Dump from SVN

.gitignore

@@ -0,0 +1 @@
+config.ini

.htaccess

@@ -0,0 +1,3 @@
+RewriteEngine on
+RewriteRule ^(config|res|script|style|subs)($|/) - [L]
+RewriteRule ^([a-zA-Z_]+)(\/([a-zA-Z0-9_]))?$ index.php?view=$1 [L,QSA]

config/.htaccess

@@ -0,0 +1,2 @@
+Order allow,deny
+Deny from all

config/config.php

@@ -0,0 +1,141 @@
+<?php
+/**
+ * /config/config.php
+ * @version 1.0
+ * @desc configuration file
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+/*
+ * Includes
+ */
+require_once("lib/loginManager/loginManager.php");
+require_once("lib/PasswordStorage.php");
+require_once("lib/functions.php");
+
+/*
+ * Load config file
+ */
+$config=parse_ini_file("config.ini", true);
+
+/*
+ * Regionalization
+ */
+date_default_timezone_set($config['general']['timezone']);
+mb_internal_encoding("UTF-8");
+
+/*
+ * Load language file
+ */
+$lang=parse_ini_file("lang/".$config['language']['use']);
+
+/*
+ * Set up DB
+ */
+$db=new PDO($config['database']['type'].":host=".$config['database']['host'].";dbname=".$config['database']['name'].";charset=utf8", $config['database']['user'], $config['database']['password']);
+
+/*
+ * Byte order mark for utf8
+ */
+$BOM=chr(239).chr(187).chr(191);
+
+/*
+ * Debug
+ */
+if($config['general']['debug']){
+    $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+    ini_set("display_errors", true);
+}
+
+/*
+ * Versioning
+ */
+const VERSION="0.7";
+
+/*
+ * Set up login manager
+ */
+//build classes
+class handler implements lmHandler{
+    public function handle($state, $target=0){
+        global $db;
+        switch($state){
+            case lmStates::LOGIN_FAILED:
+                functions::setError(1);
+                functions::safeReload();
+                break;
+            case lmStates::LOGIN_OK:
+                $sql=$db->prepare("SELECT id, username, fullname, accesslevel, class, perm_message FROM users WHERE id=:id");
+                $sql->execute(array(":id"=>$target));
+                $res=$sql->fetch(PDO::FETCH_ASSOC);
+                $_SESSION['id']=$res['id'];
+                $_SESSION['username']=$res['username'];
+                $_SESSION['fullname']=$res['fullname'];
+                $_SESSION['accesslevel']=$res['accesslevel'];
+                $_SESSION['class']=$res['class'];
+                $_SESSION['perm_message']=$res['perm_message'];
+                functions::safeReload();
+                break;
+            case lmStates::CAPTCHA_FAILED:
+                functions::setError(2);
+                functions::safeReload();
+                break;
+            case lmStates::BANNED:
+                functions::setError(3);
+                functions::safeReload();
+                break;
+            case lmStates::FORGET_DONE:
+                functions::setMessage(1);
+                functions::safeReload();
+                break;
+            case lmStates::LOGOUT_DONE:
+                functions::setMessage(2);
+                functions::safeReload();
+        }
+        return;
+    }
+}
+class password implements lmPassword{
+    public function verifyPassword($cleartext, $database){
+        if($database==""){
+            return false;
+        }
+        return PasswordStorage::verify_password($cleartext, $database);
+    }
+}
+class twoFactor implements lmTwoFactor{
+    public function secondFactor($uid){
+        return true;
+    }
+}
+
+//build login manager
+$lm=new loginManager(new lmConfig($db, $config['login']['session_lifetime'], $config['login']['captcha_enable'], $config['login']['captcha_after'], $config['login']['captcha_sitekey'], $config['login']['captcha_secretkey'], $config['login']['ban_enable'], $config['login']['ban_after'], $config['login']['ban_time'], $config['login']['look'], $config['login']['remember_enable'], $config['login']['remember_time'], lmStates::AUTH_UNAME), new handler(), new password(), new twoFactor());
+//init
+$lm->init();
+
+//get the current schoolyear
+$schoolyear="";
+if(date("m")>=$config['general']['newYearMonth']){
+    $schoolyear=date("Y")."-".date("Y", time()+31556926);
+}
+else{
+    $schoolyear=date("Y", time()-31556926)."-".date("Y");
+}

config/lang/hun.ini

@@ -0,0 +1,139 @@
+lang_1="Magyar"
+lang_2="Román"
+cookie_message="Weboldalunk a megfelelő működés érdekében cookie-kat használ. Továbbá a weboldal használatával ön beleegyezik a felhasználási feltételekbe (lásd az oldal alján)."
+cookie_dismiss="Megértettem!"
+login="Bejelentkezés"
+username="Felhasználónév"
+password="Jelszó"
+password_confirm="Jelszó megerősítése"
+remember="Megjegyzés"
+ok="Mehet!"
+forget_user="Felhasználó elfelejtése"
+remember_as="Üdv újra,"
+index="Kezdőlap"
+wizard="Varázsló"
+users="Felhasználók"
+classes="Osztályok"
+subjects="Tantárgyak"
+contests="Versenyek"
+phases="Szakaszok"
+register="Eredmények"
+profile="Profil"
+admin="Adminisztrátori felület"
+loading="Töltés"
+logout="Kijelentkezés"
+index_content="Ezen az oldalon kezelheti a diákok eredményeit.<br><br>A <i>Felhasználók</i> menüpont alatt a felhasználók listáját láthatja.<br>Az <i>Osztályok</i> menüpont alatt az osztályokat tekintheti át.<br>A <i>Tantárgyak</i> menüpont alatt a tantárgyakat nézheti meg és szerkesztheti.<br>A <i>Versenyek</i> menüpont alatt versenyeket adhat hozzá és távolíthat el.<br>A <i>Szakaszok</i> menüpontnál a versenyek szakaszait (pl: megyei, országos) kezelheti.<br>Az <i>Eredmények</i> menüpont alatt a diákok eredményeit nézheti meg illetve szerkesztheti.<br>A <i>Varázsló</i> menüpont alatt egy egyszerűen kezelhető eszközzel adhatja meg egy diák elért eredényeit.<br>A <i>Profil</i> menüpontnál saját felhasználójának az adatait szerkesztheti.<br>Az <i>Adminisztrátori felület</i> alól az adminisztrátori eszközökhöz férhet hozzá."
+filter="Szűrők"
+search="Keresés"
+class="Osztály"
+accesslevel="Jogszint"
+empty="Üres"
+apply="Alkalmaz"
+reset="Visszaállítás"
+new="Új hozzáadása"
+fullname="Teljes név"
+passwordhint="Írjon be 0-t egy véletlenszerű jelszóért!"
+passwordhintedit="Hagyja üresen, ha nem szeretné megváltoztatni."
+cancel="Mégse"
+edit="Szerkesztés"
+id="Azonosító"
+perm_message="Üzenetküldési jog"
+tools="Eszközök"
+delete="Törlés"
+edit_perm="Jogok szerkesztése"
+delete_confirm="Biztosan szeretné törölni ezt az elemet?"
+permission_confirm="Szeretné ha ez az ember tudna üzeneteket küldeni a belső rendszerben?"
+ryes="Igen"
+rno="Nem"
+rowid="Sorszám"
+role="Szerep"
+headteacher="Osztályfőnök"
+student="Diák"
+name_1="Magyar megnevezés"
+name_2="Román megnevezés"
+subject="Tantárgy"
+ministry_support="Minisztériumi támogatás"
+ministry_0="Nem szerepel a listán"
+ministry_1="Nem támogatott"
+ministry_2="Támogatott"
+nothing="Semmi"
+description="Leírás"
+ministry_place="Hely a minisztériumi listán"
+subject_1="Tantárgy magyar megnevezése"
+subject_2="Tantárgy román megnevezése"
+custom="Egyedi"
+mention="Megjegyzés"
+newSubmit="Véglegesítés"
+contest_1="Verseny magyar megnevezése"
+contest_2="Verseny román megnevezése"
+phase_1="Szakasz magyar megnevezése"
+phase_2="Szakasz román megnevezése"
+teacher="Felkészítő tanár"
+place="Helyezés"
+contest="Verseny"
+phase="Szakasz"
+place="Helyezés"
+prev_found="Ezeket a bejegyzéseket találtuk, amelyeknél megegyezik a verseny és a diák a bevinni kívánt adatokkal"
+do_before_new_record="Kérem nézze át az alább kilistázott bejegyzéseket és törölje azokat, amelyek nem aktuálisak. Ha ezzel végzett csak akkor véglegesítse az új bejegyzést!"
+proceed="Tovább"
+back="Vissza"
+finalize="Véglegesítés"
+selectme="Saját magam beállítása"
+wizinst="Ennek az eszköznek a segítségével könnyedén hozzáadhat egy új eredményt"
+wiz_step1="Diák kiválasztása"
+wiz_step2="Verseny kiválasztása"
+wiz_step3="Szakasz kiválasztása"
+wiz_step4="Felkészítő tanár kiválasztása"
+wiz_step5="Helyezés megadása"
+wiz_step6="További információk megadása (nem kötelező)"
+wiz_step7="Előzőleg megadott adatok felülvizsgálata, véglegesítés"
+needlogout="A változtatások csak a következő bejelentkezésnél fognak megjelenni."
+editpasswd="Jelszó megváltoztatása"
+export="Exportálás"
+exportcolumn="A következő oszlopokat tartalmazza"
+contest_desc="Verseny leírása"
+exported="Exportálva"
+preparing_download="Letöltés előkészítése."
+download_ready="A fájl készen áll a letöltésre."
+download="Letöltés"
+schoolyear="Tanév"
+importUsers="Felhasználók importálása"
+dbsize="Adatbázis mérete"
+dbname="Adatbázis neve"
+size="Méret"
+uploading="Feltöltés"
+processing="Feldolgozás"
+importdone="A felhasználók importálása befejeződött."
+importnotes="Az importáláshoz egy CSV fájlt (delimiter: ,) kell feltölteni. Maximális mérete 10MB lehet. A fájl nem tartalmazhat fejlécet csupán adatot, soronként egy adatelemmel. Az első oszlop a felhasználó felhasználóneve, a második oszlop a teljes neve, a harmadik oszlop a jogszintje (0: diák, 1: tanár, 2: osztályfőnök, 3: menedzser, 4: adminisztrátor), ötödik oszlop az osztály, hatodik oszlop pedig a jelszó. A CSV fájl generálásához ajánlott a Google Docs-ot használni, mivel az ismeri az UTF8-at is az Excel-lel ellentétben."
+classformat="pl.: L2015F"
+
+;places
+places[-3]="Részvétel"
+places[-2]="Különdíj"
+places[-1]="Dícséret"
+
+;errors
+error[1]="Hibás felhasználónév vagy jelszó!"
+error[2]="Hibásan töltötted ki a Captcha-t!"
+error[3]="Túl sok hibás bejelentkezés történt erről az IP címről, ezért 10 percre letitltottuk."
+error[4]="Valami rosszul ment. Kérjük próbálja meg később! Ha továbbra sem sikerül, kérjuk hagyjon üzenetet!"
+error[5]="Ez a felhasználónév már foglalt."
+error[6]="Nem található semmi ezzel az ID-val."
+error[7]="Már létezik egy tantárgy ezzel a névvel."
+error[8]="Már létezik egy verseny ezzel a névvel."
+error[9]="Már létezik egy szakasz ezzel a névvel."
+error[10]="A megadott jelszavak nem egyeznek meg."
+error[11]="A fájl mérete nem haladhatja meg az 10MB-ot!"
+error[12]="Valami hiba történt a feltöltés közben. Kérem próbálja újra!"
+error[13]="Váratlan hiba a feltöltés közben. Kérem próbálja újra!"
+error[401]="Önnek nincs jogosultsága ennek az oldalnak a megtekintésére!"
+error[404]="A keresett oldal nem található!"
+error[500]="Valami rosszul ment. Kérjük próbálja meg később, illetve jelezze üzenet formájában, hogy 500-as kódjelű hibát kapott."
+
+;messages
+message[1]="Sikeresen elfelejtettük a felhasználódat."
+message[2]="Sikeresen kijelentkeztél."
+message[3]="Adat sikeresen hozzáadva!"
+message[4]="Adat sikeresen törölve!"
+message[5]="Adat sikeresen szerkesztve!"
+message[6]="A jelszavadat sikeresen frissítettük"

config/lib/PasswordStorage.php

@@ -0,0 +1,315 @@
+<?php
+class InvalidHashException extends Exception {}
+class CannotPerformOperationException extends Exception {}
+class PasswordStorage
+{
+    // These constants may be changed without breaking existing hashes.
+    const PBKDF2_HASH_ALGORITHM = "sha1";
+    const PBKDF2_ITERATIONS = 64000;
+    const PBKDF2_SALT_BYTES = 24;
+    const PBKDF2_OUTPUT_BYTES = 18;
+    // These constants define the encoding and may not be changed.
+    const HASH_SECTIONS = 5;
+    const HASH_ALGORITHM_INDEX = 0;
+    const HASH_ITERATION_INDEX = 1;
+    const HASH_SIZE_INDEX = 2;
+    const HASH_SALT_INDEX = 3;
+    const HASH_PBKDF2_INDEX = 4;
+    /**
+     * Hash a password with PBKDF2
+     * 
+     * @param string $password
+     * @return string
+     */
+    public static function create_hash($password)
+    {
+        // format: algorithm:iterations:outputSize:salt:pbkdf2output
+        if (!\is_string($password)) {
+            throw new InvalidArgumentException(
+                "create_hash(): Expected a string"
+            );
+        }
+        if (\function_exists('random_bytes')) {
+            try {
+                $salt_raw = \random_bytes(self::PBKDF2_SALT_BYTES);
+            } catch (Error $e) {
+                $salt_raw = false;
+            } catch (Exception $e) {
+                $salt_raw = false;
+            } catch (TypeError $e) {
+                $salt_raw = false;
+            }
+        } else {
+            $salt_raw = \mcrypt_create_iv(self::PBKDF2_SALT_BYTES, MCRYPT_DEV_URANDOM);
+        }
+        if ($salt_raw === false) {
+            throw new CannotPerformOperationException(
+                "Random number generator failed. Not safe to proceed."
+            );
+        }
+        $PBKDF2_Output = self::pbkdf2(
+            self::PBKDF2_HASH_ALGORITHM,
+            $password,
+            $salt_raw,
+            self::PBKDF2_ITERATIONS,
+            self::PBKDF2_OUTPUT_BYTES,
+            true
+        );
+        return self::PBKDF2_HASH_ALGORITHM .
+            ":" .
+            self::PBKDF2_ITERATIONS .
+            ":" .
+            self::PBKDF2_OUTPUT_BYTES .
+            ":" .
+            \base64_encode($salt_raw) .
+            ":" .
+            \base64_encode($PBKDF2_Output);
+    }
+    
+    /**
+     * Verify that a password matches the stored hash
+     *
+     * @param string $password
+     * @param string $hash
+     * @return bool
+     */
+    public static function verify_password($password, $hash)
+    {
+        if (!\is_string($password) || !\is_string($hash)) {
+            throw new InvalidArgumentException(
+                "verify_password(): Expected two strings"
+            );
+        }
+        $params = \explode(":", $hash);
+        if (\count($params) !== self::HASH_SECTIONS) {
+            throw new InvalidHashException(
+                "Fields are missing from the password hash."
+            );
+        }
+        $pbkdf2 = \base64_decode($params[self::HASH_PBKDF2_INDEX], true);
+        if ($pbkdf2 === false) {
+            throw new InvalidHashException(
+                "Base64 decoding of pbkdf2 output failed."
+            );
+        }
+        $salt_raw = \base64_decode($params[self::HASH_SALT_INDEX], true);
+        if ($salt_raw === false) {
+            throw new InvalidHashException(
+                "Base64 decoding of salt failed."
+            );
+        }
+        $storedOutputSize = (int) $params[self::HASH_SIZE_INDEX];
+        if (self::ourStrlen($pbkdf2) !== $storedOutputSize) {
+            throw new InvalidHashException(
+                "PBKDF2 output length doesn't match stored output length."
+            );
+        }
+        $iterations = (int) $params[self::HASH_ITERATION_INDEX];
+        if ($iterations < 1) {
+            throw new InvalidHashException(
+                "Invalid number of iterations. Must be >= 1."
+            );
+        }
+ 
+        return self::slow_equals(
+            $pbkdf2,
+            self::pbkdf2(
+                $params[self::HASH_ALGORITHM_INDEX],
+                $password,
+                $salt_raw,
+                $iterations,
+                self::ourStrlen($pbkdf2),
+                true
+            )
+        );
+    }
+    
+    /**
+     * Compares two strings $a and $b in length-constant time.
+     * 
+     * @param string $a
+     * @param string $b
+     * @return bool
+     */
+    public static function slow_equals($a, $b)
+    {
+        if (!\is_string($a) || !\is_string($b)) {
+            throw new InvalidArgumentException(
+                "slow_equals(): expected two strings"
+            );
+        }
+        if (\function_exists('hash_equals')) {
+            return \hash_equals($a, $b);
+        }
+        
+        // PHP < 5.6 polyfill:
+        $diff = self::ourStrlen($a) ^ self::ourStrlen($b);
+        for($i = 0; $i < self::ourStrlen($a) && $i < self::ourStrlen($b); $i++) {
+            $diff |= \ord($a[$i]) ^ \ord($b[$i]);
+        }
+        return $diff === 0;
+    }
+    
+    /*
+     * PBKDF2 key derivation function as defined by RSA's PKCS #5: https://www.ietf.org/rfc/rfc2898.txt
+     * $algorithm - The hash algorithm to use. Recommended: SHA256
+     * $password - The password.
+     * $salt - A salt that is unique to the password.
+     * $count - Iteration count. Higher is better, but slower. Recommended: At least 1000.
+     * $key_length - The length of the derived key in bytes.
+     * $raw_output - If true, the key is returned in raw binary format. Hex encoded otherwise.
+     * Returns: A $key_length-byte key derived from the password and salt.
+     *
+     * Test vectors can be found here: https://www.ietf.org/rfc/rfc6070.txt
+     *
+     * This implementation of PBKDF2 was originally created by https://defuse.ca
+     * With improvements by http://www.variations-of-shadow.com
+     */
+    public static function pbkdf2($algorithm, $password, $salt, $count, $key_length, $raw_output = false)
+    {
+        // Type checks:
+        if (!\is_string($algorithm)) {
+            throw new InvalidArgumentException(
+                "pbkdf2(): algorithm must be a string"
+            );
+        }
+        if (!\is_string($password)) {
+            throw new InvalidArgumentException(
+                "pbkdf2(): password must be a string"
+            );
+        }
+        if (!\is_string($salt)) {
+            throw new InvalidArgumentException(
+                "pbkdf2(): salt must be a string"
+            );
+        }
+        // Coerce strings to integers with no information loss or overflow
+        $count += 0;
+        $key_length += 0;
+        $algorithm = \strtolower($algorithm);
+        if (!\in_array($algorithm, \hash_algos(), true)) {
+            throw new CannotPerformOperationException(
+                "Invalid or unsupported hash algorithm."
+            );
+        }
+        // Whitelist, or we could end up with people using CRC32.
+        $ok_algorithms = array(
+            "sha1", "sha224", "sha256", "sha384", "sha512",
+            "ripemd160", "ripemd256", "ripemd320", "whirlpool"
+        );
+        if (!\in_array($algorithm, $ok_algorithms, true)) {
+            throw new CannotPerformOperationException(
+                "Algorithm is not a secure cryptographic hash function."
+            );
+        }
+        if ($count <= 0 || $key_length <= 0) {
+            throw new CannotPerformOperationException(
+                "Invalid PBKDF2 parameters."
+            );
+        }
+    
+        if (\function_exists("hash_pbkdf2")) {
+            // The output length is in NIBBLES (4-bits) if $raw_output is false!
+            if (!$raw_output) {
+                $key_length = $key_length * 2;
+            }
+            return \hash_pbkdf2($algorithm, $password, $salt, $count, $key_length, $raw_output);
+        }
+    
+        $hash_length = self::ourStrlen(\hash($algorithm, "", true));
+        $block_count = \ceil($key_length / $hash_length);
+    
+        $output = "";
+        for($i = 1; $i <= $block_count; $i++) {
+            // $i encoded as 4 bytes, big endian.
+            $last = $salt . \pack("N", $i);
+            // first iteration
+            $last = $xorsum = \hash_hmac($algorithm, $last, $password, true);
+            // perform the other $count - 1 iterations
+            for ($j = 1; $j < $count; $j++) {
+                $xorsum ^= ($last = \hash_hmac($algorithm, $last, $password, true));
+            }
+            $output .= $xorsum;
+        }
+    
+        if($raw_output) {
+            return self::ourSubstr($output, 0, $key_length);
+        } else {
+            return \bin2hex(self::ourSubstr($output, 0, $key_length));
+        }
+    }
+    /*
+     * We need these strlen() and substr() functions because when
+     * 'mbstring.func_overload' is set in php.ini, the standard strlen() and
+     * substr() are replaced by mb_strlen() and mb_substr().
+     */
+    /**
+     * Calculate the length of a string
+     * 
+     * @param string $str
+     * @return int
+     */
+    private static function ourStrlen($str)
+    {
+        static $exists = null;
+        if ($exists === null) {
+            $exists = \function_exists('mb_strlen');
+        }
+        
+        if (!\is_string($str)) {
+            throw new InvalidArgumentException(
+                "ourStrlen() expects a string"
+            );
+        }
+        
+        if ($exists) {
+            $length = \mb_strlen($str, '8bit');
+            if ($length === false) {
+                throw new CannotPerformOperationException();
+            }
+            return $length;
+        } else {
+            return \strlen($str);
+        }
+    }
+    /**
+     * Substring
+     * 
+     * @param string $str
+     * @param int $start
+     * @param int $length
+     * @return string
+     */
+    private static function ourSubstr($str, $start, $length = null)
+    {
+        static $exists = null;
+        if ($exists === null) {
+            $exists = \function_exists('mb_substr');
+        }
+        // Type validation:
+        if (!\is_string($str)) {
+            throw new InvalidArgumentException(
+                "ourSubstr() expects a string"
+            );
+        }
+        
+        if ($exists) {
+            // mb_substr($str, 0, NULL, '8bit') returns an empty string on PHP
+            // 5.3, so we have to find the length ourselves.
+            if (!isset($length)) {
+                if ($start >= 0) {
+                    $length = self::ourStrlen($str) - $start;
+                } else {
+                    $length = -$start;
+                }
+            }
+            return \mb_substr($str, $start, $length, '8bit');
+        }
+        // Unlike mb_substr(), substr() doesn't accept NULL for length
+        if (isset($length)) {
+            return \substr($str, $start, $length);
+        } else {
+            return \substr($str, $start);
+        }
+    }
+}

