Side.php

<?php
#**************************************************************************
#  openSIS is a free student information system for public and non-public 
#  schools from Open Solutions for Education, Inc. web: www.os4ed.com
#
#  openSIS is  web-based, open source, and comes packed with features that 
#  include student demographic info, scheduling, grade book, attendance, 
#  report cards, eligibility, transcripts, parent portal, 
#  student portal and more.   
#
#  Visit the openSIS web site at http://www.opensis.com to learn more.
#  If you have question regarding this system or the license, please send 
#  an email to info@os4ed.com.
#
#  This program is released under the terms of the GNU General Public License as  
#  published by the Free Software Foundation, version 2 of the License. 
#  See license.txt.
#
#  This program is distributed in the hope that it will be useful,
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#  GNU General Public License for more details.
#
#  You should have received a copy of the GNU General Public License
#  along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
#***************************************************************************************

include 'functions/SqlSecurityFnc.php';

if (isset($_POST['school']))
    $_POST['school'] = sqlSecurityFilter($_POST['school'], 'no');
if (isset($_REQUEST['school']))
    $_REQUEST['school'] = sqlSecurityFilter($_REQUEST['school'], 'no');
if (isset($_REQUEST['modcat']))
    $_REQUEST['modcat'] = sqlSecurityFilter($_REQUEST['modcat'], 'no');

$var1 = explode("?", $_SERVER['REQUEST_URI']);
include("functions/ParamLibFnc.php");
$url = validateQueryString($var1[1]);
if ($url === FALSE || !$var1[1]) {
    header('Location: index.php');
}
include "Warehouse.php";
$tmp_REQUEST = $_REQUEST;
$_SESSION['Side_PHP_SELF'] = "Side.php";

$old_school = UserSchool();
$old_syear = UserSyear();
$old_period = UserCoursePeriod();

$btnn = optional_param('btnn', '', PARAM_SPCL);

$nsc = optional_param('nsc', '', PARAM_SPCL);
unset($_SESSION['smc']);
unset($_SESSION['g']);
unset($_SESSION['p']);
unset($_SESSION['smn']);
unset($_SESSION['sm']);
unset($_SESSION['sma']);
unset($_SESSION['smv']);
unset($_SESSION['s']);
unset($_SESSION['_search_all']);
unset($_SESSION['custom_count_sql']);
unset($_SESSION['inactive_stu_filter']);
unset($_SESSION['new_sql']);
unset($_SESSION['newsql']);
unset($_SESSION['newsql1']);
unset($_SESSION['ASSIGNMENT_DESCRIPTION']);
if (isset($_SESSION['stu_search']['sql'])) {
    unset($_SESSION['stu_search']);
}
if (isset($_SESSION['staf_search']['sql'])) {
    unset($_SESSION['staf_search']['sql']);
}



if ((optional_param('school', '', PARAM_SPCL) && optional_param('school', '', PARAM_SPCL) != $old_school) || (optional_param('period', '', PARAM_SPCL) && optional_param('period', '', PARAM_SPCL) != $old_period)) {
    unset($_SESSION['student_id']);
    $_SESSION['unset_student'] = true;
    unset($_SESSION['staff_id']);

    unset($_REQUEST['mp']);
}


if (optional_param('modfunc', '', PARAM_SPCL) == 'update' && $_POST) {

    //===================



    if (User('PROFILE') == 'teacher' && (optional_param('school', '', PARAM_SPCL) != $old_school || $nsc == 'NT')) {

        if (optional_param('act', '', PARAM_SPCL) == 'school') {

            $_SESSION['UserSchool'] = optional_param('school', '', PARAM_SPCL);
            DBQuery("UPDATE staff SET CURRENT_SCHOOL_ID='" . UserSchool() . "' WHERE STAFF_ID='" . User('STAFF_ID') . "'");

            unset($_SESSION['UserSyear']);
            unset($_SESSION['UserMP']);
            unset($_SESSION['UserSubject']);
            unset($_SESSION['UserCourse']);
            unset($_SESSION['UserCoursePeriod']);

