\' AND ssm.SCHOOL_ID=\'' . UserSchool() . '\' AND (\'' . DBDate() . '\' BETWEEN ssm.START_DATE AND ssm.END_DATE OR (ssm.END_DATE IS NULL AND \'' . DBDate() . '\'>ssm.START_DATE)) AND ssm.STUDENT_ID' . ($extra['ASSOCIATED'] ? ' IN (SELECT STUDENT_ID FROM students_join_people WHERE PERSON_ID=\'' . $extra['ASSOCIATED'] . '\')' : '=\'' . UserStudentID() . '\'');
            break;
        default:
            exit('Error');
    }
    if ($expanded_view == true) {
        $custom_str = CustomFields('where', '', 1);
        if ($custom_str != '') {
            $_SESSION['custom_count_sql'] = $custom_str;
        }
        $sql .= $custom_str;
    } elseif ($expanded_view == false) {
        $custom_str = CustomFields('where', '', 2);
        if ($custom_str != '') {
            $_SESSION['custom_count_sql'] = $custom_str;
        }
        $sql .= $custom_str;
    } else {
        $custom_str = CustomFields('where');
        if ($custom_str != '') {
            $_SESSION['custom_count_sql'] = $custom_str;
        }
        $sql .= $custom_str;
    }
    $sql .= $extra['WHERE'] . ' ';
    $sql = appendSQL_Absence_Summary($sql, $extra);
    //        TODO               Modification Required
    //        if($_SESSION['stu_search']['sql'] && $_REQUEST['return_session'] && $extra['SELECT']!='' && strpos($sql,'address a')==0)
    //        {
    //            $sql = str_replace("FROM", $extra['SELECT']." FROM",$sql);
    //        }
    //
    //        if($_SESSION['stu_search']['sql'] && $_REQUEST['return_session'] && $extra['FROM']!='' && strpos($sql,'address a')==0)
    //        {
    //            $sql = str_replace("WHERE",$extra['FROM']." WHERE",$sql);
    //
    //        }
    //        --------------------------------------------------
    if ($extra['GROUP']) {
        $sql .= ' GROUP BY ' . $extra['GROUP'];
    }
    if (!$extra['ORDER_BY'] && !$extra['SELECT_ONLY']) {
        if (Preferences('SORT') == 'Grade') {
            $sql .= ' ORDER BY (SELECT SORT_ORDER FROM school_gradelevels WHERE ID=ssm.GRADE_ID),FULL_NAME';
        } else {
            $sql .= ' ORDER BY FULL_NAME';
        }
        $sql .= $extra['ORDER'];
    } elseif ($extra['ORDER_BY'] && !($_SESSION['stu_search']['sql'] && $_REQUEST['return_session'])) {
        $sql .= ' ORDER BY ' . $extra['ORDER_BY'];
    }
    if ($extra['DEBUG'] === true) {
        echo '<!--' . $sql . '-->';
    }
    $return = DBGet(DBQuery($sql), $functions, $extra['group']);
    $_SESSION['count_stu'] = count($return);
    return $return;
}
function GetUserStaffList(&$extra)
{
    global $profiles_RET;
    $functions = array('PROFILE' => 'makeProfile');
    switch (User('PROFILE')) {
        case 'admin':
            $profiles_RET = DBGet(DBQuery('SELECT * FROM user_profiles'), array(), array('ID'));
            $sql = 'SELECT DISTINCT CONCAT(s.LAST_NAME,  \' \' ,s.FIRST_NAME) AS FULL_NAME,
					s.PROFILE,s.IS_DISABLE,s.PROFILE_ID,ssr.END_DATE,s.STAFF_ID ' . $extra['SELECT'] . '
                FROM
					staff s INNER JOIN staff_school_relationship ssr USING(staff_id) ' . $extra['FROM'] . ',login_authentication la
				WHERE
					(s.PROFILE_ID!=4 OR s.PROFILE_ID IS NULL) AND ssr.SYEAR=\'' . UserSyear() . '\' AND s.STAFF_ID=la.USER_ID AND la.PROFILE_ID NOT IN (3,4)';
            if (User('PROFILE_ID') == '1') {
                $sql .= ' AND s.PROFILE_ID!=0 ';
            }
            if ($_REQUEST['_search_all_schools'] != 'Y') {
                $sql .= ' AND school_id=' . UserSchool() . ' ';
            } else {
                $sql .= ' AND school_id IN(' . GetUserSchools(UserID(), true) . ') ';
            }
            if ($_REQUEST['_dis_user'] != 'Y') {
                $sql .= ' AND (s.IS_DISABLE<>\'Y\' OR  s.IS_DISABLE IS NULL) AND (ssr.END_DATE>=\'' . date('Y-m-d') . '\' OR ssr.END_DATE=\'0000-00-00\' OR ssr.END_DATE IS NULL)';
            }
            if ($_REQUEST['username']) {
                $sql .= 'AND UPPER(la.USERNAME) LIKE \'' . singleQuoteReplace("'", "\\'", strtoupper($_REQUEST['username'])) . '%\' ';
            }
            if ($_REQUEST['last']) {
                $sql .= 'AND UPPER(s.LAST_NAME) LIKE \'' . singleQuoteReplace("'", "\\'", strtoupper($_REQUEST['last'])) . '%\' ';
            }
            if ($_REQUEST['first']) {
                $sql .= 'AND UPPER(s.FIRST_NAME) LIKE \'' . singleQuoteReplace("'", "\\'", strtoupper($_REQUEST['first'])) . '%\' ';
            }
            if ($_REQUEST['profile'] == "") {
                $sql .= ' ';
            } else {
                if ($_REQUEST['profile'] == 0 || $_REQUEST['profile']) {
                    if (is_number($_REQUEST['profile']) == FALSE) {
                        $sql .= ' AND s.PROFILE=\'' . $_REQUEST['profile'] . '\' AND s.PROFILE_ID IS NULL ';
                    } else {
                        $sql .= ' AND s.PROFILE_ID=\'' . $_REQUEST['profile'] . '\' ';
                    }
                }
            }
            $sql .= $extra['WHERE'] . ' ';
            $sql .= 'ORDER BY FULL_NAME ';
            /**************************************for Back to User*************************************************************/
            if ($_SESSION['staf_search']['sql'] && $_REQUEST['return_session']) {
                $sql = $_SESSION['staf_search']['sql'];
            } else {
                if ($_REQUEST['sql_save_session_staf']) {
                    $_SESSION['staf_search']['sql'] = $sql;
                }
            }
