Sondervick/Roosters
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Store in GIT

Browse Source
This commit is contained in:
kennyboy55
2026-06-17 11:55:21 +02:00
parent 1aa2681e15
commit cfdfa5d709
45 changed files with 10719 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
php/confirmMail.php
+27
View File
@@ -0,0 +1,27 @@
<?php
SESSION_START();
require('connect.php');
$code = $_GET['code'];
$code = urldecode($code);
$query = "SELECT * FROM `pass_forgot` WHERE `confirm_mail`='$code'";
$result = mysql_query($query, $connection);
if(mysql_num_rows($result)==1){
$query = "UPDATE `pass_forgot` SET `confirm_mail`=NULL, `mail`=`mail_new`, `mail_new`=NULL WHERE `confirm_mail`='$code'";
mysql_query($query, $connection);
$_SESSION['confirm']=0;
$result_rows = mysql_fetch_assoc($result);
$name=$result_rows['name'];
if(strlen($name)>2){
header("Location: ../?page=leerling/$name");
}
if(strlen($name)==2){
header("Location: ../?page=docent/$name");
}
}
else{
header("Location: ../mail/confirm/?code=1");
}
php/confirmMail2.php
+29
View File
@@ -0,0 +1,29 @@
<?php
SESSION_START();
require('connect.php');
$code = $_POST['code'];
$code = urldecode($code);
$query = "SELECT * FROM `pass_forgot` WHERE `confirm_mail`='$code'";
$result = mysql_query($query, $connection);
$result_rows = mysql_fetch_assoc($result);
$mail=$result_rows['mail_new'];
if(mysql_num_rows($result)==1){
$query = "UPDATE `pass_forgot` SET `confirm_mail`=NULL, `mail`=`mail_new`, `mail_new`=NULL WHERE `confirm_mail`='$code'";
mysql_query($query, $connection);
?>
<table width='400px' id='table_mail'>
<tr>
<th align='left' colspan='2'><h2>Email Adres bevestigen</h2></th>
</tr><tr>
<td colspan='2'>Uw email adres is succesvol gewijzigd.</td>
</tr>
</table>
<?php echo "#" . $mail;
}
else{
echo 'Deze code klopt niet!';
}
php/connect.php
+4
View File
@@ -0,0 +1,4 @@
<?php
$connection=mysql_connect("localhost", "root", "usbw") or die("Connection Failed: " . mysql_error());
mysql_select_db("kennyboy_school", $connection) or die("Connection Failed: " . mysql_error());
?>
php/getAccount.php
+108
View File
@@ -0,0 +1,108 @@
<?php
require('connect.php');
SESSION_START();
$login = $_SESSION['login'];
$name = $_POST['account'];
if($login==1 || ($login==2 && strlen($_POST['account'])>2) ){
$query = "SELECT voornaam, tussenvoegsel, achternaam, mail, confirm_mail FROM `adminnr_naam`, `pass_forgot` WHERE adminnr_naam.adminnr=pass_forgot.name AND adminnr='$name'";
$result_temp = mysql_query($query, $connection);
$result = mysql_fetch_assoc($result_temp);
$voornaam = $result['voornaam'];
$mail = $result['mail'];
if($result['confirm_mail']==null){ $change = true; } else { $change = false; }
if ($result['tussenvoegsel'] != NULL){
$tussenvoegsel = $result['tussenvoegsel'] . ' ';
}
$achternaam = $result['achternaam'];
$name =$voornaam . ' ' . $tussenvoegsel . $achternaam . ' (' . $_POST['account'] . ')';
}
if($login==2 && strlen($_POST['account'])==2){
$query = "SELECT mail, confirm_mail FROM `pass_forgot` WHERE name='$name'";
$result_temp = mysql_query($query, $connection);
$result = mysql_fetch_assoc($result_temp);
$mail = $result['mail'];
if($result['confirm_mail']==null){ $change = true; } else { $change = false; }
}
?>
<table width='400px'>
<tr>
<th align='left'><h2>Informatie</h2></th>
</tr><tr>
<td align='left'>Ingelogd als:</td><td align='left'><?php echo $name; ?></td>
</tr><tr>
<td align='left'>Email:</td><td align='left' id='mailholder'><?php echo $mail; ?></td>
</tr><tr>
<td align='left'>Bevoegdheid:</td><td align='left'><?php if(strlen($_POST['account'])>2){echo 'Leerling';} elseif(strlen($_POST['account'])==2){echo 'Docent';} ?></td>
