added password recovery

[banana.git] / admin / blackboard.php

diff --git a/admin/blackboard.php b/admin/blackboard.php
index 814a879744a782c327dedf6839ae6602c38c74ca..6571f3928b24c2711bf45e49c9af4de8ddd8bcb0 100644 (file)
--- a/admin/blackboard.php
+++ b/admin/blackboard.php
@@ -3,11 +3,14 @@
   require 'include/db.inc';
   require 'include/common.inc';
   
-  if($_GET['mnumber']!="") {
-    // would be better to store timestamp in blackboard db!
-    if( time()-$_GET['tstamp'] < 5 ) {
-      $db->query("UPDATE students SET blackboard=blackboard+1 WHERE mnumber=" . trim($_GET['mnumber']));
-      block("lightgreen", "added blackboard");
+  if( isset($_GET['mnumber']) &&
+     $db->query("SELECT COUNT(*) FROM students WHERE mnumber=" . trim($_GET['mnumber']) . " AND lastblackboard=" . trim($_GET['tstamp']))->fetch(PDO::FETCH_NUM)[0] == 0) {
+     
+    if( $_GET['sign'] == 0 ) {
+      $db->query("UPDATE students SET blackboard=blackboard+1, lastblackboard=" . $_GET['tstamp'] . " WHERE mnumber=" . trim($_GET['mnumber']));
+    }
+    else {
+      $db->query("UPDATE students SET blackboard=blackboard-1, lastblackboard=" . $_GET['tstamp'] . " WHERE mnumber=" . trim($_GET['mnumber']));
     }
   }
 
@@ -21,7 +24,7 @@
 <?php
   block("black", "blackboard overview");
 
-  $result=$db->query("SELECT firstname, lastname, mnumber, blackboard FROM students");
+  $result=$db->query("SELECT firstname, lastname, mnumber, blackboard FROM students ORDER BY LOWER(lastname)");
 
   print "<table>";
   while ($student = $result->fetch(PDO::FETCH_ASSOC)) {
@@ -30,7 +33,8 @@
     print "<td>" . $student['lastname'] . "&nbsp;&nbsp;</td>";
     print "<td>" . $student['mnumber'] . "&nbsp;&nbsp;</td>";
     print "<td>" . $student['blackboard'] . "&nbsp;&nbsp;</td>";
-    print "<td>" . "<a href='blackboard.php?mnumber=" . $student['mnumber'] . "&tstamp=" . time() . "'>+1" . "</a></td>";
+    print "<td>" . "<a href='blackboard.php?mnumber=" . $student['mnumber'] . "&tstamp=" . time() . "&sign=0'>+1" . "</a></td>";
+    print "<td>" . "<a href='blackboard.php?mnumber=" . $student['mnumber'] . "&tstamp=" . time() . "&sign=1'>-1" . "</a></td>";
     print "</tr>";
   }
   print "</table>";