            /***************************************************************************************************/
            if ($extra['functions']) {
                $functions += $extra['functions'];
            }
            //echo $sql;
            return DBGet(DBQuery($sql), $functions);
            break;
    }
}
示例#19
0
                    unset($_REQUEST['modfunc']);
                }
            }
        }
    }
    unset($_SESSION['_REQUEST_vars']['modfunc']);
}
if (!$_REQUEST['modfunc'] && $course_id) {
    // ASSIGNMENT TYPES
    $sql = ' SELECT ASSIGNMENT_TYPE_ID,TITLE 
                 FROM (
                    ( select gat.ASSIGNMENT_TYPE_ID,gat.TITLE  FROM gradebook_assignment_types gat where gat.COURSE_PERIOD_ID=\'' . $course_period_id . '\' )
                  UNION  
                   (SELECT gat.ASSIGNMENT_TYPE_ID as ASSIGNMENT_TYPE_ID,concat(gat.TITLE,\' (\',cp.title,\')\') as TITLE FROM gradebook_assignment_types gat , gradebook_assignments ga, course_periods cp
                    where cp.course_period_id =gat.course_period_id and gat.ASSIGNMENT_TYPE_ID=ga.ASSIGNMENT_TYPE_ID AND ga.COURSE_ID IS NOT NULL 
                    AND ga.COURSE_PERIOD_ID IS NULL AND ga.COURSE_ID=\'' . UserCourse() . '\' AND ga.STAFF_ID=\'' . UserID() . '\' ) 
                  )as t
                  GROUP BY ASSIGNMENT_TYPE_ID';
    $QI = DBQuery($sql);
    $types_RET = DBGet($QI);
    if ($_REQUEST['assignment_id'] != 'new' && $_REQUEST['assignment_type_id'] != 'new') {
        $delete_button = "<INPUT type=button value=" . _('Delete') . " onClick='javascript:window.location=\"Modules.php?modname={$_REQUEST['modname']}&modfunc=delete&assignment_type_id={$_REQUEST['assignment_type_id']}&assignment_id={$_REQUEST['assignment_id']}\"'>";
    }
    // ADDING & EDITING FORM
    if ($_REQUEST['assignment_id'] && $_REQUEST['assignment_id'] != 'new') {
        $sql = 'SELECT ASSIGNMENT_TYPE_ID,TITLE,ASSIGNED_DATE,DUE_DATE,POINTS,COURSE_ID,DESCRIPTION,
				CASE WHEN DUE_DATE<ASSIGNED_DATE THEN \'Y\' ELSE NULL END AS DATE_ERROR
				FROM gradebook_assignments
				WHERE ASSIGNMENT_ID=\'' . $_REQUEST['assignment_id'] . '\'';
        $QI = DBQuery($sql);
        $RET = DBGet($QI);
示例#20
0
                if (!isset($_REQUEST['process'])) {
                    $period_select = "Choose Period: <SELECT name=period onChange='this.form.submit();'>";
                    $period_select .= "<OPTION value='na' selected>N/A</OPTION>";
                    foreach ($RET as $period) {
                        //
                        $period_select .= "<OPTION value={$period['ID']}" . (CpvId() == $period['ID'] ? ' SELECTED' : '') . ">" . $period['SHORT_NAME'] . ($period['MARKING_PERIOD_ID'] != $fy_id ? ' ' . GetMP($period['MARKING_PERIOD_ID'], 'SHORT_NAME') : '') . (strlen($period['DAYS']) < 5 ? ' ' . $period['DAYS'] : '') . ' - ' . $period['COURSE_TITLE'] . "</OPTION>";
                        //
                        if (CpvId() == $period['ID']) {
                            $_SESSION['UserPeriod'] = $period['PERIOD_ID'];
                        }
                    }
                    $period_select .= "</SELECT>";
                }
            }
        }
        $profile = DBGet(DBQuery('SELECT PROFILE FROM staff WHERE STAFF_ID=' . UserID()));
        if ($profile[1]['PROFILE'] == "admin") {
            DrawHeader($period_select);
        }
        echo '</FORM><BR>';
        unset($_openSIS['DrawHeader']);
        $_openSIS['allow_edit'] = AllowEdit($_REQUEST['modname']);
        $_openSIS['User'] = array(1 => array('STAFF_ID' => UserStaffID(), 'NAME' => GetTeacher(UserStaffID()), 'USERNAME' => GetTeacher(UserStaffID(), '', 'USERNAME'), 'PROFILE' => 'teacher', 'SCHOOLS' => ',' . UserSchool() . ',', 'SYEAR' => UserSyear()));
        echo '<CENTER><TABLE width=100% ><TR><TD>';
        include 'modules/' . $_REQUEST['include'];
        echo '</TD></TR></TABLE></CENTER>';
    }
}
?>
<script type="text/javascript">
    function close_window()
示例#21
0
function CheckAuthenticMail($userName, $toUsers, $toCCUsers, $toBCCUsers, $grpName = 'false')
{
    $toAssArray = array();
    $toCCAssArray = array();
    $toBCCAssArray = array();
    $notUserArray = array();
    $toUserArray = explode(",", $toUsers);
    foreach ($toUserArray as $toUser) {
        $to = trim($toUser);
        //        $sub = DBQuery("SELECT up.profile FROM staff as s,user_profiles as up WHERE s.profile_id=up.id AND s.username='******'");
        $sub = DBQuery("SELECT * FROM login_authentication,user_profiles WHERE login_authentication.profile_id=user_profiles.id AND username='******'");
        $RET = DBGet($sub);
        if (Count($RET) == 0) {
            //            $student=DBQuery("SELECT * FROM students where username='******'");
            //            $st=DBGet($student);
            //            if(Count($st)!=0)
            //            {
            //                $toProfile="student";
            //                $toAssArray=array_push_assoc($toAssArray,$toUser,$toProfile);
            //            }
            //            else
            //            {
            array_push($notUserArray, $to);
            //            }
        } else {
            $toProfile = $RET[1]['PROFILE'];
            $toAssArray = array_push_assoc($toAssArray, $toUser, $toProfile);
        }
    }
    //  print_r($toAssArray);
    $toUserArray = array_diff($toUserArray, $notUserArray);