</tr>
</table>
<hr size='1px' color='#999' width='600px' align='left'>
<?php if($_SESSION['name']==$_POST['account']){ ?>
<span id='mailcontainer'>
<?php if ($change){ ?>
<table width='400px' id='table_mail'>
<tr>
<th align='left' colspan='2'><h2>Email Adres wijzigen</h2></th>
</tr><tr>
<td align='left' width='200px'>Email Adres:</td><td><form id='mailform' style='display:inline;'><input type='email' name='mail'></form></td>
</tr><tr>
<th></th><td><button onclick='updateMail();'>Aanpassen</button></td>
</tr>
</table>
<?php } else { ?>
<table width='400px' id='table_mail'>
<tr>
<th align='left' colspan='2'><h2>Email Adres bevestigen</h2></th>
</tr><tr>
<td align='left' colspan='2'>Er is een mail gestuurd naar het opgegeven e-mail adres. <font color='#9E0000'>Let op: Deze mail bevind zich waarschijnlijk in uw junk folder!</font> Klink op de link in de mail of vul de code hier in.</td>
</tr><tr>
<td align='left' width='200px'>Code:</td><td><form id='confirmmailform' style='display:inline;'><input type='text' name='code' ></form></td>
</tr><tr>
<th></th><td><button onclick='confirmMail();'>Bevestigen</button></td>
</tr>
</table>
<?php } ?>
</span>
<hr size='1px' color='#999' width='600px' align='left'>
<span id='passcontainer'>
<table width='400px' id='table_pass'>
<tr>
<th align='left' colspan='2'><h2>Wachtwoord wijzigen</h2></th>
</tr><tr>
<td align='left' width='200px'>Oud Wachtwood:</td><td><form id='passform' style='display:inline;'><input type='password' name='oldpass' ></td>
</tr><tr>
<td align='left'>Nieuw Wachtwoord:</td><td><input type='password' name='pass1' ></td>
</tr><tr>
<td align='left'>Herhaal Wachtwood:</td><td><input type='password' name='pass2' ></form></td>
</tr><tr>
<th></th><td><button onclick='updatePass();'>Bevestigen</button></td>
</tr>
</table>
</span>
<?php } else { ?>
<span id='passcontainer'>
<table width='400px' id='table_pass'>
<tr>
<th align='left' colspan='2'><h2>Wachtwoord resetten</h2></th>
</tr><tr>
<th></th><td><button onclick="resetPass('<?php echo $_POST['account']; ?>')">Reset</button></td>
</tr>
</table>
</span>
<?php } ?>
php/getBericht.php
+33
View File
@@ -0,0 +1,33 @@
<?php
require('connect.php');
session_start();
if ($_SESSION['login']>1) {
$name = $_POST['bericht'];
$query = "SELECT `mail` FROM `pass_forgot` WHERE `name`='$name'";
$result_array = mysql_query($query, $connection);
$result = mysql_fetch_assoc($result_array);
$mail = $result['mail']; ?>
<form id='berichtform'>
<table>
<tr>
<td>Stuur een bericht naar <input type='text' disabled='disabled' name='mail' value="<?php echo $mail; ?>"> voor <input type='text' disabled='disabled' name='name' value="<?php echo $name; ?>">.</td>
</tr>
<input type='hidden' name='mail' value="<?php echo $mail; ?>">
<input type='hidden' name='name' value="<?php echo $name; ?>">
<tr>
<td><textarea name='msg' for='berichtform' wrap='soft' cols='70' rows='30' id='textformbericht'>Beste <?php echo $name; ?>,
[Bericht]
Groeten,
<?php echo $_SESSION['name']; ?></textarea></td>
</tr>
<tr>
<td align='right'><button type='button' onclick="sendMail()">Versturen</button></td>
</tr>
</table>
<?php } else { echo false; } ?>
php/getLog.php
+19
View File
@@ -0,0 +1,19 @@
<?php
SESSION_START();
require('connect.php');
if($_SESSION['login']>1){
$query = "SELECT `name`, `last_login_ip`, `last_login` FROM `login` WHERE `last_login`!='0000-00-00 00:00:00' ORDER BY `last_login` DESC LIMIT 0,20";
$result_temp = mysql_query($query, $connection);
