summaryrefslogtreecommitdiff
path: root/admin/change-status
diff options
context:
space:
mode:
Diffstat (limited to 'admin/change-status')
-rwxr-xr-xadmin/change-status/change-status.php68
-rwxr-xr-xadmin/change-status/index.php28
2 files changed, 96 insertions, 0 deletions
diff --git a/admin/change-status/change-status.php b/admin/change-status/change-status.php
new file mode 100755
index 0000000..cbf7f6e
--- /dev/null
+++ b/admin/change-status/change-status.php
@@ -0,0 +1,68 @@
+<?php
+/*
+ * GNUfault.org - GNUfault's website
+ * Copyright (C) 2026 Connor Thomson
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+define('ROOT', rtrim($_SERVER['DOCUMENT_ROOT'], '/') . '/');
+
+require_once ROOT . '/php/user.php';
+
+require_admin();
+
+if ($_SERVER["REQUEST_METHOD"] != "POST") {
+ header("Location: /admin/change-status/");
+ exit;
+}
+
+$username = isset($_POST['username']) ? $_POST['username'] : '';
+
+$status = isset($_POST['status']) ? $_POST['status'] : '';
+
+if (!in_array($status, USER_STATUSES, true)) {
+ echo "That is not a status!";
+ exit;
+}
+
+try {
+ $user = find_user($username);
+
+ if (!$user) {
+ echo "User not found.";
+ exit;
+ }
+
+ $me = current_user();
+
+ if ($me !== null && (int)$user['id'] === (int)$me['id']) {
+ echo "You cannot change your own status!";
+ exit;
+ }
+
+ $sql = "UPDATE users SET status = :status WHERE username = :username";
+
+ query($sql, [
+ 'status' => $status,
+ 'username' => $username
+ ]);
+} catch (\PDOException $e) {
+ echo "Error: " . $e->getMessage();
+ exit;
+}
+
+header("Location: /admin/");
+
+?>
diff --git a/admin/change-status/index.php b/admin/change-status/index.php
new file mode 100755
index 0000000..4eddee3
--- /dev/null
+++ b/admin/change-status/index.php
@@ -0,0 +1,28 @@
+<?php
+/*
+ * GNUfault.org - GNUfault's website
+ * Copyright (C) 2026 Connor Thomson
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+define('ROOT', rtrim($_SERVER['DOCUMENT_ROOT'], '/') . '/');
+
+require_once ROOT . '/php/user.php';
+
+require_admin();
+
+render_content(ROOT . '/html/change-status.html');
+
+?>