validator.php

<?php
#**************************************************************************
#  openSIS is a free student information system for public and non-public 
#  schools from Open Solutions for Education, Inc. web: www.os4ed.com
#
#  openSIS is  web-based, open source, and comes packed with features that 
#  include student demographic info, scheduling, grade book, attendance, 
#  report cards, eligibility, transcripts, parent portal, 
#  student portal and more.   
#
#  Visit the openSIS web site at http://www.opensis.com to learn more.
#  If you have question regarding this system or the license, please send 
#  an email to info@os4ed.com.
#
#  This program is released under the terms of the GNU General Public License as  
#  published by the Free Software Foundation, version 2 of the License. 
#  See license.txt.
#
#  This program is distributed in the hope that it will be useful,
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#  GNU General Public License for more details.
#
#  You should have received a copy of the GNU General Public License
#  along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
#***************************************************************************************
	include('Redirect_root.php'); 
	include'config.inc.php';
	
	# $v_year = $_SESSION['UserSyear'];
	
	$flag = $_GET['u'];
	$usr = substr($flag, -4);
	
	// ------------------------ For Unique Checking ---------------------------------- //
	$un = substr($flag, 0, -4);
	$un = strtoupper($un);
	// ------------------------ For Unique Checking ---------------------------------- //
         switch ($_GET['validate'])
        {
            case 'pass':
                        $res_pass_chk = mysql_query("SELECT * FROM staff WHERE password = '".md5($_GET['password'])."' AND staff_id!='".$_GET['stfid']."'");
                        $num_pass = mysql_num_rows($res_pass_chk);
                        if($num_pass==0)
                        {
                            echo '1';
                            
                        }
                break;
            default :
	if($usr == 'user')
	{
	#	$result = pg_query("SELECT username FROM staff WHERE syear= $v_year ");
	#	$result = mysql_query("select username from staff");
	#	$result = mysql_query("select username from staff");
		$result = mysql_query("select username from staff union select username from students");
		 
		$xyz = 0;
		while ($row = mysql_fetch_row($result)) 
		{
		  $unames[$xyz] = strtoupper($row[0]); // For Unique Checking.
		  $xyz++;
		}
	
		if ($un != '') 
		{
			if (in_array ($un, $unames)) 
			{
				echo '0';
			} 
			else 
			{
				echo '1';
			}
			exit;
		}
	}
	else
	{
	#	$result = mysql_query("select s.username from students s, student_enrollment se where s.student_id = se.student_id and se.syear = $v_year");
	#	$result = mysql_query("select s.username from students s, student_enrollment se where s.student_id = se.student_id");
	#	$result = mysql_query("select s.username from students s, student_enrollment se where s.student_id = se.student_id");
		
		$result = mysql_query("select s.username from students s, student_enrollment se where s.student_id = se.student_id union select username from staff");
		
		$xyz = 0;
		while ($row = mysql_fetch_row($result)) 
		{
		  $unames[$xyz] = strtoupper($row[0]); // For Unique Checking.
		  $xyz++;
		}
	
		if ($un != '') 
		{	if(is_array($unames)){
			if (in_array ($un, $unames)) 
			{
				echo '0';
			} 
			else 
			{
				echo '1';
			}
			}else{
			echo '1';
			}
			exit;
		}
	}
        }

?>