Manage Student Results

isLoggedIn()) { header('Location: index.php'); exit; } $isAdmin = $auth->isAdmin(); // still useful for display purposes only require_once 'config.php'; $pdo = getDBConnection(); $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $pdo->setAttribute(PDO::ATTR_EMULATE_PREPARES, true); // ============================================================ // AUDIT HELPER // ============================================================ function logStudentResultsAction($auth, $actionType, $context = []) { if (!$auth) return; try { $actorId = $_SESSION['user_id'] ?? null; $actorName = $_SESSION['username'] ?? 'Unknown'; $desc = "Actor {$actorName} performed {$actionType} on manage_student_results.php"; if (!empty($context)) { $parts = []; foreach ($context as $k => $v) { $parts[] = "{$k}: " . (is_scalar($v) ? $v : json_encode($v)); } $desc .= " | " . implode(' | ', $parts); } $auth->logActivity($actorId, $actionType, $desc); } catch (Throwable $e) { error_log("logStudentResultsAction failed: " . $e->getMessage()); } } // ============================================================ // HANDLE BULK UPDATE — all logged-in users // ============================================================ $update_message = ''; $update_error = ''; $updated_count = 0; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['bulk_update'])) { $row_ids = $_POST['row_ids'] ?? []; $row_ids = array_filter(array_map('intval', $row_ids)); if (empty($row_ids)) { $update_error = "No rows selected for update."; } else { $updateFields = []; $params = []; $newRegNum = trim($_POST['new_regnum'] ?? ''); if ($newRegNum !== '') { $updateFields[] = "RegNum = :regnum"; $params[':regnum'] = $newRegNum; } $newExamType = trim($_POST['new_exam_type'] ?? ''); if ($newExamType !== '' && in_array($newExamType, ['WAEC', 'NECO', 'GCE', 'NABTEB'])) { $updateFields[] = "ExamType = :exam_type"; $params[':exam_type'] = $newExamType; } $newSittingType = trim($_POST['new_sitting_type'] ?? ''); if ($newSittingType !== '') { $updateFields[] = "sitting_type = :sitting_type"; $params[':sitting_type'] = $newSittingType; } $newExamNumber = trim($_POST['new_exam_number'] ?? ''); if ($newExamNumber !== '') { $updateFields[] = "ExamNumber = :exam_number"; $params[':exam_number'] = $newExamNumber; } if (empty($updateFields)) { $update_error = "No update fields specified. Please fill at least one field."; } else { try { $placeholders = []; foreach ($row_ids as $i => $id) { $placeholders[] = ":id_$i"; $params[":id_$i"] = $id; } $sql = "UPDATE student_results_data SET " . implode(', ', $updateFields) . " WHERE id IN (" . implode(',', $placeholders) . ")"; $stmt = $pdo->prepare($sql); $stmt->execute($params); $updated_count = $stmt->rowCount(); $update_message = "✅ Successfully updated $updated_count record(s)."; logStudentResultsAction($auth, 'bulk_result_update', [ 'rows_updated' => $updated_count, 'row_ids' => implode(',', array_slice($row_ids, 0, 20)) . (count($row_ids) > 20 ? ' …' : ''), 'new_regnum' => $newRegNum ?: '(unchanged)', 'new_exam_type' => $newExamType ?: '(unchanged)', 'new_sitting' => $newSittingType ?: '(unchanged)', 'new_exam_no' => $newExamNumber ?: '(unchanged)', ]); } catch (PDOException $e) { $update_error = "Update failed: " . $e->getMessage(); error_log("Bulk update failed: " . $e->getMessage()); } } } } // ============================================================ // FETCH FILTERS // ============================================================ $filter_regnum = trim($_GET['filter_regnum'] ?? ''); $filter_subject = trim($_GET['filter_subject'] ?? ''); $filter_exam_type = trim($_GET['filter_exam_type'] ?? ''); $filter_sitting_type = trim($_GET['filter_sitting_type'] ?? ''); $filter_student_id = trim($_GET['filter_student_id'] ?? ''); $filter_app_num = trim($_GET['filter_app_num'] ?? ''); $where = []; $params = []; if ($filter_regnum !