From e152b791f45b02c20b00e248f1502bc144e8a9a8 Mon Sep 17 00:00:00 2001
From: Syndamia <kamen@syndamia.com>
Date: Sun, 2 Feb 2025 16:00:41 +0200
Subject: feat(views/admin): Implement form for user deletion

---
 views/user/index.php | 22 +++++++++++++---------
 1 file changed, 13 insertions(+), 9 deletions(-)

(limited to 'views/user/index.php')

diff --git a/views/user/index.php b/views/user/index.php
index 82c95c8..40995d2 100644
--- a/views/user/index.php
+++ b/views/user/index.php
@@ -1,7 +1,9 @@
 <?php
     $user = null;
+    $loggedin = null;
     try {
         $user = Database\User::fromDB($username);
+        $loggedin = Database\Cookie::fromDB($TOKEN);
     }
     catch(Exception $e) {}
 ?>
@@ -15,16 +17,18 @@
     <div class="user-blank-afterspace"></div>
 
     <section id="user-buttons" hidden>
-        <form action="/list/new" method="GET">
-            <input type="submit" value="Create a new list">
-        </form>
-        <form action="/user/settings" method="GET">
-            <input type="submit" value="Account settings">
-        </form>
-        <?php if ($user->Role === 'Admin'): ?>
-            <form action="/admin" method="GET">
-                <input type="submit" value="Admin panel">
+        <?php if ($user !== null && $loggedin !== null && $user->UID === $loggedin->UID): ?>
+            <form action="/list/new" method="GET">
+                <input type="submit" value="Create a new list">
             </form>
+            <form action="/user/settings" method="GET">
+                <input type="submit" value="Account settings">
+            </form>
+            <?php if ($user->Role === 'Admin'): ?>
+                <form action="/admin" method="GET">
+                    <input type="submit" value="Admin panel">
+                </form>
+            <?php endif; ?>
         <?php endif; ?>
     </section>
     <script type="text/javascript">
-- 
cgit v1.2.3