From 3942105cdab29a93a711122562a75945b7edf4cf Mon Sep 17 00:00:00 2001
From: Hein Erik <e.hein@heidelberg-it.de>
Date: Wed, 8 Apr 2026 13:15:54 +0200
Subject: [PATCH] Place Holder for missing Images

---
 admin.php            | 145 +++++++++++++++++++++++++++++++------------
 gitea_deploy_key     |   8 +++
 gitea_deploy_key.pub |   1 +
 3 files changed, 116 insertions(+), 38 deletions(-)
 create mode 100644 gitea_deploy_key
 create mode 100644 gitea_deploy_key.pub

diff --git a/admin.php b/admin.php
index 390cc4b..8c17efe 100644
--- a/admin.php
+++ b/admin.php
@@ -1,8 +1,8 @@
 <?php
-// admin.php - Multi-User Login, Google Authenticator 2FA & News Verwaltung
+// admin.php - Multi-User Login, Google Authenticator 2FA, Cropper, News Verwaltung & AES-256 VERSCHLÜSSELUNG
 session_start();
 
-// Fehleranzeige (für Live-Betrieb auf 0 setzen)
+// Fehleranzeige (für Live-Betrieb auf 0 setzen - oder anlassen, wenn du Schmerzen magst)
 ini_set('display_errors', 1);
 ini_set('display_startup_errors', 1);
 error_reporting(E_ALL);
@@ -13,6 +13,7 @@ error_reporting(E_ALL);
 class MiniTOTP {
     public static function verify($secret, $code) {
         $time = floor(time() / 30);
+        // Prüft aktuelles, vorheriges und nächstes Zeitfenster (Toleranz)
         for ($i = -1; $i <= 1; $i++) {
             if (self::getCode($secret, $time + $i) === $code) return true;
         }
@@ -156,43 +157,41 @@ if (!isset($_SESSION['logged_in']) || $_SESSION['logged_in'] !== true) {
 // ============================================================================
 $message = "";
 
-// --- NEU: Bild-Upload Funktion ---
+// --- BILD-UPLOAD FUNKTION (mit Base64 Crop-Unterstützung) ---
 function handleImageUpload() {
-    if (isset($_FILES['image_file']) && $_FILES['image_file']['error'] === UPLOAD_ERR_OK) {
+    if (!empty($_POST['cropped_image_data'])) {
+        $data = $_POST['cropped_image_data'];
+        list($type, $data) = explode(';', $data);
+        list(, $data)      = explode(',', $data);
+        $data = base64_decode($data);
+
         $year = date('Y');
-        // Ordnerstruktur: img/news/YYYY (wird automatisch erstellt, falls nicht vorhanden)
         $upload_dir = __DIR__ . '/img/news/' . $year;
         if (!is_dir($upload_dir)) {
-            mkdir($upload_dir, 0777, true);
+            mkdir($upload_dir, 0777, true); // Erstellt den Ordner, wenn er fehlt
         }
         
-        $ext = strtolower(pathinfo($_FILES['image_file']['name'], PATHINFO_EXTENSION));
-        $allowed = ['jpg', 'jpeg', 'png', 'gif', 'webp'];
+        $filename = date('Ymd') . '_' . rand(10000, 99999) . '.jpg';
+        $target_file = $upload_dir . '/' . $filename;
         
-        if (in_array($ext, $allowed)) {
-            // Format: YYYYMMDD_randomnummer.format
-            $filename = date('Ymd') . '_' . rand(10000, 99999) . '.' . $ext;
-            $target_file = $upload_dir . '/' . $filename;
-            
-            if (move_uploaded_file($_FILES['image_file']['tmp_name'], $target_file)) {
-                // Gib den relativen Pfad für die Datenbank zurück
-                return 'img/news/' . $year . '/' . $filename;
-            }
+        if (file_put_contents($target_file, $data)) {
+            return 'img/news/' . $year . '/' . $filename;
         }
     }
     return null;
 }
 
-// Aktion: News aktualisieren (EDIT)
+// --- AKTION: NEWS AKTUALISIEREN (EDIT) ---
 if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_news'])) {
-    $final_image_path = $_POST['existing_image']; // Standard: Altes Bild behalten
+    $final_image_path = $_POST['existing_image']; 
     
