From 57fb0cbf6d11faf86eb91a301f4d8bbbb3e9011d Mon Sep 17 00:00:00 2001
From: jakani24 <janis.st44@gmail.com>
Date: Sat, 20 Jan 2024 10:47:22 +0100
Subject: [PATCH] Update user_list.php

---
 .../system/secure_zone/php/user_list.php      | 20 +++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/src/server/cyberhex-code/system/secure_zone/php/user_list.php b/src/server/cyberhex-code/system/secure_zone/php/user_list.php
index 79f3bdd..8b10b5f 100644
--- a/src/server/cyberhex-code/system/secure_zone/php/user_list.php
+++ b/src/server/cyberhex-code/system/secure_zone/php/user_list.php
@@ -41,9 +41,26 @@ include "perms_functions.php";
                 <div class="card-body">
 					<!-- table with all users => delete button -->
 					<?php
-						//get count of users
 						//include db pw
 						include "../../../config.php";
+						//delete user if requested
+						if(isset($_GET["delete"])){
+							$userid=htmlspecialchars($_GET["delete"]);
+							$conn = new mysqli($DB_SERVERNAME, $DB_USERNAME, $DB_PASSWORD, $DB_DATABASE);
+							if ($conn->connect_error) {
+								die("Connection failed: " . $conn->connect_error);
+							}
+							$sql = "DELETE FROM users WHERE id = ?";
+							$stmt = $conn->prepare($sql);
+							$stmt->bind_param("i", $userid);
+							// Execute the statement
+							$stmt->execute();
+							$stmt->close();
+							$conn->close();
+						}
+						
+						
+						//get count of users
 						// Create a connection
 						$conn = new mysqli($DB_SERVERNAME, $DB_USERNAME, $DB_PASSWORD, $DB_DATABASE);
 
@@ -104,7 +121,6 @@ include "perms_functions.php";
 						echo('</tbody>');
 						echo('</table>');
 						$conn->close();
-					
 					?>
                 </div>
             </div>