config/lib/functions.php

@@ -0,0 +1,274 @@
+<?php
+/**
+ * functions.php
+ * @version 2.4
+ * @desc General issued php function library for me
+ * @author Fándly Gergő Zoltán
+ * @copy 2017 Fándly Gergő Zoltán
+ */
+
+class functions{
+    const STR_SAME=0;
+    const STR_LOWERCASE=1;
+    const STR_RACCENT=2;
+    const STR_RACCLOW=3;
+    const RAND_SMALL=0;
+    const RAND_LARGE=1;
+    const RAND_SPEC=2;
+    const COOKIE_LIFETIME=3;
+    
+    public static function setError($code){
+        global $errcode;
+        if(isset($errcode)){
+            array_push($errcode, $code);
+        }
+        else{
+            $errcode=array($code);
+        }
+        setcookie("errcode", serialize($errcode), time()+functions::COOKIE_LIFETIME);
+    }
+    
+    public static function isError(){
+        global $errcode;
+        if(isset($errcode) || isset($_COOKIE['errcode'])){
+            return true;
+        }
+        else{
+            return false;
+        }
+    }
+    
+    public static function getErrorArray(){
+        global $errcode;
+        if(functions::isError()){
+            if(isset($errcode)){
+                return $errcode;
+            }
+            if(isset($_COOKIE['errcode'])){
+                return unserialize($_COOKIE['errcode']);
+            }
+        }
+        else{
+            return 0;
+        }
+    }
+    
+    public static function setMessage($code){
+        global $msgcode;
+        if(isset($msgcode)){
+            array_push($msgcode, $code);
+        }
+        else{
+            $msgcode=array($code);
+        }
+        setcookie("msgcode", serialize($msgcode), time()+functions::COOKIE_LIFETIME);
+    }
+    
+    public static function isMessage(){
+        global $msgcode;
+        if(isset($msgcode) || isset($_COOKIE['msgcode'])){
+            return true;
+        }
+        else{
+            return false;
+        }
+    }
+    
+    public static function getMessageArray(){
+        global $msgcode;
+        if(functions::isMessage()){
+            if(isset($msgcode)){
+                return $msgcode;
+            }
+            if(isset($_COOKIE['msgcode'])){
+                return unserialize($_COOKIE['msgcode']);
+            }
+        }
+        else{
+            return 0;
+        }
+    }
+    
+    public static function clearError(){
+        global $errcode;
+        if(isset($errcode)){
+            unset($errcode);
+        }
+        setcookie("errcode", null, -1);
+    }
+    
+    public static function clearMessage(){
+        global $msgcode;
+        if(isset($msgcode)){
+            unset($msgcode);
+        }
+        setcookie("msgcode", null, -1);
+    }
+    
+    public static function safeReload(){
+        header("Location: ".explode("?", $_SERVER['REQUEST_URI'])[0]);
+    }
+    
+    public static function randomString($length, $char=functions::RAND_SMALL){
+        if($char==0){
+            $charset="0123456789abcdefghijklmnopqrstuvwxyz";
+        }
+        else if($char==1){
+            $charset="0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
+        }
+        else if($char==2){
+            $charset="0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ~!@#$%^&*()_-=+\?/.>,<";
+        }
+        $charsetlength=strlen($charset);
+        $string="";
+        for($i=0; $i<$length; $i++){
+            $string=$string . $charset[rand(0, $charsetlength-1)];
+        }
+        return $string;
+    }
+    
+    public static function get_string_between($string, $start, $end){
+        $string=' ' . $string;
+        $ini=strpos($string, $start);
+        if($ini==0) return '';
+        $ini+=strlen($start);
+        $len=strpos($string, $end, $ini) - $ini;
+        return substr($string, $ini, $len);
+    }
+    
+    public static function process_string($str, $dep){
+        global $functions_accent_convert;
+        switch($dep){
+            case 0:
+                {
+                    return $str;
+                    break;
+                }
+            case 1:
+                {
+                    return strtolower($str);
+                    break;
+                }
+            case 2:
+                {
+                    return strtr($str, $functions_accent_convert);
+                    break;
+                }
+            case 3:
+                {
+                    return strtolower(strtr($str, $functions_accent_convert));
+                    break;
+                }
+        }
+        return 0;
+    }
+    
+    public static function validate_captcha($secretkey, $response){
+        $verify=file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=".$secretkey."&response=".$response);
+        $data=json_decode($verify);
+        if($data->success){
+            return true;
+        }
+        else{
+            return false;
+        }
+    }
+};
+
+$functions_accent_convert=array(
+        // Decompositions for Latin-1 Supplement
+        chr(195).chr(128) => 'A', chr(195).chr(129) => 'A',
+        chr(195).chr(130) => 'A', chr(195).chr(131) => 'A',
+        chr(195).chr(132) => 'A', chr(195).chr(133) => 'A',
+        chr(195).chr(135) => 'C', chr(195).chr(136) => 'E',
+        chr(195).chr(137) => 'E', chr(195).chr(138) => 'E',
+        chr(195).chr(139) => 'E', chr(195).chr(140) => 'I',
+        chr(195).chr(141) => 'I', chr(195).chr(142) => 'I',
+        chr(195).chr(143) => 'I', chr(195).chr(145) => 'N',
+        chr(195).chr(146) => 'O', chr(195).chr(147) => 'O',
+        chr(195).chr(148) => 'O', chr(195).chr(149) => 'O',
+        chr(195).chr(150) => 'O', chr(195).chr(153) => 'U',
+        chr(195).chr(154) => 'U', chr(195).chr(155) => 'U',
+        chr(195).chr(156) => 'U', chr(195).chr(157) => 'Y',
+        chr(195).chr(159) => 's', chr(195).chr(160) => 'a',
+        chr(195).chr(161) => 'a', chr(195).chr(162) => 'a',
+        chr(195).chr(163) => 'a', chr(195).chr(164) => 'a',
+        chr(195).chr(165) => 'a', chr(195).chr(167) => 'c',
+        chr(195).chr(168) => 'e', chr(195).chr(169) => 'e',
+        chr(195).chr(170) => 'e', chr(195).chr(171) => 'e',
+        chr(195).chr(172) => 'i', chr(195).chr(173) => 'i',
+        chr(195).chr(174) => 'i', chr(195).chr(175) => 'i',
+        chr(195).chr(177) => 'n', chr(195).chr(178) => 'o',
+        chr(195).chr(179) => 'o', chr(195).chr(180) => 'o',
+        chr(195).chr(181) => 'o', chr(195).chr(182) => 'o',
+        chr(195).chr(182) => 'o', chr(195).chr(185) => 'u',
+        chr(195).chr(186) => 'u', chr(195).chr(187) => 'u',
+        chr(195).chr(188) => 'u', chr(195).chr(189) => 'y',
+        chr(195).chr(191) => 'y',
+        // Decompositions for Latin Extended-A
+        chr(196).chr(128) => 'A', chr(196).chr(129) => 'a',
+        chr(196).chr(130) => 'A', chr(196).chr(131) => 'a',
+        chr(196).chr(132) => 'A', chr(196).chr(133) => 'a',
+        chr(196).chr(134) => 'C', chr(196).chr(135) => 'c',
+        chr(196).chr(136) => 'C', chr(196).chr(137) => 'c',
+        chr(196).chr(138) => 'C', chr(196).chr(139) => 'c',
+        chr(196).chr(140) => 'C', chr(196).chr(141) => 'c',
+        chr(196).chr(142) => 'D', chr(196).chr(143) => 'd',
+        chr(196).chr(144) => 'D', chr(196).chr(145) => 'd',
+        chr(196).chr(146) => 'E', chr(196).chr(147) => 'e',
+        chr(196).chr(148) => 'E', chr(196).chr(149) => 'e',
+        chr(196).chr(150) => 'E', chr(196).chr(151) => 'e',
+        chr(196).chr(152) => 'E', chr(196).chr(153) => 'e',
+        chr(196).chr(154) => 'E', chr(196).chr(155) => 'e',
+        chr(196).chr(156) => 'G', chr(196).chr(157) => 'g',
+        chr(196).chr(158) => 'G', chr(196).chr(159) => 'g',
+        chr(196).chr(160) => 'G', chr(196).chr(161) => 'g',
+        chr(196).chr(162) => 'G', chr(196).chr(163) => 'g',
+        chr(196).chr(164) => 'H', chr(196).chr(165) => 'h',
+        chr(196).chr(166) => 'H', chr(196).chr(167) => 'h',
+        chr(196).chr(168) => 'I', chr(196).chr(169) => 'i',
+        chr(196).chr(170) => 'I', chr(196).chr(171) => 'i',
+        chr(196).chr(172) => 'I', chr(196).chr(173) => 'i',
+        chr(196).chr(174) => 'I', chr(196).chr(175) => 'i',
+        chr(196).chr(176) => 'I', chr(196).chr(177) => 'i',
+        chr(196).chr(178) => 'IJ',chr(196).chr(179) => 'ij',
+        chr(196).chr(180) => 'J', chr(196).chr(181) => 'j',
+        chr(196).chr(182) => 'K', chr(196).chr(183) => 'k',
+        chr(196).chr(184) => 'k', chr(196).chr(185) => 'L',
+        chr(196).chr(186) => 'l', chr(196).chr(187) => 'L',
+        chr(196).chr(188) => 'l', chr(196).chr(189) => 'L',
+        chr(196).chr(190) => 'l', chr(196).chr(191) => 'L',
+        chr(197).chr(128) => 'l', chr(197).chr(129) => 'L',
+        chr(197).chr(130) => 'l', chr(197).chr(131) => 'N',
+        chr(197).chr(132) => 'n', chr(197).chr(133) => 'N',
+        chr(197).chr(134) => 'n', chr(197).chr(135) => 'N',
+        chr(197).chr(136) => 'n', chr(197).chr(137) => 'N',
+        chr(197).chr(138) => 'n', chr(197).chr(139) => 'N',
+        chr(197).chr(140) => 'O', chr(197).chr(141) => 'o',
+        chr(197).chr(142) => 'O', chr(197).chr(143) => 'o',
+        chr(197).chr(144) => 'O', chr(197).chr(145) => 'o',
+        chr(197).chr(146) => 'OE',chr(197).chr(147) => 'oe',
+        chr(197).chr(148) => 'R',chr(197).chr(149) => 'r',
+        chr(197).chr(150) => 'R',chr(197).chr(151) => 'r',
+        chr(197).chr(152) => 'R',chr(197).chr(153) => 'r',
+        chr(197).chr(154) => 'S',chr(197).chr(155) => 's',
+        chr(197).chr(156) => 'S',chr(197).chr(157) => 's',
+        chr(197).chr(158) => 'S',chr(197).chr(159) => 's',
+        chr(197).chr(160) => 'S', chr(197).chr(161) => 's',
+        chr(197).chr(162) => 'T', chr(197).chr(163) => 't',
+        chr(197).chr(164) => 'T', chr(197).chr(165) => 't',
+        chr(197).chr(166) => 'T', chr(197).chr(167) => 't',
+        chr(197).chr(168) => 'U', chr(197).chr(169) => 'u',
+        chr(197).chr(170) => 'U', chr(197).chr(171) => 'u',
+        chr(197).chr(172) => 'U', chr(197).chr(173) => 'u',
+        chr(197).chr(174) => 'U', chr(197).chr(175) => 'u',
+        chr(197).chr(176) => 'U', chr(197).chr(177) => 'u',
+        chr(197).chr(178) => 'U', chr(197).chr(179) => 'u',
+        chr(197).chr(180) => 'W', chr(197).chr(181) => 'w',
+        chr(197).chr(182) => 'Y', chr(197).chr(183) => 'y',
+        chr(197).chr(184) => 'Y', chr(197).chr(185) => 'Z',
+        chr(197).chr(186) => 'z', chr(197).chr(187) => 'Z',
+        chr(197).chr(188) => 'z', chr(197).chr(189) => 'Z',
+        chr(197).chr(190) => 'z', chr(197).chr(191) => 's');
+        
+?>

config/lib/loginManager/lmConfig.php

@@ -0,0 +1,82 @@
+<?php
+/**
+ * loginManager/lmConfig.php
+ * @version 1.3
+ * @desc config class
+ * @author Fándly Gergő Zoltán
+ * @copy 2017 Fándly Gergő Zoltán
+ */
+
+class lmConfig{
+    public function __construct($_pdo, $_session_lifetime, $_captcha_enable, $_captcha_after, $_captcha_sitekey, $_captcha_secretkey, $_ban_enable, $_ban_after, $_ban_time, $_look, $_remember_enable, $_remember_time, $_auth_type){
+        $this->pdo=$_pdo;
+        $this->session_lifetime=$_session_lifetime;
+        $this->captcha_enable=$_captcha_enable;
+        $this->captcha_after=$_captcha_after;
+        $this->captcha_sitekey=$_captcha_sitekey;
+        $this->captcha_secretkey=$_captcha_secretkey;
+        $this->ban_enable=$_ban_enable;
+        $this->ban_after=$_ban_after;
+        $this->ban_time=$_ban_time;
+        $this->look=$_look;
+        $this->remember_enable=$_remember_enable;
+        $this->remember_time=$_remember_time;
+        $this->auth_type=$_auth_type;
+    }
+    
+    private $pdo;
+    private $session_lifetime;
+    private $captcha_enable;
+    private $captcha_after;
+    private $captcha_sitekey;
+    private $captcha_secretkey;
+    private $ban_enable;
+    private $ban_after;
+    private $ban_time;
+    private $look;
+    private $remember_enable; //NOT SAFE AT ALL!!!
+    private $remember_time;
+    private $auth_type;
+    
+    public function getPDO(){
+        return $this->pdo;
+    }
+    public function getSessionLifetime(){
+        return $this->session_lifetime;
+    }
+    public function isCaptchaEnabled(){
+        return $this->captcha_enable;
+    }
+    public function getCaptchaAfter(){
+        return $this->captcha_after;
+    }
+    public function getCaptchaSitekey(){
+        return $this->captcha_sitekey;
+    }
+    public function getCaptchaSecretkey(){
+        return $this->captcha_secretkey;
+    }
+    public function isBanEnabled(){
+        return $this->ban_enable;
+    }
+    public function getBanAfter(){
+        return $this->ban_after;
+    }
+    public function getBanTime(){
+        return $this->ban_time;
+    }
+    public function getLook(){
+        return $this->look;
+    }
+    public function isRememberEnabled(){
+        return $this->remember_enable;
+    }
+    public function getRememberTime(){
+        return $this->remember_time;
+    }
+    public function getAuthType(){
+        return $this->auth_type;
+    }
+}
+
+?>

config/lib/loginManager/lmHandler.php

@@ -0,0 +1,14 @@
+<?php
+/**
+ * loginManager/lmHandler.php
+ * @version 1.1
+ * @desc Event handler for login manager
+ * @author Fándly Gergő Zoltán
+ * @copy 2017 Fándly Gergő Zoltán
+ */
+
+interface lmHandler{
+    public function handle($state, $target=0);
+}
+
+?>

config/lib/loginManager/lmPassword.php

@@ -0,0 +1,14 @@
+<?php
+/**
+ * loginManager/lmPassword.php
+ * @version 1.0
+ * @desc interface for function verifying password
+ * @author Fándly Gergő Zoltán
+ * @copy 2017 Fándly Gergő Zoltán
+ */
+
+interface lmPassword{
+    public function verifyPassword($cleartext, $database);
+}
+
+?>

config/lib/loginManager/lmStates.php

@@ -0,0 +1,24 @@
+<?php
+/**
+ * loginManager/lmStates.php
+ * @version 1.2
+ * @desc States of login manager
+ * @author Fándly Gergő Zoltán
+ * @copy 2017 Fándly Gergő Zoltán
+ */
+
+class lmStates{
+    const LOGIN_FAILED=0;
+    const LOGIN_OK=1;
+    const CAPTCHA_FAILED=2;
+    const BANNED=3;
+    const FORGET_DONE=4;
+    const LOGOUT_DONE=5;
+    
+    const AUTH_ID=10;
+    const AUTH_UNAME=11;
+    
+    const NOUSER=1;
+}
+
+?>

config/lib/loginManager/lmTwoFactor.php

@@ -0,0 +1,14 @@
+<?php
+/**
+ * loginManager/lmTwoFactor.php
+ * @version 1.0
+ * @desc second factor auth to LM
+ * @author Fándly Gergő Zoltán 2017
+ * @copy 2017 Fándly Gergő Zoltán
+ */
+
+interface lmTwoFactor{
+    public function secondFactor($uid);
+}
+
+?>

config/lib/loginManager/lmUtils.php

@@ -0,0 +1,44 @@
+<?php
+/**
+ * loginManager/lmUtils.php
+ * @desc utilities for correct functioning
+ * @version 1.0
+ * @author Fándly Gergő Zoltán
+ * @copy 2017 Fándly Gergő Zoltán
+ */
+
+class lmUtils{
+    /**
+     * generate a random string with special character
+     * @param int $length length of the requested string
+     * @return string
+     */
+    public static function randomString($length){
+        $charset="0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ~!@#$%^&*()_-=+\?/.>,<";
+        $charsetLength=strlen($charset);
+        $string="";
+        for($i=0; $i<$length; $i++){
+            $string.=$charset[rand(0, $charsetLength-1)];
+        }
+        return $string;
+    }
+    
+    /**
+     * validate google ReCaptcha
+     * @param string $secretkey secret key to captcha API
+     * @param string $response response of API
+     * @return bool
+     */
+    public static function validateCaptcha($secretkey, $response){
+        $verify=file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=".$secretkey."&response=".$response);
+        $data=json_decode($verify);
+        if($data->success){
+            return true;
+        }
+        else{
+            return false;
+        }
+    }
+}
+
+?>

config/lib/loginManager/loginManager.php

@@ -0,0 +1,393 @@
+<?php
+/**
+ * loginManager/loginManager.php
+ * @version 1.1
+ * @desc Easily manage authentication to your system
+ * @author Fándly Gergő Zoltán
+ * @copy 2017 Fándly Gergő Zoltán
+ */
+
+/**
+ * NEEDED Database structure:
+ * 
+<?sql
+CREATE TABLE `users`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `username` varchar(65) NOT NULL default '', /* optional
+    `password` varchar(255) NOT NULL default '',
+    PRIMARY KEY (`id`)
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `login_history`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `user` int(4) UNSIGNED NOT NULL default 1,   /* id of nouser 
+    `date` timestamp NOT NULL default current_timestamp,
+    `ip` varchar(45) NOT NULL default '0.0.0.0',
+    `auth_token` varchar(65) NOT NULL default '',
+    `user_agent` varchar(500) NOT NULL default '',
+    `success` tinyint(1) NOT NULL default 0,
+    PRIMARY KEY (`id`),
+    FOREIGN KEY (`user`) REFERENCES users(`id`) ON DELETE CASCADE
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `login_remember`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `user` int(4) UNSIGNED NOT NULL default 0,
+    `remember_token` varchar(65) NOT NULL default '',
+    `until` timestamp NOT NULL default current_timestamp,
+    PRIMARY KEY (`id`),
+    FOREIGN KEY (`user`) REFERENCES users(`id`) ON DELETE CASCADE
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `login_bans`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `ip` varchar(45) NOT NULL default '0.0.0.0',
+    `until` timestamp NOT NULL default current_timestamp,
+    PRIMARY KEY (`id`)
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+INSERT INTO users (`id`, `username`) VALUES (1, 'nouser');
+?>
+ *
+ */
+
+
+/*
+ * Includes
+ */
+require("lmStates.php");
+require("lmConfig.php");
+require("lmHandler.php");
+require("lmPassword.php");
+require("lmTwoFactor.php");
+require("lmUtils.php");
+
+
+/*
+ * Class
+ */
+class loginManager{
+    //constructor
+    
+    /**
+     * building...
+     * @param lmConfig $_config configuration for login Manager
+     * @param lmHandler $_eventHandler handler of events
+     * @param lmPassword $_passwordEngine engine for verifying passwords
+     * @return void
+     */
+    public function __construct($_config, $_eventHandler, $_passwordEngine, $_twoFactor){
+        $this->config=$_config;
+        $this->eventHandler=$_eventHandler;
+        $this->passwordEngine=$_passwordEngine;
+        $this->twoFactor=$_twoFactor;
+        return;
+    }
+    
+    
+    
+    //settings
+    
+    private $config;
+    private $eventHandler;
+    private $passwordEngine;
+    private $twoFactor;
+    
+    
+    
+    //frontend functions
+    
+    /**
+     * initialize session and set its lifetime
+     * @return bool
+     */
+    public function init(){
+        session_set_cookie_params($this->config->getSessionLifetime());
+        return session_start();
+    }
+    
+    /**
+     * prepare for login. Run this on the top of your login page!
+     * @return void
+     */
+    public function loginPrepare(){
+        $this->passFailedAttempts();
+        return;
+    }
+    
+    /**
+     * lets start here!
+     * @param int/string @identifier id or username of user
+     * @param string @password cleartext password from input
+     * @param bool $remember save user fot further use
+     * @return void
+     */
+    public function login($identifier, $password, $remember=false){
+        global $lm_force_captcha;
+        
+        if($this->passFailedAttempts()){ //not banned
+            if(isset($lm_force_captcha)){ //check captcha
+                if(!isset($_POST['g-recaptcha-response'])){
+                    $captcha_failed=true;
+                    $this->addLoginHistory(lmStates::NOUSER, lmStates::LOGIN_FAILED);
+                    $this->eventHandler->handle(lmStates::CAPTCHA_FAILED);
+                    return;
+                }
+                else{
+                    if(!lmUtils::validateCaptcha($this->config->getCaptchaSecretkey(), $_POST['g-recaptcha-response'])){
+                        $captcha_failed=true;
+                        $this->addLoginHistory(lmStates::NOUSER, lmStates::LOGIN_FAILED);
+                        $this->eventHandler->handle(lmStates::CAPTCHA_FAILED);
+                        return;
+                    }
+                }
+            }
+            
+            if(!isset($captcha_failed)){
+                if($this->config->isRememberEnabled()){ //check if remembering is enabled
+                    if($this->isRememberingUser() && $this->twoFactor->secondFactor($this->isRememberingUser())){ //remembering.
+                        $this->permitLogin($this->isRememberingUser()); //good to go!
+                        return;
+                    }
+                }
+                //proceed with normal login
+                if($this->config->getAuthType()==lmStates::AUTH_UNAME){ //username based authentication
+                    $sql=$this->config->getPDO()->prepare("SELECT COUNT(id) AS count, id, password FROM users WHERE username=:identifier and id<>1");
+                }
+                else{
+                    $sql=$this->config->getPDO()->prepare("SELECT COUNT(id) AS count, id, password FROM users WHERE id=:identifier and id<>1");
+                }
+                $sql->execute(array(":identifier"=>$identifier));
+                $res=$sql->fetch(PDO::FETCH_ASSOC);
+                
+                if($res['count']==0){ //user not existing
+                    $this->addLoginHistory(lmStates::NOUSER, lmStates::LOGIN_FAILED);
+                    $this->eventHandler->handle(lmStates::LOGIN_FAILED);
+                    return;
+                }
+                else{
+                    if($this->passwordEngine->verifyPassword($password, $res['password']) && $this->twoFactor->secondFactor($res['id'])){
+                        if($this->config->isRememberEnabled()){ //remember... if he wants to be insecure
+                            if($remember){
+                                $this->rememberUser($res['id']);
+                            }
+                        }
+                        $this->permitLogin($res['id']); //good to go!
+                        return;
+                    }
+                    else{
+                        $this->addLoginHistory($res['id'], lmStates::LOGIN_FAILED);
+                        $this->eventHandler->handle(lmStates::LOGIN_FAILED);
+                        return;
+                    }
+                }
+            }
+        }
+        return;
+    }
+    
+    /**
+     * finish it up!
+     * @return void
+     */
+    public function logout(){
+        $_SESSION=array();
+        session_destroy();
+        setcookie("lm_login_random", NULL, -1);
+        $this->eventHandler->handle(lmStates::LOGOUT_DONE);
+        return;
+    }
+    
+    /**
+     * just some formal checking
+     * @return bool
+     */
+    public function validateLogin(){
+        if(!isset($_SESSION['lm_id'])){
+            return false;
+        }
+        else{
+            $sql=$this->config->getPDO()->prepare("SELECT auth_token FROM login_history WHERE user=:id and success=1 ORDER BY id DESC LIMIT 1");
+            $sql->execute(array(":id"=>$_SESSION['lm_id']));
+            $res=$sql->fetch(PDO::FETCH_ASSOC);
+            
+            if($res['auth_token']==$this->getSessionKey()){
+                return true;
+            }
+            else{
+                return false;
+            }
+        }
+    }
+    
+    /**
+     * do i know you?
+     * @return int
+     */
+    public function isRememberingUser(){
+        if(!$this->config->isRememberEnabled()){
+            return NULL;
+        }
+        
+        if(is_null($this->getRememberKey())){
+            return NULL;
+        }
+        else{
+            $sql=$this->config->getPDO()->prepare("SELECT COUNT(id) AS count, user FROM login_remember WHERE remember_token=:token and until>:until");
+            $sql->execute(array(":token"=>$this->getRememberKey(), ":until"=>date("Y-m-d H:i:s")));
+            $res=$sql->fetch(PDO::FETCH_ASSOC);
+            
+            if($res['count']!=1){
+                $this->addLoginHistory(lmStates::NOUSER, lmStates::LOGIN_FAILED);
+                return NULL;
+            }
+            else{
+                return $res['user'];
+            }
+        }
+    }
+    
+    /**
+     * i don't know you anymore!
+     * @return void
+     */
+    public function forgetUser(){
+        $sql=$this->config->getPDO()->prepare("UPDATE login_remember SET until=0 WHERE remember_token=:token");
+        $sql->execute(array(":token"=>$this->getRememberKey()));
+        
+        setcookie("lm_login_remember", NULL, -1);
+        
+        $this->eventHandler->handle(lmStates::FORGET_DONE);
+        
+        return;
+    }
+    
+    /**
+     * print captcha html code if needed
+     * @param bool $dark use the dark theme, default false
+     * @return void
+     */
+    public function printCaptcha($dark=false){
+        if($this->config->isCaptchaEnabled()){
+            global $lm_force_captcha;
+            if(isset($lm_force_captcha)){
+                if($dark){
+                    echo "<div class=\"g-recaptcha\" data-sitekey=\"".$this->config->getCaptchaSitekey()."\" data-theme=\"dark\"></div>";
+                }
+                else{
+                    echo "<div class=\"g-recaptcha\" data-sitekey=\"".$this->config->getCaptchaSitekey()."\"></div>";
+                }
+                return;
+            }
+            else{
+                return;
+            }
+        }
+        return;
+    }
+    
+    
+    
+    //backend functions
+    
+    protected function generateSessionKey(){
+        $random=lmUtils::randomString(32);
+        setcookie("lm_login_random", $random, time()+$this->config->getSessionLifetime());
+        $hash=hash("sha256", $_SERVER['REMOTE_ADDR']."***".$_SERVER['HTTP_USER_AGENT']."***".$random);
+        return $hash;
+    }
+    
+    protected function getSessionKey(){
+        if(!isset($_COOKIE['lm_login_random'])){
+            return NULL;
+        }
+        else{
+            $hash=hash("sha256", $_SERVER['REMOTE_ADDR']."***".$_SERVER['HTTP_USER_AGENT']."***".$_COOKIE['lm_login_random']);
+            return $hash;
+        }
+    }
+    
+    protected function passFailedAttempts(){
+        //check if no limitations are enabled
+        if(!$this->config->isCaptchaEnabled() && !$this->config->isBanEnabled()){
+            return true; //nothing to do
+        }
+        
+        //check if is already banned
+        if($this->config->isBanEnabled()){
+            $sql=$this->config->getPDO()->prepare("SELECT COUNT(id) AS count FROM login_bans WHERE id=:ip and until>:until");
+            $sql->execute(array(":ip"=>$_SERVER['REMOTE_ADDR'], ":until"=>date("Y-m-d H:i:s")));
+            $res=$sql->fetch(PDO::FETCH_ASSOC);
+            
+            if($res['count']!=0){
+                $this->eventHandler->handle(lmStates::BANNED);
+                return false;
+            }
+        }
+        
+        //count failed attempts
+        $sql=$this->config->getPDO()->prepare("SELECT COUNT(id) AS count FROM login_history WHERE ip=:ip and date>:date and success=0");
+        $sql->execute(array(":ip"=>$_SERVER['REMOTE_ADDR'], ":date"=>date("Y-m-d H:i:s", time()-$this->config->getLook())));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        
+        //force captcha if case
+        if($res['count']>=$this->config->getCaptchaAfter() && $this->config->isCaptchaEnabled()){
+            global $lm_force_captcha;
+            $lm_force_captcha=true;
+        }
+        
+        //bann if case
+        if($res['count']>=$this->config->getBanAfter() && $this->config->isBanEnabled()){
+            $sql=$this->config->getPDO()->prepare("INSERT INTO login_bans (ip, until) VALUES (:ip, :until)");
+            $sql->execute(array(":ip"=>$_SERVER['REMOTE_ADDR'], ":until"=>date("Y-m-d H:i:s", time()+$this->config->getBanTime())));
+            global $lm_banned;
+            $lm_banned=true;
+            $this->eventHandler->handle(lmStates::BANNED);
+            return false;
+        }    
+        
+        return true;
+    }
+        
+    protected function addLoginHistory($uid, $success=lmStates::LOGIN_FAILED, $token=""){
+        $sql=$this->config->getPDO()->prepare("INSERT INTO login_history (user, date, ip, auth_token, user_agent, success) VALUES (:user, :date, :ip, :auth_token, :user_agent, :success)");
+        $sql->execute(array(":user"=>$uid, ":date"=>date("Y-m-d H:i:s"), ":ip"=>$_SERVER['REMOTE_ADDR'], ":auth_token"=>$token, ":user_agent"=>$_SERVER['HTTP_USER_AGENT'], ":success"=>$success));
+        return;
+    }
+    
+    protected function permitLogin($uid){
+        $token=$this->generateSessionKey();
+        $this->addLoginHistory($uid, lmStates::LOGIN_OK, $token);
+        
+        $_SESSION=array();
+        $_SESSION['lm_id']=$uid;
+        
+        $this->eventHandler->handle(lmStates::LOGIN_OK, $uid);
+        
+        return;
+    }
+    
+    //functions for remembering
+    protected function generateRememberKey(){
+        $random=lmUtils::randomString(32);
+        setcookie("lm_login_remember", $random, time()+(86000*$this->config->getRememberTime()));
+        $hash=hash("sha256", $_SERVER['REMOTE_ADDR']."***".$_SERVER['HTTP_USER_AGENT']."***".$random);
+        return $hash;
+    }
+    
+    protected function getRememberKey(){
+        if(!isset($_COOKIE['lm_login_remember'])){
+            return NULL;
+        }
+        else{
+            $hash=hash("sha256", $_SERVER['REMOTE_ADDR']."***".$_SERVER['HTTP_USER_AGENT']."***".$_COOKIE['lm_login_remember']);
+            return $hash;
+        }
+    }
+    
+    protected function rememberUser($uid){
+        $sql=$this->config->getPDO()->prepare("INSERT INTO login_remember (user, remember_token, until) VALUES (:user, :token, :until)");
+        $sql->execute(array(":user"=>$uid, ":token"=>$this->generateRememberKey(), ":until"=>date("Y-m-d H:i:s", time()+(86400*$this->config->getRememberTime()))));
+        return;
+    }
+}

