FabrikaHradekTour/res/forum/api/remove_user.php

<?php

include("../../global.php");
session_start();

if (!isset($_SESSION["username"])) goto fail;

$out = $database -> query("SELECT username, admin FROM user WHERE BINARY username=\"" . $_SESSION["username"] . "\" AND admin=\"1\"");

if ($out -> num_rows != 1)
{
    fail:
    echo "nope";
    header("Location: ../../../index.php");
    return;
}

if (!isset($_GET["username"])) return;

$safe_username = mysqli_real_escape_string($database, $_GET["username"]);

$user_info_id = (($database -> query("SELECT user_info FROM user WHERE BINARY username=\"" . $safe_username . "\"")) -> fetch_assoc())["user_info"];

$database -> query("DELETE FROM user WHERE user_info=" . $user_info_id);
$database -> query("DELETE FROM user_info WHERE id=" . $user_info_id);