prepare("UPDATE " . DB_PREFIX . "users SET status = IF(status='active', 'blocked', 'active') WHERE id = ? AND id != ?")->execute([$_GET['toggle'], $_SESSION['user_id']]); $message = ['type' => 'success', 'text' => 'Статус изменен']; } catch (Exception $e) { $message = ['type' => 'error', 'text' => 'Ошибка']; } } if (isset($_GET['delete']) && is_numeric($_GET['delete'])) { try { $pdo->prepare("DELETE FROM " . DB_PREFIX . "users WHERE id = ? AND id != ?")->execute([$_GET['delete'], $_SESSION['user_id']]); $message = ['type' => 'success', 'text' => 'Пользователь удален']; } catch (Exception $e) { $message = ['type' => 'error', 'text' => 'Ошибка']; } } if ($_SERVER['REQUEST_METHOD'] === 'POST') { $login = trim($_POST['login'] ?? ''); $email = trim($_POST['email'] ?? ''); $password = $_POST['password'] ?? ''; $role = $_POST['role'] ?? 'manager'; if (empty($login) || empty($email) || empty($password)) { $message = ['type' => 'error', 'text' => 'Заполните все поля']; } elseif (strlen($password) < 6) { $message = ['type' => 'error', 'text' => 'Пароль минимум 6 символов']; } else { try { $pdo->prepare("INSERT INTO " . DB_PREFIX . "users (login, email, password, role, status) VALUES (?, ?, ?, ?, 'active')")->execute([$login, $email, password_hash($password, PASSWORD_DEFAULT), $role]); $message = ['type' => 'success', 'text' => 'Пользователь создан']; } catch (PDOException $e) { if ($e->getCode() == 23000) { $message = ['type' => 'error', 'text' => 'Логин или email уже заняты']; } else { $message = ['type' => 'error', 'text' => 'Ошибка']; } } } } $stmt = $pdo->query("SELECT * FROM " . DB_PREFIX . "users ORDER BY created_at DESC"); $users = $stmt->fetchAll(); $roleLabels = ['admin' => 'Администратор', 'manager' => 'Менеджер', 'client' => 'Клиент']; ?>
Пользователи системы
ПользовательEmailРольСтатусПоследний входДействия
ID:
Вы