Compare commits

..
Author SHA1 Message Date
Bruno Eckhardt de85f80541 hotfixes 2026-05-21 16:45:18 +02:00
Bruno Eckhardt 165b1637da changes 2026-05-21 14:35:27 +02:00
Bruno Eckhardt 5d249b3929 another fix 2026-05-21 14:20:49 +02:00
Bruno Eckhardt 327f650f58 fixes 2026-05-21 14:17:19 +02:00
Bruno Eckhardt d65b778215 new things 2026-05-21 14:13:05 +02:00
Bruno Eckhardt 14d78b548c changes 2026-05-21 13:38:28 +02:00
Bruno Eckhardt 3a86acc057 new 2026-05-21 13:38:18 +02:00
Bruno Eckhardt d24a674643 fix 2026-05-21 13:07:09 +02:00
Bruno Eckhardt 80b31284ab mvc guide, its also in flatnotes under Backend MVC 2026-05-21 13:06:24 +02:00
Bruno Eckhardt f61d0ea8fe create view and controller. USAGE php create_module.php NAME 2026-05-21 13:05:59 +02:00
Bruno Eckhardt b1de4c08f0 new ai generated mvc logic 2026-05-21 12:57:29 +02:00
Bruno Eckhardt 9c6629a61e new structure 2026-05-21 11:42:46 +02:00
Bruno Eckhardt f545c58456 new method formatjson 2026-05-20 15:54:34 +02:00
Bruno Eckhardt 2901a5e362 add create and save new api token 2026-05-20 12:31:20 +02:00
Tower 2231d65465 fixed user_rights control, when new service is created rights are setted for bruno 2026-05-19 21:55:55 +02:00
Tower 4558a717fa new rightscontroller for new service creating 2026-05-19 21:55:14 +02:00
84 changed files with 4315 additions and 3093 deletions

No files matched your search

+7 -1
View File
@@ -5,12 +5,18 @@
}
],
"settings": {
"workbench.colorTheme": "Default Dark Modern",
"workbench.colorTheme": "Dark Modern",
"workbench.colorCustomizations": {
"activityBar.background": "#ff000075",
"activityBar.foreground": "#000000",
"breadcrumb.foreground": "#FFFFFF",
},
"files.exclude": {
"*.git*": true,
"WEBROOT/config_backups": true,
"WEBROOT/static": true,
"WEBROOT/templates": true,
},
"editor.renderWhitespace": "all",
"editor.smoothScrolling": true,
"editor.fontSize": 14,
+166
View File
@@ -0,0 +1,166 @@
# 🏗️ Backend MVC Framework - Das Handbuch
Dieses Framework ist eine performante, leichtgewichtige und modulare PHP-Architektur, die speziell für die Entwicklung von professionellen Backends und Dashboards entwickelt wurde. Es implementiert das **Model-View-Controller (MVC)** Pattern und trennt strikt zwischen Datenlogik, Geschäftslogik und UI-Design.
---
## 🏛️ 1. Architektur & Verzeichnisstruktur
Das Herzstück des Frameworks liegt in `WEBROOT/src/MVC/`. Die Struktur ist darauf ausgelegt, dass das Projekt beliebig wachsen kann, ohne unübersichtlich zu werden.
### 📂 Ordner-Struktur im Detail
* **`WEBROOT/index.php`**: Der zentrale Einstiegspunkt (Front Controller). Jede Anfrage läuft hier auf. Hier werden Routen registriert und das Layout zusammengesetzt.
* **`src/MVC/Core/`**:
* `Controller.php`: Basisklasse für alle Controller. Bietet Methoden für Rendering und JSON-Output.
* `Model.php`: Basisklasse für Datenbankzugriffe. Implementiert sichere CRUD-Methoden via Prepared Statements.
* `View.php`: Die Engine, die Daten in HTML-Templates extrahiert.
* `Router.php`: Verwaltet Routen und schaltet Middlewares (Auth/Admin) vor.
* `Layout/Layout.php`: Das Block-System für modulares UI-Design.
* **`src/MVC/Controller/`**: Hier landen deine PHP-Klassen für die Logik. Beispiel: `UserController.php`, `LogController.php`.
* **`src/MVC/Model/`**: Jede Klasse entspricht einer Datenbanktabelle. Hier wird definiert, *wie* Daten geholt oder gespeichert werden.
* **`src/MVC/View/`**: Reine HTML-Dateien mit minimalem PHP-Code für die Anzeige.
* **`src/MVC/Layout/Templates/`**: Enthält das Grundgerüst (`main.php`), in das die Views eingebettet werden.
---
## 🚦 2. Der Request-Lifecycle (Wie eine Seite entsteht)
1. Ein Benutzer ruft `?service=benutzer` auf.
2. Die `index.php` lädt den **Autoloader** und initialisiert den **Router**.
3. Der **Router** prüft, ob eine Middleware (z.B. `auth`) für diesen Service konfiguriert ist.
4. Wenn der Zugriff erlaubt ist, erstellt der Router eine Instanz des jeweiligen **Controllers** und ruft die Zielmethode auf.
5. Der **Controller** nutzt ein **Model**, um Daten aus der Datenbank zu holen.
6. Der Controller übergibt diese Daten an eine **View** (`$this->render()`).
7. Die **index.php** nimmt das HTML der View entgegen, packt es in den `content`-Block des **Layouts** und gibt die fertige Seite aus.
---
## 🏛️ 3. Arbeiten mit dem Model-Layer (Datenbank)
Vermeide SQL direkt im Controller! Nutze immer Models für eine saubere Abstraktion.
### Beispiel: Ein eigenes Model erstellen
```php
namespace MVC\Model;
use MVC\Core\Model;
class Product extends Model {
protected static $table = "Produkte"; // Tabellenname in der DB
public static function getExpensiveProducts() {
return self::where("PREIS > ?", 100); // Sicher gegen SQL-Injection!
}
}
```
### Verfügbare Methoden der Basisklasse:
* `all()`: Lädt alles aus der Tabelle.
* `find($id)`: Findet einen Datensatz per ID.
* `where($sql, ...$params)`: Filtert mit Prepared Statements.
* `insert($array)`: Speichert neue Daten (z.B. `['TITEL' => 'Test']`).
* `update($array, $where, ...$params)`: Aktualisiert bestehende Daten.
* `delete($where, ...$params)`: Löscht Datensätze sicher.
---
## 🎮 4. Controller & Formularverarbeitung
Controller steuern den Ablauf. Sie entscheiden, was bei `GET` und was bei `POST` passiert.
### Beispiel: Daten verarbeiten
```php
public function save() {
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
// Daten via Model speichern
User::update(['STATUS' => 'aktiv'], "ID = ?", $_POST['id']);
// WICHTIG: Danach immer Redirect (Post-Redirect-Get Pattern)
header("Location: ?service=user_list");
exit;
}
return $this->render('edit_view');
}
```
---
## 🧱 5. Das modulare Block-Layout
Das Layout-System ermöglicht es, verschiedene Teile der Seite (Header, Sidebar, Content) unabhängig voneinander zu befüllen.
### Blöcke in `index.php` befüllen:
```php
$layout = new \MVC\Layout\Layout('main');
$layout->setBlock('title', 'Admin Dashboard');
$layout->setBlock('sidebar', $sidebarHtml);
$layout->setBlock('content', $controllerOutput);
```
### Blöcke im Template (`main.php`) ausgeben:
```html
<aside class="sidebar">
<?= $this->getBlock('sidebar') ?>
</aside>
```
---
## 🚀 6. CLI-Werkzeuge für Entwickler
Das Framework kommt mit automatisierten Scripten, um lästige Routinearbeiten zu vermeiden.
### Projekt initialisieren
Erstellt ein komplettes Skelett inkl. Dev-Server und API.
```bash
php init_mvc.php MeinProjekt
```
### Modul (Controller + View) erstellen
Erstellt zwei Dateien und gibt dir den Code für den Router aus.
```bash
php create_module.php kunden_verwaltung
```
### Model erstellen
Erstellt eine Model-Klasse mit Tabellenzuweisung und dokumentierten Spalten.
```bash
php create_model.php Kunden ID,NAME,EMAIL,TELEFON
```
---
## 🛡️ 7. Sicherheit & Best Practices
1. **XSS-Schutz**: Gib niemals Variablen direkt in der View aus. Nutze immer `<?= htmlspecialchars($var) ?>`.
2. **SQL-Injection**: Nutze niemals Variablen direkt in einem SQL-String. Nutze die Methoden `where()`, `update()` etc. des Models. Sie verwenden intern Prepared Statements.
3. **Namespaces**: Alle Klassen im `src/MVC` Ordner nutzen Namespaces. Achte beim Aufruf globaler Klassen (außerhalb des MVC-Ordners) auf den führenden Backslash, z.B. `\db_connect()`.
4. **Error Handling**: Fehler werden zentral in der `index.php` gefangen. Admins erhalten detaillierte Informationen, User sehen eine sichere Fehlermeldung.
---
## ⚡ 8. AJAX & API Entwicklung
Um Daten ohne Seiten-Reload zu laden, bietet der Controller die `json()` Methode:
```php
public function getStatus() {
$data = ['online' => true, 'time' => date('H:i')];
return $this->json($data); // Setzt Header und beendet Script
}
```
In deinem JavaScript kannst du dies dann einfach per `fetch()` abrufen.
---
## 🛠️ 9. Installation & Start
1. Stelle sicher, dass PHP 8.x installiert ist.
2. Passe die `src/config/env.ini` mit deinen Datenbankdaten an.
3. Starte den internen Server: `php server.php`.
4. Öffne `http://localhost:8000` im Browser.
---
*Dieses Framework wurde für maximale Produktivität entwickelt. Bei Fragen schau in die integrierte Dokumentation im Backend.*
+3 -3
View File
@@ -1,8 +1,8 @@
<?php
include_once(__DIR__ . "/../controller/DataController.php");
include_once(__DIR__ . "/../controller/DatabaseConnect.php");
include_once(__DIR__ . "/../controller/DatabaseController.php");
include_once( __DIR__ . '/../src/utils/databaseMethods.php');
include_once( __DIR__ . '/../src/classes/getData.php');
include_once( __DIR__ . '/../src/database/databaseConnect.php');
$data = new getSpecificData();
+4 -4
View File
@@ -1,8 +1,8 @@
<?php
include_once( __DIR__ . '/../../controller/DatabaseController.php');
include_once( __DIR__ . '/../../controller/DataController.php');
include_once( __DIR__ . '/../../controller/ApiController.php');
include_once(__DIR__ . '/../../modules/Mail.php');
include_once( __DIR__ . '/../../src/utils/databaseMethods.php');
include_once( __DIR__ . '/../../src/classes/getData.php');
include_once( __DIR__ . '/../../src/controller/apiController.php');
include_once( __DIR__ . '/../../src/utils/mailer.php');
header("Content-Type: application/json");
header("Access-Control-Allow-Origin: *");
+2 -2
View File
@@ -1,6 +1,6 @@
<?php
include_once( __DIR__ . '/../../controller/DatabaseController.php' );
include_once( __DIR__ . '/../../controller/DataController.php' );
include_once( __DIR__ . '/../../src/utils/databaseMethods.php');
include_once( __DIR__ . '/../../src/classes/getData.php');
header("Content-Type: application/json");
header("Access-Control-Allow-Origin: *");
+3 -3
View File
@@ -1,8 +1,8 @@
<?php
include_once(__DIR__ . '/../../controller/DatabaseController.php');
include_once(__DIR__ . '/../../controller/DataController.php');
include_once(__DIR__ . '/../../controller/ApiController.php');
include_once( __DIR__ . '/../../src/utils/databaseMethods.php');
include_once( __DIR__ . '/../../src/classes/getData.php');
include_once(__DIR__ . '/../../src/controller/apiController.php');
header('Content-Type: application/json');
+3 -3
View File
@@ -1,8 +1,8 @@
<?php
include_once(__DIR__ . '/../../controller/DatabaseController.php');
include_once(__DIR__ . '/../../controller/DataController.php');
include_once(__DIR__ . '/../../controller/ApiController.php');
include_once( __DIR__ . '/../../src/utils/databaseMethods.php');
include_once( __DIR__ . '/../../src/classes/getData.php');
include_once(__DIR__ . '/../../src/controller/apiController.php');
header('Content-Type: application/json');
+4 -3
View File
@@ -1,8 +1,9 @@
<?php
include_once(__DIR__ . '/../../controller/DatabaseController.php');
include_once(__DIR__ . '/../../controller/DataController.php');
include_once(__DIR__ . '/../../controller/ApiController.php');
include_once( __DIR__ . '/../../src/utils/databaseMethods.php');
include_once( __DIR__ . '/../../src/utils/requestLogger.php');
include_once( __DIR__ . '/../../src/classes/getData.php');
include_once(__DIR__ . '/../../src/controller/apiController.php');
header('Content-Type: application/json');
+19
View File
@@ -17,6 +17,7 @@ $serviceGroups = array (
array (
0 => 'home_info',
1 => 'links',
3 => 'documentation',
),
),
'Ausbildung' =>
@@ -185,6 +186,24 @@ $services = array (
'active' => true,
'adminOnly' => false,
),
'tester' =>
array (
'name' => 'TESTER',
'active' => true,
'adminOnly' => false,
),
'documentation' =>
array (
'name' => 'Dokumentation',
'active' => true,
'adminOnly' => false,
),
'logout' =>
array (
'name' => 'Abmelden',
'active' => true,
'adminOnly' => false,
),
);
$linkGroups = array (
-75
View File
@@ -1,75 +0,0 @@
<?php
include_once __DIR__ . '/../modules/Mail.php';
include_once __DIR__ . '/../controller/RoutesController.php';
include_once 'DataController.php';
function db_connect() {
$servers = [
'local' => [
'hostaddr' => '127.0.0.1',
'username' => 'worker',
'password' => 'bBHofurUJWKzPE8Z',
'database' => 'DEV',
],
'vpn' => [
'hostaddr' => '100.123.136.86',
'username' => 'worker',
'password' => 'bBHofurUJWKzPE8Z',
'database' => 'DEV',
],
'backup' => [
'hostaddr' => '10.233.1.241',
'username' => 'worker',
'password' => 'bBHofurUJWKzPE8Z',
'database' => 'DEV',
],
'dev' => [
'hostaddr' => '10.233.1.243',
'username' => 'worker',
'password' => 'bBHofurUJWKzPE8Z',
'database' => 'DEV',
],
'live' => [
'hostaddr' => '10.233.1.244',
'username' => 'worker',
'password' => 'bBHofurUJWKzPE8Z',
'database' => 'DEV',
],
'error' => [
'hostaddr' => '10.233.1.244',
'username' => 'error',
'password' => 'bBHofurUJWKzPE8Z',
'database' => 'DEV',
]
];
$enviroment = 'vpn';
mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
try {
$conn = new mysqli(
$servers[$enviroment]['hostaddr'],
$servers[$enviroment]['username'],
$servers[$enviroment]['password'],
$servers[$enviroment]['database'],
);
$conn->set_charset("utf8mb4");
return $conn;
} catch (mysqli_sql_exception $e) {
errorMail(
"Database Connection failed",
$e->getMessage(),
false,
);
redirectToWebsite("https://blackpi.ipv64.net");
throw $e;
}
}
?>
+116 -69
View File
@@ -15,15 +15,21 @@ if (empty($_SESSION['user_logged_in'])) {
exit;
}
include_once 'config.php';
include_once 'controller/CookieController.php';
include_once 'controller/DatabaseConnect.php';
include_once 'controller/DatabaseController.php';
include_once 'controller/DataController.php';
include_once 'controller/LogController.php';
include_once 'controller/UserController.php';
include_once 'modules/ConsoleLog.php';
// include 'controller/RoutesController.php';
require_once __DIR__ . '/src/MVC/autoloader.php';
include_once( __DIR__ . '/config.php');
include_once( __DIR__ . '/src/classes/getData.php');
include_once( __DIR__ . '/src/controller/apiController.php');
include_once( __DIR__ . '/src/controller/cookieController.php');
include_once( __DIR__ . '/src/controller/rightsController.php');
include_once( __DIR__ . '/src/controller/userController.php');
include_once( __DIR__ . '/src/database/databaseConnect.php');
include_once( __DIR__ . '/src/utils/Debugging/ConsoleLogger.php');
include_once( __DIR__ . '/src/utils/databaseMethods.php');
include_once( __DIR__ . '/src/utils/formatter.php');
include_once( __DIR__ . '/src/utils/mailer.php');
include_once( __DIR__ . '/src/utils/requestLogger.php');
include_once( __DIR__ . '/src/utils/router.php');
$user_id = DatabaseShow(
"Benutzer",
@@ -81,72 +87,113 @@ if ((new getSpecificData())->getWebsite() != "backend.blackpi.ipv64.net") {
$title = "Backend";
}
?>
<!DOCTYPE html>
<html lang="de">
// MVC Logic
try {
$router = new \MVC\Core\Router();
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title><?= $title ?></title>
<link rel="stylesheet" href="style.css">
</head>
// Register Routes
$router->add('home_info', \MVC\Controller\ServiceController::class, 'home_info', ['auth']);
$router->add('links', \MVC\Controller\ServiceController::class, 'links', ['auth']);
$router->add('documentation', \MVC\Controller\DocumentationController::class, 'links', ['auth']);
$router->add('logout', \MVC\Controller\ServiceController::class, 'logout', ['auth']);
$router->add('public_request_logs', \MVC\Controller\LogController::class, 'public_request_logs', ['auth']);
$router->add('backend_request_logs', \MVC\Controller\LogController::class, 'backend_request_logs', ['auth']);
$router->add('personal_request_logs', \MVC\Controller\LogController::class, 'personal_request_logs', ['auth', 'admin']);
$router->add('public_request_chart', \MVC\Controller\LogController::class, 'public_request_chart', ['auth']);
$router->add('backend_request_chart', \MVC\Controller\LogController::class, 'backend_request_chart', ['auth']);
<body>
<header class="main-header">
Backend
<button id="darkModeToggle">Dark Mode</button>
<button id="logoutButton">Logout</button>
</header>
<div class="main">
<div class="sidebar">
<?php foreach ($serviceGroups as $groupKey => $group): ?>
<?php
$visibleServices = [];
$router->add('user_control', \MVC\Controller\AdminController::class, 'user_control', ['auth', 'admin']);
$router->add('services_control', \MVC\Controller\AdminController::class, 'services_control', ['auth', 'admin']);
$router->add('variablen_control', \MVC\Controller\AdminController::class, 'variablen_control', ['auth', 'admin']);
$router->add('data_info', \MVC\Controller\AdminController::class, 'data_info', ['auth', 'admin']);
$router->add('tabellen', \MVC\Controller\AdminController::class, 'tabellen', ['auth', 'admin']);
foreach ($group['services'] as $serviceKey) {
if (!isset($services[$serviceKey])) continue;
if (!$services[$serviceKey]['active']) continue;
if (!empty($services[$serviceKey]['adminOnly']) && !$isAdmin) continue;
if (!in_array($serviceKey, $userRights, true)) continue;
$visibleServices[] = $serviceKey;
}
$router->add('berichte', \MVC\Controller\ReportController::class, 'berichte', ['auth']);
$router->add('berichte_arbeit_gen', \MVC\Controller\ReportController::class, 'berichte_arbeit_gen', ['auth']);
$router->add('zeiterfassung', \MVC\Controller\ReportController::class, 'zeiterfassung', ['auth']);
$router->add('print_static', \MVC\Controller\ReportController::class, 'print_static', ['auth']);
if (empty($visibleServices)) continue;
$router->add('api_tester', \MVC\Controller\ApiController::class, 'api_tester', ['auth', 'admin']);
$router->add('weather_chart', \MVC\Controller\StatsController::class, 'weather_chart', ['auth', 'admin']);
$router->add('domains', \MVC\Controller\DomainController::class, 'domains', ['auth']);
$router->add('documentation', \MVC\Controller\DocumentationController::class, 'index', ['auth']);
$isOpen = !empty($group['defaultOpen']) || in_array($selectedService, $visibleServices, true);
?>
<div class="service-group <?= $isOpen ? 'open' : '' ?>" data-group="<?= $groupKey ?>">
$layout = new \MVC\Layout\Layout('main');
$layout->setBlock('title', $title);
<div class="group-title">
<?= htmlspecialchars($group['label']) ?>
<span class="arrow">▸</span>
</div>
// Header Block
ob_start();
?>
Backend
<button id="darkModeToggle">Dark Mode</button>
<button id="logoutButton">Logout</button>
<?php
$layout->setBlock('header', ob_get_clean());
<div class="group-services">
<?php foreach ($visibleServices as $serviceKey): ?>
<a href="?service=<?= $serviceKey ?>">
<button class="<?= $selectedService === $serviceKey ? 'active' : '' ?>">
<?= htmlspecialchars($services[$serviceKey]['name']) ?>
</button>
</a>
<?php endforeach; ?>
</div>
</div>
<?php endforeach; ?>
</div>
<div class="content">
<?php
if ($selectedService) {
include "services/$selectedService.php";
logging();
} else {
echo "<p>Kein aktiver Service verfügbar.</p>";
}
?>
</div>
// Sidebar Block
ob_start();
?>
<?php foreach ($serviceGroups as $groupKey => $group): ?>
<?php
$visibleServices = [];
foreach ($group['services'] as $serviceKey) {
if (!isset($services[$serviceKey])) continue;
if (!$services[$serviceKey]['active']) continue;
if (!empty($services[$serviceKey]['adminOnly']) && !$isAdmin) continue;
if (!in_array($serviceKey, $userRights, true)) continue;
$visibleServices[] = $serviceKey;
}
if (empty($visibleServices)) continue;
$isOpen = !empty($group['defaultOpen']) || in_array($selectedService, $visibleServices, true);
?>
<div class="service-group <?= $isOpen ? 'open' : '' ?>" data-group="<?= $groupKey ?>">
<div class="group-title">
<?= htmlspecialchars($group['label']) ?>
<span class="arrow">▸</span>
</div>
<script src="main.js"></script>
</body>
</html>
<div class="group-services">
<?php foreach ($visibleServices as $serviceKey): ?>
<a href="?service=<?= $serviceKey ?>">
<button class="<?= $selectedService === $serviceKey ? 'active' : '' ?>">
<?= htmlspecialchars($services[$serviceKey]['name']) ?>
</button>
</a>
<?php endforeach; ?>
</div>
</div>
<?php endforeach; ?>
<?php
$layout->setBlock('sidebar', ob_get_clean());
// Content Block
if ($selectedService) {
$content = $router->dispatch($selectedService);
$layout->setBlock('content', $content);
logging();
} else {
$layout->setBlock('content', "<p>Kein aktiver Service verfügbar.</p>");
}
echo $layout->render();
} catch (\Exception $e) {
// Central Error Handling
error_log($e->getMessage());
http_response_code(500);
if ($isAdmin) {
echo "<h1>Internal Server Error</h1>";
echo "<p><strong>Message:</strong> " . $e->getMessage() . "</p>";
echo "<p><strong>File:</strong> " . $e->getFile() . " on line " . $e->getLine() . "</p>";
echo "<pre>" . $e->getTraceAsString() . "</pre>";
} else {
echo "<h1>Hoppla!</h1>";
echo "<p>Ein interner Fehler ist aufgetreten. Bitte versuchen Sie es später erneut.</p>";
}
}
+5 -5
View File
@@ -1,9 +1,9 @@
<?php
include_once 'controller/DatabaseController.php';
include_once 'controller/RoutesController.php';
include_once 'controller/LogController.php';
include_once 'modules/Mail.php';
include_once 'config.php';
include_once( __DIR__ . '/config.php');
include_once( __DIR__ . '/src/utils/databaseMethods.php');
include_once( __DIR__ . '/src/utils/requestLogger.php');
include_once( __DIR__ . '/src/utils/mailer.php');
session_set_cookie_params([
'lifetime' => 0,
+1 -4
View File
@@ -27,8 +27,5 @@ document.querySelectorAll('.group-title').forEach(title => {
const logoutButton = document.getElementById('logoutButton');
logoutButton.addEventListener('click', () => {
fetch('services/logout.php', { method: 'POST' })
.then(() => {
window.location.href = 'login.php';
});
