421 lines
25 KiB
PHP
421 lines
25 KiB
PHP
<?php
|
|
// admin.php - Multi-User Login, Google Authenticator 2FA, 4-Bilder Upload & News Verwaltung
|
|
session_start();
|
|
|
|
ini_set('display_errors', 1);
|
|
ini_set('display_startup_errors', 1);
|
|
error_reporting(E_ALL);
|
|
|
|
// ============================================================================
|
|
// 1. MINI-KLASSE FÜR GOOGLE AUTHENTICATOR (TOTP)
|
|
// ============================================================================
|
|
class MiniTOTP {
|
|
public static function verify($secret, $code) {
|
|
$time = floor(time() / 30);
|
|
for ($i = -1; $i <= 1; $i++) {
|
|
if (self::getCode($secret, $time + $i) === $code) return true;
|
|
}
|
|
return false;
|
|
}
|
|
public static function getCode($secret, $time) {
|
|
$secret = self::base32Decode($secret);
|
|
$time = pack('N', 0) . pack('N', $time);
|
|
$hash = hash_hmac('sha1', $time, $secret, true);
|
|
$offset = ord(substr($hash, -1)) & 0x0F;
|
|
$code = (unpack('N', substr($hash, $offset, 4))[1] & 0x7FFFFFFF) % 1000000;
|
|
return str_pad($code, 6, '0', STR_PAD_LEFT);
|
|
}
|
|
public static function base32Decode($b32) {
|
|
$b32 = strtoupper($b32);
|
|
$map = ['A'=>0,'B'=>1,'C'=>2,'D'=>3,'E'=>4,'F'=>5,'G'=>6,'H'=>7,'I'=>8,'J'=>9,'K'=>10,'L'=>11,'M'=>12,'N'=>13,'O'=>14,'P'=>15,'Q'=>16,'R'=>17,'S'=>18,'T'=>19,'U'=>20,'V'=>21,'W'=>22,'X'=>23,'Y'=>24,'Z'=>25,'2'=>26,'3'=>27,'4'=>28,'5'=>29,'6'=>30,'7'=>31];
|
|
$decoded = ''; $buffer = 0; $bits = 0;
|
|
for ($i = 0; $i < strlen($b32); $i++) {
|
|
$char = $b32[$i];
|
|
if (!isset($map[$char])) continue;
|
|
$buffer = ($buffer << 5) | $map[$char];
|
|
$bits += 5;
|
|
if ($bits >= 8) { $bits -= 8; $decoded .= chr(($buffer >> $bits) & 0xFF); }
|
|
}
|
|
return $decoded;
|
|
}
|
|
public static function generateSecret($length = 16) {
|
|
$chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
|
|
$secret = '';
|
|
for ($i = 0; $i < $length; $i++) $secret .= $chars[random_int(0, 31)];
|
|
return $secret;
|
|
}
|
|
public static function getQRCodeUrl($username, $secret) {
|
|
$issuer = urlencode("SG 07 St.Leon");
|
|
$account = urlencode($username);
|
|
$otpauth = "otpauth://totp/{$issuer}:{$account}?secret={$secret}&issuer={$issuer}";
|
|
return "https://api.qrserver.com/v1/create-qr-code/?size=200x200&data=" . urlencode($otpauth);
|
|
}
|
|
}
|
|
|
|
// ============================================================================
|
|
// 2. DATENBANK SETUP (News & Benutzer)
|
|
// ============================================================================
|
|
try {
|
|
$db = new PDO('sqlite:news_database.sqlite');
|
|
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
|
|
// News Tabelle initialisieren
|
|
$db->exec("CREATE TABLE IF NOT EXISTS news (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT, date TEXT, department TEXT, title TEXT, content TEXT, full_text TEXT, image TEXT, link TEXT
|
|
)");
|
|
|
|
// DB-Schema Updates (Falls noch alte Version)
|
|
try { $db->exec("ALTER TABLE news ADD COLUMN full_text TEXT"); } catch(PDOException $e) {}
|
|
try { $db->exec("ALTER TABLE news ADD COLUMN image2 TEXT"); } catch(PDOException $e) {}
|
|
try { $db->exec("ALTER TABLE news ADD COLUMN image3 TEXT"); } catch(PDOException $e) {}
|
|
try { $db->exec("ALTER TABLE news ADD COLUMN image4 TEXT"); } catch(PDOException $e) {}
|
|