$table = "<table cellpadding=2 class='bericht'><tr><th width='180' align='left'>Gebruiker</th><th width='220' align='left' class='leftline'>Datum</th><th width='200' align='left' class='leftline'>IP Adres</th></tr>";
while($result = mysql_fetch_assoc($result_temp)){
$table .= "<tr><td>" . $result['name'] . "</td><td class='leftline'>" . $result['last_login'] . "</td><td class='leftline'>" . $result['last_login_ip'] . "</td><tr>";
}
$table .= "</table>";
echo $table;
}
else { echo false; }
?>
php/getRooster.php
+194
View File
@@ -0,0 +1,194 @@
<?php
session_start();
require('connect.php');
if($_SESSION['login']<1) {
echo false;
}
elseif(isset($_POST['docent']) && $_SESSION['login']>1){
$soort = 1;
$name = reset(explode(',', $_POST['docent']));
$query = "SELECT LNR.lesuurnr, LNR.lesuur, vak, lokaal, LES.groep
FROM `lessen` AS LES, `lesuurnr` AS LNR
WHERE LES.lesuur=LNR.lesuur AND LES.docent = '$name'
GROUP BY LNR.lesuur
ORDER BY LNR.lesuurnr";
}
elseif(isset($_POST['leerling']) && $_SESSION['login']>0){
$soort = 2;
if($_SESSION['login']==2){
$name = reset(explode(',', $_POST['leerling']));
}
elseif($_SESSION['login']==1){
$name = $_SESSION['name'];
}
$query = "SELECT LNR.lesuurnr, LNR.lesuur, vak, docent, lokaal
FROM `adminnr_groep` AS GR, `lessen` AS LES, `lesuurnr` AS LNR
WHERE GR.groep=LES.groep AND LES.lesuur=LNR.lesuur AND GR.adminnr = $name
GROUP BY LES.lesuur
ORDER BY LNR.lesuurnr";
}
elseif(isset($_POST['lokaal']) && $_SESSION['login']>0){
$soort = 3;
$name = reset(explode(',', $_POST['lokaal']));
$query = "SELECT LNR.lesuurnr, LNR.lesuur, vak, docent, LES.groep
FROM `lessen` AS LES, `lesuurnr` AS LNR
WHERE LES.lesuur=LNR.lesuur AND lokaal = '$name'
GROUP BY LES.lesuur
ORDER BY LNR.lesuurnr";
}
elseif(isset($_POST['groep']) && $_SESSION['login']>1){
$soort = 4;
$name = reset(explode(',', $_POST['groep']));
$query = "SELECT LNR.lesuurnr, LNR.lesuur, vak, docent, LES.lokaal
FROM `lessen` AS LES, `lesuurnr` AS LNR
WHERE LES.lesuur=LNR.lesuur AND groep = '$name'
GROUP BY LES.lesuur
ORDER BY LNR.lesuurnr";
}
elseif( ( isset($_POST['uur']) || isset($_POST['leeglokaal']) ) && $_SESSION['login']>0){
$soort = 5;
if(isset($_POST['uur'])){
$uur = reset(explode(',', $_POST['uur']));
$dag = reset(explode(',', $_POST['dag']));
$name = $dag . $uur;
}
else {
$dag = substr($_POST['leeglokaal'], 0, 2);
$uur = substr($_POST['leeglokaal'], 2, 1);
$name = $_POST['leeglokaal'];
}
$query = "SELECT DISTINCT (`lokaal`)
FROM `lessen` AS LES
WHERE LES.lesuur = '$name'";
$query2 = "SELECT DISTINCT (`lokaal`)
FROM `lessen`";
mysql_query("SET SQL_BIG_SELECTS=1", $connection) or die("An Error Occured 1");
$result_temp = mysql_query($query, $connection) or die("An Error Occured 2");
$result_temp2 = mysql_query($query2, $connection) or die("An Error Occured 3");
while($result2 = mysql_fetch_array($result_temp2)){
$lok_alle[] = $result2['lokaal'];
}
while($result = mysql_fetch_array($result_temp)){
$lok_vrij[] = $result['lokaal'];
}
$lokalen_temp = array_diff($lok_alle, $lok_vrij);
$lokalen = array_filter($lokalen_temp);
}
else {
echo false;
}
if( $soort>=1 && $soort <=4 ){
mysql_query("SET SQL_BIG_SELECTS=1", $connection) or die("Er is een fout opgetreden bij het ophalen van het rooster (q1)");
$result_temp = mysql_query($query, $connection) or die("Er is een fout opgetreden bij het ophalen van het rooster (q2)");
$uur = 1;
while($result = mysql_fetch_array($result_temp)){
while ($uur < $result['lesuurnr']){
$rooster[$uur] = '<td class="vrij content">&nbsp</td>';
$uur++;
}
if($soort==1){