     $uploaded_img = handleImageUpload();
     if ($uploaded_img) {
-        $final_image_path = $uploaded_img; // Neues Upload-Bild nutzen
-    } elseif (isset($_POST['image_url'])) {
-        // Link korrigieren, falls manuell etwas eingetragen wurde
+        $final_image_path = $uploaded_img; 
+    } elseif (isset($_POST['image_url']) && !empty($_POST['image_url'])) {
         $final_image_path = str_replace(['http://new.sg07-stleon.de/', 'https://new.sg07-stleon.de/', 'new.sg07-stleon.de/', 'new.sg07-stleon.de\\'], '', trim($_POST['image_url']));
+    } elseif (isset($_POST['placeholder_image']) && !empty($_POST['placeholder_image'])) {
+        $final_image_path = $_POST['placeholder_image'];
     }
 
     $stmt = $db->prepare("UPDATE news SET date=?, department=?, title=?, content=?, full_text=?, image=?, link=? WHERE id=?");
@@ -201,15 +200,17 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_news'])) {
     }
 }
 
-// Aktion: News speichern (NEU ERSTELLEN)
+// --- AKTION: NEWS SPEICHERN (NEU) ---
 if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['save_news'])) {
     $final_image_path = '';
     
     $uploaded_img = handleImageUpload();
     if ($uploaded_img) {
         $final_image_path = $uploaded_img;
-    } else {
-        $final_image_path = str_replace(['http://new.sg07-stleon.de/', 'https://new.sg07-stleon.de/', 'new.sg07-stleon.de/', 'new.sg07-stleon.de\\'], '', trim($_POST['image_url'] ?? ''));
+    } elseif (isset($_POST['image_url']) && !empty($_POST['image_url'])) {
+        $final_image_path = str_replace(['http://new.sg07-stleon.de/', 'https://new.sg07-stleon.de/', 'new.sg07-stleon.de/', 'new.sg07-stleon.de\\'], '', trim($_POST['image_url']));
+    } elseif (isset($_POST['placeholder_image']) && !empty($_POST['placeholder_image'])) {
+        $final_image_path = $_POST['placeholder_image'];
     }
 
     $stmt = $db->prepare("INSERT INTO news (date, department, title, content, full_text, image, link) VALUES (?, ?, ?, ?, ?, ?, ?)");
@@ -218,7 +219,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['save_news'])) {
     }
 }
 
-// Aktion: News löschen
+// --- AKTION: NEWS LÖSCHEN ---
 if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['delete_news'])) {
     $stmt = $db->prepare("DELETE FROM news WHERE id = ?");
     if ($stmt->execute([$_POST['delete_id']])) {
@@ -226,7 +227,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['delete_news'])) {
     }
 }
 
-// Aktion: Neuen Benutzer anlegen
+// --- AKTION: NEUEN BENUTZER ANLEGEN ---
 $new_user_qr = "";
 if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['add_user'])) {
     $new_user = trim($_POST['new_username']);
@@ -243,17 +244,19 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['add_user'])) {
     }
 }
 
-// Edit-Modus prüfen (Ist ein Klick auf "Ändern" erfolgt?)
+// Edit-Modus prüfen
 $is_edit = false;
 $edit_news = null;
 if (isset($_GET['edit_id'])) {
     $stmt = $db->prepare("SELECT * FROM news WHERE id = ?");
     $stmt->execute([$_GET['edit_id']]);
     $edit_news = $stmt->fetch(PDO::FETCH_ASSOC);
-    if ($edit_news) $is_edit = true;
+    if ($edit_news) {
+        $is_edit = true;
+    }
 }
 
