prepare('SELECT isAdmin FROM users WHERE UserId = :userId LIMIT 1'); $stmt->execute([':userId' => $userId]); $row = $stmt->fetch(PDO::FETCH_ASSOC); $isAdmin = isset($row['isAdmin']) ? (int)$row['isAdmin'] : 0; } } if ($isAdmin === 0 && stripos($currentPage, 'home') === false) { header('Location: /home'); exit(); } include_once $_SERVER['DOCUMENT_ROOT'] . '/Admi/SideBar.php'; if ($adminLevel < AdminLevel::ADMIN) { echo <<
HTML; exit; } if ($_SERVER['REQUEST_METHOD'] === 'POST') { if ($adminLevel < AdminLevel::ADMIN) { http_response_code(403); echo 'Unauthorized'; exit(); } if (!empty($_POST['userid'])) { $stmt = $pdo->prepare("SELECT * FROM users WHERE UserId = :value LIMIT 1"); $stmt->bindValue(':value', $_POST['userid']); $stmt->execute(); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); } elseif (!empty($_POST['username'])) { $stmt = $pdo->prepare("SELECT * FROM users WHERE Username = :value LIMIT 1"); $stmt->bindValue(':value', $_POST['username']); $stmt->execute(); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); } if ($searchResult && isset($searchResult['UserId'])) { $stmt = $pdo->prepare("SELECT * FROM bans WHERE UserId = :userid ORDER BY ReviewedAt DESC LIMIT 1"); $stmt->bindParam(':userid', $searchResult['UserId']); $stmt->execute(); $banInfo = $stmt->fetch(PDO::FETCH_ASSOC); } } if ($searchResult && isset($searchResult['UserId'])) { $stmt = $pdo->prepare("SELECT * FROM bans WHERE UserId = :userid ORDER BY ReviewedAt DESC LIMIT 1"); $stmt->bindParam(':userid', $searchResult['UserId']); $stmt->execute(); $banInfo = $stmt->fetch(PDO::FETCH_ASSOC); $stmt = $pdo->prepare("SELECT Robux, Tix FROM users WHERE UserId = ?"); $stmt->execute([$searchResult['UserId']]); $userCurrency = $stmt->fetch(PDO::FETCH_ASSOC); $currentRobux = $userCurrency['Robux'] ?? 0; $currentTix = $userCurrency['Tix'] ?? 0; } if ($searchResult && isset($searchResult['UserId'])) { $stmt = $pdo->prepare("SELECT Robux, Tix FROM users WHERE UserId = ?"); $stmt->execute([$searchResult['UserId']]); $userCurrency = $stmt->fetch(PDO::FETCH_ASSOC); $currentRobux = $userCurrency['Robux'] ?? 0; $currentTix = $userCurrency['Tix'] ?? 0; } if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_user'])) { if ($adminLevel < AdminLevel::ADMIN) { http_response_code(403); echo 'Unauthorized'; exit(); } $newUsername = trim($_POST['new_username']); $newBio = trim($_POST['new_bio']); $editUserId = intval($_POST['edit_userid']); if (!empty($newUsername) && !empty($editUserId)) { $stmt = $pdo->prepare("UPDATE users SET Username = :username, Description = :bio WHERE UserId = :userid"); $stmt->bindParam(':username', $newUsername); $stmt->bindParam(':bio', $newBio); $stmt->bindParam(':userid', $editUserId, PDO::PARAM_INT); $stmt->execute(); $stmt = $pdo->prepare("SELECT * FROM users WHERE UserId = :userid LIMIT 1"); $stmt->bindValue(':userid', $editUserId); $stmt->execute(); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); if ($searchResult) { $stmt = $pdo->prepare("SELECT * FROM bans WHERE UserId = :userid ORDER BY ReviewedAt DESC LIMIT 1"); $stmt->bindParam(':userid', $searchResult['UserId']); $stmt->execute(); $banInfo = $stmt->fetch(PDO::FETCH_ASSOC); } } } $currentRobux = null; $currentTix = null; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['grant_currency'])) { if ($adminLevel < AdminLevel::ADMIN) { http_response_code(403); echo 'Unauthorized'; exit(); } $editUserId = (int)$_POST['edit_userid']; $robuxAmount = (int)$_POST['robux']; $tixAmount = (int)$_POST['tix']; if ($editUserId > 0) { $stmt = $pdo->prepare("SELECT Robux, Tix FROM users WHERE UserId = ?"); $stmt->execute([$editUserId]); $current = $stmt->fetch(PDO::FETCH_ASSOC); $newRobux = max(0, ($current['Robux'] ?? 0) + $robuxAmount); $newTix = max(0, ($current['Tix'] ?? 0) + $tixAmount); $stmt = $pdo->prepare("UPDATE users SET Robux = ?, Tix = ? WHERE UserId = ?"); $stmt->execute([$newRobux, $newTix, $editUserId]); $message = "Successfully updated currency: Robux = {$newRobux}, Tix = {$newTix}."; $stmt = $pdo->prepare("SELECT * FROM users WHERE UserId = ?"); $stmt->execute([$editUserId]); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); $currentRobux = $newRobux; $currentTix = $newTix; } } if ($searchResult && isset($searchResult['UserId'])) { $stmt = $pdo->prepare("SELECT Robux, Tix FROM users WHERE UserId = ?"); $stmt->execute([$searchResult['UserId']]); $userCurrency = $stmt->fetch(PDO::FETCH_ASSOC); $currentRobux = $userCurrency['Robux'] ?? 0; $currentTix = $userCurrency['Tix'] ?? 0; } ?>

Abusing the system will get you revoked out of the admin team

Use this for giveaway or test purposes!

This user is a protected and holder of AFTERWORLD!

This user is protected!

Username:

User ID:

Robux:

Tix:

Robux: N/A

Tix: N/A

No users found.

You do not have permission to use this.

Grant Currency