config/setup.sql

@@ -0,0 +1,118 @@
+/**
+ * /config/setup.sql
+ * @version 1.3
+ * @desc sql structure file
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+CREATE TABLE `users`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `username` varchar(65) NOT NULL default '',
+    `fullname` varchar(65) NOT NULL default '',
+    `accesslevel` tinyint(1) UNSIGNED NOT NULL default 0,   /* 0:student, 1:teacher; 2:head teacher; 3:manager; 4:admin */
+    `class` varchar(10) NOT NULL default '',   /* format: {G,L}{Year when school started}[AF] */
+    `password` varchar(255) NOT NULL default '',
+    `perm_message` tinyint(1) NOT NULL default 1,   /* 0:don't allow messaging; 1:allow messaging */
+    PRIMARY KEY (`id`)
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `login_history`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `user` int(4) UNSIGNED NOT NULL default 1,
+    `date` timestamp NOT NULL default current_timestamp,
+    `ip` varchar(45) NOT NULL default '0.0.0.0',
+    `auth_token` varchar(65) NOT NULL default '',
+    `user_agent` varchar(500) NOT NULL default '',
+    `success` tinyint(1) NOT NULL default 0,
+    PRIMARY KEY (`id`),
+    FOREIGN KEY (`user`) REFERENCES users(`id`) ON DELETE CASCADE
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `login_remember`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `user` int(4) UNSIGNED NOT NULL default 0,
+    `remember_token` varchar(65) NOT NULL default '',
+    `until` timestamp NOT NULL default current_timestamp,
+    PRIMARY KEY (`id`),
+    FOREIGN KEY (`user`) REFERENCES users(`id`) ON DELETE CASCADE
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `login_bans`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `ip` varchar(45) NOT NULL default '0.0.0.0',
+    `until` timestamp NOT NULL default current_timestamp,
+    PRIMARY KEY (`id`)
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `subjects`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `name_1` varchar(65) NOT NULL default '',
+    `name_2` varchar(65) NOT NULL default '',
+    PRIMARY KEY (`id`)
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `contests`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `name_1` varchar(65) NOT NULL default '',
+    `name_2` varchar(65) NOT NULL default '',
+    `subject` int(4) UNSIGNED NOT NULl,
+    `description` text NOT NULL default '',
+    `ministry_support` tinyint(1) UNSIGNED NOT NULL default 0,   /* 0:not listed; 1:not supported; 2:supported */
+    `ministry_place` int(4) UNSIGNED NOT NULL default 0,   /* place on the list of contests */
+    `schoolyear` varchar(16) NOT NULL default '0000-0001',
+    PRIMARY KEY (`id`),
+    FOREIGN KEY (`subject`) REFERENCES subjects(`id`) ON DELETE CASCADE ON UPDATE CASCADE
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `phases`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `name_1` varchar(65) NOT NULl default '',
+    `name_2` varchar(65) NOT NULL default '',
+    PRIMARY KEY (`id`)
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `register`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `student` int(4) UNSIGNED NOT NULL default 1,
+    `contest` int(4) UNSIGNED NOT NULL,
+    `phase` int(4) UNSIGNED NOT NULL,
+    `teacher` int(4) UNSIGNED NOT NULL default 1,
+    `place` tinyint(1) NOT NULL default 0,   /* -1:dicseret; -2:kulondij; -3:reszvetel */
+    `mention` text NOT NULL default '',
+    `schoolyear` varchar(16) NOT NULL default '0000-0001',
+    PRIMARY KEY (`id`),
+    FOREIGN KEY (`student`) REFERENCES users(`id`) ON DELETE CASCADE ON UPDATE CASCADE,
+    FOREIGN KEY (`contest`) REFERENCES contests(`id`) ON DELETE CASCADE ON UPDATE CASCADE,
+    FOREIGN KEY (`phase`) REFERENCES phases(`id`) ON DELETE CASCADE ON UPDATE CASCADE,
+    FOREIGN KEY (`teacher`) REFERENCES users(`id`) ON DELETE CASCADE ON UPDATE CASCADE
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+CREATE TABLE `messages`(
+    `id` int(4) UNSIGNED NOT NULL auto_increment,
+    `sender` int(4) UNSIGNED NOT NULL default 1,
+    `recipient` int(4) UNSIGNED NOT NULL default 1,
+    `content` text NOT NULL default '',
+    `dismissed` tinyint(1) UNSIGNED NOT NULL default 0,
+    PRIMARY KEY (`id`),
+    FOREIGN KEY (`sender`) REFERENCES users(`id`) ON DELETE CASCADE ON UPDATE CASCADE,
+    FOREIGN KEY (`recipient`) REFERENCES users(`id`) ON DELETE CASCADE ON UPDATE CASCADE
+) CHARACTER SET utf8 COLLATE utf8_general_ci;
+
+INSERT INTO users (`id`, `username`) VALUES (1, 'nouser');

index.php

@@ -0,0 +1,195 @@
+<?php
+/**
+ * /index.php
+ * @version 1.0
+ * @desc Main index file
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+require_once("config/config.php");
+require_once("subs/loader.php");
+
+if(!$lm->validateLogin()){
+    $lm->loginPrepare();
+    if(isset($_POST['uname']) && isset($_POST['passwd'])){
+        $remember=isset($_POST['remember']);
+        $lm->login($_POST['uname'], $_POST['passwd'], $remember);
+    }
+    if(isset($_GET['login_auto'])){
+        $lm->login("", "");
+    }
+    if(isset($_GET['forget_user'])){
+        $lm->forgetUser();
+    }
+}
+else{
+    if(isset($_GET['logout'])){
+        $lm->logout();
+    }
+}
+
+//select page we want to see
+$view="";
+if(isset($_GET['view'])){
+    $view=$_GET['view'];
+}
+
+?>
+
+<!DOCTYPE html>
+<html>
+    <head>
+        <title><?php echo $config['general']['title']." - ".$config['general']['org'] ?></title>
+        <meta charset="UTF-8">
+        <!-- stylesheet, icon -->
+        <link rel="stylesheet" href="./style/style.css">
+        <link rel="stylesheet" media="screen and (max-width: 1024px)" href="./style/mobile.css">
+        <link rel="icon" href="./res/icon.png">
+        <!-- jquery -->
+        <script src="//code.jquery.com/jquery-3.2.1.min.js"></script>
+        <!-- cookieconsent -->
+        <script>
+            window.cookieconsent_options={
+                message: '<?php echo $lang['cookie_message'] ?>',
+                dismiss: '<?php echo $lang['cookie_dismiss'] ?>',
+            };
+        </script>
+        <script src="//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/1.0.9/cookieconsent.min.js"></script>
+        <!-- reCaptcha -->
+        <script src="//www.google.com/recaptcha/api.js"></script>
+        <!-- footable -->
+        <script src="//cdnjs.cloudflare.com/ajax/libs/jquery-footable/3.1.6/footable.core.min.js"></script>
+        <link rel="stylesheet" href="//cdnjs.cloudflare.com/ajax/libs/jquery-footable/3.1.6/footable.core.standalone.min.css">
+        <link rel="stylesheet" href="//maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css">
+        <!-- main script -->
+        <script src="./script/js.php?load=main"></script>
+        <script src="./script/js.php?load=<?php echo $view ?>"></script>
+    </head>
+    <body>
+        <!-- overlays -->
+        <div id="messageOverlay" class="overlay messages" style="display: none" onclick="disposeMessageOverlay()"></div>
+        <div id="loadingOverlay" class="overlay loading" style="display: none">
+            <img src="./res/loading.gif" alt="loading">
+            <span><?php echo $lang['loading']."..." ?></span>
+        </div>
+        <div class="center">
+            <div id="message_container">
+                <?php
+                //load messages manually
+                include("subs/msg.php");
+                ?>
+            </div>
+        </div>
+        <?php if(!$lm->validateLogin()): ?>
+        <!-- Not logged in -->
+        <div class="center">
+            <div id="login_area">
+                <div class="center">
+                    <?php if($lm->isRememberingUser()): ?>
+                    <fieldset class="center">
+                        <legend><?php echo $lang['login']?></legend>
+                        <?php
+                        $sql=$db->prepare("SELECT fullname FROM users WHERE id=:id");
+                        $sql->execute(array(":id"=>$lm->isRememberingUser()));
+                        $res=$sql->fetch(PDO::FETCH_ASSOC);
+                        ?>
+                        <h3><?php echo $lang['remember_as']." ".$res['fullname'] ?></h3>
+                        <button type="button" onclick="window.location='./?login_auto'"><?php echo $lang['login'] ?></button>
+                        <br>
+                        <br>
+                        <button type="button" onclick="window.location='./?forget_user'"><?php echo $lang['forget_user'] ?></button>
+                    </fieldset>
+                    <?php else: ?>
+                    <form method="POST" action="./" id="login">
+                        <fieldset class="center">
+                            <legend><?php echo $lang['login'] ?></legend>
+                            <div class="center">
+                                <table class="center">
+                                    <tr>
+                                        <td><?php echo $lang['username'].": " ?></td>
+                                        <td><input type="text" name="uname" placeholder="<?php echo $lang['username']."..." ?>" required></td>
+                                    </tr>
+                                    <tr>
+                                        <td><?php echo $lang['password'].": " ?></td>
+                                        <td><input type="password" name="passwd" placeholder="<?php echo $lang['password']."..." ?>" required></td>
+                                    </tr>
+                                    <tr>
+                                        <td><?php echo $lang['remember'].": " ?></td>
+                                        <td>
+                                            <div class="checkbox">
+                                                <input id="remember" type="checkbox" name="remember" hidden>
+                                                <label for="remember"></label>
+                                            </div>
+                                        </td>
+                                    </tr>
+                                </table>
+                                <br>
+                                <?php $lm->printCaptcha() ?>
+                                <br>
+                                <br>
+                                <button type="submit" form="login"><?php echo $lang['ok'] ?></button>
+                            </div>
+                        </fieldset>
+                    </form>
+                    <?php endif ?>
+                </div>
+            </div>
+        </div>
+        <?php else: ?>
+        <!-- Logged in -->
+        <div id="menu">
+            <ul class="menu">
+                <a onclick="goTo('')"><li><img src="./res/index.png" class="icon" alt="icon"><?php echo $lang['index'] ?></li></a>
+                <?php if($_SESSION['accesslevel']>=3): ?>
+                <a onclick="goTo('users')"><li><img src="./res/users.png" class="icon" alt="icon"><?php echo $lang['users'] ?></li></a>
+                <?php endif ?>
+                <?php if($_SESSION['accesslevel']>=1): ?>
+                <a onclick="goTo('classes')"><li><img src="./res/classes.png" class="icon" alt="icon"><?php echo $lang['classes'] ?></li></a>
+                <a onclick="goTo('subjects')"><li><img src="./res/subjects.png" class="icon" alt="icon"><?php echo $lang['subjects'] ?></li></a>
+                <a onclick="goTo('contests')"><li><img src="./res/contests.png" class="icon" alt="icon"><?php echo $lang['contests'] ?></li></a>
+                <a onclick="goTo('phases')"><li><img src="./res/phases.png" class="icon" alt="icon"><?php echo $lang['phases'] ?></li></a>
+                <a onclick="goTo('register')"><li><img src="./res/register.png" class="icon" alt="icon"><?php echo $lang['register'] ?></li></a>
+                <a onclick="goTo('wizard')"><li><img src="./res/wizard.png" class="icon" alt="icon"><?php echo $lang['wizard'] ?></li></a>
+                <?php endif ?>
+                <a onclick="goTo('profile')"><li><img src="./res/profile.png" class="icon" alt="icon"><?php echo $lang['profile'] ?></li></a>
+                <?php if($_SESSION['accesslevel']>=4): ?>
+                <a onclick="goTo('admin')"><li><img src="./res/admin.png" class="icon" alt="icon"><?php echo $lang['admin'] ?></li></a>
+                <?php endif ?>
+                <a href="./?logout"><li><img src="./res/logout.png" class="icon" alt="icon"><?php echo $lang['logout'] ?></li></a>
+            </ul>
+        </div>
+        <hr class="placeholder">
+        <div class="content" id="content">
+            <!-- part -->
+            <?php
+            //load first part manually
+            loadPart($view);
+            ?>
+            <!-- part end -->
+        </div>
+        <?php endif ?>
+        <hr class="placeholder" style="height: 500px">
+        <footer>
+            <p><?php echo "&copy; ".$config['general']['org']." ".date("Y") ?></p>
+            <p>Powered by: ResultManager<br>version: <?php echo VERSION ?><br>Copyright (c) 2017-<?php echo date("Y") ?> Fándly Gergő (<a href="//systemtest.tk">systemtest.tk</a>, <a href="mailto:contact@systemtest.tk">contact@systemtest.tk</a>)</p>
+            <p><a href="./license.txt">License</a></p>
+        </footer>
+    </body>
+</html>

script/.js

@@ -0,0 +1,24 @@
+/**
+ * /script/.js
+ * @version 1.0
+ * @desc Index javascript
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+

script/admin.js

@@ -0,0 +1,115 @@
+/**
+ * /script/admin.js
+ * @version 1.3
+ * @desc Javascript file for the admin submenu
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+function adminImportUsers(){
+    //hide all status messages if any shown
+    $("#statuses").children().each(function(){
+        $(this).css("display", "none");
+    });
+    
+    //get file
+    var file=$("#csvFile")[0].files[0];
+    
+    //if greater than 10MB don't upload
+    if(file.size>10000000){
+        $("#status_fileTooBig").slideDown();
+        return;
+    }
+    else{
+        $("#status_uploading").slideDown(function(){
+            //generate form data
+            var data=new FormData();
+            data.append("import_file", file);
+            
+            //run ajax upload request
+            $.ajax({
+                url: "./subs/loader.php?load=admin&backend",
+                type: "POST",
+                data: data,
+                cache: false,
+                contentType: false,
+                processData: false,
+                xhr: function(){
+                    var myXHR=$.ajaxSettings.xhr();
+                    if(myXHR.upload){
+                        myXHR.upload.addEventListener("progress", function(e){
+                            if(e.lengthComputable){
+                                //calculate percent with 1 decimal precision
+                                var percent=Math.round(e.loaded*100/e.total*10)/10;
+                                percent=percent.toString()+"%";
+                                
+                                //upload progressbar
+                                $("#uploadStatus").children("div").css("width", percent);
+                                $("#uploadStatus").children("div").children("span").text(percent);
+                            }
+                        });
+                    }
+                    return myXHR;
+                },
+                success: function(response){
+                    $("#status_uploading").slideUp();
+                    
+                    //something went wrong during the upload
+                    if(response=="error"){
+                        loadMessages();
+                        $("#status_uploadError").slideDown();
+                    }
+                    else{
+                        //everything ok so far
+                        $("#status_processing").slideDown();
+                        
+                        //start listener that checks processing status (run every 500ms)
+                        var progressChecker=setInterval(function(){
+                            $.ajax({
+                                url: "./subs/loader.php",
+                                type: "GET",
+                                data: {"load":"admin", "backend":true, "import_progress":response},
+                                success: function(response2){
+                                    //update progressbar
+                                    $("#processStatus").children("div").css("width", response2);
+                                    $("#processStatus").children("div").children("span").text(response2);
+                                }
+                            });
+                        }, 500);
+                        
+                        //start processing of file with ajax
+                        $.ajax({
+                            url: "./subs/loader.php?load=admin&backend",
+                            type: "POST",
+                            data: {"process_file":response},
+                            success: function(response2){
+                                //import complete
+                                $("#status_processing").slideUp();
+                                $("#status_done").slideDown();
+                                
+                                //stop progress checker
+                                clearInterval(progressChecker);
+                            }
+                        });
+                    }
+                }
+            });
+        });
+    }
+}

script/classes.js

@@ -0,0 +1,63 @@
+/**
+ * /script/classes.js
+ * @version 1.0
+ * @desc Javascript file for the classes submenu
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+function classesLoadList(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php?load=classes&backend&list",
+            type: "GET",
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function classesFilterApply(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php?load=classes&backend&list",
+            type: "POST",
+            data: $("#dd_filter_form").serialize(),
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function classesFilterReset(){
+    $("#dd_filter_form")[0].reset();
+    classesLoadList();
+}
+
+/*
+ * RUN
+ */
+//autoload list
+classesLoadList();

script/contests.js

@@ -0,0 +1,130 @@
+/**
+ * /script/contests.js
+ * @version 1.0
+ * @desc Javascript file for the contests submenu
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+function contestsLoadList(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php",
+            data: {"load":"contests", "backend":true, "list":$("#schoolyear").val()},
+            type: "GET",
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function contestsFilterApply(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php?load=contests&backend&list="+$("#schoolyear").val(),
+            type: "POST",
+            data: $("#dd_filter_form").serialize(),
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function contestsFilterReset(){
+    $("#dd_filter_form")[0].reset();
+    contestsLoadList();
+}
+
+function contestsNew(){
+    $.ajax({
+        url: "./subs/loader.php?load=contests&backend",
+        type: "POST",
+        data: $("#dd_new_form").serialize(),
+        success: function(){
+            $("#dd_new_form")[0].reset();
+            loadMessages();
+            contestsLoadList();
+        }
+    });
+}
+
+function contestsEdit(id){
+    $.ajax({
+        url: "./subs/loader.php?load=contests&backend&getdata="+id,
+        type: "GET",
+        success: function(response){
+            var data=JSON.parse(response);
+            $("#dd_edit_form input[name=edit]").val(data.id);
+            $("#dd_edit_form input[name=name_1]").val(data.name_1);
+            $("#dd_edit_form input[name=name_2]").val(data.name_2);
+            $("#dd_edit_form select[name=subject] option[value="+data.subject+"]").attr("selected", true);
+            $("#dd_edit_form textarea[name=description]").text(data.description);
+            $("#dd_edit_form input[name=ministry_support][value="+data.ministry_support+"]").attr("checked", true);
+            $("#dd_edit_form input[name=ministry_place]").val(data.ministry_place);
+            $("#dd_edit").slideDown();
+            smoothScroll("#dd_edit");
+        }
+    });
+}
+
+function contestsSubmitEdit(){
+    $.ajax({
+        url: "./subs/loader.php?load=contests&backend",
+        type: "POST",
+        data: $("#dd_edit_form").serialize(),
+        success: function(){
+            $("#dd_edit").slideUp(function(){
+                $("#dd_edit_form")[0].reset();
+            });
+            loadMessages();
+            contestsLoadList();
+        }
+    });
+}
+
+function contestsCancelEdit(){
+    $("#dd_edit").slideUp(function(){
+        $("#dd_edit_form")[0].reset();
+    });
+}
+
+function contestsDelete(id, elem){
+    if(confirm($("#contestsDeleteConfirm").text())){
+        $.ajax({
+            url: "./subs/loader.php?load=contests&backend",
+            type: "POST",
+            data: {"delete": id},
+            success: function(){
+                loadMessages();
+                footableRemoveElem(elem);
+            }
+        });
+    }
+}
+
+/*
+ * RUN
+ */
+contestsLoadList();

script/js.php

@@ -0,0 +1,29 @@
+<?php
+/**
+ * /script/js.php
+ * @version 1.0
+ * @desc Loader for JS
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+if(isset($_GET['load'])){
+    header("Content-type: application/javascript");
+    readfile($_GET['load'].".js", true);
+}

script/main.js

@@ -0,0 +1,203 @@
+/**
+ * /script/main.js
+ * @version 1.4
+ * @desc Main javascript file
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+var Site="";
+
+function disposeMessageOverlay(){
+    $("#messageOverlay").html("");
+    $("#messageOverlay").fadeOut();
+}
+
+function showMessage(html){
+    $("#messageOverlay").html(html);
+    $("#messageOverlay").fadeIn();
+    setTimeout(function(){
+        disposeMessageOverlay()
+    }, 5000);
+}
+
+function loadMessages(){
+    $.ajax({
+        url: "./subs/msg.php",
+        type: "GET",
+        success: function(response){
+            if(response!=""){
+                showMessage(response);
+            }
+        }
+    });
+}
+
+function smoothScroll(selector){
+    $('html, body').stop().animate({
+        scrollTop: $(selector).offset().top
+    }, 500);
+}
+
+function goTo(site, pop=false){
+    Site=site;
+    //slide up
+    $("#content").slideUp(function(){
+        //load part
+        $.ajax({
+            url: "./subs/loader.php",
+            type: "GET",
+            data: {"load": site},
+            success: function(response){
+                $("#content").html(response);
+                if(!pop){
+                    window.history.pushState({"site": site}, null, "./"+site);
+                }
+            },
+            complete: function(){
+                $("#content").slideDown(function(){
+                    //load script
+                    $.getScript("./script/js.php?load="+site);
+                    //prepare site
+                    prepareSite();
+                });
+            }
+        });
+    });
+}
+
+function prepareSite(){
+    //smooth scroll
+    $('a[href^="#"]').on('click', function(event) {
+        var target = $(this.getAttribute('href'));
+        if( target.length ) {
+            event.preventDefault();
+            $('html, body').stop().animate({
+                scrollTop: target.offset().top
+            }, 500);
+        }
+    });
+    
+    //disable ajax forms submit
+    $(".ajaxform").submit(function(e){
+        e.preventDefault(); //prevent classic submit
+    });
+}
+
+function toggleDropdown(content, img){
+    if($(content).css("display")=="none"){
+        $(content).slideDown();
+        $(img).attr("src", "./res/minus.png");
+    }
+    else{
+        $(content).slideUp();
+        $(img).attr("src", "./res/plus.png");
+    }
+}
+
+function footableRemoveElem(elem){
+    //delete from table
+    var button=$(elem);
+    var current=button.parents("tr:first");
+    var remove;
+    //if we in the detail row or not
+    if(current.hasClass("footable-detail-row")){
+        //get the previous row and add it with the current row to be removed later
+        remove = current.add(current.prev());
+    }
+    else{
+        //get the next row after the current row and check if it's a detail row
+        var next = current.next();
+        //if the next row is a detail row or not
+        if (next.hasClass("footable-detail-row")){
+            //get the next row and add it with the current row to be removed later
+            remove = current.add(next);
+        }
+        else{
+            //we can't find a detail row so just remove the current row later
+            remove = current;
+        }
+    }
+    
+    remove.fadeOut(function(){
+        remove.remove();
+    });
+}
+
+function search(field, list){
+    $(list).children("li").each(function(){
+        if($(this).children("label").text().toLowerCase().indexOf($(field).val().toLowerCase())!=-1){
+            $(this).css("display", "block");
+        }
+        else{
+            $(this).css("display", "none");
+        }
+    });
+}
+
+function toggleRequiredFormElement(container, to=-1){
+    if(to==-1){
+        if($(container).css("display")=="none"){
+            $(container).children("input").attr("required", true);
+            $(container).slideDown();
+        }
+        else{
+            $(container).slideUp();
+            $(container).children("input").attr("required", false);
+        }
+    }
+    else{
+        if(to==1){
+            $(container).children("input").attr("required", true);
+            $(container).slideDown();
+        }
+        else{
+            $(container).slideUp();
+            $(container).children("input").attr("required", false);
+        }
+    }
+}
+
+/*
+ * RUN
+ */
+jQuery(function($){
+    //get correct site
+    Site=window.location.pathname.substring(window.location.pathname.lastIndexOf("/")+1);
+    $.getScript("./script/js.php?load="+Site);
+    prepareSite();
+    
+    //ajax loading functions
+    $(document).ajaxStart(function(){
+        $("#loadingOverlay").css("display", "block");
+    });
+    $(document).ajaxComplete(function(){
+        $("#loadingOverlay").css("display", "none");
+    });
+    
+    //go back in history
+    window.addEventListener("popstate", function(e){
+        if(e.state!=null){
+            goTo(e.state["site"], true);
+        }
+        else{
+            goTo("", true);
+        }
+    });
+});