    $toCCUserArray = explode(",", $toCCUsers);
    foreach ($toCCUserArray as $toCCUser) {
        $toCC = trim($toCCUser);
        //        $sub = DBQuery("SELECT up.profile FROM staff as s,user_profiles as up WHERE s.profile_id=up.id AND s.username='******'");
        $sub = DBQuery("SELECT * FROM login_authentication,user_profiles WHERE login_authentication.profile_id=user_profiles.id AND username='******'");
        $RET = DBGet($sub);
        if (Count($RET) == 0) {
            //            $student=DBQuery("SELECT * FROM students where username='******'");
            //            $st=DBGet($student);
            //            if(Count($st)!=0)
            //            {
            //                $toCCProfile="student";
            //                $toCCAssArray=array_push_assoc($toCCAssArray,$toCCUser,$toCCProfile);
            //            }
            //            else
            //            {
            array_push($notUserArray, $toCC);
            //            }
        } else {
            $toCCProfile = $RET[1]['PROFILE'];
            $toCCAssArray = array_push_assoc($toCCAssArray, $toCCUser, $toCCProfile);
        }
    }
    //print_r($toCCAssArray);
    $toCCUserArray = array_diff($toCCUserArray, $notUserArray);
    $toBCCUserArray = explode(",", $toBCCUsers);
    foreach ($toBCCUserArray as $toBCCUser) {
        $toBCC = trim($toBCCUser);
        //$sub = DBQuery("SELECT up.profile FROM staff as s,user_profiles as up WHERE s.profile_id=up.id AND s.username='******'");
        $sub = DBQuery("SELECT * FROM login_authentication,user_profiles WHERE login_authentication.profile_id=user_profiles.id AND username='******'");
        $RET = DBGet($sub);
        if (Count($RET) == 0) {
            //            $student=DBQuery("SELECT * FROM students where username='******'");
            //            $st=DBGet($student);
            //            if(Count($st)!=0)
            //            {
            //                $toBCCProfile="student";
            //                $toBCCAssArray=array_push_assoc($toBCCAssArray,$toBCCUser,$toBCCProfile);
            //            }
            //            else
            //            {
            array_push($notUserArray, $toBCC);
            //            }
        } else {
            $toBCCProfile = $RET[1]['PROFILE'];
            $toBCCAssArray = array_push_assoc($toBCCAssArray, $toBCCUser, $toBCCProfile);
        }
    }
    //print_r($toBCCAssArray);
    $toBCCUserArray = array_diff($toBCCUserArray, $notUserArray);
    $subject = $_REQUEST['txtSubj'];
    // echo $date=date("d/m/y  H:i:s", time());
    //$date=date("y/m/d  H:i:s", time());
    if ($subject == '') {
        $subject = 'No Subject';
    }
    $mailBody = $_POST['txtBody'];
    $uploaded_file_count = count($_FILES['f']['name']);
    //$images=implode(",",$_FILES['f']['name']);
    for ($i = 0; $i < $uploaded_file_count; $i++) {
        $name = $_FILES['f']['name'][$i];
        if ($name) {
            $path = $userName . '_' . time() . rand(00, 99) . $name;
            $folder = "./assets/" . $path;
            $temp = $_FILES['f']['tmp_name'][$i];
            move_uploaded_file($temp, $folder);
            $arr[$i] = $folder;
        } else {
            $attachment = "";
        }
    }
    //$attachment=implode(',../../assets/',$arr);
    //$attachment='../../assets/'.$attachment;
    $attachment = implode(',', $arr);
    $multipleUser = '';
    $toAllowArr = array();
    foreach ($toAssArray as $userTo => $profileTo) {
        //            echo "<br/>";echo "<br/>";
        //            echo "<br/>toProfile= ".$profileTo;
        //            echo "<br/>current Profile= ".User('PROFILE');
        //            echo "<br/>";echo "<br/>";
        //            echo "to user ".$userTo;
        if ($profileTo == 'admin') {
            array_push($toAllowArr, "yes");
            $toAssArray[$userTo] = $profileTo . ",yes";
            if ($multipleUser == "") {
                $multipleUser = trim($userTo);
            } else {
                $multipleUser = $multipleUser . "," . trim($userTo);
            }
        } else {
            if (User('PROFILE') == 'admin') {
                if ($profileTo != '') {
                    array_push($toAllowArr, "yes");
                    $toAssArray[$userTo] = $profileTo . ",yes";
                    if ($multipleUser == "") {
                        $multipleUser = trim($userTo);
                    } else {
                        $multipleUser = $multipleUser . "," . trim($userTo);
                    }
                }
            }
            if (User('PROFILE') == 'teacher') {
                $teacher_id = UserID();
                //                    echo $teacher_id;
                $studentNameArray = array();
                // $sql='Select username from students where username is not null and student_id IN(Select distinct student_id from course_periods INNER JOIN schedule using(course_period_id) where course_periods.teacher_id=\''.$teacher_id.'\')';
                $sql = 'Select username from login_authentication INNER JOIN students on user_id=student_id where  profile_id=3 and username IS NOT NULL and student_id IN(Select distinct student_id from course_periods INNER JOIN schedule using(course_period_id) where course_periods.teacher_id=\'' . $teacher_id . '\')';
                $studentNameArray = DBGet(DBQuery($sql));
                //                  echo "<br> scheduled student";