try { $db->exec("ALTER TABLE news ADD COLUMN title_index INTEGER DEFAULT 1"); } catch(PDOException $e) {}
|
|
|
|
$db->exec("CREATE TABLE IF NOT EXISTS users (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT, username TEXT UNIQUE, password_hash TEXT, totp_secret TEXT
|
|
)");
|
|
} catch(PDOException $e) {
|
|
die("Datenbankfehler: " . $e->getMessage());
|
|
}
|
|
|
|
$userCount = $db->query("SELECT COUNT(*) FROM users")->fetchColumn();
|
|
|
|
// ============================================================================
|
|
// 3. ERSTEINRICHTUNG
|
|
// ============================================================================
|
|
if ($userCount == 0) {
|
|
$new_secret = MiniTOTP::generateSecret();
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['do_setup'])) {
|
|
$user = trim($_POST['username']);
|
|
$pass = $_POST['password'];
|
|
$secret = $_POST['totp_secret'];
|
|
if (!empty($user) && !empty($pass)) {
|
|
$stmt = $db->prepare("INSERT INTO users (username, password_hash, totp_secret) VALUES (?, ?, ?)");
|
|
$stmt->execute([$user, password_hash($pass, PASSWORD_DEFAULT), $secret]);
|
|
header("Location: admin.php");
|
|
exit;
|
|
}
|
|
}
|
|
?>
|
|
<!DOCTYPE html><html lang="de"><head><meta charset="UTF-8"><title>Setup | SG 07</title>
|
|
<style>body{font-family:sans-serif;background:#f4f4f4;display:flex;justify-content:center;align-items:center;height:100vh;} .box{background:#fff;padding:30px;border-radius:8px;box-shadow:0 4px 15px rgba(0,0,0,0.1);max-width:400px;text-align:center;} input,button{width:100%;padding:10px;margin:10px 0;box-sizing:border-box;} button{background:#d32f2f;color:white;border:none;font-weight:bold;cursor:pointer;} .qr{margin:20px 0;}</style></head>
|
|
<body><div class="box"><h1 style="color:#d32f2f;">Ersteinrichtung</h1>
|
|
<img src="<?= MiniTOTP::getQRCodeUrl('Admin', $new_secret) ?>" class="qr" alt="QR Code">
|
|
<p style="font-size:0.9rem;color:#666;">1. Scanne diesen QR-Code mit dem <b>Google Authenticator</b> oder <b>Authy</b>.</p>
|
|
<form method="POST"><input type="text" name="username" placeholder="Benutzername" required><input type="password" name="password" placeholder="Sicheres Passwort" required><input type="hidden" name="totp_secret" value="<?= $new_secret ?>"><button type="submit" name="do_setup">Admin anlegen & weiter</button></form></div></body></html>
|
|
<?php exit;
|
|
}
|
|
|
|
// ============================================================================
|
|
// 4. LOGIN LOGIK
|
|
// ============================================================================
|
|
if (isset($_GET['action']) && $_GET['action'] == 'logout') {
|
|
session_destroy(); header("Location: admin.php"); exit;
|
|
}
|
|
|
|
$login_error = '';
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['do_login'])) {
|
|
$stmt = $db->prepare("SELECT * FROM users WHERE username = ?");
|
|
$stmt->execute([trim($_POST['username'])]);
|
|
$user = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
|
|
if ($user && password_verify($_POST['password'], $user['password_hash'])) {
|
|
if (MiniTOTP::verify($user['totp_secret'], $_POST['totp_code'])) {
|
|
$_SESSION['logged_in'] = true;
|
|
$_SESSION['username'] = $user['username'];
|
|
header("Location: admin.php"); exit;
|
|
} else {
|
|
$login_error = "Der 2FA Code ist falsch oder abgelaufen.";
|
|
}
|
|
} else {
|
|
$login_error = "Benutzername oder Passwort falsch.";