script/phases.js

@@ -0,0 +1,125 @@
+/**
+ * /script/phases.js
+ * @version 1.0
+ * @desc phases javascript file
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+function phasesLoadList(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php?load=phases&backend&list",
+            type: "GET",
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function phasesFilterApply(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php?load=phases&backend&list",
+            type: "POST",
+            data: $("#dd_filter_form").serialize(),
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function phasesFilterReset(){
+    $("#dd_filter_form")[0].reset();
+    phasesLoadList();
+}
+
+function phasesNew(){
+    $.ajax({
+        url: "./subs/loader.php?load=phases&backend",
+        type: "POST",
+        data: $("#dd_new_form").serialize(),
+        success: function(){
+            $("#dd_new_form")[0].reset();
+            loadMessages();
+            phasesLoadList();
+        }
+    });
+}
+
+function phasesEdit(id){
+    $.ajax({
+        url: "./subs/loader.php?load=phases&backend&getdata="+id,
+        type: "GET",
+        success: function(response){
+            var data=JSON.parse(response);
+            $("#dd_edit_form input[name=edit]").val(data.id);
+            $("#dd_edit_form input[name=name_1]").val(data.name_1);
+            $("#dd_edit_form input[name=name_2]").val(data.name_2);
+            $("#dd_edit").slideDown();
+            smoothScroll("#dd_edit");
+        }
+    });
+}
+
+function phasesSubmitEdit(){
+    $.ajax({
+        url: "./subs/loader.php?load=phases&backend",
+        type: "POST",
+        data: $("#dd_edit_form").serialize(),
+        success: function(){
+            $("#dd_edit").slideUp(function(){
+                $("#dd_edit_form")[0].reset();
+            });
+            loadMessages();
+            phasesLoadList();
+        }
+    });
+}
+
+function phasesCancelEdit(){
+    $("#dd_edit").slideUp(function(){
+        $("#dd_edit_form")[0].reset();
+    });
+}
+
+function phasesDelete(id, elem){
+    if(confirm($("#phasesDeleteConfirm").text())){
+        $.ajax({
+            url: "./subs/loader.php?load=phases&backend",
+            type: "POST",
+            data: {"delete": id},
+            success: function(){
+                loadMessages();
+                footableRemoveElem(elem);
+            }
+        });
+    }
+}
+
+/*
+ * RUN
+ */
+phasesLoadList();

script/profile.js

@@ -0,0 +1,35 @@
+/**
+ * /script/profile.js
+ * @version 1.0
+ * @desc Profile javascript file
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+function profileSetNewPassword(){
+    $.ajax({
+        url: "./subs/loader.php?load=profile&backend",
+        type: "POST",
+        data: $("#editpasswd").serialize(),
+        success: function(){
+            loadMessages();
+            $("#editpasswd")[0].reset();
+        }
+    });
+}

script/register.js

@@ -0,0 +1,190 @@
+/**
+ * /script/register.js
+ * @version 1.4
+ * @desc Register javascript file
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+function registerLoadList(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php",
+            data: {"load":"register", "backend":true, "list":$("#schoolyear").val()},
+            type: "GET",
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function registerFilterApply(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php?load=register&backend&list",
+            type: "POST",
+            data: $("#dd_filter_form").serialize(),
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function registerFilterReset(){
+    $("#dd_filter_form")[0].reset();
+    registerLoadList();
+}
+
+function registerEdit(id){
+    $.ajax({
+        url: "./subs/loader.php?load=register&backend&getdata="+id,
+        type: "GET",
+        success: function(response){
+            var data=JSON.parse(response);
+            $("#dd_edit_form input[name=edit]").val(id);
+            $("#dd_edit_form input[name=student][value="+data.student+"]").attr("checked", true);
+            $("#dd_edit_form input[name=contest][value="+data.contest+"]").attr("checked", true);
+            $("#dd_edit_form input[name=phase][value="+data.phase+"]").attr("checked", true);
+            $("#dd_edit_form input[name=teacher][value="+data.teacher+"]").attr("checked", true);
+            $("#dd_edit_form input[name=place][value="+(data.place<0?data.place:0)+"]").attr("checked", true);
+            if(data.place>0){
+                $("#dd_edit_form input[name=place_c]").val(data.place);
+                $("#registerCustomPlaceEdit").slideDown();
+            }
+            $("#dd_edit_form input[name=place_c]").attr("required", data.place>0);
+            $("#dd_edit_form textarea[name=mention]").text(data.mention);
+            $("#dd_edit").slideDown();
+            smoothScroll("#dd_edit");
+        }
+    });
+}
+
+function registerSubmitEdit(){
+    $.ajax({
+        url: "./subs/loader.php?load=register&backend",
+        type: "POST",
+        data: $("#dd_edit_form").serialize(),
+        success: function(){
+            $("#dd_edit").slideUp(function(){
+                $("#dd_edit_form")[0].reset();
+            });
+            loadMessages();
+            registerLoadList();
+        }
+    });
+}
+
+function registerCancelEdit(){
+    $("#dd_edit").slideUp(function(){
+        $("#dd_edit_form")[0].reset();
+    });
+}
+
+function registerDelete(id, elem){
+    if(confirm($("#registerDeleteConfirm").text())){
+        $.ajax({
+            url: "./subs/loader.php?load=register&backend",
+            type: "POST",
+            data: {"delete": id},
+            success: function(){
+                loadMessages();
+                footableRemoveElem(elem);
+            }
+        });
+    }
+}
+
+function registerNew(){
+    $.ajax({
+        url: "./subs/loader.php?load=register&backend",
+        type: "POST",
+        data: $("#dd_new_form").serialize(),
+        success: function(response){
+            var data=JSON.parse(response);
+            $("#newSubmitPrevContent tbody").html(data.prev);
+            $("#dd_newSubmit_form input[name=newSubmit]").val(JSON.stringify(data.params));
+            $("#newSubmitPrevContent").footable();
+            $("#dd_new_form")[0].reset();
+            $("#dd_newSubmit").slideDown();
+            smoothScroll("#dd_newSubmit");
+        }
+    });
+}
+
+function registerNewSubmit(){
+    $.ajax({
+        url: "./subs/loader.php?load=register&backend",
+        type: "POST",
+        data: $("#dd_newSubmit_form").serialize(),
+        success: function(){
+            $("#dd_newSubmit").slideUp(function(){
+                $("#dd_newSubmit_form")[0].reset();
+                $("#newSubmitPrevContent tbody").html("");
+                loadMessages();
+                registerLoadList();
+            });
+        }
+    });
+}
+
+function registerNewCancel(){
+    $("#dd_newSubmit").slideUp(function(){
+        $("#dd_newSubmit_form")[0].reset();
+        $("#newSubmitPrevContent tbody").html("");
+    });
+}
+
+function registerExport(){
+    $.ajax({
+        url: "./subs/loader.php?load=register&backend",
+        type: "POST",
+        data: $("#dd_export_form").serialize(),
+        beforeSend: function(){
+            $("#export_progress").css("display", "block");
+        },
+        success: function(response){
+            $("#download_file").val(response);
+            $("#export_progress").css("display", "none");
+            $("#export_ready").css("display", "block");
+        }
+    });
+}
+
+function registerExportDownload(){
+    $("#export_ready").css("display", "none");
+    window.location="./subs/loader.php?load=register&backend&expdownload="+$("#download_file").val();
+    loadMessages();
+}
+
+/*
+ * RUN
+ */
+registerLoadList();
+$("#dd_new_form input[name=place]").click(function(){
+    toggleRequiredFormElement("#registerCustomPlaceNew", $("#dd_new_form input[name=place][value=0]").is(":checked"));
+});
+$("#dd_edit_form input[name=place]").click(function(){
+    toggleRequiredFormElement("#registerCustomPlaceEdit", $("#dd_edit_form input[name=place][value=0]").is(":checked"));
+});

script/subjects.js

@@ -0,0 +1,125 @@
+/**
+ * /script/subjects.js
+ * @version 1.3
+ * @desc Subjects javascript file
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+function subjectsLoadList(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php?load=subjects&backend&list",
+            type: "GET",
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function subjectsFilterApply(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php?load=subjects&backend&list",
+            type: "POST",
+            data: $("#dd_filter_form").serialize(),
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function subjectsFilterReset(){
+    $("#dd_filter_form")[0].reset();
+    subjectsLoadList();
+}
+
+function subjectsNew(){
+    $.ajax({
+        url: "./subs/loader.php?load=subjects&backend",
+        type: "POST",
+        data: $("#dd_new_form").serialize(),
+        success: function(){
+            $("#dd_new_form")[0].reset();
+            loadMessages();
+            subjectsLoadList();
+        }
+    });
+}
+
+function subjectsEdit(id){
+    $.ajax({
+        url: "./subs/loader.php?load=subjects&backend&getdata="+id,
+        type: "GET",
+        success: function(response){
+            var data=JSON.parse(response);
+            $("#dd_edit_form input[name=edit]").val(data.id);
+            $("#dd_edit_form input[name=name_1]").val(data.name_1);
+            $("#dd_edit_form input[name=name_2]").val(data.name_2);
+            $("#dd_edit").slideDown();
+            smoothScroll("#dd_edit");
+        }
+    });
+}
+
+function subjectsSubmitEdit(){
+    $.ajax({
+        url: "./subs/loader.php?load=subjects&backend",
+        type: "POST",
+        data: $("#dd_edit_form").serialize(),
+        success: function(){
+            $("#dd_edit").slideUp(function(){
+                $("#dd_edit_form")[0].reset();
+            });
+            loadMessages();
+            subjectsLoadList();
+        }
+    });
+}
+
+function subjectsCancelEdit(){
+    $("#dd_edit").slideUp(function(){
+        $("#dd_edit_form")[0].reset();
+    });
+}
+
+function subjectsDelete(id, elem){
+    if(confirm($("#subjectsDeleteConfirm").text())){
+        $.ajax({
+            url: "./subs/loader.php?load=subjects&backend",
+            type: "POST",
+            data: {"delete": id},
+            success: function(){
+                loadMessages();
+                footableRemoveElem(elem);
+            }
+        });
+    }
+}
+
+/*
+ * RUN
+ */
+subjectsLoadList();

script/users.js

@@ -0,0 +1,131 @@
+/**
+ * /script/users.js
+ * @version 2.1
+ * @desc javascript for users submenu
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+function usersLoadList(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php?load=users&backend&list",
+            type: "GET",
+            success: function(response){
+                $("#list").html(response);
+                $(".table").footable();
+                $("#list").slideDown();
+            }
+        });
+    });
+}
+
+function usersFilterApply(){
+    $("#list").slideUp(function(){
+        $.ajax({
+            url: "./subs/loader.php?load=users&backend&list",
+            type: "POST",
+            data: $("#dd_filter_form").serialize(),
+            success: function(response){
+                $("#list").html(response);
+                $("#list").slideDown(function(){
+                    $(".table").footable();
+                });
+            }
+        });
+    });
+}
+
+function usersFilterReset(){
+    $("#dd_filter_form")[0].reset();
+    loadList();
+}
+
+function usersNew(){
+    $.ajax({
+        url: "./subs/loader.php?load=users&backend",
+        type: "POST",
+        data: $("#dd_new_form").serialize(),
+        success: function(){
+            $("#dd_new_form")[0].reset();
+            loadMessages();
+            usersLoadList();
+        }
+    });
+}
+
+function usersEdit(id){
+    $.ajax({
+        url: "./subs/loader.php?load=users&backend&getdata="+id,
+        type: "GET",
+        success: function(response){
+            var data=JSON.parse(response);
+            $("#dd_edit_form input[name=edit]").val(data.id);
+            $("#dd_edit_form input[name=username]").val(data.username);
+            $("#dd_edit_form input[name=fullname]").val(data.fullname);
+            $("#dd_edit_form input[name=accesslevel]").val(data.accesslevel);
+            $("#dd_edit_form input[name=class]").val(data.class);
+            $("#dd_edit_form input[name=password]").val("");
+            $("#dd_edit_form input[name=perm_message]").prop("checked", data.perm_message==1);
+            $("#dd_edit").slideDown();
+            smoothScroll("#dd_edit");
+        }
+    });
+}
+
+function usersSubmitEdit(){
+    $.ajax({
+        url: "./subs/loader.php?load=users&backend",
+        type: "POST",
+        data: $("#dd_edit_form").serialize(),
+        success: function(){
+            $("#dd_edit").slideUp(function(){
+                $("#dd_edit_form")[0].reset();
+            });
+            loadMessages();
+            usersLoadList();
+        }
+    });
+}
+
+function usersCancelEdit(){
+    $("#dd_edit").slideUp(function(){
+        $("#dd_edit_form")[0].reset();
+    });
+}
+
+function usersDelete(id, elem){
+    if(confirm($("#usersDeleteConfirm").text())){
+        $.ajax({
+            url: "./subs/loader.php?load=users&backend",
+            type: "POST",
+            data: {"delete": id},
+            success: function(){
+                loadMessages();
+                footableRemoveElem(elem);
+            }
+        });
+    }
+}
+
+/*
+ * RUN
+ */
+//autoload list
+usersLoadList();

script/wizard.js

@@ -0,0 +1,86 @@
+/**
+ * /script/wizard.js
+ * @version 1.0
+ * @desc javascript for the input wizard
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+function wizardNextStep(elem){
+    $(elem).parent("div").slideUp();
+    $(elem).parent("div").parent("div").next().next().children("div").eq(1).slideDown(function(){
+        smoothScroll($(elem).parent("div").parent("div").next().next());
+    });
+}
+
+function wizardPrevStep(elem){
+    $(elem).parent("div").slideUp();
+    $(elem).parent("div").parent("div").prev().prev().children("div").eq(1).slideDown(function(){
+        smoothScroll($(elem).parent("div").parent("div").prev().prev());
+    });
+}
+
+function wizardSelectMeAsTeacher(){
+    $("#wizform input[name=teacher][value="+$("#wizardCurrentId").text()+"]").attr("checked", true);
+}
+
+function wizardLoadPrevRecords(elem){
+    $.ajax({
+        url: "./subs/loader.php?load=register&backend",
+        type: "POST",
+        data: $("#wizform").serialize(),
+        success: function(response){
+            var data=JSON.parse(response);
+            $("input[name=recordParams]").val(JSON.stringify(data.params));
+            $("#wizardPrevContent tbody").html(data.prev);
+            $("#wizardPrevContent").footable();
+            $(elem).parent("div").slideUp();
+            $("#step7_content").slideDown(function(){
+                smoothScroll("#step7_content");
+            });
+        }
+    });
+}
+
+function wizardSubmitRecord(){
+    $.ajax({
+        url: "./subs/loader.php?load=register&backend",
+        type: "POST",
+        data: {"newSubmit": $("input[name=recordParams]").val()},
+        success: function(){
+            loadMessages();
+            $(".dropdown.content").slideUp(function(){
+                $("#wizform")[0].reset();
+                $("#step1_content").slideDown(function(){
+                    smoothScroll("#step1");
+                });
+            });
+        }
+    });
+}
+
+/*
+ * RUN
+ */
+//load register scriptbase
+$.getScript("./script/js.php?load=register");
+//handler for custom place
+$("#wizform input[name=place]").click(function(){
+    toggleRequiredFormElement("#registerCustomPlaceNew", $("#wizform input[name=place][value=0]").is(":checked"));
+});

style/mobile.css

@@ -0,0 +1,236 @@
+/**
+ * /style/mobile.php
+ * @version 1.0
+ * @desc style file for mobile all small screen devices
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+h1.title{
+    text-align: left;
+    background: rgba(31,73,125,0.8);
+    color: rgb(255,255,255);
+    margin: auto;
+    padding: 0.3em 1em;
+}
+
+button{
+    background: rgba(31,73,125,0.8);
+    color: rgb(255,255,255);
+    padding: 1em;
+    border-radius: 0.5em;
+    width: 100%;
+    font-size: 2em;
+}
+button:hover{
+    background: rgba(31,73,125,1);
+}
+
+form{
+    width: 100%;
+}
+fieldset{
+    border: 5px solid rgba(31,73,125,0.8);
+    background: rgb(220,220,220);
+    border-radius: 1em;
+    padding: 2em;
+    width: 90%;
+    text-align: left;
+}
+fieldset legend{
+    background: rgba(31,73,125,0.8);
+    color: rgb(255,255,255);
+    padding: 0.3em;
+    font-size: 2em;
+    border-radius: 0.5em;
+    box-shadow: 0 0 0 5px rgb(220,220,220);
+    text-align:left;
+    margin-left: 10%;
+}
+
+footer{
+    background: rgb(200,200,200);
+    border-radius: 1em;
+    width: 90%;
+    margin: auto;
+    font-size: 0.8em;
+    text-align: center;
+    padding: 0.3em;
+}
+
+hr.placeholder{
+    border: none;
+    height: 30px;
+}
+
+input{
+    border-radius: 5px;
+    padding: 0.5em;
+    border: 1px solid solid rgba(31,73,125,0.8);
+    font-size: 1.5em;
+}
+textarea{
+    border-radius: 5px;
+    padding: 0.5em;
+    border: 1px solid solid rgba(31,73,125,0.8);
+    font-size: 1.5em;
+}
+select{
+    border-radius: 5px;
+    padding: 0.5em;
+    border: 1px solid solid rgba(31,73,125,0.8);
+    font-size: 1.5em;
+    max-width: 90%;
+}
+
+div.message{
+    width: 90%;
+    padding: 1em;
+    border: 2px solid rgb(60, 255, 60);
+    border-radius: 10px;
+    margin: auto;
+    margin-top: 1.5em;
+    margin-bottom: 1.5em;
+    background: rgba(0, 255, 0, 0.5);
+    text-align: center;
+    font-size: 1.5em;
+}
+div.message.error{
+    border: 2px solid rgb(255, 60, 60);
+    background: rgba(255, 0, 0, 0.5);
+}
+
+ul.menu{
+    list-style:none;
+    margin: 0;
+    background: rgba(31,73,125,0.8);
+    display: flex;
+    justify-content: stretch;
+    flex-wrap: wrap;
+    font-size: 2em;
+}
+ul.menu li{
+    display: block;
+    padding: 1em;
+    color: rgb(255,255,255);
+}
+ul.menu li:hover{
+    background: rgba(31,73,125,1);
+}
+ul.menu a{
+    text-decoration: none;
+    width: 100%;
+}
+
+td{
+    vertical-align: top;
+}
+
+span.password{
+    background: rgb(0,0,0);
+    font-family: Courier New;
+}
+span.password:hover{
+    background: inherit;
+}
+
+table:not(.table) td{
+    display: block;
+}
+
+label{
+    font-size: 1.5em;
+}
+
+table{
+    font-size: 1.5em;
+}
+
+p{
+    font-size: 1.5em;
+}
+
+div.overlay{
+    position: fixed;
+    display: none;
+    width: 100%;
+    height: 100%;
+    top: 0;
+    left: 0;
+    z-index: 2;
+}
+div.overlay.loading{
+    background: rgba(0,0,0,0.7);
+}
+div.overlay.loading img{
+    position: fixed;
+    max-width: 50%;
+    max-height: 50%;
+    top: 30%;
+    left: 40%;
+    padding: 1em;
+}
+div.overlay.messages{
+    height: 30%;
+}
+
+/* the world's fanciest checkbox */
+div.checkbox{
+    width: 7em;
+    height: 2.5em;
+    background: rgb(140, 140, 140);
+    border-radius: 1.5em;
+    position: relative;
+}
+div.checkbox:before{
+    content: 'On';
+    position: absolute;
+    top: 30%;
+    left: 15%;
+    color: rgb(35, 200, 40);
+    font-size: 1em;
+}
+div.checkbox:after{
+    content: 'Off';
+    position: absolute;
+    top: 30%;
+    right: 15%;
+    color: rgb(15, 15, 15);
+    font-size: 1em;
+}
+div.checkbox label{
+    display: block;
+    width: 45%;
+    height: 55%;
+    border-radius: 1.5em;
+    transition: 0.5s;
+    cursor: pointer;
+    position: absolute;
+    top: 22.5%;
+    left: 10%;
+    z-index: 1;
+    background: rgb(220, 220, 220);
+}
+div.checkbox input[type=checkbox]:checked + label{
+    left: 45%;
+    background: rgb(35, 200, 40);
+}
+div.checkbox input[type=checkbox]{
+    display: none;
+}

style/style.css

@@ -0,0 +1,301 @@
+/**
+ * /style/style.css
+ * @version 1.5
+ * @desc Main style file
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+button{
+    background: rgba(38,143,84,0.8);
+    color: rgb(255,255,255);
+    padding: 1em;
+    border-radius: 0.5em;
+}
+button:hover{
+    background: rgba(38,143,84,1);
+}
+
+fieldset{
+    border: 5px solid rgba(38,143,84,1);
+    background: rgb(220,220,220);
+    border-radius: 1em;
+    padding: 2em;
+    width: 60%;
+    text-align: left;
+}
+fieldset legend{
+    background: rgba(38,143,84,1);
+    color: rgb(255,255,255);
+    padding: 0.3em;
+    font-size: 2em;
+    border-radius: 0.5em;
+    box-shadow: 0 0 0 5px rgb(220,220,220);
+    text-align:left;
+    margin-left: 10%;
+}
+
+footer{
+    background: rgb(200,200,200);
+    border-radius: 1em;
+    width: 80%;
+    margin: auto;
+    font-size: 0.8em;
+    text-align: center;
+    padding: 0.3em;
+}
+
+hr.placeholder{
+    border: none;
+    height: 30px;
+}
+
+input{
+    border-radius: 5px;
+    padding: 0.5em;
+    border: 1px solid solid rgba(38,143,84,0.8);
+}
+textarea{
+    border-radius: 5px;
+    padding: 0.5em;
+    border: 1px solid solid rgba(38,143,84,0.8);
+}
+select{
+    border-radius: 5px;
+    padding: 0.5em;
+    border: 1px solid solid rgba(38,143,84,0.8);
+}
+
+div.message{
+    width: 50%;
+    padding: 1em;
+    border: 2px solid rgb(60, 255, 60);
+    border-radius: 10px;
+    margin: auto;
+    margin-top: 1.5em;
+    margin-bottom: 1.5em;
+    background: rgba(0, 255, 0, 0.8);
+    text-align: center;
+}
+div.message.error{
+    border: 2px solid rgb(255, 60, 60);
+    background: rgba(255, 0, 0, 0.8);
+}
+
+ul.menu{
+    list-style: none;
+    margin: 0;
+    background: rgba(38,143,84,0.8);
+    display: flex;
+    justify-content: space-around;
+    padding: 0;
+}
+ul.menu li{
+    display: block;
+    padding: 1em;
+    color: rgb(255,255,255);
+}
+ul.menu li:hover{
+    background: rgba(38,143,84,1);
+}
+ul.menu a{
+    text-decoration: none;
+    cursor: default;
+}
+
+td{
+    vertical-align: top;
+}
+
+span.password{
+    background: rgb(0,0,0);
+    font-family: Courier New;
+}
+span.password:hover{
+    background: inherit;
+}
+
+div.overlay{
+    position: fixed;
+    display: none;
+    width: 100%;
+    height: 100%;
+    top: 0;
+    left: 0;
+    z-index: 2;
+}
+div.overlay.messages{
+    height: 30%;
+}
+div.overlay.loading{
+    width: 15%;
+    height: 10%;
+    background: rgba(38,143,84,1);
+    text-align: center;
+    font-size: 1.2em;
+    left: auto;
+    right: 0;
+    margin: 1em;
+    border-radius: 10px;
+}
+div.overlay.loading img{
+    max-height: 1em;
+    position: relative;
+    top: 40%;
+}
+div.overlay.loading span{
+    position: relative;
+    top: 40%;
+}
+
+div.content{
+    width: 95%;
+    margin: auto;
+}
+
+img.icon{
+    max-height: 1.2em;
+    margin-right: 0.5em;
+}
+
+.center{
+    text-align: center;
+    margin: auto;
+}
+.selfcenter{
+    margin: auto;
+}
+
+/* the world's fanciest checkbox */
+div.checkbox{
+    width: 7em;
+    height: 2.5em;
+    background: rgb(140, 140, 140);
+    border-radius: 1.5em;
+    position: relative;
+}
+div.checkbox:before{
+    content: 'On';
+    position: absolute;
+    top: 30%;
+    left: 15%;
+    color: rgb(35, 200, 40);
+    font-size: 1em;
+}
+div.checkbox:after{
+    content: 'Off';
+    position: absolute;
+    top: 30%;
+    right: 15%;
+    color: rgb(15, 15, 15);
+    font-size: 1em;
+}
+div.checkbox label{
+    display: block;
+    width: 45%;
+    height: 55%;
+    border-radius: 1.5em;
+    transition: 0.5s;
+    cursor: pointer;
+    position: absolute;
+    top: 22.5%;
+    left: 10%;
+    z-index: 1;
+    background: rgb(220, 220, 220);
+}
+div.checkbox input[type=checkbox]:checked + label{
+    left: 45%;
+    background: rgb(35, 200, 40);
+}
+div.checkbox input[type=checkbox]{
+    display: none;
+}
+
+/* dropdown div */
+div.dropdown{
+    border: 2px solid rgba(38,143,84,1);
+    background: rgb(220,220,220);
+    border-radius: 10px;
+    overflow: auto;
+    padding: 0;
+}
+div.dropdown.header{
+    border: none;
+    border-radius: 0;
+    height: 1.5em;
+    background: rgba(34,119,227,0.7);
+    padding: 0.3em;
+    font-size: 1.5em;
+}
+div.dropdown.content{
+    border: none;
+    padding: 1em;
+    display: none;
+}
+div.dropdown.header a{
+    text-decoration: none;
+    color: rgb(255,255,255);
+    cursor: pointer;
+}
+
+div.searchbox{
+    text-decoration: none;
+}
+div.searchbox input[type=text]{
+    background-image: url("../res/search.png");
+    background-size: contain;
+    background-repeat: no-repeat;
+    margin-bottom: 1em;
+    padding-left: 2.5em;
+}
+div.searchbox ul{
+    list-style: none;
+    padding: 0;
+    margin: 0;
+    height: 15em;
+    overflow-y: scroll;
+}
+div.searchbox li{
+    color: rgb(0,0,0);
+    margin-left: 0.5em;
+}
+
+span.number{
+    background: rgba(127,127,127,0.8);
+    border-radius: 50%;
+    margin-right: 1em;
+    padding: 0.2em;
+    padding-left: 0.5em;
+    padding-right: 0.5em;
+}
+
+div.progressbar{
+    background: rgba(100, 100, 100, 1);
+    border-radius: 2em;
+}
+div.progressbar div{
+    background: rgb(0, 180, 245);
+    border-radius: 2em;
+    color: rgb(255, 255, 255);
+    padding-top: 0.5em;
+    padding-bottom: 0.2em;
+}
+div.progressbar span{
+    margin: 1em;
+}

