dashboard.php

<?php
	ob_start();
	session_start();
	require_once 'dbconnect.php';
	
	// redirect to login if not logged in
	if( !isset($_SESSION['user']) ) {
		header("Location: login.php");
		exit;
	}

	function getCluster($val){
		if ($val == "PBM" || $val == "PMK" ||$val == "PFN" || $val == "PHT"){
			return "Principles";
		} elseif ($val == "PFL" || $val == "ACT" ||$val == "FTDM" || $val == "BFS"){
			return "Finance";
		} elseif ($val == "BTDM" || $val == "MTDM" ||$val == "STDM"){
			return "Marketing-Teams";
		} elseif ($val == "AAM"|| $val == "AASM"|| $val == "BSM"|| $val == "FMS"|| $val == "MCS"|| $val == "RMS"|| $val == "SEM"){
			return "Marketing-Singles";
		} elseif ($val == "HLM" || $val == "QSRM" ||$val == "RFSM" || $val == "HTDM"|| $val == "TTDM"){
			return "Hospitality";
		} elseif ($val == "BLTDM" || $val == "HRM"){
			return "Business-Admin";
		}
	}

	// select logged in users detail
	$res = mysql_query("SELECT * FROM users WHERE userId=" . $_SESSION['user']);
	$userRow = mysql_fetch_array($res);
	$exec = false;

	// assign executive privleges 
	if ($userRow["userEmail"] == "1ibrahimirfan@gmail.com" || $userRow["userEmail"] == "laurak8981@gmail.com"){
		$exec = true;
		$clusterManaging = "Principles";
	} elseif ($userRow["userEmail"] == "e.ulhaq@hotmail.com" || $userRow["userEmail"] == "jessica.meng0402@gmail.com"){
		$exec = true;
		$clusterManaging = "Finance";
	} elseif ($userRow["userEmail"] == "aazihassan18@gmail.com" || $userRow["userEmail"] == "missy92009@hotmail.com"){
		$exec = true;
		$clusterManaging = "Marketing-Teams";
	} elseif ($userRow["userEmail"] == "sohpeiwu@gmail.com" || $userRow["userEmail"] == "asdaq_paracha@hotmail.con"){
		$exec = true;
		$clusterManaging = "Marketing-Singles";
	} elseif ($userRow["userEmail"] == "amy.kim162@gmail.com" || $userRow["userEmail"] == "vswinhoe@gmail.com"){
		$exec = true;
		$clusterManaging = "Hospitality";
	} elseif ($userRow["userEmail"] == "nataniaolusanya@gmail.com" || $userRow["userEmail"] == "1zhengjen@hdsb.ca"){
		$exec = true;
		$clusterManaging = "Business-Admin";
	} elseif ($userRow["userEmail"] == "fisherji@hdsb.ca"){
		$admin = true;
		$clusterManaging = "N/A";
	}

	// assign a user cluster
	$currentCluster = getCluster($userRow["userEventAssigned"]);
	
	// handle announcement delete
	$deleteId = $_GET['delId'];
	if ($deleteId !== undefined && $exec){
		$delete_request = mysql_query('DELETE FROM announcements WHERE announceId='.$deleteId);
	}
	
	// assign homework
	if ($currentCluster == "Principles"){
		$homework= "Principles_6_Whole_Homework.php";
	} elseif ($currentCluster == "Finance") {
		$homework= "Finance_2_Split_Homework.php";
	} elseif ($currentCluster == "Business-Admin") {
		$homework= "Business-Admin_3_Split_Homework.php";
	} elseif ($currentCluster == "Marketing-Teams" || $currentCluster == "Marketing-Singles") {
		$homework= "Marketing_1_Split_Homework.php";
	} elseif ($currentCluster == "Hospitality") {
		$homework= "Hospitality_3_Split_Homework.php";
	}

