Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 0 additions & 3 deletions assets/js/custom.js
Original file line number Diff line number Diff line change
Expand Up @@ -631,9 +631,6 @@ $(".delete-user").on("click", function (e) {
$.ajax({
type: "post",
url: "ajax.php?file=deleteprofile",
data: {
cms_user_id: el.data("id"),
},
dataType: "json",
success: function (result) {
AjaxCheckSuccess(result);
Expand Down
7 changes: 4 additions & 3 deletions library/ajax/deleteprofile.php
Original file line number Diff line number Diff line change
@@ -1,14 +1,15 @@
<?php

db_transaction(function () {
$user_id = $_SESSION['user']['id'];
// Only append .deleted suffix if the email doesn't already have it
// This prevents double-deletion if the query is somehow executed twice
// Pattern checks for .deleted.<digits> after the @ symbol (e.g., user@domain.com.deleted.123)
db_query('UPDATE cms_users SET deleted = NOW(), email = CONCAT(email,".deleted.",id) WHERE id = :id AND (NOT deleted OR deleted IS NULL) AND email NOT REGEXP "@.*\.deleted\.[0-9]+$"', ['id' => $_POST['cms_user_id']]);
updateAuth0UserFromDb($_POST['cms_user_id']);
db_query('UPDATE cms_users SET modified = NOW(), modified_by = :id, deleted = NOW(), email = CONCAT(email,".deleted.",id) WHERE id = :id AND (NOT deleted OR deleted IS NULL) AND email NOT REGEXP "@.*\.deleted\.[0-9]+$"', ['id' => $user_id]);
updateAuth0UserFromDb($user_id);
simpleSaveChangeHistory('cms_users', $user_id, 'Record deleted');
});

simpleSaveChangeHistory('cms_users', $_POST['cms_user_id'], 'Record deleted without undelete');
// when a user deactive its account we need to ensure that user logged out immediately and then redirected to Auth0 login page
global $settings;
logout();
Expand Down