|
|
}
|
|
}
|
|
|
|
if (!isset($_SESSION['logged_in']) || $_SESSION['logged_in'] !== true) {
|
|
?>
|
|
<!DOCTYPE html><html lang="de"><head><meta charset="UTF-8"><title>Login | SG 07</title>
|
|
<style>body{font-family:'Segoe UI',sans-serif;background:#f4f4f4;display:flex;justify-content:center;align-items:center;height:100vh;} .login-box{background:#fff;padding:40px;border-radius:8px;box-shadow:0 4px 20px rgba(0,0,0,0.1);max-width:350px;width:100%;text-align:center;border-top:5px solid #d32f2f;} input{width:100%;padding:12px;margin-bottom:15px;border:1px solid #ccc;border-radius:4px;box-sizing:border-box;} button{width:100%;padding:14px;background:#d32f2f;color:white;border:none;font-weight:bold;border-radius:4px;cursor:pointer;} button:hover{background:#9a0007;} .err{color:red;margin-bottom:15px;}</style></head>
|
|
<body><div class="login-box"><div style="font-size:3rem;">🔒</div><h1 style="color:#d32f2f;margin-bottom:20px;">Admin Login</h1>
|
|
<?php if($login_error) echo "<div class='err'>$login_error</div>"; ?>
|
|
<form method="POST"><input type="text" name="username" placeholder="Benutzername" required autofocus><input type="password" name="password" placeholder="Passwort" required><input type="text" name="totp_code" placeholder="6-stelliger Authenticator Code" pattern="\d{6}" maxlength="6" required autocomplete="off"><button type="submit" name="do_login">Sicher einloggen</button></form></div></body></html>
|
|
<?php exit;
|
|
}
|
|
|
|
// ============================================================================
|
|
// 5. ADMIN BEREICH (Eingeloggt)
|
|
// ============================================================================
|
|
$message = "";
|
|
|
|
// Bild-Upload Helper für 4 Slots
|
|
function handleSingleImage($index) {
|
|
$final_path = '';
|
|
|
|
// Altes Bild behalten, falls im Edit-Modus und nichts Neues hochgeladen wird
|
|
if (isset($_POST['existing_image_'.$index]) && !empty($_POST['existing_image_'.$index])) {
|
|
$final_path = $_POST['existing_image_'.$index];
|
|
}
|
|
|
|
// 1. Priorität: Neuer Datei-Upload
|
|
if (isset($_FILES['image_file_'.$index]) && $_FILES['image_file_'.$index]['error'] === UPLOAD_ERR_OK) {
|
|
$year = date('Y');
|
|
$upload_dir = __DIR__ . '/img/news/' . $year;
|
|
if (!is_dir($upload_dir)) mkdir($upload_dir, 0777, true);
|
|
|
|
$ext = strtolower(pathinfo($_FILES['image_file_'.$index]['name'], PATHINFO_EXTENSION));
|
|
$allowed = ['jpg', 'jpeg', 'png', 'gif', 'webp'];
|
|
|
|
if (in_array($ext, $allowed)) {
|
|
$filename = date('Ymd') . '_' . rand(10000, 99999) . '_img' . $index . '.' . $ext;
|
|
if (move_uploaded_file($_FILES['image_file_'.$index]['tmp_name'], $upload_dir . '/' . $filename)) {
|
|
$final_path = 'img/news/' . $year . '/' . $filename;
|
|
}
|
|
}
|
|
}
|
|
// 2. Priorität: Bild-URL
|
|
elseif (isset($_POST['image_url_'.$index]) && !empty($_POST['image_url_'.$index])) {
|
|
$final_path = str_replace(['http://new.sg07-stleon.de/', 'https://new.sg07-stleon.de/', 'new.sg07-stleon.de/', 'new.sg07-stleon.de\\'], '', trim($_POST['image_url_'.$index]));
|
|
}
|
|
// 3. Priorität: Platzhalter
|
|
elseif (isset($_POST['placeholder_image_'.$index]) && !empty($_POST['placeholder_image_'.$index])) {
|
|
$final_path = $_POST['placeholder_image_'.$index];
|
|
}
|
|
|
|
