prepare('SELECT isAdmin FROM users WHERE UserId = :userId LIMIT 1'); $stmt->execute([':userId' => $userId]); $row = $stmt->fetch(PDO::FETCH_ASSOC); $isAdmin = isset($row['isAdmin']) ? (int)$row['isAdmin'] : 0; } } if ($isAdmin === 0 && stripos($currentPage, 'home') === false) { header('Location: /home'); exit(); } include_once $_SERVER['DOCUMENT_ROOT'] . '/Admi/SideBar.php'; if ($adminLevel < AdminLevel::ADMIN) { echo <<
HTML; exit; } if ($_SERVER['REQUEST_METHOD'] === 'POST') { if ($adminLevel < AdminLevel::ADMIN) { http_response_code(403); echo 'Unauthorized'; exit(); } if (!empty($_POST['userid'])) { $stmt = $pdo->prepare("SELECT * FROM users WHERE UserId = :value LIMIT 1"); $stmt->bindValue(':value', $_POST['userid']); $stmt->execute(); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); } elseif (!empty($_POST['username'])) { $stmt = $pdo->prepare("SELECT * FROM users WHERE Username = :value LIMIT 1"); $stmt->bindValue(':value', $_POST['username']); $stmt->execute(); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); } if ($searchResult && isset($searchResult['UserId'])) { $stmt = $pdo->prepare("SELECT * FROM bans WHERE UserId = :userid ORDER BY ReviewedAt DESC LIMIT 1"); $stmt->bindParam(':userid', $searchResult['UserId']); $stmt->execute(); $banInfo = $stmt->fetch(PDO::FETCH_ASSOC); } } if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_user'])) { if ($adminLevel < AdminLevel::ADMIN) { http_response_code(403); echo 'Unauthorized'; exit(); } $newUsername = trim($_POST['new_username']); $newBio = trim($_POST['new_bio']); $editUserId = intval($_POST['edit_userid']); if (!empty($newUsername) && !empty($editUserId)) { $stmt = $pdo->prepare("UPDATE users SET Username = :username, Description = :bio WHERE UserId = :userid"); $stmt->bindParam(':username', $newUsername); $stmt->bindParam(':bio', $newBio); $stmt->bindParam(':userid', $editUserId, PDO::PARAM_INT); $stmt->execute(); $stmt = $pdo->prepare("SELECT * FROM users WHERE UserId = :userid LIMIT 1"); $stmt->bindValue(':userid', $editUserId); $stmt->execute(); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); if ($searchResult) { $stmt = $pdo->prepare("SELECT * FROM bans WHERE UserId = :userid ORDER BY ReviewedAt DESC LIMIT 1"); $stmt->bindParam(':userid', $searchResult['UserId']); $stmt->execute(); $banInfo = $stmt->fetch(PDO::FETCH_ASSOC); } } } $currentBadges = []; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['grant_badges'])) { if ($adminLevel < AdminLevel::ADMIN) { http_response_code(403); echo 'Unauthorized'; exit(); } $editUserId = (int)$_POST['edit_userid']; $badgeIds = array_map('intval', array_filter(array_map('trim', explode(',', $_POST['badges'])))); $stmt = $pdo->prepare("SELECT aftwld_badges FROM users WHERE UserId = ? LIMIT 1"); $stmt->execute([$editUserId]); $row = $stmt->fetch(PDO::FETCH_ASSOC); $existingBadges = json_decode($row['aftwld_badges'] ?? '[]', true); if (!is_array($existingBadges)) $existingBadges = []; $updated = array_unique(array_merge($existingBadges, $badgeIds)); $stmt = $pdo->prepare("UPDATE users SET aftwld_badges = :badges WHERE UserId = :userid"); $stmt->execute([ ':badges' => json_encode(array_values($updated)), ':userid' => $editUserId ]); } if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['remove_badges'])) { if ($adminLevel < AdminLevel::ADMIN) { http_response_code(403); echo 'Unauthorized'; exit(); } $editUserId = (int)$_POST['edit_userid']; $badgeIds = array_map('intval', array_filter(array_map('trim', explode(',', $_POST['badges'])))); $stmt = $pdo->prepare("SELECT aftwld_badges FROM users WHERE UserId = ? LIMIT 1"); $stmt->execute([$editUserId]); $row = $stmt->fetch(PDO::FETCH_ASSOC); $existingBadges = json_decode($row['aftwld_badges'] ?? '[]', true); if (!is_array($existingBadges)) $existingBadges = []; $updated = array_values(array_diff($existingBadges, $badgeIds)); $stmt = $pdo->prepare("UPDATE users SET aftwld_badges = :badges WHERE UserId = :userid"); $stmt->execute([ ':badges' => json_encode($updated), ':userid' => $editUserId ]); } if ($searchResult && isset($searchResult['UserId'])) { $stmt = $pdo->prepare("SELECT aftwld_badges FROM users WHERE UserId = ?"); $stmt->execute([$searchResult['UserId']]); $badgeData = $stmt->fetch(PDO::FETCH_ASSOC); $currentBadges = json_decode($badgeData['aftwld_badges'] ?? '[]', true); if (!is_array($currentBadges)) $currentBadges = []; } ?>

Abusing the system will get you revoked out of the admin team.

= 1; ?>

This user is a protected and holder of AFTERWORLD!

This user is protected!

Username:

User ID:

No users found.

You do not have permission to use this.

Grant Badges