<?
require_once('phplib/phplib.php');

check_personeel();

$db = mdb2_open($dsn);
$schoolyear = get_schoolyear($_SERVER['REQUEST_TIME']);
$year_id = mdb2_single_val($db, "SELECT year_id FROM $kldv.years WHERE year_long = '%q'", $schoolyear);
if (!$year_id) error_user('Schooljaar onbekend', 'Schooljaar '.$schoolyear.' is nog niet bekend in '.$kldv.'.years, vraag een beheerder', 'admin.php');

$meeting = mdb2_single_assoc($db, "SELECT * FROM eff_meetings WHERE eff_meeting_id = %i AND year_id = $year_id", $_POST['meeting_id']);

if (!$meeting) error_user('Niet gevonden', 'Meeting om vragen in te beantwoorden niet gevonden.');

if ($meeting['eff_meeting_teacher_deadline'] <= $_SERVER['REQUEST_TIME'])
	        error_user('Deadline verstreken', 'Deadline voor het beantwoorden van vragen is verstreken');

if ($meeting['eff_meeting_mentor_deadline'] > $_SERVER['REQUEST_TIME'])
	        error_user('Beantwoorden nog gesloten', 'De deadline voor het instellen van vragen door de mentor is nog niet verstreken');

$insert = array();

// fixme: check rechten!
//
foreach ($_POST as $key => $value) {
	if (preg_match('/q2m2p-(\d+)/', $key, $matches)) {
		if ($value === "") continue;
		if ($value == 1 || $value == 2 || $value == 3 || $value == 4 || $value == 0) $insert[$matches[1]] = $value;
	}
}

mdb2_exec($db, "DELETE FROM eff_responses WHERE ppl_id = {$_SESSION['ppl_id']} AND eff_q2m2p_id IN ( SELECT eff_q2m2p_id FROM eff_q2m2p WHERE eff_meeting_id = %i )", $_POST['meeting_id']);

foreach ($insert as $key => $value) mdb2_exec($db, "INSERT INTO eff_responses ( eff_q2m2p_id, ppl_id, eff_score ) VALUES ( $key, {$_SESSION['ppl_id']}, $value )");

header("Location: vulin.php?meeting_id=".$_POST['meeting_id']);
?>