33 lines
946 B
PHP
33 lines
946 B
PHP
<?php
|
|
session_start();
|
|
require_once __DIR__ . '/../includes/database.php';
|
|
|
|
if (!isset($_SESSION['user_id']) || $_SESSION['role'] !== 'admin') {
|
|
echo json_encode(['success' => false, 'message' => 'Unauthorized']);
|
|
exit();
|
|
}
|
|
|
|
if (!isset($_GET['id'])) {
|
|
echo json_encode(['success' => false, 'message' => 'User ID required']);
|
|
exit();
|
|
}
|
|
|
|
$user_id = (int)$_GET['id'];
|
|
|
|
try {
|
|
$query = "SELECT * FROM users WHERE id = ?";
|
|
$stmt = $pdo->prepare($query);
|
|
$stmt->execute([$user_id]);
|
|
$user = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
|
|
if ($user) {
|
|
// Remove password from response
|
|
unset($user['password']);
|
|
echo json_encode(['success' => true, 'user' => $user]);
|
|
} else {
|
|
echo json_encode(['success' => false, 'message' => 'User not found']);
|
|
}
|
|
} catch (PDOException $e) {
|
|
echo json_encode(['success' => false, 'message' => $e->getMessage()]);
|
|
}
|
|
?>
|