	// assign score for the week
	$week = "score_6";
	$res_exam_check = mysql_query("SELECT * FROM exams WHERE userId=" . $_SESSION['user']);
	$exam_check = mysql_fetch_array($res_exam_check);
	if ($exam_check[$week] !== "0"){
		$exam_status="img/complete.png";
	} else {
		$exam_status="img/incomplete.png";
	}
?>
<!--
	/$$$$$$ /$$$$$$$  /$$$$$$$   /$$$$$$  /$$   /$$ /$$$$$$ /$$      /$$       /$$$$$$ /$$$$$$$  /$$$$$$$$ /$$$$$$  /$$   /$$
	|_  $$_/| $$__  $$| $$__  $$ /$$__  $$| $$  | $$|_  $$_/| $$$    /$$$      |_  $$_/| $$__  $$| $$_____//$$__  $$| $$$ | $$
	 | $$  | $$  \ $$| $$  \ $$| $$  \ $$| $$  | $$  | $$  | $$$$  /$$$$        | $$  | $$  \ $$| $$     | $$  \ $$| $$$$| $$
	 | $$  | $$$$$$$ | $$$$$$$/| $$$$$$$$| $$$$$$$$  | $$  | $$ $$/$$ $$        | $$  | $$$$$$$/| $$$$$  | $$$$$$$$| $$ $$ $$
	 | $$  | $$__  $$| $$__  $$| $$__  $$| $$__  $$  | $$  | $$  $$$| $$        | $$  | $$__  $$| $$__/  | $$__  $$| $$  $$$$
	 | $$  | $$  \ $$| $$  \ $$| $$  | $$| $$  | $$  | $$  | $$\  $ | $$        | $$  | $$  \ $$| $$     | $$  | $$| $$\  $$$
	/$$$$$$| $$$$$$$/| $$  | $$| $$  | $$| $$  | $$ /$$$$$$| $$ \/  | $$       /$$$$$$| $$  | $$| $$     | $$  | $$| $$ \  $$
	|______/|_______/ |__/  |__/|__/  |__/|__/  |__/|______/|__/     |__/      |______/|__/  |__/|__/     |__/  |__/|__/  \__/
	/$$$$$$ /$$$$$$$  /$$   /$$  /$$$$$$        /$$$$$$$  /$$$$$$$$  /$$$$$$   /$$$$$$
	|_  $$_/| $$__  $$| $$  | $$ /$$__  $$      | $$__  $$| $$_____/ /$$__  $$ /$$__  $$
	 | $$  | $$  \ $$| $$  | $$| $$  \__/      | $$  \ $$| $$      | $$  \__/| $$  \ $$
	 | $$  | $$$$$$$/| $$$$$$$$|  $$$$$$       | $$  | $$| $$$$$   | $$      | $$$$$$$$
	 | $$  | $$__  $$| $$__  $$ \____  $$      | $$  | $$| $$__/   | $$      | $$__  $$
	 | $$  | $$  \ $$| $$  | $$ /$$  \ $$      | $$  | $$| $$      | $$    $$| $$  | $$
	/$$$$$$| $$  | $$| $$  | $$|  $$$$$$/      | $$$$$$$/| $$$$$$$$|  $$$$$$/| $$  | $$
	|______/|__/  |__/|__/  |__/ \______/       |_______/ |________/ \______/ |__/  |__/
	-->
<html>
	<head>
		<title> IRHS DECA </title>
		<!-- Add jQuery library -->
		<link rel="icon" href="img/favicon.ico" sizes="16x16">
		<link rel="stylesheet" type="text/css" href="css/main.css">
		</link>
		<meta charset='utf-8'>
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<link rel="stylesheet" href="css/cssmenu/styles.css">
		<link rel="stylesheet" href="https://fonts.googleapis.com/icon?family=Material+Icons">
		<link rel="stylesheet" href="https://code.getmdl.io/1.1.3/material.blue_grey-red.min.css">
		<script type="text/javascript" src="http://code.jquery.com/jquery-latest.min.js"></script>
		<script defer src="https://code.getmdl.io/1.1.3/material.min.js"></script>
	</head>
	<body>
		<div id="wrapper">

			<!-- Mobile menu -->
			<div id="mobile_menu">
				<img id="menu-logo" src="img/logo2.png" height="40" align="left">
				<img id="menu-bars" src="img/menu_bars.png" height="32" align="right">
			</div>

			<!-- Mobile dropdown -->
			<ul id="mobile_dropdown" style="display: none;">
				<li><a href='index.php'><span>Home</span></a></li>
				<li class="active"><a href='about.php'><span>About DECA</span></a></li>
				<li><a href='events.php'><span>Events</span></a></li>
				<li><a href='dashboard.php'><span>Dashboard</span></a></li>
				<li><a href='announcements.php'><span>Announcements</span></a></li>
				<li><a href='dates.php'><span>Schedules</span></a></li>
				
