prepare("SELECT * FROM students WHERE id_card = ?"); $stmt->execute([$id_card]); $student = $stmt->fetch(); if ($student) { $_SESSION['student_id'] = $student['id']; $_SESSION['student_name'] = $student['name']; $_SESSION['class_code'] = $student['class_code']; $_SESSION['id_card_mask'] = $student['id_card']; // Log 用 // Log: 登入成功 writeLog($pdo, $student['id_card'], "使用者登入成功: " . $student['name']); header("Location: index.php?page=list"); exit; } else { // Log: 登入失敗 writeLog($pdo, $id_card, "登入失敗: 查無此身分證號"); $message = "找不到此身分證號，請確認輸入是否正確。"; } } // 登出 if ($page === 'logout') { if (isset($_SESSION['id_card_mask'])) { writeLog($pdo, $_SESSION['id_card_mask'], "使用者登出"); } session_destroy(); header("Location: index.php"); exit; } // 驗證 Session $student_user = null; if (isset($_SESSION['student_id'])) { $stmt = $pdo->prepare("SELECT * FROM students WHERE id = ?"); $stmt->execute([$_SESSION['student_id']]); $student_user = $stmt->fetch(); } if (!$student_user && $page !== 'login') { header("Location: index.php?page=login"); exit; } // 2. 處理表單提交 if ($_SERVER['REQUEST_METHOD'] === 'POST' && $page === 'submit_form') { $activity_id = $_POST['activity_id']; $will_attend = $_POST['will_attend'] ?? ''; $lunch_type = $_POST['lunch_type'] ?? null; $note = cleanInput($_POST['note']); $signature = $_POST['signature_data']; // 檢查活動是否存在及過期 $stmt = $pdo->prepare("SELECT * FROM activities WHERE id = ?"); $stmt->execute([$activity_id]); $act = $stmt->fetch(); if (!$act) die("活動不存在"); // 檢查是否已填寫過 (防止重複送出或惡意修改) $chkStmt = $pdo->prepare("SELECT id FROM responses WHERE activity_id = ? AND student_id = ?"); $chkStmt->execute([$activity_id, $student_user['id']]); if ($chkStmt->fetch()) { writeLog($pdo, $student_user['id_card'], "試圖重複提交活動ID: $activity_id"); die("您已填寫過此表單，不可重複修改。"); } if (strtotime($act['survey_end']) < time()) { writeLog($pdo, $student_user['id_card'], "試圖提交已過期活動ID: $activity_id"); die("調查已截止，無法填寫。"); } // 後端強制驗證 if (empty($will_attend) || empty($signature)) { die("錯誤：參加意願與簽名為必填欄位。"); } if ($will_attend === 'Y' && empty($lunch_type)) { die("錯誤：參加者必須選擇午餐葷素。"); } // 儲存回覆 $sql = "INSERT INTO responses (activity_id, student_id, class_code, seat_no, student_name, will_attend, lunch_type, note, parent_signature, ip_address, signed_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NOW())"; $stmt = $pdo->prepare($sql); $stmt->execute([ $activity_id, $student_user['id'], $student_user['class_code'], $student_user['seat_no'], $student_user['name'], $will_attend, $lunch_type, $note, $signature, $_SERVER['REMOTE_ADDR'] ]); // Log: 提交表單 writeLog($pdo, $student_user['id_card'], "提交活動回覆 (ID:$activity_id): 意願=$will_attend"); header("Location: index.php?page=list&status=success"); exit; } // --- 視圖呈現 --- ?> 戶外教育行前通知暨意願調查 - <?php echo SCHOOL_NAME; ?>

學生： 登出
填寫成功！感謝您的回覆。

戶外教育行前通知暨意願調查

家長登入

請輸入學生的身分證字號

活動列表

prepare($sql); $stmt->execute([$student_user['id'], "%$class_code%"]); $activities = $stmt->fetchAll(); if (count($activities) == 0): ?>

目前沒有給貴班的戶外教學活動。

活動名稱 日期 截止日期 狀態 操作
(已截止，請洽導師)
prepare("SELECT * FROM activities WHERE id = ?"); $stmt->execute([$act_id]); $activity = $stmt->fetch(); if(!$activity) die("活動不存在"); // 取得回覆資料 $stmt = $pdo->prepare("SELECT * FROM responses WHERE activity_id = ? AND student_id = ?"); $stmt->execute([$act_id, $student_user['id']]); $response = $stmt->fetch(); $is_readonly = !empty($response); // 是否為唯讀模式 ?>


行前通知單暨家長同意書

親愛的家長您好：

本校辦理戶外教學，誠摯邀請貴子弟參加。

  • 📅 時間：
  • 📍 地點：
    • 　 　 　　'.htmlspecialchars($activity['location2']).'' : ''; ?>
  • 🏫 單位：
📃 活動說明：
⚠️ 注意事項：

回條填寫確認單

1. 參加意願：
2. 午餐選擇：
3. 備註事項：
4. 家長簽名： 家長簽名

簽署時間：



返回列表

回條填寫