                //                  print_r($studentNameArray);
                //$sql1='SELECT username FROM staff WHERE username IS NOT NULL AND staff_id IN (SELECT DISTINCT staff_id FROM students_join_users WHERE student_id IN (SELECT student_id FROM students WHERE username IS NOT NULL AND student_id IN (SELECT DISTINCT student_id FROM course_periods INNER JOIN schedule USING (course_period_id ) WHERE course_periods.teacher_id = \''.$teacher_id.'\')))';
                //$sql1='SELECT username FROM staff WHERE username IS NOT NULL AND staff_id IN (SELECT DISTINCT staff_id FROM students_join_users WHERE student_id IN (SELECT student_id FROM students WHERE student_id IN (SELECT DISTINCT student_id FROM course_periods INNER JOIN schedule USING (course_period_id ) WHERE course_periods.teacher_id = \''.$teacher_id.'\')))';
                $sql1 = 'SELECT username FROM login_authentication WHERE profile_id=4 and username IS NOT NULL AND user_id IN (SELECT DISTINCT person_id FROM students_join_people WHERE student_id IN (SELECT student_id FROM students WHERE student_id IN (SELECT DISTINCT student_id FROM course_periods INNER JOIN schedule USING (course_period_id ) WHERE course_periods.teacher_id = \'' . $teacher_id . '\')))';
                $parentNameArray = DBGet(DBQuery($sql1));
                //                  echo "<br> scheduled student s parent";
                //                  print_r($parentNameArray);
                $toUser = trim($userTo);
                $flag = 0;
                if ($profileTo == 'student') {
                    foreach ($studentNameArray as $studentNameArr) {
                        foreach ($studentNameArr as $studentName) {
                            if ($toUser == $studentName) {
                                $flag = 1;
                                if ($multipleUser == "") {
                                    $multipleUser = trim($toUser);
                                } else {
                                    $multipleUser = $multipleUser . "," . trim($toUser);
                                }
                            }
                        }
                    }
                }
                if ($profileTo == 'parent') {
                    foreach ($parentNameArray as $parentNameArr) {
                        foreach ($parentNameArr as $parentName) {
                            if ($toUser == $parentName) {
                                $flag = 1;
                                if ($multipleUser == "") {
                                    $multipleUser = trim($toUser);
                                } else {
                                    $multipleUser = $multipleUser . "," . trim($toUser);
                                }
                            }
                        }
                    }
                }
                if ($flag == 1) {
                    $toAssArray[$userTo] = $profileTo . ",yes";
                } else {
                    $toAssArray[$userTo] = $profileTo . ",no";
                }
            }
            if (User('PROFILE') == 'parent') {
                $parent_id = UserID();
                // echo $parent_id;
                $teacherNameArray = array();
                //$sql='Select username from staff where staff_id IN(Select distinct student_id from students_join_users where staff_id=\''.$parent_id.'\'))';
                $sql = 'Select username from login_authentication where username is not null and profile_id=2 and user_id IN(Select distinct teacher_id from course_periods INNER JOIN schedule using(course_period_id) where student_id in(Select student_id from students where student_id IN(select student_id from students_join_people where person_id=\'' . $parent_id . '\')))';
                $teacherNameArray = DBGet(DBQuery($sql));
                //
                $toUser = trim($userTo);
                $flag = 0;
                if ($profileTo == 'teacher') {
                    foreach ($teacherNameArray as $teacherNameArr) {
                        foreach ($teacherNameArr as $teacherName) {
                            if ($toUser == $teacherName) {
                                $flag = 1;
                                if ($multipleUser == "") {
                                    $multipleUser = trim($toUser);
                                } else {
                                    $multipleUser = $multipleUser . "," . trim($toUser);
                                }
                            }
                        }
                    }
                }
                if ($flag == 1) {
                    $toAssArray[$userTo] = $profileTo . ",yes";
                } else {
                    $toAssArray[$userTo] = $profileTo . ",no";
                }
            }
            if (User('PROFILE') == 'student') {
                $studentId = UserStudentID();
                $teacherNameArray = array();
                //$sql='Select username from staff where staff_id IN(Select distinct teacher_id from course_periods INNER JOIN schedule using(course_period_id) where schedule.student_id=\''.$studentId.'\')';
                $sql = 'Select username from login_authentication where username is not null and profile_id=2 and user_id IN(Select distinct teacher_id from course_periods INNER JOIN schedule using(course_period_id) where schedule.student_id=\'' . $studentId . '\')';
                //echo $sql;