window.location.href = '?service=logout';
});
-105
View File
@@ -1,105 +0,0 @@
<?php
$conn = db_connect();
$sql = "SELECT DATE(FIRST_REQUEST) as tag, COUNT(*) as anzahl FROM logs WHERE WEBSITE = 'backend.blackpi.ipv64.net' GROUP BY DATE(FIRST_REQUEST) ORDER BY DATE(FIRST_REQUEST)";
$result = $conn->query($sql);
$labels = [];
$data = [];
if ($result->num_rows > 0) {
while($row = $result->fetch_assoc()) {
$labels[] = $row['tag'];
$data[] = (int)$row['anzahl'];
}
}
$conn->close();
?>
<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8">
<title>Logs Chart</title>
<script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
<script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
<script src="https://cdn.jsdelivr.net/npm/chartjs-plugin-zoom"></script>
</head>
<body>
<canvas id="logChart" width="600" height="400"></canvas>
<script>
const ctx = document.getElementById('logChart').getContext('2d');
const logChart = new Chart(ctx, {
type: 'line',
data: {
labels: <?php echo json_encode($labels); ?>,
datasets: [{
label: 'Logs pro Tag',
data: <?php echo json_encode($data); ?>,
borderColor: 'rgba(75, 192, 192, 1)',
backgroundColor: 'rgba(75, 192, 192, 0.2)',
fill: true,
tension: 0
}]
},
options: {
responsive: true,
maintainAspectRatio: false,
plugins: {
title: {
display: true,
text: 'Logs pro Tag'
},
legend: {
display: true,
position: 'top'
},
zoom: {
pan: {
enabled: true,
mode: 'x',
},
zoom: {
wheel: {
enabled: true,
},
mode: 'x',
}
}
},
interaction: {
mode: 'index',
intersect: false
},
scales: {
x: {
title: {
display: true,
text: 'Datum'
}
},
y: {
min: 0,
max: 100,
title: {
display: true,
text: 'Anzahl Logs'
},
ticks: {
stepSize: 20
},
beginAtZero: true
}
}
}
});
</script>
</body>
</html>
-174
View File
@@ -1,174 +0,0 @@
<?php
$conn = db_connect();
// Dev-IPs
$devips = (new getSpecificData())->getWhitelistedIPs();
$devips_sql = "'" . implode("','", $devips) . "'";
// Filter
$filter = $_GET['filter'] ?? 'today';
$customQuery = $_POST['custom_query'] ?? '';
$useCustom = false;
// Custom Query Schutz
if ($customQuery) {
$forbidden = ['DELETE', 'UPDATE', 'INSERT', 'DROP', 'ALTER', 'TRUNCATE'];
$upper = strtoupper($customQuery);
foreach ($forbidden as $bad) {
if (strpos($upper, $bad) !== false) {
echo "<b style='color:red'>Gefährliche Query blockiert ($bad)</b>";
return;
}
}
if (stripos(trim($customQuery), "SELECT") !== 0) {
echo "<b style='color:red'>Nur SELECT erlaubt</b>";
return;
}
$sql = $customQuery;
$useCustom = true;
}
// Standard Queries
if (!$useCustom) {
switch ($filter) {
case 'today':
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE DATE(FIRST_REQUEST) = CURDATE()
AND (WEBSITE = 'backend.blackpi.ipv64.net')
AND CLIENT_IP NOT IN ($devips_sql)
ORDER BY FIRST_REQUEST DESC
";
break;
case 'counterperip':
$sql = "
SELECT CLIENT_IP, LAND, USER_AGENT, SUM(counter) AS gesamt_counter
FROM logs
WHERE (WEBSITE = 'backend.blackpi.ipv64.net')
AND CLIENT_IP NOT IN ($devips_sql)
GROUP BY CLIENT_IP
ORDER BY gesamt_counter DESC
";
break;
case 'node1':
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE `SERVER_IP` = 'node1'
AND (WEBSITE = 'backend.blackpi.ipv64.net')
ORDER BY `FIRST_REQUEST` DESC
";
break;
case 'node2':
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE `SERVER_IP` = 'node2'
AND (WEBSITE = 'backend.blackpi.ipv64.net')
ORDER BY `FIRST_REQUEST` DESC
";
break;
case 'node3':
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE `SERVER_IP` = 'node3'
AND (WEBSITE = 'backend.blackpi.ipv64.net')
ORDER BY `FIRST_REQUEST` DESC
";
break;
case 'node4':
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE `SERVER_IP` = 'node4'
AND (WEBSITE = 'backend.blackpi.ipv64.net')
ORDER BY `FIRST_REQUEST` DESC
";
break;
default:
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE (WEBSITE = 'backend.blackpi.ipv64.net')
AND CLIENT_IP NOT IN ($devips_sql)
ORDER BY FIRST_REQUEST DESC
";
}
}
?>
<h1>📊 Logs</h1>
<form method="GET" action="index.php">
<input type="hidden" name="service" value="<?= htmlspecialchars($_GET['service'] ?? 'logs') ?>">
<select name="filter" onchange="this.form.submit()">
<?php
$options = ['alle','today','node1','node2','node3','node4','counterperip'];
foreach ($options as $opt) {
$sel = ($filter === $opt) ? 'selected' : '';
echo "<option value='$opt' $sel>$opt</option>";
}
?>
</select>
</form>
<!-- <br>
<form method="POST">
<textarea name="custom_query" style="width:100%;height:60px;"><?= htmlspecialchars($customQuery) ?></textarea>
<br>
<button type="submit">Query ausführen</button>
</form>
<hr> -->
<br>
<?php
$daten = [];
if ($erg = $conn->query($sql)) {
// echo "<pre style='background:var(--bg-soft,#f4f4f4);padding:10px;'>$sql</pre>";
while ($row = $erg->fetch_object()) {
$daten[] = $row;
}
}
?>
<?php if (!$daten): ?>
<b>Keine Daten gefunden</b>
<?php else: ?>
<div style="overflow-x:auto;">
<table border="1" cellpadding="5" cellspacing="0" style="border-collapse:collapse;width:100%;">
<tr>
<?php foreach ($daten[0] as $key => $_): ?>
<th><?= htmlspecialchars($key) ?></th>
<?php endforeach; ?>
</tr>
<?php foreach ($daten as $row): ?>
<tr>
<?php foreach ($row as $val): ?>
<td><?= htmlspecialchars($val ?? '') ?></td>
<?php endforeach; ?>
</tr>
<?php endforeach; ?>
</table>
</div>
<?php endif; ?>
-173
View File
@@ -1,173 +0,0 @@
<?php
$mode = $_GET['mode'] ?? 'fk';
if ($mode === 'normal') {
$data = Databaseshow("Firmenberichte");
} else {
$data = DatabaseShowWithFK(
"Berufsschulberichte",
$Berufsschulberichte,
);
}
$data = array_reverse($data);
$displayData = (is_array($data) && isset($data['rows'])) ? $data['rows'] : $data;
$count = is_array($displayData) ? count($displayData) : 0;
?>
<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8">
<link rel="stylesheet" href="../style.css">
<style>
.debug-table-container {
background: #252525;
border-radius: 8px;
padding: 0;
margin-top: 20px;
overflow-x: auto;
border: 1px solid rgba(255, 255, 255, 0.1);
box-shadow: 0 10px 30px rgba(0, 0, 0, 0.5);
}
table {
width: 100%;
border-collapse: collapse;
color: #ccc;
white-space: nowrap;
}
th {
background: #333;
text-align: left;
padding: 15px 12px;
border-bottom: 2px solid #3498db;
color: #3498db;
text-transform: uppercase;
font-size: 11px;
letter-spacing: 1px;
position: sticky;
top: 0;
z-index: 10;
}
td {
padding: 10px 12px;
border-bottom: 1px solid rgba(255, 255, 255, 0.05);
font-size: 13px;
}
tr:nth-child(even) {
background: rgba(255, 255, 255, 0.02);
}
tr:hover {
background: rgba(52, 152, 219, 0.1);
color: #fff;
}
/* Highlight für DATUM Spalte */
td:first-child,
th:first-child {
position: sticky;
left: 0;
background: #252525;
z-index: 5;
border-right: 1px solid rgba(255, 255, 255, 0.1);
}
th:first-child {
z-index: 11;
background: #333;
}
.debug-raw {
background: #1a1a1a;
color: #00ff00;
padding: 20px;
border-radius: 8px;
font-family: 'Fira Code', monospace;
font-size: 12px;
overflow: auto;
border-left: 4px solid #3498db;
margin-top: 10px;
}
.badge-count {
background: #3498db;
color: white;
padding: 3px 10px;
border-radius: 20px;
font-size: 12px;
font-weight: bold;
}
.empty-note {
padding: 40px;
text-align: center;
color: #777;
font-style: italic;
}
</style>
</head>
<body class="<?= ($_SESSION['dark_mode'] ?? true) ? 'dark-mode' : '' ?>">
<div class="main">
<div class="content">
<h2 style="display: flex; justify-content: space-between; align-items: center;">
<span>📊 Berichtte-Vorschau:</span>
<div>
<a href="?service=<?= $selectedService ?>&mode=fk">
<button <?= $mode === 'fk' ? 'style="background:#3498db;color:white;"' : '' ?>>
Berufsschulberichte
</button>
</a>
<a href="?service=<?= $selectedService ?>&mode=normal">
<button <?= $mode === 'normal' ? 'style="background:#3498db;color:white;"' : '' ?>>
Arbeitsberichte
</button>
</a>
</div>
</h2>
<?php if ($count > 0 && is_array($displayData[0])): ?>
<div class="debug-table-container">
<table>
<thead>
<tr>
<?php foreach (array_keys($displayData[0]) as $column): ?>
<th><?= htmlspecialchars($column) ?></th>
<?php endforeach; ?>
</tr>
</thead>
<tbody>
<?php foreach ($displayData as $row): ?>
<tr>
<?php foreach ($row as $key => $cell): ?>
<td><?= htmlspecialchars($cell ?? '-') ?></td>
<?php endforeach; ?>
</tr>
<?php endforeach; ?>
</tbody>
</table>
</div>
<?php else: ?>
<div class="debug-table-container">
<div class="empty-note">
Keine tabellarischen Daten gefunden.<br>
<small>Struktur: <?= is_array($data) ? 'Array ('.count($data).' Keys)' : gettype($data) ?></small>
</div>
</div>
<?php endif; ?>
</div>
</div>
</body>
</html>
-171
View File
@@ -1,171 +0,0 @@
<?php
// Zugriff nur, wenn angemeldet
if (empty($_SESSION['user_logged_in'])) {
echo "<p>Zugriff verweigert.</p>";
exit;
}
$conn = db_connect();
$conn->query("SET @row := 0");
$wochenQuery = "
SELECT MIN(DATUM) AS start_date,
MAX(DATUM) AS end_date
FROM (
SELECT DATUM,
DATE_SUB(DATUM, INTERVAL (@row := @row + 1) DAY) AS grp
FROM Firmenberichte
ORDER BY DATUM
) AS t
GROUP BY grp
ORDER BY start_date;
";
$resultWochen = $conn->query($wochenQuery);
$wochenArray = [];
while($row = $resultWochen->fetch_assoc()){
$wochenArray[] = $row;
}
// Standard-Datenbereich: letzte 5 Tage
$startDate = $_POST['start_date'] ?? date('Y-m-d', strtotime('-5 days'));
$endDate = $_POST['end_date'] ?? date('Y-m-d');
$berichteQuery = "SELECT `DATUM`, `PROZESS_1`, `PROZESS_2`, `PROZESS_3`, `PROZESS_4`
FROM Firmenberichte
WHERE `DATUM` BETWEEN ? AND ?";
$stmt = $conn->prepare($berichteQuery);
$stmt->bind_param("ss", $startDate, $endDate);
$stmt->execute();
$result = $stmt->get_result();
$berichteArray = [];
while($row = $result->fetch_assoc()){
$berichteArray[] = $row;
}
$stmt->close();
$conn->close();
// PDF-Generierung
function generatePDF($berichteArray) {
$Einzelstunden = "2";
$Gesamtstunden = "8";
$data = [
'Text1' => '', // Nr
'Text2' => $berichteArray[0]['DATUM'] ?? '',
'Text3' => end($berichteArray)['DATUM'] ?? '',
'Text4' => 'Eckhardt',
'Text5' => 'Bruno Renato',
'Text6' => '1',
];
$fieldIndex = 7;
foreach ($berichteArray as $bericht) {
for ($i = 1; $i <= 4; $i++) {
$data["Text$fieldIndex"] = $bericht["PROZESS_$i"] ?? '';
$fieldIndex++;
$data["Text$fieldIndex"] = $Einzelstunden;
$fieldIndex++;
}
$data["Text$fieldIndex"] = $Gesamtstunden;
$fieldIndex++;
}
$fdfFields = array_map(function($field, $value){
$value = str_replace(['(', ')'], ['\(', '\)'], $value);
return "<< /T ($field) /V ($value) >>";
}, array_keys($data), $data);
$fdf = "%FDF-1.2\n1 0 obj\n<<\n/FDF << /Fields [\n" .
implode("\n", $fdfFields) .
"\n] >> >>\nendobj\ntrailer\n<< /Root 1 0 R >>\n%%EOF";
$fdfFile = tempnam(sys_get_temp_dir(), 'fdf_') . '.fdf';
file_put_contents($fdfFile, $fdf);
$inputPdf = (new getSpecificData())->getDocumentRoot() . '/templates/ausbildungsnachweis.pdf';
ConsoleLog((new getSpecificData())->getDocumentRoot() . '/templates/ausbildungsnachweis.pdf');
$outputPdf = (new getSpecificData())->getDocumentRoot() . '/static/ausbildungsnachweis_' . $berichteArray[0]['DATUM'] . '-' . end($berichteArray)['DATUM'] . '.pdf';
exec("pdftk $inputPdf fill_form $fdfFile output $outputPdf flatten");
unlink($fdfFile);
return $outputPdf;
}
// Handle PDF generation
$pdfFile = null;
if (isset($_POST['generate_pdf']) && count($berichteArray) > 0) {
$pdfFile = generatePDF($berichteArray);
}
?>
<div class="content-box">
<h2>Ausbildungsberichte PDF erstellen</h2>
<form method="post" class="overtime-container">
<label for="start_date">Von:</label>
<input type="date" name="start_date" id="start_date" value="<?= htmlspecialchars($startDate) ?>">
<label for="end_date">Bis:</label>
<input type="date" name="end_date" id="end_date" value="<?= htmlspecialchars($endDate) ?>">
<button type="submit" name="generate_pdf">PDF erstellen</button>
</form>
<?php if ($pdfFile): ?>
<div class="overtime-result">
<?= htmlspecialchars(basename($pdfFile)) ?> erfolgreich erstellt!
</div>
<?php elseif(isset($_POST['generate_pdf'])): ?>
<div class="overtime-result negative">
Keine Berichte im gewählten Zeitraum gefunden.
</div>
<?php endif; ?>
<?php if(!empty($wochenArray)): ?>
<div class="wochen-liste">
<h3>Verfügbare Wochenabschnitte:</h3>
<ul>
<?php
$outputDir = (new getSpecificData())->getDocumentRoot() . '/static/';
foreach($wochenArray as $woche):
$pdfName = 'ausbildungsnachweis_' . $woche['start_date'] . '-' . $woche['end_date'] . '.pdf';
$pdfPath = $outputDir . $pdfName;
$exists = file_exists($pdfPath);
?>
<li>
<code><?= htmlspecialchars($woche['start_date']) ?></code> bis
<code><?= htmlspecialchars($woche['end_date']) ?></code>
<?php if($exists): ?>
<span style="color:green;">(PDF vorhanden)</span>
<a href="<?= htmlspecialchars('/static/' . $pdfName) ?>" download class="btn btn-success">
Download
</a>
<?php else: ?>
<span style="color:red;">(noch keine PDF)</span>
<form method="post" style="display:inline;">
<input type="hidden" name="start_date" value="<?= htmlspecialchars($woche['start_date']) ?>">
<input type="hidden" name="end_date" value="<?= htmlspecialchars($woche['end_date']) ?>">
<button type="submit" name="generate_pdf" class="btn btn-primary">
PDF erzeugen
</button>
</form>
<?php endif; ?>
</li>
<?php endforeach; ?>
</ul>
</div>
<?php endif; ?>
</div>
-112
View File
@@ -1,112 +0,0 @@
<?php
$statusMsg = "";
/* =========================
Neue Domain hinzufügen
========================= */
if (isset($_POST["add_domain"])) {
$subdomain = trim($_POST["subdomain"]);
if ($subdomain != "") {
DatabaseInsert("Domains", "SUBDOMAIN", $subdomain);
$statusMsg = "Domain wurde hinzugefügt.";
}
}
/* =========================
Domain löschen
========================= */
if (isset($_POST["delete_domain"])) {
$id = intval($_POST["id"]);
DatabaseDelete("Domains", "ID = ?", $id);
$statusMsg = "Domain wurde gelöscht.";
}
/* =========================
Domain bearbeiten
========================= */
if (isset($_POST["save_domain"])) {
$id = intval($_POST["id"]);
$subdomain = trim($_POST["subdomain"]);
DatabaseUpdate("Domains", "SUBDOMAIN = ?", "ID = ?", $subdomain, $id);
$statusMsg = "Domain wurde gespeichert.";
}
/* =========================
Domains laden
========================= */
$domains = DatabaseShow("Domains", "*");
?>
<h2>
Domain Verwaltung
</h2>
<?php if ($statusMsg): ?>
<div class="status-msg">
<?= htmlspecialchars($statusMsg) ?>
</div>
<?php endif; ?>
<div class="admin-grid">
<?php foreach ($domains as $domain): ?>
<form method="post" class="admin-card">
<input type="hidden" name="id" value="<?= $domain["ID"] ?>">
<label>Subdomain</label>
<input type="text" name="subdomain" value="<?= htmlspecialchars($domain["SUBDOMAIN"]) ?>">
<div style="margin-top:10px; display:flex; gap:10px;">
<button type="submit" name="save_domain" class="btn-save">
Speichern
</button>
<button type="submit" name="delete_domain" class="btn-delete">
Löschen
</button>
</div>
</form>
<?php endforeach; ?>
<!-- Neue Domain -->
<form method="post" class="admin-card new-item">
<h3>Neu</h3>
<label>Subdomain</label>
<input type="text" name="subdomain" placeholder="z.B. kleinerpenis.blackpi.ipv64.net">
<button type="submit" name="add_domain" class="btn-add">
Domain hinzufügen
</button>
</form>
</div>
-6
View File
@@ -1,6 +0,0 @@
<?php
session_start();
session_destroy();
header('Location: login.php');
exit;
@@ -1,97 +0,0 @@
<?php
$conn = db_connect();
// Dev-IPs
$devips = (new getSpecificData())->getWhitelistedIPs();
$devips_sql = "'" . implode("','", $devips) . "'";
// Filter & Custom Query
$customQuery = $_POST['custom_query'] ?? '';
$sql = '';
$useCustom = false;
// Custom Query Schutz
if ($customQuery) {
$forbidden = ['DELETE', 'UPDATE', 'INSERT', 'DROP', 'ALTER', 'TRUNCATE'];
$upper = strtoupper($customQuery);
foreach ($forbidden as $bad) {
if (strpos($upper, $bad) !== false) {
echo "<b style='color:red'>Gefährliche Query blockiert ($bad)</b>";
return;
}
}
if (stripos(trim($customQuery), "SELECT") !== 0) {
echo "<b style='color:red'>Nur SELECT erlaubt</b>";
return;
}
$sql = $customQuery;
$useCustom = true;
}
// Standard Query (falls kein Custom Query)
if (!$useCustom) {
// Einfache Standard-Query für Logs ohne Dev-IPs
$sql = "
SELECT WEBSITE, REQUEST_URL, FIRST_REQUEST, COUNTER
FROM logs
WHERE CLIENT_IP = '" . (new getSpecificData())->getClientIP() . "'
ORDER BY FIRST_REQUEST DESC
";
}
if (isset($_POST['delete_logs'])) {
DatabaseDelete(
"logs",
"CLIENT_IP = ?",
(new getSpecificData())->getClientIP()
);
header("Location: " . (new getSpecificData())->getReferer());
exit;
}
?>
<h1>📊 Logs</h1>
<?php
$daten = [];
if ($erg = $conn->query($sql)) {
while ($row = $erg->fetch_object()) {
$daten[] = $row;
}
}
?>
<?php if (!$daten): ?>
<b>Keine Daten gefunden</b>
<?php else: ?>
<div style="overflow-x:auto;">
<?php if ((new getSpecificData())->getIsAdmin()): ?>
<form method="post">
<button name="delete_logs" class="btn-delete" style="margin-bottom: 10px">Lösche Logs</button>
</form>
<?php endif; ?>
<table border="1" cellpadding="5" cellspacing="0" style="border-collapse:collapse;width:100%;">
<tr>
<?php foreach ($daten[0] as $key => $_): ?>
<th><?= htmlspecialchars($key) ?></th>
<?php endforeach; ?>
</tr>
<?php foreach ($daten as $row): ?>
<tr>
<?php foreach ($row as $val): ?>
<td><?= htmlspecialchars($val ?? '') ?></td>
<?php endforeach; ?>
</tr>
<?php endforeach; ?>
</table>
</div>
<?php endif; ?>
-77
View File
@@ -1,77 +0,0 @@
<?php
$dir = __DIR__ . "/../static";
$files = array_diff(scandir($dir), ['.', '..']);
echo '<button onclick="printFiles()">Alle Dateien drucken</button>';
echo '<div class="print-container">';
foreach ($files as $file) {
$url = "static/" . rawurlencode($file);
$ext = strtolower(pathinfo($file, PATHINFO_EXTENSION));
echo '<div class="print-page">';
if (in_array($ext, ['png','jpg','jpeg','webp'])) {
echo "<img src='$url'>";
}
elseif ($ext === "pdf") {
echo "<embed src='$url' type='application/pdf'>";
}
else {
echo "<p>$file kann nicht direkt gedruckt werden.</p>";
}
echo '</div>';
}
echo '</div>';
?>
<script>
function printFiles() {
console.log("Ich wurde gedrückt");
window.print();
}
</script>
<style>
.print-page {
width: 100%;
height: 100vh;
page-break-after: always;
}
.print-page img {
max-width: 100%;
}
.print-page embed {
width: 100%;
height: 100vh;
}
@media print {
body * {
visibility: hidden;
}
.print-container,
.print-container * {
visibility: visible;
}
.print-container {
position: absolute;
top: 0;
left: 0;
width: 100%;
}
}
</style>
-176
View File
@@ -1,176 +0,0 @@
<?php
$conn = db_connect();
// Dataset: Gesamte Logs
$sql_total = "SELECT DATE(FIRST_REQUEST) as tag, COUNT(*) as anzahl FROM logs GROUP BY DATE(FIRST_REQUEST) ORDER BY DATE(FIRST_REQUEST)";
$result_total = $conn->query($sql_total);
$totalDataAssoc = [];
$allLabels = [];
if ($result_total->num_rows > 0) {
while($row = $result_total->fetch_assoc()) {
$date = $row['tag'];
$totalDataAssoc[$date] = (int)$row['anzahl'];
$allLabels[] = $date;
}
}
// Nodes
$nodes = ['node1','node2','node3','node4'];
$nodeDataAssoc = [];
foreach ($nodes as $node) {
$sql = "SELECT DATE(FIRST_REQUEST) as tag, COUNT(*) as anzahl FROM logs WHERE SERVER_IP = '$node' GROUP BY DATE(FIRST_REQUEST)";
$result = $conn->query($sql);
$data = [];
if ($result->num_rows > 0) {
while($row = $result->fetch_assoc()) {
$date = $row['tag'];
$data[$date] = (int)$row['anzahl'];
if (!in_array($date, $allLabels)) {
$allLabels[] = $date;
}
}
}
$nodeDataAssoc[$node] = $data;
}
// Alle Labels chronologisch sortieren
sort($allLabels);
// Finales Array: Gesamt + Nodes
$finalTotalData = [];
$finalNodeData = [];
foreach ($allLabels as $label) {
$finalTotalData[] = isset($totalDataAssoc[$label]) ? $totalDataAssoc[$label] : 0;
foreach ($nodes as $node) {
if (!isset($finalNodeData[$node])) $finalNodeData[$node] = [];
$finalNodeData[$node][] = isset($nodeDataAssoc[$node][$label]) ? $nodeDataAssoc[$node][$label] : 0;
}
}
$conn->close();
?>
<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8">
<title>Logs Chart</title>
<script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
<script src="https://cdn.jsdelivr.net/npm/chartjs-plugin-zoom"></script>
</head>
<body>
<canvas id="logChart" width="900" height="500"></canvas>
<script>
const ctx = document.getElementById('logChart').getContext('2d');
const logChart = new Chart(ctx, {
type: 'line',
data: {
labels: <?php echo json_encode($allLabels); ?>,
datasets: [{
label: 'Gesamt',
data: <?php echo json_encode($finalTotalData); ?>,
borderColor: 'rgb(255, 0, 0)',
backgroundColor: 'rgba(0, 0, 0, 0.2)',
fill: false,
tension: 0
},
{
label: 'Node1',
data: <?php echo json_encode($finalNodeData['node1']); ?>,
borderColor: 'rgba(75, 192, 192, 1)',
backgroundColor: 'rgba(75, 192, 192, 0.2)',
fill: false,
tension: 0,
hidden: true,
},
{
label: 'Node2',
data: <?php echo json_encode($finalNodeData['node2']); ?>,
borderColor: 'rgba(255, 99, 132, 1)',
backgroundColor: 'rgba(255, 99, 132, 0.2)',
fill: false,
tension: 0,
hidden: true,
},
{
label: 'Node3',
data: <?php echo json_encode($finalNodeData['node3']); ?>,
borderColor: 'rgba(255, 206, 86, 1)',
backgroundColor: 'rgba(255, 206, 86, 0.2)',
fill: false,
tension: 0,
hidden: true,
},
{
label: 'Node4',
data: <?php echo json_encode($finalNodeData['node4']); ?>,
borderColor: 'rgba(54, 162, 235, 1)',
backgroundColor: 'rgba(54, 162, 235, 0.2)',
fill: false,
tension: 0,
hidden: true,
}
]
},
options: {
responsive: true,
maintainAspectRatio: false,
plugins: {
title: {
display: true,
text: 'Logs pro Tag nach Node und Gesamt'
