diff --git a/main/admin.php b/main/admin.php
new file mode 100644
index 0000000..31b69ac
--- /dev/null
+++ b/main/admin.php
@@ -0,0 +1,146 @@
+setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+
+$error = '';
+$success = '';
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+ if (isset($_POST['action']) && isset($_POST['username'])) {
+ $username = filter_input(INPUT_POST, 'username', FILTER_SANITIZE_STRING);
+
+ if ($_POST['action'] === 'ban') {
+ $stmt = $db->prepare('UPDATE users SET is_blocked = 1 WHERE username = ?');
+ $stmt->execute([$username]);
+ $success = "User $username has been banned";
+ } elseif ($_POST['action'] === 'unban') {
+ $stmt = $db->prepare('UPDATE users SET is_blocked = 0 WHERE username = ?');
+ $stmt->execute([$username]);
+ $success = "User $username has been unbanned";
+ }
+ }
+}
+
+$stmt = $db->query('SELECT username, is_blocked, is_moderator, created_at FROM users ORDER BY created_at DESC');
+$users = $stmt->fetchAll(PDO::FETCH_ASSOC);
+?>
+
+
+
+
+ Text0Nly - Admin Panel
+
+
+
+
+
+
+
+
+
= htmlspecialchars($error) ?>
+
+
+
= htmlspecialchars($success) ?>
+
+
+
+
+
+ Username |
+ Status |
+ Created |
+ Actions |
+
+
+
+
+
+ = htmlspecialchars($user['username']) ?> |
+
+
+ Banned
+
+ Moderator
+
+ Active
+
+ |
+ = $user['created_at'] ?> |
+
+
+
+
+ |
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/main/index.php b/main/index.php
index 0da0eae..8515adf 100644
--- a/main/index.php
+++ b/main/index.php
@@ -84,6 +84,9 @@ try {
Source code
👤 = htmlspecialchars($_SESSION['username']) ?>
+
+ Admin Panel
+
Logout
Login
diff --git a/main/login.php b/main/login.php
index 52e32c7..5a9835e 100644
--- a/main/login.php
+++ b/main/login.php
@@ -31,7 +31,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if ($username && $password) {
try {
- $stmt = $db->prepare('SELECT id, password, is_blocked, login_attempts, last_attempt FROM users WHERE username = ?');
+ $stmt = $db->prepare('SELECT id, password, is_blocked, login_attempts, last_attempt, is_moderator FROM users WHERE username = ?');
$stmt->execute([$username]);
$user = $stmt->fetch(PDO::FETCH_ASSOC);
@@ -45,6 +45,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$stmt->execute([$user['id']]);
$_SESSION['user_id'] = $user['id'];
$_SESSION['username'] = $username;
+ $_SESSION['is_moderator'] = $user['is_moderator'];
header('Location: index.php');
exit;
} else {