-// Alle bestehenden News abrufen, um sie aufzulisten
+// Alle bestehenden News abrufen für die Übersichtstabelle
 $existing_news = $db->query("SELECT id, date, department, title FROM news ORDER BY id DESC")->fetchAll(PDO::FETCH_ASSOC);
 ?>
 <!DOCTYPE html>
@@ -261,6 +264,9 @@ $existing_news = $db->query("SELECT id, date, department, title FROM news ORDER
 <head>
     <meta charset="UTF-8">
     <title>Admin Dashboard | SG 07 St. Leon</title>
+    <!-- Cropper.js für Bildzuschnitt -->
+    <link href="https://cdnjs.cloudflare.com/ajax/libs/cropperjs/1.5.13/cropper.min.css" rel="stylesheet">
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/cropperjs/1.5.13/cropper.min.js"></script>
     <style>
         body { font-family: 'Segoe UI', sans-serif; background: #f4f4f4; padding: 40px 20px; margin: 0; }
         .container { max-width: 1000px; background: white; padding: 40px; border-radius: 8px; box-shadow: 0 4px 15px rgba(0,0,0,0.05); margin: 0 auto; }
@@ -277,12 +283,12 @@ $existing_news = $db->query("SELECT id, date, department, title FROM news ORDER
         .sidebar-box { background: #fafafa; padding: 20px; border-radius: 8px; border: 1px solid #ddd; }
         .qr-box { background: #fff3cd; color: #856404; padding: 20px; border-radius: 8px; text-align: center; margin-bottom: 20px; border: 1px solid #ffeeba;}
         
-        /* Tabelle für News Verwaltung */
         .news-table { width: 100%; border-collapse: collapse; margin-top: 20px; font-size: 0.95rem; }
         .news-table th { background: #f4f4f4; padding: 12px; text-align: left; border-bottom: 2px solid #ddd; color: #333; }
         .news-table td { padding: 12px; border-bottom: 1px solid #eee; vertical-align: middle; }
         .news-table tr:hover { background: #fafafa; }
         .edit-btn { background: #2196F3; color: white; padding: 6px 12px; border: none; border-radius: 4px; cursor: pointer; text-decoration: none; font-size: 0.9rem; }
+        .social-btn { background: #E1306C; color: white; padding: 6px 12px; border: none; border-radius: 4px; cursor: pointer; font-size: 0.9rem; margin-right: 5px; }
         .delete-btn { background: #d32f2f; color: white; padding: 6px 12px; border: none; border-radius: 4px; cursor: pointer; margin: 0; width: auto; font-size: 0.9rem; }
         
         @media(max-width: 768px) { .grid-2 { grid-template-columns: 1fr; } }
@@ -305,7 +311,7 @@ $existing_news = $db->query("SELECT id, date, department, title FROM news ORDER
             <!-- News Eintragen / Ändern -->
             <div>
                 <h2 style="color: #333; margin-bottom: 10px;"><?= $is_edit ? 'News bearbeiten' : 'News veröffentlichen' ?></h2>
-                <form method="POST" enctype="multipart/form-data">
+                <form method="POST" id="newsForm" enctype="multipart/form-data">
                     <?php if($is_edit): ?>
                         <input type="hidden" name="news_id" value="<?= $edit_news['id'] ?>">
                         <input type="hidden" name="existing_image" value="<?= htmlspecialchars($edit_news['image']) ?>">
@@ -322,8 +328,15 @@ $existing_news = $db->query("SELECT id, date, department, title FROM news ORDER
                     <label>Kompletter Artikel (Popup)</label>
                     <textarea name="full_text" rows="8" required><?= $is_edit ? htmlspecialchars($edit_news['full_text']) : '' ?></textarea>
                     
-                    <label>Bild hochladen (wird gespeichert unter /img/news/Jahr/...)</label>
-                    <input type="file" name="image_file" accept="image/*" style="background: white;">
+                    <label>Bild hochladen & zuschneiden</label>
+                    <input type="file" id="image_file_input" accept="image/*" style="background: white; margin-bottom: 10px;">
+                    
+                    <!-- Cropper Container -->
+                    <div id="cropper_container" style="display:none; margin-bottom: 15px; max-height: 400px; overflow: hidden; border: 1px dashed #ccc;">
+                        <img id="image_to_crop" src="" style="max-width: 100%; display: block;">
+                    </div>
+                    <input type="hidden" name="cropped_image_data" id="cropped_image_data">
+
                     <?php if($is_edit && $edit_news['image']): ?>
                         <p style="font-size: 0.85rem; color: #666; margin-top: -10px; margin-bottom: 10px;">Aktuelles Bild: <b><?= htmlspecialchars($edit_news['image']) ?></b></p>
                     <?php endif; ?>
@@ -331,6 +344,14 @@ $existing_news = $db->query("SELECT id, date, department, title FROM news ORDER
                     <label>ODER Bild-Link (URL)</label>
                     <input type="text" name="image_url" placeholder="https://..." value="<?= $is_edit ? htmlspecialchars($edit_news['image']) : '' ?>">
                     