},
legend: {
display: true,
position: 'top'
},
zoom: {
pan: {
enabled: true,
mode: 'x'
},
zoom: {
wheel: {
enabled: true
},
mode: 'x'
}
}
},
interaction: {
mode: 'index',
intersect: false
},
scales: {
x: {
title: {
display: true,
text: 'Datum'
}
},
y: {
beginAtZero: true,
title: {
display: true,
text: 'Anzahl Logs'
}
}
}
}
});
</script>
</body>
</html>
-174
View File
@@ -1,174 +0,0 @@
<?php
$conn = db_connect();
// Dev-IPs
$devips = (new getSpecificData())->getWhitelistedIPs();
$devips_sql = "'" . implode("','", $devips) . "'";
// Filter
$filter = $_GET['filter'] ?? 'today';
$customQuery = $_POST['custom_query'] ?? '';
$useCustom = false;
// Custom Query Schutz
if ($customQuery) {
$forbidden = ['DELETE', 'UPDATE', 'INSERT', 'DROP', 'ALTER', 'TRUNCATE'];
$upper = strtoupper($customQuery);
foreach ($forbidden as $bad) {
if (strpos($upper, $bad) !== false) {
echo "<b style='color:red'>Gefährliche Query blockiert ($bad)</b>";
return;
}
}
if (stripos(trim($customQuery), "SELECT") !== 0) {
echo "<b style='color:red'>Nur SELECT erlaubt</b>";
return;
}
$sql = $customQuery;
$useCustom = true;
}
// Standard Queries
if (!$useCustom) {
switch ($filter) {
case 'today':
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE CLIENT_IP NOT IN ($devips_sql)
AND (WEBSITE != 'backend.blackpi.ipv64.net' OR WEBSITE IS NULL)
AND DATE(FIRST_REQUEST) = CURDATE()
ORDER BY FIRST_REQUEST DESC
";
break;
case 'counterperip':
$sql = "
SELECT CLIENT_IP, LAND, USER_AGENT, SUM(counter) AS gesamt_counter
FROM logs
WHERE CLIENT_IP NOT IN ($devips_sql)
AND (WEBSITE != 'backend.blackpi.ipv64.net' OR WEBSITE IS NULL)
GROUP BY CLIENT_IP
ORDER BY gesamt_counter DESC
";
break;
case 'node1':
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE `SERVER_IP` = 'node1'
AND (WEBSITE != 'backend.blackpi.ipv64.net' OR WEBSITE IS NULL)
ORDER BY `FIRST_REQUEST` DESC
";
break;
case 'node2':
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE `SERVER_IP` = 'node2'
AND (WEBSITE != 'backend.blackpi.ipv64.net' OR WEBSITE IS NULL)
ORDER BY `FIRST_REQUEST` DESC
";
break;
case 'node3':
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE `SERVER_IP` = 'node3'
AND (WEBSITE != 'backend.blackpi.ipv64.net' OR WEBSITE IS NULL)
ORDER BY `FIRST_REQUEST` DESC
";
break;
case 'node4':
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE `SERVER_IP` = 'node4'
AND (WEBSITE != 'backend.blackpi.ipv64.net' OR WEBSITE IS NULL)
ORDER BY `FIRST_REQUEST` DESC
";
break;
default:
$sql = "
SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE`
FROM logs
WHERE CLIENT_IP NOT IN ($devips_sql)
AND (WEBSITE != 'backend.blackpi.ipv64.net' OR WEBSITE IS NULL)
ORDER BY FIRST_REQUEST DESC
";
}
}
?>
<h1>📊 Logs</h1>
<form method="GET" action="index.php">
<input type="hidden" name="service" value="<?= htmlspecialchars($_GET['service'] ?? 'logs') ?>">
<select name="filter" onchange="this.form.submit()">
<?php
$options = ['alle','today','node1','node2','node3','node4','counterperip'];
foreach ($options as $opt) {
$sel = ($filter === $opt) ? 'selected' : '';
echo "<option value='$opt' $sel>$opt</option>";
}
?>
</select>
</form>
<!-- <br>
<form method="POST">
<textarea name="custom_query" style="width:100%;height:60px;"><?= htmlspecialchars($customQuery) ?></textarea>
<br>
<button type="submit">Query ausführen</button>
</form>
<hr> -->
<br>
<?php
$daten = [];
if ($erg = $conn->query($sql)) {
// echo "<pre style='background:var(--bg-soft,#f4f4f4);padding:10px;'>$sql</pre>";
while ($row = $erg->fetch_object()) {
$daten[] = $row;
}
}
?>
<?php if (!$daten): ?>
<b>Keine Daten gefunden</b>
<?php else: ?>
<div style="overflow-x:auto;">
<table border="1" cellpadding="5" cellspacing="0" style="border-collapse:collapse;width:100%;">
<tr>
<?php foreach ($daten[0] as $key => $_): ?>
<th><?= htmlspecialchars($key) ?></th>
<?php endforeach; ?>
</tr>
<?php foreach ($daten as $row): ?>
<tr>
<?php foreach ($row as $val): ?>
<td><?= htmlspecialchars($val ?? '') ?></td>
<?php endforeach; ?>
</tr>
<?php endforeach; ?>
</table>
</div>
<?php endif; ?>
-317
View File
@@ -1,317 +0,0 @@
<?php
$configFile = 'config.php';
$backupDir = 'config_backups';
if (!is_dir($backupDir)) {
mkdir($backupDir, 0755, true);
}
require $configFile;
if (isset($_POST['password'])) {
if (isset($superuser['admin']['password']) && $_POST['password'] === $superuser['admin']['password']) {
$_SESSION['logged_in'] = true;
} else {
$error = "Falsches Passwort!";
}
}
if (isset($_GET['logout'])) {
session_destroy();
header("Location: " . $_SERVER['PHP_SELF']);
exit;
}
if (isset($_POST['logout'])) {
unset($_SESSION['logged_in']);
header("Location: " . (new getSpecificData())->getReferer());
exit;
}
if (isset($_POST['save']) && ($_SESSION['logged_in'] ?? false)) {
copy($configFile, $backupDir . '/config_' . date('Y-m-d_H-i-s') . '.php');
$newServices = [];
$serviceToGroupMapping = [];
if(isset($_POST['services'])){
foreach ($_POST['services'] as $id => $s) {
$finalId = !empty($s['new_id']) ? trim($s['new_id']) : $id;
if (empty($finalId)) continue;
$newServices[$finalId] = [
'name' => $s['name'],
'active' => isset($s['active']),
'adminOnly' => isset($s['adminOnly'])
];
if(!empty($s['targetGroup'])) {
$serviceToGroupMapping[$s['targetGroup']][] = $finalId;
}
}
}
$newServiceGroups = [];
if(isset($_POST['serviceGroups'])){
foreach ($_POST['serviceGroups'] as $id => $groupData) {
$finalId = !empty($groupData['new_id']) ? trim($groupData['new_id']) : $id;
if (empty($finalId)) continue;
$currentServices = $serviceToGroupMapping[$finalId] ?? ($serviceGroups[$id]['services'] ?? []);
$newServiceGroups[$finalId] = [
'label' => $groupData['label'],
'defaultOpen' => isset($groupData['defaultOpen']),
'services' => array_values(array_unique($currentServices))
];
}
}
$newLinkGroups = [];
if(isset($_POST['linkGroups'])){
foreach ($_POST['linkGroups'] as $id => $lg) {
$finalId = !empty($lg['new_id']) ? trim($lg['new_id']) : $id;
if (empty($finalId)) continue;
$newLinkGroups[$finalId] = [
'label' => $lg['label'],
'color' => $lg['color'],
'defaultOpen' => isset($lg['defaultOpen'])
];
}
}
$newLinkButtons = [];
if(isset($_POST['linkButtons'])){
foreach ($_POST['linkButtons'] as $btn) {
if (empty($btn['label'])) continue;
$newLinkButtons[] = [
'label' => $btn['label'],
'url' => $btn['url'],
'newTab' => isset($btn['newTab']),
'adminOnly' => isset($btn['adminOnly']),
'group' => $btn['group']
];
}
}
$content = "<?php\n\n";
$content .= '$superuser = ' . var_export($superuser, true) . ";\n\n";
$content .= '$serviceGroups = ' . var_export($newServiceGroups, true) . ";\n\n";
$content .= '$services = ' . var_export($newServices, true) . ";\n\n";
$content .= '$linkGroups = ' . var_export($newLinkGroups, true) . ";\n\n";
$content .= '$linkButtons = ' . var_export($newLinkButtons, true) . ";\n";
if (file_put_contents($configFile, $content)) {
if (function_exists('opcache_invalidate')) { @opcache_invalidate($configFile, true); }
$_SESSION['status_message'] = "✅ Konfiguration erfolgreich aktualisiert!";
header("Location: " . $_SERVER['PHP_SELF']);
exit;
}
}
$message = $_SESSION['status_message'] ?? null;
unset($_SESSION['status_message']);
?>
<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8">
<title>Admin Site Control</title>
<link rel="stylesheet" href="style.css">
</head>
<body class="<?= ($_SESSION['dark_mode'] ?? false) ? 'dark-mode' : '' ?>">
<div class="content">
<?php if (!($_SESSION['logged_in'] ?? false)): ?>
<div class="login-container">
<div class="login-box">
<form method="post">
<h2>🔐 Login</h2>
<?php if(isset($error)): ?>
<div class="status-msg" style="background:#dc3545; color:#fff;"><?= htmlspecialchars($error) ?>
</div>
<?php endif; ?>
<input type="password" name="password" placeholder="Passwort" required>
<button type="submit">Einloggen</button>
</form>
</div>
</div>
<?php else: ?>
<div class="content">
<h2>Seitenverwaltung</h2>
<form method="post">
<button type="submit" name="logout" id="logoutSiteButton">Logout</button>
</form>
<?php if($message): ?><div class="status-msg"><?= htmlspecialchars($message) ?></div><?php endif; ?>
<form method="post">
<!-- Sidebar Gruppen -->
<h2>📦 Sidebar Gruppen
<button type="button" class="btn-add" onclick="addNew('serviceGroup')">+ Neue Gruppe</button>
</h2>
<div class="admin-grid" id="container-serviceGroup">
<?php foreach ($serviceGroups as $id => $group): ?>
<div class="admin-card">
<span class="badge">ID: <?= htmlspecialchars($id) ?></span>
<input type="text" name="serviceGroups[<?= $id ?>][label]"
value="<?= htmlspecialchars($group['label']) ?>" placeholder="Anzeigename">
<label>
<input type="checkbox" name="serviceGroups[<?= $id ?>][defaultOpen]"
<?= ($group['defaultOpen'] ?? false) ? 'checked' : '' ?>>
Offen
</label>
</div>
<?php endforeach; ?>
</div>
<!-- Sidebar Services -->
<h2>🖥 Sidebar Services
<button type="button" class="btn-add" onclick="addNew('service')">+ Neuer Service</button>
</h2>
<div class="admin-grid" id="container-service">
<?php foreach ($services as $id => $s): ?>
<div class="admin-card">
<span class="badge">Datei: <?= htmlspecialchars($id) ?>.php</span>
<input type="text" name="services[<?= $id ?>][name]" value="<?= htmlspecialchars($s['name']) ?>"
placeholder="Name">
<label>Sidebar-Gruppe:</label>
<select name="services[<?= $id ?>][targetGroup]">
<?php foreach ($serviceGroups as $gid => $g): ?>
<option value="<?= $gid ?>"
<?= (isset($g['services']) && in_array($id, $g['services'])) ? 'selected' : '' ?>>
<?= htmlspecialchars($g['label']) ?>
</option>
<?php endforeach; ?>
</select>
<label>
<input type="checkbox" name="services[<?= $id ?>][active]"
<?= ($s['active'] ?? false) ? 'checked' : '' ?>>
Aktiv
</label>
|
<label>
<input type="checkbox" name="services[<?= $id ?>][adminOnly]"
<?= ($s['adminOnly'] ?? false) ? 'checked' : '' ?>>
Nur Admins
</label>
</div>
<?php endforeach; ?>
</div>
<!-- Dashboard Kategorien -->
<h2>🎨 Dashboard Kategorien
<button type="button" class="btn-add" onclick="addNew('linkGroup')">+ Neue Kategorie</button>
</h2>
<div class="admin-grid" id="container-linkGroup">
<?php foreach ($linkGroups as $id => $lg): ?>
<div class="admin-card">
<span class="badge">ID: <?= htmlspecialchars($id) ?></span>
<input type="text" name="linkGroups[<?= $id ?>][label]"
value="<?= htmlspecialchars($lg['label']) ?>" placeholder="Gruppen-Label">
<label>Farbe:</label>
<input type="color" name="linkGroups[<?= $id ?>][color]"
value="<?= $lg['color'] ?? '#3498db' ?>">
<label>
<input type="checkbox" name="linkGroups[<?= $id ?>][defaultOpen]"
<?= ($lg['defaultOpen'] ?? false) ? 'checked' : '' ?>>
Offen
</label>
</div>
<?php endforeach; ?>
</div>
<!-- Dashboard Kacheln -->
<h2>🔘 Dashboard Kacheln
<button type="button" class="btn-add" onclick="addNew('linkButton')">+ Neue Kachel</button>
</h2>
<div class="admin-grid" id="container-linkButton">
<?php foreach ($linkButtons as $key => $btn): ?>
<div class="admin-card">
<input type="text" name="linkButtons[<?= $key ?>][label]"
value="<?= htmlspecialchars($btn['label']) ?>" placeholder="Name">
<input type="text" name="linkButtons[<?= $key ?>][url]"
value="<?= htmlspecialchars($btn['url']) ?>" placeholder="URL">
<label>Dashboard Kategorie:</label>
<select name="linkButtons[<?= $key ?>][group]">
<?php foreach ($linkGroups as $id => $lg): ?>
<option value="<?= $id ?>" <?= ($btn['group'] == $id) ? 'selected' : '' ?>>
<?= htmlspecialchars($lg['label']) ?>
</option>
<?php endforeach; ?>
</select>
<div style="margin-top:5px;">
<label>
<input type="checkbox" name="linkButtons[<?= $key ?>][newTab]"
<?= ($btn['newTab'] ?? false) ? 'checked' : '' ?>>
Neuer Tab
</label>
|
<label>
<input type="checkbox" name="linkButtons[<?= $key ?>][adminOnly]"
<?= ($btn['adminOnly'] ?? false) ? 'checked' : '' ?>>
Nur Admins
</label>
</div>
</div>
<?php endforeach; ?>
</div>
<div class="save-bar">
<button type="submit" name="save" class="btn-save">💾 Gesamte Konfiguration speichern</button>
</div>
</form>
</div>
<?php endif; ?>
</div>
<script>
function addNew(type) {
const container = document.getElementById('container-' + type);
const tempId = 'new_' + Date.now();
const card = document.createElement('div');
card.className = 'admin-card new-item';
let html = `<div><span class="badge">Neu hinzufügen</span></div>`;
if (type === 'serviceGroup') {
html +=
`<input type="text" name="serviceGroups[${tempId}][new_id]" placeholder="ID">
<input type="text" name="serviceGroups[${tempId}][label]" placeholder="Name">
<label><input type="checkbox" name="serviceGroups[${tempId}][defaultOpen]" checked> Ausgeklappt</label>`;
} else if (type === 'service') {
html += `<input type="text" name="services[${tempId}][new_id]" placeholder="Datei ohne .php">
<input type="text" name="services[${tempId}][name]" placeholder="Anzeigename">
<label>Gruppe:</label>
<select name="services[${tempId}][targetGroup]">
<?php foreach ($serviceGroups as $gid => $gl): ?>
<option value="<?= $gid ?>"><?= $gl['label'] ?></option>
<?php endforeach; ?>
</select>
<label><input type="checkbox" name="services[${tempId}][active]" checked> Aktiv</label>`;
} else if (type === 'linkGroup') {
html += `<input type="text" name="linkGroups[${tempId}][new_id]" placeholder="ID">
<input type="text" name="linkGroups[${tempId}][label]" placeholder="Label">
<input type="color" name="linkGroups[${tempId}][color]" value="#3498db">`;
} else if (type === 'linkButton') {
html += `<input type="text" name="linkButtons[${tempId}][label]" placeholder="Anzeigename">
<input type="text" name="linkButtons[${tempId}][url]" placeholder="https://...">
<label>Kategorie:</label>
<select name="linkButtons[${tempId}][group]">
<?php foreach ($linkGroups as $gid => $gl): ?>
<option value="<?= $gid ?>"><?= $gl['label'] ?></option>
<?php endforeach; ?>
</select>
<label><input type="checkbox" name="linkButtons[${tempId}][newTab]" checked> Tab</label>
| <label><input type="checkbox" name="linkButtons[${tempId}][adminOnly]"> Nur Admins</label>`;
}
card.innerHTML = html;
container.appendChild(card);
card.scrollIntoView({
behavior: 'smooth'
});
}
</script>
</body>
</html>
-54
View File
@@ -1,54 +0,0 @@
<?php
$tables = DatabaseShowTables();
$selectedTable = $_GET['table'] ?? null;
?>
<h2>Datenbank Struktur</h2>
<form method="GET">
<input type="hidden" name="service" value="tabellen">
<label for="table">Tabelle auswählen:</label>
<select name="table" id="table" onchange="this.form.submit()">
<option value="">-- Bitte wählen --</option>
<?php foreach ($tables as $table): ?>
<option value="<?= htmlspecialchars($table) ?>" <?= ($selectedTable === $table) ? 'selected' : '' ?>>
<?= htmlspecialchars($table) ?>
</option>
<?php endforeach; ?>
</select>
</form>
<?php
if ($selectedTable && in_array($selectedTable, $tables)) {
$structure = DatabaseShowTableStructure($selectedTable);
echo "<div class='table-container'>";
echo "<table class='db-table'>";
echo "<tr>
<th>Field</th>
<th>Type</th>
<th>Null</th>
<th>Key</th>
<th>Default</th>
<th>Extra</th>
</tr>";
foreach ($structure as $column) {
echo "<tr>";
echo "<td>" . ($column['Field']) . "</td>";
echo "<td>" . ($column['Type']) . "</td>";
echo "<td>" . ($column['Null']) . "</td>";
echo "<td>" . ($column['Key']) . "</td>";
echo "<td>" . ($column['Default']) . "</td>";
echo "<td>" . ($column['Extra']) . "</td>";
echo "</tr>";
}
echo "</table>";
echo "</div>";
}
?>
-103
View File
@@ -1,103 +0,0 @@
<?php
$conn = db_connect();
$sql = "SELECT ZEIT, AKTUELL FROM Wetter";
$result = $conn->query($sql);
$labels = [];
$data = [];
if ($result->num_rows > 0) {
while($row = $result->fetch_assoc()) {
$labels[] = $row['ZEIT'];
$data[] = (float)$row['AKTUELL'];
}
}
$conn->close();
?>
<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8">
<script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
<script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
<script src="https://cdn.jsdelivr.net/npm/chartjs-plugin-zoom"></script>
</head>
<body>
<canvas id="logChart" width="600" height="400"></canvas>
<script>
const ctx = document.getElementById('logChart').getContext('2d');
const logChart = new Chart(ctx, {
type: 'line',
data: {
labels: <?php echo json_encode($labels); ?>,
datasets: [{
label: 'Wetter',
data: <?php echo json_encode($data); ?>,
borderColor: 'rgba(75, 192, 192, 1)',
backgroundColor: 'rgba(75, 192, 192, 0.2)',
fill: false,
tension: 0
}]
},
options: {
responsive: true,
maintainAspectRatio: false,
plugins: {
title: {
display: true,
},
legend: {
display: true,
position: 'top'
},
zoom: {
pan: {
enabled: true,
mode: 'x',
},
zoom: {
wheel: {
enabled: true,
},
mode: 'x',
}
}
},
interaction: {
mode: 'index',
intersect: false
},
scales: {
x: {
title: {
display: true,
text: 'Zeitraum'
}
},
y: {
min: -10,
max: 40,
title: {
display: true,
text: 'Temperatur in °C'
},
ticks: {
stepSize: 1
},
beginAtZero: true
}
}
}
});
</script>
</body>
</html>
@@ -0,0 +1,227 @@
<?php
namespace MVC\Controller;
use MVC\Core\Controller;
use MVC\Model\User;
use MVC\Model\Variable;
class AdminController extends Controller {
public function user_control() {
global $isAdmin, $superuser;
$specificData = new \getSpecificData();
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (isset($_POST['add_user']) && $isAdmin) {
User::insert([
'NAME' => $_POST['name'],
'NACHNAME' => $_POST['nachname'],
'EMAIL' => $_POST['email'],
'PASSWORD' => password_hash($_POST['passwort'], PASSWORD_DEFAULT),
'ROLLE' => $_POST['rolle'],
'ADMIN' => $_POST['admin'] ?? 0,
'HOME_IP' => $_POST['home_ip']
]);
header("Location: " . $specificData->getReferer());
exit;
}
if (isset($_POST['delete_user']) && $isAdmin) {
User::delete("NAME = ? AND NACHNAME = ? AND EMAIL = ?", $_POST['delete_name'], $_POST['delete_nachname'], $_POST['delete_email']);
header("Location: " . $specificData->getReferer());
exit;
}
if (isset($_POST['password'])) {
if (isset($superuser['admin']['password']) && $_POST['password'] === $superuser['admin']['password']) {
$_SESSION['logged_in'] = true;
} else {
$error = "Falsches Passwort!";
}
}
if (isset($_POST['logout'])) {
unset($_SESSION['logged_in']);
header("Location: " . $specificData->getReferer());
exit;
}
}
$users = $isAdmin ? User::all() : User::getByName($specificData->getUsername());
return $this->render('user_control', [
'users' => $users,
'isAdmin' => $isAdmin,
'error' => $error ?? null,
'loggedIn' => $_SESSION['logged_in'] ?? false
]);
}
public function variablen_control() {
global $isAdmin;
if (!$isAdmin) return "Access Denied";
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['toggle_variable'])) {
Variable::toggle($_POST['variablenname']);
header("Location: " . (new \getSpecificData())->getReferer());
exit;
}
return $this->render('variablen_control', ['variablen' => Variable::all()]);
}
public function services_control() {
global $isAdmin, $superuser, $serviceGroups, $services, $linkGroups, $linkButtons;
if (!$isAdmin) return "Access Denied";
$configFile = 'config.php';
$backupDir = 'config_backups';
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (isset($_POST['password'])) {
if (isset($superuser['admin']['password']) && $_POST['password'] === $superuser['admin']['password']) {
$_SESSION['logged_in'] = true;
} else {
$error = "Falsches Passwort!";
}
}
if (isset($_POST['logout'])) {
unset($_SESSION['logged_in']);
header("Location: " . (new \getSpecificData())->getReferer());
exit;
}
if (isset($_POST['save']) && ($_SESSION['logged_in'] ?? false)) {
if (!is_dir($backupDir)) mkdir($backupDir, 0755, true);
copy($configFile, $backupDir . '/config_' . date('Y-m-d_H-i-s') . '.php');
$newServices = [];
$serviceToGroupMapping = [];
if(isset($_POST['services'])){
foreach ($_POST['services'] as $id => $s) {
$finalId = !empty($s['new_id']) ? trim($s['new_id']) : $id;
if (empty($finalId)) continue;
$newServices[$finalId] = [
'name' => $s['name'],
'active' => isset($s['active']),
'adminOnly' => isset($s['adminOnly'])
];
if(!empty($s['targetGroup'])) {
$serviceToGroupMapping[$s['targetGroup']][] = $finalId;
}
}
(new \RightsController())->RightsHandler($s['name']);
}
$newServiceGroups = [];
if(isset($_POST['serviceGroups'])){
foreach ($_POST['serviceGroups'] as $id => $groupData) {
$finalId = !empty($groupData['new_id']) ? trim($groupData['new_id']) : $id;
if (empty($finalId)) continue;
$currentServices = $serviceToGroupMapping[$finalId] ?? ($serviceGroups[$id]['services'] ?? []);
$newServiceGroups[$finalId] = [
'label' => $groupData['label'],
'defaultOpen' => isset($groupData['defaultOpen']),
'services' => array_values(array_unique($currentServices))
];
}
}
$newLinkGroups = [];
if(isset($_POST['linkGroups'])){
foreach ($_POST['linkGroups'] as $id => $lg) {
$finalId = !empty($lg['new_id']) ? trim($lg['new_id']) : $id;
if (empty($finalId)) continue;
$newLinkGroups[$finalId] = [
'label' => $lg['label'],
'color' => $lg['color'],
'defaultOpen' => isset($lg['defaultOpen'])
];
}
}
$newLinkButtons = [];
if(isset($_POST['linkButtons'])){
foreach ($_POST['linkButtons'] as $btn) {
if (empty($btn['label'])) continue;
$newLinkButtons[] = [
'label' => $btn['label'],
'url' => $btn['url'],
'newTab' => isset($btn['newTab']),
'adminOnly' => isset($btn['adminOnly']),
'group' => $btn['group']
];
}
}
$content = "<?php\n\n";
$content .= '$superuser = ' . var_export($superuser, true) . ";\n\n";
$content .= '$serviceGroups = ' . var_export($newServiceGroups, true) . ";\n\n";