                $teacherNameArray = DBGet(DBQuery($sql));
                // print_r($teacherNameArray);
                $toUser = trim($userTo);
                $flag = 0;
                if ($profileTo == 'teacher') {
                    foreach ($teacherNameArray as $teacherNameArr) {
                        foreach ($teacherNameArr as $teacherName) {
                            if ($toUser == $teacherName) {
                                $flag = 1;
                                if ($multipleUser == "") {
                                    $multipleUser = trim($toUser);
                                } else {
                                    $multipleUser = $multipleUser . "," . trim($toUser);
                                }
                            }
                        }
                    }
                }
                if ($flag == 1) {
                    $toAssArray[$userTo] = $profileTo . ",yes";
                } else {
                    $toAssArray[$userTo] = $profileTo . ",no";
                }
            }
        }
    }
    //echo "hello ".$multipleUser;
    $multipleCCUser = '';
    foreach ($toCCAssArray as $userCCTo => $profileCCTo) {
        //            echo "<br/>";echo "<br/>";
        //            echo "<br/>toCCProfile= ".$profileCCTo;
        //            echo "<br/>current Profile= ".User('PROFILE');
        //            echo "<br/>";echo "<br/>";
        //            echo "to user ".$userCCTo;
        if ($profileCCTo == 'admin') {
            array_push($toAllowArr, "yes");
            $toCCAssArray[$userCCTo] = $profileCCTo . ",yes";
            if ($multipleCCUser == "") {
                $multipleCCUser = trim($userCCTo);
            } else {
                $multipleCCUser = $multipleCCUser . "," . trim($userCCTo);
            }
        } else {
            if (User('PROFILE') == 'admin') {
                if ($profileCCTo != '') {
                    array_push($toAllowArr, "yes");
                    $toCCAssArray[$userCCTo] = $profileCCTo . ",yes";
                    if ($multipleCCUser == "") {
                        $multipleCCUser = trim($userCCTo);
                    } else {
                        $multipleCCUser = $multipleCCUser . "," . trim($userCCTo);
                    }
                }
            }
            if (User('PROFILE') == 'teacher') {
                $teacher_id = UserID();
                //echo "<br/><br/> testing".$teacher_id;
                $studentNameArray = array();
                //                    $sql='Select username from students where username is not null and student_id IN(Select distinct student_id from course_periods INNER JOIN schedule using(course_period_id) where course_periods.teacher_id=\''.$teacher_id.'\')';
                $sql = 'Select username from login_authentication INNER JOIN students on user_id=student_id where  profile_id=3 and username IS NOT NULL and student_id IN(Select distinct student_id from course_periods INNER JOIN schedule using(course_period_id) where course_periods.teacher_id=\'' . $teacher_id . '\')';
                $studentNameArray = DBGet(DBQuery($sql));
                //                  echo "<br> scheduled student";
                //                  print_r($studentNameArray);
                // $sql1='Select username from staff where username is not null and staff_id IN(Select distinct student_id from students_join_users where staff_id=\''.$teacher_id.'\')';
                //$sql1='SELECT username FROM staff WHERE username IS NOT NULL AND staff_id IN (SELECT DISTINCT staff_id FROM students_join_users WHERE student_id IN (SELECT student_id FROM students WHERE student_id IN (SELECT DISTINCT student_id FROM course_periods INNER JOIN schedule USING (course_period_id ) WHERE course_periods.teacher_id = \''.$teacher_id.'\')))';
                $sql1 = 'SELECT username FROM login_authentication WHERE profile_id=4 and username IS NOT NULL AND user_id IN (SELECT DISTINCT person_id FROM students_join_people WHERE student_id IN (SELECT student_id FROM students WHERE student_id IN (SELECT DISTINCT student_id FROM course_periods INNER JOIN schedule USING (course_period_id ) WHERE course_periods.teacher_id = \'' . $teacher_id . '\')))';
                $parentNameArray = DBGet(DBQuery($sql1));
                //                  echo "<br> scheduled student s parent";
                //                  print_r($parentNameArray);
                //
                $toCCUser = trim($userCCTo);
                $flag = 0;
                if ($profileCCTo == 'student') {
                    foreach ($studentNameArray as $studentNameArr) {
                        foreach ($studentNameArr as $studentName) {
                            if ($toCCUser == $studentName) {
                                $flag = 1;
                                if ($multipleCCUser == "") {
                                    $multipleCCUser = trim($toCCUser);
                                } else {
                                    $multipleCCUser = $multipleCCUser . "," . trim($toCCUser);
                                }
                            }
                        }
                    }
                }
                if ($profileTo == 'parent') {
                    // $flag=0;
                    foreach ($parentNameArray as $parentNameArr) {
                        foreach ($parentNameArr as $parentName) {
                            if ($toCCUser == $parentName) {