subs/loader.php

@@ -0,0 +1,62 @@
+<?php
+/**
+ * /subs/loader.php
+ * @version 1.0
+ * @desc Loader for component pages
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+if(!isset($BOM)){
+    require_once("../config/config.php");
+}
+
+function loadPart($view, $backend=false){
+    global $lm, $lang, $db, $BOM, $config, $schoolyear;
+    if($lm->validateLogin()){
+        if($view!="" && $view!="users" && $view!="classes" && $view!="subjects" && $view!="contests" && $view!="phases" && $view!="register" && $view!="wizard" && $view!="profile" && $view!="admin"){
+            functions::setError(404);
+            $view="";
+        }
+        
+        if(($view=="users") && $_SESSION['accesslevel']<3){
+            functions::setError(401);
+            $view="";
+        }
+        else if(($view=="classes" || $view=="subjects" || $view=="contests" || $view=="phases" || $view=="register" || $view=="wizard") && $_SESSION['accesslevel']<1){
+            functions::setError(401);
+            $view="";
+        }
+        else if(($view=="admin") && $_SESSION['accesslevel']<4){
+            functions::setError(401);
+            $view="";
+        }
+    }
+    
+    if($backend){
+        include("part/".$view."_backend.php");
+    }
+    else{
+        include("part/".$view.".php");
+    }
+}
+
+if(isset($_GET['load'])){
+    loadPart($_GET['load'], isset($_GET['backend']));
+}

subs/msg.php

@@ -0,0 +1,43 @@
+<?php
+/**
+ * /subs/msg.php
+ * @version 1.0
+ * @desc script for loading errors
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+if(!isset($BOM)){
+    require_once("../config/config.php");
+}
+
+if(functions::isMessage()){
+    foreach(functions::getMessageArray() as $m){
+        echo "<div class=\"message\"><p>".$lang['message'][$m]."</p></div>";
+        echo "<hr class=\"placeholder\">";
+    }
+}
+if(functions::isError()){
+    foreach(functions::getErrorArray() as $m){
+        echo "<div class=\"message error\"><p>".$lang['error'][$m]."</p></div>";
+        echo "<hr class=\"placeholder\">";
+    }
+}
+
+?>

subs/part/.htaccess

@@ -0,0 +1,2 @@
+Order allow,deny
+Deny from all

subs/part/.php

@@ -0,0 +1,29 @@
+<?php
+/**
+ * /subs/part/.php
+ * @version 1.0
+ * @desc Users index part
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+?>
+
+<div class="center">
+    <p><?php echo $lang['index_content'] ?></p>
+</div>

subs/part/_backend.php

@@ -0,0 +1,24 @@
+<?php
+/**
+ * /subs/part/_backend.php
+ * @version 1.0
+ * @desc backend for index
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/

subs/part/admin.php

@@ -0,0 +1,109 @@
+<?php
+/**
+ * /subs/admin.php
+ * @version 1.4
+ * @desc Admin tools
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+?>
+
+<div class="selfcenter">
+    <!-- import users -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_filter">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_import_content', '#dd_import_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_import_img">
+                <span><?php echo $lang['importUsers'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_import_content">
+            <form method="POST" class="ajaxform" id="dd_import_form" onsubmit="adminImportUsers()">
+                <p><?php echo $lang['importnotes'] ?></p>
+                <input type="file" name="csv" id="csvFile" accept="text/csv" required>
+                <hr>
+                <button type="submit" form="dd_import_form"><?php echo $lang['ok'] ?></button>
+            </form>
+            <div id="statuses">
+                <div id="status_fileTooBig" style="display: none">
+                    <img class="icon" src="./res/remove.png" alt="error">
+                    <span><?php echo $lang['error'][11] ?></span>
+                </div>
+                <div id="status_uploading" style="display: none">
+                    <p><?php echo $lang['uploading']."..." ?></p>
+                    <div class="progressbar" id="uploadStatus" style="width: 90%; margin: auto">
+                        <div style="width: 0%">
+                            <span>0%</span>
+                        </div>
+                    </div>
+                </div>
+                <div id="status_uploadError" style="display: none">
+                    <img class="icon" src="./res/remove.png" alt="error">
+                    <span><?php echo $lang['error'][12] ?></span>
+                </div>
+                <div id="status_processing" style="display: none">
+                    <p><?php echo $lang['processing']."..." ?></p>
+                    <div class="progressbar" id="processStatus" style="width: 90%; margin: auto">
+                        <div style="width: 0%">
+                            <span>0%</span>
+                        </div>
+                    </div>
+                </div>
+                <div id="status_done" style="display: none">
+                    <p><?php echo $lang['importdone'] ?></p>
+                </div>
+            </div>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- database stats -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_filter">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_dbsize_content', '#dd_dbsize_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_dbsize_img">
+                <span><?php echo $lang['dbsize'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_dbsize_content">
+            <table class="table">
+                <thead>
+                    <tr>
+                        <th><?php echo $lang['dbname'] ?></th>
+                        <th><?php echo $lang['size'] ?></th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <?php
+                    $sql=$db->prepare("SELECT table_schema AS dbname, ROUND(SUM(data_length+index_length)/1024/1024, 2) AS size FROM information_schema.tables GROUP BY table_schema");
+                    $sql->execute();
+                    while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                        echo "
+                        <tr>
+                            <td>".$row['dbname']."</td>
+                            <td>".$row['size']." MB</td>
+                        </tr>
+                        ";
+                    }
+                    ?>
+                </tbody>
+            </table>
+        </div>
+    </div>
+</div>

subs/part/admin_backend.php

@@ -0,0 +1,181 @@
+<?php
+/**
+ * /subs/admin_backend.php
+ * @version 1.6
+ * @desc backend for admin tools
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+try{
+    
+    //import/step1: upload file to server
+    if(isset($_FILES['import_file'])){
+        //time limit of 2 min
+        set_time_limit(120);
+        
+        //get file size and compare it if JS has sucked
+        $size=$_FILES['import_file']['size'];
+        
+        if($size>10000000){
+            functions::setError(11);
+            echo "error";
+        }
+        else{
+            //get temp file to hold it
+            $target=tempnam(sys_get_temp_dir(), "resmanImp_");
+            
+            //move file
+            if(!move_uploaded_file($_FILES['import_file']['tmp_name'], $target)){
+                //something's wrong here
+                functions::setError(13);
+                echo "error";
+            }
+            else{
+                //count lines
+                $lines=0;
+                $file=fopen($target, "r");
+                while(!feof($file)){
+                    $line=fgets($file);
+                    $lines++;
+                }
+                fclose($file);
+                
+                //prepare session to track everything
+                $progress=array("total_lines"=>$lines, "lines_processed"=>0);
+                if(isset($_SESSION['progress'])){
+                    $_SESSION['progress'][$target]=$progress;
+                }
+                else{
+                    $_SESSION['progress']=array();
+                    $_SESSION['progress'][$target]=$progress;
+                }
+                
+                //echo file name (which is process identifier as well) to be able to track it
+                echo $target;
+            }
+        }
+    }
+    
+    //import/step2: start file procession
+    if(isset($_POST['process_file'])){
+        //insert multiple records with the same query 
+        $rowPerQuery=40;
+        
+        //set a looong time limit (20 min)
+        set_time_limit(1200);
+        
+        //don't stop execution even if the connection drops
+        ignore_user_abort(true);
+        
+        //open file
+        $file=fopen($_POST['process_file'], "r");
+        
+        //a simple counter
+        $rowProcessed=0;
+        
+        //build query string
+        $querystr="INSERT INTO users (username, fullname, accesslevel, class, password) VALUES";
+        for($i=0; $i<$rowPerQuery; $i++){
+            $querystr.=" (?, ?, ?, ?, ?), ";
+        }
+        $querystr=rtrim($querystr, ", ");
+        
+        //buffer to hold before insert
+        $buffer=array();
+        $rowBuffered=0;
+        
+        //prepare SQL query
+        $sql=$db->prepare($querystr);
+        
+        while($data=fgetcsv($file, 1000, ",")){
+            if(count($data)!=5){
+                continue;
+            }
+            else{
+                //add row to buffer
+                array_push($buffer, $data[0], $data[1], $data[2], $data[3], $data[4]);
+                $rowBuffered++;
+                
+                //if needed, execute query
+                if($rowBuffered==$rowPerQuery){
+                    $sql->execute($buffer);
+                    $buffer=array();
+                    $rowBuffered=0;
+                }
+            }
+            
+            //update counter
+            $rowProcessed++;
+            
+            //update status and close session to release write protect
+            if(session_status()==PHP_SESSION_NONE){
+                session_start();
+            }
+            $_SESSION['progress'][$_POST['process_file']]['lines_processed']=$rowProcessed;
+            session_write_close();
+        }
+        
+        //if something remained in buffer
+        if($rowBuffered!=0){
+            //build new query for the remained records
+            $querystr="INSERT INTO users (username, fullname, accesslevel, class, password) VALUES";
+            for($i=0; $i<$rowBuffered; $i++){
+                $querystr.=" (?, ?, ?, ?, ?), ";
+            }
+            $querystr=rtrim($querystr, ", ");
+            
+            $sql=$db->prepare($querystr);
+            
+            //execute everything left over
+            $sql->execute($buffer);
+        }
+        
+        //close, delete file and die (I leave the session there intentionally. I hope nobody will spam the session with 1 record imports lol)
+        fclose($file);
+        unlink($_POST['process_file']);
+        
+        //some bogus stuff that actually fixes the ERR_RESPONSE_HEADERS_TOO_BIG error, because PHP wants to send a ton of set-cookie headers
+        header_remove("Set-Cookie");
+        
+        die();
+    }
+    
+    //import/step3: check status
+    if(isset($_GET['import_progress'])){
+        if(!isset($_SESSION['progress'][$_GET['import_progress']])){
+            //if it does not exist, echo 0
+            echo "error";
+        }
+        else{
+            $status=$_SESSION['progress'][$_GET['import_progress']];
+            
+            //calculate percent
+            $percent=round($status['lines_processed']*100/$status['total_lines'], 1);
+            
+            //print percent
+            echo $percent."%";
+        }
+    }
+    
+}
+catch(Exception $e){
+    functions::setError(500);
+    error_log($e);
+}

subs/part/classes.php

@@ -0,0 +1,56 @@
+<?php
+/**
+ * /subs/classes.php
+ * @version 1.0
+ * @desc classes
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+?>
+
+<div class="selfcenter">
+    <!-- language for jquery -->
+    <span id="classesDeleteConfirm" style="display: none"><?php echo $lang['delete_confirm'] ?></span>
+    <!-- filter -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_filter">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_filter_content', '#dd_filter_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_filter_img">
+                <span><?php echo $lang['filter'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_filter_content">
+            <form method="POST" class="ajaxform" id="dd_filter_form" onsubmit="classesFilterApply()">
+                <input type="hidden" name="filter">
+                <p><?php echo $lang['search'].":" ?></p>
+                <input type="text" name="f_search" placeholder="<?php echo $lang['search']."..." ?>">
+                <hr>
+                <button type="submit" form="dd_filter_form"><?php echo $lang['apply'] ?></button>
+                <button type="button" onclick="classesFilterReset()"><?php echo $lang['reset'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <hr class="placeholder">
+    <!-- list -->
+    <div class="selfcenter" id="list">
+        <!-- list goes here -->
+    </div>
+</div>

subs/part/classes_backend.php

@@ -0,0 +1,96 @@
+<?php
+/**
+ * /subs/classes_backend.php
+ * @version 1.2
+ * @desc backend for classes
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+try{
+    
+    if(isset($_GET['list'])){
+        $filter="WHERE id<>1 and class<>''";
+        $filter_array=array();
+        if(isset($_POST['filter'])){
+            if(isset($_POST['f_search'])){
+                if($_POST['f_search']!=""){
+                    $filter.=" and (class LIKE ? or username LIKE ? or fullname LIKE ?)";
+                    array_push($filter_array, "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%");
+                }
+            }
+        }
+        
+        $sql=$db->prepare("SELECT fullname, accesslevel, class FROM users ".$filter." ORDER BY class ASC, accesslevel DESC, fullname ASC");
+        $sql->execute($filter_array);
+        
+        //echo table(s)
+        $first=true;
+        $rid=0;
+        $curClass="";
+        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+            if($curClass!=$row['class']){
+                $curClass=$row['class'];
+                if(!$first){
+                    echo "
+                    </tbody>
+                    </table>
+                    <hr class=\"placeholder\">
+                    ";
+                }
+                if($first){
+                    $first=false;
+                }
+                $rid=1;
+                echo "
+                <div class=\"center\">
+                    <h2>".$curClass."</h2>
+                </div>
+                <hr>
+                <table class=\"table\">
+                    <thead>
+                        <tr>
+                            <th>".$lang['rowid']."</td>
+                            <th>".$lang['fullname']."</td>
+                            <th data-breakpoints=\"xs sm\">".$lang['role']."</td>
+                        </tr>
+                    </thead>
+                    <tbody>
+                ";
+            }
+            echo "
+            <tr>
+                <td>".$rid."</td>
+                <td>".$row['fullname']."</td>
+                <td>".($row['accesslevel']>0?$lang['headteacher']:$lang['student'])."</td>
+            </tr>
+            ";
+            $rid++;
+        }
+        echo "
+        </tbody>
+        </table>
+        ";
+    }
+    
+}
+catch(Exception $e){
+    functions::setError(500);
+    error_log($e);
+}

subs/part/contests.php

@@ -0,0 +1,218 @@
+<?php
+/**
+ * /subs/contests.php
+ * @version 1.0
+ * @desc Contests menu
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+$oid=0;
+
+?>
+
+<div class="selfcenter">
+    <!-- language for jquery -->
+    <span id="contestsDeleteConfirm" style="display: none"><?php echo $lang['delete_confirm'] ?></span>
+    <!-- filter -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_filter">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_filter_content', '#dd_filter_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_filter_img">
+                <span><?php echo $lang['filter'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_filter_content">
+            <form method="POST" class="ajaxform" id="dd_filter_form" onsubmit="contestsFilterApply()">
+                <input type="hidden" name="filter">
+                <p><?php echo $lang['search'].":" ?></p>
+                <input type="text" name="f_search" placeholder="<?php echo $lang['search']."..." ?>">
+                <hr>
+                <p><?php echo $lang['subject'].":" ?></p>
+                <?php
+                $sql=$db->prepare("SELECT id, name_1, name_2 FROM subjects ORDER BY name_1 ASC, name_2 ASC");
+                $sql->execute();
+                while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                    echo "<input type=\"checkbox\" name=\"f_subject[]\" id=\"o_".$oid."\" value=\"".$row['id']."\">";
+                    echo "<label for=\"o_".$oid."\">".$row['name_1']." / ".$row['name_2']."</label>";
+                    echo "<br>";
+                    $oid++;
+                }
+                ?>
+                <hr>
+                <p><?php echo $lang['ministry_support'].":" ?></p>
+                <?php
+                for($i=0; $i<3; $i++){
+                    echo "<input type=\"checkbox\" name=\"f_ministry[]\" id=\"o_".$oid."\" value=\"".$i."\">";
+                    echo "<label for=\"o_".$oid."\">".$lang['ministry_'.$i]."</label>";
+                    echo "<br>";
+                    $oid++;
+                }
+                ?>
+                <hr>
+                <button type="submit" form="dd_filter_form"><?php echo $lang['apply'] ?></button>
+                <button type="button" onclick="contestsFilterReset()"><?php echo $lang['reset'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- new -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_new">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_new_content', '#dd_new_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_new_img">
+                <span><?php echo $lang['new'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_new_content">
+            <form method="POST" class="ajaxform" id="dd_new_form" onsubmit="contestsNew()">
+                <input type="hidden" name="new">
+                <table>
+                    <tr>
+                        <td><?php echo $lang['name_1'].": " ?></td>
+                        <td><input type="text" name="name_1" placeholder="<?php echo $lang['name_1']."..." ?>" required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['name_2'].": " ?></td>
+                        <td><input type="text" name="name_2" placeholder="<?php echo $lang['name_2']."..." ?>" required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['subject'].": " ?></td>
+                        <td>
+                            <select name="subject" required>
+                                <option value="-1" selected disabled><?php echo $lang['nothing'] ?></option>
+                                <?php
+                                $sql=$db->prepare("SELECT id, name_1, name_2 FROM subjects ORDER BY name_1 ASC, name_2 ASC");
+                                $sql->execute();
+                                while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                    echo "<option value=\"".$row['id']."\">".$row['name_1']." / ".$row['name_2']."</option>";
+                                }
+                                ?>
+                            </select>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['description'].": " ?></td>
+                        <td><textarea name="description" placeholder="<?php echo $lang['description']."..." ?>" cols=50 rows=5></textarea></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['ministry_support'].": "?></td>
+                        <td>
+                            <?php
+                            for($i=0; $i<3; $i++){
+                                echo "<input type=\"radio\" name=\"ministry_support\" id=\"o_".$oid."\" value=\"".$i."\" required>";
+                                echo "<label for=\"o_".$oid."\">".$lang['ministry_'.$i]."</label>";
+                                echo "<br>";
+                                $oid++;
+                            }
+                            ?>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['ministry_place'].": " ?></td>
+                        <td><input type="number" name="ministry_place" placeholder="<?php echo $lang['ministry_place']."..." ?>" min=0></td>
+                    </tr>
+                </table>
+                <br>
+                <br>
+                <button type="submit" form="dd_new_form"><?php echo $lang['ok'] ?></button>
+                <button type="reset" form="dd_new_form" onclick="toggleDropdown('#dd_new_content', '#dd_new_img')"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- edit -->
+    <div class="dropdown selfcenter" style="width: 95%; display: none" id="dd_edit">
+        <div class="dropdown header">
+            <span><?php echo $lang['edit'] ?></span>
+        </div>
+        <div class="dropdown content" style="display: block">
+            <form method="POST" class="ajaxform" id="dd_edit_form" onsubmit="contestsSubmitEdit()">
+                <input type="hidden" name="edit">
+                <table>
+                    <tr>
+                        <td><?php echo $lang['name_1'].": " ?></td>
+                        <td><input type="text" name="name_1" placeholder="<?php echo $lang['name_1']."..." ?>" required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['name_2'].": " ?></td>
+                        <td><input type="text" name="name_2" placeholder="<?php echo $lang['name_2']."..." ?>" required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['subject'].": " ?></td>
+                        <td>
+                            <select name="subject" required>
+                                <option value="-1" selected disabled><?php echo $lang['nothing'] ?></option>
+                                <?php
+                                $sql=$db->prepare("SELECT id, name_1, name_2 FROM subjects ORDER BY name_1 ASC, name_2 ASC");
+                                $sql->execute();
+                                while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                    echo "<option value=\"".$row['id']."\">".$row['name_1']." / ".$row['name_2']."</option>";
+                                }
+                                ?>
+                            </select>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['description'].": " ?></td>
+                        <td><textarea name="description" placeholder="<?php echo $lang['description']."..." ?>" cols=50 rows=5></textarea></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['ministry_support'].": "?></td>
+                        <td>
+                            <?php
+                            for($i=0; $i<3; $i++){
+                                echo "<input type=\"radio\" name=\"ministry_support\" id=\"o_".$oid."\" value=\"".$i."\" required>";
+                                echo "<label for=\"o_".$oid."\">".$lang['ministry_'.$i]."</label>";
+                                echo "<br>";
+                                $oid++;
+                            }
+                            ?>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['ministry_place'].": " ?></td>
+                        <td><input type="number" name="ministry_place" placeholder="<?php echo $lang['ministry_place']."..." ?>" min=0></td>
+                    </tr>
+                </table>
+                <br>
+                <br>
+                <button type="submit" form="dd_edit_form"><?php echo $lang['ok'] ?></button>
+                <button type="button" onclick="contestsCancelEdit()"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- list -->
+    <div id="listHolder">
+        <select id="schoolyear" onchange="contestsFilterApply()">
+            <?php
+            $sql=$db->prepare("SELECT DISTINCT schoolyear FROM contests WHERE schoolyear<>:current ORDER BY schoolyear ASC");
+            $sql->execute(array(":current"=>$schoolyear));
+            while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                echo "<option value=\"".$row['schoolyear']."\">".$row['schoolyear']."</option>";
+            }
+            echo "<option value=\"".$schoolyear."\" selected>".$schoolyear."</option>";
+            ?>
+        </select>
+        <div id="list" class="selfcenter">
+            <!-- list goes here -->
+        </div>
+    </div>
+</div>

subs/part/contests_backend.php

@@ -0,0 +1,177 @@
+<?php
+/**
+ * /subs/contests_backend.php
+ * @version 1.0
+ * @desc backend for contests
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+try{
+    
+    if(isset($_GET['list'])){
+        $filter="WHERE c.id<>0 and c.schoolyear=?";
+        $filter_array=array($_GET['list']);
+        if(isset($_POST['filter'])){
+            if(isset($_POST['f_search'])){
+                if($_POST['f_search']!=""){
+                    $filter.=" and (c.name_1 LIKE ? or c.name_2 LIKE ? or s.name_1 LIKE ? or s.name_2 LIKE ? or c.description LIKE ?)";
+                    array_push($filter_array, "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%");
+                }
+            }
+            if(isset($_POST['f_subject'])){
+                for($i=0; $i<count($_POST['f_subject']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="c.subject=?";
+                    array_push($filter_array, $_POST['f_subject'][$i]);
+                }
+                $filter.=")";
+            }
+            if(isset($_POST['f_ministry'])){
+                for($i=0; $i<count($_POST['f_ministry']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="c.ministry_support=?";
+                    array_push($filter_array, $_POST['f_ministry'][$i]);
+                }
+                $filter.=")";
+            }
+        }
+
+        $sql=$db->prepare("SELECT c.id, c.name_1, c.name_2, s.name_1 AS subject_1, s.name_2 AS subject_2, c.description, c.ministry_support, c.ministry_place FROM contests AS c INNER JOIN subjects AS s ON (s.id=c.subject) ".$filter." ORDER BY c.name_1 ASC, c.name_2 ASC");
+        $sql->execute($filter_array);
+        echo "
+        <table class=\"table\">
+            <thead>
+                <tr>
+                    <th data-breakpoints=\"xs sm md\">".$lang['id']."</th>
+                    <th>".$lang['name_1']."</th>
+                    <th>".$lang['name_2']."</th>
+                    <th data-breakpoints=\"xs sm\">".$lang['subject_1']."</th>
+                    <th data-breakpoints=\"xs sm\">".$lang['subject_2']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['description']."</th>
+                    <th data-breakpoints=\"xs sm\">".$lang['ministry_support']."</th>
+                    <th data-breakpoints=\"xs sm\">".$lang['ministry_place']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['tools']."</th>
+                </tr>
+            </thead>
+            <tbody>
+        ";
+        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+            echo "
+            <tr>
+                <td>".$row['id']."</td>
+                <td>".$row['name_1']."</td>
+                <td>".$row['name_2']."</td>
+                <td>".$row['subject_1']."</td>
+                <td>".$row['subject_2']."</td>
+                <td>".str_replace(array("\n"), array("<br>"), $row['description'])."</td>
+                <td>".$lang['ministry_'.$row['ministry_support']]."</td>
+                <td>".($row['ministry_support']>0?$row['ministry_place']:"-")."</td>
+                <td>
+                    <button type=\"button\" onclick=\"contestsEdit(".$row['id'].")\">".$lang['edit']."</button>
+                    <button type=\"button\" onclick=\"contestsDelete(".$row['id'].", this)\">".$lang['delete']."</button>
+                </td>
+            </tr>
+            ";
+        }
+        echo "
+        </tbody>
+        </table>
+        ";
+    }
+    
+    if(isset($_POST['new'])){
+        $sql=$db->prepare("SELECT COUNT(id) AS count FROM contests WHERE name_1=:name_1 or name_2=:name_2");
+        $sql->execute(array(":name_1"=>$_POST['name_1'], ":name_2"=>$_POST['name_2']));
+        $row=$sql->fetch(PDO::FETCH_ASSOC);
+        if($row['count']>0){
+            functions::setError(8);
+        }
+        else{
+            $sql=$db->prepare("INSERT INTO contests (name_1, name_2, subject, description, ministry_support, ministry_place, schoolyear) VALUES (:n1, :n2, :subj, :desc, :ms, :mp, :sy)");
+            $sql->execute(array(":n1"=>$_POST['name_1'], ":n2"=>$_POST['name_2'], ":subj"=>$_POST['subject'], ":desc"=>$_POST['description'], ":ms"=>$_POST['ministry_support'], ":mp"=>$_POST['ministry_place'], ":sy"=>$schoolyear));
+            $res=$sql->rowCount();
+            if($res<1){
+                functions::setError(4);
+            }
+            else{
+                functions::setMessage(3);
+            }
+        }
+    }
+    
+    if(isset($_POST['delete'])){
+        $sql=$db->prepare("DELETE FROM contests WHERE id=:id");
+        $sql->execute(array(":id"=>$_POST['delete']));
+        $res=$sql->rowCount();
+        if($res<1){
+            functions::setError(4);
+        }
+        else{
+            functions::setMessage(4);
+        }
+    }
+    
+    if(isset($_GET['getdata'])){
+        $sql=$db->prepare("SELECT COUNT(id) AS count, id, name_1, name_2, subject, description, ministry_support, ministry_place FROM contests WHERE id=:id");
+        $sql->execute(array(":id"=>$_GET['getdata']));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        if($res['count']<1){
+            functions::setError(6);
+        }
+        else{
+            echo json_encode($res);
+        }
+    }
+    
+    if(isset($_POST['edit'])){
+        $sql=$db->prepare("SELECT COUNT(id) AS count FROM contests WHERE id=:id");
+        $sql->execute(array(":id"=>$_POST['edit']));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        if($res['count']<1){
+            functions::setError(6);
+        }
+        else{
+            $sql=$db->prepare("UPDATE contests SET name_1=:n1, name_2=:n2, subject=:subj, description=:desc, ministry_support=:ms, ministry_place=:mp WHERE id=:id");
+            $sql->execute(array(":n1"=>$_POST['name_1'], ":n2"=>$_POST['name_2'], ":subj"=>$_POST['subject'], ":desc"=>$_POST['description'], ":ms"=>$_POST['ministry_support'], ":mp"=>$_POST['ministry_place'], ":id"=>$_POST['edit']));
+            $res=$sql->rowCount();
+            if($res>0){
+                functions::setMessage(5);
+            }
+            else{
+                functions::setError(4);
+            }
+        }
+    }
+    
+}
+catch(Exception $e){
+    functions::setError(500);
+    error_log($e);
+}