$rooster[$uur] = '<td class="les content">' . $result['vak'] . '<br><a href="javascript:setPageValue(\'lokaal/' . $result['lokaal'] . '\')">' . $result['lokaal'] . '</a><br><a href="javascript:setPageValue(\'groep/' . $result['groep'] . '\')">' . $result['groep'] . '</a></td>';
}
if($soort==2){
$rooster[$uur] = '<td class="les content">' . $result['vak'] . '<br><a href="javascript:setPageValue(\'lokaal/' . $result['lokaal'] . '\')">' . $result['lokaal'] . '</a><br><a href="javascript:setPageValue(\'docent/' . $result['docent'] . '\')">' . $result['docent'] . '</a></td>';
}
if($soort==3){
$rooster[$uur] = '<td class="les content">' . $result['vak'] . '<br><a href="javascript:setPageValue(\'groep/' . $result['groep'] . '\')">' . $result['groep'] . '</a><br><a href="javascript:setPageValue(\'docent/' . $result['docent'] . '\')">' . $result['docent'] . '</a></td>';
}
if($soort==4){
$rooster[$uur] = '<td class="les content">' . $result['vak'] . '<br><a href="javascript:setPageValue(\'lokaal/' . $result['lokaal'] . '\')">' . $result['lokaal'] . '</a><br><a href="javascript:setPageValue(\'docent/' . $result['docent'] . '\')">' . $result['docent'] . '</a></td>';
}
$uur++;
}
while($uur <= 40){
$rooster[$uur] = '<td class="vrij content">&nbsp</td>';
$uur++;
}
if(($soort==1 || $soort==2) && $_SESSION['login']>1){
echo "Het rooster voor <a href='javascript: return false;' onclick=setPageValue('account/$name')>" . $name . "</a>";
}
else{
echo 'Het rooster voor ' . $name;
}
?>
<table class='rooster' cellspacing=0>
<tr>
<td class='corner header'></td><td class='dag header'>Maandag</td><td class='dag header'>Dinsdag</td><td class='dag header'>Woensdag</td><td class='dag header'>Donderdag</td><td class='dag header'>Vrijdag</td>
</tr><tr>
<td class='uur header'>1</td>
<?php echo $rooster[1] . $rooster[9] . $rooster[17] . $rooster[25] . $rooster[33]; ?>
</tr><tr>
<td class='uur header'>2</td>
<?php echo $rooster[2] . $rooster[10] . $rooster[18] . $rooster[26] . $rooster[34]; ?>
</tr><tr>
<td class='uur header'>3</td>
<?php echo $rooster[3] . $rooster[11] . $rooster[19] . $rooster[27] . $rooster[35]; ?>
</tr><tr>
<td class='uur header'>4</td>
<?php echo $rooster[4] . $rooster[12] . $rooster[20] . $rooster[28] . $rooster[36]; ?>
</tr><tr>
<td class='uur header'>5</td>
<?php echo $rooster[5] . $rooster[13] . $rooster[21] . $rooster[29] . $rooster[37]; ?>
</tr><tr>
<td class='uur header'>6</td>
<?php echo $rooster[6] . $rooster[14] . $rooster[22] . $rooster[30] . $rooster[38]; ?>
</tr><tr>
<td class='uur header'>7</td>
<?php echo $rooster[7] . $rooster[15] . $rooster[23] . $rooster[31] . $rooster[39]; ?>
</tr><tr>
<td class='uur header'>8</td>
<?php echo $rooster[8] . $rooster[16] . $rooster[24] . $rooster[32] . $rooster[40]; ?>
</tr>
</table>
<?php
}
elseif($soort == 5){ ?>
<h3>De volgende lokalen zijn op <?php echo $dag; ?> het <?php echo $uur; ?>e uur vrij:</h3><br>
<table width='600px'>
<tr>
<?php
$i = 1;
foreach ($lokalen as $key => $value) {
echo '<td><a href="javascript:setPageValue(\'lokaal/' . $value . '\')">' . $value . '</a></td>';
if($i%8==0){echo "</tr><tr>"; }
$i++;
} ?>
</tr></table>
<?php
}
else{
echo false;
}
?>
php/getVerBericht.php
+21
View File
@@ -0,0 +1,21 @@
<?php
SESSION_START();
require('connect.php');
$name = $_SESSION['name'];
if($_SESSION['login']>1){
$query = "SELECT * FROM `bericht` WHERE `sender`='$name' ORDER BY id DESC LIMIT 0,20";
$result_temp = mysql_query($query, $connection);
$table = "<table cellpadding=2 class='bericht'><tr><th width='100' align='left'>Ontvanger</th><th width='300' align='left' class='leftline'>Bericht</th><th width='200' align='left' class='leftline'>Datum</th></tr>";
while($result = mysql_fetch_assoc($result_temp)){