                                $flag = 1;
                                if ($multipleCCUser == "") {
                                    $multipleCCUser = trim($toCCUser);
                                } else {
                                    $multipleCCUser = $multipleCCUser . "," . trim($toCCUser);
                                }
                            }
                        }
                    }
                }
                if ($flag == 1) {
                    $toCCAssArray[$userCCTo] = $profileCCTo . ",yes";
                } else {
                    $toCCAssArray[$userCCTo] = $profileCCTo . ",no";
                }
            }
            if (User('PROFILE') == 'parent') {
                $parent_id = UserID();
                // echo "<br/><br/> testing".$parent_id;
                $teacherNameArray = array();
                $sql = 'Select username from staff where staff_id IN(Select distinct student_id from students_join_users where staff_id=\'' . $parent_id . '\'))';
                $teacherNameArray = DBGet(DBQuery($sql));
                //
                $toCCUser = trim($userCCTo);
                $flag = 0;
                if ($profileCCTo == 'teacher') {
                    //                      $flag=0;
                    foreach ($teacherNameArray as $teacherNameArr) {
                        foreach ($teacherNameArr as $teacherName) {
                            if ($toCCUser == $teacherName) {
                                $flag = 1;
                                if ($multipleCCUser == "") {
                                    $multipleCCUser = trim($toCCUser);
                                } else {
                                    $multipleCCUser = $multipleCCUser . "," . trim($toCCUser);
                                }
                            }
                        }
                    }
                }
                if ($flag == 1) {
                    $toCCAssArray[$userCCTo] = $profileCCTo . ",yes";
                } else {
                    $toCCAssArray[$userCCTo] = $profileCCTo . ",no";
                }
            }
            if (User('PROFILE') == 'student') {
                $studentId = UserStudentID();
                $teacherNameArray = array();
                //$sql='Select username from staff where staff_id IN(Select distinct teacher_id from course_periods INNER JOIN schedule using(course_period_id) where schedule.student_id=\''.$studentId.'\')';
                $sql = 'Select username from login_authentication where username is not null and profile_id=2 and user_id IN(Select distinct teacher_id from course_periods INNER JOIN schedule using(course_period_id) where schedule.student_id=\'' . $studentId . '\')';
                //echo $sql;
                $teacherNameArray = DBGet(DBQuery($sql));
                // print_r($teacherNameArray);
                $toCCUser = trim($userCCTo);
                $flag = 0;
                if ($profileCCTo == 'teacher') {
                    foreach ($teacherNameArray as $teacherNameArr) {
                        foreach ($teacherNameArr as $teacherName) {
                            if ($toCCUser == $teacherName) {
                                $flag = 1;
                                if ($multipleCCUser == "") {
                                    $multipleCCUser = trim($toCCUser);
                                } else {
                                    $multipleCCUser = $multipleCCUser . "," . trim($toCCUser);
                                }
                            }
                        }
                    }
                }
                if ($flag == 1) {
                    $toCCAssArray[$userCCTo] = $profileCCTo . ",yes";
                } else {
                    $toCCAssArray[$userCCTo] = $profileCCTo . ",no";
                }
            }
        }
    }
    //echo "<br/><br/>hello ".$multipleCCUser;
    $multipleBCCUser = '';
    // print_r($BCCprofileArr);
    foreach ($toBCCAssArray as $userBCCTo => $profileBCCTo) {
        //            echo "<br/>";echo "<br/>";
        //            echo "<br/>toCCProfile= ".$profileCCTo;
        //            echo "<br/>current Profile= ".User('PROFILE');
        //            echo "<br/>";echo "<br/>";
        //            echo "to user ".$userCCTo;
        if ($profileBCCTo == 'admin') {
            array_push($toAllowArr, "yes");
            $toBCCAssArray[$userBCCTo] = $profileBCCTo . ",yes";
            if ($multipleBCCUser == "") {
                $multipleBCCUser = trim($userBCCTo);
            } else {
                $multipleBCCUser = $multipleBCCUser . "," . trim($userBCCTo);
            }
        } else {
            if (User('PROFILE') == 'admin') {
                if ($profileBCCTo != '') {
                    array_push($toAllowArr, "yes");
                    $toBCCAssArray[$userBCCTo] = $profileBCCTo . ",yes";
                    if ($multipleBCCUser == "") {
                        $multipleBCCUser = $userBCCTo;
                    } else {
                        $multipleBCCUser = $multipleBCCUser . "," . trim($userBCCTo);
                    }
                }
            }
            if (User('PROFILE') == 'teacher') {
                $teacher_id = UserID();
                //echo "<br/><br/> testing".$teacher_id;
                $studentNameArray = array();