// Leeres Bild zurücksetzen, wenn der Nutzer explizit "löschen" wollte (hier vereinfacht: wenn URL und Platzhalter leer sind und kein Upload stattfand)
|
|
if (empty($_FILES['image_file_'.$index]['name']) && empty($_POST['image_url_'.$index]) && empty($_POST['placeholder_image_'.$index]) && !isset($_POST['keep_existing_'.$index])) {
|
|
// Logik zum Behalten wird via Checkboxen geregelt, siehe Formular
|
|
}
|
|
|
|
return $final_path;
|
|
}
|
|
|
|
// --- AKTION: NEWS AKTUALISIEREN (EDIT) ---
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_news'])) {
|
|
$img1 = handleSingleImage(1);
|
|
$img2 = handleSingleImage(2);
|
|
$img3 = handleSingleImage(3);
|
|
$img4 = handleSingleImage(4);
|
|
$title_idx = (int)$_POST['title_index'];
|
|
|
|
$stmt = $db->prepare("UPDATE news SET date=?, department=?, title=?, content=?, full_text=?, image=?, image2=?, image3=?, image4=?, title_index=?, link=? WHERE id=?");
|
|
if ($stmt->execute([$_POST['date'], $_POST['department'], $_POST['title'], $_POST['content'], $_POST['full_text'], $img1, $img2, $img3, $img4, $title_idx, $_POST['link'], $_POST['news_id']])) {
|
|
$message = "<div class='success'>✓ News (inkl. Galerie) erfolgreich aktualisiert!</div>";
|
|
}
|
|
}
|
|
|
|
// --- AKTION: NEWS SPEICHERN (NEU) ---
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['save_news'])) {
|
|
$img1 = handleSingleImage(1);
|
|
$img2 = handleSingleImage(2);
|
|
$img3 = handleSingleImage(3);
|
|
$img4 = handleSingleImage(4);
|
|
$title_idx = (int)$_POST['title_index'];
|
|
|
|
$stmt = $db->prepare("INSERT INTO news (date, department, title, content, full_text, image, image2, image3, image4, title_index, link) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
|
|
if ($stmt->execute([$_POST['date'], $_POST['department'], $_POST['title'], $_POST['content'], $_POST['full_text'], $img1, $img2, $img3, $img4, $title_idx, $_POST['link']])) {
|
|
$message = "<div class='success'>✓ News (inkl. Galerie) erfolgreich veröffentlicht!</div>";
|
|
}
|
|
}
|
|
|
|
// --- AKTION: NEWS LÖSCHEN ---
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['delete_news'])) {
|
|
$stmt = $db->prepare("DELETE FROM news WHERE id = ?");
|
|
if ($stmt->execute([$_POST['delete_id']])) {
|
|
$message = "<div class='success'>✓ Die News wurde unwiderruflich gelöscht!</div>";
|
|
}
|
|
}
|
|
|
|
// Edit-Modus prüfen
|
|
$is_edit = false;
|
|
$edit_news = null;
|
|
if (isset($_GET['edit_id'])) {
|
|
$stmt = $db->prepare("SELECT * FROM news WHERE id = ?");
|
|
$stmt->execute([$_GET['edit_id']]);
|
|
$edit_news = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
if ($edit_news) $is_edit = true;
|
|
}
|
|
|
|
$existing_news = $db->query("SELECT id, date, department, title FROM news ORDER BY id DESC")->fetchAll(PDO::FETCH_ASSOC);
|
|
|
|
// HTML Block für einen der 4 Bilder-Uploads
|
|
function renderImageSlot($index, $is_edit, $edit_news) {
|
|
$img_key = $index === 1 ? 'image' : 'image'.$index;
|
|
$current_val = $is_edit ? ($edit_news[$img_key] ?? '') : '';
|
|
$title_idx = $is_edit ? (int)($edit_news['title_index'] ?? 1) : 1;
|
|
$is_title = ($title_idx === $index);
|
|
|
|
echo "<div class='img-slot'>";
|
|
echo "<h4>Bild Slot $index</h4>";
|
|
|
|
// Radio für Titelbild
|
|
echo "<label style='color: #d32f2f;'><input type='radio' name='title_index' value='$index' " . ($is_title ? 'checked' : '') . "> <b>Als Titelbild (Cover) nutzen</b></label><hr style='border:0; height:1px; background:#ddd; margin:10px 0;'>";