subs/part/phases.php

@@ -0,0 +1,112 @@
+<?php
+/**
+ * /subs/phases.php
+ * @version 1.0
+ * @desc phases menu
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+?>
+
+<div class="selfcenter">
+    <!-- language for jquery -->
+    <span id="phasesDeleteConfirm" style="display: none"><?php echo $lang['delete_confirm'] ?></span>
+    <!-- filter -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_filter">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_filter_content', '#dd_filter_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_filter_img">
+                <span><?php echo $lang['filter'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_filter_content">
+            <form method="POST" class="ajaxform" id="dd_filter_form" onsubmit="phasesFilterApply()">
+                <input type="hidden" name="filter">
+                <p><?php echo $lang['search'].":" ?></p>
+                <input type="text" name="f_search" placeholder="<?php echo $lang['search']."..." ?>">
+                <hr>
+                <button type="submit" form="dd_filter_form"><?php echo $lang['apply'] ?></button>
+                <button type="button" onclick="phasesFilterReset()"><?php echo $lang['reset'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <?php if($_SESSION['accesslevel']>=3): ?>
+    <!-- new FOR elevated -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_new">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_new_content', '#dd_new_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_new_img">
+                <span><?php echo $lang['new'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_new_content">
+            <form method="POST" class="ajaxform" id="dd_new_form" onsubmit="phasesNew()">
+                <input type="hidden" name="new">
+                <table>
+                    <tr>
+                        <td><?php echo $lang['name_1'].": " ?></td>
+                        <td><input type="text" name="name_1" placeholder="<?php echo $lang['name_1']."..." ?>" required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['name_2'].": " ?></td>
+                        <td><input type="text" name="name_2" placeholder="<?php echo $lang['name_2']."..." ?>" required></td>
+                    </tr>
+                </table>
+                <br>
+                <br>
+                <button type="submit" form="dd_new_form"><?php echo $lang['ok'] ?></button>
+                <button type="reset" form="dd_new_form" onclick="toggleDropdown('#dd_new_content', '#dd_new_img')"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- edit -->
+    <div class="dropdown selfcenter" style="width: 95%; display: none" id="dd_edit">
+        <div class="dropdown header">
+            <span><?php echo $lang['edit'] ?></span>
+        </div>
+        <div class="dropdown content" style="display: block">
+            <form method="POST" class="ajaxform" id="dd_edit_form" onsubmit="phasesSubmitEdit()">
+                <input type="hidden" name="edit">
+                <table>
+                    <tr>
+                        <td><?php echo $lang['name_1'].": " ?></td>
+                        <td><input type="text" name="name_1" placeholder="<?php echo $lang['name_1']."..." ?>" required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['name_2'].": " ?></td>
+                        <td><input type="text" name="name_2" placeholder="<?php echo $lang['name_2']."..." ?>" required></td>
+                    </tr>
+                </table>
+                <br>
+                <br>
+                <button type="submit" form="dd_edit_form"><?php echo $lang['ok'] ?></button>
+                <button type="button" onclick="phasesCancelEdit()"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <?php endif ?>
+    <hr class="placeholder">
+    <!-- list -->
+    <div id="list" class="selfcenter">
+        <!-- list goes here -->
+    </div>
+</div>

subs/part/phases_backend.php

@@ -0,0 +1,157 @@
+<?php
+/**
+ * /subs/phases_backend.php
+ * @version 1.0
+ * @desc backend for phases
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+try{
+    
+    if(isset($_GET['list'])){
+        $filter="WHERE id<>0";
+        $filter_array=array();
+        if(isset($_POST['filter'])){
+            if(isset($_POST['f_search'])){
+                if($_POST['f_search']!=""){
+                    $filter.=" and (name_1 LIKE ? or name_2 LIKE ?)";
+                    array_push($filter_array, "%".$_POST['f_search']."%", "%".$_POST['f_search']."%");
+                }
+            }
+        }
+        
+        $sql=$db->prepare("SELECT id, name_1, name_2 FROM phases ".$filter." ORDER BY name_1 ASC, name_2 ASC");
+        $sql->execute($filter_array);
+        
+        echo "
+        <table class=\"table\">
+            <thead>
+                <tr>
+                    <th data-breakpoints=\"xs sm md\">".$lang['id']."</th>
+                    <th>".$lang['name_1']."</th>
+                    <th>".$lang['name_2']."</th>
+                    ".($_SESSION['accesslevel']>=3?"<th data-breakpoints=\"xs sm\">".$lang['tools']."</th>":"")."
+                </tr>
+            </thead>
+            <tbody>
+        ";
+        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+            echo "
+            <tr>
+                <td>".$row['id']."</td>
+                <td>".$row['name_1']."</td>
+                <td>".$row['name_2']."</td>
+                ".($_SESSION['accesslevel']>=3?"<td>
+                    <button type=\"button\" onclick=\"phasesEdit(".$row['id'].")\">".$lang['edit']."</button>
+                    <button type=\"button\" onclick=\"phasesDelete(".$row['id'].", this)\">".$lang['delete']."</button>
+                </td>":"")."
+            </tr>
+            ";
+        }
+        echo "
+        </tbody>
+        </table>
+        ";
+    }
+    
+    if(isset($_POST['new'])){
+        if($_SESSION['accesslevel']<3){
+            functions::setError(401);
+        }
+        else{
+            $sql=$db->prepare("SELECT COUNT(id) AS count FROM phases WHERE name_1=:n1 or name_2=:n2");
+            $sql->execute(array(":n1"=>$_POST['name_1'], ":n2"=>$_POST['name_2']));
+            $res=$sql->fetch(PDO::FETCH_ASSOC);
+            if($res['count']>0){
+                functions::setError(9);
+            }
+            else{
+                $sql=$db->prepare("INSERT INTO phases (name_1, name_2) VALUES (:n1, :n2)");
+                $sql->execute(array(":n1"=>$_POST['name_1'], ":n2"=>$_POST['name_2']));
+                $res=$sql->rowCount();
+                if($res>0){
+                    functions::setMessage(3);
+                }
+                else{
+                    functions::setError(4);
+                }
+            }
+        }
+    }
+    
+    if(isset($_POST['delete'])){
+        if($_SESSION['accesslevel']<3){
+            functions::setError(401);
+        }
+        else{
+            $sql=$db->prepare("DELETE FROM phases WHERE id=:id");
+            $sql->execute(array(":id"=>$_POST['delete']));
+            $res=$sql->rowCount();
+            if($res>0){
+                functions::setMessage(4);
+            }
+            else{
+                functions::setError(4);
+            }
+        }
+    }
+    
+    if(isset($_GET['getdata'])){
+        $sql=$db->prepare("SELECT COUNT(id) AS count, id, name_1, name_2 FROM phases WHERE id=:id");
+        $sql->execute(array(":id"=>$_GET['getdata']));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        if($res['count']<1){
+            functions::setError(6);
+        }
+        else{
+            echo json_encode($res);
+        }
+    }
+    
+    if(isset($_POST['edit'])){
+        if($_SESSION['accesslevel']<3){
+            functions::setError(401);
+        }
+        else{
+            $sql=$db->prepare("SELECT COUNT(id) AS count FROM phases WHERE id=:id");
+            $sql->execute(array(":id"=>$_POST['edit']));
+            $res=$sql->fetch(PDO::FETCH_ASSOC);
+            if($res['count']<1){
+                functions::setError(6);
+            }
+            else{
+                $sql=$db->prepare("UPDATE phases SET name_1=:n1, name_2=:n2 WHERE id=:id");
+                $sql->execute(array(":n1"=>$_POST['name_1'], ":n2"=>$_POST['name_2'], ":id"=>$_POST['edit']));
+                $res=$sql->rowCount();
+                if($res>0){
+                    functions::setMessage(5);
+                }
+                else{
+                    functions::setError(4);
+                }
+            }
+        }
+    }
+    
+}
+catch(Exception $e){
+    functions::setError(500);
+    error_log($e);
+}

subs/part/profile.php

@@ -0,0 +1,75 @@
+<?php
+/**
+ * /subs/profile.php
+ * @version 1.0
+ * @desc profile menu
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+?>
+
+<div class="selfcenter">
+    <p><?php echo $lang['needlogout'] ?></p>
+    <hr class="palceholder">
+    <table class="selfcenter">
+        <tr>
+            <td><?php echo $lang['id'].": " ?></td>
+            <td><?php echo $_SESSION['id'] ?></td>
+        </tr>
+        <tr>
+            <td><?php echo $lang['username'].": " ?></td>
+            <td><?php echo $_SESSION['username'] ?></td>
+        </tr>
+        <tr>
+            <td><?php echo $lang['fullname'].": " ?></td>
+            <td><?php echo $_SESSION['fullname'] ?></td>
+        </tr>
+        <tr>
+            <td><?php echo $lang['accesslevel'].": " ?></td>
+            <td><?php echo $_SESSION['accesslevel'] ?></td>
+        </tr>
+        <tr>
+            <td><?php echo $lang['class'].": " ?></td>
+            <td><?php echo $_SESSION['class'] ?></td>
+        </tr>
+        <tr>
+            <td><?php echo $lang['perm_message'].": " ?></td>
+            <td><?php echo $_SESSION['perm_message']?$lang['ryes']:$lang['rno'] ?></td>
+        </tr>
+    </table>
+    <hr>
+    <hr class="placeholder">
+    <form method="POST" class="ajaxform center" id="editpasswd" autocomplete="off" onsubmit="profileSetNewPassword()">
+        <p><?php echo $lang['editpasswd'] ?></p>
+        <table class="selfcenter">
+            <tr>
+                <td><?php echo $lang['password'].": " ?></td>
+                <td><input type="password" name="password" placeholder="<?php echo $lang['password']."..." ?>" required></td>
+            </tr>
+            <tr>
+                <td><?php echo $lang['password_confirm'].": " ?></td>
+                <td><input type="password" name="password_confirm" placeholder="<?php echo $lang['password_confirm']."..." ?>" required></td>
+            </tr>
+        </table>
+        <br>
+        <br>
+        <button type="submit" form="editpasswd"><?php echo $lang['ok'] ?></button>
+    </form>
+</div>

subs/part/profile_backend.php

@@ -0,0 +1,49 @@
+<?php
+/**
+ * /subs/profile_backend.php
+ * @version 1.0
+ * @desc backend for profile
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+try{
+    
+    if(isset($_POST['password']) && isset($_POST['password_confirm'])){
+        if($_POST['password']!=$_POST['password_confirm']){
+            functions::setError(10);
+        }
+        else{
+            $sql=$db->prepare("UPDATE users SET password=:passwd WHERE id=:id");
+            $sql->execute(array(":passwd"=>PasswordStorage::create_hash($_POST['password']), ":id"=>$_SESSION['id']));
+            $res=$sql->rowCount();
+            if($res>0){
+                functions::setMessage(6);
+            }
+            else{
+                functions::setError(4);
+            }
+        }
+    }
+    
+}
+catch(Exception $e){
+    functions::setError(500);
+    error_log($e);
+}

subs/part/register.php

@@ -0,0 +1,631 @@
+<?php
+/**
+ * /subs/register.php
+ * @version 1.1
+ * @desc register menu -> the core
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+$oid=0;
+?>
+
+<div class="selfcenter">
+    <!-- language for jquery -->
+    <span id="registerDeleteConfirm" style="display: none"><?php echo $lang['delete_confirm'] ?></span>
+    <!-- filter -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_filter">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_filter_content', '#dd_filter_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_filter_img">
+                <span><?php echo $lang['filter'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_filter_content">
+            <form method="POST" class="ajaxform" id="dd_filter_form" onsubmit="registerFilterApply()">
+                <input type="hidden" name="filter">
+                <p><?php echo $lang['search'].":" ?></p>
+                <input type="text" name="f_search" placeholder="<?php echo $lang['search']."..." ?>">
+                <hr>
+                <p><?php echo $lang['student'].":" ?></p>
+                <div class="searchbox">
+                    <input type="text" form="" placeholder="<?php echo $lang['search']."..." ?>" onkeyup="search(this, '#studentSearch')">
+                    <ul id="studentSearch">
+                        <?php
+                        $sql=$db->prepare("SELECT id, fullname, class FROM users WHERE accesslevel=0 and id<>1 ORDER BY class ASC, fullname ASC");
+                        $sql->execute();
+                        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                            echo "
+                            <li>
+                                <input type=\"checkbox\" name=\"f_student[]\" value=\"".$row['id']."\" id=\"o_".$oid."\">
+                                <label for=\"o_".$oid."\">".$row['fullname']." (".$row['class'].")</label>
+                            </li>
+                            ";
+                            $oid++;
+                        }
+                        ?>
+                    </ul>
+                </div>
+                <hr>
+                <p><?php echo $lang['contest'].":" ?></p>
+                <div class="searchbox">
+                    <input type="text" form="" placeholder="<?php echo $lang['search']."..." ?>" onkeyup="search(this, '#contestSearch')">
+                    <ul id="contestSearch">
+                        <?php
+                        $sql=$db->prepare("SELECT c.id, c.name_1, c.name_2, s.name_1 AS subject_1, s.name_2 AS subject_2, c.schoolyear FROM contests AS c INNER JOIN subjects AS s ON (s.id=c.subject) ORDER BY c.schoolyear DESC, s.name_1 ASC, s.name_2 ASC, c.name_1 ASC, c.name_2 ASC");
+                        $sql->execute();
+                        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                            echo "
+                            <li>
+                                <input type=\"checkbox\" name=\"f_contest[]\" value=\"".$row['id']."\" id=\"o_".$oid."\">
+                                <label for=\"o_".$oid."\">".$row['schoolyear']." - ".$row['name_1'].", ".$row['name_2']." (".$row['subject_1'].", ".$row['subject_2'].")</label>
+                            </li>
+                            ";
+                            $oid++;
+                        }
+                        ?>
+                    </ul>
+                </div>
+                <hr>
+                <p><?php echo $lang['phase'].":" ?></p>
+                <?php
+                $sql=$db->prepare("SELECT id, name_1, name_2 FROM phases ORDER BY name_1 ASC, name_2 ASC");
+                $sql->execute();
+                while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                    echo "
+                    <input type=\"checkbox\" name=\"f_phase[]\" value=\"".$row['id']."\" id=\"o_".$oid."\">
+                    <label for=\"o_".$oid."\">".$row['name_1'].", ".$row['name_2']."</label>
+                    <br>
+                    ";
+                    $oid++;
+                }
+                ?>
+                <hr>
+                <p><?php echo $lang['teacher'].":" ?></p>
+                <div class="searchbox">
+                    <input type="text" form="" placeholder="<?php echo $lang['search']."..."?>" onkeyup="search(this, '#teacherSearch')">
+                    <ul id="teacherSearch">
+                        <?php
+                        $sql=$db->prepare("SELECT id, fullname FROM users WHERE id<>0 and accesslevel>0 ORDER BY fullname ASC");
+                        $sql->execute();
+                        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                            echo "
+                            <li>
+                                <input type=\"checkbox\" name=\"f_teacher[]\" value=\"".$row['id']."\" id=\"o_".$oid."\">
+                                <label for=\"o_".$oid."\">".$row['fullname']."</label>
+                            </li>
+                            ";
+                            $oid++;
+                        }
+                        ?>
+                    </ul>
+                </div>
+                <hr>
+                <button type="submit" form="dd_filter_form"><?php echo $lang['apply'] ?></button>
+                <button type="button" onclick="registerFilterReset()"><?php echo $lang['reset'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- new  -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_new">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_new_content', '#dd_new_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_new_img">
+                <span><?php echo $lang['new'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_new_content">
+            <form method="POST" class="ajaxform" id="dd_new_form" onsubmit="registerNew()">
+                <input type="hidden" name="new">
+                <table>
+                    <tr>
+                        <td><?php echo $lang['student'].": " ?></td>
+                        <td>
+                            <div class="searchbox">
+                                <input type="text" form="" placeholder="<?php echo $lang['search']."..." ?>" onkeyup="search(this, '#studentSearchNew')">
+                                <ul id="studentSearchNew">
+                                    <?php
+                                    $sql=$db->prepare("SELECT id, fullname, class FROM users WHERE accesslevel=0 and id<>1 ORDER BY class ASC, fullname ASC");
+                                    $sql->execute();
+                                    while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                        echo "
+                                        <li>
+                                            <input type=\"radio\" name=\"student\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                            <label for=\"o_".$oid."\">".$row['fullname']." (".$row['class'].")</label>
+                                        </li>
+                                        ";
+                                        $oid++;
+                                    }
+                                    ?>
+                                </ul>
+                            </div>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['contest'].": " ?></td>
+                        <td>
+                            <div class="searchbox">
+                                <input type="text" form="" placeholder="<?php echo $lang['search']."..." ?>" onkeyup="search(this, '#contestSearchNew')">
+                                <ul id="contestSearchNew">
+                                    <?php
+                                    $sql=$db->prepare("SELECT c.id, c.name_1, c.name_2, s.name_1 AS subject_1, s.name_2 AS subject_2 FROM contests AS c INNER JOIN subjects AS s ON (s.id=c.subject) WHERE c.schoolyear=:sy ORDER BY s.name_1 ASC, s.name_2 ASC, c.name_1 ASC, c.name_2 ASC");
+                                    $sql->execute(array(":sy"=>$schoolyear));
+                                    while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                        echo "
+                                        <li>
+                                            <input type=\"radio\" name=\"contest\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                            <label for=\"o_".$oid."\">".$row['name_1'].", ".$row['name_2']." (".$row['subject_1'].", ".$row['subject_2'].")</label>
+                                        </li>
+                                        ";
+                                        $oid++;
+                                    }
+                                    ?>
+                                </ul>
+                            </div>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['phase'].": " ?></td>
+                        <td>
+                            <?php
+                            $sql=$db->prepare("SELECT id, name_1, name_2 FROM phases ORDER BY name_1 ASC, name_2 ASC");
+                            $sql->execute();
+                            while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                echo "
+                                <input type=\"radio\" name=\"phase\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                <label for=\"o_".$oid."\">".$row['name_1'].", ".$row['name_2']."</label>
+                                <br>
+                                ";
+                                $oid++;
+                            }
+                            ?>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['teacher'].": " ?></td>
+                        <td>
+                            <div class="searchbox">
+                                <input type="text" form="" placeholder="<?php echo $lang['search']."..."?>" onkeyup="search(this, '#teacherSearchNew')">
+                                <ul id="teacherSearchNew">
+                                    <?php
+                                    $sql=$db->prepare("SELECT id, fullname FROM users WHERE id<>0 and accesslevel>0 ORDER BY fullname ASC");
+                                    $sql->execute();
+                                    while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                        echo "
+                                        <li>
+                                            <input type=\"radio\" name=\"teacher\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                            <label for=\"o_".$oid."\">".$row['fullname']."</label>
+                                        </li>
+                                        ";
+                                        $oid++;
+                                    }
+                                    ?>
+                                </ul>
+                            </div>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['place'].": " ?></td>
+                        <td>
+                            <?php
+                            for($i=-3; $i<0; $i++){
+                                echo "
+                                <input type=\"radio\" name=\"place\" value=\"".$i."\" id=\"o_".$oid."\" required>
+                                <label for=\"o_".$oid."\">".$lang['places'][$i]."</label>
+                                <br>
+                                ";
+                                $oid++;
+                            }
+                            ?>
+                            <input type="radio" name="place" value="0" id="o_<?php echo $oid ?>" required>
+                            <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['custom'] ?></label>
+                            <br>
+                            <div id="registerCustomPlaceNew" style="display: none">
+                                <span><?php echo $lang['custom'].": "?></span>
+                                <input type="number" name="place_c" placeholder="<?php echo $lang['place']."..." ?>" min=1>
+                            </div>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['mention'].": " ?></td>
+                        <td><textarea name="mention" cols="50" rows="5" placeholder="<?php echo $lang['mention']."..." ?>"></textarea></td>
+                    </tr>
+                </table>
+                <br>
+                <br>
+                <button type="submit" form="dd_new_form"><?php echo $lang['ok'] ?></button>
+                <button type="reset" form="dd_new_form" onclick="toggleDropdown('#dd_new_content', '#dd_new_img')"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- Export -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_export">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_export_content', '#dd_export_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_export_img">
+                <span><?php echo $lang['export'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_export_content">
+            <form method="POST" class="ajaxform" id="dd_export_form" onsubmit="registerExport()">
+                <h3><?php echo $lang['exportcolumn'].":" ?></h3>
+                <ul style="list-style: none">
+                    <li>
+                        <input type="checkbox" name="export[]" value="id" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['id'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="student" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['student'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="class" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['class'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="subject_1" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['subject_1'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="subject_2" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['subject_2'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="contest_1" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['contest_1'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="contest_2" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['contest_2'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="contest_desc" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['contest_desc'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="ministry_support" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['ministry_support'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="ministry_place" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['ministry_place'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="phase_1" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['phase_1'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="phase_2" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['phase_2'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="teacher" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['teacher'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="place" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['place'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="mention" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['mention'] ?></label>
+                    </li>
+                    <li>
+                        <input type="checkbox" name="export[]" value="schoolyear" id="o_<?php echo $oid ?>">
+                        <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['schoolyear'] ?></label>
+                    </li>
+                </ul>
+                <hr>
+                <h3><?php echo $lang['filter'].":" ?></h3>
+                <p><?php echo $lang['search'].":" ?></p>
+                <input type="text" name="f_search" placeholder="<?php echo $lang['search']."..." ?>">
+                <hr>
+                <p><?php echo $lang['student'].":" ?></p>
+                <div class="searchbox">
+                    <input type="text" form="" placeholder="<?php echo $lang['search']."..." ?>" onkeyup="search(this, '#studentSearch')">
+                    <ul id="studentSearch">
+                        <?php
+                        $sql=$db->prepare("SELECT id, fullname, class FROM users WHERE accesslevel=0 and id<>1 ORDER BY class ASC, fullname ASC");
+                        $sql->execute();
+                        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                            echo "
+                            <li>
+                                <input type=\"checkbox\" name=\"f_student[]\" value=\"".$row['id']."\" id=\"o_".$oid."\">
+                                <label for=\"o_".$oid."\">".$row['fullname']." (".$row['class'].")</label>
+                            </li>
+                            ";
+                            $oid++;
+                        }
+                        ?>
+                    </ul>
+                </div>
+                <hr>
+                <p><?php echo $lang['contest'].":" ?></p>
+                <div class="searchbox">
+                    <input type="text" form="" placeholder="<?php echo $lang['search']."..." ?>" onkeyup="search(this, '#contestSearch')">
+                    <ul id="contestSearch">
+                        <?php
+                        $sql=$db->prepare("SELECT c.id, c.name_1, c.name_2, s.name_1 AS subject_1, s.name_2 AS subject_2, c.schoolyear FROM contests AS c INNER JOIN subjects AS s ON (s.id=c.subject) ORDER BY c.schoolyear ASC, s.name_1 ASC, s.name_2 ASC, c.name_1 ASC, c.name_2 ASC");
+                        $sql->execute();
+                        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                            echo "
+                            <li>
+                                <input type=\"checkbox\" name=\"f_contest[]\" value=\"".$row['id']."\" id=\"o_".$oid."\">
+                                <label for=\"o_".$oid."\">".$row['schoolyear']." - ".$row['name_1'].", ".$row['name_2']." (".$row['subject_1'].", ".$row['subject_2'].")</label>
+                            </li>
+                            ";
+                            $oid++;
+                        }
+                        ?>
+                    </ul>
+                </div>
+                <hr>
+                <p><?php echo $lang['phase'].":" ?></p>
+                <?php
+                $sql=$db->prepare("SELECT id, name_1, name_2 FROM phases ORDER BY name_1 ASC, name_2 ASC");
+                $sql->execute();
+                while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                    echo "
+                    <input type=\"checkbox\" name=\"f_phase[]\" value=\"".$row['id']."\" id=\"o_".$oid."\">
+                    <label for=\"o_".$oid."\">".$row['name_1'].", ".$row['name_2']."</label>
+                    <br>
+                    ";
+                    $oid++;
+                }
+                ?>
+                <hr>
+                <p><?php echo $lang['teacher'].":" ?></p>
+                <div class="searchbox">
+                    <input type="text" form="" placeholder="<?php echo $lang['search']."..."?>" onkeyup="search(this, '#teacherSearch')">
+                    <ul id="teacherSearch">
+                        <?php
+                        $sql=$db->prepare("SELECT id, fullname FROM users WHERE id<>0 and accesslevel>0 ORDER BY fullname ASC");
+                        $sql->execute();
+                        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                            echo "
+                            <li>
+                                <input type=\"checkbox\" name=\"f_teacher[]\" value=\"".$row['id']."\" id=\"o_".$oid."\">
+                                <label for=\"o_".$oid."\">".$row['fullname']."</label>
+                            </li>
+                            ";
+                            $oid++;
+                        }
+                        ?>
+                    </ul>
+                </div>
+                <hr>
+                <p><?php echo $lang['schoolyear'].":" ?></p>
+                <div class="searchbox">
+                    <input type="text" form="" placeholder="<?php echo $lang['search']."..."?>" onkeyup="search(this, '#schoolyearSearch')">
+                    <ul id="schoolyearSearch">
+                        <?php
+                        $sql=$db->prepare("SELECT DISTINCT schoolyear FROM register ORDER BY schoolyear ASC");
+                        $sql->execute();
+                        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                            echo "
+                            <li>
+                                <input type=\"checkbox\" name=\"f_schoolyear[]\" value=\"".$row['schoolyear']."\" id=\"o_".$oid."\">
+                                <label for=\"o_".$oid."\">".$row['schoolyear']."</label>
+                            </li>
+                            ";
+                            $oid++;
+                        }
+                        ?>
+                    </ul>
+                </div>
+                <br>
+                <br>
+                <button type="submit" form="dd_export_form"><?php echo $lang['export'] ?></button>
+                <div id="export_progress" style="display: none">
+                    <br>
+                    <br>
+                    <img class="icon" src="./res/loading.gif" alt="loading">
+                    <span><?php echo $lang['preparing_download'] ?></span>
+                </div>
+                <div id="export_ready" style="display: none">
+                    <br>
+                    <br>
+                    <span><?php echo $lang['download_ready'] ?></span>
+                    <br>
+                    <input type="hidden" id="download_file">
+                    <button type="button" onclick="registerExportDownload()"><?php echo $lang['download'] ?></button>
+                </div>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder"
+    <!-- edit -->
+    <div class="dropdown selfcenter" style="width: 95%; display: none" id="dd_edit">
+        <div class="dropdown header">
+            <span><?php echo $lang['edit'] ?></span>
+        </div>
+        <div class="dropdown content" style="display: block">
+            <form method="POST" class="ajaxform" id="dd_edit_form" onsubmit="registerSubmitEdit()">
+                <input type="hidden" name="edit">
+                <table>
+                    <tr>
+                        <td><?php echo $lang['student'].": " ?></td>
+                        <td>
+                            <div class="searchbox">
+                                <input type="text" form="" placeholder="<?php echo $lang['search']."..." ?>" onkeyup="search(this, '#studentSearchNew')">
+                                <ul id="studentSearchNew">
+                                    <?php
+                                    $sql=$db->prepare("SELECT id, fullname, class FROM users WHERE accesslevel=0 and id<>1 ORDER BY class ASC, fullname ASC");
+                                    $sql->execute();
+                                    while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                        echo "
+                                        <li>
+                                            <input type=\"radio\" name=\"student\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                            <label for=\"o_".$oid."\">".$row['fullname']." (".$row['class'].")</label>
+                                        </li>
+                                        ";
+                                        $oid++;
+                                    }
+                                    ?>
+                                </ul>
+                            </div>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['contest'].": " ?></td>
+                        <td>
+                            <div class="searchbox">
+                                <input type="text" form="" placeholder="<?php echo $lang['search']."..." ?>" onkeyup="search(this, '#contestSearchNew')">
+                                <ul id="contestSearchNew">
+                                    <?php
+                                    $sql=$db->prepare("SELECT c.id, c.name_1, c.name_2, s.name_1 AS subject_1, s.name_2 AS subject_2 FROM contests AS c INNER JOIN subjects AS s ON (s.id=c.subject) ORDER BY s.name_1 ASC, s.name_2 ASC, c.name_1 ASC, c.name_2 ASC");
+                                    $sql->execute();
+                                    while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                        echo "
+                                        <li>
+                                            <input type=\"radio\" name=\"contest\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                            <label for=\"o_".$oid."\">".$row['name_1'].", ".$row['name_2']." (".$row['subject_1'].", ".$row['subject_2'].")</label>
+                                        </li>
+                                        ";
+                                        $oid++;
+                                    }
+                                    ?>
+                                </ul>
+                            </div>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['phase'].": " ?></td>
+                        <td>
+                            <?php
+                            $sql=$db->prepare("SELECT id, name_1, name_2 FROM phases ORDER BY name_1 ASC, name_2 ASC");
+                            $sql->execute();
+                            while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                echo "
+                                <input type=\"radio\" name=\"phase\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                <label for=\"o_".$oid."\">".$row['name_1'].", ".$row['name_2']."</label>
+                                <br>
+                                ";
+                                $oid++;
+                            }
+                            ?>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['teacher'].": " ?></td>
+                        <td>
+                            <div class="searchbox">
+                                <input type="text" form="" placeholder="<?php echo $lang['search']."..."?>" onkeyup="search(this, '#teacherSearchNew')">
+                                <ul id="teacherSearchNew">
+                                    <?php
+                                    $sql=$db->prepare("SELECT id, fullname FROM users WHERE id<>0 and accesslevel>0 ORDER BY fullname ASC");
+                                    $sql->execute();
+                                    while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                        echo "
+                                        <li>
+                                            <input type=\"radio\" name=\"teacher\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                            <label for=\"o_".$oid."\">".$row['fullname']."</label>
+                                        </li>
+                                        ";
+                                        $oid++;
+                                    }
+                                    ?>
+                                </ul>
+                            </div>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['place'].": " ?></td>
+                        <td>
+                            <?php
+                            for($i=-3; $i<0; $i++){
+                                echo "
+                                <input type=\"radio\" name=\"place\" value=\"".$i."\" id=\"o_".$oid."\" required>
+                                <label for=\"o_".$oid."\">".$lang['places'][$i]."</label>
+                                <br>
+                                ";
+                                $oid++;
+                            }
+                            ?>
+                            <input type="radio" name="place" value="0" id="o_<?php echo $oid ?>" required>
+                            <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['custom'] ?></label>
+                            <br>
+                            <div id="registerCustomPlaceEdit" style="display: none">
+                                <span><?php echo $lang['custom'].": "?></span>
+                                <input type="number" name="place_c" placeholder="<?php echo $lang['place']."..." ?>" min=1>
+                            </div>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['mention'].": " ?></td>
+                        <td><textarea name="mention" cols="50" rows="5" placeholder="<?php echo $lang['mention']."..." ?>"></textarea></td>
+                    </tr>
+                </table>
+                <br>
+                <br>
+                <button type="submit" form="dd_edit_form"><?php echo $lang['ok'] ?></button>
+                <button type="button" onclick="registerCancelEdit()"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <!-- submit new -->
+    <div class="dropdown selfcenter" style="width: 95%; display: none" id="dd_newSubmit">
+        <div class="dropdown header">
+            <span><?php echo $lang['newSubmit'] ?></span>
+        </div>
+        <div class="dropdown content" style="display: block">
+            <p><?php echo $lang['do_before_new_record'] ?></p>
+            <p><?php echo $lang['prev_found'].":" ?></p>
+            <table id="newSubmitPrevContent" style="text-align: left">
+                <thead>
+                    <th><?php echo $lang['id'] ?></th>
+                    <th data-breakpoints="xs sm md"><?php echo $lang['phase_1'] ?></th>
+                    <th data-breakpoints="xs sm md"><?php echo $lang['phase_2'] ?></th>
+                    <th data-breakpoints="xs sm md"><?php echo $lang['teacher'] ?></th>
+                    <th data-breakpoints="xs sm md"><?php echo $lang['place'] ?></th>
+                    <th data-breakpoints="xs sm md"><?php echo $lang['mention'] ?></th>
+                    <th><?php echo $lang['tools'] ?></th>
+                </thead>
+                <tbody>
+                    <!-- previous records -->
+                </tbody>
+            </table>
+            <hr>
+            <form method="POST" class="ajaxform" id="dd_newSubmit_form" onsubmit="registerNewSubmit()">
+                <input type="hidden" name="newSubmit">
+                <button type="submit"><?php echo $lang['finalize'] ?></button>
+                <button type="button" onclick="registerNewCancel()"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- list -->
+    <div id="listHolder">
+        <select id="schoolyear" onchange="registerLoadList()">
+            <?php
+            $sql=$db->prepare("SELECT DISTINCT schoolyear FROM register WHERE schoolyear<>:current ORDER BY schoolyear ASC");
+            $sql->execute(array(":current"=>$schoolyear));
+            while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                echo "<option value=\"".$row['schoolyear']."\">".$row['schoolyear']."</option>";
+            }
+            echo "<option value=\"".$schoolyear."\" selected>".$schoolyear."</option>";
+            ?>
+        </select>
+        <div id="list" class="selfcenter">
+            <!-- list goes here -->
+        </div>
+    </div>
+</div>

