芝麻web文件管理V1.00

编辑当前文件:/home/pulsehostuk9/public_html/teafund.pulsehost.co.uk/admin/roles.php

<?php
require_once __DIR__ . '/../includes/auth.php';
require_once __DIR__ . '/../includes/db.php';
require_once __DIR__ . '/../includes/csrf.php';
require_admin();
require_once __DIR__ . '/../includes/header.php';

$pdo = get_pdo();
$users = $pdo->query("SELECT id, email, role, created_at FROM users ORDER BY created_at DESC")->fetchAll();
?>
<div class="d-flex align-items-center justify-content-between mb-3">
  <h3 class="m-0">Admin · Roles & Users</h3>
  <a class="btn btn-sm btn-outline-secondary" href="/admin/">Back to Dashboard</a>
</div>

<div class="row g-3">
  <div class="col-12 col-lg-6">
    <div class="card shadow-sm">
      <div class="card-body">
        <h5 class="card-title">Add User</h5>
        <form method="post" action="/api/add_user.php" class="row g-2">
          <input type="hidden" name="csrf_token" value="<?php echo csrf_token(); ?>">
          <div class="col-12">
            <label class="form-label">Email</label>
            <input class="form-control" type="email" name="email" required placeholder="user@example.com">
          </div>
          <div class="col-12">
            <label class="form-label">Password</label>
            <input class="form-control" type="password" name="password" required>
          </div>
          <div class="col-12">
            <label class="form-label">Role</label>
            <select class="form-select" name="role">
              <option value="viewer">viewer</option>
              <option value="manager">manager</option>
              <option value="admin">admin</option>
            </select>
          </div>
          <div class="col-12">
            <button class="btn btn-success" type="submit">Create user</button>
          </div>
        </form>
      </div>
    </div>
  </div>
  <div class="col-12 col-lg-6">
    <div class="card shadow-sm">
      <div class="card-body">
        <h5 class="card-title">Existing Users</h5>
        <div class="table-responsive">
          <table class="table table-bordered table-sm align-middle">
            <thead>
              <tr>
                <th>ID</th><th>Email</th><th>Role</th><th>Created</th><th class="text-center">Update</th>
              </tr>
            </thead>
            <tbody>
              <?php foreach ($users as $u): ?>
                <tr>
                  <td><?php echo $u['id']; ?></td>
                  <td><?php echo htmlspecialchars($u['email']); ?></td>
                  <td>
                    <form class="d-flex gap-2" method="post" action="/api/update_user_role.php">
                      <input type="hidden" name="csrf_token" value="<?php echo csrf_token(); ?>">
                      <input type="hidden" name="user_id" value="<?php echo $u['id']; ?>">
                      <select class="form-select form-select-sm" name="role">
                        <?php foreach (['viewer','manager','admin'] as $r): ?>
                          <option value="<?php echo $r; ?>" <?php echo $u['role']===$r?'selected':''; ?>><?php echo $r; ?></option>
                        <?php endforeach; ?>
                      </select>
                      <button class="btn btn-sm btn-outline-primary">Save</button>
                    </form>
                  </td>
                  <td><?php echo htmlspecialchars($u['created_at']); ?></td>
                  <td class="text-center">
                    
                  </td>
                </tr>
              <?php endforeach; ?>
            </tbody>
          </table>
        </div>
      </div>
    </div>
  </div>
</div>

<?php require_once __DIR__ . '/../includes/footer.php'; ?>