				<!-- Display menu according to user login -->
				<?php if (!isset($_SESSION['user'])) { ?>
					<li><a href='register.php'><span>Register</span></a></li>
					<li class='last'><a href='login.php'><span>Login</span></a></li>
				<?php } else { ?>
					<li><a href='exams.php'><span>Exams</span></a></li>
					<li class='last'><a href='logout.php?logout'><span>Logout</span></a></li>
				<?php
					}
				?>
			</ul>

			<!-- Desktop menu -->
			<div id='cssmenu'>
				<ul>
					<li><a href='index.php'><span>Home</span></a></li>
					<li><a href='about.php'><span>About DECA</span></a></li>
					<li><a href='events.php'><span>Events</span></a></li>
					<li class="active"><a href='dashboard.php'><span>Dashboard</span></a></li>
					<li><a href='announcements.php'><span>Announcements</span></a></li>
					<li><a href='dates.php'><span>Schedules</span></a></li>
					<li><a href='exams.php'><span>Exams</span></a></li>
					<li class='last'><a href='logout.php?logout'><span>Logout</span></a></li>
				</ul>
			</div>
			</br>
			<br/>

			<!-- Store userid in DOM -->
			<div class='userid_block' style='display: none;'><?php echo $_SESSION['user']; ?></div>

			<!-- show user profile bar -->
			<div class="content">
				<div class= "profile">
					<img src="img/avatar.png" align="left" height="140"/>
					<h3><?php echo $userRow['userFName']; echo " "; echo $userRow['userLName'] ?> </h3>
					<h4 id="event_assigned_code"></h4>
				</div>
				<br/>

				<!-- Show weekly homework -->
				<div id="homework">
					<h4>Your Weekly Homework:</h4>
					<img id="complete" src="<?php echo $exam_status; ?>" align="right" height="35" />
					<h5 id="exam_link"><u><a href='<?php echo $homework;?>' style="color: black;">
						<?php echo $currentCluster; echo " Exam";?></a></u></h5>
				</div>
				<br/>

			<?php
				if ($exec || $admin) {
			?>
				<!-- if the user is exec, show exam scores for the cluster -->
				<h4> Exam Scores for <?php echo $clusterManaging; ?></h4>
				<table class="mdl-data-table mdl-js-data-table" id="exam_scores">
					<thead>
						<tr>
							<td width="100%">User</td>
							<td>Week 1</td>
							<td>Week 2</td>
							<td>Week 3</td>
							<td>Week 4</td>
							<td>Week 5</td>
							<td>Week 6</td>
						</tr>
					</thead>
					<tbody>
				<?php
					// select exams detail based on privleges
					if ($admin){
						$res = mysql_query("SELECT * FROM exams");
					} else {
						$res = mysql_query("SELECT * FROM exams WHERE cluster='$clusterManaging'");
					}
					
					// display exam scores
					while ($abc = mysql_fetch_array($res, MYSQL_ASSOC)) {
				?>
						<tr><td> 
						<!-- User name -->
						<?php
							$res_users = mysql_query("SELECT * FROM users WHERE userId=". $abc["userId"]);
							$user_exams = mysql_fetch_array($res_users);
							echo $user_exams["userFName"];
							echo " ";
							echo $user_exams["userLName"]; 
						?>
							
						<!-- Display every score -->
						<?php for ($w = 1; $w <= 6; $w++){ ?>	
								<td>
						<?php
								if ($abc["score_" . $w] !== "0"){
									echo $abc["score_" . $w]; echo "%";
								} else {
									echo "-";
								}	
						?>
								</td>
						<?php } ?>
							
						</tr>

					<?php
				}
				mysql_free_result($res);
			?>
			</tbody></table>

	<!-- Handle announcement post request -->
	<?php
		if(isset($_POST['submit'])) {
			// escape the data
			$title = mysql_real_escape_string(strip_tags(trim($_POST['title'])));
			$body = mysql_real_escape_string(strip_tags(trim($_POST['body'])));
			$error = false;

			// Error check
			if (empty($title) || empty($body)){
				$error = true;
				$msg = "You must complete all fields.";
			}
			if (!$error){
				// remove all quotations to sanitize, then insert to db
				$new_body = str_replace("'", "''", "$body");
				$new_body = str_replace("\n", "", "$new_body");
				$query = "INSERT INTO announcements(title, body, cluster) VALUES('$title', '$new_body', '$clusterManaging')";
				$res = mysql_query($query);
			}
		}
	}
				
	if ($exec && !$admin) { ?>
		<!-- Form to post announcements for cluster -->
		<h4><?php echo $clusterManaging; echo " Announcements "; echo $msg; ?></h4>
		<h5 style="color: red;"><?php echo $msg ?></h5>
				
