#!/usr/bin/perl
#  Copyright 2001-2021 Leslie Richardson

#  This file is part of Open Admin for Schools.

#  Open Admin for Schools is free software; you can redistribute it 
#  and/or modify it under the terms of the GNU General Public License
#  as published by the Free Software Foundation; either version 2 of 
#  the License, or (at your option) any later version.

my %lex = ('Main' => 'Main',
	   'Error' => 'Error',
	   'Scores' => 'Scores',
	   'Delete' => 'Delete',
	   'Math' => 'Math',
	   'Continue' => 'Continue',
	   'Name' => 'Name',
	   'Score' => 'Score',
	   'Date' => 'Date',
	   'No User Id' => 'No User Id',
	   'No Password' => 'No Password',
	   'Please Log In' => 'Please Log In',
	   'Record(s) Deleted' => 'Record(s) Deleted',
	   'Admin Password' => 'Admin Password',
	   'Not Allowed' => 'Not Allowed',
	   'Grade' => 'Grade',
	   'Test' => 'Test',
	   'Author' => 'Author',
	   'Period' => 'Period',
	   'Close' => 'Close',

	   );

use DBI;
use CGI;
use CGI::Session;


my $self = 'mathTestDelete.pl';

# Configuration Settings ---------------------
#my $adminpassword = 'ogimow';
#my $allow_author = 1; # allow author to delete
my $allow_fsim = 1; # allow user with fsim access code to delete
#---------------------------------------------

my $q = new CGI;
my %arr = $q->Vars;

my @time = localtime(time);
my $year = $time[5] + 1900;
my $month = $time[4] + 1;
my $currdate = "$year-$month-$time[3]";


eval require "../../etc/admin.conf";
if ( $@ ) {
    print $lex{Error}. " $self: $@<br>\n";
    die $lex{Error}. "$self: $@\n";
}

eval require "./fsim.conf";
if ( $@ ) {
    print $lex{Error}. " $self: $@<br>\n";
    die $lex{Error}. "$self: $@\n";
}


my $dsn = "DBI:$dbtype:dbname=$dbase";
my $dbh = DBI->connect($dsn,$user,$password);

# Session Setup Here
my $session = new CGI::Session("driver:mysql;serializer:FreezeThaw",
 undef,{Handle => $dbh}) or die CGI::Session->errstr;

# Get/Set  Session Values (a defined userid means it was passed)
if ( $arr{userid} ){ # we want to login, passed userid/password pair.

    # Check password/userid against database (-1 no user, -2 wrong password);
    my $error = checkPassword($arr{userid}, $arr{password}, $dbh);
    if ($error == -1){ print $q->header( -charset, $charset ); login($lex{'No User Id'}); }
    if ($error == -2){ print $q->header( -charset, $charset ); login($lex{'No Password'}); }

    $cookietime = checkCookieTime( $arr{duration} );

    # Set values for userid and logged_in in session
    $session->param( 'logged_in','1');
    $session->expire( 'logged_in', $cookietime );
    $session->param( 'userid',$arr{userid} );
    $session->param( 'duration',$cookietime );

    $userid = $arr{userid};


} else { # check logged_in value in session

    if ( not $session->param('logged_in') ){
	$userid = $session->param('userid');
        print $q->header( -charset, $charset );
        print qq{$lex{'Please Log In'}</body></html>\n}; 
        die;
    }
    # Ok, we have a login. Values below we have in environment.

    $userid = $session->param('userid');
    $duration = $session->param('duration');

    if ( not ($duration =~ /\+/)) { # if not in +20m format, do so.
	$duration = checkCookieTime( $duration );
    }

    $session->expire('logged_in', $duration );


} # End of check for logged_in value

print $session->header( -charset, $charset );
# Session Setup End


# Check for fsim access code
my $sth = $dbh->prepare("select field_value from staff_multi 
  where field_name = 'access' and userid = ?");
$sth->execute( $userid );
if ( $DBI::errstr ){ print $DBI::errstr; die $DBI::errstr; }

my $accessfsim;
while ( my $val = $sth->fetchrow ) {
    if ( uc $val eq 'FSIM' ) { $accessfsim = 1; }
    # print qq{VAL:$val ACCESS:$accessdra<br>\n";
}