$content .= '$services = ' . var_export($newServices, true) . ";\n\n";
$content .= '$linkGroups = ' . var_export($newLinkGroups, true) . ";\n\n";
$content .= '$linkButtons = ' . var_export($newLinkButtons, true) . ";\n";
if (file_put_contents($configFile, $content)) {
if (function_exists('opcache_invalidate')) { @opcache_invalidate($configFile, true); }
$_SESSION['status_message'] = "✅ Konfiguration erfolgreich aktualisiert!";
header("Location: " . (new \getSpecificData())->getReferer());
exit;
}
}
}
$message = $_SESSION['status_message'] ?? null;
unset($_SESSION['status_message']);
return $this->render('services_control', [
'serviceGroups' => $serviceGroups,
'services' => $services,
'linkGroups' => $linkGroups,
'linkButtons' => $linkButtons,
'loggedIn' => $_SESSION['logged_in'] ?? false,
'error' => $error ?? null,
'message' => $message
]);
}
public function data_info() {
global $isAdmin;
if (!$isAdmin) return "Access Denied";
$data = new \getSpecificData();
$allData = $data->getAllData();
$groupedData = [];
foreach ($allData as $key => $value) {
if (strpos($key, ' - ') !== false) {
[$group, $field] = explode(' - ', $key, 2);
} else {
$group = 'Other';
$field = $key;
}
$groupedData[$group][$field] = $value;
}
return $this->render('data_info', ['groupedData' => $groupedData]);
}
public function tabellen() {
global $isAdmin;
if (!$isAdmin) return "Access Denied";
$tables = \DatabaseShowTables();
$selectedTable = $_GET['table'] ?? null;
$structure = [];
if ($selectedTable && in_array($selectedTable, $tables)) {
$structure = \DatabaseShowTableStructure($selectedTable);
}
return $this->render('tabellen', [
'tables' => $tables,
'selectedTable' => $selectedTable,
'structure' => $structure
]);
}
}
@@ -0,0 +1,31 @@
<?php
namespace MVC\Controller;
use MVC\Core\Controller;
class ApiController extends Controller {
public function api_tester() {
$apiDir = realpath(__DIR__ . '/../../../api');
$apiOptions = [];
if ($apiDir !== false) {
$iterator = new \RecursiveIteratorIterator(
new \RecursiveDirectoryIterator($apiDir, \RecursiveDirectoryIterator::SKIP_DOTS)
);
foreach ($iterator as $file) {
if (!$file->isFile() || $file->getExtension() !== 'php') continue;
$relativePath = str_replace($apiDir . DIRECTORY_SEPARATOR, '', $file->getPathname());
$relativePath = str_replace('\\', '/', $relativePath);
$apiOptions[] = 'api/' . $relativePath;
}
}
sort($apiOptions);
return $this->render('api_tester', [
'apiOptions' => $apiOptions,
'defaultToken' => "15a437d128c918633e57dc7d18118a073b807644f21731ed5a7ebcf3eca9e242"
]);
}
}
@@ -0,0 +1,24 @@
<?php
namespace MVC\Controller;
use MVC\Core\Controller;
use MVC\Model\Documentation;
class DocumentationController extends Controller {
public function index() {
$query = $_GET['q'] ?? '';
$page = isset($_GET['page']) ? (int)$_GET['page'] : 1;
$limit = 5;
$results = Documentation::search($query, $page, $limit);
return $this->render('documentation', [
'docs' => $results['rows'],
'total' => $results['total'],
'pages' => $results['pages'],
'currentPage' => $results['current_page'],
'query' => $query
]);
}
}
@@ -0,0 +1,35 @@
<?php
namespace MVC\Controller;
use MVC\Core\Controller;
use MVC\Model\Domain;
class DomainController extends Controller {
public function domains() {
$statusMsg = "";
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (isset($_POST["add_domain"])) {
$subdomain = trim($_POST["subdomain"]);
if ($subdomain != "") {
Domain::insert(['SUBDOMAIN' => $subdomain]);
$statusMsg = "Domain wurde hinzugefügt.";
}
}
if (isset($_POST["delete_domain"])) {
Domain::delete("ID = ?", intval($_POST["id"]));
$statusMsg = "Domain wurde gelöscht.";
}
if (isset($_POST["save_domain"])) {
Domain::update(['SUBDOMAIN' => trim($_POST["subdomain"])], "ID = ?", intval($_POST["id"]));
$statusMsg = "Domain wurde gespeichert.";
}
}
return $this->render('domains', [
'domains' => Domain::all(),
'statusMsg' => $statusMsg
]);
}
}
@@ -0,0 +1,93 @@
<?php
namespace MVC\Controller;
use MVC\Core\Controller;
use MVC\Model\Log;
class LogController extends Controller {
protected function getDevIpsSql() {
$devips = (new \getSpecificData())->getWhitelistedIPs();
return "'" . implode("','", $devips) . "'";
}
protected function handleLogs($websiteFilter, $serviceName) {
$devips_sql = $this->getDevIpsSql();
$filter = $_GET['filter'] ?? 'today';
$daten = Log::getFiltered($websiteFilter, $devips_sql, $filter);
return $this->render('logs', [
'daten' => $daten,
'filter' => $filter,
'serviceName' => $serviceName
]);
}
public function public_request_logs() {
return $this->handleLogs("(WEBSITE != 'backend.blackpi.ipv64.net' OR WEBSITE IS NULL)", 'public_request_logs');
}
public function backend_request_logs() {
return $this->handleLogs("(WEBSITE = 'backend.blackpi.ipv64.net')", 'backend_request_logs');
}
public function personal_request_logs() {
return $this->handleLogs("1=1", 'personal_request_logs');
}
public function public_request_chart() {
$totalData = Log::getChartData();
$totalDataAssoc = [];
$allLabels = [];
foreach ($totalData as $row) {
$totalDataAssoc[$row['tag']] = (int)$row['anzahl'];
$allLabels[] = $row['tag'];
}
$nodes = ['node1','node2','node3','node4'];
$finalNodeData = [];
foreach ($nodes as $node) {
$nodeData = Log::getNodeChartData($node);
$nodeAssoc = [];
foreach ($nodeData as $row) {
$nodeAssoc[$row['tag']] = (int)$row['anzahl'];
if (!in_array($row['tag'], $allLabels)) $allLabels[] = $row['tag'];
}
// Re-map to all labels
$finalNodeData[$node] = $nodeAssoc;
}
sort($allLabels);
$finalTotalData = [];
$mappedNodeData = [];
foreach ($allLabels as $label) {
$finalTotalData[] = $totalDataAssoc[$label] ?? 0;
foreach ($nodes as $node) {
$mappedNodeData[$node][] = $finalNodeData[$node][$label] ?? 0;
}
}
return $this->render('public_chart', [
'allLabels' => $allLabels,
'finalTotalData' => $finalTotalData,
'finalNodeData' => $mappedNodeData
]);
}
public function backend_request_chart() {
$data = Log::getChartData("WEBSITE = 'backend.blackpi.ipv64.net'");
$labels = [];
$counts = [];
foreach ($data as $row) {
$labels[] = $row['tag'];
$counts[] = (int)$row['anzahl'];
}
return $this->render('backend_chart', [
'labels' => $labels,
'data' => $counts
]);
}
}
@@ -0,0 +1,129 @@
<?php
namespace MVC\Controller;
use MVC\Core\Controller;
use MVC\Model\CompanyReport;
use MVC\Model\SchoolReport;
use MVC\Model\Overtime;
class ReportController extends Controller {
public function berichte() {
$mode = $_GET['mode'] ?? 'fk';
if ($mode === 'normal') {
$data = CompanyReport::all();
} else {
$data = SchoolReport::allWithFK();
}
$data = array_reverse($data);
$displayData = (is_array($data) && isset($data['rows'])) ? $data['rows'] : $data;
$count = is_array($displayData) ? count($displayData) : 0;
return $this->render('berichte', [
'mode' => $mode,
'displayData' => $displayData,
'count' => $count,
'selectedService' => $_GET['service'] ?? 'berichte'
]);
}
public function berichte_arbeit_gen() {
if (empty($_SESSION['user_logged_in'])) return "Access Denied";
$wochenArray = CompanyReport::getWochen();
$startDate = $_POST['start_date'] ?? date('Y-m-d', strtotime('-5 days'));
$endDate = $_POST['end_date'] ?? date('Y-m-d');
$berichteArray = CompanyReport::getByDateRange($startDate, $endDate);
$pdfFile = null;
if (isset($_POST['generate_pdf']) && count($berichteArray) > 0) {
$pdfFile = $this->generatePDF($berichteArray);
}
return $this->render('berichte_arbeit_gen', [
'startDate' => $startDate,
'endDate' => $endDate,
'wochenArray' => $wochenArray,
'pdfFile' => $pdfFile,
'berichteArray' => $berichteArray
]);
}
protected function generatePDF($berichteArray) {
$Einzelstunden = "2";
$Gesamtstunden = "8";
$data = [
'Text1' => '', // Nr
'Text2' => $berichteArray[0]['DATUM'] ?? '',
'Text3' => end($berichteArray)['DATUM'] ?? '',
'Text4' => 'Eckhardt',
'Text5' => 'Bruno Renato',
'Text6' => '1',
];
$fieldIndex = 7;
foreach ($berichteArray as $bericht) {
for ($i = 1; $i <= 4; $i++) {
$data["Text$fieldIndex"] = $bericht["PROZESS_$i"] ?? '';
$fieldIndex++;
$data["Text$fieldIndex"] = $Einzelstunden;
$fieldIndex++;
}
$data["Text$fieldIndex"] = $Gesamtstunden;
$fieldIndex++;
}
$fdfFields = array_map(function($field, $value){
$value = str_replace(['(', ')'], ['\(', '\)'], $value);
return "<< /T ($field) /V ($value) >>";
}, array_keys($data), $data);
$fdf = "%FDF-1.2\n1 0 obj\n<<\n/FDF << /Fields [\n" . implode("\n", $fdfFields) . "\n] >> >>\nendobj\ntrailer\n<< /Root 1 0 R >>\n%%EOF";
$fdfFile = tempnam(sys_get_temp_dir(), 'fdf_') . '.fdf';
file_put_contents($fdfFile, $fdf);
$specificData = new \getSpecificData();
$inputPdf = $specificData->getDocumentRoot() . '/templates/ausbildungsnachweis.pdf';
$outputPdf = $specificData->getDocumentRoot() . '/static/ausbildungsnachweis_' . $berichteArray[0]['DATUM'] . '-' . end($berichteArray)['DATUM'] . '.pdf';
exec("pdftk $inputPdf fill_form $fdfFile output $outputPdf flatten");
unlink($fdfFile);
return $outputPdf;
}
public function zeiterfassung() {
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['add_overtime'])) {
Overtime::insert([
'DATUM' => $_POST['ot_date'],
'MINUTEN' => (int)$_POST['ot_minutes'],
'GRUND' => $_POST['ot_reason']
]);
\redirectToWebsite((new \getSpecificData())->getReferer());
exit;
}
$minuten_berichte = CompanyReport::getTotalOvertime();
$minuten_abbau = Overtime::getSumByReason('Abbau');
$minuten_aufbau = Overtime::getSumByReason('Aufbau');
$gesamt_minuten = $minuten_berichte - $minuten_abbau + $minuten_aufbau;
return $this->render('zeiterfassung', [
'gesamt_minuten' => $gesamt_minuten,
'username' => $_SESSION['username']
]);
}
public function print_static() {
$dir = (new \getSpecificData())->getDocumentRoot() . "/static";
$files = is_dir($dir) ? array_diff(scandir($dir), ['.', '..']) : [];
return $this->render('print_static', ['files' => $files]);
}
}
@@ -0,0 +1,48 @@
<?php
namespace MVC\Controller;
use MVC\Core\Controller;
class ServiceController extends Controller {
public function home_info() {
$username = $_SESSION['username'] ?? 'Gast';
$is_superuser = $_SESSION['is_superuser'] ?? false;
$is_admin = $_SESSION['is_admin'] ?? false;
$db_res = \DatabaseShow(
"Benutzer",
"NACHNAME, EMAIL, ROLLE, HOME_IP",
"NAME = ?",
$username
);
return $this->render('home_info', [
'username' => $username,
'is_superuser' => $is_superuser,
'is_admin' => $is_admin,
'db_res' => $db_res
]);
}
public function links() {
global $linkButtons, $linkGroups, $isAdmin;
return $this->render('links', [
'linkButtons' => $linkButtons,
'linkGroups' => $linkGroups,
'isAdmin' => $isAdmin
]);
}
public function logout() {
session_destroy();
header('Location: login.php');
exit;
}
// Placeholder for other services
public function __call($name, $arguments) {
return "Service $name logic not implemented yet in Controller.";
}
}
@@ -0,0 +1,24 @@
<?php
namespace MVC\Controller;
use MVC\Core\Controller;
use MVC\Model\Domain;
class StatsController extends Controller {
public function weather_chart() {
// Since Weather is not yet a dedicated model, we use the Domain query helper or raw query
$res = Domain::query("SELECT ZEIT, AKTUELL FROM Wetter");
$labels = [];
$data = [];
while($row = $res->fetch_assoc()) {
$labels[] = $row['ZEIT'];
$data[] = (float)$row['AKTUELL'];
}
return $this->render('weather_chart', [
'labels' => $labels,
'data' => $data
]);
}
}
+25
View File
@@ -0,0 +1,25 @@
<?php
namespace MVC\Core;
class Controller {
protected $view;
public function __construct() {
$this->view = new View(__DIR__ . '/../View');
}
protected function render($template, $data = []) {
foreach ($data as $key => $value) {
$this->view->assign($key, $value);
}
return $this->view->render($template);
}
protected function json($data, $status = 200) {
header('Content-Type: application/json');
http_response_code($status);
echo json_encode($data);
exit;
}
}
+61
View File
@@ -0,0 +1,61 @@
<?php
namespace MVC\Core;
abstract class Model {
protected static $table;
protected static $conn;
protected static function getConnection() {
if (!self::$conn) {
self::$conn = \db_connect();
}
return self::$conn;
}
public static function all() {
return \DatabaseShow(static::$table, "*");
}
public static function find($id, $column = 'ID') {
$result = \DatabaseShow(static::$table, "*", "$column = ?", $id);
return $result[0] ?? null;
}
public static function where($where, ...$params) {
return \DatabaseShow(static::$table, "*", $where, ...$params);
}
public static function insert($data) {
$columns = implode(", ", array_keys($data));
$values = array_values($data);
return \DatabaseInsert(static::$table, $columns, ...$values);
}
public static function update($data, $where, ...$whereParams) {
$sets = [];
$values = [];
foreach ($data as $column => $value) {
$sets[] = "$column = ?";
$values[] = $value;
}
$setString = implode(", ", $sets);
return \DatabaseUpdate(static::$table, $setString, $where, ...array_merge($values, $whereParams));
}
public static function delete($where, ...$params) {
return \DatabaseDelete(static::$table, $where, ...$params);
}
public static function query($sql, ...$params) {
$conn = self::getConnection();
if (empty($params)) {
return $conn->query($sql);
}
$stmt = $conn->prepare($sql);
$types = str_repeat('s', count($params));
$stmt->bind_param($types, ...$params);
$stmt->execute();
return $stmt->get_result();
}
}
+59
View File
@@ -0,0 +1,59 @@
<?php
namespace MVC\Core;
class Router {
protected $routes = [];
protected $middlewares = [];
public function add($service, $controller, $method, $middlewares = []) {
$this->routes[$service] = [
'controller' => $controller,
'method' => $method,
'middlewares' => $middlewares
];
}
public function dispatch($service) {
if (!isset($this->routes[$service])) {
throw new \Exception("Service '$service' not found.");
}
$route = $this->routes[$service];
// Run Middlewares
foreach ($route['middlewares'] as $middleware) {
$this->runMiddleware($middleware);
}
$controllerClass = $route['controller'];
$method = $route['method'];
if (!class_exists($controllerClass)) {
throw new \Exception("Controller class '$controllerClass' not found.");
}
$controller = new $controllerClass();
if (!method_exists($controller, $method)) {
throw new \Exception("Method '$method' not found in controller '$controllerClass'.");
}
return $controller->$method();
}
protected function runMiddleware($middleware) {
if ($middleware === 'admin') {
if (!isset($_SESSION['is_admin']) || $_SESSION['is_admin'] !== true) {
die("Access Denied: Admin rights required.");
}
}
if ($middleware === 'auth') {
if (empty($_SESSION['user_logged_in'])) {
header('Location: login.php');
exit;
}
}
}
}
+27
View File
@@ -0,0 +1,27 @@
<?php
namespace MVC\Core;
class View {
protected $data = [];
protected $viewPath;
public function __construct($viewPath) {
$this->viewPath = $viewPath;
}
public function assign($key, $value) {
$this->data[$key] = $value;
}
public function render($template) {
extract($this->data);
$file = $this->viewPath . '/' . $template . '.php';
if (file_exists($file)) {
ob_start();
include $file;
return ob_get_clean();
}
return "View $template not found at $file";
}
}
+30
View File
@@ -0,0 +1,30 @@
<?php
namespace MVC\Layout;
class Layout {
protected $blocks = [];
protected $template;
public function __construct($template = 'main') {
$this->template = $template;
}
public function setBlock($name, $content) {
$this->blocks[$name] = $content;
}
public function getBlock($name) {
return $this->blocks[$name] ?? '';
}
public function render() {
$layoutFile = __DIR__ . '/Templates/' . $this->template . '.php';
if (file_exists($layoutFile)) {
ob_start();
include $layoutFile;
return ob_get_clean();
}
return "Layout template {$this->template} not found.";
}
}
+25
View File
@@ -0,0 +1,25 @@
<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title><?= $this->getBlock('title') ?></title>
<link rel="stylesheet" href="style.css">
<?= $this->getBlock('head') ?>
</head>
<body>
<header class="main-header">
<?= $this->getBlock('header') ?>
</header>
<div class="main">
<div class="sidebar">
<?= $this->getBlock('sidebar') ?>
</div>
<div class="content">
<?= $this->getBlock('content') ?>
</div>
</div>
<script src="main.js"></script>
<?= $this->getBlock('scripts') ?>
</body>
</html>
+121
View File
@@ -0,0 +1,121 @@
# 🏗️ Backend MVC - Umfassende Dokumentation
Diese Dokumentation beschreibt die Architektur, die Funktionsweise und die Besonderheiten des neuen Backend-Systems.
---
## 🏛️ 1. Architektur-Übersicht
Das System folgt dem **MVC (Model-View-Controller)** Pattern. Das Ziel ist eine strikte Trennung von Datenverarbeitung, Geschäftslogik und Benutzeroberfläche.
### 📂 Verzeichnisstruktur & Verantwortlichkeiten
- **`WEBROOT/index.php`**: Der zentrale Einstiegspunkt. Hier wird das Routing initialisiert, die Layout-Blöcke definiert und das Error-Handling gesteuert.
- **`src/MVC/Core/`**: Das Herzstück. Enthält die Basisklassen `Controller`, `Model`, `View`, `Router` und `Layout`. Diese Klassen sollten selten angefasst werden.
- **`src/MVC/Model/`**: Daten-Logik. Jede Klasse repräsentiert eine Datenbanktabelle oder einen logischen Datenbereich.
- **`src/MVC/Controller/`**: Geschäftslogik. Controller nehmen Anfragen entgegen, nutzen Models zur Datenbeschaffung und geben Daten an Views weiter.
- **`src/MVC/View/`**: Präsentationsschicht. Reine HTML/PHP-Dateien für die Anzeige.
- **`src/MVC/Layout/`**: Definition des Rahmendesigns und Verwaltung der Inhaltsblöcke.
---
## 🚦 2. Routing & Middleware (Der Verkehrspolizist)
Das Routing wird in der `index.php` über den `Router` konfiguriert.
### Routen registrieren
```php
$router->add($service_id, $controller_class, $method_name, $middlewares);
```
- **`$service_id`**: Der Wert des URL-Parameters `?service=...`.
- **`$middlewares`**: Ein Array von Sicherheitsstufen (z.B. `['auth', 'admin']`).
### Verfügbare Middlewares
- `auth`: Stellt sicher, dass die Session `user_logged_in` aktiv ist. Leitet sonst zum Login um.
- `admin`: Stellt sicher, dass die Session `is_admin` wahr ist. Gibt sonst "Access Denied" aus.
---
## 🏛️ 3. Der Model-Layer (Datenabstraktion)
Alle Models erben von `MVC\Core\Model`. Dies gibt ihnen Zugriff auf mächtige Standardmethoden:
### CRUD-Operationen
- `Model::all()`: Gibt alle Datensätze der Tabelle zurück.
- `Model::find($id)`: Sucht einen Datensatz primär über die ID.
- `Model::where($sql, ...$params)`: Filtert Datensätze mit Prepared Statements.
- `Model::insert($data)`: Erwartet ein assoziatives Array (z.B. `['NAME' => 'Max']`).
- `Model::update($data, $where, ...$whereParams)`: Aktualisiert Felder basierend auf einer Bedingung.
- `Model::delete($where, ...$params)`: Löscht Datensätze.
- `Model::query($sql, ...$params)`: Ermöglicht komplexe, manuelle SQL-Abfragen.
### 💡 Besonderheit: Statische Bindung
In den Models wird die Tabelle über `protected static $table` definiert. Die Basisklasse nutzt `static::`, um immer auf die Tabelle des Kind-Models zuzugreifen.
---
## 🎮 4. Controller & AJAX (Die Logik)
Controller fungieren als Vermittler. Sie verarbeiten sowohl klassische Seitenaufrufe als auch AJAX-Requests.
### Seiten rendern
```php
return $this->render('view_name', ['key' => 'value']);
```
### JSON-Antworten (für AJAX)
Für moderne Oberflächen, die Daten nachladen oder umschalten ohne Refresh:
```php
return $this->json(['success' => true, 'data' => $result]);
```
---
## 🧱 5. Das modulare Block-Layout
Das Layout ist in "Blöcke" unterteilt, die in der `index.php` befüllt werden.
### Blöcke setzen
```php
$layout->setBlock('header', $html_content);
$layout->setBlock('sidebar', $sidebar_html);
```
### Blöcke in der View nutzen (Layout-Template)
In `Layout/Templates/main.php` werden die Blöcke mit `$this->getBlock('name')` ausgegeben.
---
## 🛡️ 6. Error-Handling & Sicherheit
### Zentrales Catch-System
Die gesamte Applikation läuft in einem `try-catch` Block.
- Tritt ein Fehler (Exception) auf, wird dieser im System-Log gespeichert.
- **Admins** sehen den "Stacktrace" (Pfad des Fehlers) zur schnellen Behebung.
- **Benutzer** sehen eine generische, freundliche Fehlermeldung.
### SQL-Injection Schutz
Durch die konsequente Nutzung von `Model::where`, `Model::insert` etc., werden automatisch **Prepared Statements** genutzt. SQL-Injections sind dadurch nahezu ausgeschlossen.
### XSS-Schutz
Variablen in der View sollten **immer** mit `htmlspecialchars()` ausgegeben werden:
```html
<p><?= htmlspecialchars($user_name) ?></p>
```
---
## 🔍 7. Besonderheiten & Tipps
- **Namespace-Beachtung**: Da wir Namespaces nutzen (`MVC\Controller`), müssen globale PHP-Funktionen oder Klassen aus dem `src/utils` Ordner mit einem Backslash aufgerufen werden (z.B. `\db_connect()` oder `\getSpecificData()`).
- **Globaler State**: Variablen aus der `config.php` (wie `$Berechtigungen`) müssen in Controllern oft via `global $variable;` bekannt gemacht werden, bevor sie an Models übergeben werden.
- **Post-Redirect-Get**: Nach dem Speichern von Daten (`POST`) im Controller immer ein `header("Location: ...")` ausführen, um doppelte Einsendungen beim Neuladen zu verhindern.
- **Statische Files**: Bilder, CSS und JS gehören in den Ordner `WEBROOT/static/`.
---
## 🚀 Modul-Generator
Nutze das Script im Hauptverzeichnis für schnelle Ergebnisse:
```bash
php create_module.php mein_name
```
Dieses erstellt automatisch Controller und View nach den oben genannten Standards.
