芝麻web文件管理V1.00

编辑当前文件:/home/pulsehostuk9/public_html/teafund.pulsehost.co.uk/api/update_user_role.php
<?php require_once __DIR__ . '/../includes/auth.php'; require_once __DIR__ . '/../includes/db.php'; require_once __DIR__ . '/../includes/csrf.php'; require_admin(); verify_csrf(); $user_id = (int)($_POST['user_id'] ?? 0); $role = $_POST['role'] ?? ''; if ($user_id <= 0 || !in_array($role, ['viewer','manager','admin'], true)) { header('Location: /admin/roles.php?err=bad_input'); exit; } if ($user_id === ($_SESSION['user_id'] ?? -1) && $role !== 'admin') { header('Location: /admin/roles.php?err=cannot_downgrade_self'); exit; } $pdo = get_pdo(); $stmt = $pdo->prepare("UPDATE users SET role=? WHERE id=?"); $stmt->execute([$role, $user_id]); header('Location: /admin/roles.php?ok=1'); exit; ?>