prepare("INSERT INTO admin_users (username, password_hash) VALUES (:username, :password_hash)"); $stmt->execute(['username' => $username, 'password_hash' => $password_hash]); $message = "User added successfully!"; } catch (PDOException $e) { $message = "Error: " . $e->getMessage(); } } // Handle deleting a user if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'delete_user') { $user_id = $_POST['user_id']; try { $stmt = $pdo->prepare("DELETE FROM admin_users WHERE id = :id"); $stmt->execute(['id' => $user_id]); $message = "User deleted successfully!"; } catch (PDOException $e) { $message = "Error: " . $e->getMessage(); } } // Handle updating a user's password if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'update_password') { $user_id = $_POST['user_id']; $new_password = $_POST['new_password']; // Hash the new password $password_hash = password_hash($new_password, PASSWORD_BCRYPT); try { $stmt = $pdo->prepare("UPDATE admin_users SET password_hash = :password_hash WHERE id = :id"); $stmt->execute(['password_hash' => $password_hash, 'id' => $user_id]); $message = "Password updated successfully!"; } catch (PDOException $e) { $message = "Error: " . $e->getMessage(); } } // Fetch all users $users = $pdo->query("SELECT id, username FROM admin_users")->fetchAll(PDO::FETCH_ASSOC); ?>
= htmlspecialchars($message) ?>
| ID | Username | Actions | Password |
|---|---|---|---|
| = htmlspecialchars($user['id']) ?> | = htmlspecialchars($user['username']) ?> |