		<form id="post_announcements" method="post">
			<div class="mdl-textfield mdl-js-textfield mdl-textfield--floating-label">
				<input class="mdl-textfield__input" type="text" id="title" name="title">
				<label class="mdl-textfield__label" for="title">Title</label>
			</div>
			</br></br>

			<div class="mdl-textfield mdl-js-textfield">
				<textarea class="mdl-textfield__input" type="text" rows="3" id="body" name="body"></textarea>
				<label class="mdl-textfield__label" for="body">Body</label>
			</div>
			<input id="submit_ann" name="submit" class="mdl-button mdl-js-button mdl-button--raised mdl-js-ripple-effect mdl-button--primary" type="submit" value="Post">
			</input>
		</form>
	
		<?php
			// display the posted announcements for the cluster managing
			$res_cm = mysql_query("SELECT * FROM announcements WHERE cluster='".$clusterManaging."'");
			while ($ann = mysql_fetch_array($res_cm, MYSQL_ASSOC)) {
				$data[] = $ann;
			}
			$data = array_reverse($data,true);
			foreach ($data as $announcement){
		?>
				<div class="announce wordwrap">
					<img class="delete_ann" src="img/x.png" onClick="self.location='http://www.irhsdeca.xyz/dashboard.php?delId=<?php echo $announcement['announceId']; ?>'">
					<h4 id="ann-title"><?php echo $announcement["title"]; ?></h4>
					<h5 id="ann-body"><?php echo $announcement["body"]; ?></h5>
					<h6 id="ann-date"><?php echo $announcement["datePosted"]; ?></h6>
				</div>
		<?php
			}
			mysql_free_result($res_cm);
						   
			// display the participating cluster as well			   
			if ($currentCluster !== $clusterManaging){
		?>
				<h4><?php echo $currentCluster; echo " Announcements";?></h4>
			<?php
				$res_cc = mysql_query("SELECT * FROM announcements WHERE cluster='".$currentCluster."'");
				while ($ann = mysql_fetch_array($res_cc, MYSQL_ASSOC)) {
					$data2[] = $ann;
				}
				$data2 = array_reverse($data3,true);
				foreach ($data2 as $announcement){
			?>
					<div class="announce wordwrap">
						<h4 id="ann-title"><?php echo $announcement["title"]; ?></h4>
						<h5 id="ann-body"><?php echo $announcement["body"]; ?></h5>
						<h6 id="ann-date"><?php echo $announcement["datePosted"]; ?></h6>
					</div>
			<?php
				}
				mysql_free_result($res_cc);
			}
		} else {
	?>
			<!-- Display participating cluster announcements for non-execs -->
			<h4><?php echo $currentCluster; echo " Announcements"; ?></h4>
		<?php
			$res_cc = mysql_query("SELECT * FROM announcements WHERE cluster='".$currentCluster."'");
			while ($ann = mysql_fetch_array($res_cc, MYSQL_ASSOC)) {
				$data3[] = $ann;
			}
			$data3 = array_reverse($data2,true);
			foreach ($data3 as $announcement){
		?>
				<div class="announce wordwrap">
					<h4 id="ann-title"><?php echo $announcement["title"]; ?></h4>
					<h5 id="ann-body"><?php echo $announcement["body"]; ?></h5>
					<h6 id="ann-date"><?php echo $announcement["datePosted"]; ?></h6>
				</div>
		<?php
			}
			mysql_free_result($res_cc);
		}
		?>
			</div>

			<!-- Footer -->
			<div class="footer">
				<img id="altlogo" src="img/logo_alt.png" align="left" />
				<img id="fbimg" src="img/facebook-box.png" align="right" />
				<h6><a href="http://www.ibrahimirfan.com" style="color: white;">Ibrahim Irfan</a></h6>
			</div>
		</div>
	</body>

	<script type="text/javascript" src="js/menu.js"></script>
	<script type="text/javascript">
		// handle the users event
		var user_event = "<?php echo $userRow['userEventAssigned']; ?>";
		var user_event_code = user_event.substring(user_event.lastIndexOf("(")+1,user_event.lastIndexOf(")"));
		document.getElementById('event_assigned_code').innerHTML = user_event;
	</script>
</html>