+25
View File
@@ -0,0 +1,25 @@
<?php
namespace MVC\Model;
use MVC\Core\Model;
class CompanyReport extends Model {
protected static $table = "Firmenberichte";
public static function getByDateRange($start, $end) {
$sql = "SELECT `DATUM`, `PROZESS_1`, `PROZESS_2`, `PROZESS_3`, `PROZESS_4` FROM Firmenberichte WHERE `DATUM` BETWEEN ? AND ?";
return self::query($sql, $start, $end)->fetch_all(MYSQLI_ASSOC);
}
public static function getWochen() {
self::query("SET @row := 0");
$sql = "SELECT MIN(DATUM) AS start_date, MAX(DATUM) AS end_date FROM (SELECT DATUM, DATE_SUB(DATUM, INTERVAL (@row := @row + 1) DAY) AS grp FROM Firmenberichte ORDER BY DATUM) AS t GROUP BY grp ORDER BY start_date";
return self::query($sql)->fetch_all(MYSQLI_ASSOC);
}
public static function getTotalOvertime() {
$res = self::query("SELECT SUM(OVERTIME) AS summe FROM Firmenberichte");
return intval($res->fetch_object()->summe ?? 0);
}
}
+29
View File
@@ -0,0 +1,29 @@
<?php
namespace MVC\Model;
use MVC\Core\Model;
class Documentation extends Model {
protected static $table = "Dokumentation";
public static function search($query, $page = 1, $limit = 5) {
$offset = ($page - 1) * $limit;
$search = "%$query%";
$countRes = \DatabaseShow(self::$table, "COUNT(*) as total", "TITEL LIKE ? OR INHALT LIKE ? OR KATEGORIE LIKE ?", $search, $search, $search);
$total = $countRes[0]['total'] ?? 0;
$sql = "SELECT * FROM Dokumentation WHERE TITEL LIKE ? OR INHALT LIKE ? OR KATEGORIE LIKE ? ORDER BY ERSTELLT_AM DESC LIMIT ? OFFSET ?";
$result = self::query($sql, $search, $search, $search, $limit, $offset);
$rows = $result->fetch_all(MYSQLI_ASSOC);
return [
'rows' => $rows,
'total' => $total,
'pages' => ceil($total / $limit),
'current_page' => $page
];
}
}
+9
View File
@@ -0,0 +1,9 @@
<?php
namespace MVC\Model;
use MVC\Core\Model;
class Domain extends Model {
protected static $table = "Domains";
}
+43
View File
@@ -0,0 +1,43 @@
<?php
namespace MVC\Model;
use MVC\Core\Model;
class Log extends Model {
protected static $table = "logs";
public static function getFiltered($websiteFilter, $devIpsSql, $filter) {
switch ($filter) {
case 'today':
$sql = "SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE` FROM logs WHERE DATE(FIRST_REQUEST) = CURDATE() AND $websiteFilter AND CLIENT_IP NOT IN ($devIpsSql) ORDER BY FIRST_REQUEST DESC";
break;
case 'counterperip':
$sql = "SELECT CLIENT_IP, LAND, USER_AGENT, SUM(counter) AS gesamt_counter FROM logs WHERE $websiteFilter AND CLIENT_IP NOT IN ($devIpsSql) GROUP BY CLIENT_IP ORDER BY gesamt_counter DESC";
break;
case 'node1':
case 'node2':
case 'node3':
case 'node4':
$sql = "SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE` FROM logs WHERE `SERVER_IP` = ? AND $websiteFilter ORDER BY `FIRST_REQUEST` DESC";
$res = self::query($sql, $filter);
return $res->fetch_all(MYSQLI_ASSOC);
default:
$sql = "SELECT `CLIENT_IP`, `LAND`, `REQUEST_URL`, `COUNTER`, `FIRST_REQUEST`, `WEBSITE` FROM logs WHERE $websiteFilter AND CLIENT_IP NOT IN ($devIpsSql) ORDER BY FIRST_REQUEST DESC";
}
$res = self::query($sql);
return $res->fetch_all(MYSQLI_ASSOC);
}
public static function getChartData($websiteFilter = null) {
$where = $websiteFilter ? "WHERE $websiteFilter" : "";
$sql = "SELECT DATE(FIRST_REQUEST) as tag, COUNT(*) as anzahl FROM logs $where GROUP BY DATE(FIRST_REQUEST) ORDER BY DATE(FIRST_REQUEST)";
return self::query($sql)->fetch_all(MYSQLI_ASSOC);
}
public static function getNodeChartData($node) {
$sql = "SELECT DATE(FIRST_REQUEST) as tag, COUNT(*) as anzahl FROM logs WHERE SERVER_IP = ? GROUP BY DATE(FIRST_REQUEST)";
return self::query($sql, $node)->fetch_all(MYSQLI_ASSOC);
}
}
+14
View File
@@ -0,0 +1,14 @@
<?php
namespace MVC\Model;
use MVC\Core\Model;
class Overtime extends Model {
protected static $table = "Ueberstunden";
public static function getSumByReason($reason) {
$res = self::query("SELECT SUM(MINUTEN) AS summe FROM Ueberstunden WHERE GRUND = ?", $reason);
return intval($res->fetch_object()->summe ?? 0);
}
}
+14
View File
@@ -0,0 +1,14 @@
<?php
namespace MVC\Model;
use MVC\Core\Model;
class SchoolReport extends Model {
protected static $table = "Berufsschulberichte";
public static function allWithFK() {
global $Berufsschulberichte;
return \DatabaseShowWithFK(self::$table, $Berufsschulberichte);
}
}
+18
View File
@@ -0,0 +1,18 @@
<?php
namespace MVC\Model;
use MVC\Core\Model;
class User extends Model {
protected static $table = "Benutzer";
public static function getByName($name) {
return self::where("NAME = ?", $name);
}
public static function isAdmin($userId) {
$user = self::find($userId);
return ($user['ADMIN'] ?? 0) == 1;
}
}
+22
View File
@@ -0,0 +1,22 @@
<?php
namespace MVC\Model;
use MVC\Core\Model;
class Variable extends Model {
protected static $table = "Variablen";
public static function getByName($name) {
return self::where("VARIABLENNAME = ?", $name)[0] ?? null;
}
public static function toggle($name) {
$var = self::getByName($name);
if ($var) {
$newValue = ($var['WERT'] === "ON") ? "OFF" : "ON";
return self::update(['WERT' => $newValue], "VARIABLENNAME = ?", $name);
}
return false;
}
}
@@ -1,60 +1,4 @@
<?php
// ======================================================
// API TESTER
// Modul für index.php
// ======================================================
// API Basis-Verzeichnis
$apiDir = realpath(__DIR__ . '/../api');
// Alle PHP APIs rekursiv finden
$apiOptions = [];
if ($apiDir !== false) {
$iterator = new RecursiveIteratorIterator(
new RecursiveDirectoryIterator(
$apiDir,
RecursiveDirectoryIterator::SKIP_DOTS
)
);
foreach ($iterator as $file) {
if (!$file->isFile()) {
continue;
}
if ($file->getExtension() !== 'php') {
continue;
}
// relativen Pfad erzeugen
$relativePath = str_replace(
$apiDir . DIRECTORY_SEPARATOR,
'',
$file->getPathname()
);
// Windows kompatibel
$relativePath = str_replace('\\', '/', $relativePath);
$apiOptions[] = 'api/' . $relativePath;
}
}
// sortieren
sort($apiOptions);
// Standard Token
$defaultToken = "15a437d128c918633e57dc7d18118a073b807644f21731ed5a7ebcf3eca9e242";
?>
<style>
/* ======================================================
API TESTER STYLES
====================================================== */
.api-tester-container {
width: 100%;
max-width: 1000px;
@@ -209,11 +153,9 @@ select {
}
@media (max-width: 700px) {
.tester-grid {
grid-template-columns: 1fr;
}
.tester-row {
flex-direction: column;
align-items: stretch;
@@ -222,32 +164,20 @@ select {
</style>
<div class="api-tester-container">
<h2>🛠️ API Tester</h2>
<!-- API Auswahl -->
<div class="tester-form-group">
<label for="endpoint">API Endpunkt</label>
<select id="endpoint" class="tester-input" onchange="checkEndpoint()">
<?php foreach ($apiOptions as $opt): ?>
<option value="<?= htmlspecialchars($opt) ?>">
<?= htmlspecialchars($opt) ?>
</option>
<option value="<?= htmlspecialchars($opt) ?>"><?= htmlspecialchars($opt) ?></option>
<?php endforeach; ?>
</select>
</div>
<!-- Methode + Function -->
<div class="tester-grid">
<div class="tester-form-group">
<label for="method">HTTP Methode</label>
<select id="method" class="tester-input">
<option value="GET">GET</option>
<option value="POST">POST</option>
@@ -257,146 +187,77 @@ select {
<option value="OPTIONS">OPTIONS</option>
</select>
</div>
<div class="tester-form-group" id="function-group">
<label for="function-header">Function Header</label>
<input type="text" id="function-header" class="tester-input" placeholder="z.B. IPs, Ueberstunden">
</div>
</div>
<!-- Token -->
<div class="tester-form-group">
<label for="token">Authorization Token</label>
<div class="tester-row">
<input type="text" id="token" class="tester-input" value="<?= htmlspecialchars($defaultToken) ?>">
<label class="tester-checkbox">
<input type="checkbox" id="send-token" checked>
Mitsenden
</label>
</div>
</div>
<!-- Eigene Header -->
<div class="tester-form-group">
<label for="custom-headers">
Zusätzliche Header (JSON)
</label>
<textarea id="custom-headers" class="tester-textarea" placeholder='{
"X-Test": "123",
"Client": "Frontend"
}'></textarea>
<label for="custom-headers">Zusätzliche Header (JSON)</label>
<textarea id="custom-headers" class="tester-textarea" placeholder='{"X-Test": "123", "Client": "Frontend"}'></textarea>
</div>
<!-- JSON Body -->
<div class="tester-form-group" id="json-body-group">
<label for="json-body">
JSON Body
</label>
<textarea id="json-body" class="tester-textarea" placeholder='{
"test": true
}'></textarea>
<label for="json-body">JSON Body</label>
<textarea id="json-body" class="tester-textarea" placeholder='{"test": true}'></textarea>
</div>
<!-- Datei Upload -->
<div class="tester-form-group hidden" id="file-group">
<label for="files">Dateien Upload</label>
<input type="file" id="files" class="tester-input" multiple>
</div>
<!-- Buttons -->
<div class="tester-grid">
<button class="tester-btn-send" onclick="sendApiRequest()">
Anfrage senden 🚀
</button>
<button class="tester-btn-send" onclick="clearResponse()">
Ausgabe leeren 🧹
</button>
<button class="tester-btn-send" onclick="sendApiRequest()">Anfrage senden 🚀</button>
<button class="tester-btn-send" onclick="clearResponse()">Ausgabe leeren 🧹</button>
</div>
<!-- Ausgabe -->
<div id="tester-response-container">
<div style="text-align:center; opacity:0.7; padding:15px;">
Bereit für Anfragen.
</div>
<div style="text-align:center; opacity:0.7; padding:15px;">Bereit für Anfragen.</div>
</div>
</div>
<script>
// ======================================================
// CHECK ENDPOINT
// ======================================================
function checkEndpoint() {
const endpoint = document.getElementById('endpoint').value;
const fileGroup = document.getElementById('file-group');
const functionGroup = document.getElementById('function-group');
const jsonBodyGroup = document.getElementById('json-body-group');
const methodSelect = document.getElementById('method');
// reset
fileGroup.classList.add('hidden');
functionGroup.classList.remove('hidden');
jsonBodyGroup.classList.remove('hidden');
// upload api
if (endpoint.includes('upload.php')) {
fileGroup.classList.remove('hidden');
jsonBodyGroup.classList.add('hidden');
methodSelect.value = 'POST';
}
// get api
if (endpoint.includes('get.php')) {
methodSelect.value = 'GET';
}
}
// ======================================================
// CLEAR RESPONSE
// ======================================================
function clearResponse() {
document.getElementById('tester-response-container').innerHTML = `
<div style="text-align:center; opacity:0.7; padding:15px;">
Ausgabe geleert.
</div>
<div style="text-align:center; opacity:0.7; padding:15px;">Ausgabe geleert.</div>
`;
}
// ======================================================
// SEND REQUEST
// ======================================================
async function sendApiRequest() {
const endpoint = document.getElementById('endpoint').value;
const method = document.getElementById('method').value;
const token = document.getElementById('token').value;
@@ -407,174 +268,74 @@ async function sendApiRequest() {
const sendToken = document.getElementById('send-token').checked;
const responseContainer = document.getElementById('tester-response-container');
responseContainer.innerHTML = `
<div style="text-align:center; padding:15px;">
Anfrage läuft...
</div>
`;
responseContainer.innerHTML = `<div style="text-align:center; padding:15px;">Anfrage läuft...</div>`;
let headers = {};
if (sendToken && token.trim() !== '') headers['Authorization'] = token;
if (functionHeader.trim() !== '') headers['Function'] = functionHeader;
// Token
if (sendToken && token.trim() !== '') {
headers['Authorization'] = token;
}
// Function Header
if (functionHeader.trim() !== '') {
headers['Function'] = functionHeader;
}
// Custom Headers
if (customHeadersInput.trim() !== '') {
try {
const customHeaders = JSON.parse(customHeadersInput);
headers = {
...headers,
...customHeaders
};
headers = { ...headers, ...customHeaders };
} catch (e) {
responseContainer.innerHTML = `
<div style="color:#dc3545; padding:15px;">
Fehlerhafte Header JSON Struktur.
</div>
`;
responseContainer.innerHTML = `<div style="color:#dc3545; padding:15px;">Fehlerhafte Header JSON Struktur.</div>`;
return;
}
}
let options = {
method: method,
headers: headers
};
let options = { method: method, headers: headers };
// Upload
if (endpoint.includes('upload.php') && fileInput.files.length > 0) {
const formData = new FormData();
for (let i = 0; i < fileInput.files.length; i++) {
formData.append('files[]', fileInput.files[i]);
}
for (let i = 0; i < fileInput.files.length; i++) formData.append('files[]', fileInput.files[i]);
options.body = formData;
} else {
// JSON Body
if (
['POST', 'PUT', 'PATCH', 'DELETE']
.includes(method) &&
jsonBodyInput.trim() !== ''
) {
if (['POST', 'PUT', 'PATCH', 'DELETE'].includes(method) && jsonBodyInput.trim() !== '') {
try {
JSON.parse(jsonBodyInput);
headers['Content-Type'] = 'application/json';
options.body = jsonBodyInput;
} catch (e) {
responseContainer.innerHTML = `
<div style="color:#dc3545; padding:15px;">
Fehlerhafte JSON Body Struktur.
</div>
`;
responseContainer.innerHTML = `<div style="color:#dc3545; padding:15px;">Fehlerhafte JSON Body Struktur.</div>`;
return;
}
}
}
const startedAt = performance.now();
try {
const response = await fetch(endpoint, options);
const duration = (performance.now() - startedAt).toFixed(0);
const status = response.status;
const rawText = await response.text();
let resultText = rawText;
// JSON hübsch formatieren
try {
const json = JSON.parse(rawText);
resultText = JSON.stringify(json, null, 2);
} catch (e) {}
let badgeClass = 'tester-status-error';
if (status >= 200 && status < 300) {
badgeClass = 'tester-status-200';
} else if (status >= 300 && status < 400) {
badgeClass = 'tester-status-warning';
}
let badgeClass = status >= 200 && status < 300 ? 'tester-status-200' : (status >= 300 && status < 400 ? 'tester-status-warning' : 'tester-status-error');
responseContainer.innerHTML = `
<div class="tester-badge ${badgeClass}">
Status: ${status}
</div>
<div class="tester-response-info">
⏱️ ${duration} ms
</div>
<button
class="tester-small-btn"
onclick="copyResponse()"
>
Antwort kopieren
</button>
<div class="tester-badge ${badgeClass}">Status: ${status}</div>
<div class="tester-response-info">⏱️ ${duration} ms</div>
<button class="tester-small-btn" onclick="copyResponse()">Antwort kopieren</button>
<pre id="tester-output-content"></pre>
`;
document.getElementById('tester-output-content').textContent = resultText;
} catch (error) {
responseContainer.innerHTML = `
<div style="color:#dc3545; padding:15px;">
Fehler: ${error.message}
</div>
`;
responseContainer.innerHTML = `<div style="color:#dc3545; padding:15px;">Fehler: ${error.message}</div>`;
}
}
// ======================================================
// COPY RESPONSE
// ======================================================
function copyResponse() {
const content = document.getElementById('tester-output-content');
if (!content) {
return;
}
if (!content) return;
navigator.clipboard.writeText(content.textContent);
alert('Antwort kopiert.');
}
// Initial
checkEndpoint();
</script>
</script>
+72
View File
@@ -0,0 +1,72 @@
<script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
<script src="https://cdn.jsdelivr.net/npm/chartjs-plugin-zoom"></script>
<canvas id="logChart" width="600" height="400"></canvas>
<script>
const ctx = document.getElementById('logChart').getContext('2d');
const logChart = new Chart(ctx, {
type: 'line',
data: {
labels: <?php echo json_encode($labels); ?>,
datasets: [{
label: 'Logs pro Tag',
data: <?php echo json_encode($data); ?>,
borderColor: 'rgba(75, 192, 192, 1)',
backgroundColor: 'rgba(75, 192, 192, 0.2)',
fill: true,
tension: 0
}]
},
options: {
responsive: true,
maintainAspectRatio: false,
plugins: {
title: {
display: true,
text: 'Logs pro Tag'
},
legend: {
display: true,
position: 'top'
},
zoom: {
pan: {
enabled: true,
mode: 'x',
},
zoom: {
wheel: {
enabled: true,
},
mode: 'x',
}
}
},
interaction: {
mode: 'index',
intersect: false
},
scales: {
x: {
title: {
display: true,
text: 'Datum'
}
},
y: {
min: 0,
max: 100,
title: {
display: true,
text: 'Anzahl Logs'
},
ticks: {
stepSize: 20
},
beginAtZero: true
}
}
}
});
</script>
+115
View File
@@ -0,0 +1,115 @@
<style>
.debug-table-container {
background: #252525;
border-radius: 8px;
padding: 0;
margin-top: 20px;
overflow-x: auto;
border: 1px solid rgba(255, 255, 255, 0.1);
box-shadow: 0 10px 30px rgba(0, 0, 0, 0.5);
}
table {
width: 100%;
border-collapse: collapse;
color: #ccc;
white-space: nowrap;
}
th {
background: #333;
text-align: left;
padding: 15px 12px;
border-bottom: 2px solid #3498db;
color: #3498db;
text-transform: uppercase;
font-size: 11px;
letter-spacing: 1px;
position: sticky;
top: 0;
z-index: 10;
}
td {
padding: 10px 12px;
border-bottom: 1px solid rgba(255, 255, 255, 0.05);
font-size: 13px;
}
tr:nth-child(even) {
background: rgba(255, 255, 255, 0.02);
}
tr:hover {
background: rgba(52, 152, 219, 0.1);
color: #fff;
}
td:first-child,
th:first-child {
position: sticky;
left: 0;
background: #252525;
z-index: 5;
border-right: 1px solid rgba(255, 255, 255, 0.1);
}
th:first-child {
z-index: 11;
background: #333;
}
.empty-note {
padding: 40px;
text-align: center;
color: #777;
font-style: italic;
}
</style>
<h2 style="display: flex; justify-content: space-between; align-items: center;">
<span>📊 Berichtte-Vorschau:</span>
<div>
<a href="?service=<?= htmlspecialchars($selectedService) ?>&mode=fk">
<button <?= $mode === 'fk' ? 'style="background:#3498db;color:white;"' : '' ?>>
Berufsschulberichte
</button>
</a>
<a href="?service=<?= htmlspecialchars($selectedService) ?>&mode=normal">
<button <?= $mode === 'normal' ? 'style="background:#3498db;color:white;"' : '' ?>>
Arbeitsberichte
</button>
</a>
</div>
</h2>
<?php if ($count > 0 && is_array($displayData[0])): ?>
<div class="debug-table-container">
<table>
<thead>
<tr>
<?php foreach (array_keys($displayData[0]) as $column): ?>
<th><?= htmlspecialchars($column) ?></th>
<?php endforeach; ?>
</tr>
</thead>
<tbody>
<?php foreach ($displayData as $row): ?>
<tr>
<?php foreach ($row as $key => $cell): ?>
<td><?= htmlspecialchars($cell ?? '-') ?></td>
<?php endforeach; ?>
</tr>
<?php endforeach; ?>
</tbody>
</table>
</div>
<?php else: ?>
<div class="debug-table-container">
<div class="empty-note">
Keine tabellarischen Daten gefunden.
</div>
</div>
<?php endif; ?>
@@ -0,0 +1,56 @@
<div class="content-box">
<h2>Ausbildungsberichte PDF erstellen</h2>
<form method="post" class="overtime-container">
<label for="start_date">Von:</label>
<input type="date" name="start_date" id="start_date" value="<?= htmlspecialchars($startDate) ?>">
<label for="end_date">Bis:</label>
<input type="date" name="end_date" id="end_date" value="<?= htmlspecialchars($endDate) ?>">
<button type="submit" name="generate_pdf">PDF erstellen</button>
</form>
<?php if ($pdfFile): ?>
<div class="overtime-result">
<?= htmlspecialchars(basename($pdfFile)) ?> erfolgreich erstellt!
</div>
<?php elseif(isset($_POST['generate_pdf'])): ?>
<div class="overtime-result negative">
Keine Berichte im gewählten Zeitraum gefunden.