subs/part/register_backend.php

@@ -0,0 +1,382 @@
+<?php
+/**
+ * /subs/register_backend.php
+ * @version 1.5
+ * @desc backend for register
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+try{
+    
+    if(isset($_GET['list'])){
+        $filter="WHERE r.id<>0 and r.schoolyear=?";
+        $filter_array=array($_GET['list']);
+        if(isset($_POST['filter'])){
+            if(isset($_POST['f_search'])){
+                if($_POST['f_search']!=""){
+                    $filter.=" and (s.fullname LIKE ? or c.name_1 LIKE ? or c.name_2 LIKE ? or p.name_1 LIKE ? or p.name_2 LIKE ? or t.fullname LIKE ?)";
+                    array_push($filter_array, "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%");
+                }
+            }
+            
+            if(isset($_POST['f_student'])){
+                for($i=0; $i<count($_POST['f_student']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="r.student=?";
+                    array_push($filter_array, $_POST['f_student'][$i]);
+                }
+                $filter.=")";
+            }
+            
+            if(isset($_POST['f_contest'])){
+                for($i=0; $i<count($_POST['f_contest']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="r.contest=?";
+                    array_push($filter_array, $_POST['f_contest'][$i]);
+                }
+                $filter.=")";
+            }
+            
+            if(isset($_POST['f_phase'])){
+                for($i=0; $i<count($_POST['f_phase']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="r.phase=?";
+                    array_push($filter_array, $_POST['f_phase'][$i]);
+                }
+                $filter.=")";
+            }
+            
+            if(isset($_POST['f_teacher'])){
+                for($i=0; $i<count($_POST['f_teacher']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="r.teacher=?";
+                    array_push($filter_array, $_POST['f_teacher'][$i]);
+                }
+                $filter.=")";
+            }
+        }
+        
+        $sql=$db->prepare("SELECT r.id, s.fullname AS student, s.class AS class, sb.name_1 AS subject_1, sb.name_2 AS subject_2, c.name_1 AS contest_1, c.name_2 AS contest_2, c.description AS contest_desc, c.ministry_support, c.ministry_place, p.name_1 AS phase_1, p.name_2 AS phase_2, t.fullname AS teacher, r.place, r.mention FROM register AS r INNER JOIN users AS s ON (s.id=r.student) INNER JOIN contests AS c ON (c.id=r.contest) INNER JOIN subjects AS sb ON (sb.id=c.subject) INNER JOIN phases AS p ON (p.id=r.phase) INNER JOIN users AS t ON (t.id=r.teacher) ".$filter." ORDER BY id ASC");
+        $sql->execute($filter_array);
+        
+        echo "
+        <table class=\"table\">
+            <thead>
+                <tr>
+                    <th data-breakpoints=\"xs sm md\">".$lang['id']."</th>
+                    <th>".$lang['student']."</th>
+                    <th>".$lang['class']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['subject_1']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['subject_2']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['contest_1']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['contest_2']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['contest_desc']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['ministry_support']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['ministry_place']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['phase_1']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['phase_2']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['teacher']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['place']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['mention']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['tools']."</th>
+                </tr>
+            </thead>
+            <tbody>
+        ";
+        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+            echo "
+            <tr>
+                <td>".$row['id']."</td>
+                <td>".$row['student']."</td>
+                <td>".$row['class']."</td>
+                <td>".$row['subject_1']."</td>
+                <td>".$row['subject_2']."</td>
+                <td>".$row['contest_1']."</td>
+                <td>".$row['contest_2']."</td>
+                <td>".$row['contest_desc']."</td>
+                <td>".$lang['ministry_'.$row['ministry_support']]."</td>
+                <td>".($row['ministry_support']==0?"":$row['ministry_place'])."</td>
+                <td>".$row['phase_1']."</td>
+                <td>".$row['phase_2']."</td>
+                <td>".$row['teacher']."</td>
+                <td>".($row['place']<0?$lang['places'][$row['place']]:$row['place'])."</td>
+                <td>".str_replace(array("\n"), array("<br>"), $row['mention'])."</td>
+                <td>
+                    <button type=\"button\" onclick=\"registerEdit(".$row['id'].")\">".$lang['edit']."</button>
+                    <button type=\"button\" onclick=\"registerDelete(".$row['id'].", this)\">".$lang['delete']."</button>
+                </td>
+            </tr>
+            ";
+        }
+    }
+    
+    if(isset($_POST['delete'])){
+        $sql=$db->prepare("DELETE FROM register WHERE id=:id");
+        $sql->execute(array(":id"=>$_POST['delete']));
+        $res=$sql->rowCount();
+        if($res>0){
+            functions::setMessage(4);
+        }
+        else{
+            functions::setError(4);
+        }
+    }
+    
+    if(isset($_POST['new'])){
+        $new=array("student"=>$_POST['student'], "contest"=>$_POST['contest'], "phase"=>$_POST['phase'], "teacher"=>$_POST['teacher'], "place"=>($_POST['place']<0?$_POST['place']:$_POST['place_c']), "mention"=>$_POST['mention']);
+        
+        $sql=$db->prepare("SELECT r.id, p.name_1 AS phase_1, p.name_2 AS phase_2, t.fullname AS teacher, r.place, r.mention FROM register AS r INNER JOIN users AS s ON (s.id=r.student) INNER JOIN phases AS p ON (p.id=r.phase) INNER JOIN users AS t ON (t.id=r.teacher) WHERE r.student=:stud and r.contest=:cont ORDER BY r.id ASC");
+        $sql->execute(array(":stud"=>$_POST['student'], ":cont"=>$_POST['contest']));
+        $found="";
+        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+            $found.="
+            <tr>
+                <td>".$row['id']."</td>
+                <td>".$row['phase_1']."</td>
+                <td>".$row['phase_2']."</td>
+                <td>".$row['teacher']."</td>
+                <td>".($row['place']<0?$lang['places'][$row['place']]:$row['place'])."</td>
+                <td>".str_replace(array("\n"), array("<br>"), $row['mention'])."</td>
+                <td><button type=\"button\" onclick=\"registerDelete(".$row['id'].", this)\">".$lang['delete']."</button></td>
+            </tr>
+            ";
+        }
+        
+        $exp=array("params"=>$new, "prev"=>$found);
+        echo json_encode($exp);
+    }
+    
+    if(isset($_POST['newSubmit'])){
+        $data=json_decode($_POST['newSubmit']);
+        $sql=$db->prepare("INSERT INTO register (student, contest, phase, teacher, place, mention, schoolyear) VALUES (:stud, :cont, :phase, :teacher, :place, :mention, :sy)");
+        $sql->execute(array(":stud"=>$data->student, ":cont"=>$data->contest, ":phase"=>$data->phase, ":teacher"=>$data->teacher, ":place"=>$data->place, ":mention"=>$data->mention, ":sy"=>$schoolyear));
+        $res=$sql->rowCount();
+        if($res>0){
+            functions::setMessage(3);
+        }
+        else{
+            functions::setError(4);
+        }
+    }
+    
+    if(isset($_GET['getdata'])){
+        $sql=$db->prepare("SELECT COUNT(id) AS count, id, student, contest, phase, teacher, place, mention FROM register WHERE id=:id");
+        $sql->execute(array(":id"=>$_GET['getdata']));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        if($res['count']<1){
+            functions::setError(6);
+        }
+        else{
+            echo json_encode($res);
+        }
+    }
+    
+    if(isset($_POST['edit'])){
+        $sql=$db->prepare("SELECT COUNT(id) AS count FROM register WHERE id=:id");
+        $sql->execute(array(":id"=>$_POST['edit']));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        if($res['count']<1){
+            functions::setError(6);
+        }
+        else{
+            $sql=$db->prepare("UPDATE register SET student=:stud, contest=:cont, phase=:phase, teacher=:teacher, place=:place, mention=:mention WHERE id=:id");
+            $sql->execute(array(":stud"=>$_POST['student'], ":cont"=>$_POST['contest'], ":phase"=>$_POST['phase'], ":teacher"=>$_POST['teacher'], ":place"=>($_POST['place']<0?$_POST['place']:$_POST['place_c']), ":mention"=>$_POST['mention'], ":id"=>$_POST['edit']));
+            $res=$sql->rowCount();
+            if($res>0){
+                functions::setMessage(5);
+            }
+            else{
+                functions::setError(4);
+            }
+        }
+    }
+    
+    if(isset($_POST['export'])){
+        //allow to run for a long time since this is a long process. 10 minute is more than enough
+        set_time_limit(600); 
+        
+        $filter="WHERE r.id<>0";
+        $filter_array=array();
+        if(isset($_POST['filter'])){
+            if(isset($_POST['f_search'])){
+                if($_POST['f_search']!=""){
+                    $filter.=" and (s.fullname LIKE ? or c.name_1 LIKE ? or c.name_2 LIKE ? or p.name_1 LIKE ? or p.name_2 LIKE ? or t.fullname LIKE ?)";
+                    array_push($filter_array, "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%");
+                }
+            }
+            
+            if(isset($_POST['f_student'])){
+                for($i=0; $i<count($_POST['f_student']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="r.student=?";
+                    array_push($filter_array, $_POST['f_student'][$i]);
+                }
+                $filter.=")";
+            }
+            
+            if(isset($_POST['f_contest'])){
+                for($i=0; $i<count($_POST['f_contest']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="r.contest=?";
+                    array_push($filter_array, $_POST['f_contest'][$i]);
+                }
+                $filter.=")";
+            }
+            
+            if(isset($_POST['f_phase'])){
+                for($i=0; $i<count($_POST['f_phase']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="r.phase=?";
+                    array_push($filter_array, $_POST['f_phase'][$i]);
+                }
+                $filter.=")";
+            }
+            
+            if(isset($_POST['f_teacher'])){
+                for($i=0; $i<count($_POST['f_teacher']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="r.teacher=?";
+                    array_push($filter_array, $_POST['f_teacher'][$i]);
+                }
+                $filter.=")";
+            }
+            
+            if(isset($_POST['f_schoolyear'])){
+                for($i=0; $i<count($_POST['f_schoolyear']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="r.schoolyear=?";
+                    array_push($filter_array, $_POST['f_schoolyear'][$i]);
+                }
+                $filter.=")";
+            }
+                    
+        }
+        
+        $sql=$db->prepare("SELECT r.id, s.fullname AS student, s.class AS class, sb.name_1 AS subject_1, sb.name_2 AS subject_2, c.name_1 AS contest_1, c.name_2 AS contest_2, c.description AS contest_desc, c.ministry_support, c.ministry_place, p.name_1 AS phase_1, p.name_2 AS phase_2, t.fullname AS teacher, r.place, r.mention, r.schoolyear FROM register AS r INNER JOIN users AS s ON (s.id=r.student) INNER JOIN contests AS c ON (c.id=r.contest) INNER JOIN subjects AS sb ON (sb.id=c.subject) INNER JOIN phases AS p ON (p.id=r.phase) INNER JOIN users AS t ON (t.id=r.teacher) ".$filter." ORDER BY r.schoolyear ASC, subject_1 ASC, contest_1 ASC, student ASC");
+        $sql->execute($filter_array);
+        
+        //setting up file
+        $exp=$BOM;
+        $exp.="\"".strtr($config['general']['title'], array("\""=>"\"\""))."\"\n";
+        $exp.="\"".strtr($config['general']['org'], array("\""=>"\"\""))."\"\n";
+        $exp.="\"".strtr($lang['exported'], array("\""=>"\"\"")).": ".date("Y-m-d H:i:s")."\"\n\n";
+        
+        //build header
+        $header="";
+        foreach($_POST['export'] as $e){
+            $header.="\"".strtr($lang[$e], array("\"", "\"\""))."\",";
+        }
+        $header=rtrim($header, ",");
+        $exp.=$header."\n";
+        
+        //build content
+        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+            $push="";
+            foreach($_POST['export'] as $e){
+                if($e=="ministry_support"){
+                    $push.="\"".strtr($lang['ministry_'.$row['ministry_support']], array("\""=>"\"\""))."\",";
+                }
+                else if($e=="ministry_place"){
+                    $push.="\"".strtr($row['ministry_support']==0?"":$row['ministry_place'], array("\""=>"\"\""))."\",";
+                }
+                else if($e=="place"){
+                    $push.="\"".strtr($row['place']<0?$lang['places'][$row['place']]:$row['place'], array("\""=>"\"\""))."\",";
+                }
+                else{
+                    $push.="\"".strtr($row[$e], array("\""=>"\"\""))."\",";
+                }
+            }
+            $push=rtrim($push, ",");
+            $exp.=$push."\n";
+        }
+        
+        //save it to a temporary file
+        $file=tempnam(sys_get_temp_dir(), "resmanExp_");
+        file_put_contents($file, $exp);
+        
+        //return file name for download
+        echo $file;
+    }
+    
+    if(isset($_GET['expdownload'])){
+        if(!file_exists($_GET['expdownload'])){
+            functions::setError(404);
+            header("Location: ".$_SERVER['HTTP_REFERER']);
+        }
+        else{
+            //download exported file
+            header("Content-type: application/octet-stream");
+            header("Content-disposition: attachment; filename='".$config['general']['title']."_export_".date("Y-m-d H-i-s").".csv'");
+            readfile($_GET['expdownload']);
+            unlink($_GET['expdownload']);
+            die();
+        }
+    }
+    
+}
+catch(Exception $e){
+    functions::setError(500);
+    error_log($e);
+}

subs/part/subjects.php

@@ -0,0 +1,112 @@
+<?php
+/**
+ * /subs/subjects.php
+ * @version 1.2
+ * @desc Subjects menu
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+?>
+
+<div class="selfcenter">
+    <!-- language for jquery -->
+    <span id="subjectsDeleteConfirm" style="display: none"><?php echo $lang['delete_confirm'] ?></span>
+    <!-- filter -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_filter">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_filter_content', '#dd_filter_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_filter_img">
+                <span><?php echo $lang['filter'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_filter_content">
+            <form method="POST" class="ajaxform" id="dd_filter_form" onsubmit="subjectsFilterApply()">
+                <input type="hidden" name="filter">
+                <p><?php echo $lang['search'].":" ?></p>
+                <input type="text" name="f_search" placeholder="<?php echo $lang['search']."..." ?>">
+                <hr>
+                <button type="submit" form="dd_filter_form"><?php echo $lang['apply'] ?></button>
+                <button type="button" onclick="subjectsFilterReset()"><?php echo $lang['reset'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <?php if($_SESSION['accesslevel']>=3): ?>
+    <!-- new subject (for elevated users) -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_new">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_new_content', '#dd_new_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_new_img">
+                <span><?php echo $lang['new'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_new_content">
+            <form method="POST" class="ajaxform" id="dd_new_form" onsubmit="subjectsNew()">
+                <input type="hidden" name="new">
+                <table>
+                    <tr>
+                        <td><?php echo $lang['name_1'].": " ?></td>
+                        <td><input type="text" name="name_1" placeholder="<?php echo $lang['name_1']."..." ?>" required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['name_2'].": " ?></td>
+                        <td><input type="text" name="name_2" placeholder="<?php echo $lang['name_2']."..." ?>" required></td>
+                    </tr>
+                </table>
+                <br>
+                <br>
+                <button type="submit" form="dd_new_form"><?php echo $lang['ok'] ?></button>
+                <button type="reset" form="dd_new_form" onclick="toggleDropdown('#dd_new_content', '#dd_new_img')"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- edit -->
+    <div class="dropdown selfcenter" style="width: 95%; display: none" id="dd_edit">
+        <div class="dropdown header">
+            <span><?php echo $lang['edit'] ?></span>
+        </div>
+        <div class="dropdown content" style="display: block">
+            <form method="POST" class="ajaxform" id="dd_edit_form" onsubmit="subjectsSubmitEdit()">
+                <input type="hidden" name="edit">
+                <table>
+                    <tr>
+                        <td><?php echo $lang['name_1'].": " ?></td>
+                        <td><input type="text" name="name_1" placeholder="<?php echo $lang['name_1']."..." ?>" required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['name_2'].": " ?></td>
+                        <td><input type="text" name="name_2" placeholder="<?php echo $lang['name_2']."..." ?>" required></td>
+                    </tr>
+                </table>
+                <br>
+                <br>
+                <button type="submit" form="dd_edit_form"><?php echo $lang['ok'] ?></button>
+                <button type="button" onclick="subjectsCancelEdit()"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <?php endif ?>
+    <hr class="placeholder">
+    <!-- list -->
+    <div id="list" class="selfcenter">
+        <!-- list goes here -->
+    </div>
+</div>

