<!--#include virtual="/_appDB/db_connection.asp" -->
<!--#include virtual="/_appDB/functions.asp" -->
<!--#include virtual="/super-user/scripts/admin_functions.asp" -->
<!--#include virtual="/super-user/scripts/enc_function.asp" -->
<!--#include virtual="/super-user/scripts/adm_inst.asp" -->
<%
IF (checkPermission("customers")="FAILED") THEN
	response.write("You do not have permission to view this page")
	response.end
END IF
schoolID=sanitizeRequest("sid","form")
IF schoolID <> "" AND IsNumeric(schoolID) THEN
	bSQL = "SELECT `isams_batch_enabled`,`isams_batch_ak` from cbk_schools WHERE `schoolID`='"&schoolID&"' limit 1"
	SET rsB = dbCBK.Execute(bSQL)
	IF rsB.EOF THEN
		StrError="School data could not be found"
	END IF
	DO WHILE NOT rsB.EOF
		batch_api_enabled=rsB("isams_batch_enabled")
		batch_api_key=rsB("isams_batch_ak")
	rsB.MoveNext
	loop
	rsB.Close
	SET rsB = Nothing

	IF batch_api_enabled="yes" THEN
		'insert the new record
		isams_guID=sanitizeRequest("isid","form")
		pupilname=sanitizeRequest("fn","form") & " " & sanitizeRequest("sn","form")

		'CHECK FOR EXISTING AND UPDATE
		SET rsC=dbCBK.Execute("SELECT `pupilID` FROM cbk_pupils WHERE `isams_guid`='"&isams_guID&"' limit 1")
		IF rsC.EOF THEN
			'does not exist, insert new record
			dbCBK.Execute("INSERT into cbk_pupils (`schoolID`, `name`, `signupDATE`, `isams_guid`) VALUES('"&schoolID&"','"&pupilname&"','"&year(now())&"-"&month(now())&"-"&day(now())&"','"&isams_guID&"')")
		ELSE
			'exists so update
			dbCBK.Execute("UPDATE cbk_pupils SET `name`='"&pupilname&"' WHERE `isams_guid`='"&isams_guID&"' limit 1")
		END IF
		rsC.Close
		SET rsC = Nothing
		response.write("success")
	END IF
ELSE
	response.write("invalid data detected..")
END IF
%>