Function chats

Scripts/ButSystem.py:13132–13177

chats. Route handler or application helper. This docstring was expanded to make future maintenance easier. Returns: Varies.

()

    u = (request.form.get("username") or "").strip()
    if not u or u == current_user():
        return redirect(url_for("admin_panel"))

    conn = db_connect()
    # Prevent deleting the last admin
    if user_is_admin(u):
        row = conn.execute("SELECT COUNT(*) AS c FROM users WHERE is_admin=1").fetchone()
        if row and int(row["c"]) <= 1:
            conn.close()
            flash("Cannot delete the last admin.")
            return redirect(url_for("admin_panel"))

    # Remove account + public profile + memberships
    conn.execute("DELETE FROM profiles WHERE username=?", (u,))
    conn.execute("DELETE FROM group_members WHERE username=?", (u,))
    conn.execute("DELETE FROM users WHERE username=?", (u,))
    conn.commit()
    conn.close()

    # Also remove their vault directory (encrypted files)
    try:
        shutil.rmtree(user_root(u), ignore_errors=True)
    except Exception:
        pass

    flash(f"Deleted @{u}.")
    return redirect(url_for("admin_panel"))




@app.route("/admin/delete_me", methods=["POST"])
@login_required
def admin_delete_me():
    """Delete the currently logged-in admin account (keeps files)."""
    require_admin()
    try:
        log_security_event("admin_action", detail="delete_self_admin", username=current_user(), level="info")
    except Exception:
        pass
    me = current_user()
    password = request.form.get("password") or ""

    conn = db_connect()
    row = conn.execute("SELECT pw_hash FROM users WHERE username=?", (me,)).fetchone()
    if not row or not check_password_hash(row["pw_hash"], password):
        conn.close()
        flash("Wrong password.")
        return redirect(url_for("admin_panel"))