diff options
Diffstat (limited to 'admin/change-status')
| -rwxr-xr-x | admin/change-status/change-status.php | 68 | ||||
| -rwxr-xr-x | admin/change-status/index.php | 28 |
2 files changed, 96 insertions, 0 deletions
diff --git a/admin/change-status/change-status.php b/admin/change-status/change-status.php new file mode 100755 index 0000000..cbf7f6e --- /dev/null +++ b/admin/change-status/change-status.php @@ -0,0 +1,68 @@ +<?php +/* + * GNUfault.org - GNUfault's website + * Copyright (C) 2026 Connor Thomson + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License as published by + * the Free Software Foundation, either version 3 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License + * along with this program. If not, see <https://www.gnu.org/licenses/>. + */ + +define('ROOT', rtrim($_SERVER['DOCUMENT_ROOT'], '/') . '/'); + +require_once ROOT . '/php/user.php'; + +require_admin(); + +if ($_SERVER["REQUEST_METHOD"] != "POST") { + header("Location: /admin/change-status/"); + exit; +} + +$username = isset($_POST['username']) ? $_POST['username'] : ''; + +$status = isset($_POST['status']) ? $_POST['status'] : ''; + +if (!in_array($status, USER_STATUSES, true)) { + echo "That is not a status!"; + exit; +} + +try { + $user = find_user($username); + + if (!$user) { + echo "User not found."; + exit; + } + + $me = current_user(); + + if ($me !== null && (int)$user['id'] === (int)$me['id']) { + echo "You cannot change your own status!"; + exit; + } + + $sql = "UPDATE users SET status = :status WHERE username = :username"; + + query($sql, [ + 'status' => $status, + 'username' => $username + ]); +} catch (\PDOException $e) { + echo "Error: " . $e->getMessage(); + exit; +} + +header("Location: /admin/"); + +?> diff --git a/admin/change-status/index.php b/admin/change-status/index.php new file mode 100755 index 0000000..4eddee3 --- /dev/null +++ b/admin/change-status/index.php @@ -0,0 +1,28 @@ +<?php +/* + * GNUfault.org - GNUfault's website + * Copyright (C) 2026 Connor Thomson + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License as published by + * the Free Software Foundation, either version 3 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License + * along with this program. If not, see <https://www.gnu.org/licenses/>. + */ + +define('ROOT', rtrim($_SERVER['DOCUMENT_ROOT'], '/') . '/'); + +require_once ROOT . '/php/user.php'; + +require_admin(); + +render_content(ROOT . '/html/change-status.html'); + +?> |