|
|
|
|
if($is_edit && $current_val) {
|
|
echo "<input type='hidden' name='existing_image_$index' value='".htmlspecialchars($current_val)."'>";
|
|
echo "<label><input type='checkbox' name='keep_existing_$index' checked> Altes Bild behalten: <br><small>".htmlspecialchars(substr($current_val, 0, 30))."...</small></label><br>";
|
|
}
|
|
|
|
echo "<label>1. Datei hochladen</label>";
|
|
echo "<input type='file' name='image_file_$index' accept='image/*' style='background: white; margin-bottom: 5px;'>";
|
|
|
|
echo "<label>2. ODER Link (URL)</label>";
|
|
echo "<input type='text' name='image_url_$index' placeholder='https://...'>";
|
|
|
|
echo "<label>3. ODER Platzhalter</label>";
|
|
echo "<select name='placeholder_image_$index' style='width: 100%; padding: 8px; border: 1px solid #ddd; border-radius: 4px;'>";
|
|
echo "<option value=''>-- Kein Bild in diesem Slot --</option>";
|
|
echo "<option value=\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'%3E%3Crect width='100' height='100' fill='%23f4f4f4'/%3E%3Ccircle cx='50' cy='50' r='35' fill='%23d32f2f'/%3E%3Ctext x='50' y='57' font-size='20' fill='white' text-anchor='middle' font-weight='bold'%3ESG 07%3C/text%3E%3C/svg%3E\">Neutral (SG 07 Logo)</option>";
|
|
echo "<option value=\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'%3E%3Crect width='100' height='100' fill='%23e3f2fd'/%3E%3Ccircle cx='50' cy='50' r='35' fill='%232196f3'/%3E%3Ctext x='50' y='60' font-size='30' fill='white' text-anchor='middle' font-weight='bold' font-family='serif'%3Ei%3C/text%3E%3C/svg%3E\">Info (Blaues i)</option>";
|
|
echo "</select>";
|
|
echo "</div>";
|
|
}
|
|
?>
|
|
<!DOCTYPE html>
|
|
<html lang="de">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<title>Admin Dashboard | SG 07 St. Leon</title>
|
|
<style>
|
|
body { font-family: 'Segoe UI', sans-serif; background: #f4f4f4; padding: 40px 20px; margin: 0; }
|
|
.container { max-width: 1200px; background: white; padding: 40px; border-radius: 8px; box-shadow: 0 4px 15px rgba(0,0,0,0.05); margin: 0 auto; }
|
|
.header-bar { display: flex; justify-content: space-between; align-items: center; border-bottom: 2px solid #f4f4f4; padding-bottom: 20px; margin-bottom: 30px; }
|
|
.header-bar h1 { color: #d32f2f; margin: 0; }
|
|
.logout-btn { background: #555; color: white; padding: 8px 15px; border-radius: 4px; text-decoration: none; font-weight: bold;}
|
|
.grid-2 { display: grid; grid-template-columns: 3fr 1fr; gap: 40px; }
|
|
label { font-weight: 600; display: block; margin-top: 15px; margin-bottom: 5px; color: #333; font-size: 0.9rem;}
|
|
input[type="text"], input[type="password"], textarea { width: 100%; padding: 10px; border: 1px solid #ddd; border-radius: 4px; box-sizing: border-box; font-family: inherit; }
|
|
button { margin-top: 20px; padding: 15px; background: #d32f2f; color: white; border: none; font-weight: bold; border-radius: 4px; cursor: pointer; width: 100%; transition: background 0.2s; }
|
|
button:hover { background: #9a0007; }
|
|
.success { background: #4CAF50; color: white; padding: 15px; border-radius: 4px; margin-bottom: 20px; font-weight: bold;}
|
|
|
|
.img-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 15px; background: #fafafa; padding: 20px; border: 1px solid #ddd; border-radius: 8px; margin-top: 10px;}
|
|
