<% 
	Response.Buffer = true
	Response.CacheControl = "no-cache"
    Response.AddHeader "Pragma", "no-cache"
    Response.Expires = -1
IF request.servervariables("HTTPS") = "off" THEN response.redirect("/parents/control-panel/?secure=1") END IF
	str_u_token = sanitizeRequest("psut","cookie")
	str_u_n = sanitizeRequest("psun","cookie")
IF str_u_token <> "" AND str_u_n <> "" THEN
		 'try token login
			dcToken=CustDecodeAndDecrypt(str_u_token)
			SET rsTL = dbCBK.Execute("SELECT `parentID`,`schoolID`,`phone`,`name`,`pupilROLEIDS`,`address1`,`postcode`,`first_login`,`last_updated` FROM cbk_parents WHERE `email`='"&str_u_n&"' AND `cust_token`='"&dcToken&"' limit 1")
		    IF rsTL.EOF THEN
				'remove the cookies
				response.cookies("psun")=""
				response.cookies("psut")=""
				response.cookies("psut").Expires = dateAdd("n",-1,now()) 
				response.cookies("psun").Expires = dateAdd("n",-1,now()) 
				response.redirect("/parents/?session=expired")
		    END IF
			DO WHILE NOT rsTL.EOF
					str_parent_id=CInt(rsTL("parentID"))	
					str_u_id=CInt(rsTL("schoolID"))
					str_company_id=0
					str_par_phone=rsTL("phone")
					str_full_u_name=rsTL("name")
					str_ass_pupil_list=rsTL("pupilROLEIDS")
					str_adress1=rsTL("address1")
					str_pcode=rsTL("postcode")
					str_first_login=CInt(rsTL("first_login"))
					str_last_updated=rsTL("last_updated")
					str_u_pos="Parent"
					str_u_lev="1"
					str_u_allowed="all"
			rsTL.MoveNext
			loop
			rsTL.Close
			SET rsTL = Nothing
ELSE
	'remove the cookies
	response.cookies("psun")=""
	response.cookies("psut")=""
	response.cookies("psut").Expires = dateAdd("n",-1,now()) 
	response.cookies("psun").Expires = dateAdd("n",-1,now()) 
	response.redirect("/parents/?login=required")
END IF
IF str_u_id <> "" AND IsNumeric(str_u_id) THEN
	'load extra school / parent settings here
	SET rsSettings = dbCBK.Execute("SELECT parent_setting_routes,parent_setting_location,parent_setting_reporting,parent_setting_support from cbk_schools WHERE schoolID='"&str_u_id&"' limit 1")
	DO WHILE NOT rsSettings.EOF
		parent_setting_routes=rsSettings("parent_setting_routes")
		parent_setting_location=rsSettings("parent_setting_location")
		parent_setting_reporting=rsSettings("parent_setting_reporting")
		parent_setting_support=rsSettings("parent_setting_support")
	rsSettings.MoveNext
	loop
	rsSettings.Close
	SET rsSettings = Nothing
END IF
%>