The following files exists in this folder. Click to view.
admin.php71 lines UTF-8 Unix (LF) 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071
<?php
require_once __DIR__ . "/functions.php";
require_login();
require_role('user');
// Hämta flash-meddelande om det finns
$flash = $_SESSION['flash'] ?? null;
unset($_SESSION['flash']);
// Säkert hämta användarnamn
$user = (is_array($_SESSION['user']) && isset($_SESSION['user']['name']))
? $_SESSION['user']['name']
: "okänd";
?>
<!doctype html>
<html lang="sv">
<head>
<meta charset="utf-8">
<title>Adminpanel</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="style.css">
</head>
<body>
<div class="page-container">
<h1>Admin</h1>
<?php if ($flash !== null): ?>
<div class="flash"><?= htmlspecialchars($flash) ?></div>
<?php endif; ?>
<div class="card">
<p>Hej <strong><?= htmlspecialchars($user) ?></strong>! Du är inloggad.</p>
<ul>
<li><a href="logout.php">Logga ut</a></li>
<li><a href="index.php">Till startsidan</a></li>
</ul>
<hr>
<h3>Uppdatera lösenord</h3>
<form method="post" action="users.php">
<input type="hidden" name="action" value="update_password">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
<label>Nuvarande lösenord</label>
<input type="password" name="old_password" required>
<label>Nytt lösenord</label>
<input type="password" name="new_password" required>
<button type="submit">Uppdatera</button>
</form>
<hr>
<h3>Ta bort konto</h3>
<form method="post" action="users.php" onsubmit="return confirm('Är du säker? Detta kan inte ångras.');">
<input type="hidden" name="action" value="delete_account">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
<button class="btn-danger">Ta bort mitt konto</button>
</form>
</div>
</div>
</body>
</html>