forked from jakepaulus/collate-network
/
_users.php
57 lines (42 loc) · 1.28 KB
/
_users.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
<?php
require_once('include/common.php');
AccessControl('5', null, false); # null means no log, false means don't redirect
include 'include/validation_functions.php';
$op = (empty($_GET['op'])) ? 'default' : $_GET['op'];
$username = (isset($_GET['username'])) ? $_GET['username'] : '';
$result = validate_text($username,'username');
if($result['0'] === false){
header("HTTP/1.1 400 Bad Request");
echo $COLLATE['languages']['selected'][$result['error']];
exit();
}
else{
$username = $result['1'];
}
$sql = "select count(*) from users where username='$username'";
$result = $dbo -> query($sql);
$count = $result -> fetchColumn();
if($count != '1'){
header("HTTP/1.1 400 Bad Request");
echo $COLLATE['languages']['selected']['invalidrequest'];
exit();
}
switch($op){
case "deleteuser";
delete_user();
break;
default:
exit();
}
function delete_user() {
global $COLLATE;
global $username;
global $dbo;
collate_log('5', "User deleted: $username");
$sql = "DELETE FROM users WHERE username='$username'";
$result = $dbo -> query($sql);
$message = str_replace("%username%", "$username", $COLLATE['languages']['selected']['userdeleted']);
echo $message;
exit();
} // Ends delete_user function
?>