<?php
  require('global-php.php');
  $verbindung = database_connection($lang_database_failure[$language]);
  $PHP_AUTH_USER = $_SERVER["PHP_AUTH_USER"];
  $PHP_AUTH_PW = $_SERVER["PHP_AUTH_PW"];
  $ergebnis = db_exec($verbindung,
			"SELECT * FROM staff_authorization,superuser "
				. "WHERE superuser.account"
				. "=staff_authorization.id "
				. "AND "
				. login_query_clauses(
					$PHP_AUTH_USER,
					$PHP_AUTH_PW)
				. ";");
  if (pg_numrows($ergebnis) < 1) {
    header('WWW-Authenticate: Basic realm="Kursverwaltung"');
    header("HTTP/1.0 401 Unauthorized");
    echo $lang_authentication_failure[$language];
    db_close($verbindung);
    exit;
  }
  $course = intval($_REQUEST["course"]);
  $enable = ("on" == $_REQUEST["enabled"]);
  if ($enable) {
    db_exec($verbindung, "DELETE FROM disabled_course WHERE disabled=$course;");
  } else {
    db_exec($verbindung, "INSERT INTO disabled_course (disabled) "
    				. "SELECT $course;");
  }
  db_close($verbindung);
?>