FreeTSP/delete_member.php at master · Krypto/FreeTSP · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
<?php

/**
**************************
** FreeTSP Version: 1.0 **
**************************
** http://www.freetsp.info
** https://github.com/Krypto/FreeTSP
** Licence Info: GPL
** Copyright (C) 2010 FreeTSP v1.0
** A bittorrent tracker source based on TBDev.net/tbsource/bytemonsoon.
** Project Leaders: Krypto, Fireknight.
**/

require_once(dirname(__FILE__).DIRECTORY_SEPARATOR.'functions'.DIRECTORY_SEPARATOR.'function_main.php');
require_once(FUNC_DIR.'function_user.php');
require_once(FUNC_DIR.'function_vfunctions.php');
require_once(FUNC_DIR.'function_bbcode.php');

db_connect(true);
logged_in();

site_header("Delete Account",false);

if (get_user_class() < UC_MODERATOR)
{
    error_message_center("error", "Access Denied",
                                  "You Are Not Permitted To Access This Area");
}

if ($_SERVER["REQUEST_METHOD"] == "POST")
{
    $action = isset($_GET["action"]) ? $_GET["action"] : '';

    if ($action == 'deluser')
    {
        $username = trim($_POST["username"]);

        display_message_center("info", "Sanity Check",
                                       "Are you sure you wish to Delete <strong>$username</strong><br />
                                       <form method='post' action='delete_member.php?&amp;action=sure'>
                                       <input type='hidden' name='username' size='20' value='".$username."' />
                                       <input type='submit' class='btn' value='Yes Delete $username' />
                                       </form>");
    }

    if ($action == 'sure')
    {
        $username = trim($_POST["username"]);

        display_message_center("info", "Final Sanity Check",
                                       "Are you <strong>Really</strong> sure you wish to Delete <strong>$username</strong><br />
                                       <form method='post' action='delete_member.php?&amp;action=delete'>
                                       <input type='hidden' name='username' size='20' value='".$username."' />
                                       <input type='submit' class='btn' value='Yes Delete $username' />
                                       </form>");
    }

    if ($action == 'delete')
    {
        $username = trim($_POST["username"]);

        $res = sql_query("SELECT *
                            FROM users
                            WHERE username=".sqlesc($username)) or sqlerr(__FILE__, __LINE__);

        $arr = mysql_fetch_assoc($res);

        $id = $arr['id'];

        $res = sql_query("DELETE
                            FROM users
                            WHERE id=$id") or sqlerr(__FILE__, __LINE__);

        write_stafflog("The Member <strong>$username</strong> -- Has Been Deleted By ".$CURUSER["username"]." ");

        display_message_center("info", "Deleted",
                                       "The Member <strong>$username</strong> was Deleted");
    }
}

site_footer();

?>