$table .= "<tr><td>" . $result['receiver'] . "</td><td class='leftline'>" . $result['msg'] . "</td><td class='leftline'>" . $result['send_time'] . "</td><tr>";
}
$table .= "</table>";
echo $table;
}
else { echo false; }
?>
php/login.php
+48
View File
@@ -0,0 +1,48 @@
<?php
SESSION_START();
require('connect.php');
$name = $_POST['name'];
$pass = $_POST['pass'];
//Create error link
$error = 0;
$link = '../login/?username=' . $name;
if($name==''){ $link .= '&nf=1'; $error=1; }
if($pass==''){ $link .= '&pf=1'; $error=1;}
if($error==1){ header("Location: $link"); }
$query = "SELECT * FROM login AS L, pass_forgot AS P WHERE P.name=L.name AND L.name='$name'";
$result_query = mysql_query($query, $connection);
if(mysql_num_rows($result_query) != 1){ $link .= '&nf=1'; header("Location: $link"); }
while($result = mysql_fetch_assoc($result_query)){
$hash = $result['pass'];
if (crypt($pass, $hash) == $hash) {
$_SESSION['login'] = $result['perms'];
$_SESSION['name'] = $name;
$ip = $_SERVER['REMOTE_ADDR'];
$query2 = "UPDATE `login` SET last_login = NOW() + INTERVAL 6 HOUR, last_login_ip = '$ip' WHERE name='$name'";
mysql_query($query2, $connection) or die("Error database update");
if($result['pass_forgot']==1){header("Location: ../login/forgot/reset"); $_SESSION['pass']=1;}
if($result['mail']==NULL && $result['mail_new']==NULL){header("Location: ../mail"); $_SESSION['mail']=1;}
elseif($result['confirm_mail']!=NULL){header("Location: ../mail/confirm"); $_SESSION['confirm']=1;}
else{
if($result['perms']==1){
header("Location: ../?page=leerling/$name");
}
elseif($result['perms']==2) {
header("Location: ../?page=docent/$name");
}
}
}
else{
$link .= '&pf=1';
header("Location: $link");
}
}
?>
php/logout.php
+9
View File
@@ -0,0 +1,9 @@
<?php
SESSION_START();
if(SESSION_DESTROY()){
header('Location: /login/');
}
else{
header('Location: /');
}
?>
php/search.php
+122
View File
@@ -0,0 +1,122 @@
<?php
SESSION_START();
require('connect.php');
$name = $_POST['input'];
$return = null;
//Te Kort
if(strlen($name)<1){
die("Type om te zoeken");
}
//Leerling Nummer
elseif(is_numeric($name)){
if($_SESSION['login']==2){
$query = "SELECT DISTINCT `adminnr`, `voornaam`, `tussenvoegsel`, `achternaam` FROM `adminnr_naam` WHERE `adminnr` LIKE '%$name%' ORDER BY `adminnr` LIMIT 0,10";
$result_temp = mysql_query($query, $connection);
while ($result = mysql_fetch_assoc($result_temp)) {
$return .= "<a href='javascript:return false;' onclick=setPageValue('leerling/" . $result['adminnr'] . "');toggle();> <font color='#31314D'>Leerling</font> - " . $result['voornaam'] . " " . $result['tussenvoegsel'] . " " . $result['achternaam'] . " (" . $result['adminnr'] . ")</a><br>";
}
if (strlen($name)<=6){
$query = "SELECT DISTINCT `groep` FROM `adminnr_groep` WHERE `groep` LIKE '%$name%' ORDER BY `groep` LIMIT 0,10";
$result_temp = mysql_query($query, $connection);
while ($result = mysql_fetch_assoc($result_temp)) {
$return .= "<a href='javascript:return false;' onclick=setPageValue('groep/" . $result['groep'] . "');toggle();> <font color='#3A4D31'>Groep</font> - " . $result['groep'] . "</a><br>";
}
}
}
if (strlen($name)<=3){
$query = "SELECT DISTINCT `lokaal` FROM `lessen` WHERE `lokaal` LIKE '%$name' ORDER BY `lokaal` LIMIT 0,10";
$result_temp = mysql_query($query, $connection);
while ($result = mysql_fetch_assoc($result_temp)) {
$return .= "<a href='javascript:return false;' onclick=setPageValue('lokaal/" . $result['lokaal'] . "');toggle();> <font color='#4C314D'>Lokaal</font> - " . $result['lokaal'] . "</a><br>";
}
}
}
//Voornaam, Achternaam of Docentnaam
else{
//Docentnaam