                //$sql='Select username from students where username is not null and student_id IN(Select distinct student_id from course_periods INNER JOIN schedule using(course_period_id) where course_periods.teacher_id=\''.$teacher_id.'\')';
                $sql = 'Select username from login_authentication INNER JOIN students on user_id=student_id where  profile_id=3 and username IS NOT NULL and student_id IN(Select distinct student_id from course_periods INNER JOIN schedule using(course_period_id) where course_periods.teacher_id=\'' . $teacher_id . '\')';
                $studentNameArray = DBGet(DBQuery($sql));
                //                    echo "<br> scheduled student";
                //                    print_r($studentNameArray);
                //$sql1='Select username from staff where username is not null and staff_id IN(Select distinct student_id from students_join_users where staff_id=\''.$teacher_id.'\')';
                //$sql1='SELECT username FROM staff WHERE username IS NOT NULL AND staff_id IN (SELECT DISTINCT staff_id FROM students_join_users WHERE student_id IN (SELECT student_id FROM students WHERE student_id IN (SELECT DISTINCT student_id FROM course_periods INNER JOIN schedule USING (course_period_id ) WHERE course_periods.teacher_id = \''.$teacher_id.'\')))';
                $sql1 = 'SELECT username FROM login_authentication WHERE profile_id=4 and username IS NOT NULL AND user_id IN (SELECT DISTINCT person_id FROM students_join_people WHERE student_id IN (SELECT student_id FROM students WHERE student_id IN (SELECT DISTINCT student_id FROM course_periods INNER JOIN schedule USING (course_period_id ) WHERE course_periods.teacher_id = \'' . $teacher_id . '\')))';
                $parentNameArray = DBGet(DBQuery($sql1));
                //                    echo "<br> scheduled student s parent";
                //                    print_r($parentNameArray);
                //
                $toBCCUser = trim($userBCCTo);
                $flag = 0;
                if ($profileBCCTo == 'student') {
                    foreach ($studentNameArray as $studentNameArr) {
                        foreach ($studentNameArr as $studentName) {
                            if ($toBCCUser == $studentName) {
                                $flag = 1;
                                if ($multipleBCCUser == "") {
                                    $multipleBCCUser = $toBCCUser;
                                } else {
                                    $multipleBCCUser = $multipleBCCUser . "," . $toBCCUser;
                                }
                            }
                        }
                    }
                }
                if ($profileTo == 'parent') {
                    foreach ($parentNameArray as $parentNameArr) {
                        foreach ($parentNameArr as $parentName) {
                            if ($toBCCUser == $parentName) {
                                $flag = 1;
                                if ($multipleBCCUser == "") {
                                    $multipleBCCUser = $toBCCUser;
                                } else {
                                    $multipleBCCUser = $multipleBCCUser . "," . $toBCCUser;
                                }
                            }
                        }
                    }
                }
                if ($flag == 1) {
                    $toBCCAssArray[$userBCCTo] = $profileBCCTo . ",yes";
                } else {
                    $toBCCAssArray[$userBCCTo] = $profileBCCTo . ",no";
                }
            }
            if (User('PROFILE') == 'parent') {
                $parent_id = UserID();
                // echo "<br/><br/> testing".$parent_id;
                $teacherNameArray = array();
                //$sql='Select username from staff where staff_id IN(Select distinct student_id from students_join_users where staff_id=\''.$parent_id.'\'))';
                $sql = 'Select username from login_authentication where username is not null and profile_id=2 and user_id IN(Select distinct teacher_id from course_periods INNER JOIN schedule using(course_period_id) where student_id in(Select student_id from students where student_id IN(select student_id from students_join_people where person_id=\'' . $parent_id . '\')))';
                $teacherNameArray = DBGet(DBQuery($sql));
                //
                $toBCCUser = trim($userBCCTo);
                $flag = 0;
                if ($profileCCTo == 'teacher') {
                    foreach ($teacherNameArray as $teacherNameArr) {
                        foreach ($teacherNameArr as $teacherName) {
                            if ($toBCCUser == $teacherName) {
                                $flag = 1;
                                if ($multipleBCCUser == "") {
                                    $multipleBCCUser = $toBCCUser;
                                } else {
                                    $multipleBCCUser = $multipleBCCUser . "," . $toBCCUser;
                                }
                            }
                        }
                    }
                }
                if ($flag == 1) {
                    $toBCCAssArray[$userBCCTo] = $profileBCCTo . ",yes";
                } else {
                    $toBCCAssArray[$userBCCTo] = $profileBCCTo . ",no";
                }
            }
            if (User('PROFILE') == 'student') {
                $studentId = UserStudentID();
