<% 
	Response.Buffer = true
	Response.CacheControl = "no-cache"
    Response.AddHeader "Pragma", "no-cache"
    Response.Expires = -1
IF request.servervariables("HTTPS") = "off" THEN response.redirect("/schools/control-panel/?secure=1") END IF
	str_u_token = sanitizeRequest("sut","cookie")
	str_u_n = sanitizeRequest("sun","cookie")
IF str_u_token <> "" AND str_u_n <> "" THEN
		 'try token login
			dcToken=CustDecodeAndDecrypt(str_u_token)
			SET rsTL = dbCBK.Execute("SELECT `userID`,`schoolID`,`companyID`,`phone`,`contactname`,`userPOSITION`,`userLEVEL`,`userALLOWED` FROM cbk_school_users WHERE `email`='"&str_u_n&"' AND `cust_token`='"&dcToken&"' limit 1")
		    IF rsTL.EOF THEN
				'remove the cookies
				response.cookies("sun")=""
				response.cookies("sut")=""
				response.cookies("sut").Expires = dateAdd("n",-1,now()) 
				response.cookies("sun").Expires = dateAdd("n",-1,now()) 
				response.write("Session Expired.")
				response.end
		    END IF
			DO WHILE NOT rsTL.EOF	
					str_login_user_id=CInt(rsTL("userID"))
					str_u_id=CInt(rsTL("schoolID"))
					str_company_id=CInt(rsTL("companyID"))
					str_sch_phone=rsTL("phone")
					str_full_u_name=rsTL("contactname")
					str_u_pos=rsTL("userPOSITION")
					str_u_lev=CInt(rsTL("userLEVEL"))
					str_u_allowed=Cstr(rsTL("userALLOWED"))
					response.cookies("cbk_cid")=CInt(str_company_id)
			rsTL.MoveNext
			loop
			rsTL.Close
			SET rsTL = Nothing
ELSE
	'remove the cookies
	str_u_id=""
	response.cookies("sun")=""
	response.cookies("sut")=""
	response.cookies("sut").Expires = dateAdd("n",-1,now()) 
	response.cookies("sun").Expires = dateAdd("n",-1,now()) 
	response.write("Your session has expired")
	response.end
END IF
IF str_u_id <> "" AND IsNumeric(str_u_id) THEN
	'load extra school / parent settings here
	SET rsSettings = dbCBK.Execute("SELECT parent_setting_routes,parent_setting_location,parent_setting_reporting,parent_setting_support from cbk_schools WHERE schoolID='"&str_u_id&"' limit 1")
	DO WHILE NOT rsSettings.EOF
		parent_setting_routes=rsSettings("parent_setting_routes")
		parent_setting_location=rsSettings("parent_setting_location")
		parent_setting_reporting=rsSettings("parent_setting_reporting")
		parent_setting_support=rsSettings("parent_setting_support")
	rsSettings.MoveNext
	loop
	rsSettings.Close
	SET rsSettings = Nothing
END IF
%>