From b0e6c5e4616b60a16732d669ed22e74eede9f69a Mon Sep 17 00:00:00 2001
From: Janis Steiner <janis.st44@gmail.com>
Date: Tue, 18 Jun 2024 13:46:17 +0100
Subject: [PATCH] .

---
 sys0-code/app/delete-account.php | 90 ++++++++++++++++++++++++++++++++
 1 file changed, 90 insertions(+)
 create mode 100644 sys0-code/app/delete-account.php
diff --git a/sys0-code/app/delete-account.php b/sys0-code/app/delete-account.php
new file mode 100644
index 0000000..85e7585
--- /dev/null
+++ b/sys0-code/app/delete-account.php
@@ -0,0 +1,90 @@
+<?php
+require_once "../config/config.php"; 
+// Initialize the session
+session_start();
+require_once "../login/keepmeloggedin.php";
+$error=logmein($link);
+// Check if the user is logged in, if not then redirect him to login page
+if(!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true){
+    header("location: /login/login.php");
+    exit;
+}
+?>
+
+<!DOCTYPE html>
+<html>
+    <head>
+      <title>Account settings</title>
+      <!-- <link rel="stylesheet" href="/system0/html/php/login/css/style.css"> -->
+    </head>
+<?php 
+  $color=$_SESSION["color"]; 
+ 	include "../assets/components.php";
+ ?>
+<?php echo(" <body style='background-color:$color'> ");?>
+
+
+
+
+        <script src="/assets/js/load_page.js"></script>
+       	<script>
+      
+       		function load_user()
+       		{
+       			$(document).ready(function(){
+       		   	$('#content').load("/assets/php/user_page.php");
+       			});
+       			$(document).ready(function(){
+          		$('#footer').load("/assets/html/footer.html");
+       		});
+       		}
+       	</script>
+        <?php
+            $username=$_SESSION["username"];
+            $role=$_SESSION["role"];
+          
+            echo "<script type='text/javascript' >load_user()</script>";
+           
+           
+        ?>
+
+        <div id="content"></div>
+        <div class="container m-5" style="height: 95vh;">
+         <div class="row justify-content-center">
+             <div class="col-md-8 m-3">
+                <h3>Account löschen</h3>
+                 <p class="mt-4">Wenn Sie Ihr Konto löschen, geschieht Folgendes:</p>
+                 <ul class="list-unstyled">
+                     <li>Wir werden alle Ihre Daten aus unseren Systemen löschen.</li>
+                     <li>Ihr Benutzername wird freigegeben. Das bedeutet, dass sich jeder mit Ihrem Benutzernamen neu registrieren kann.</li>
+                 </ul>
+                 <form action="" method="post" class="mt-4">
+                     <input type="hidden" name="token" value="<?php echo $_SESSION['token']; ?>">
+                     <div class="mb-3">
+                         <label for="username" class="form-label">Um fortzufahren, geben Sie bitte Ihren Benutzernamen ein:</label>
+                         <input type="text" id="username" name="username" class="form-control" required>
+                     </div>
+                     <button type="submit" class="btn btn-primary">Bestätigen</button>
+                 </form>
+ 
+                 <?php
+                 if (!empty($_POST["username"])) {
+                     if ($_POST["username"] === $_SESSION["username"]) {
+                         $username_td = $_SESSION["username"];
+                         $username_td = htmlspecialchars($username_td);
+                         $sql = "DELETE FROM users WHERE username = '$username_td';";
+                         //echo($sql);
+                         $stmt = mysqli_prepare($link, $sql);
+                         mysqli_stmt_execute($stmt);
+                         header("LOCATION:/login/logout.php");
+                     } else {
+                         echo '<div class="alert alert-danger mt-4">Usernames did not match!</div>';
+                     }
+                 }
+                 ?>
+             </div>
+         </div>
+     </div>
+    <div id="footer"></div>
+    </body>
+</html>