== '') { $where[] = "r.RegNum LIKE :regnum"; $params[':regnum'] = '%' . $filter_regnum . '%'; } if ($filter_subject !== '') { $where[] = "r.SubjectName LIKE :subject"; $params[':subject'] = '%' . $filter_subject . '%'; } if ($filter_exam_type !== '') { $where[] = "r.ExamType = :exam_type"; $params[':exam_type'] = $filter_exam_type; } if ($filter_sitting_type !== '') { $where[] = "r.sitting_type = :sitting_type"; $params[':sitting_type'] = $filter_sitting_type; } if ($filter_student_id !== '') { $where[] = "r.student_id = :student_id"; $params[':student_id'] = $filter_student_id; } if ($filter_app_num !== '') { $where[] = "s.AppNum LIKE :app_num"; $params[':app_num'] = '%' . $filter_app_num . '%'; } $whereSql = empty($where) ? '' : ('WHERE ' . implode(' AND ', $where)); // ============================================================ // FETCH ROWS // ============================================================ $limit = 500; $sql = " SELECT r.id, r.student_id, r.RegNum, r.SubjectName, r.Grade, r.ExamType, r.ExamNumber, r.sitting_type, r.created_at, s.AppNum, s.Surname, s.Firstname, s.Othername FROM student_results_data r LEFT JOIN students_data s ON r.student_id = s.id $whereSql ORDER BY r.RegNum ASC, r.ExamType ASC, r.SubjectName ASC LIMIT $limit "; $rows = []; $fetch_error = ''; try { $stmt = $pdo->prepare($sql); $stmt->execute($params); $rows = $stmt->fetchAll(PDO::FETCH_ASSOC); // ✅ Audit log: page view logStudentResultsAction($auth, 'page_viewed_student_results', [ 'Filter RegNum' => $filter_regnum ?: '(none)', 'Filter AppNum' => $filter_app_num ?: '(none)', 'Filter Subject' => $filter_subject ?: '(none)', 'Filter ExamType' => $filter_exam_type ?: '(none)', 'Filter Student' => $filter_student_id ?: '(none)', 'Rows returned' => count($rows), ]); } catch (PDOException $e) { $fetch_error = "Query error: " . $e->getMessage(); error_log("Fetch error: " . $e->getMessage()); } // ============================================================ // DISTINCT VALUES (for filters) // ============================================================ $distinctExamTypes = []; try { $stmt = $pdo->query("SELECT DISTINCT ExamType FROM student_results_data ORDER BY ExamType"); $distinctExamTypes = $stmt->fetchAll(PDO::FETCH_COLUMN); } catch (PDOException $e) {} $distinctSittingTypes = []; try { $stmt = $pdo->query("SELECT DISTINCT sitting_type FROM student_results_data WHERE sitting_type IS NOT NULL ORDER BY sitting_type"); $distinctSittingTypes = $stmt->fetchAll(PDO::FETCH_COLUMN); } catch (PDOException $e) {} $distinctSubjects = []; try { $stmt = $pdo->query("SELECT DISTINCT SubjectName FROM student_results_data ORDER BY SubjectName LIMIT 200"); $distinctSubjects = $stmt->fetchAll(PDO::FETCH_COLUMN); } catch (PDOException $e) {} function escHtml($t) { return htmlspecialchars($t ?? '', ENT_QUOTES, 'UTF-8'); } ?> Manage Student Results

Rows Fetched

Distinct RegNums

Exam Types

Limit

Filter Records

RegNum

App Number

Student ID

Exam Type

Sitting Type

Subject

Reset

	#	Student ID	App Number	Student Name	RegNum	Subject	Grade	Exam Type	Exam Number	Sitting
No records found. Try adjusting your filters.
			—

0 selected

Bulk Update Panel

Select rows from the table on the left, then fill the fields below to apply the update. Leave a field empty to skip it.

New RegNum

Applies to all selected rows.

Note: Updates are permanent. Double-check before applying. Each row's RegNum will be overwritten if provided.