Thank you for the explanation. I will probably use a third-party database (firebase) for payments.
Using firebase, different operations can be done on the client side, without disturbing the main server. I think this is very useful for a smoother user experience.
As the title says, I'm trying to make it so only admins/mods can upload or adjust the cover images for people's profiles. I've looked around the various hooks and what not, but I'm at a loss of how to achieve this.
I was originally thinking I could edit the function of the upload/edit buttons and check if the person has the required permissions; but I cannot seem to find where their functionality is actually defined.