DEROO/lootjes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

admin

Browse Source
This commit is contained in:
Thomas de Roo
2025-11-12 14:57:41 +01:00
parent dbb48b07f4
commit e0bfa63430
1 changed files with 32 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

65
index.php
View File

@@ -1,14 +1,3 @@
<?php
session_start();
if (!isset($_SESSION['user'])) {
$redirect = urlencode($_SERVER['REQUEST_URI']);
header("Location: login.php?redirect=$redirect");
exit;
}
?>
<?php <?php
session_start(); session_start();
require __DIR__ . '/data/db.php'; require __DIR__ . '/data/db.php';
@@ -18,15 +7,19 @@ require __DIR__ . '/functions/ldap_groups.php';
$config = require __DIR__ . '/config/config.php'; $config = require __DIR__ . '/config/config.php';
// --- Redirect naar login als niet ingelogd ---
if (!isset($_SESSION['user'])) { if (!isset($_SESSION['user'])) {
header('Location: login.php'); $redirect = urlencode($_SERVER['REQUEST_URI']);
header("Location: login.php?redirect=$redirect");
exit; exit;
} }
$username = $_SESSION['user']['username']; $username = $_SESSION['user']['username'];
$displayName = $_SESSION['user']['displayName'] ?? $username;
$isAdmin = in_array($username, $config['admin_usernames'] ?? []);
$message = ''; $message = '';
// Uitloggen // --- Uitloggen ---
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['logout'])) { if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['logout'])) {
log_action($pdo, $username, 'Uitloggen via index', 'Index pagina'); log_action($pdo, $username, 'Uitloggen via index', 'Index pagina');
session_unset(); session_unset();
@@ -35,76 +28,82 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['logout'])) {
exit; exit;
} }
// Huidige actieve ronde ophalen // --- Actieve ronde ophalen ---
$stmt = $pdo->prepare("SELECT * FROM lootjes_rondes WHERE status='open' ORDER BY created_at DESC LIMIT 1"); $stmt = $pdo->prepare("SELECT * FROM lootjes_rondes WHERE status='open' ORDER BY created_at DESC LIMIT 1");
$stmt->execute(); $stmt->execute();
$current_round = $stmt->fetch(PDO::FETCH_ASSOC); $current_round = $stmt->fetch(PDO::FETCH_ASSOC);
// Lootje voor deze gebruiker ophalen // --- Lootje van gebruiker ophalen ---
$lootje = null; $lootje = null;
$ontvanger_wishlist = null; $ontvanger_wishlist = null;
if ($current_round) { if ($current_round) {
$stmtLootje = $pdo->prepare("SELECT ontvanger FROM lootjes WHERE ronde_id=? AND gever=?"); $stmtLootje = $pdo->prepare("SELECT ontvanger FROM lootjes WHERE ronde_id=? AND gever=?");
$stmtLootje->execute([$current_round['id'], $username]); $stmtLootje->execute([$current_round['id'], $username]);
$lootje = $stmtLootje->fetchColumn(); $lootje = $stmtLootje->fetchColumn();
if ($lootje) { if ($lootje) {
// Wishlist van de ontvanger ophalen
$stmtWishlist = $pdo->prepare("SELECT content FROM wishlist WHERE username=?"); $stmtWishlist = $pdo->prepare("SELECT content FROM wishlist WHERE username=?");
$stmtWishlist->execute([$lootje]); $stmtWishlist->execute([$lootje]);
$ontvanger_wishlist = $stmtWishlist->fetchColumn(); $ontvanger_wishlist = $stmtWishlist->fetchColumn();
} }
} }
?> ?>
<!DOCTYPE html> <!DOCTYPE html>
<html lang="nl"> <html lang="nl">
<head> <head>
<meta charset="UTF-8"> <meta charset="UTF-8">
<title>Mijn Lootje</title> <title>Lootjes Trekking</title>
<style> <style>
body { font-family: Arial, sans-serif; } body { font-family: Arial, sans-serif; margin: 20px; }
h2 { color: #333; } h2 { color: #333; }
button { padding: 5px 10px; margin-top: 5px; } button { padding: 6px 12px; margin-top: 8px; }
textarea { width: 100%; height: 150px; } a { color: #0066cc; text-decoration: none; }
.wishlist-box { border: 1px solid #ccc; padding: 10px; margin-top: 10px; } a:hover { text-decoration: underline; }
.wishlist-box { border: 1px solid #ccc; padding: 10px; margin-top: 10px; background: #fafafa; }
.info { color: #555; }
.admin-link { margin-top: 20px; display: block; font-weight: bold; }
</style> </style>
</head> </head>
<body> <body>
<h2>Welkom, <?= htmlspecialchars($_SESSION['user']['displayName']) ?>!</h2> <h2>Welkom, <?= htmlspecialchars($displayName) ?>!</h2>
<form method="post"> <form method="post" style="margin-bottom:15px;">
<button type="submit" name="logout">Uitloggen</button> <button type="submit" name="logout">Uitloggen</button>
</form> </form>
<p><a href="wishlist.php">Mijn eigen verlanglijstje aanpassen</a></p>
<?php if ($isAdmin): ?>
<p class="admin-link"><a href="admin.php">🛠 Naar de adminpagina</a></p>
<?php endif; ?>
<hr>
<?php if (!$current_round): ?> <?php if (!$current_round): ?>
<p>Er is momenteel geen actieve trekking.</p> <p class="info">Er is momenteel geen actieve trekking.</p>
<?php else: ?> <?php else: ?>
<h3>Actieve ronde: <?= htmlspecialchars($current_round['naam']) ?></h3> <h3>Actieve ronde: <?= htmlspecialchars($current_round['naam']) ?></h3>
<?php if (!$lootje): ?> <?php if (!$lootje): ?>
<p>Je lootje is nog niet toegewezen.</p> <p class="info">Je lootje is nog niet toegewezen.</p>
<?php else: ?> <?php else: ?>
<div class="wishlist-box"> <div class="wishlist-box">
<p><strong>Jij trekt voor:</strong> <?= htmlspecialchars($lootje) ?></p> <p><strong>Jij trekt voor:</strong> <?= htmlspecialchars($lootje) ?></p>
<?php if ($ontvanger_wishlist): ?> <?php if ($ontvanger_wishlist): ?>
<p><strong>Verlanglijstje van <?= htmlspecialchars($lootje) ?>:</strong></p> <p><strong>Verlanglijstje van <?= htmlspecialchars($lootje) ?>:</strong></p>
<div style="border:1px solid #ddd; padding:10px; background:#f9f9f9;"> <div style="border:1px solid #ddd; padding:10px; background:#fff;">
<?= nl2br(htmlspecialchars($ontvanger_wishlist)) ?> <?= nl2br(htmlspecialchars($ontvanger_wishlist)) ?>
</div> </div>
<?php else: ?> <?php else: ?>
<p>Deze gebruiker heeft nog geen verlanglijstje ingevuld.</p> <p class="info">Deze gebruiker heeft nog geen verlanglijstje ingevuld.</p>
<?php endif; ?> <?php endif; ?>
</div> </div>
<?php endif; ?> <?php endif; ?>
<?php endif; ?> <?php endif; ?>
<p>
<a href="wishlist.php">Mijn eigen verlanglijstje aanpassen</a>
</p>
</body> </body>
</html> </html>