<?php
//Smazání uživatele podle z výběru
if(isset($_POST['user_remove'])){
		$password = test_input($_POST['verify_password']);
		$user_id = $_POST['user_id'];

		$verify = $db->prepare('SELECT id_user,password FROM svcs_users WHERE nick = :nick');
		$verify->bindParam(':nick', $_SESSION['nick']);
		$verify->execute();
		$verify_data = $verify->fetch(PDO::FETCH_ASSOC);
		if($user_id == '1'){
			echo ("<SCRIPT LANGUAGE='JavaScript'>
				window.location.href='administration.php'
				window.alert('Tohoto uživatele nelze smazat!!')
			</SCRIPT>");
			exit();
		} else {
			if(password_verify($password, $verify_data['password'])){

				$user_remove = $db->prepare('DELETE FROM svcs_users WHERE id_user = :id');
				$user_remove->bindParam(':id', $user_id);
				$user_remove->execute();
				echo ("<SCRIPT LANGUAGE='JavaScript'>
					window.location.href='administration.php'
					window.alert('Uživatle byl úspěšně odstraněn!!')
				</SCRIPT>");
				exit();
			} else {
			echo ("<SCRIPT LANGUAGE='JavaScript'>
				window.alert('Ověřovací heslo nesouhlasí !!')
				</SCRIPT>");
			}
		}
}
?>