芝麻web文件管理V1.00

编辑当前文件:/home/pulsehostuk9/public_html/teafund.pulsehost.co.uk/api/delete_member.php

<?php
// api/delete_member.php (patched to redirect after browser form POST)
require_once __DIR__ . '/../includes/auth.php';
require_once __DIR__ . '/../includes/db.php';
require_once __DIR__ . '/../includes/csrf.php';

require_admin();
verify_csrf();

$member_id = (int)($_POST['member_id'] ?? 0);
if ($member_id <= 0) {
    respond(false, 'Invalid member id');
}

try {
    $pdo = get_pdo();
    $stmt = $pdo->prepare("DELETE FROM members WHERE id=?");
    $stmt->execute([$member_id]);

if (!empty($_SESSION['user_id'])) {
        // best-effort logging (ignore errors)
        try {
            $log = $pdo->prepare("INSERT INTO activity_log (user_id, action, details) VALUES (?,?,?)");
            $log->execute([$_SESSION['user_id'], 'delete_member', json_encode(['member_id'=>$member_id])]);
        } catch (Throwable $e) {}
    }

respond(true, null);
} catch (Throwable $e) {
    respond(false, 'Delete failed');
}

function respond($ok, $error) {
    // Determine if this looks like an AJAX/Fetch request wanting JSON
    $accept = strtolower($_SERVER['HTTP_ACCEPT'] ?? '');
    $xhr = strtolower($_SERVER['HTTP_X_REQUESTED_WITH'] ?? '');
    $wants_json = (strpos($accept, 'application/json') !== false) || ($xhr === 'xmlhttprequest');

if ($wants_json) {
        header('Content-Type: application/json');
        echo json_encode(['ok' => $ok, 'error' => $error]);
        exit;
    } else {
        // Browser form submit: redirect back to admin with a status
        $dest = '/admin/?' . ($ok ? 'deleted=1' : 'delete_error=1');
        header('Location: ' . $dest);
        exit;
    }
}
?>