.img-slot { background: white; padding: 15px; border: 1px solid #ccc; border-radius: 4px; }
|
|
.img-slot h4 { margin-top: 0; margin-bottom: 10px; color: #555; border-bottom: 2px solid #eee; padding-bottom: 5px;}
|
|
|
|
.news-table { width: 100%; border-collapse: collapse; margin-top: 20px; font-size: 0.95rem; }
|
|
.news-table th { background: #f4f4f4; padding: 12px; text-align: left; border-bottom: 2px solid #ddd; color: #333; }
|
|
.news-table td { padding: 12px; border-bottom: 1px solid #eee; vertical-align: middle; }
|
|
.edit-btn { background: #2196F3; color: white; padding: 6px 12px; border: none; border-radius: 4px; cursor: pointer; text-decoration: none; font-size: 0.9rem; }
|
|
.social-btn { background: #E1306C; color: white; padding: 6px 12px; border: none; border-radius: 4px; cursor: pointer; font-size: 0.9rem; margin-right: 5px; }
|
|
.delete-btn { background: #d32f2f; color: white; padding: 6px 12px; border: none; border-radius: 4px; cursor: pointer; margin: 0; width: auto; font-size: 0.9rem; }
|
|
|
|
@media(max-width: 900px) { .grid-2 { grid-template-columns: 1fr; } }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="container">
|
|
<div class="header-bar">
|
|
<h1>SG 07 Dashboard <span style="font-size: 0.5em; background: #2196F3; color: white; padding: 3px 8px; border-radius: 10px; vertical-align: middle;">MULTIMEDIA EDITION</span></h1>
|
|
<div>
|
|
<span style="margin-right:15px; color:#666;">Hallo, <b><?= htmlspecialchars($_SESSION['username']) ?></b></span>
|
|
<a href="?action=logout" class="logout-btn">Abmelden</a>
|
|
</div>
|
|
</div>
|
|
|
|
<?= $message ?>
|
|
|
|
<div class="grid-2">
|
|
<!-- News Eintragen / Ändern -->
|
|
<div>
|
|
<h2 style="color: #333; margin-bottom: 10px;"><?= $is_edit ? 'News bearbeiten' : 'News veröffentlichen' ?></h2>
|
|
<form method="POST" id="newsForm" enctype="multipart/form-data">
|
|
<?php if($is_edit): ?>
|
|
<input type="hidden" name="news_id" value="<?= $edit_news['id'] ?>">
|
|
<?php endif; ?>
|
|
|
|
<label>Datum</label>
|
|
<input type="text" name="date" value="<?= $is_edit ? htmlspecialchars($edit_news['date']) : date('d.m.Y') ?>" required>
|
|
<label>Abteilung</label>
|
|
<input type="text" name="department" placeholder="z.B. Turnen" value="<?= $is_edit ? htmlspecialchars($edit_news['department']) : '' ?>" required>
|
|
<label>Überschrift</label>
|
|
<input type="text" name="title" value="<?= $is_edit ? htmlspecialchars($edit_news['title']) : '' ?>" required>
|
|
<label>Kurze Einleitung (Vorschau)</label>
|
|
<textarea name="content" rows="3" required><?= $is_edit ? htmlspecialchars($edit_news['content']) : '' ?></textarea>
|
|
<label>Kompletter Artikel (Popup)</label>
|
|
<textarea name="full_text" rows="8" required><?= $is_edit ? htmlspecialchars($edit_news['full_text']) : '' ?></textarea>
|
|
|
|
<h3 style="margin-top: 30px; margin-bottom: 5px; color: #333;">Bilder-Galerie (Maximal 4)</h3>
|
|
<p style="font-size: 0.85rem; color: #666; margin-top: 0;">Du musst nicht alle Slots füllen. Vergiss nicht das <b>Titelbild</b> auszuwählen!</p>
|
|
|
|
<!-- Die 4 Bilder Slots -->
|
|
<div class="img-grid">
|
|
<?php
|
|
for($i=1; $i<=4; $i++) {
|
|
renderImageSlot($i, $is_edit, $edit_news);
|
|
}
|
|
?>
|
|
</div>
|
|
|
|
<label style="margin-top: 20px;">Weiterführender Link (Optional)</label>
|
|
<input type="text" name="link" value="<?= $is_edit ? htmlspecialchars($edit_news['link']) : '' ?>">
