addError('ACCESS_DENIED'); header('Location: index.php'); exit; } $num_cols = 2; /* make sure we own this course that we're approving for! */ $sql = "SELECT * FROM ".TABLE_PREFIX."courses WHERE course_id=$_SESSION[course_id] AND member_id=$_SESSION[member_id]"; $result = mysql_query($sql, $db); if (!($result) || !authenticate(AT_PRIV_ENROLLMENT, AT_PRIV_RETURN)) { require(AT_INCLUDE_PATH.'header.inc.php'); $msg->printErrors('NOT_OWNER'); require (AT_INCLUDE_PATH.'footer.inc.php'); exit; } //if user wants to cancel action if (isset($_POST['cancel'])) { $msg->addFeedback('CANCELLED'); header('Location: index.php'); exit; } else if (isset($_POST['submit'])) { //update privileges $mid = $_POST['dmid']; $privs = $_POST['privs']; $role = $_POST['role']; //loop through selected users to perform update $i=0; while ($mid[$i]) { change_privs(intval($mid[$i]), $privs[$i]); $i++; } $msg->addFeedback('PRIVS_CHANGED'); header('Location: index.php?tab=1'); exit; } require(AT_INCLUDE_PATH.'header.inc.php'); ?>
printErrors('DB_NOT_UPDATED'); exit; } } require(AT_INCLUDE_PATH.'footer.inc.php'); ?>