                $teacherNameArray = array();
                //$sql='Select username from staff where staff_id IN(Select distinct teacher_id from course_periods INNER JOIN schedule using(course_period_id) where schedule.student_id=\''.$studentId.'\')';
                $sql = 'Select username from login_authentication where username is not null and profile_id=2 and user_id IN(Select distinct teacher_id from course_periods INNER JOIN schedule using(course_period_id) where schedule.student_id=\'' . $studentId . '\')';
                $teacherNameArray = DBGet(DBQuery($sql));
                // print_r($teacherNameArray);
                $toBCCUser = trim($userBCCTo);
                $flag = 0;
                if ($profileBCCTo == 'teacher') {
                    foreach ($teacherNameArray as $teacherNameArr) {
                        foreach ($teacherNameArr as $teacherName) {
                            if ($toBCCUser == $teacherName) {
                                $flag = 1;
                                if ($multipleBCCUser == "") {
                                    $multipleBCCUser = $toBCCUser;
                                } else {
                                    $multipleBCCUser = $multipleBCCUser . "," . $toBCCUser;
                                }
                            }
                        }
                    }
                }
                if ($flag == 1) {
                    $toBCCAssArray[$userBCCTo] = $profileBCCTo . ",yes";
                } else {
                    $toBCCAssArray[$userBCCTo] = $profileBCCTo . ",no";
                }
            }
        }
    }
    //echo "<br/>hello ".$multipleBCCUser;
    $notUserArray = array_filter($notUserArray);
    $multipleUserArr = explode(",", $multipleUser);
    $multipleUserArr = array_unique($multipleUserArr);
    $multipleUser = implode(",", $multipleUserArr);
    $multipleCCUserArr = explode(",", $multipleCCUser);
    $multipleCCUserArr = array_unique($multipleCCUserArr);
    $multipleCCUser = implode(",", $multipleCCUserArr);
    $multipleBCCUserArr = explode(",", $multipleBCCUser);
    $multipleBCCUserArr = array_unique($multipleBCCUserArr);
    $multipleBCCUser = implode(",", $multipleBCCUserArr);
    if ($multipleUser != "") {
        $toArr = explode(",", $multipleUser);
        $toCCArr = explode(",", $multipleCCUser);
        $toBCCArr = explode(",", $multipleBCCUser);
        foreach ($notUserArray as $notUser) {
            if (($key = array_search($notUser, $toArr)) !== false) {
                unset($toArr[$key]);
            }
        }
        foreach ($notUserArray as $notUser) {
            if (($key = array_search($notUser, $toCCArr)) !== false) {
                unset($toCCArr[$key]);
            }
        }
        foreach ($notUserArray as $notUser) {
            if (($key = array_search($notUser, $toBCCArr)) !== false) {
                unset($toBCCArr[$key]);
            }
        }
        $multipleUser = implode(",", $toArr);
        $multipleCCUser = implode(",", $toCCArr);
        $multipleBCCUser = implode(",", $toBCCArr);
        $mailBody = htmlspecialchars($mailBody);
        SendMail($multipleUser, $userName, $subject, $mailBody, $attachment, $multipleCCUser, $multipleBCCUser, $grpName);
        $notAllowArr = array();
        foreach ($toAssArray as $userTo => $profileTo) {
            $chkallowUserArr = explode(",", $profileTo);
            //            echo "<br/>";
            //            print_r($chkallowUserArr);
            foreach ($chkallowUserArr as $chk) {
                if ($chk == 'no') {
                    array_push($notAllowArr, $userTo);
                }
            }
        }
        foreach ($toCCAssArray as $userCCTo => $profileCCTo) {
            $chkallowUserArr = explode(",", $profileCCTo);
            //            echo "<br/>";
            //            print_r($chkallowUserArr);
            foreach ($chkallowUserArr as $chk) {
                if ($chk == 'no') {
                    array_push($notAllowArr, $userCCTo);
                }
            }
        }
        foreach ($toBCCAssArray as $userBCCTo => $profileBCCTo) {
            $chkallowUserArr = explode(",", $profileBCCTo);
            //            echo "<br/>";
            //            print_r($chkallowUserArr);
            foreach ($chkallowUserArr as $chk) {
                if ($chk == 'no') {
                    array_push($notAllowArr, $userBCCTo);
                }
            }
        }
        // print_r($notAllowArr);
        $notAllowArr = array_filter($notAllowArr);
        $notAllowArr = array_unique($notAllowArr);
        if (count($notAllowArr) > 0) {
            echo "<br/><br/>Message was not sent to " . implode(",", $notAllowArr);
        }
        $notUserArray = array_filter($notUserArray);
        if (count($notUserArray) != 0) {
            $notUser = implode(",", $notUserArray);
            if ($notUser != "") {
                echo "<br/><br/>Message was not sent to " . $notUser . " as they not exist";
            }
        }
    } else {
        $notUserArray = array_filter($notUserArray);
        $noUser = implode(",", $notUserArray);
        echo "Message was not sent to " . $noUser . " as they not exist";
        // echo '<div style=text-align:centre><table cellpadding=5 cellspacing=5 class=alert_box ><tr><td class=alert></td><td class=alert_msg ><b>message not sent</b></td></tr><tr><td colspan=2 class=clear></td></tr></table></div>';
    }
}