|
|
|
|
<?php if($is_edit): ?>
|
|
<div style="display: flex; gap: 10px;">
|
|
<button type="submit" name="update_news" style="background: #2196F3;">Änderungen speichern</button>
|
|
<a href="admin.php" style="display: block; text-align: center; margin-top: 20px; padding: 15px; background: #555; color: white; border-radius: 4px; text-decoration: none; font-weight: bold; width: 100%; box-sizing: border-box;">Abbrechen</a>
|
|
</div>
|
|
<?php else: ?>
|
|
<button type="submit" name="save_news">News online stellen</button>
|
|
<?php endif; ?>
|
|
</form>
|
|
</div>
|
|
|
|
<!-- Randbereich Info -->
|
|
<div>
|
|
<div style="background: #fafafa; padding: 20px; border-radius: 8px; border: 1px solid #ddd;">
|
|
<h2 style="color: #333; margin-top: 0;">Tipps zur Galerie</h2>
|
|
<p style="font-size: 0.9rem; color: #666;">
|
|
Das <b>Titelbild</b> wird immer auf der Startseite in der kleinen Karte angezeigt.<br><br>
|
|
Wenn jemand auf "Weiterlesen" klickt, werden <b>alle</b> Bilder, die du hier hinterlegst, im Artikel angezeigt.<br><br>
|
|
<b>Tipp:</b> Bilder werden nun automatisch vom System im perfekten Format zugeschnitten (CSS object-fit). Du sparst dir das nervige manuelle Zurechtschneiden!
|
|
</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- News Liste -->
|
|
<div style="margin-top: 50px; border-top: 2px solid #eee; padding-top: 30px;">
|
|
<h2 style="color: #333; margin-bottom: 10px;">Bestehende News verwalten</h2>
|
|
|
|
<table class="news-table">
|
|
<tr>
|
|
<th>Datum</th>
|
|
<th>Abteilung</th>
|
|
<th>Titel</th>
|
|
<th style="width: 250px; text-align: right;">Aktion</th>
|
|
</tr>
|
|
<?php foreach($existing_news as $news_item): ?>
|
|
<tr>
|
|
<td><?= htmlspecialchars($news_item['date']) ?></td>
|
|
<td><span style="background: #eee; padding: 2px 8px; border-radius: 4px; font-size: 0.85rem;"><?= htmlspecialchars($news_item['department']) ?></span></td>
|
|
<td><strong><?= htmlspecialchars($news_item['title']) ?></strong></td>
|
|
<td style="text-align: right; display: flex; justify-content: flex-end; gap: 5px;">
|
|
<button type="button" class="social-btn" onclick="copySocialMediaText('<?= htmlspecialchars(addslashes($news_item['title'])) ?>', '<?= htmlspecialchars(addslashes($news_item['department'])) ?>')">📲 Posten</button>
|
|
<a href="?edit_id=<?= $news_item['id'] ?>" class="edit-btn">Ändern</a>
|
|
<form method="POST" style="margin: 0;" onsubmit="return confirm('Möchtest du diese News wirklich löschen?');">
|
|
<input type="hidden" name="delete_id" value="<?= $news_item['id'] ?>">
|
|
<button type="submit" name="delete_news" class="delete-btn">Löschen</button>
|
|
</form>
|
|
</td>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Javascript -->
|
|
<script>
|
|
function copySocialMediaText(title, department) {
|
|
const cleanDept = department.replace(/\s+/g, '');
|
|
const text = `🚨 NEUE NEWS VON DER SG 07 🚨\n\n📢 ${title}\n\nLies jetzt den ganzen Bericht auf unserer Website!\n👉 sg07-stleon.de\n\n#SG07StLeon #Vereinsliebe #${cleanDept} #StLeonRot`;
|
|
const tempInput = document.createElement("textarea");
|
|
tempInput.value = text;
|
|
document.body.appendChild(tempInput);
|
|
tempInput.select();
|
|
document.execCommand("copy");
|
|
document.body.removeChild(tempInput);
|
|
alert("✅ Der Text für Instagram & Facebook wurde kopiert!");
|
|
}
|
|
</script>
|
|
</body>
|
|
</html>
|