+                    <label>ODER Platzhalter-Bild verwenden</label>
+                    <select name="placeholder_image" style="width: 100%; padding: 10px; border: 1px solid #ddd; border-radius: 4px; font-family: inherit; margin-bottom: 15px; background: white;">
+                        <option value="">-- Kein Platzhalter (Leeres Bild) --</option>
+                        <option value="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'%3E%3Crect width='100' height='100' fill='%23f4f4f4'/%3E%3Ccircle cx='50' cy='50' r='35' fill='%23d32f2f'/%3E%3Ctext x='50' y='57' font-size='20' fill='white' text-anchor='middle' font-weight='bold'%3ESG 07%3C/text%3E%3C/svg%3E">Neutral (SG 07 Logo)</option>
+                        <option value="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'%3E%3Crect width='100' height='100' fill='%23e3f2fd'/%3E%3Ccircle cx='50' cy='50' r='35' fill='%232196f3'/%3E%3Ctext x='50' y='60' font-size='30' fill='white' text-anchor='middle' font-weight='bold' font-family='serif'%3Ei%3C/text%3E%3C/svg%3E">Info (Blaues i)</option>
+                        <option value="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'%3E%3Crect width='100' height='100' fill='%23fff3e0'/%3E%3Cpath d='M50 20 L85 80 L15 80 Z' fill='%23ff9800'/%3E%3Ctext x='50' y='70' font-size='30' fill='white' text-anchor='middle' font-weight='bold'%3E!%3C/text%3E%3C/svg%3E">Wichtig (Warnung)</option>
+                    </select>
+
                     <label>Weiterführender Link (Optional)</label>
                     <input type="text" name="link" value="<?= $is_edit ? htmlspecialchars($edit_news['link']) : '' ?>">
                     
@@ -361,17 +382,16 @@ $existing_news = $db->query("SELECT id, date, department, title FROM news ORDER
             </div>
         </div>
 
-        <!-- News Liste zum Löschen -->
+        <!-- News Liste zum Löschen / Posten / Ändern -->
         <div style="margin-top: 50px; border-top: 2px solid #eee; padding-top: 30px;">
             <h2 style="color: #333; margin-bottom: 10px;">Bestehende News verwalten</h2>
-            <p style="color: #666; font-size: 0.95rem;">Hier kannst du fehlerhafte oder veraltete News endgültig von der Website entfernen.</p>
             
