芝麻web文件管理V1.00

编辑当前文件:/home/pulsehostuk9/public_html/teafund.pulsehost.co.uk/api/add_user.php
<?php require_once __DIR__ . '/../includes/auth.php'; require_once __DIR__ . '/../includes/db.php'; require_once __DIR__ . '/../includes/csrf.php'; require_admin(); verify_csrf(); $email = strtolower(trim($_POST['email'] ?? '')); $password = $_POST['password'] ?? ''; $role = $_POST['role'] ?? 'viewer'; if (!$email || !$password || !in_array($role, ['viewer','manager','admin'], true)) { header('Location: /admin/roles.php?err=bad_input'); exit; } $hash = password_hash($password, PASSWORD_DEFAULT); try { $pdo = get_pdo(); $stmt = $pdo->prepare("INSERT INTO users (email, password_hash, role) VALUES (?,?,?)"); $stmt->execute([$email, $hash, $role]); header('Location: /admin/roles.php?ok=1'); exit; } catch (Throwable $e) { header('Location: /admin/roles.php?err=exists'); exit; } ?>