            $school_years_RET = DBGet(DBQuery("SELECT MAX(sy.SYEAR) AS SYEAR FROM school_years sy,staff s INNER JOIN staff_school_relationship ssr USING(staff_id) WHERE ssr.school_id=sy.school_id AND sy.syear=ssr.syear AND sy.SCHOOL_ID=" . UserSchool() . " AND  STAFF_ID='$_SESSION[STAFF_ID]'"));
            $_SESSION['UserSyear'] = $school_years_RET[1]['SYEAR'];

            $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_quarters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
            if (!isset($_SESSION['UserMP'])) {
                $_SESSION['UserMP'] = GetCurrentMP('QTR', DBDate());
            }
            if (!$RET) {
                $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_semesters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
                if (!isset($_SESSION['UserMP'])) {
                    $_SESSION['UserMP'] = GetCurrentMP('SEM', DBDate());
                }
            }

            if (!$RET) {
                $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_years WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
                if (!isset($_SESSION['UserMP'])) {
                    $_SESSION['UserMP'] = GetCurrentMP('FY', DBDate());
                }
            }
        } elseif (optional_param('act', '', PARAM_SPCL) == 'syear') {
            unset($_SESSION['student_id']);
            unset($_SESSION['_REQUEST_vars']['student_id']);
            $_SESSION['UserSyear'] = optional_param('syear', '', PARAM_SPCL);
            unset($_SESSION['UserMP']);
            unset($_SESSION['UserSubject']);
            unset($_SESSION['UserCourse']);
            unset($_SESSION['UserCoursePeriod']);
            $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_quarters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
            if (!isset($_SESSION['UserMP'])) {
                $_SESSION['UserMP'] = GetCurrentMP('QTR', DBDate());
            }
            if (!$RET) {
                $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_semesters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
                if (!isset($_SESSION['UserMP'])) {
                    $_SESSION['UserMP'] = GetCurrentMP('SEM', DBDate());
                }
            }

            if (!$RET) {
                $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_years WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
                if (!isset($_SESSION['UserMP'])) {
                    $_SESSION['UserMP'] = GetCurrentMP('FY', DBDate());
                }
            }
        } elseif (optional_param('act', '', PARAM_SPCL) == 'mp') {

            $_SESSION['UserMP'] = optional_param('mp', '', PARAM_SPCL);
            unset($_SESSION['UserSubject']);
            unset($_SESSION['UserCourse']);
            unset($_SESSION['UserCoursePeriod']);
        } elseif (optional_param('act', '', PARAM_SPCL) == 'subject') {
            $_SESSION['UserSubject'] = optional_param('subject', '', PARAM_SPCL);
            unset($_SESSION['UserCourse']);
            unset($_SESSION['UserCoursePeriod']);
            unset($_SESSION['CpvId']);
        } elseif (optional_param('act', '', PARAM_SPCL) == 'course') {
            $_SESSION['UserCourse'] = clean_param($_REQUEST['course'], PARAM_NOTAGS);
            unset($_SESSION['UserCoursePeriod']);
            unset($_SESSION['CpvId']);
            unset($_SESSION['UserCoursePeriod']);
        } elseif (optional_param('act', '', PARAM_SPCL) == 'period') {
            $_SESSION['CpvId'] = optional_param('period', '', PARAM_SPCL);
        }
    }

    //===================

    if (User('PROFILE') == 'admin' && (clean_param($_REQUEST['school'], PARAM_NOTAGS) != $old_school || $nsc == 'NT')) {


        if ($_POST['school']) {
            $_SESSION['UserSchool'] = clean_param($_REQUEST['school'], PARAM_NOTAGS);
            DBQuery("UPDATE staff SET CURRENT_SCHOOL_ID='" . UserSchool() . "' WHERE STAFF_ID='" . $_SESSION['STAFF_ID'] . "'");
            unset($_SESSION['UserSyear']);
            unset($_SESSION['UserMP']);

            $school_years_RET = DBGet(DBQuery("SELECT MAX(sy.SYEAR) AS SYEAR FROM school_years sy,staff_school_relationship ssr WHERE ssr.SYEAR=sy.SYEAR AND sy.SCHOOL_ID=" . UserSchool() . " AND ssr.STAFF_ID='$_SESSION[STAFF_ID]'"));
            $_SESSION['UserSyear'] = $school_years_RET[1]['SYEAR'];