</div>
<?php endif; ?>
<?php if(!empty($wochenArray)): ?>
<div class="wochen-liste">
<h3>Verfügbare Wochenabschnitte:</h3>
<ul>
<?php
foreach($wochenArray as $woche):
$pdfName = 'ausbildungsnachweis_' . $woche['start_date'] . '-' . $woche['end_date'] . '.pdf';
$pdfPath = (new \getSpecificData())->getDocumentRoot() . '/static/' . $pdfName;
$exists = file_exists($pdfPath);
?>
<li>
<code><?= htmlspecialchars($woche['start_date']) ?></code> bis
<code><?= htmlspecialchars($woche['end_date']) ?></code>
<?php if($exists): ?>
<span style="color:green;">(PDF vorhanden)</span>
<a href="<?= htmlspecialchars('/static/' . $pdfName) ?>" download class="btn btn-success">
Download
</a>
<?php else: ?>
<span style="color:red;">(noch keine PDF)</span>
<form method="post" style="display:inline;">
<input type="hidden" name="start_date" value="<?= htmlspecialchars($woche['start_date']) ?>">
<input type="hidden" name="end_date" value="<?= htmlspecialchars($woche['end_date']) ?>">
<button type="submit" name="generate_pdf" class="btn btn-primary">
PDF erzeugen
</button>
</form>
<?php endif; ?>
</li>
<?php endforeach; ?>
</ul>
</div>
<?php endif; ?>
</div>
@@ -1,20 +1,3 @@
<?php
$data = new getSpecificData();
$allData = $data->getAllData();
// Daten nach Gruppen sortieren
$groupedData = [];
foreach ($allData as $key => $value) {
if (strpos($key, ' - ') !== false) {
[$group, $field] = explode(' - ', $key, 2);
} else {
$group = 'Other';
$field = $key;
}
$groupedData[$group][$field] = $value;
}
?>
<h2>System & Client Info</h2>
<?php foreach ($groupedData as $groupName => $fields): ?>
@@ -36,7 +19,6 @@ foreach ($allData as $key => $value) {
</div>
<?php endforeach; ?>
<!-- ===== JS für einklappbare Gruppen ===== -->
<script>
document.querySelectorAll('.group-header').forEach(header => {
header.addEventListener('click', () => {
@@ -47,7 +29,6 @@ document.querySelectorAll('.group-header').forEach(header => {
});
</script>
<!-- ===== CSS für einklappbare Gruppen ===== -->
<style>
.group-container {
margin-bottom: 15px;
@@ -85,7 +66,6 @@ body.dark-mode .group-header:hover {
.group-content.open {
max-height: 2000px;
/* ausreichend hoch für alle Elemente */
padding: 10px 15px;
}
@@ -118,7 +98,6 @@ body.dark-mode .group-header:hover {
word-break: break-word;
}
/* Dark Mode Anpassungen */
body.dark-mode .group-header {
background-color: var(--card-bg);
color: var(--text);
@@ -127,4 +106,4 @@ body.dark-mode .group-header {
body.dark-mode .info-list li {
border-bottom: 1px solid #333;
}
</style>
</style>
+115
View File
@@ -0,0 +1,115 @@
<div class="documentation-container">
<h2>📚 Projekt-Dokumentation</h2>
<div class="search-bar">
<form method="GET">
<input type="hidden" name="service" value="documentation">
<input type="text" name="q" value="<?= htmlspecialchars($query) ?>" placeholder="Suchen...">
<button type="submit">Suchen</button>
</form>
</div>
<div class="doc-list">
<?php if (empty($docs)): ?>
<p>Keine Einträge gefunden.</p>
<?php else: ?>
<?php foreach ($docs as $doc): ?>
<div class="doc-item">
<span class="category-badge"><?= htmlspecialchars($doc['KATEGORIE']) ?></span>
<h3><?= htmlspecialchars($doc['TITEL']) ?></h3>
<p><?= nl2br(htmlspecialchars($doc['INHALT'])) ?></p>
<small>Erstellt am: <?= date('d.m.Y H:i', strtotime($doc['ERSTELLT_AM'])) ?></small>
</div>
<?php endforeach; ?>
<?php endif; ?>
</div>
<?php if ($pages > 1): ?>
<div class="pagination">
<?php for ($i = 1; $i <= $pages; $i++): ?>
<a href="?service=documentation&q=<?= urlencode($query) ?>&page=<?= $i ?>"
class="<?= $i === $currentPage ? 'active' : '' ?>">
<?= $i ?>
</a>
<?php endfor; ?>
</div>
<?php endif; ?>
</div>
<style>
.documentation-container {
max-width: 800px;
margin: 0 auto;
}
.search-bar {
margin-bottom: 25px;
}
.search-bar form {
display: flex;
gap: 10px;
}
.search-bar input {
flex: 1;
padding: 10px;
border-radius: 6px;
border: 1px solid var(--input-border);
background: var(--input-bg);
color: var(--input-text);
}
.doc-item {
background: var(--card-bg);
border: 1px solid var(--card-border);
padding: 20px;
border-radius: 10px;
margin-bottom: 20px;
position: relative;
}
.category-badge {
position: absolute;
top: 15px;
right: 15px;
background: var(--btn-bg);
color: white;
padding: 4px 10px;
border-radius: 15px;
font-size: 0.75rem;
font-weight: bold;
}
.doc-item h3 {
margin-top: 0;
color: var(--btn-bg);
}
.doc-item p {
line-height: 1.6;
}
.pagination {
display: flex;
justify-content: center;
gap: 8px;
margin-top: 30px;
}
.pagination a {
display: inline-block;
padding: 8px 14px;
background: var(--card-bg);
border: 1px solid var(--card-border);
border-radius: 5px;
text-decoration: none;
color: var(--text);
}
.pagination a.active {
background: var(--btn-bg);
color: white;
border-color: var(--btn-bg);
}
</style>
+26
View File
@@ -0,0 +1,26 @@
<h2>Domain Verwaltung</h2>
<?php if ($statusMsg): ?>
<div class="status-msg"><?= htmlspecialchars($statusMsg) ?></div>
<?php endif; ?>
<div class="admin-grid">
<?php foreach ($domains as $domain): ?>
<form method="post" class="admin-card">
<input type="hidden" name="id" value="<?= $domain["ID"] ?>">
<label>Subdomain</label>
<input type="text" name="subdomain" value="<?= htmlspecialchars($domain["SUBDOMAIN"]) ?>">
<div style="margin-top:10px; display:flex; gap:10px;">
<button type="submit" name="save_domain" class="btn-save">Speichern</button>
<button type="submit" name="delete_domain" class="btn-delete">Löschen</button>
</div>
</form>
<?php endforeach; ?>
<form method="post" class="admin-card new-item">
<h3>Neu</h3>
<label>Subdomain</label>
<input type="text" name="subdomain" placeholder="z.B. subdomain.domain.net">
<button type="submit" name="add_domain" class="btn-add">Domain hinzufügen</button>
</form>
</div>
@@ -1,17 +1,3 @@
<?php
$username = $_SESSION['username'] ?? 'Gast';
$is_superuser = $_SESSION['is_superuser'] ?? false;
$is_admin = $_SESSION['is_admin'] ?? false;
$db_res = DatabaseShow(
"Benutzer",
"NACHNAME, EMAIL, ROLLE, HOME_IP",
"NAME = ?",
$username
);
?>
<div class="home-dashboard">
<div class="links-container">
@@ -21,16 +7,16 @@ $db_res = DatabaseShow(
<p style="margin: 5px 0;"><strong>Name:</strong> <code><?= htmlspecialchars($username) ?></code></p>
<?php if ($username != 'gast'): ?>
<p style="margin: 5px 0;"><strong>Nachname:</strong>
<code><?= htmlspecialchars($db_res[0]['NACHNAME']) ?></code>
<code><?= htmlspecialchars($db_res[0]['NACHNAME'] ?? '') ?></code>
</p>
<p style="margin: 5px 0;"><strong>E-Mail:</strong>
<code><?= htmlspecialchars($db_res[0]['EMAIL']) ?></code>
<code><?= htmlspecialchars($db_res[0]['EMAIL'] ?? '') ?></code>
</p>
<p style="margin: 5px 0;"><strong>Benutzerrolle:</strong>
<code><?= htmlspecialchars($db_res[0]['ROLLE']) ?></code>
<code><?= htmlspecialchars($db_res[0]['ROLLE'] ?? '') ?></code>
</p>
<p style="margin: 5px 0;"><strong>Home IP:</strong>
<code><?= htmlspecialchars($db_res[0]['HOME_IP']) ?></code>
<code><?= htmlspecialchars($db_res[0]['HOME_IP'] ?? '') ?></code>
</p>
<?php endif ?>
</div>
@@ -40,17 +26,17 @@ $db_res = DatabaseShow(
<h3 style="background-color: #28a745;">🛡️ Status & Rechte</h3>
<div class="group-links"
style="padding: 10px; display: flex; flex-direction: row; gap: 10px; flex-wrap: wrap;">
<?php if ((new getSpecificData())->getIsAdmin()): ?>
<?php if ((new \getSpecificData())->getIsAdmin()): ?>
<span
style="background: #dc3545; color: white; padding: 4px 10px; border-radius: 15px; font-size: 0.8rem; font-weight: bold;">Admin</span>
<?php endif; ?>
<?php if ((new getSpecificData())->getIsSuperuser()): ?>
<?php if ((new \getSpecificData())->getIsSuperuser()): ?>
<span
style="background: #ffc107; color: #000; padding: 4px 10px; border-radius: 15px; font-size: 0.8rem; font-weight: bold;">Superuser</span>
<?php endif; ?>
<?php if (!(new getSpecificData())->getIsSuperuser() && !(new getSpecificData())->getIsAdmin()): ?>
<?php if (!(new \getSpecificData())->getIsSuperuser() && !(new \getSpecificData())->getIsAdmin()): ?>
<span
style="background: #6c757d; color: white; padding: 4px 10px; border-radius: 15px; font-size: 0.8rem; font-weight: bold;">Standard-Nutzer</span>
<?php endif; ?>
@@ -68,19 +54,19 @@ $db_res = DatabaseShow(
</p>
<?php if ($is_admin): ?>
<p style="margin: 5px 0;"><strong>Client IP:</strong>
<code><?= htmlspecialchars((new getSpecificData())->getClientIP()) ?></code>
<code><?= htmlspecialchars((new \getSpecificData())->getClientIP()) ?></code>
</p>
<p style="margin: 5px 0;"><strong>Server IP:</strong>
<code><?= htmlspecialchars((new getSpecificData())->getServerIP()) ?></code>
<code><?= htmlspecialchars((new \getSpecificData())->getServerIP()) ?></code>
</p>
<p style="margin: 5px 0;"><strong>Geo IP:</strong>
<code><?= htmlspecialchars((new getSpecificData())->getGeoIP((new getSpecificData())->getClientIP())) ?></code>
<code><?= htmlspecialchars((new \getSpecificData())->getGeoIP((new \getSpecificData())->getClientIP())) ?></code>
</p>
<p style="margin: 5px 0;"><strong>Database IP:</strong>
<code><?= htmlspecialchars((new getSpecificData())->getDatabase()) ?></code>
<code><?= htmlspecialchars((new \getSpecificData())->getDatabase()) ?></code>
</p>
<p style="margin: 5px 0;"><strong>Wetter:</strong>
<code><?= htmlspecialchars((new getSpecificData())->getWeather()['aktuell']) ?></code>
<code><?= htmlspecialchars((new \getSpecificData())->getWeather()['aktuell']) ?></code>
</p>
<?php endif ?>
</div>
@@ -10,14 +10,11 @@ if (!isset($linkGroups) || !is_array($linkGroups)) {
}
?>
<!-- <h2>Externe Links</h2> -->
<div class="links-container">
<?php foreach ($linkGroups as $groupKey => $group): ?>
<?php
// Links dieser Gruppe sammeln
$groupLinks = array_filter($linkButtons, function($button) use ($groupKey, $isAdmin) {
if (($button['group'] ?? null) !== $groupKey) {
return false;
+41
View File
@@ -0,0 +1,41 @@
<h1>📊 Logs</h1>
<form method="GET" action="index.php">
<input type="hidden" name="service" value="<?= htmlspecialchars($serviceName) ?>">
<select name="filter" onchange="this.form.submit()">
<?php
$options = ['alle','today','node1','node2','node3','node4','counterperip'];
foreach ($options as $opt) {
$sel = ($filter === $opt) ? 'selected' : '';
echo "<option value='$opt' $sel>$opt</option>";
}
?>
</select>
</form>
<br>
<?php if (!$daten): ?>
<b>Keine Daten gefunden</b>
<?php else: ?>
<div style="overflow-x:auto;">
<table border="1" cellpadding="5" cellspacing="0" style="border-collapse:collapse;width:100%;">
<tr>
<?php foreach (array_keys($daten[0]) as $key): ?>
<th><?= htmlspecialchars($key) ?></th>
<?php endforeach; ?>
</tr>
<?php foreach ($daten as $row): ?>
<tr>
<?php foreach ($row as $val): ?>
<td><?= htmlspecialchars($val ?? '') ?></td>
<?php endforeach; ?>
</tr>
<?php endforeach; ?>
</table>
</div>
<?php endif; ?>
+57
View File
@@ -0,0 +1,57 @@
<button onclick="printFiles()">Alle Dateien drucken</button>
<div class="print-container">
<?php foreach ($files as $file):
$url = "static/" . rawurlencode($file);
$ext = strtolower(pathinfo($file, PATHINFO_EXTENSION));
?>
<div class="print-page">
<?php if (in_array($ext, ['png','jpg','jpeg','webp'])): ?>
<img src='<?= $url ?>'>
<?php elseif ($ext === "pdf"): ?>
<embed src='<?= $url ?>' type='application/pdf'>
<?php else: ?>
<p><?= htmlspecialchars($file) ?> kann nicht direkt gedruckt werden.</p>
<?php endif; ?>
</div>
<?php endforeach; ?>
</div>
<script>
function printFiles() {
window.print();
}
</script>
<style>
.print-page {
width: 100%;
height: 100vh;
page-break-after: always;
}
.print-page img {
max-width: 100%;
}
.print-page embed {
width: 100%;
height: 100vh;
}
@media print {
body * {
visibility: hidden;
}
.print-container,
.print-container * {
visibility: visible;
}
.print-container {
position: absolute;
top: 0;
left: 0;
width: 100%;
}
}
</style>
+105
View File
@@ -0,0 +1,105 @@
<script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
<script src="https://cdn.jsdelivr.net/npm/chartjs-plugin-zoom"></script>
<canvas id="logChart" width="900" height="500"></canvas>
<script>
const ctx = document.getElementById('logChart').getContext('2d');
const logChart = new Chart(ctx, {
type: 'line',
data: {
labels: <?php echo json_encode($allLabels); ?>,
datasets: [{
label: 'Gesamt',
data: <?php echo json_encode($finalTotalData); ?>,
borderColor: 'rgb(255, 0, 0)',
backgroundColor: 'rgba(0, 0, 0, 0.2)',
fill: false,
tension: 0
},
{
label: 'Node1',
data: <?php echo json_encode($finalNodeData['node1']); ?>,
borderColor: 'rgba(75, 192, 192, 1)',
backgroundColor: 'rgba(75, 192, 192, 0.2)',
fill: false,
tension: 0,
hidden: true,
},
{
label: 'Node2',
data: <?php echo json_encode($finalNodeData['node2']); ?>,
borderColor: 'rgba(255, 99, 132, 1)',
backgroundColor: 'rgba(255, 99, 132, 0.2)',
fill: false,
tension: 0,
hidden: true,
},
{
label: 'Node3',
data: <?php echo json_encode($finalNodeData['node3']); ?>,
borderColor: 'rgba(255, 206, 86, 1)',
backgroundColor: 'rgba(255, 206, 86, 0.2)',
fill: false,
tension: 0,
hidden: true,
},
{
label: 'Node4',
data: <?php echo json_encode($finalNodeData['node4']); ?>,
borderColor: 'rgba(54, 162, 235, 1)',
backgroundColor: 'rgba(54, 162, 235, 0.2)',
fill: false,
tension: 0,
hidden: true,
}
]
},
options: {
responsive: true,
maintainAspectRatio: false,
plugins: {
title: {
display: true,
text: 'Logs pro Tag nach Node und Gesamt'
},
legend: {
display: true,
position: 'top'
},
zoom: {
pan: {
enabled: true,
mode: 'x'
},
zoom: {
wheel: {
enabled: true
},
mode: 'x'
}
}
},
interaction: {
mode: 'index',
intersect: false
},
scales: {
x: {
title: {
display: true,
text: 'Datum'
}
},
y: {
beginAtZero: true,
title: {
display: true,
text: 'Anzahl Logs'
}
}
}
}
});
</script>
+193
View File
@@ -0,0 +1,193 @@
<div class="content">
<?php if (!$loggedIn): ?>
<div class="login-container">
<div class="login-box">
<form method="post">
<h2>🔐 Login</h2>
<?php if($error): ?>
<div class="status-msg" style="background:#dc3545; color:#fff;"><?= htmlspecialchars($error) ?>
</div>
<?php endif; ?>
<input type="password" name="password" placeholder="Passwort" required>
<button type="submit">Einloggen</button>
</form>
</div>
</div>
<?php else: ?>
<div class="content">
<h2>Seitenverwaltung</h2>
<form method="post">
<button type="submit" name="logout" id="logoutSiteButton">Logout</button>
</form>
<?php if($message): ?><div class="status-msg"><?= htmlspecialchars($message) ?></div><?php endif; ?>
<form method="post">
<!-- Sidebar Gruppen -->
<h2>📦 Sidebar Gruppen
<button type="button" class="btn-add" onclick="addNew('serviceGroup')">+ Neue Gruppe</button>
</h2>
<div class="admin-grid" id="container-serviceGroup">
<?php foreach ($serviceGroups as $id => $group): ?>
<div class="admin-card">
<span class="badge">ID: <?= htmlspecialchars($id) ?></span>
<input type="text" name="serviceGroups[<?= $id ?>][label]"
value="<?= htmlspecialchars($group['label']) ?>" placeholder="Anzeigename">
<label>
<input type="checkbox" name="serviceGroups[<?= $id ?>][defaultOpen]"
<?= ($group['defaultOpen'] ?? false) ? 'checked' : '' ?>>
Offen
</label>
</div>
<?php endforeach; ?>
</div>
<!-- Sidebar Services -->
<h2>🖥 Sidebar Services
<button type="button" class="btn-add" onclick="addNew('service')">+ Neuer Service</button>
</h2>
<div class="admin-grid" id="container-service">
<?php foreach ($services as $id => $s): ?>
<div class="admin-card">
<span class="badge">Datei: <?= htmlspecialchars($id) ?>.php</span>
<input type="text" name="services[<?= $id ?>][name]" value="<?= htmlspecialchars($s['name']) ?>"
placeholder="Name">
<label>Sidebar-Gruppe:</label>
<select name="services[<?= $id ?>][targetGroup]">
<?php foreach ($serviceGroups as $gid => $g): ?>
<option value="<?= $gid ?>"
<?= (isset($g['services']) && in_array($id, $g['services'])) ? 'selected' : '' ?>>
<?= htmlspecialchars($g['label']) ?>
</option>
<?php endforeach; ?>
</select>
<label>
<input type="checkbox" name="services[<?= $id ?>][active]"
<?= ($s['active'] ?? false) ? 'checked' : '' ?>>
Aktiv
</label>
|
<label>
<input type="checkbox" name="services[<?= $id ?>][adminOnly]"
<?= ($s['adminOnly'] ?? false) ? 'checked' : '' ?>>
Nur Admins
</label>
</div>
<?php endforeach; ?>
</div>
<!-- Dashboard Kategorien -->
<h2>🎨 Dashboard Kategorien
<button type="button" class="btn-add" onclick="addNew('linkGroup')">+ Neue Kategorie</button>
</h2>
<div class="admin-grid" id="container-linkGroup">
<?php foreach ($linkGroups as $id => $lg): ?>
<div class="admin-card">
<span class="badge">ID: <?= htmlspecialchars($id) ?></span>
<input type="text" name="linkGroups[<?= $id ?>][label]"
value="<?= htmlspecialchars($lg['label']) ?>" placeholder="Gruppen-Label">
<label>Farbe:</label>
<input type="color" name="linkGroups[<?= $id ?>][color]"
value="<?= $lg['color'] ?? '#3498db' ?>">
<label>
<input type="checkbox" name="linkGroups[<?= $id ?>][defaultOpen]"
<?= ($lg['defaultOpen'] ?? false) ? 'checked' : '' ?>>
Offen
</label>
</div>
<?php endforeach; ?>
</div>
<!-- Dashboard Kacheln -->
<h2>🔘 Dashboard Kacheln
<button type="button" class="btn-add" onclick="addNew('linkButton')">+ Neue Kachel</button>
</h2>
<div class="admin-grid" id="container-linkButton">
<?php foreach ($linkButtons as $key => $btn): ?>
<div class="admin-card">
<input type="text" name="linkButtons[<?= $key ?>][label]"
value="<?= htmlspecialchars($btn['label']) ?>" placeholder="Name">
<input type="text" name="linkButtons[<?= $key ?>][url]"
value="<?= htmlspecialchars($btn['url']) ?>" placeholder="URL">
<label>Dashboard Kategorie:</label>
<select name="linkButtons[<?= $key ?>][group]">
<?php foreach ($linkGroups as $id => $lg): ?>
<option value="<?= $id ?>" <?= ($btn['group'] == $id) ? 'selected' : '' ?>>
<?= htmlspecialchars($lg['label']) ?>
</option>
<?php endforeach; ?>
</select>
<div style="margin-top:5px;">
<label>
<input type="checkbox" name="linkButtons[<?= $key ?>][newTab]"
<?= ($btn['newTab'] ?? false) ? 'checked' : '' ?>>
Neuer Tab
</label>
|
<label>
<input type="checkbox" name="linkButtons[<?= $key ?>][adminOnly]"
<?= ($btn['adminOnly'] ?? false) ? 'checked' : '' ?>>
Nur Admins
</label>
</div>
</div>
<?php endforeach; ?>
</div>
<div class="save-bar">
<button type="submit" name="save" class="btn-save">💾 Gesamte Konfiguration speichern</button>
</div>
</form>
</div>
<?php endif; ?>
</div>
<script>
function addNew(type) {
const container = document.getElementById('container-' + type);
const tempId = 'new_' + Date.now();
const card = document.createElement('div');
card.className = 'admin-card new-item';
let html = `<div><span class="badge">Neu hinzufügen</span></div>`;
if (type === 'serviceGroup') {
html +=
`<input type="text" name="serviceGroups[${tempId}][new_id]" placeholder="ID">
<input type="text" name="serviceGroups[${tempId}][label]" placeholder="Name">
<label><input type="checkbox" name="serviceGroups[${tempId}][defaultOpen]" checked> Ausgeklappt</label>`;
} else if (type === 'service') {
html += `<input type="text" name="services[${tempId}][new_id]" placeholder="Datei ohne .php">
<input type="text" name="services[${tempId}][name]" placeholder="Anzeigename">
<label>Gruppe:</label>
<select name="services[${tempId}][targetGroup]">
<?php foreach ($serviceGroups as $gid => $gl): ?>
<option value="<?= $gid ?>"><?= $gl['label'] ?></option>
<?php endforeach; ?>
</select>
<label><input type="checkbox" name="services[${tempId}][active]" checked> Aktiv</label>`;
} else if (type === 'linkGroup') {
html += `<input type="text" name="linkGroups[${tempId}][new_id]" placeholder="ID">
<input type="text" name="linkGroups[${tempId}][label]" placeholder="Label">
<input type="color" name="linkGroups[${tempId}][color]" value="#3498db">`;
} else if (type === 'linkButton') {
html += `<input type="text" name="linkButtons[${tempId}][label]" placeholder="Anzeigename">
<input type="text" name="linkButtons[${tempId}][url]" placeholder="https://...">
<label>Kategorie:</label>
<select name="linkButtons[${tempId}][group]">
<?php foreach ($linkGroups as $gid => $gl): ?>
<option value="<?= $gid ?>"><?= $gl['label'] ?></option>
<?php endforeach; ?>
</select>
<label><input type="checkbox" name="linkButtons[${tempId}][newTab]" checked> Tab</label>
| <label><input type="checkbox" name="linkButtons[${tempId}][adminOnly]"> Nur Admins</label>`;
}
card.innerHTML = html;
container.appendChild(card);
card.scrollIntoView({
behavior: 'smooth'
});
}
</script>
+40
View File
@@ -0,0 +1,40 @@
<h2>Datenbank Struktur</h2>
<form method="GET">
<input type="hidden" name="service" value="tabellen">
<label for="table">Tabelle auswählen:</label>
<select name="table" id="table" onchange="this.form.submit()">
<option value="">-- Bitte wählen --</option>
<?php foreach ($tables as $table): ?>
<option value="<?= htmlspecialchars($table) ?>" <?= ($selectedTable === $table) ? 'selected' : '' ?>>
<?= htmlspecialchars($table) ?>
</option>
<?php endforeach; ?>
</select>
</form>
<?php if ($selectedTable && !empty($structure)): ?>
<div class='table-container'>
<table class='db-table'>
<tr>
<th>Field</th>
<th>Type</th>
<th>Null</th>
<th>Key</th>
<th>Default</th>
<th>Extra</th>
</tr>
<?php foreach ($structure as $column): ?>
<tr>
<td><?= htmlspecialchars($column['Field']) ?></td>
<td><?= htmlspecialchars($column['Type']) ?></td>
<td><?= htmlspecialchars($column['Null']) ?></td>
<td><?= htmlspecialchars($column['Key']) ?></td>
<td><?= htmlspecialchars($column['Default'] ?? '') ?></td>
<td><?= htmlspecialchars($column['Extra']) ?></td>
</tr>
<?php endforeach; ?>
</table>
</div>
<?php endif; ?>
@@ -1,78 +1,10 @@
<?php
// 1. Logik zum Verarbeiten des Formulars (bevor die Liste geladen wird)
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['add_user'])) {
// Nur Admins dürfen Benutzer hinzufügen (Sicherheitscheck)
if ((new getSpecificData())->getIsAdmin()) {
$controller = new UserController();
$controller->setUser(
$_POST['name'],
$_POST['nachname'],
$_POST['email'],
$_POST['passwort'],
$_POST['rolle'],
$_POST['admin'] ?? 0, // Falls Checkbox nicht gesetzt, 0 senden
$_POST['home_ip']
);
// Optional: Seite neu laden, um die Liste zu aktualisieren
header("Location: " . (new getSpecificData())->getReferer());
exit;
}
}
if (isset($_POST['password'])) {
if (isset($superuser['admin']['password']) && $_POST['password'] === $superuser['admin']['password']) {
$_SESSION['logged_in'] = true;
} else {
$error = "Falsches Passwort!";
}
}
// 2. Daten für die Tabelle holen (dein bestehender Code)
$specificData = new getSpecificData();
$isAdmin = $specificData->getIsAdmin();
if ($isAdmin) {
$users = DatabaseShow("Benutzer", "NAME, NACHNAME, EMAIL, ROLLE, ADMIN, HOME_IP");
} else {
$users = DatabaseShow(
"Benutzer",
"NAME, NACHNAME, EMAIL, ROLLE, ADMIN, HOME_IP",
"NAME = ?",
$specificData->getUsername()
);
}
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['delete_user'])) {
if ((new getSpecificData())->getIsAdmin()) {
$controller = new UserController();
$controller->DeleteUser(
$_POST['delete_name'],
$_POST['delete_nachname'],
$_POST['delete_email']
);
header("Location: " . (new getSpecificData())->getReferer());
exit;
}
}
if (isset($_POST['logout'])) {
unset($_SESSION['logged_in']);
header("Location: " . (new getSpecificData())->getReferer());
exit;
}
?>
<div class="content">
<?php if (!($_SESSION['logged_in'] ?? false)): ?>
