alert('Staff ไม่สามารถสร้างบัญชี Admin ได้');"; } else { $hash = hash("sha256", $password); $stmt = $conn->prepare(" INSERT INTO users (username, password_hash, fullname, role) VALUES (?, ?, ?, ?) "); $stmt->bind_param("ssss", $username, $hash, $fullname, $role); $stmt->execute(); echo ""; } } /* ========================================================== EDIT USER ========================================================== */ if (isset($_POST['edit_user'])) { $uid = $_POST['user_id']; $username = trim($_POST['username']); $fullname = trim($_POST['fullname']); $role = $_POST['role']; // staff ห้ามแก้ admin staff_cannot_edit_admin($uid, $conn); // staff ห้ามเปลี่ยน role ให้เป็น admin if ($ROLE === "staff" && $role === "admin") { echo ""; } else { $stmt = $conn->prepare(" UPDATE users SET username=?, fullname=?, role=? WHERE id=? "); $stmt->bind_param("sssi", $username, $fullname, $role, $uid); $stmt->execute(); echo ""; } } /* ========================================================== RESET PASSWORD ========================================================== */ if (isset($_GET['reset'])) { $uid = intval($_GET['reset']); // staff ห้าม reset password ของ admin staff_cannot_edit_admin($uid, $conn); $newpass = random_password(8); $hash = hash("sha256", $newpass); $conn->query("UPDATE users SET password_hash='$hash' WHERE id=$uid"); echo ""; } /* ========================================================== DELETE USER ========================================================== */ if (isset($_GET['del'])) { $uid = intval($_GET['del']); // staff ห้ามลบ admin staff_cannot_edit_admin($uid, $conn); $conn->query("DELETE FROM users WHERE id=$uid"); echo ""; } ?>

จัดการผู้ใช้

query("SELECT * FROM users ORDER BY role DESC, fullname ASC"); while ($u = $res->fetch_assoc()): ?>
ชื่อผู้ใช้:
"danger", "staff" => "warning", "user" => "secondary" ]; ?>