            $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_quarters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
            if (!isset($_SESSION['UserMP'])) {
                $_SESSION['UserMP'] = GetCurrentMP('QTR', DBDate());
            }
            if (!$RET) {
                $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_semesters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
                if (!isset($_SESSION['UserMP'])) {
                    $_SESSION['UserMP'] = GetCurrentMP('SEM', DBDate());
                }
            }

            if (!$RET) {
                $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_years WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
                if (!isset($_SESSION['UserMP'])) {
                    $_SESSION['UserMP'] = GetCurrentMP('FY', DBDate());
                }
            }
        } elseif ($_POST['syear']) {
            unset($_SESSION['student_id']);
            unset($_SESSION['_REQUEST_vars']['student_id']);
            $_SESSION['UserSyear'] = optional_param('syear', '', PARAM_SPCL);
            unset($_SESSION['UserMP']);
            $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_quarters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
            if (!isset($_SESSION['UserMP'])) {
                $_SESSION['UserMP'] = GetCurrentMP('QTR', DBDate());
            }
            if (!$RET) {
                $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_semesters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
                if (!isset($_SESSION['UserMP'])) {
                    $_SESSION['UserMP'] = GetCurrentMP('SEM', DBDate());
                }
            }

            if (!$RET) {
                $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_years WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
                if (!isset($_SESSION['UserMP'])) {
                    $_SESSION['UserMP'] = GetCurrentMP('FY', DBDate());
                }
            }
        } elseif ($_POST['mp']) {
            $_SESSION['UserMP'] = optional_param('mp', '', PARAM_SPCL);
        }
    }



    if (User('PROFILE') == 'parent' || User('PROFILE') == 'student') {
        if ($_POST['syear']) {
            $_SESSION['UserSyear'] = optional_param('syear', '', PARAM_SPCL);
            unset($_SESSION['UserMP']);
            $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_quarters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
            if (!isset($_SESSION['UserMP'])) {
                $_SESSION['UserMP'] = GetCurrentMP('QTR', DBDate());
            }
            if (!$RET) {
                $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_semesters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
                if (!isset($_SESSION['UserMP'])) {
                    $_SESSION['UserMP'] = GetCurrentMP('SEM', DBDate());
                }
            }

            if (!$RET) {
                $RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_years WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
                if (!isset($_SESSION['UserMP'])) {
                    $_SESSION['UserMP'] = GetCurrentMP('FY', DBDate());
                }
            }
        } elseif ($_POST['student_id']) {
            unset($_SESSION['UserMP']);
            $resolved_student_id = OpenSISResolveAuthorizedStudentId(optional_param('student_id', '', PARAM_ALPHANUM));

            if (!$resolved_student_id) {
                OpenSISDenyAccess();
            }

            $_SESSION['student_id'] = $resolved_student_id;

            $student_school_id = OpenSISGetStudentCurrentSchool($resolved_student_id);

            if ($student_school_id) {
                $_SESSION['UserSchool'] = $student_school_id;
            }
        } elseif ($_POST['mp']) {
            $_SESSION['UserMP'] = optional_param('mp', '', PARAM_SPCL);
        }
    }
    $ses_modname['vars']['modname'] = 'miscellaneous/Portal.php';
    unset($_SESSION['_REQUEST_vars']);
    echo "<script language=javascript>window.location.href='" . str_replace('&amp;', '&', PreparePHP_SELF($ses_modname['vars'])) . "';</script>";
} //---------------------------- Updaet End-------------------------------------------



if (!$_SESSION['student_id'] && User('PROFILE') == 'student')
    $_SESSION['student_id'] = $_SESSION['STUDENT_ID'];

if (!$_SESSION['UserSchool']) {
    if (User('PROFILE') == 'admin' && (!User('SCHOOLS') || strpos(User('SCHOOLS'), ',' . User('CURRENT_SCHOOL_ID') . ',') !== false))
        $_SESSION['UserSchool'] = User('CURRENT_SCHOOL_ID');
    elseif (User('PROFILE') == 'student')
        $_SESSION['UserSchool'] = trim(User('SCHOOLS'), ',');
    elseif (User('PROFILE') == 'teacher') {