<?php if (!$loggedIn): ?>
<div class="login-container">
<div class="login-box">
<form method="post">
<h2>🔐 Login</h2>
<?php if(isset($error)): ?>
<?php if($error): ?>
<div class="status-msg" style="background:#dc3545; color:#fff;"><?= htmlspecialchars($error) ?>
</div>
<?php endif; ?>
@@ -156,7 +88,3 @@ if (isset($_POST['logout'])) {
</div>
</div>
<?php endif; ?>
<script>
</script>
@@ -1,29 +1,3 @@
<?php
if (isset($_POST['toggle_variable'])) {
$name = $_POST['variablenname'];
$current = (new getSpecificData())->getLoggingStatus($name)[0]['WERT'];
$newValue = ($current === "ON") ? "OFF" : "ON";
DatabaseUpdate(
"Variablen",
"WERT = ?",
"VARIABLENNAME = ?",
$newValue,
$name
);
header("Location: " . (new getSpecificData())->getReferer());
exit;
}
$variablen = DatabaseShow(
"Variablen",
"VARIABLENNAME, WERT, ANZEIGENAME"
);
?>
<div class="admin-grid">
<?php foreach ($variablen as $var): ?>
@@ -52,4 +26,4 @@ $variablen = DatabaseShow(
</div>
<?php endforeach; ?>
</div>
</div>
+45
View File
@@ -0,0 +1,45 @@
<script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
<script src="https://cdn.jsdelivr.net/npm/chartjs-plugin-zoom"></script>
<canvas id="logChart" width="600" height="400"></canvas>
<script>
const ctx = document.getElementById('logChart').getContext('2d');
const logChart = new Chart(ctx, {
type: 'line',
data: {
labels: <?php echo json_encode($labels); ?>,
datasets: [{
label: 'Wetter',
data: <?php echo json_encode($data); ?>,
borderColor: 'rgba(75, 192, 192, 1)',
backgroundColor: 'rgba(75, 192, 192, 0.2)',
fill: false,
tension: 0
}]
},
options: {
responsive: true,
maintainAspectRatio: false,
plugins: {
title: { display: true },
legend: { display: true, position: 'top' },
zoom: {
pan: { enabled: true, mode: 'x' },
zoom: { wheel: { enabled: true }, mode: 'x' }
}
},
interaction: { mode: 'index', intersect: false },
scales: {
x: { title: { display: true, text: 'Zeitraum' } },
y: {
min: -10,
max: 40,
title: { display: true, text: 'Temperatur in °C' },
ticks: { stepSize: 1 },
beginAtZero: true
}
}
}
});
</script>
@@ -1,45 +1,3 @@
<?php
include_once __DIR__ . '/../controller/DatabaseController.php';
include_once __DIR__ . '/../controller/RoutesController.php';
$conn = db_connect();
$view = $_GET['view'] ?? 'show';
$selectedService = $_GET['service'];
// --- LOGIK: Überstunden-Eintrag (Abbau) speichern ---
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['add_overtime'])) {
$datum = $_POST['ot_date'];
$minuten = intval($_POST['ot_minutes']);
$grund = $conn->real_escape_string($_POST['ot_reason']);
DatabaseInsert(
"Ueberstunden",
"DATUM, MINUTEN, GRUND",
$datum,
$minuten,
$grund
);
redirectToWebsite((new getSpecificData())->getReferer());
exit;
}
// --- Gesamtsumme berechnen ---
$minuten_berichte = 0;
$res1 = $conn->query("SELECT SUM(OVERTIME) AS summe FROM Firmenberichte");
if ($row = $res1->fetch_object()) { $minuten_berichte = intval($row->summe); }
$minuten_abbau = 0;
$res2 = $conn->query("SELECT SUM(MINUTEN) AS summe FROM Ueberstunden WHERE GRUND = 'Abbau'");
if ($row = $res2->fetch_object()) { $minuten_abbau = intval($row->summe); }
$minuten_aufbau = 0;
$res2 = $conn->query("SELECT SUM(MINUTEN) AS summe FROM Ueberstunden WHERE GRUND = 'Aufbau'");
if ($row = $res2->fetch_object()) { $minuten_aufbau = intval($row->summe); }
$gesamt_minuten = $minuten_berichte - $minuten_abbau + $minuten_aufbau;
?>
<div class="arbeitsberichte-wrapper">
<div
style="background: rgba(150,150,150,0.05); padding: 25px; border-radius: 10px; margin-bottom: 25px; border: 1px solid rgba(150,150,150,0.2); border-left: 6px solid #007bff;">
@@ -50,7 +8,7 @@ $gesamt_minuten = $minuten_berichte - $minuten_abbau + $minuten_aufbau;
<?= intdiv($gesamt_minuten, 60) ?>h <?= abs($gesamt_minuten % 60) ?>min
</h2>
</div>
<?php if ($_SESSION['username'] == "bruno" || $_SESSION['username'] == "Bruno"): ?>
<?php if (strtolower($username) == "bruno"): ?>
<form method="POST" style="display: flex; gap: 15px; flex-wrap: wrap; align-items: flex-end;">
<input type="hidden" name="add_overtime" value="1">
<div style="display: flex; flex-direction: column; gap: 5px;">
@@ -65,9 +23,7 @@ $gesamt_minuten = $minuten_berichte - $minuten_abbau + $minuten_aufbau;
</div>
<div class="form-group">
<label style="font-size: 0.85rem; font-weight: 600; color: inherit;">Grund</label>
<select name="ot_reason" required>
<option value="">Bitte wählen</option>
<option value="Abbau">Abbau</option>
<option value="Aufbau">Aufbau</option>
@@ -81,4 +37,4 @@ $gesamt_minuten = $minuten_berichte - $minuten_abbau + $minuten_aufbau;
</form>
<?php endif ?>
</div>
</div>
</div>
+18
View File
@@ -0,0 +1,18 @@
<?php
spl_autoload_register(function ($class) {
$prefix = 'MVC\\';
$base_dir = __DIR__ . '/';
$len = strlen($prefix);
if (strncmp($prefix, $class, $len) !== 0) {
return;
}
$relative_class = substr($class, $len);
$file = $base_dir . str_replace('\\', '/', $relative_class) . '.php';
if (file_exists($file)) {
require $file;
}
});
@@ -1,262 +1,262 @@
<?php
class getSpecificData {
public function getWeather() {
$url = "https://api.openweathermap.org/data/2.5/weather?q=Jena,DE&APPID=5bc3e1a438c58fca444c4370ac0517b2&units=metric";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
$response = curl_exec($ch);
if(curl_errno($ch)) {
echo "cURL Fehler: " . curl_error($ch);
exit;
}
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($httpCode === 200) {
$data = json_decode($response, true);
return [
'aktuell' => $data['main']['temp'],
'min' => $data['main']['temp_min'],
'max' => $data['main']['temp_max'],
'gefuehlt' => $data['main']['feels_like']
];
} else {
return "API Fehler. HTTP Code: " . $httpCode;
}
}
public function getUserAgent(): string {
return $_SERVER['HTTP_USER_AGENT'] ?? 'Unbekannt';
}
public function getRequestURL(): string {
return $_SERVER['REQUEST_URI'] ?? 'Unbekannt';
}
public function getCookie(string $name): ?string {
return $_COOKIE[$name] ?? 'Unbekannt';
}
public function getSessionID(): string {
return $session_id ?? 'Unbekannt ';
}
public function getServerPort(): string {
return $_SERVER['SERVER_PORT'] ?? 'Unbekannt';
}
public function getClientPort(): string {
return $_SERVER['REMOTE_PORT'] ?? 'Unbekannt';
}
public function getDocumentRoot(): string {
return $_SERVER['DOCUMENT_ROOT'] ?? 'Unbekannt';
}
public function getQuery(): string {
return $_SERVER['QUERY_STRING'] ?? 'Unbekannt';
}
public function getRequestMethod(): string {
return $_SERVER['REQUEST_METHOD'] ?? 'Unbekannt';
}
public function getCurrentDir(): string {
return __DIR__ ;
}
public function getReferer(): string {
return $_SERVER['HTTP_REFERER'] ?? 'Unbekannt';
}
public function getWebsite(): string {
return $_SERVER['HTTP_HOST'] ?? 'Unbekannt';
}
public function getDatabase(): string {
$conn = db_connect();
return $conn->host_info;
}
public function getLoggingStatus($variable) {
$status = DatabaseShow(
"Variablen",
"WERT",
"VARIABLENNAME = ?",
$variable
);
return $status;
}
public function getServerName(): string {
$Servername = $_SERVER['SERVER_NAME'] ?? 'Unbekannt';
if (in_array($Servername, ['Unbekannt', '0.0.0.0', '127.0.0.1'])) {
return "Lokal";
} else {
return $Servername;
}
}
public function getServerIP(): string {
$ServerIP = $_SERVER['SERVER_ADDR'] ?? 'Unbekannt';
if (in_array($ServerIP, ['Unbekannt', '0.0.0.0', '127.0.0.1'])) {
return "Lokal";
} else {
return $ServerIP;
}
}
public function getClientIP(): string {
$xff = $_SERVER['HTTP_X_FORWARDED_FOR'] ?? null;
if ($xff) {
$ips = array_map('trim', explode(',', $xff));
$clientIp = $ips[0];
return $clientIp;
} else {
return $_SERVER['REMOTE_ADDR'];
}
}
public function getRequestTime(): string {
date_default_timezone_set('Europe/Berlin');
$timestamp = $_SERVER['REQUEST_TIME'] ?? time();
return date('Y-m-d H:i:s', $timestamp);
}
function getGeoIP($ClientIP) {
if (in_array($ClientIP, ['0.0.0.0', '127.0.0.1', '172.30.0.1'])) {
return "Lokal";
} elseif (in_array($ClientIP, ['Unbekannt', '0.0.0.0', '127.0.0.1'])) {
return "Lokal";
} else {
$response = file_get_contents("http://ip-api.com/json/{$ClientIP}?fields=country,countryCode");
$data = json_decode($response);
return $data->country;
}
}
function getWhitelistedIPs() {
include_once 'DatabaseController.php';
$data = DatabaseShow(
"Whitelisted",
"`IP-ADDRESSE`"
);
$results = [];
foreach ($data as $row) {
$results[] =$row['IP-ADDRESSE'];
}
return $results;
}
function getServerNode($ServerIP) {
$nodes = [
'node1' => '172.30.0.11',
'node1' => '172.30.0.21',
'node2' => '172.30.0.12',
'node2' => '172.30.0.22',
'node3' => '172.30.0.13',
'node3' => '172.30.0.23',
'node4' => '172.30.0.14',
'node4' => '172.30.0.24',
'Lokal' => 'Lokal',
];
foreach ($nodes as $node => $ip) {
if ($ServerIP == $ip) {
return $node;
break;
}
}
}
function getClientStatus($ClientIP) {
if (in_array($ClientIP, $this->getWhitelistedIPs())) {
return "Trusted";
}
return "Untrusted";
}
function getIsAdmin(){
return $_SESSION['is_admin'] ?? false;
}
function getIsSuperuser(){
return $_SESSION['is_superuser'] ?? false;
}
function getUsername(){
return $_SESSION['username'] ?? 'Gast';
}
public function getAllData(): array {
return [
'Server - Document Root' => $this->getDocumentRoot(),
'Server - Current Dir' => $this->getCurrentDir(),
'Server - Name' => $this->getServerName(),
'Server - IP' => $this->getServerIP(),
'Server - Port' => $this->getServerPort(),
'Server - Node' => $this->getServerNode($this->getServerIP()),
'Server - Database' => $this->getDatabase(),
'Request - URL' => $this->getRequestURL(),
'Request - Method' => $this->getRequestMethod(),
'Request - Query' => $this->getQuery(),
'Request - Referer' => $this->getReferer(),
'Request - Time' => $this->getRequestTime(),
'Client - IP' => $this->getClientIP(),
'Client - Port' => $this->getClientPort(),
'Client - Country' => $this->getGeoIP($this->getClientIP()),
'Client - User Agent' => $this->getUserAgent(),
'Client - Cookie USER' => $this->getCookie('USER'),
'Client - Cookie SESSSRV' => $this->getCookie('SESSSRV'),
'Client - Session ID' => $this->getSessionID(),
'Access - Whitelisted' => $this->getClientStatus($this->getClientIP()),
'Access - Whitelisted IPs' => $this->getWhitelistedIPs(),
'User - Username' => $this->getUsername(),
'User - Is Admin' => $this->getIsAdmin(),
'User - Is Superuser' => $this->getIsSuperuser(),
'System - Website' => $this->getWebsite(),
'Logging - Public' => $this->getLoggingStatus('GENERAL_PUBLIC_LOGGING')[0]['WERT'],
'Logging - Public DEV' => $this->getLoggingStatus('DEV_PUBLIC_LOGGING')[0]['WERT'],
'Logging - Backend' => $this->getLoggingStatus('GENERAL_BACKEND_LOGGING')[0]['WERT'],
'Logging - Backend DEV' => $this->getLoggingStatus('DEV_BACKEND_LOGGING')[0]['WERT'],
];
}
public function ShowAllData(): void {
$SpecificData = (new getSpecificData())->getAllData();
echo "<pre>";
foreach ($SpecificData as $key => $value) {
if (is_array($value)) {
$value = implode(', ', $value);
}
printf("%-22s : %s\n", $key, $value);
}
echo "</pre>";
}
<?php
class getSpecificData {
public function getWeather() {
$url = "https://api.openweathermap.org/data/2.5/weather?q=Jena,DE&APPID=5bc3e1a438c58fca444c4370ac0517b2&units=metric";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
$response = curl_exec($ch);
if(curl_errno($ch)) {
echo "cURL Fehler: " . curl_error($ch);
exit;
}
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($httpCode === 200) {
$data = json_decode($response, true);
return [
'aktuell' => $data['main']['temp'],
'min' => $data['main']['temp_min'],
'max' => $data['main']['temp_max'],
'gefuehlt' => $data['main']['feels_like']
];
} else {
return "API Fehler. HTTP Code: " . $httpCode;
}
}
public function getUserAgent(): string {
return $_SERVER['HTTP_USER_AGENT'] ?? 'Unbekannt';
}
public function getRequestURL(): string {
return $_SERVER['REQUEST_URI'] ?? 'Unbekannt';
}
public function getCookie(string $name): ?string {
return $_COOKIE[$name] ?? 'Unbekannt';
}
public function getSessionID(): string {
return $session_id ?? 'Unbekannt ';
}
public function getServerPort(): string {
return $_SERVER['SERVER_PORT'] ?? 'Unbekannt';
}
public function getClientPort(): string {
return $_SERVER['REMOTE_PORT'] ?? 'Unbekannt';
}
public function getDocumentRoot(): string {
return $_SERVER['DOCUMENT_ROOT'] ?? 'Unbekannt';
}
public function getQuery(): string {
return $_SERVER['QUERY_STRING'] ?? 'Unbekannt';
}
public function getRequestMethod(): string {
return $_SERVER['REQUEST_METHOD'] ?? 'Unbekannt';
}
public function getCurrentDir(): string {
return __DIR__ ;
}
public function getReferer(): string {
return $_SERVER['HTTP_REFERER'] ?? 'Unbekannt';
}
public function getWebsite(): string {
return $_SERVER['HTTP_HOST'] ?? 'Unbekannt';
}
public function getDatabase(): string {
$conn = db_connect();
return $conn->host_info;
}
public function getLoggingStatus($variable) {
$status = DatabaseShow(
"Variablen",
"WERT",
"VARIABLENNAME = ?",
$variable
);
return $status;
}
public function getServerName(): string {
$Servername = $_SERVER['SERVER_NAME'] ?? 'Unbekannt';
if (in_array($Servername, ['Unbekannt', '0.0.0.0', '127.0.0.1'])) {
return "Lokal";
} else {
return $Servername;
}
}
public function getServerIP(): string {
$ServerIP = $_SERVER['SERVER_ADDR'] ?? 'Unbekannt';
if (in_array($ServerIP, ['Unbekannt', '0.0.0.0', '127.0.0.1'])) {
return "Lokal";
} else {
return $ServerIP;
}
}
public function getClientIP(): string {
$xff = $_SERVER['HTTP_X_FORWARDED_FOR'] ?? null;
if ($xff) {
$ips = array_map('trim', explode(',', $xff));
$clientIp = $ips[0];
return $clientIp;
} else {
return $_SERVER['REMOTE_ADDR'];
}
}
public function getRequestTime(): string {
date_default_timezone_set('Europe/Berlin');
$timestamp = $_SERVER['REQUEST_TIME'] ?? time();
return date('Y-m-d H:i:s', $timestamp);
}
function getGeoIP($ClientIP) {
if (in_array($ClientIP, ['0.0.0.0', '127.0.0.1', '172.30.0.1'])) {
return "Lokal";
} elseif (in_array($ClientIP, ['Unbekannt', '0.0.0.0', '127.0.0.1'])) {
return "Lokal";
} else {
$response = file_get_contents("http://ip-api.com/json/{$ClientIP}?fields=country,countryCode");
$data = json_decode($response);
return $data->country;
}
}
function getWhitelistedIPs() {
include_once(__DIR__ . '/../utils/databaseMethods.php');
$data = DatabaseShow(
"Whitelisted",
"`IP-ADDRESSE`"
);
$results = [];
foreach ($data as $row) {
$results[] =$row['IP-ADDRESSE'];
}
return $results;
}
function getServerNode($ServerIP) {
$nodes = [
'node1' => '172.30.0.11',
'node1' => '172.30.0.21',
'node2' => '172.30.0.12',
'node2' => '172.30.0.22',
'node3' => '172.30.0.13',
'node3' => '172.30.0.23',
'node4' => '172.30.0.14',
'node4' => '172.30.0.24',
'Lokal' => 'Lokal',
];
foreach ($nodes as $node => $ip) {
if ($ServerIP == $ip) {
return $node;
break;
}
}
}
function getClientStatus($ClientIP) {
if (in_array($ClientIP, $this->getWhitelistedIPs())) {
return "Trusted";
}
return "Untrusted";
}
function getIsAdmin(){
return $_SESSION['is_admin'] ?? false;
}
function getIsSuperuser(){
return $_SESSION['is_superuser'] ?? false;
}
function getUsername(){
return $_SESSION['username'] ?? 'Gast';
}
public function getAllData(): array {
return [
'Server - Document Root' => $this->getDocumentRoot(),
'Server - Current Dir' => $this->getCurrentDir(),
'Server - Name' => $this->getServerName(),
'Server - IP' => $this->getServerIP(),
'Server - Port' => $this->getServerPort(),
'Server - Node' => $this->getServerNode($this->getServerIP()),
'Server - Database' => $this->getDatabase(),
'Request - URL' => $this->getRequestURL(),
'Request - Method' => $this->getRequestMethod(),
'Request - Query' => $this->getQuery(),
'Request - Referer' => $this->getReferer(),
'Request - Time' => $this->getRequestTime(),
'Client - IP' => $this->getClientIP(),
'Client - Port' => $this->getClientPort(),
'Client - Country' => $this->getGeoIP($this->getClientIP()),
'Client - User Agent' => $this->getUserAgent(),
'Client - Cookie USER' => $this->getCookie('USER'),
'Client - Cookie SESSSRV' => $this->getCookie('SESSSRV'),
'Client - Session ID' => $this->getSessionID(),
'Access - Whitelisted' => $this->getClientStatus($this->getClientIP()),
'Access - Whitelisted IPs' => $this->getWhitelistedIPs(),
'User - Username' => $this->getUsername(),
'User - Is Admin' => $this->getIsAdmin(),
'User - Is Superuser' => $this->getIsSuperuser(),
'System - Website' => $this->getWebsite(),
'Logging - Public' => $this->getLoggingStatus('GENERAL_PUBLIC_LOGGING')[0]['WERT'],
'Logging - Public DEV' => $this->getLoggingStatus('DEV_PUBLIC_LOGGING')[0]['WERT'],
'Logging - Backend' => $this->getLoggingStatus('GENERAL_BACKEND_LOGGING')[0]['WERT'],
'Logging - Backend DEV' => $this->getLoggingStatus('DEV_BACKEND_LOGGING')[0]['WERT'],
];
}
public function ShowAllData(): void {
$SpecificData = (new getSpecificData())->getAllData();
echo "<pre>";
foreach ($SpecificData as $key => $value) {
if (is_array($value)) {
$value = implode(', ', $value);
}
printf("%-22s : %s\n", $key, $value);
}
echo "</pre>";
}
}
+31
View File
@@ -0,0 +1,31 @@
APP_ENV = "vpn"
DB_LOCAL_HOST = "127.0.0.1"
DB_LOCAL_USERNAME = "worker"
DB_LOCAL_PASSWORD = "bBHofurUJWKzPE8Z"
DB_LOCAL_DATABASE = "DEV"
DB_VPN_HOST = "100.123.136.86"
DB_VPN_USERNAME = "worker"
DB_VPN_PASSWORD = "bBHofurUJWKzPE8Z"
DB_VPN_DATABASE = "DEV"
DB_BACKUP_HOST = "10.233.1.241"
DB_BACKUP_USERNAME = "worker"
DB_BACKUP_PASSWORD = "bBHofurUJWKzPE8Z"
DB_BACKUP_DATABASE = "DEV"
DB_DEV_HOST = "10.233.1.243"
DB_DEV_USERNAME = "worker"
DB_DEV_PASSWORD = "bBHofurUJWKzPE8Z"
DB_DEV_DATABASE = "DEV"
DB_LIVE_HOST = "10.233.1.244"
DB_LIVE_USERNAME = "worker"
DB_LIVE_PASSWORD = "bBHofurUJWKzPE8Z"
DB_LIVE_DATABASE = "DEV"
DB_ERROR_HOST = "10.233.1.244"
DB_ERROR_USERNAME = "error"
DB_ERROR_PASSWORD = "bBHofurUJWKzPE8Z"
DB_ERROR_DATABASE = "DEV"
@@ -1,7 +1,11 @@
<?php
require(__DIR__ . '/../utils/formatter.php');
class ApiController {
use ReponseFormatter;
/**
* method for pretty jsonsuccess output
*
@@ -9,13 +13,7 @@ class ApiController {
* @return string
*/
public function jsonSuccess($data) {
return json_encode(
[
'status' => 'success',
'data' => $data,
],
JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE
);
return $this->formatJson("success", $data);
}
/**
@@ -25,14 +23,7 @@ class ApiController {
* @return string
*/
public function jsonError ($error) {
echo json_encode(
[
'status' => 'failed',
'data' => 'none',
'error' => $error
],
JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE
);
return $this->formatJson("failed", $error);
}
/**
@@ -61,12 +52,8 @@ class ApiController {
$validTokens = $this->getAuthKey();
if (!in_array($token, $validTokens)) {
http_response_code(401);
$error = json_encode([
"error" => "Unauthorized",
"debug_received_token" => $token,
]);
echo $this->jsonError($error);
$error = $this->formatJson("error", $token);
DatabaseInsert(
"API_LOGS",
@@ -99,4 +86,31 @@ class ApiController {
'{"status": "success"}',
);
}
/**
* create new api token
*
*/
private function createToken() {
return bin2hex(random_bytes(32));
}
/**
* save created api token
*
* @return bool
*/
public function saveToken() {
try {
DatabaseInsert(
"API_Credentials",
"TOKEN, BENUTZER",
$this->createToken(),
"API-User"
);
} catch (Exception $error) {
return false;
}
return true;
}
}
@@ -1,39 +1,39 @@
<?php
class cookieController {
public function setCookie(string $CookieName, int $CookieValue, int $CookieTime) {
setcookie($CookieName, $CookieValue, time()+($CookieTime*60));
}
public function readCookieValue(string $CookieName) {
if (isset($_COOKIE[$CookieName])) {
return $_COOKIE[$CookieName];
}
return 'Cookie not set';
}
public function DeleteCookie(string $CookieName) {
setcookie($CookieName, "", time()-(3600*24));
}
}
// USE:
/**
* Cookie setzen:
* $cookieManager = new cookieController();
* $cookieManager->SetCookie("USER", "7", 60);
*/
/**
* Cookie auslesen:
* $cookieValue = $cookieManager->readCookieValueCookie("USER");
* echo $cookieValue;
*/
/**
* Cookie loeschen:
* $cookieManager->DeleteCookie("USER");
<?php
class cookieController {
public function setCookie(string $CookieName, int $CookieValue, int $CookieTime) {
setcookie($CookieName, $CookieValue, time()+($CookieTime*60));
}
public function readCookieValue(string $CookieName) {
if (isset($_COOKIE[$CookieName])) {
return $_COOKIE[$CookieName];
}
return 'Cookie not set';
}
public function DeleteCookie(string $CookieName) {
setcookie($CookieName, "", time()-(3600*24));
}
}
// USE:
/**
* Cookie setzen:
* $cookieManager = new cookieController();
* $cookieManager->SetCookie("USER", "7", 60);
*/
/**
* Cookie auslesen:
* $cookieValue = $cookieManager->readCookieValueCookie("USER");
* echo $cookieValue;
*/
/**
* Cookie loeschen:
* $cookieManager->DeleteCookie("USER");
*/
@@ -0,0 +1,88 @@
<?php
include_once(__DIR__ . '/../utils/formatter.php');
class RightsController {
use ReponseFormatter;
/**
* save new site with sitename
*
* @param string $sitename
*/
private function saveSite($sitename) {
DatabaseInsert(
"Backend_Seiten",
"DATEINAME",
$sitename
);
}
/**
* get site id by sitename
*
* @param string $sitename
* @return int
*/
private function getSiteID($sitename) {
$id = DatabaseShow(
"Backend_Seiten",
"ID",
"DATEINAME = ?",
$sitename
);
return $id[0]['ID'];
}
/**
* get user id
*
* @param string $name
* @param string $lastname
* @return int
*/
private function getUserID($name, $lastname) {
$id = DatabaseShow(
"Benutzer",
"ID",
"NAME = ? AND NACHNAME = ?",
$name,
$lastname
);
return $id[0]['ID'];
}
/**
* Rights Handler for saving default user is Bruno
*
* @param string $sitename
* @param string $name
* @param string $lastname
* @return string
*/
public function RightsHandler($sitename, $name = 'Bruno', $lastname = 'Eckhardt') {
try {
$sitename = strtolower($sitename);
$this->saveSite($sitename);
DatabaseInsert(
"Benutzer_Berechtigungen",
"BENUTZER_ID, SEITEN_ID",
$this->getUserID($name, $lastname),
$this->getSiteID($sitename)
);
} catch (Exception $error) {
return json_encode(
[
"status" => "failed",
"error" => $error->getMessage()
], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE
);
}
return json_encode(
[
"status" => "success",
], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE
);
}
}
@@ -1,5 +1,6 @@
<?php
class UserController {
public function setUser($name, $nachname, $email, $passwort, $rolle, $admin, $home_ip) {
+40
View File
@@ -0,0 +1,40 @@
<?php
$_ENV = parse_ini_file(__DIR__ . '/../config/env.ini');
include_once( __DIR__ . '/../utils/mailer.php');
include_once( __DIR__ . '/../utils/router.php');
include_once( __DIR__ . '/../classes/getData.php');
function db_connect() {
$environment = $_ENV['APP_ENV'];
if (function_exists('mysqli_report')) {
mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
}
try {
$conn = new mysqli(
$_ENV['DB_' . strtoupper($environment) . '_HOST'],
$_ENV['DB_' . strtoupper($environment) . '_USERNAME'],
$_ENV['DB_' . strtoupper($environment) . '_PASSWORD'],
$_ENV['DB_' . strtoupper($environment) . '_DATABASE']
);
$conn->set_charset("utf8mb4");
return $conn;
} catch (mysqli_sql_exception $e) {
errorMail(
"Database Connection failed",
$e->getMessage(),
false
);
redirectToWebsite("https://blackpi.ipv64.net");
throw $e;
}
}
db_connect();
?>
File renamed without changes.
