added password recovery

[banana.git] / admin / blackboard.php

diff --git a/admin/blackboard.php b/admin/blackboard.php
index 4066f84d4249fb5cdd61cca6e4a341d556d8e62a..6571f3928b24c2711bf45e49c9af4de8ddd8bcb0 100644 (file)
--- a/admin/blackboard.php
+++ b/admin/blackboard.php
@@ -3,32 +3,28 @@
   require 'include/db.inc';
   require 'include/common.inc';
   
-  if(isset($_POST['submit']) && $_POST['mnumber']!="") {
-    $db->query("UPDATE students SET blackboard=blackboard+1 WHERE mnumber=" . trim($_POST['mnumber']));
-    block("lightgreen", "added blackboard");
+  if( isset($_GET['mnumber']) &&
+     $db->query("SELECT COUNT(*) FROM students WHERE mnumber=" . trim($_GET['mnumber']) . " AND lastblackboard=" . trim($_GET['tstamp']))->fetch(PDO::FETCH_NUM)[0] == 0) {
+     
+    if( $_GET['sign'] == 0 ) {
+      $db->query("UPDATE students SET blackboard=blackboard+1, lastblackboard=" . $_GET['tstamp'] . " WHERE mnumber=" . trim($_GET['mnumber']));
+    }
+    else {
+      $db->query("UPDATE students SET blackboard=blackboard-1, lastblackboard=" . $_GET['tstamp'] . " WHERE mnumber=" . trim($_GET['mnumber']));
+    }
   }
 
   if ($db->query("SELECT COUNT(*) FROM students")->fetch(PDO::FETCH_NUM)[0] == 0) {
     block("red", "no students registered");
-    break;
+    exit;
   }
 
-  block("black", "add blackboard");
 ?>
 
-<form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">
-  <table>
-    <tr>  
-      <th align="left">Matr.nummer:</th> <th><input type="text" name="mnumber"></th>
-      <th><input type="submit" name="submit" value="Add"></th>
-    </tr>
-  </table>
-</form>
-
 <?php
   block("black", "blackboard overview");
 
-  $result=$db->query("SELECT firstname, lastname, mnumber, blackboard FROM students");
+  $result=$db->query("SELECT firstname, lastname, mnumber, blackboard FROM students ORDER BY LOWER(lastname)");
 
   print "<table>";
   while ($student = $result->fetch(PDO::FETCH_ASSOC)) {
@@ -36,7 +32,9 @@
     print "<td>" . $student['firstname'] . "&nbsp;</td>";
     print "<td>" . $student['lastname'] . "&nbsp;&nbsp;</td>";
     print "<td>" . $student['mnumber'] . "&nbsp;&nbsp;</td>";
-    print "<td>" . $student['blackboard'] . "</td>";
+    print "<td>" . $student['blackboard'] . "&nbsp;&nbsp;</td>";
+    print "<td>" . "<a href='blackboard.php?mnumber=" . $student['mnumber'] . "&tstamp=" . time() . "&sign=0'>+1" . "</a></td>";
+    print "<td>" . "<a href='blackboard.php?mnumber=" . $student['mnumber'] . "&tstamp=" . time() . "&sign=1'>-1" . "</a></td>";
     print "</tr>";
   }
   print "</table>";