        $mp = GetAllMP('QTR', UserMP());

        if (!isset($mp))
            $mp = GetAllMP('SEM', UserMP());

        if (!isset($mp))
            $mp = GetAllMP('FY', UserMP());


        $QI = DBQuery("SELECT cp.SCHOOL_ID FROM course_periods cp, school_periods sp,courses c WHERE c.COURSE_ID=cp.COURSE_ID AND cp.PERIOD_ID=sp.PERIOD_ID AND cp.SYEAR='" . UserSyear() . "' AND cp.TEACHER_ID='" . User('STAFF_ID') . "''" . (UserMP() ? ' AND cp.MARKING_PERIOD_ID IN (' . $mp . ')' : '') . "' ORDER BY sp.SORT_ORDER LIMIT 1");
        $RET = DBGet($QI);
        $_SESSION['UserSchool'] = $RET[1]['SCHOOL_ID'];
    }
}


if ((optional_param('school', '', PARAM_SPCL) && optional_param('school', '', PARAM_SPCL) != $old_school) || (optional_param('syear', '', PARAM_SPCL) && optional_param('syear', '', PARAM_SPCL) != $old_syear)) {
    unset($_SESSION['UserPeriod']);
    unset($_SESSION['UserCoursePeriod']);
}


if (optional_param('student_id', '', PARAM_ALPHANUM) == 'new') {
    unset($_SESSION['student_id']);
    unset($_SESSION['students_order']);
    unset($_SESSION['_REQUEST_vars']['student_id']);
    unset($_SESSION['_REQUEST_vars']['search_modfunc']);

    #------------- New added ----------------------------#

    if ($_SESSION['_REQUEST_vars']['modfunc'] == 'choose_course')
        unset($_SESSION['_REQUEST_vars']['modfunc']);
    #------------- New added ----------------------------#
    #------------- New added on 09.12.2011 For removing old date----------------------------#
    if ($_SESSION['_REQUEST_vars']['modname'] == 'attendance/Administration.php') {
        unset($_SESSION['_REQUEST_vars']['month_date']);
        unset($_SESSION['_REQUEST_vars']['day_date']);
        unset($_SESSION['_REQUEST_vars']['year_date']);
    }
    #------------- New added on 09.12.2011 ----------------------------#

    echo "<script language=javascript>window.location.href='" . str_replace('&amp;', '&', PreparePHP_SELF($_SESSION['_REQUEST_vars'])) . "';</script>";
}

if (optional_param('school_id', '', PARAM_ALPHANUM) == 'new') {
    unset($_SESSION['UserSchool']);
    echo "<script language=javascript>window.location.href='" . str_replace('&amp;', '&', PreparePHP_SELF($_SESSION['_REQUEST_vars'])) . "';</script>";
}


if (optional_param('staff_id', '', PARAM_ALPHANUM) == 'new') {
    unset($_SESSION['miss_attn']);
    unset($_SESSION['staff_id']);
    unset($_SESSION['_REQUEST_vars']['staff_id']);
    unset($_SESSION['_REQUEST_vars']['search_modfunc']);
    $usr_modname['vars']['modname'] = $_SESSION['_REQUEST_vars']['modname'];
    unset($_SESSION['_REQUEST_vars']);
    echo "<script language=javascript>window.location.href='" . str_replace('&amp;', '&', PreparePHP_SELF($usr_modname['vars'])) . "'</script>";
}
unset($_REQUEST['modfunc']);

echo "
<HTML>
	<head>
		<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />
		<meta http-equiv=\"Content-Style-Type\" content=\"text/css\" />
		<link rel=stylesheet type=\"text/css\" href=\"styles/Stylesheet.css\">
		<script language=\"JavaScript\" type=\"text/javascript\">
		
