Files
2026-08-02 17:55:21 +00:00

61 lines
3.2 KiB
HTML

{% extends '__layout__.html' %}
{% block title %}GDPR Erase User{% endblock %}
{% block head %}
<link href="/static/css/admin.css" rel="stylesheet"/>
{% endblock %}
{% block content %}
<div id="main">
<div class="container" style="max-width: 700px;">
<a class="mb-2 d-block" href="/admin/manage-users/{{userObj.id}}">← Return to User Page</a>
<div class="d-flex align-items-center mb-3">
<img height="100px" style="aspect-ratio: 1/1;" class="rounded-2" src="/Thumbs/Avatar.ashx?userId={{userObj.id}}&x=100&y=100">
<div class="ms-3">
<h1 class="m-0 text-danger">GDPR Erase <span class="text-body">{{userObj.username}}</span></h1>
<p class="text-secondary m-0" style="font-size: 12px;">UserId: <span class="text-body">{{userObj.id}}</span></p>
</div>
</div>
{% with messages = get_flashed_messages() %}
{% if messages %}
<div>
{% for message in messages %}
<div class="alert border border-danger p-2 text-center messagealerts">
{{ message }}
</div>
{% endfor %}
</div>
{% endif %}
{% endwith %}
<div class="alert alert-danger">
<p class="fw-bold m-0">This is permanent and cannot be undone.</p>
<p class="m-0 mt-2">This will, right now:</p>
<ul class="m-0">
<li>Rename the account, wipe the password (locking the account permanently) and clear the bio</li>
<li>Log out and revoke every session we have a record of for this user</li>
<li>Delete their email, linked Discord account, login history, HWID logs, and past usernames</li>
<li>Delete their friends, followers/following, and group memberships</li>
<li>Delete their group wall posts, and blank out the content of messages they sent</li>
<li>Send any limited items they own through the lottery to random online users, then delete everything left in their inventory</li>
<li>Wipe their avatar (body, worn items, and cached render) and kick them from any active game server</li>
</ul>
<p class="m-0 mt-2">Their profile page will 404 immediately after. Trade history and transaction/payment records are kept for economy integrity and legal/tax obligations.</p>
</div>
<div class="linebreak"></div>
<form method="POST" action="/admin/manage-users/{{userObj.id}}/gdpr-delete">
<div class="form-floating mt-2">
<input type="text" class="form-control" name="confirm_username" id="confirm-username-input" placeholder="Username" required autocomplete="off">
<label for="confirm-username-input">Type "{{userObj.username}}" to confirm</label>
</div>
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
<div class="linebreak"></div>
<button type="submit" class="btn btn-danger mt-2 w-100 btn-sm" onclick="return confirm('This permanently erases {{userObj.username}}. Are you absolutely sure?');">Permanently Erase This User</button>
</form>
</div>
</div>
{% endblock %}