subs/part/subjects_backend.php

@@ -0,0 +1,139 @@
+<?php
+/**
+ * /subs/subjects_backend.php
+ * @version 1.1
+ * @desc backend for subjects
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+try{
+    
+    if(isset($_GET['list'])){
+        $filter="WHERE id<>0";
+        $filter_array=array();
+        if(isset($_POST['filter'])){
+            if(isset($_POST['f_search'])){
+                $filter.=" and (name_1 LIKE ? or name_2 LIKE ?)";
+                array_push($filter_array, "%".$_POST['f_search']."%", "%".$_POST['f_search']."%");
+            }
+        }
+        
+        $sql=$db->prepare("SELECT id, name_1, name_2 FROM subjects ".$filter." ORDER BY name_1 ASC, name_2 ASC");
+        $sql->execute($filter_array);
+        
+        //print list
+        echo "
+        <table class=\"table\">
+            <thead>
+                <tr>
+                    <th>".$lang['id']."</th>
+                    <th>".$lang['name_1']."</th>
+                    <th>".$lang['name_2']."</th>
+                    ".($_SESSION['accesslevel']>=3?"<th>".$lang['tools']."</th>":"")."
+                </tr>
+            </thead>
+            <tbody>
+        ";
+        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+            echo "
+            <tr>
+                <td>".$row['id']."</td>
+                <td>".$row['name_1']."</td>
+                <td>".$row['name_2']."</td>
+                ".($_SESSION['accesslevel']>=3?"<td>
+                    <button type=\"button\" onclick=\"subjectsEdit(".$row['id'].")\">".$lang['edit']."</button>
+                    <button type=\"button\" onclick=\"subjectsDelete(".$row['id'].", this)\">".$lang['delete']."</button>
+                </td>":"")."
+            </tr>
+            ";
+        }
+    }
+    
+    if(isset($_POST['new'])){
+        $sql=$db->prepare("SELECT count(id) AS count FROM subjects WHERE name_1=:name_1 or name_2=:name_2");
+        $sql->execute(array(":name_1"=>$_POST['name_1'], ":name_2" =>$_POST['name_2']));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        
+        if($res['count']>0){
+            functions::setError(7);
+        }
+        else{
+            $sql=$db->prepare("INSERT INTO subjects (name_1, name_2) VALUES (:name_1, :name_2)");
+            $sql->execute(array(":name_1"=>$_POST['name_1'], ":name_2"=>$_POST['name_2']));
+            $res=$sql->rowCount();
+            if($res>0){
+                functions::setMessage(3);
+            }
+            else{
+                functions::setError(4);
+            }
+        }
+    }
+    
+    if(isset($_POST['delete'])){
+        $sql=$db->prepare("DELETE FROM subjects WHERE id=:id");
+        $sql->execute(array(":id"=>$_POST['delete']));
+        $res=$sql->rowCount();
+        if($res>0){
+            functions::setMessage(4);
+        }
+        else{
+            functions::setError(4);
+        }
+    }
+    
+    if(isset($_GET['getdata'])){
+        $sql=$db->prepare("SELECT COUNT(id) AS count, id, name_1, name_2 FROM subjects WHERE id=:id");
+        $sql->execute(array(":id"=>$_GET['getdata']));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        if($res['count']<1){
+            functions::setError(6);
+        }
+        else{
+            echo json_encode($res);
+        }
+    }
+    
+    if(isset($_POST['edit'])){
+        $sql=$db->prepare("SELECT COUNT(id) AS count FROM subjects WHERE id=:id");
+        $sql->execute(array(":id"=>$_POST['edit']));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        
+        if($res['count']<1){
+            functions::setError(6);
+        }
+        else{
+            $sql=$db->prepare("UPDATE subjects SET name_1=:name_1, name_2=:name_2 WHERE id=:id");
+            $sql->execute(array(":name_1"=>$_POST['name_1'], ":name_2"=>$_POST['name_2'], ":id"=>$_POST['edit']));
+            $res=$sql->rowCount();
+            if($res>0){
+                functions::setMessage(5);
+            }
+            else{
+                functions::setError(4);
+            }
+        }
+    }
+    
+}
+catch(Exception $e){
+    functions::setError(500);
+    error_log($e);
+}

subs/part/users.php

@@ -0,0 +1,189 @@
+<?php
+/**
+ * /subs/users.php
+ * @version 2.0
+ * @desc users editor
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+$oid=0;
+?>
+
+<div class="selfcenter">
+    <!-- language for jquery -->
+    <span id="usersDeleteConfirm" style="display: none"><?php echo $lang['delete_confirm'] ?></span>
+    <!-- filter -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_filter">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_filter_content', '#dd_filter_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_filter_img">
+                <span><?php echo $lang['filter'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_filter_content">
+            <form method="POST" class="ajaxform" id="dd_filter_form" onsubmit="usersFilterApply()">
+                <input type="hidden" name="filter">
+                <p><?php echo $lang['search'].":" ?></p>
+                <input type="text" name="f_search" placeholder="<?php echo $lang['search']."..." ?>">
+                <hr>
+                <p><?php echo $lang['class'].":" ?></p>
+                <?php
+                $sql=$db->prepare("SELECT DISTINCT class FROM users ORDER BY class ASC");
+                $sql->execute();
+                while($res=$sql->fetch(PDO::FETCH_ASSOC)){
+                    echo "<input type=\"checkbox\" name=\"f_class[]\" id=\"o_".$oid."\" value=\"".$res['class']."\">";
+                    echo "<label for=\"o_".$oid."\">".($res['class']!=""?$res['class']:"<<".$lang['empty'].">>")."</label>";
+                    echo "<br>";
+                    $oid++;
+                }
+                ?>
+                <hr>
+                <p><?php echo $lang['accesslevel'].":" ?></p>
+                <?php
+                $sql=$db->prepare("SELECT DISTINCT accesslevel FROM users ORDER BY accesslevel ASC");
+                $sql->execute();
+                while($res=$sql->fetch(PDO::FETCH_ASSOC)){
+                    echo "<input type=\"checkbox\" name=\"f_accesslevel[]\" id=\"o_".$oid."\" value=\"".$res['accesslevel']."\">";
+                    echo "<label for=\"o_".$oid."\">".$res['accesslevel']."</label>";
+                    echo "<br>";
+                    $oid++;
+                }
+                ?>
+                <hr>
+                <button type="submit" form="dd_filter_form"><?php echo $lang['apply'] ?></button>
+                <button type="button" onclick="usersFilterReset()"><?php echo $lang['reset'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- new -->
+    <div class="dropdown selfcenter" style="width: 95%" id="dd_new">
+        <div class="dropdown header">
+            <a onclick="toggleDropdown('#dd_new_content', '#dd_new_img')">
+                <img class="icon" src="./res/plus.png" alt="plusminus" id="dd_new_img">
+                <span><?php echo $lang['new'] ?></span>
+            </a>
+        </div>
+        <div class="dropdown content" id="dd_new_content">
+            <form method="POST" class="ajaxform" id="dd_new_form" onsubmit="usersNew()" autocomplete="off">
+                <input type="hidden" name="new">
+                <table>
+                    <tr>
+                        <td><?php echo $lang['username'].": " ?></td>
+                        <td><input type="text" name="username" placeholder="<?php echo $lang['username']."..." ?>"></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['fullname'].": " ?></td>
+                        <td><input type="text" name="fullname" placeholder="<?php echo $lang['fullname']."..." ?>" required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['accesslevel'].": " ?></td>
+                        <td><input type="number" name="accesslevel" placeholder="<?php echo $lang['accesslevel']."..." ?>" value=0 min=0 max=4 required></td>
+                    </tr>
+                    <tr>
+                        <td>
+                            <span><?php echo $lang['class'].": " ?></span>
+                            <br>
+                            <span style="font-size: 0.8em"><?php echo $lang['classformat'] ?></span>
+                        </td>
+                        <td><input type="text" name="class" placeholder="<?php echo $lang['class']."..." ?>"></td>
+                    </tr>
+                    <tr>
+                        <td>
+                            <span><?php echo $lang['password'].": " ?></span>
+                            <br>
+                            <span style="font-size: 0.8em"><?php echo $lang['passwordhint'] ?></span>
+                        </td>
+                        <td><input type="text" name="password" placeholder="<?php echo $lang['password']."..." ?>"></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['perm_message'].": " ?></td>
+                        <td>
+                            <div class="checkbox">
+                                <input type="checkbox" name="perm_message" id="o_<?php echo $oid ?>" checked>
+                                <label for="o_<?php echo $oid; $oid++ ?>"></label>
+                            </div>
+                        </td>
+                    </tr>
+                </table>
+                <br>
+                <br>
+                <button type="submit" form="dd_new_form"><?php echo $lang['ok'] ?></button>
+                <button type="reset" form="dd_new_form" onclick="toggleDropdown('#dd_new_content', '#dd_new_img')"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- edit -->
+    <div class="dropdown selfcenter" id="dd_edit" style="width: 95%; display: none" id="dd_edit">
+        <div class="dropdown header">
+            <span><?php echo $lang['edit'] ?></span>
+        </div>
+        <div class="dropdown content" style="display: block">
+            <form method="POST" class="ajaxform" id="dd_edit_form" onsubmit="usersSubmitEdit()" autocomplete="off">
+                <input type="hidden" name="edit">
+                <table>
+                    <tr>
+                        <td><?php echo $lang['username'].": " ?></td>
+                        <td><input type="text" name="username" placeholder="<?php echo $lang['username']."..." ?>"></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['fullname'].": " ?></td>
+                        <td><input type="text" name="fullname" placeholder="<?php echo $lang['fullname']."..." ?>" required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['accesslevel'].": " ?></td>
+                        <td><input type="number" name="accesslevel" placeholder="<?php echo $lang['accesslevel']."..." ?>" value=0 min=0 max=4 required></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['class'].": " ?></td>
+                        <td><input type="text" name="class" placeholder="<?php echo $lang['class']."..." ?>"></td>
+                    </tr>
+                    <tr>
+                        <td>
+                            <span><?php echo $lang['password'].": " ?></span>
+                            <br>
+                            <span style="font-size: 0.8em"><?php echo $lang['passwordhintedit'] ?></span>
+                        </td>
+                        <td><input type="text" name="password" placeholder="<?php echo $lang['password']."..." ?>"></td>
+                    </tr>
+                    <tr>
+                        <td><?php echo $lang['perm_message'].": " ?></td>
+                        <td>
+                            <div class="checkbox">
+                                <input type="checkbox" name="perm_message" id="o_<?php echo $oid ?>" checked>
+                                <label for="o_<?php echo $oid; $oid++ ?>"></label>
+                            </div>
+                        </td>
+                    </tr>
+                </table>
+                <br>
+                <br>
+                <button type="submit" form="dd_edit_form"><?php echo $lang['ok'] ?></button>
+                <button type="button" onclick="usersCancelEdit()"><?php echo $lang['cancel'] ?></button>
+            </form>
+        </div>
+    </div>
+    <hr class="placeholder">
+    <!-- list -->
+    <div class="selfcenter" id="list">
+        <!-- list goes here -->
+    </div>
+</div>

subs/part/users_backend.php

@@ -0,0 +1,206 @@
+<?php
+/**
+ * /subs/part/users_backend.php
+ * @version 2.1
+ * @desc users backend
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+try{
+    
+    if(isset($_GET['list'])){
+        $filter="WHERE id<>1";
+        $filter_array=array();
+        if(isset($_POST['filter'])){
+            if(isset($_POST['f_search'])){
+                if($_POST['f_search']!=""){
+                    $filter.=" and (username LIKE ? or fullname LIKE ? or class LIKE ?)";
+                    array_push($filter_array, "%".$_POST['f_search']."%", "%".$_POST['f_search']."%", "%".$_POST['f_search']."%");
+                }
+            }
+            if(isset($_POST['f_class'])){
+                for($i=0; $i<count($_POST['f_class']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="class=?";
+                    array_push($filter_array, $_POST['f_class'][$i]);
+                }
+                $filter.=")";
+            }
+            if(isset($_POST['f_accesslevel'])){
+                for($i=0; $i<count($_POST['f_accesslevel']); $i++){
+                    if($i==0){
+                        $filter.=" and (";
+                    }
+                    else{
+                        $filter.=" or ";
+                    }
+                    $filter.="accesslevel=?";
+                    array_push($filter_array, $_POST['f_accesslevel'][$i]);
+                }
+                $filter.=")";
+            }
+        }
+        
+        $sql=$db->prepare("SELECT id, username, fullname, accesslevel, class, perm_message FROM users ".$filter." ORDER BY class ASC, fullname ASC, accesslevel ASC");
+        $sql->execute($filter_array);
+        echo "
+        <table class=\"table\">
+            <thead>
+                <tr>
+                    <th data-breakpoints=\"xs sm md\">".$lang['id']."</th>
+                    <th data-breakpoints=\"xs sm\">".$lang['username']."</th>
+                    <th>".$lang['fullname']."</th>
+                    <th data-breakpoints=\"xs sm\">".$lang['accesslevel']."</th>
+                    <th>".$lang['class']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['perm_message']."</th>
+                    <th data-breakpoints=\"xs sm md\">".$lang['tools']."</th>
+                </tr>
+            </thead>
+            <tbody>
+        ";
+        while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+            echo "
+            <tr>
+                <td>".$row['id']."</td>
+                <td>".$row['username']."</td>
+                <td>".$row['fullname']."</td>
+                <td>".$row['accesslevel']."</td>
+                <td>".$row['class']."</td>
+                <td>".($row['perm_message']?$lang['ryes']:$lang['rno'])."</td>
+                <td>
+                    <button type=\"button\" onclick=\"usersEdit(".$row['id'].")\">".$lang['edit']."</button>
+                    <button type=\"button\" onclick=\"usersDelete(".$row['id'].", this)\">".$lang['delete']."</button>
+                </td>
+            </tr>
+            ";
+        }
+        echo "
+        </tbody>
+        </table>
+        ";
+    }
+
+    if(isset($_POST['new'])){
+        if($_POST['username']!=""){
+            $sql=$db->prepare("SELECT COUNT(id) AS count FROM users WHERE username=:uname");
+            $sql->execute(array(":uname"=>$_POST['username']));
+            $res=$sql->fetch(PDO::FETCH_ASSOC);
+            if($res['count']>0){
+                functions::setError(5);
+            }
+        }
+        
+        $password;
+        if($_POST['password']=="0"){
+            $password=functions::randomString(6);
+        }
+        else{
+            $password=$_POST['password'];
+        }
+        
+        $pm=isset($_POST['perm_message']);
+        
+        $sql=$db->prepare("INSERT INTO users (username, fullname, accesslevel, class, password, perm_message) VALUES (:uname, :fname, :al, :class, :passwd, :pm)");
+        $sql->execute(array(":uname"=>$_POST['username'], ":fname"=>$_POST['fullname'], ":al"=>$_POST['accesslevel'], ":class"=>$_POST['class'], ":passwd"=>PasswordStorage::create_hash($_POST['password']), ":pm"=>$pm));
+        $res=$sql->rowCount();
+        if($res>0){
+            functions::setMessage(3);
+        }
+        else{
+            functions::setError(4);
+        }
+    }
+    
+    if(isset($_GET['getdata'])){
+        $sql=$db->prepare("SELECT COUNT(id) AS count, id, username, fullname, accesslevel, class, perm_message FROM users WHERE id=:id");
+        $sql->execute(array(":id"=>$_GET['getdata']));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        if($res['count']<1){
+            functions::setError(6);
+        }
+        else{
+            echo json_encode($res);
+        }
+    }
+    
+    if(isset($_POST['edit'])){
+        $sql=$db->prepare("SELECT COUNT(id) AS count FROM users WHERE id=:id");
+        $sql->execute(array(":id"=>$_POST['edit']));
+        $res=$sql->fetch(PDO::FETCH_ASSOC);
+        
+        $pm=isset($_POST['perm_message']);
+        
+        if($res['count']<1){
+            functions::setError(6);
+        }
+        else{
+            $sql=$db->prepare("UPDATE users SET username=:uname, fullname=:fname, accesslevel=:al, class=:class, perm_message=:pm WHERE id=:id");
+            $sql->execute(array(":uname"=>$_POST['username'], ":fname"=>$_POST['fullname'], ":al"=>$_POST['accesslevel'], ":class"=>$_POST['class'], ":pm"=>$pm, ":id"=>$_POST['edit']));
+            $res1=$sql->rowCount();
+            
+            //check if password needs update
+            if($_POST['password']==""){
+                $res2=true;
+            }
+            else{
+                $password;
+                if($_POST['password']=="0"){
+                    $password=functions::randomString(6);
+                }
+                else{
+                    $password=$_POST['password'];
+                }
+                
+                $sql=$db->prepare("UPDATE users SET password=:passwd WHERE id=:id");
+                $sql->execute(array(":passwd"=>PasswordStorage::create_hash($password), ":id"=>$_POST['edit']));
+                $res2=$sql->rowCount();
+            }
+            
+            if($res1 && $res2){
+                functions::setMessage(5);
+            }
+            else{
+                functions::setError(4);
+            }
+        }
+    }
+
+    if(isset($_POST['delete'])){
+        $sql=$db->prepare("DELETE FROM users WHERE id=:id");
+        $sql->execute(array(":id"=>$_POST['delete']));
+        $res=$sql->rowCount();
+        if($res>0){
+            functions::setMessage(4);
+        }
+        else{
+            functions::setError(4);
+        }
+    }
+
+}
+catch(Exception $e){
+    functions::setError(500);
+    error_log($e);
+}

subs/part/wizard.php

@@ -0,0 +1,242 @@
+<?php
+/**
+ * /subs/wizard.php
+ * @version 1.1
+ * @desc wizard for easy data input
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+$oid=0;
+
+?>
+
+<div class="selfcenter">
+    <!-- language, config -->
+    <span id="wizardDeleteConfirm" style="display: none"><?php echo $lang['delete_confirm'] ?></span>
+    <span id="wizardCurrentId" style="display: none"><?php echo $_SESSION['id'] ?></span>
+    <!-- instructions -->
+    <p><?php echo $lang['wizinst'] ?></p>
+    <!-- steps -->
+    <div id="steps">
+        <form method="POST" class="ajaxform" id="wizform" autocomplete="off">
+            <input type="hidden" name="new">
+            <!-- step1/student -->
+            <div id="step1" class="dropdown selfcenter" style="width: 95%">
+                <div class="dropdown header">
+                    <span class="number">1</span>
+                    <span><?php echo $lang['wiz_step1'] ?></span>
+                </div>
+                <div class="dropdown content" id="step1_content" style="display: block">
+                    <div class="searchbox">
+                        <input type="text" form="" placeholder="<?php echo $lang['search']."..." ?>" onkeyup="search(this, '#studentSearchNew')">
+                        <ul id="studentSearchNew">
+                            <?php
+                            $sql=$db->prepare("SELECT id, fullname, class FROM users WHERE accesslevel=0 and id<>1 ORDER BY class ASC, fullname ASC");
+                            $sql->execute();
+                            while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                echo "
+                                <li>
+                                    <input type=\"radio\" name=\"student\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                    <label for=\"o_".$oid."\">".$row['fullname']." (".$row['class'].")</label>
+                                </li>
+                                ";
+                                $oid++;
+                            }
+                            ?>
+                        </ul>
+                    </div>
+                    <br>
+                    <br>
+                    <button type="button" onclick="wizardNextStep(this)" style="float: right"><?php echo $lang['proceed'] ?></button>
+                </div>
+            </div>
+            <br>
+            <!-- step2/contest -->
+            <div id="step2" class="dropdown selfcenter" style="width: 95%">
+                <div class="dropdown header">
+                    <span class="number">2</span>
+                    <span><?php echo $lang['wiz_step2'] ?></span>
+                </div>
+                <div class="dropdown content" id="step2_content">
+                    <div class="searchbox">
+                        <input type="text" form="" placeholder="<?php echo $lang['search']."..." ?>" onkeyup="search(this, '#contestSearchNew')">
+                        <ul id="contestSearchNew">
+                            <?php
+                            $sql=$db->prepare("SELECT c.id, c.name_1, c.name_2, s.name_1 AS subject_1, s.name_2 AS subject_2 FROM contests AS c INNER JOIN subjects AS s ON (s.id=c.subject) WHERE c.schoolyear=:sy ORDER BY s.name_1 ASC, s.name_2 ASC, c.name_1 ASC, c.name_2 ASC");
+                            $sql->execute(array(":sy"=>$schoolyear));
+                            while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                echo "
+                                <li>
+                                    <input type=\"radio\" name=\"contest\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                    <label for=\"o_".$oid."\">".$row['name_1'].", ".$row['name_2']." (".$row['subject_1'].", ".$row['subject_2'].")</label>
+                                </li>
+                                ";
+                                $oid++;
+                            }
+                            ?>
+                        </ul>
+                    </div>
+                    <br>
+                    <br>
+                    <button type="button" onclick="wizardPrevStep(this)" style="float: left"><?php echo $lang['back'] ?></button>
+                    <button type="button" onclick="wizardNextStep(this)" style="float: right"><?php echo $lang['proceed'] ?></button>
+                </div>
+            </div>
+            <br>
+            <!-- step3/phase -->
+            <div id="step3" class="dropdown selfcenter" style="width: 95%">
+                <div class="dropdown header">
+                    <span class="number">3</span>
+                    <span><?php echo $lang['wiz_step3'] ?></span>
+                </div>
+                <div class="dropdown content" id="step3_content">
+                    <?php
+                    $sql=$db->prepare("SELECT id, name_1, name_2 FROM phases ORDER BY name_1 ASC, name_2 ASC");
+                    $sql->execute();
+                    while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                        echo "
+                        <input type=\"radio\" name=\"phase\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                        <label for=\"o_".$oid."\">".$row['name_1'].", ".$row['name_2']."</label>
+                        <br>
+                        ";
+                        $oid++;
+                    }
+                    ?>
+                    <br>
+                    <br>
+                    <button type="button" onclick="wizardPrevStep(this)" style="float: left"><?php echo $lang['back'] ?></button>
+                    <button type="button" onclick="wizardNextStep(this)" style="float: right"><?php echo $lang['proceed'] ?></button>
+                </div>
+            </div>
+            <br>
+            <!-- step4/teacher -->
+            <div id="step4" class="dropdown selfcenter" style="width: 95%">
+                <div class="dropdown header">
+                    <span class="number">4</span>
+                    <span><?php echo $lang['wiz_step4'] ?></span>
+                </div>
+                <div class="dropdown content" id="step4_content">
+                    <button type="button" onclick="wizardSelectMeAsTeacher()"><?php echo $lang['selectme'] ?></button>
+                    <br>
+                    <br>
+                    <div class="searchbox">
+                        <input type="text" form="" placeholder="<?php echo $lang['search']."..."?>" onkeyup="search(this, '#teacherSearchNew')">
+                        <ul id="teacherSearchNew">
+                            <?php
+                            $sql=$db->prepare("SELECT id, fullname FROM users WHERE id<>0 and accesslevel>0 ORDER BY fullname ASC");
+                            $sql->execute();
+                            while($row=$sql->fetch(PDO::FETCH_ASSOC)){
+                                echo "
+                                <li>
+                                    <input type=\"radio\" name=\"teacher\" value=\"".$row['id']."\" id=\"o_".$oid."\" required>
+                                    <label for=\"o_".$oid."\">".$row['fullname']."</label>
+                                </li>
+                                ";
+                                $oid++;
+                            }
+                            ?>
+                        </ul>
+                    </div>
+                    <br>
+                    <br>
+                    <button type="button" onclick="wizardPrevStep(this)" style="float: left"><?php echo $lang['back'] ?></button>
+                    <button type="button" onclick="wizardNextStep(this)" style="float: right"><?php echo $lang['proceed'] ?></button>
+                </div>
+            </div>
+            <br>
+            <!-- step5/place -->
+            <div id="step5" class="dropdown selfcenter" style="width: 95%">
+                <div class="dropdown header">
+                    <span class="number">5</span>
+                    <span><?php echo $lang['wiz_step5'] ?></span>
+                </div>
+                <div class="dropdown content" id="step5_content">
+                    <?php
+                    for($i=-3; $i<0; $i++){
+                        echo "
+                        <input type=\"radio\" name=\"place\" value=\"".$i."\" id=\"o_".$oid."\" required>
+                        <label for=\"o_".$oid."\">".$lang['places'][$i]."</label>
+                        <br>
+                        ";
+                        $oid++;
+                    }
+                    ?>
+                    <input type="radio" name="place" value="0" id="o_<?php echo $oid ?>" required>
+                    <label for="o_<?php echo $oid; $oid++ ?>"><?php echo $lang['custom'] ?></label>
+                    <br>
+                    <div id="registerCustomPlaceNew" style="display: none">
+                        <span><?php echo $lang['custom'].": "?></span>
+                        <input type="number" name="place_c" placeholder="<?php echo $lang['place']."..." ?>" min=1>
+                    </div>
+                    <br>
+                    <br>
+                    <button type="button" onclick="wizardPrevStep(this)" style="float: left"><?php echo $lang['back'] ?></button>
+                    <button type="button" onclick="wizardNextStep(this)" style="float: right"><?php echo $lang['proceed'] ?></button>
+                </div>
+            </div>
+            <br>
+            <!-- step6/mention -->
+            <div id="step6" class="dropdown selfcenter" style="width: 95%">
+                <div class="dropdown header">
+                    <span class="number">6</span>
+                    <span><?php echo $lang['wiz_step6'] ?></span>
+                </div>
+                <div class="dropdown content" id="step6_content">
+                    <textarea name="mention" cols="50" rows="5" placeholder="<?php echo $lang['mention']."..." ?>"></textarea>
+                    <br>
+                    <br>
+                    <button type="button" onclick="wizardPrevStep(this)" style="float: left"><?php echo $lang['back'] ?></button>
+                    <button type="button" onclick="wizardLoadPrevRecords(this)" style="float: right"><?php echo $lang['proceed'] ?></button>
+                </div>
+            </div>
+        </form>
+        <br>
+        <!-- step7/finalize -->
+        <div id="step7" class="dropdown selfcenter" style="width: 95%">
+            <div class="dropdown header">
+                <span class="number">7</span>
+                <span><?php echo $lang['wiz_step7'] ?></span>
+            </div>
+            <div class="dropdown content" id="step7_content">
+                <input type="hidden" name="recordParams">
+                <p><?php echo $lang['do_before_new_record'] ?></p>
+                <p><?php echo $lang['prev_found'].":" ?></p>
+                <table id="wizardPrevContent" style="text-align: left">
+                    <thead>
+                        <th><?php echo $lang['id'] ?></th>
+                        <th data-breakpoints="xs sm md"><?php echo $lang['phase_1'] ?></th>
+                        <th data-breakpoints="xs sm md"><?php echo $lang['phase_2'] ?></th>
+                        <th data-breakpoints="xs sm md"><?php echo $lang['teacher'] ?></th>
+                        <th data-breakpoints="xs sm md"><?php echo $lang['place'] ?></th>
+                        <th data-breakpoints="xs sm md"><?php echo $lang['mention'] ?></th>
+                        <th><?php echo $lang['tools'] ?></th>
+                    </thead>
+                    <tbody>
+                        <!-- previous records -->
+                    </tbody>
+                </table>
+                <br>
+                <br>
+                <button type="button" onclick="wizardPrevStep(this)" style="float: left"><?php echo $lang['back'] ?></button>
+                <button type="button" onclick="wizardSubmitRecord()" style="float: right"><?php echo $lang['finalize'] ?></button>
+            </div>
+        </div>
+    </div>
+</div>

subs/part/wizard_backend.php

@@ -0,0 +1,26 @@
+<?php
+/**
+ * /subs/part/wizard_backend.php
+ * @version 1.0
+ * @desc backend for easy wizard like data input
+ * @author Fándly Gergő Zoltán (fandlygergo@gmail.hu, systemtest.tk)
+ * @copy 2017 Fándly Gergő Zoltán
+ * License:
+    Result Manager for managing results of students in bilingual school systems.
+    Copyright (C) 2017  Fándly Gergő Zoltán
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ **/
+
+//wizard is just an other frontend for the register. So no backend here