if(strlen($name)<=2 && $_SESSION['login']==2){
$query = "SELECT DISTINCT `docent` FROM `lessen` WHERE `docent` LIKE '$name%' ORDER BY `docent` LIMIT 0,10";
$result_temp = mysql_query($query, $connection);
while ($result = mysql_fetch_assoc($result_temp)) {
$return .= "<a href='javascript:return false;' onclick=setPageValue('docent/" . $result['docent'] . "');toggle();><font color='#4D3131'>Docent</font> - " . $result['docent'] . "</a><br>";
}
}
//Lokaal
if (strlen($name)<=3){
$query = "SELECT DISTINCT `lokaal` FROM `lessen` WHERE `lokaal` LIKE '$name%' ORDER BY `lokaal` LIMIT 0,10";
$result_temp = mysql_query($query, $connection);
while ($result = mysql_fetch_assoc($result_temp)) {
$return .= "<a href='javascript:return false;' onclick=setPageValue('lokaal/" . $result['lokaal'] . "');toggle();> <font color='#4C314D'>Lokaal</font> - " . $result['lokaal'] . "</a><br>";
}
}
//Voornaam of achternaam
if(!strpos($name, ' ') && $_SESSION['login']==2){
$query = "SELECT DISTINCT `adminnr`, `voornaam`, `tussenvoegsel`, `achternaam` FROM `adminnr_naam` WHERE `voornaam` LIKE '$name%' OR `achternaam` LIKE '$name%' ORDER BY `adminnr` LIMIT 0,10";
$result_temp = mysql_query($query, $connection);
while ($result = mysql_fetch_assoc($result_temp)) {
$return .= "<a href='javascript:return false;' onclick=setPageValue('leerling/" . $result['adminnr'] . "');toggle();> <font color='#31314D'>Leerling</font> - " . $result['voornaam'] . " " . $result['tussenvoegsel'] . " " . $result['achternaam'] . " (" . $result['adminnr'] . ")</a><br>";
}
}
//Voornaam en achternaam
elseif(strpos($name, ' ') && $_SESSION['login']==2){
$array = explode(' ', $name);
$voornaam = $array[0];
if(count($array)==2){
$achternaam = $array[1];
$tussenvoegsel = $array[1];
}
elseif(count($array)==3){
$achternaam = $array[2];
$tussenvoegsel = $array[1];
}
elseif(count($array)==4){
$achternaam = $array[3];
$tussenvoegsel = $array[1] . ' ' . $array[2];
}
else{
$achternaam = end($array);
$tussenvoegsel = '';
}
$query = "SELECT DISTINCT `adminnr`, `voornaam`, `tussenvoegsel`, `achternaam` FROM `adminnr_naam` WHERE `voornaam` LIKE '$voornaam%' AND (`achternaam` LIKE '$achternaam%' OR `tussenvoegsel` LIKE '$tussenvoegsel%') ORDER BY `adminnr` LIMIT 0,10";
$result_temp = mysql_query($query, $connection);
while ($result = mysql_fetch_assoc($result_temp)) {
$return .= "<a href='javascript:return false;' onclick=setPageValue('leerling/" . $result['adminnr'] . "');toggle();> <font color='#31314D'>Leerling</font> - " . $result['voornaam'] . " " . $result['tussenvoegsel'] . " " . $result['achternaam'] . " (" . $result['adminnr'] . ")</a><br>";
}
}
if (strlen($name)<=6 && $_SESSION['login']==2){
$query = "SELECT DISTINCT `groep` FROM `adminnr_groep` WHERE `groep` LIKE '%$name%' ORDER BY `groep` LIMIT 0,10";
$result_temp = mysql_query($query, $connection);
while ($result = mysql_fetch_assoc($result_temp)) {
$return .= "<a href='javascript:return false;' onclick=setPageValue('groep/" . $result['groep'] . "');toggle();> <font color='#3A4D31'>Groep</font> - " . $result['groep'] . "</a><br>";
}
}
}
if(is_null($return)){
echo "Er zijn helaas geen resultaten gevonden.";
}
else {
echo $return;
}
?>
php/sendMail.php
+24
View File
@@ -0,0 +1,24 @@
<?php
SESSION_START();
require('connect.php');
if($_SESSION['login']>1){
$receiver = $_POST['name'];
$sender = $_SESSION['name'];
$mail = $_POST['mail'];
$msg = $_POST['msg'];
$msg2 = mysql_real_escape_string($msg, $connection);
$query = "INSERT INTO `bericht` (`sender`, `receiver`, `msg`, `send_time`) VALUES ('$sender', '$receiver', '$msg2', NOW() + INTERVAL 6 HOUR)";