		</script>
		<title>" . Config('TITLE') . "</title>
	</head>
	<BODY background=assets/themes/" . Preferences('THEME') . "/bg.jpg leftmargin=6 marginwidth=4 topmargin=0 " . (clean_param($_REQUEST['modcat'], PARAM_NOTAGS) ? "onload=openMenu('" . clean_param($_REQUEST['modcat'], PARAM_NOTAGS) . "');" : '') . ">";

// User Information
echo "<TABLE border=0 cellpadding=0 cellspacing=0 width=100%><TR><TD height=30>";
echo '<A HREF=index.php target=_top>' . DrawPNG('themes/' . Preferences('THEME') . '/logo.png', 'border=0 width=160') . '</A>';
echo "</TD></TR><TR>";
echo "<TD class=BoxContents style='border: inset #C9C9C9 2px; background-image:url(\"assets/bg.gif\")' width=100% valign=top>
	<FORM action=Side.php?modfunc=update method=POST>
	<INPUT type=hidden name=modcat value='' id=modcat_input>
	<b>" . User('NAME') . "</b>
	<BR>" . date('l F j, Y') . "
	<BR>";
if (User('PROFILE') == 'admin') {
    $schools = substr(str_replace(",", "','", User('SCHOOLS')), 2, -2);
    $QI = DBQuery("SELECT ID,TITLE FROM schools" . ($schools ? " WHERE ID IN ($schools)" : ''));
    $RET = DBGet($QI);



    echo "<SELECT name=school onChange='document.forms[0].submit();' style='width:150;'>";
    foreach ($RET as $school)
        echo "<OPTION value=$school[ID]" . ((UserSchool() == $school['ID']) ? ' SELECTED' : '') . ">" . $school['TITLE'] . "</OPTION>";

    echo "</SELECT><BR>";
}

if (1) {
    if (User('PROFILE') != 'student')
        $sql = "SELECT DISTINCT sy.SYEAR FROM school_years sy,staff s,staff_school_relationship ssr, login_authentication la WHERE s.STAFF_ID=la.USER_ID AND s.PROFILE_ID=la.PROFILE_ID AND ssr.SYEAR=sy.SYEAR AND s.STAFF_ID=ssr.STAFF_ID AND la.USERNAME=(SELECT USERNAME FROM login_authentication WHERE USER_ID='$_SESSION[STAFF_ID]' AND PROFILE_ID='$_SESSION[PROFILE_ID]')";
    else
        $sql = "SELECT DISTINCT sy.SYEAR FROM school_years sy,student_enrollment se WHERE se.SYEAR=sy.SYEAR AND se.STUDENT_ID='$_SESSION[STUDENT_ID]'";
    $years_RET = DBGet(DBQuery($sql));
} else
    $years_RET = array(1 => array('SYEAR' => "$DefaultSyear"));

echo "<SELECT name=syear onChange='document.forms[0].submit();'>";
foreach ($years_RET as $year)
    echo "<OPTION value=$year[SYEAR]" . ((UserSyear() == $year['SYEAR']) ? ' SELECTED' : '') . ">$year[SYEAR]-" . ($year['SYEAR'] + 1) . "</OPTION>";
echo '</SELECT><BR>';

if (User('PROFILE') == 'parent') {
    $RET = DBGet(DBQuery("SELECT sju.STUDENT_ID, CONCAT(s.LAST_NAME,', ',s.FIRST_NAME) AS FULL_NAME,se.SCHOOL_ID FROM students s,students_join_people sju, student_enrollment se WHERE s.STUDENT_ID=sju.STUDENT_ID AND sju.PERSON_ID='" . User('STAFF_ID') . "' AND se.SYEAR=" . UserSyear() . " AND se.STUDENT_ID=sju.STUDENT_ID AND (('" . DBDate() . "' BETWEEN se.START_DATE AND se.END_DATE OR se.END_DATE IS NULL) AND '" . DBDate() . "'>=se.START_DATE)"));

    $resolved_student_id = OpenSISResolveAuthorizedStudentId(UserStudentID());

    if (!$resolved_student_id && count($RET)) {
        $resolved_student_id = $RET[1]['STUDENT_ID'];
    }

    if ($resolved_student_id) {
        $_SESSION['student_id'] = $resolved_student_id;