# Page Header
my $title = "$lex{Delete} $lex{Math} $lex{Scores}";
print qq{$doctype\n<html><head><title>$title</title>\n};
print qq{<link rel="stylesheet" href="$tchcss" type="text/css">\n};

print qq{$chartype\n</head><body style="padding:1em 2em;">\n};
print qq{[ <a href="$tchpage">$lex{Main}</a> ]\n};
print qq{<h1>$title</h1>\n};


if ( not $arr{page} ) {
    selectTest( $arr{testid} );

} elsif ( $arr{page} == 1 ) {
    delete $arr{page};
    deleteTest();
}


#-------------
sub selectTest {
#-------------

    # foreach my $key ( sort keys %arr ) { print qq{K:$key V:$arr{$key}<br>\n}; }

    my $testid = shift;

    # Get FSIM Test fields.
    my $sth = $dbh->prepare("select * from math_fstep where id = ?");
    $sth->execute( $testid );
    if ( $DBI::errstr ){ print $DBI::errstr; die $DBI::errstr; }
    my $ref = $sth->fetchrow_hashref;


=head
    # Access Controls
    my $failflag;
    if ( not $allow_author and not $allow_fsim ) { $failflag = 1; } # nobody deletes
    elsif ( $allow_author and $tauthor ne $userid ) { $failflag = 1; } # not author

    if ( $allow_fsim and $accessfsim ) { $failflag = 0; } # allow dra override of author failure
    if ( $adminpassword eq $arr{adminpassword} ) { $failflag = 0; } # allow admin override
    if ( $failflag ) {
	print qq{<h3>$lex{Delete} $lex{'Not Allowed'}</h3>\n};

	print qq{<form action="$self" method="post"> \n};
	print qq{<input type="hidden" name="testid" value="$testid">\n};
	print qq{<p>$lex{'Admin Password'} <input type="text" size="10" name="adminpassword">\n};
	print qq{<input type="submit" value="$lex{Continue}">\n};
	print qq{</p></form>\n};
	print qq{</body></html>\n};
	exit;
    }
=cut

    # Get Student Name
    my $sth1 = $dbh->prepare("select lastname, firstname, grade from studentall where studnum = ?");
    $sth1->execute( $ref->{studnum} );
    if ( $DBI::errstr ) { print $DBI::errstr; die $DBI::errstr; }
    my ( $lastname, $firstname,$grade ) = $sth1->fetchrow;
    # print qq{Name: $lastname $firstname<br>\n};

    # Print Form Heading
    print qq{<form action="$self" method="post"> \n};
    print qq{<input type="hidden" name="page" value="1">\n};
    print qq{<input type="hidden" name="testid" value="$testid">\n};

    # Print Table Header and Heading values
    print qq{<table cellpadding="3" cellspacing="0" border="0">\n};
    # Delete
    print qq{<tr><td class="la">};
    print qq{<input type="submit" value="$lex{Delete} $lex{Test}"></td></tr>\n};


    print qq{<tr><td class="bra">$lex{Name}</td><td>$firstname $lastname</td></tr>\n};

    print qq{<tr><td class="bra">$lex{Grade}</td><td class="la">$ref->{tgrade}</td></tr>\n};

    print qq{<tr><td class="bra">$lex{Score}</td><td class="la">$ref->{tphase}</td></tr>\n}; 

    print qq{<tr><td class="bra">$lex{Period}</td><td class="la">$ref->{tseason}</td></tr>\n}; 

    print qq{<tr><td class="bra">$lex{Date}</td><td class="la">$ref->{tdate}</td></tr>\n}; 

    print qq{<tr><td class="bra">$lex{Author}</td><td class="la">$ref->{tauthor}</td></tr>\n}; 

    # Delete
    print qq{<tr><td class="la">};
    print qq{<input type="submit" value="$lex{Delete} $lex{Test}"></td></tr>\n};

    print qq{</table></form></body></html>\n};

    exit;

}


#--------------
sub deleteTest {
#--------------

    #foreach my $key ( sort keys %arr ) { print qq{K:$key V:$arr{$key}<br>\n}; }

    my $testid = $arr{testid};

    # Delete Test
    $sth = $dbh->prepare("delete from math_fstep where id = ?");  
    $sth->execute( $testid );
    if ( $DBI::errstr ){ print $DBI::errstr; die $DBI::errstr; }

    print qq{<h3>$lex{'Record(s) Deleted'}</h3>\n};

    print qq{<p><form><input type="hidden" name="none">\n};
    print qq{<input type="button" value="$lex{Close}" };
    print qq{onClick="parent.close()"></form></p>};

    print qq{</body></html>\n};

    exit;

}