mysql_query($query, $connection) or die('Error 1');
$headers = "From: Sondervick College <docent@kennyboy.nl>";
$msg .= "\n\n___________________________________\nOp dit bericht kan niet gereageerd worden.";
mail($mail, 'Sondervick Bericht', $msg, $headers) or die("Error 2");
echo "Het bericht is succesvol verzonden";
}
else { echo false; }
?>
php/setMail.php
+33
View File
@@ -0,0 +1,33 @@
<?php
SESSION_START();
$name = $_SESSION['name'];
require('connect.php');
$mail = $_POST['mail'];
if(!filter_var($mail, FILTER_VALIDATE_EMAIL)){
header("Location: ../mail/?mf=1");
}
$characters = '123456789abcdefghijklmnpqrstuvwxyzABCDEFGHIJKLMNPQRSTUVWXYZ?!';
$code = '';
for ($i = 0; $i < 12; $i++) {
$code .= $characters[rand(0, strlen($characters) - 1)];
}
$query = "UPDATE `pass_forgot` SET `mail_new`='$mail', `confirm_mail`='$code' WHERE `name`='$name'";
mysql_query($query, $connection) or die('Er is een fout opgetreden');
$headers = "From: Sondervick College <rooster@kennyboy.nl>\r\n";
$headers .= "Content-Type: text/html";
$message = "<html><body>Beste $name,<br><br>Om uw e-mail adres te activeren klikt u op de onderstaande link:<br><a href='http://localhost:8080/php/confirmMail.php?code=$code'>Bevestigen</a>";
$message .= "<br><br> of u vult deze code in op de website:<br><h3>$code</h3></body></html>";
mail($mail, 'Sondervick Bevestiging', $message, $headers) or die("Error");
$_SESSION['mail']=0;
$_SESSION['confirm']=1;
header("Location: ../mail/confirm/");
?>
php/setPass.php
+43
View File
@@ -0,0 +1,43 @@
<?php
require('connect.php');
require('pass.php');
$name = $_POST['name'];
$query = "SELECT * FROM `pass_forgot` WHERE `name`='$name'";
$result_temp = mysql_query($query, $connection) or die('Er is een fout opgetreden');
if(mysql_num_rows($result_temp)<1){ header("Location: ../login/forgot/?nouser=1"); }
else{
$result = mysql_fetch_assoc($result_temp);
$mail = $result['mail'];
if(!strlen($mail)>0){
$query = "UPDATE `pass_forgot` SET `pass_forgot`='1' WHERE `name`='$name'";
mysql_query($query, $connection) or die('Er is een fout opgetreden');
header("Location: ../login/forgot/?nomail=1");
}
else {
$characters = '123456789abcdefghijklmnpqrstuvwxyzABCDEFGHIJKLMNPQRSTUVWXYZ';
$pass = '';
for ($i = 0; $i < 10; $i++) {
$pass .= $characters[rand(0, strlen($characters) - 1)];
}
$pass_hash = password_hash($pass, PASSWORD_BCRYPT);
$query = "UPDATE `login` SET pass='$pass_hash' WHERE `name`='$name'";
mysql_query($query, $connection) or die('Er is een fout opgetreden');
$query2 = "UPDATE `pass_forgot` SET `pass_forgot`='1' WHERE `name`='$name'";
mysql_query($query2, $connection) or die('Er is een fout opgetreden');
$headers = "From: Sondervick College <rooster@kennyboy.nl>\r\n";
$headers .= "Content-Type: text/html";
$message = "<html><body>Beste $name,<br><br>Uw wachtwoord is gewijzigd.<br>Uw nieuwe wachtwoord is nu:<h3>$pass</h3><br><br>De eerst volgende keer dat u inlogt zal u gevraagd worden uw wachtwoord te wijzigen.</body></html>";
mail($mail, 'Sondervick Wachtwoord', $message, $headers) or die("Error");
header("Location: ../login/");
}
}
?>
php/setPass2.php
+27
View File
@@ -0,0 +1,27 @@
<?php
session_start();
require('connect.php');
require('pass.php');
if($_SESSION['login']<2){
die('Geen toegang');
}
$name = $_POST['naam'];
$characters = '123456789abcdefghijklmnpqrstuvwxyzABCDEFGHIJKLMNPQRSTUVWXYZ';
$pass = '';
for ($i = 0; $i < 6; $i++) {
$pass .= $characters[rand(0, strlen($characters) - 1)];
}
$pass_hash = password_hash($pass, PASSWORD_BCRYPT);
$query = "UPDATE `login` SET pass='$pass_hash' WHERE `name`='$name'";
