prepare('SELECT isAdmin FROM users WHERE UserId = :userId LIMIT 1'); $stmt->execute([':userId' => $userId]); $row = $stmt->fetch(PDO::FETCH_ASSOC); $isAdmin = isset($row['isAdmin']) ? (int)$row['isAdmin'] : 0; } } if ($isAdmin === 0 && stripos($currentPage, 'home') === false) { header('Location: /home'); exit(); } include_once $_SERVER['DOCUMENT_ROOT'] . '/Admi/SideBar.php'; if ($adminLevel < AdminLevel::ADMIN) { echo <<
HTML; exit; } $userId = $info['UserId']; $username = $info['Username'] ?? 'Guest'; $searchResult = null; $banInfo = null; if ($_SERVER['REQUEST_METHOD'] === 'POST') { if ($adminLevel < AdminLevel::ADMIN) { http_response_code(403); echo 'Unauthorized'; exit(); } if (!empty($_POST['userid'])) { $stmt = $pdo->prepare("SELECT * FROM users WHERE UserId = :value LIMIT 1"); $stmt->bindValue(':value', $_POST['userid']); $stmt->execute(); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); } elseif (!empty($_POST['username'])) { $stmt = $pdo->prepare("SELECT * FROM users WHERE Username = :value LIMIT 1"); $stmt->bindValue(':value', $_POST['username']); $stmt->execute(); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); } if ($searchResult && isset($searchResult['UserId'])) { $stmt = $pdo->prepare("SELECT * FROM bans WHERE UserId = :userid ORDER BY ReviewedAt DESC LIMIT 1"); $stmt->bindParam(':userid', $searchResult['UserId']); $stmt->execute(); $banInfo = $stmt->fetch(PDO::FETCH_ASSOC); } } if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_user'])) { if ($adminLevel < AdminLevel::ADMIN) { http_response_code(403); echo 'Unauthorized'; exit(); } $newUsername = trim($_POST['new_username']); $newBio = trim($_POST['new_bio']); $editUserId = intval($_POST['edit_userid']); if (!empty($newUsername) && !empty($editUserId)) { $stmt = $pdo->prepare("UPDATE users SET Username = :username, Description = :bio WHERE UserId = :userid"); $stmt->bindParam(':username', $newUsername); $stmt->bindParam(':bio', $newBio); $stmt->bindParam(':userid', $editUserId, PDO::PARAM_INT); $stmt->execute(); $stmt = $pdo->prepare("SELECT * FROM users WHERE UserId = :userid LIMIT 1"); $stmt->bindValue(':userid', $editUserId); $stmt->execute(); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); if ($searchResult) { $stmt = $pdo->prepare("SELECT * FROM bans WHERE UserId = :userid ORDER BY ReviewedAt DESC LIMIT 1"); $stmt->bindParam(':userid', $searchResult['UserId']); $stmt->execute(); $banInfo = $stmt->fetch(PDO::FETCH_ASSOC); } } } $stmt = $pdo->prepare("SELECT Membership FROM users WHERE userId = ?"); $stmt->execute([$userId]); $current = $stmt->fetchColumn(); $membershipOptions = [ 0 => 'NoBuildersClub', 1 => 'BuildersClub', 2 => 'TurboBuildersClub', 3 => 'OutrageousBuildersClub' ]; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['apply_membership'])) { if ($adminLevel < AdminLevel::ADMIN) { http_response_code(403); echo 'Unauthorized'; exit(); } $membership = (int)$_POST['membership']; $editUserId = (int)$_POST['edit_userid']; if ($editUserId && array_key_exists($membership, $membershipOptions)) { $updateStmt = $pdo->prepare("UPDATE users SET Membership = ? WHERE UserId = ?"); $updateStmt->execute([$membership, $editUserId]); $message = "Membership successfully updated."; $stmt = $pdo->prepare("SELECT * FROM users WHERE UserId = :userid LIMIT 1"); $stmt->bindValue(':userid', $editUserId); $stmt->execute(); $searchResult = $stmt->fetch(PDO::FETCH_ASSOC); } } ?>

This user is a protected and holder of AFTERWORLD!

This user is protected!

Username:

User ID:

Active Membership(s):

No users found.

You do not have permission to use this.

Grant Membership