        $student_school_id = OpenSISGetStudentCurrentSchool($resolved_student_id);

        if ($student_school_id) {
            $_SESSION['UserSchool'] = $student_school_id;
        }
    }

    echo "<SELECT name=student_id onChange='document.forms[0].submit();'>";
    if (count($RET)) {
        foreach ($RET as $student) {
            echo "<OPTION value=$student[STUDENT_ID]" . ((UserStudentID() == $student['STUDENT_ID']) ? ' SELECTED' : '') . ">" . $student['FULL_NAME'] . "</OPTION>";
            if (UserStudentID() == $student['STUDENT_ID'])
                $_SESSION['UserSchool'] = $student['SCHOOL_ID'];
        }
    }
    echo "</SELECT><BR>";

    if (!UserMP())
        $_SESSION['UserMP'] = GetCurrentMP('QTR', DBDate());
}



$RET = DBGet(DBQuery("SELECT MARKING_PERIOD_ID,TITLE FROM school_quarters WHERE SCHOOL_ID='" . UserSchool() . "' AND SYEAR='" . UserSyear() . "' ORDER BY SORT_ORDER"));
echo "<SELECT name=mp onChange='document.forms[0].submit();'>";
if (count($RET)) {
    if (!UserMP())
        $_SESSION['UserMP'] = $RET[1]['MARKING_PERIOD_ID'];

    foreach ($RET as $quarter)
        echo "<OPTION value=$quarter[MARKING_PERIOD_ID]" . (UserMP() == $quarter['MARKING_PERIOD_ID'] ? ' SELECTED' : '') . ">" . $quarter['TITLE'] . "</OPTION>";
}
echo "</SELECT>";
echo '</FORM>';
if (UserStudentID() && User('PROFILE') != 'parent' && User('PROFILE') != 'student') {
    $RET = DBGet(DBQuery("SELECT FIRST_NAME,LAST_NAME,MIDDLE_NAME,NAME_SUFFIX FROM students WHERE STUDENT_ID='" . UserStudentID() . "'"));


    echo '<TABLE border=0 cellpadding=0 cellspacing=0 width=100%><TR><TD width=19 valign=middle><A HREF=Side.php?student_id=new&modcat=' . optional_param('modcat', '', PARAM_SPCL) . '><IMG SRC=assets/x.gif height=17 border=0></A></TD><TD ><B><A HREF=Modules.php?modname=students/Student.php&student_id=' . UserStudentID() . ' target=body><font color=#FFFFFF size=-2>' . $RET[1]['FIRST_NAME'] . '&nbsp;' . ($RET[1]['MIDDLE_NAME'] ? $RET[1]['MIDDLE_NAME'] . ' ' : '') . $RET[1]['LAST_NAME'] . '&nbsp;' . $RET[1]['NAME_SUFFIX'] . '</font></A></B></TD></TR></TABLE>';
}
if (UserStaffID() && User('PROFILE') == 'admin') {
    if (UserStudentID())
        echo '<IMG SRC=assets/pixel_trans.gif height=2>';
    $RET = DBGet(DBQuery("SELECT FIRST_NAME,LAST_NAME FROM staff WHERE STAFF_ID='" . UserStaffID() . "'"));


    echo '<TABLE border=0 cellpadding=0 cellspacing=0 width=100%><TR><TD bgcolor=#336633 width=19 valign=middle><A HREF=Side.php?staff_id=new&modcat=' . optional_param('modcat', '', PARAM_SPCL) . '><IMG SRC=assets/x.gif height=17 border=0></A></TD><TD bgcolor=#336633><B><A HREF=Modules.php?modname=users/User.php&staff_id=' . UserStaffID() . ' target=body><font color=#FFFFFF size=-2>' . $RET[1]['FIRST_NAME'] . '&nbsp;' . $RET[1]['LAST_NAME'] . '</font></A></B></TD></TR></TABLE>';
}
echo '<BR>';
echo '</TD></TR></TABLE>';
echo '</BODY>';
echo '</HTML>';