#!/usr/bin/perl # Copyright 2001-2021 Leslie Richardson # This file is part of Open Admin for Schools. # Open Admin for Schools is free software; you can redistribute it # and/or modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 of # the License, or (at your option) any later version. my %lex = ('Main' => 'Main', 'Error' => 'Error', 'Reading Tests' => 'Reading Tests', 'Delete' => 'Delete', 'Reading Level' => 'Reading Level', 'Continue' => 'Continue', 'Category' => 'Category', 'Name' => 'Name', 'Score' => 'Score', 'Test Date' => 'Test Date', 'No User Id' => 'No User Id', 'No Password' => 'No Password', 'Please Log In' => 'Please Log In', 'Record(s) Deleted' => 'Record(s) Deleted', 'Admin Password' => 'Admin Password', 'Not Allowed' => 'Not Allowed', ); use DBI; use CGI; use CGI::Session; my $adminpassword = 'meisowen'; my $self = 'readTestDelete.pl'; # Configuration Settings --------------------- my $allow_author = 1; # allow author to delete my $allow_dra = 1; # allow user with dra access code to delete #--------------------------------------------- my $q = new CGI; my %arr = $q->Vars; my @time = localtime(time); my $year = $time[5] + 1900; my $month = $time[4] + 1; my $currdate = "$year-$month-$time[3]"; eval require "../../etc/admin.conf"; if ( $@ ) { print $lex{Error}. " $self: $@
\n"; die $lex{Error}. "$self: $@\n"; } my $dsn = "DBI:$dbtype:dbname=$dbase"; my $dbh = DBI->connect($dsn,$user,$password); # Session Setup Here my $session = new CGI::Session("driver:mysql;serializer:FreezeThaw", undef,{Handle => $dbh}) or die CGI::Session->errstr; # Get/Set Session Values (a defined userid means it was passed) if ( $arr{userid} ){ # we want to login, passed userid/password pair. # Check password/userid against database (-1 no user, -2 wrong password); my $error = checkPassword($arr{userid}, $arr{password}, $dbh); if ($error == -1){ print $q->header( -charset, $charset ); login($lex{'No User Id'}); } if ($error == -2){ print $q->header( -charset, $charset ); login($lex{'No Password'}); } $cookietime = checkCookieTime( $arr{duration} ); # Set values for userid and logged_in in session $session->param( 'logged_in','1'); $session->expire( 'logged_in', $cookietime ); $session->param( 'userid',$arr{userid} ); $session->param( 'duration',$cookietime ); $userid = $arr{userid}; } else { # check logged_in value in session if ( not $session->param('logged_in') ){ $userid = $session->param('userid'); print $q->header( -charset, $charset ); print qq{

$lex{'Please Log In'}

\n}; exit; } # Ok, we have a login. Values below we have in environment. $userid = $session->param('userid'); $duration = $session->param('duration'); if ( not ($duration =~ /\+/)) { # if not in +20m format, do so. $duration = checkCookieTime( $duration ); } $session->expire('logged_in', $duration ); } # End of check for logged_in value print $session->header( -charset, $charset ); # Session Setup End # Check for dra access code my $sth = $dbh->prepare("select field_value from staff_multi where field_name = 'access' and userid = ?"); $sth->execute( $userid ); if ( $DBI::errstr ){ print $DBI::errstr; die $DBI::errstr; } my $accessdra; while ( my $val = $sth->fetchrow ) { if ( uc $val eq 'DRA' ) { $accessdra = 1; } # print "VAL:$val ACCESS:$accessdra
\n"; } # Page Header my $title = "$lex{Delete} $lex{'Reading Tests'}"; print qq{$doctype\n$title\n}; print qq{\n}; print qq{$chartype\n\n}; print qq{[ $lex{Main} ]\n}; print qq{

$title

\n}; if ( not $arr{page} ) { selectTest( $arr{testid} ); } elsif ( $arr{page} == 1 ) { delete $arr{page}; deleteTest(); } #------------- sub selectTest { #------------- #foreach my $key ( sort keys %arr ) { print qq{K:$key V:$arr{$key}
\n}; } my $testid = shift; # Get Reading Test fields. my $sth = $dbh->prepare("select studnum, readlevel, tdate, tauthor from read_test where id = ?"); $sth->execute( $testid ); if ( $DBI::errstr ){ print $DBI::errstr; die $DBI::errstr; } my ( $studnum, $readlevel, $tdate, $tauthor ) = $sth->fetchrow; # print qq{SN:$studnum RL:$readlevel DAte:$tdate Author: $tauthor
\n}; # Access Controls my $failflag; if ( not $allow_author and not $allow_dra ) { $failflag = 1; } # nobody deletes elsif ( $allow_author and $tauthor ne $userid ) { $failflag = 1; } # not author if ( $allow_dra and $accessdra ) { $failflag = 0; } # allow dra override of author failure if ( $adminpassword eq $arr{adminpassword} ) { $failflag = 0; } # allow admin override if ( $failflag ) { print qq{

$lex{Delete} $lex{'Not Allowed'}

\n}; print qq{
\n}; print qq{\n}; print qq{

$lex{'Admin Password'} }; print qq{\n}; print qq{\n}; print qq{

\n}; print qq{\n}; exit; } # Get Student Name my $sth1 = $dbh->prepare("select lastname, firstname from student where studnum = ?"); $sth1->execute( $studnum ); if ( $DBI::errstr ) { print $DBI::errstr; die $DBI::errstr; } my ( $lastname, $firstname ) = $sth1->fetchrow; # print qq{Name: $lastname $firstname
\n}; # Print Form Heading print qq{
\n}; print qq{\n}; print qq{\n}; # Get Reading Scores my $sth2 = $dbh->prepare("select id, category, name, score from read_test_score where testid = ? order by seq"); $sth2->execute( $testid ); if ($DBI::errstr){ print $DBI::errstr; die $DBI::errstr; } # Print Table Header and Heading values print qq{\n}; print qq{\n}; print qq{\n}; print qq{\n}; print qq{\n}; while ( my ( $id, $category, $name, $score ) = $sth2->fetchrow ) { print qq{\n}; print qq{\n}; } print qq{
$lex{'Reading Level'} $readlevel }; print qq{- $firstname $lastname
$lex{'Test Date'} $tdate - $tauthor
$lex{Category}$lex{Name}$lex{Score}
$category$name$score
\n}; exit; } #-------------- sub deleteTest { #-------------- #foreach my $key ( sort keys %arr ) { print qq{K:$key V:$arr{$key}
\n}; } my $testid = $arr{testid}; # Delete Scores my $sth = $dbh->prepare("delete from read_test_score where testid = ?"); $sth->execute( $testid ); if ( $DBI::errstr ){ print $DBI::errstr; die $DBI::errstr; } # Delete Test $sth = $dbh->prepare("delete from read_test where id = ?"); $sth->execute( $testid ); if ( $DBI::errstr ){ print $DBI::errstr; die $DBI::errstr; } print qq{

$lex{'Record(s) Deleted'}

\n}; print qq{

[ $lex{Main} ]

\n}; print qq{\n}; exit; }