             <table class="news-table">
                 <tr>
                     <th>Datum</th>
                     <th>Abteilung</th>
                     <th>Titel</th>
-                    <th style="width: 100px; text-align: right;">Aktion</th>
+                    <th style="width: 250px; text-align: right;">Aktion</th>
                 </tr>
                 <?php foreach($existing_news as $news_item): ?>
                 <tr>
@@ -379,6 +399,7 @@ $existing_news = $db->query("SELECT id, date, department, title FROM news ORDER
                     <td><span style="background: #eee; padding: 2px 8px; border-radius: 4px; font-size: 0.85rem;"><?= htmlspecialchars($news_item['department']) ?></span></td>
                     <td><strong><?= htmlspecialchars($news_item['title']) ?></strong></td>
                     <td style="text-align: right; display: flex; justify-content: flex-end; gap: 5px;">
+                        <button type="button" class="social-btn" onclick="copySocialMediaText('<?= htmlspecialchars(addslashes($news_item['title'])) ?>', '<?= htmlspecialchars(addslashes($news_item['department'])) ?>')">📲 Posten</button>
                         <a href="?edit_id=<?= $news_item['id'] ?>" class="edit-btn">Ändern</a>
                         <form method="POST" style="margin: 0;" onsubmit="return confirm('Möchtest du diese News wirklich unwiderruflich löschen?');">
                             <input type="hidden" name="delete_id" value="<?= $news_item['id'] ?>">
@@ -389,11 +410,59 @@ $existing_news = $db->query("SELECT id, date, department, title FROM news ORDER
                 <?php endforeach; ?>
                 <?php if(empty($existing_news)): ?>
                 <tr>
-                    <td colspan="4" style="text-align: center; padding: 20px; color: #888;">Noch keine News in der Datenbank vorhanden.</td>
+                    <td colspan="4" style="text-align: center; padding: 20px; color: #888;">Noch keine News vorhanden.</td>
                 </tr>
                 <?php endif; ?>
             </table>
         </div>
     </div>
+
+    <!-- Javascript für Crop und Social Media -->
+    <script>
+        // CROPPER LOGIK
+        let cropper;
+        document.getElementById('image_file_input').addEventListener('change', function(e) {
+            const file = e.target.files[0];
+            if (file) {
+                const reader = new FileReader();
+                reader.onload = function(event) {
+                    document.getElementById('image_to_crop').src = event.target.result;
+                    document.getElementById('cropper_container').style.display = 'block';
+                    
+                    if (cropper) cropper.destroy();
+                    cropper = new Cropper(document.getElementById('image_to_crop'), {
+                        aspectRatio: 4 / 3, 
+                        viewMode: 1,
+                        autoCropArea: 1
+                    });
+                };
+                reader.readAsDataURL(file);
+            }
+        });
+
+        document.getElementById('newsForm').addEventListener('submit', function(e) {
+            if (cropper) {
+                const canvas = cropper.getCroppedCanvas({ width: 800, height: 600 });
+                if(canvas) {
+                    document.getElementById('cropped_image_data').value = canvas.toDataURL('image/jpeg', 0.85);
+                }
+            }
+        });
+
+        // SOCIAL MEDIA EXPORT LOGIK
+        function copySocialMediaText(title, department) {
+            const cleanDept = department.replace(/\s+/g, '');
+            const text = `🚨 NEUE NEWS VON DER SG 07 🚨\n\n📢 ${title}\n\nLies jetzt den ganzen Bericht auf unserer Website!\n👉 sg07-stleon.de\n\n#SG07StLeon #Vereinsliebe #${cleanDept} #StLeonRot`;
+            
+            const tempInput = document.createElement("textarea");
+            tempInput.value = text;
+            document.body.appendChild(tempInput);
+            tempInput.select();
+            document.execCommand("copy");
+            document.body.removeChild(tempInput);
+            
+            alert("✅ Der Text für Instagram & Facebook wurde in deine Zwischenablage kopiert!\n\nDu kannst jetzt einfach rüber zu Insta gehen, dein Bild einfügen und beim Text auf 'Einsetzen' drücken.");
+        }
+    </script>
 </body>
 </html>
\ No newline at end of file
diff --git a/gitea_deploy_key b/gitea_deploy_key
new file mode 100644
index 0000000..58d279c
--- /dev/null
+++ b/gitea_deploy_key
@@ -0,0 +1,8 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
+QyNTUxOQAAACA9K1g7EYM4GXW56/fwbXLZlWn7rP9AP1Gk8cC16WxTywAAAKjYMmgw2DJo
+MAAAAAtzc2gtZWQyNTUxOQAAACA9K1g7EYM4GXW56/fwbXLZlWn7rP9AP1Gk8cC16WxTyw
+AAAEA93szDRUXvB7RSxG1lUz9P/zKbzFIH2zQv1onw3QYyZT0rWDsRgzgZdbnr9/BtctmV
+afus/0A/UaTxwLXpbFPLAAAAIGhlaWRlbGJlcmctaXRcaGVpbkBIRElULVBGNFBSR0hTAQ
+IDBAU=
+-----END OPENSSH PRIVATE KEY-----
diff --git a/gitea_deploy_key.pub b/gitea_deploy_key.pub
new file mode 100644
index 0000000..9c56ae2
--- /dev/null
+++ b/gitea_deploy_key.pub
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID0rWDsRgzgZdbnr9/BtctmVafus/0A/UaTxwLXpbFPL heidelberg-it\hein@HDIT-PF4PRGHS