mysql_query($query, $connection) or die('Er is een fout opgetreden');
$query2 = "UPDATE `pass_forgot` SET `pass_forgot`=1 WHERE `name`='$name'";
mysql_query($query2, $connection) or die('Er is een fout opgetreden');
echo "Het nieuwe tijdelijke wachtwoord is <b>$pass</b>";
?>
php/updateMail.php
+41
View File
@@ -0,0 +1,41 @@
<?php
SESSION_START();
require('connect.php');
$name = $_SESSION['name'];
$mail = $_POST['mail'];
if(!filter_var($mail, FILTER_VALIDATE_EMAIL)){
die("Er is een fout opgetreden, herlaad de pagina aub.");
}
$characters = '123456789abcdefghijklmnpqrstuvwxyzABCDEFGHIJKLMNPQRSTUVWXYZ?!';
$code = '';
for ($i = 0; $i < 12; $i++) {
$code .= $characters[rand(0, strlen($characters) - 1)];
}
$query = "UPDATE `pass_forgot` SET `mail_new`='$mail', `confirm_mail`='$code' WHERE `name`='$name'";
mysql_query($query, $connection) or die('Er is een fout opgetreden');
$headers = "From: Sondervick College <rooster@kennyboy.nl>\r\n";
$headers .= "Content-Type: text/html";
$message = "<html><body>Beste $name,<br><br>Om uw e-mail adres te bevestigen klikt u op de onderstaande link:<br><a href='http://localhost:8080/php/confirmMail.php?code=$code'>Bevestigen</a>";
$message .= "<br><br> of u vult deze code in op de website:<br><h3>$code</h3></body></html>";
mail($mail, 'Sondervick Bevestiging', $message, $headers) or die("Error");
?>
<table width='400px' id='table_mail'>
<tr>
<th align='left' colspan='2'><h2>Email Adres bevestigen</h2></th>
</tr><tr>
<td align='left' colspan='2'>Er is een mail gestuurd naar het opgegeven e-mail adres. <font color='#9E0000'>Let op: Deze mail bevind zich waarschijnlijk in uw junk folder!</font> Klink op de link in de mail of vul de code hier in.</td>
</tr><tr>
<td align='left' width='200px'>Code:</td><td><form id='confirmmailform' style='display:inline;'><input type='text' name='code' ></form></td>
</tr><tr>
<th></th><td><button onclick='confirmMail();'>Bevestigen</button></td>
</tr>
</table>
php/updatePass.php
+35
View File
@@ -0,0 +1,35 @@
<?php
session_start();
require('connect.php');
require('pass.php');
$oldpass = $_POST['oldpass'];
$pass1 = $_POST['pass1'];
$pass2 = $_POST['pass2'];
$name = $_SESSION['name'];
if($oldpass=='' || $pass1=='' || $pass2==''){
die('Vul all velden in');
}
$query = "SELECT * FROM login WHERE name='$name'";
$result_query = mysql_query($query, $connection) or die("Er is een fout opgetreden");
while($result = mysql_fetch_assoc($result_query)){
$hash = $result['pass'];
if (password_verify($oldpass, $hash)) {
if ($pass1 === $pass2){
$pass = password_hash($pass1, PASSWORD_BCRYPT);
mysql_query("UPDATE login SET pass='$pass' WHERE name='$name'", $connection);
echo 'Uw wachtwoord is succesvol gewijzigd';
}
else {
die('Wachtwoorden komen niet overeen');
}
}
else {
die('Wachtwoord fout');
}
}
?>
php/updatePass2.php
+34
View File
@@ -0,0 +1,34 @@
<?php
session_start();
require('connect.php');
require('pass.php');
if($_SESSION['pass']==0){
header('Location: ../');
}
$pass1 = $_POST['pass1'];
$pass2 = $_POST['pass2'];
$name = $_SESSION['name'];
if($pass1=='' || $pass2==''){
header('Location: ../login/forgot/reset?nomatch=1');
}
if ($pass1 === $pass2){
$pass = password_hash($pass1, PASSWORD_BCRYPT);
mysql_query("UPDATE login SET pass='$pass' WHERE name='$name'", $connection);
mysql_query("UPDATE pass_forgot SET pass_forgot='0' WHERE name='$name'", $connection);
$_SESSION['pass']=0;
if(strlen($name)==2){
header("Location: ../?page=docent/$name");
}
elseif(strlen($name)>2){
header("Location: ../?page=leerling/$name");
}
}
else {
header('Location: ../login/forgot/reset?nomatch=1');
}
?>