Galleries/PHPGallery
1
0
Fork 0
mirror of https://github.com/Fluffy-Bean/image-gallery.git synced 2025-06-12 05:13:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Tabs, oh and IT FUCKING CHECKS IF YOU'RE AN ADMIN NOW REEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE

Browse source
This commit is contained in:
Michał Gdula 2022-09-16 22:24:51 +00:00
parent e28157de3c
commit 42e4de2e3b
4 changed files with 120 additions and 57 deletions
Download patch file Download diff file Expand all files Collapse all files

70
app/account/account.php
View file

@ -429,49 +429,59 @@ if (isset($_POST['submit_signup'])) {
|-------------------------------------------------------------
*/
if (isset($_POST['toggle_admin'])) {
$is_admin = mysqli_query($conn, "SELECT * FROM users WHERE id = " . $_POST['id'] . " ORDER BY id DESC LIMIT 1");
if ($user_info->is_admin($conn, $_POST['userId'])) {
$is_admin = mysqli_query($conn, "SELECT * FROM users WHERE id = " . $_POST['id'] . " ORDER BY id DESC LIMIT 1");
while ($user_info = mysqli_fetch_assoc($is_admin)) {
$admin_status = $user_info['admin'];
$username = $user_info['username'];
}
$sql = "UPDATE users SET admin = ? WHERE id = ?";
if ($stmt = mysqli_prepare($conn, $sql)) {
// Bind variables to the prepared statement as parameters
mysqli_stmt_bind_param($stmt, "ii", $param_admin_status, $param_user_id);
// Set parameters
if ($admin_status) {
$param_admin_status = 0;
$admin_update_message = "removed from the admins list";
} elseif (!$admin_status) {
$param_admin_status = 1;
$admin_update_message = "added to the admins list";
while ($user_info = mysqli_fetch_assoc($is_admin)) {
$admin_status = $user_info['admin'];
$username = $user_info['username'];
}
$param_user_id = $_POST['id'];
// Attempt to execute the prepared statement
if (mysqli_stmt_execute($stmt)) {
?>
<script>
sniffleAdd('Bap!', '<?php echo $username; ?> has been <?php echo $admin_update_message; ?>!', 'var(--green)', 'assets/icons/check.svg');
flyoutClose();
</script>
<?php
$sql = "UPDATE users SET admin = ? WHERE id = ?";
if ($stmt = mysqli_prepare($conn, $sql)) {
// Bind variables to the prepared statement as parameters
mysqli_stmt_bind_param($stmt, "ii", $param_admin_status, $param_user_id);
// Set parameters
if ($admin_status) {
$param_admin_status = 0;
$admin_update_message = "removed from the admins list";
} elseif (!$admin_status) {
$param_admin_status = 1;
$admin_update_message = "added to the admins list";
}
$param_user_id = $_POST['id'];
// Attempt to execute the prepared statement
if (mysqli_stmt_execute($stmt)) {
?>
<script>
sniffleAdd('Bap!', '<?php echo $username; ?> has been <?php echo $admin_update_message; ?>!', 'var(--green)', 'assets/icons/check.svg');
flyoutClose();
</script>
<?php
mysqli_query($conn,"INSERT INTO logs (ipaddress, action) VALUES('$user_ip','$username has been $admin_update_message')");
} else {
?>
<script>
sniffleAdd('Bruh', 'Something went fuckywucky, please try later', 'var(--red)', 'assets/icons/cross.svg');
flyoutClose();
</script>
<?php
}
} else {
?>
<script>
sniffleAdd('Bruh', 'Something went fuckywucky, please try later', 'var(--red)', 'assets/icons/cross.svg');
flyoutClose();
</script>
<?php
<?php
}
} else {
?>
<script>
sniffleAdd('Bruh', 'Something went fuckywucky, please try later', 'var(--red)', 'assets/icons/cross.svg');
sniffleAdd('Bruh', 'You\'re not an admin, you cannot!!!!', 'var(--red)', 'assets/icons/cross.svg');
flyoutClose();
</script>
<?php