@@ -1,270 +1,270 @@
<?php
function DatabaseCreateTable($table, $columnsDefinition) {
include_once 'DatabaseConnect.php';
$conn = db_connect();
$sql = "CREATE TABLE IF NOT EXISTS `$table` ($columnsDefinition)";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute()) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function DatabaseShowTables() {
include_once 'DatabaseConnect.php';
$conn = db_connect();
$tablesResult = $conn->query("SHOW TABLES");
if (!$tablesResult) {
die("Fehler beim Laden der Tabellen: " . $conn->error);
}
$tables = [];
while ($tableRow = $tablesResult->fetch_array()) {
$tables[] = $tableRow[0];
}
return $tables;
}
function DatabaseShowTableStructure($table) {
include_once 'DatabaseConnect.php';
$conn = db_connect();
$stmt = $conn->prepare("SHOW COLUMNS FROM `$table`");
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute()) {
die("Fehler beim Execute: " . $stmt->error);
}
$result = $stmt->get_result();
$columns = [];
while ($column = $result->fetch_assoc()) {
$columns[] = [
"Field" => $column["Field"],
"Type" => $column["Type"],
"Null" => $column["Null"],
"Key" => $column["Key"],
"Default" => $column["Default"],
"Extra" => $column["Extra"]
];
}
return $columns;
}
function DatabaseShow($table, $columns = "*", $where = "", ...$values) {
include_once 'DatabaseConnect.php';
$conn = db_connect();
$sql = "SELECT $columns FROM `$table`";
if (!empty($where)) {
$sql .= " WHERE $where";
}
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
$result = $stmt->get_result();
return $result->fetch_all(MYSQLI_ASSOC);
}
function DatabaseInsert($table, $columns, ...$values) {
include_once 'DatabaseConnect.php';
$conn = db_connect();
$placeholders = rtrim(str_repeat("?,", count($values)), ",");
$sql = "INSERT INTO `$table` ($columns) VALUES ($placeholders)";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function DatabaseDelete($table, $where, ...$values) {
include_once 'DatabaseConnect.php';
$conn = db_connect();
$sql = "DELETE FROM `$table` WHERE $where";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function DatabaseUpdate($table, $set, $where, ...$values) {
include_once 'DatabaseConnect.php';
$conn = db_connect();
$sql = "UPDATE `$table` SET $set WHERE $where";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function getFKValue($conn, $table, $key, $value, $id, &$cache) {
if ($id === null) return null;
$cacheKey = $table . "_" . $id;
if (isset($cache[$cacheKey])) {
return $cache[$cacheKey];
}
$stmt = $conn->prepare("SELECT `$value` FROM `$table` WHERE `$key` = ? LIMIT 1");
if (!$stmt) {
die("FK Prepare Fehler: " . $conn->error);
}
$stmt->bind_param("i", $id);
$stmt->execute();
$result = $stmt->get_result()->fetch_assoc();
$valueResult = $result[$value] ?? null;
$cache[$cacheKey] = $valueResult;
return $valueResult;
}
function DatabaseShowWithFK($table, $fkMap = [], $columns = "*", $where = "", ...$values) {
include_once 'DatabaseConnect.php';
$conn = db_connect();
$cache = [];
$select = is_array($columns) ? implode(", ", $columns) : $columns;
$sql = "SELECT $select FROM `$table`";
if (!empty($where)) {
$sql .= " WHERE $where";
}
$stmt = $conn->prepare($sql);
if (!$stmt) die("Fehler beim Prepare: " . $conn->error);
if (!empty($values)) {
$stmt->execute($values);
} else {
$stmt->execute();
}
$result = $stmt->get_result();
if (!$result) die("Fehler beim get_result: " . $conn->error);
$rows = $result->fetch_all(MYSQLI_ASSOC);
foreach ($rows as &$row) {
foreach ($fkMap as $fkColumn => $fkInfo) {
if (!isset($row[$fkColumn]) || $row[$fkColumn] === null) {
continue;
}
$row[$fkColumn] = getFKValue(
$conn,
$fkInfo['table'],
$fkInfo['key'],
$fkInfo['value'],
$row[$fkColumn],
$cache
);
}
}
return [
"rows" => $rows
];
}
$Berufsschulberichte = [
"FACH_S1" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S1" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S1" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S2" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S2" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S2" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S3" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S3" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S3" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S4" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S4" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S4" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S5" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S5" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S5" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S6" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S6" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S6" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S7" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S7" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S7" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S8" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S8" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S8" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
];
$Stundenplan = [
"MO" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"DI" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"MI" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"DO" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"FR" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
];
$Berechtigungen = [
"BENUTZER_ID" => ["table" => "Benutzer", "key" => "ID", "value" => "NAME"],
"SEITEN_ID" => ["table" => "Backend_Seiten", "key" => "ID", "value" => "DATEINAME"]
<?php
function DatabaseCreateTable($table, $columnsDefinition) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$sql = "CREATE TABLE IF NOT EXISTS `$table` ($columnsDefinition)";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute()) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function DatabaseShowTables() {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$tablesResult = $conn->query("SHOW TABLES");
if (!$tablesResult) {
die("Fehler beim Laden der Tabellen: " . $conn->error);
}
$tables = [];
while ($tableRow = $tablesResult->fetch_array()) {
$tables[] = $tableRow[0];
}
return $tables;
}
function DatabaseShowTableStructure($table) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$stmt = $conn->prepare("SHOW COLUMNS FROM `$table`");
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute()) {
die("Fehler beim Execute: " . $stmt->error);
}
$result = $stmt->get_result();
$columns = [];
while ($column = $result->fetch_assoc()) {
$columns[] = [
"Field" => $column["Field"],
"Type" => $column["Type"],
"Null" => $column["Null"],
"Key" => $column["Key"],
"Default" => $column["Default"],
"Extra" => $column["Extra"]
];
}
return $columns;
}
function DatabaseShow($table, $columns = "*", $where = "", ...$values) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$sql = "SELECT $columns FROM `$table`";
if (!empty($where)) {
$sql .= " WHERE $where";
}
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
$result = $stmt->get_result();
return $result->fetch_all(MYSQLI_ASSOC);
}
function DatabaseInsert($table, $columns, ...$values) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$placeholders = rtrim(str_repeat("?,", count($values)), ",");
$sql = "INSERT INTO `$table` ($columns) VALUES ($placeholders)";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function DatabaseDelete($table, $where, ...$values) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$sql = "DELETE FROM `$table` WHERE $where";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function DatabaseUpdate($table, $set, $where, ...$values) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$sql = "UPDATE `$table` SET $set WHERE $where";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function getFKValue($conn, $table, $key, $value, $id, &$cache) {
if ($id === null) return null;
$cacheKey = $table . "_" . $id;
if (isset($cache[$cacheKey])) {
return $cache[$cacheKey];
}
$stmt = $conn->prepare("SELECT `$value` FROM `$table` WHERE `$key` = ? LIMIT 1");
if (!$stmt) {
die("FK Prepare Fehler: " . $conn->error);
}
$stmt->bind_param("i", $id);
$stmt->execute();
$result = $stmt->get_result()->fetch_assoc();
$valueResult = $result[$value] ?? null;
$cache[$cacheKey] = $valueResult;
return $valueResult;
}
function DatabaseShowWithFK($table, $fkMap = [], $columns = "*", $where = "", ...$values) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$cache = [];
$select = is_array($columns) ? implode(", ", $columns) : $columns;
$sql = "SELECT $select FROM `$table`";
if (!empty($where)) {
$sql .= " WHERE $where";
}
$stmt = $conn->prepare($sql);
if (!$stmt) die("Fehler beim Prepare: " . $conn->error);
if (!empty($values)) {
$stmt->execute($values);
} else {
$stmt->execute();
}
$result = $stmt->get_result();
if (!$result) die("Fehler beim get_result: " . $conn->error);
$rows = $result->fetch_all(MYSQLI_ASSOC);
foreach ($rows as &$row) {
foreach ($fkMap as $fkColumn => $fkInfo) {
if (!isset($row[$fkColumn]) || $row[$fkColumn] === null) {
continue;
}
$row[$fkColumn] = getFKValue(
$conn,
$fkInfo['table'],
$fkInfo['key'],
$fkInfo['value'],
$row[$fkColumn],
$cache
);
}
}
return [
"rows" => $rows
];
}
$Berufsschulberichte = [
"FACH_S1" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S1" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S1" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S2" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S2" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S2" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S3" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S3" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S3" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S4" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S4" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S4" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S5" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S5" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S5" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S6" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S6" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S6" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S7" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S7" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S7" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
"FACH_S8" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"LEHRER_S8" => ["table" => "Lehrer", "key" => "ID", "value" => "NAME"],
"RAUM_S8" => ["table" => "Raum", "key" => "ID", "value" => "Raum_NR"],
];
$Stundenplan = [
"MO" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"DI" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"MI" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"DO" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
"FR" => ["table" => "Fach", "key" => "ID", "value" => "Fach"],
];
$Berechtigungen = [
"BENUTZER_ID" => ["table" => "Benutzer", "key" => "ID", "value" => "NAME"],
"SEITEN_ID" => ["table" => "Backend_Seiten", "key" => "ID", "value" => "DATEINAME"]
];
+31
View File
@@ -0,0 +1,31 @@
<?php
trait ReponseFormatter {
/**
* json pretty print method
*
* @param string $status
* @param mixed $data
* @param string $field
* @param string $extra
* @return bool
*/
public function formatJson($status, $data, $field = 'extra', $extra = '') {
try {
return json_encode(
[
"status" => $status,
"data" => $data,
$field => $extra
], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE
);
} catch (Exception $error) {
return json_encode(
[
"status" => "error",
"data" => $error->getMessage(),
], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE
);
}
}
}
@@ -1,7 +1,7 @@
<?php
include_once __DIR__ . '/../controller/DatabaseController.php';
include_once __DIR__ . '/../controller/DataController.php';
include_once __DIR__ . '/databaseMethods.php';
include_once __DIR__ . '/../classes/getData.php';
function sendMail($subject, $message, $url, bool $log) {
$headers = "From: bruno.eckhardt07@gmail.com\r\n";
@@ -1,102 +1,102 @@
<?php
function logging() {
include_once 'DataController.php';
include_once 'DatabaseConnect.php';
include_once 'DatabaseController.php';
include_once __DIR__ . '/../modules/Mail.php';
if ((new getSpecificData())->getLoggingStatus("GENERAL_BACKEND_LOGGING")[0]['WERT'] == 'ON') {
mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
try {
$ClientIP = (new getSpecificData())->getClientIP();
$UserAgent = (new getSpecificData())->getUserAgent();
$RequestURL = (new getSpecificData())->getRequestURL();
$USERCOOKIE = (new getSpecificData())->getCookie("USER");
$SessionID = (new getSpecificData())->getSessionID();
$REQUESTTIME = (new getSpecificData())->getRequestTime();
$QUERY = (new getSpecificData())->getQuery();
$LAND = (new getSpecificData())->getGeoIP($ClientIP);
$Whitelisted = (new getSpecificData())->getWhitelistedIPs();
$node = (new getSpecificData())->getServerNode((new getSpecificData())->getServerIP());
$username = $_SESSION['username'] ?? 'Unbekannt';
$website = (new getSpecificData())->getWebsite();
if ((new getSpecificData())->getLoggingStatus("DEV_BACKEND_LOGGING")[0]['WERT'] == 'OFF') {
if (in_array($ClientIP, $Whitelisted)) {
return;
}
}
$db_conn = db_connect();
$stmt = $db_conn->prepare("SELECT * FROM logs WHERE
`CLIENT_IP` LIKE ? and
`REQUEST_URL` = ? and
`REQUEST_URL` <> '/favicon.ico'
");
$stmt->bind_param("ss", $ClientIP, $RequestURL);
$stmt->execute();
$stmt->store_result();
if ($RequestURL !== '/favicon.ico') {
if ($stmt->num_rows > 0) { //wenn mindestens eine zeile vorhanden ist für die client ip dann führe updates durch, wenn nicht mache neue zeile
$updateCounter = $db_conn->prepare("
UPDATE logs
SET COUNTER = COUNTER + 1
WHERE `CLIENT_IP` = ?
AND `REQUEST_URL` = ?
");
$updateCounter->bind_param("ss", $ClientIP, $RequestURL);
$updateCounter->execute();
$updateLastRequest = $db_conn->prepare("
UPDATE logs
SET `LAST_REQUEST` = ?
WHERE `CLIENT_IP` = ?
AND `REQUEST_URL` = ?
");
$updateLastRequest->bind_param("sss", $REQUESTTIME, $ClientIP, $RequestURL);
$updateLastRequest->execute();
$updateCookieValue = $db_conn->prepare("
UPDATE logs
SET `USER_COOKIE_VALUE` = ?
WHERE `CLIENT_IP` = ?
AND `REQUEST_URL` = ?
");
$updateCookieValue->bind_param("sss", $USERCOOKIE, $ClientIP, $RequestURL);
$updateCookieValue->execute();
} else {
DatabaseInsert(
"logs",
"CLIENT_IP, LAND, SERVER_IP, USER_AGENT, REQUEST_URL, USER_COOKIE_VALUE, USER_SESSION_VALUE, FIRST_REQUEST, QUERY, WEBSITE, USER",
$ClientIP,
$LAND,
$node,
$UserAgent,
$RequestURL,
$USERCOOKIE,
$SessionID,
$REQUESTTIME,
$QUERY,
$website,
$username
);
}
}
} catch (mysqli_sql_exception $e) {
errorMail(
"Logging failed",
$e->getMessage(),
true,
);
throw $e;
}
}
<?php
function logging() {
include_once( __DIR__ . '/../classes/getData.php');
include_once( __DIR__ . '/../database/databaseConnect.php');
include_once( __DIR__ . '/../utils/databaseMethods.php');
include_once( __DIR__ . '/../utils/mailer.php');
if ((new getSpecificData())->getLoggingStatus("GENERAL_BACKEND_LOGGING")[0]['WERT'] == 'ON') {
mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
try {
$ClientIP = (new getSpecificData())->getClientIP();
$UserAgent = (new getSpecificData())->getUserAgent();
$RequestURL = (new getSpecificData())->getRequestURL();
$USERCOOKIE = (new getSpecificData())->getCookie("USER");
$SessionID = (new getSpecificData())->getSessionID();
$REQUESTTIME = (new getSpecificData())->getRequestTime();
$QUERY = (new getSpecificData())->getQuery();
$LAND = (new getSpecificData())->getGeoIP($ClientIP);
$Whitelisted = (new getSpecificData())->getWhitelistedIPs();
$node = (new getSpecificData())->getServerNode((new getSpecificData())->getServerIP());
$username = $_SESSION['username'] ?? 'Unbekannt';
$website = (new getSpecificData())->getWebsite();
if ((new getSpecificData())->getLoggingStatus("DEV_BACKEND_LOGGING")[0]['WERT'] == 'OFF') {
if (in_array($ClientIP, $Whitelisted)) {
return;
}
}
$db_conn = db_connect();
$stmt = $db_conn->prepare("SELECT * FROM logs WHERE
`CLIENT_IP` LIKE ? and
`REQUEST_URL` = ? and
`REQUEST_URL` <> '/favicon.ico'
");
$stmt->bind_param("ss", $ClientIP, $RequestURL);
$stmt->execute();
$stmt->store_result();
if ($RequestURL !== '/favicon.ico') {
if ($stmt->num_rows > 0) { //wenn mindestens eine zeile vorhanden ist für die client ip dann führe updates durch, wenn nicht mache neue zeile
$updateCounter = $db_conn->prepare("
UPDATE logs
SET COUNTER = COUNTER + 1
WHERE `CLIENT_IP` = ?
AND `REQUEST_URL` = ?
");
$updateCounter->bind_param("ss", $ClientIP, $RequestURL);
$updateCounter->execute();
$updateLastRequest = $db_conn->prepare("
UPDATE logs
SET `LAST_REQUEST` = ?
WHERE `CLIENT_IP` = ?
AND `REQUEST_URL` = ?
");
$updateLastRequest->bind_param("sss", $REQUESTTIME, $ClientIP, $RequestURL);
$updateLastRequest->execute();
$updateCookieValue = $db_conn->prepare("
UPDATE logs
SET `USER_COOKIE_VALUE` = ?
WHERE `CLIENT_IP` = ?
AND `REQUEST_URL` = ?
");
$updateCookieValue->bind_param("sss", $USERCOOKIE, $ClientIP, $RequestURL);
$updateCookieValue->execute();
} else {
DatabaseInsert(
"logs",
"CLIENT_IP, LAND, SERVER_IP, USER_AGENT, REQUEST_URL, USER_COOKIE_VALUE, USER_SESSION_VALUE, FIRST_REQUEST, QUERY, WEBSITE, USER",
$ClientIP,
$LAND,
$node,
$UserAgent,
$RequestURL,
$USERCOOKIE,
$SessionID,
$REQUESTTIME,
$QUERY,
$website,
$username
);
}
}
} catch (mysqli_sql_exception $e) {
errorMail(
"Logging failed",
$e->getMessage(),
true,
);
throw $e;
}
}
}
@@ -1,30 +1,30 @@
<?php
function redirectToWebsite(string $website): void
{
$website = trim($website);
if ($website === '') {
die("Ungültige URL.");
}
$blocked_schemes = ['javascript:', 'data:', 'file:'];
foreach ($blocked_schemes as $scheme) {
if (stripos($website, $scheme) === 0) {
die("Ungültige URL.");
}
}
if (preg_match('/^https?:\/\//i', $website)) {
header("Location: " . $website);
exit;
}
$protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? "https://" : "http://";
$domain = $_SERVER['HTTP_HOST'];
$website = ltrim($website, "/");
$redirectUrl = $protocol . $domain . "/" . $website;
header("Location: " . $redirectUrl);
exit;
<?php
function redirectToWebsite(string $website) {
$website = trim($website);
if ($website === '') {
die("Ungültige URL.");
}
$blocked_schemes = ['javascript:', 'data:', 'file:'];
foreach ($blocked_schemes as $scheme) {
if (stripos($website, $scheme) === 0) {
die("Ungültige URL.");
}
}
if (preg_match('/^https?:\/\//i', $website)) {
header("Location: " . $website);
exit;
}
$protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? "https://" : "http://";
$domain = $_SERVER['HTTP_HOST'];
$website = ltrim($website, "/");
$redirectUrl = $protocol . $domain . "/" . $website;
header("Location: " . $redirectUrl);
exit;
}
+79
View File
@@ -0,0 +1,79 @@
<?php
/**
* MVC Model Generator
* Nutzung: php create_model.php <TabellenName> <Spalte1,Spalte2,...>
*/
if (php_sapi_name() !== 'cli') {
die("Dieses Script muss über die CLI ausgeführt werden.\n");
}
$tableName = $argv[1] ?? null;
$columnsInput = $argv[2] ?? null;
// Interaktive Abfrage, falls Argumente fehlen
if (!$tableName) {
echo "Tabellenname eingeben (z.B. Benutzer): ";
$handle = fopen("php://stdin", "r");
$tableName = trim(fgets($handle));
fclose($handle);
}
if (!$columnsInput) {
echo "Spalten kommagetrennt eingeben (z.B. NAME,EMAIL,ROLLE): ";
$handle = fopen("php://stdin", "r");
$columnsInput = trim(fgets($handle));
fclose($handle);
}
if (!$tableName) die("Fehler: Kein Tabellenname angegeben.\n");
// Namen formatieren
$className = str_replace(' ', '', ucwords(str_replace('_', ' ', strtolower($tableName))));
$modelFile = __DIR__ . "/WEBROOT/src/MVC/Model/{$className}.php";
// Spalten aufbereiten
$columns = array_map('trim', explode(',', $columnsInput));
$columnList = implode("', '", $columns);
// Model-Inhalt generieren
$content = <<<PHP
<?php
namespace MVC\Model;
use MVC\Core\Model;
/**
* Model für die Tabelle '{$tableName}'
* Verfügbare Spalten: '{$columnList}'
*/
class {$className} extends Model {
protected static \$table = "{$tableName}";
// Hier kannst du spezifische Methoden für dieses Model hinzufügen
/**
* Beispiel: Suche nach einer spezifischen Spalte
*/
public static function getByFirstColumn(\$value) {
return self::where("{$columns[0]} = ?", \$value);
}
}
PHP;
// Datei schreiben
if (!is_dir(dirname($modelFile))) {
mkdir(dirname($modelFile), 0755, true);
}
if (!file_exists($modelFile)) {
file_put_contents($modelFile, $content);
echo "✅ Model erstellt: WEBROOT/src/MVC/Model/{$className}.php\n";
echo "--- INFO ---\n";
echo "Tabelle: {$tableName}\n";
echo "Klasse: MVC\\Model\\{$className}\n";
echo "Spalten: " . implode(', ', $columns) . "\n";
} else {
echo "⚠️ Model {$className}.php existiert bereits.\n";
}
+91
View File
@@ -0,0 +1,91 @@
<?php
/**
* MVC Module Generator for Gemini CLI Project
* Nutzung: php create_module.php <name>
*/
if (php_sapi_name() !== 'cli') {
die("Dieses Script kann nur über die Kommandozeile ausgeführt werden.\n");
}
$name = $argv[1] ?? null;
if (!$name) {
echo "Bitte gib einen Namen für das Modul an (z.B. mein_projekt): ";
$handle = fopen("php://stdin", "r");
$name = trim(fgets($handle));
fclose($handle);
}
if (!$name) {
die("Fehler: Kein Name angegeben.\n");
}
// Namen formatieren
$key = strtolower(str_replace(' ', '_', $name));
$className = str_replace(' ', '', ucwords(str_replace('_', ' ', $key)));
$controllerFile = __DIR__ . "/WEBROOT/src/MVC/Controller/{$className}Controller.php";
$viewFile = __DIR__ . "/WEBROOT/src/MVC/View/{$key}.php";
// 1. Controller erstellen
$controllerContent = <<<PHP
<?php
namespace MVC\Controller;
use MVC\Core\Controller;
// use MVC\Model\YourModel; // Importiere dein Model
class {$className}Controller extends Controller {
public function {$key}() {
// Nutze Models für den Datenbankzugriff
// \$data = YourModel::all();
return \$this->render('{$key}', [
'title' => '{$className} Modul',
'message' => 'Willkommen in deinem neuen Modul {$className}!'
]);
}
}
PHP;
if (!file_exists($controllerFile)) {
file_put_contents($controllerFile, $controllerContent);
echo "✅ Controller erstellt: WEBROOT/src/MVC/Controller/{$className}Controller.php\n";
} else {
echo "⚠️ Controller existiert bereits.\n";
}
// 2. View erstellen
$viewContent = <<<HTML
<h2><?= htmlspecialchars(\$title) ?></h2>
<div class="card">
<p><?= htmlspecialchars(\$message) ?></p>
<p>Hier kannst du nun dein Projekt aufbauen.</p>
</div>
<style>
.card {
background: var(--card-bg);
padding: 20px;
border-radius: 8px;
border: 1px solid var(--card-border);
}
</style>
HTML;
if (!file_exists($viewFile)) {
file_put_contents($viewFile, $viewContent);
echo "✅ View erstellt: WEBROOT/src/MVC/View/{$key}.php\n";
} else {
echo "⚠️ View existiert bereits.\n";
}
// 3. Anleitung ausgeben
echo "\n--- NÄCHSTE SCHRITTE ---\n";
echo "1. Registriere das Modul in WEBROOT/index.php beim Router:\n";
echo " \$router->add('{$key}', \\MVC\\Controller\\{$className}Controller::class, '{$key}', ['auth']);\n\n";
echo "2. Füge den Service in der Seitenverwaltung (Admin) oder in config.php hinzu:\n";
echo " ID: {$key}\n";
echo " Name: " . ucfirst($name) . "\n";
echo "------------------------\n";
+828
View File
@@ -0,0 +1,828 @@
<?php
/**
* Ultimate MVC Project Bootstrapper (Fixed Version with Header)
* Erstellt ein voll funktionsfähiges Projekt inkl. Dev-Server, Header, DarkMode & freiem Zugriff.
*/
if (php_sapi_name() !== 'cli') {
die("Dieses Script muss über die CLI ausgeführt werden.\n");
}
$projectName = $argv[1] ?? null;
if (!$projectName) {
echo "Bitte gib einen Projektnamen an: ";
$handle = fopen("php://stdin", "r");
$projectName = trim(fgets($handle));
fclose($handle);
}
if (!$projectName) die("Fehler: Kein Name angegeben.\n");
$baseDir = getcwd() . DIRECTORY_SEPARATOR . $projectName;
// 1. Verzeichnisstruktur erstellen
$dirs = [
'',
'WEBROOT',
'WEBROOT/api',
'WEBROOT/api/v1',
'WEBROOT/commands',
'WEBROOT/static',
'WEBROOT/src',
'WEBROOT/src/config',
'WEBROOT/src/database',
'WEBROOT/src/utils',
'WEBROOT/src/MVC',
'WEBROOT/src/MVC/Core',
'WEBROOT/src/MVC/Controller',
'WEBROOT/src/MVC/Model',
'WEBROOT/src/MVC/View',
'WEBROOT/src/MVC/Layout',
'WEBROOT/src/MVC/Layout/Templates',
];
foreach ($dirs as $dir) {
$path = $baseDir . ($dir ? DIRECTORY_SEPARATOR . str_replace('/', DIRECTORY_SEPARATOR, $dir) : '');
if (!is_dir($path)) {
mkdir($path, 0755, true);
echo "📁 Ordner erstellt: $dir\n";
}
}
$files = [];
// --- DEV SERVER: server.php ---
$files['server.php'] = <<<'PHP'
<?php
$port = 8000;
$host = 'localhost';
$root = __DIR__ . '/WEBROOT';
echo "\n🚀 Starte MVC Dev-Server auf http://$host:$port\n";
echo "Drücke STRG+C zum Beenden.\n\n";
passthru("php -S $host:$port -t \"$root\"");
PHP;
$files['.htaccess'] = <<<'HTACCESS'
RewriteEngine On
RewriteRule ^(Commands|config_backups|controller|modules)($|/.*) - [F,L,NC]
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
# -----------------------------------
# .php entfernen
# -----------------------------------
# browser requestet datei.php -> redirect zu /datei
RewriteCond %{THE_REQUEST} \s/+(.+?)\.php[\s?] [NC]
RewriteRule ^ /%1 [R=301,L]
# /datei -> datei.php
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{DOCUMENT_ROOT}/$1.php -f
RewriteRule ^(.+)$ $1.php [L]
HTACCESS;
$files[$projectName . '.code-workspace'] = <<<VSCODE
{
"folders": [
{
"path": "."
}
],
"settings": {
"workbench.colorTheme": "Default Dark Modern",
"workbench.colorCustomizations": {
"activityBar.background": "#ff000075",
"activityBar.foreground": "#000000",
"breadcrumb.foreground": "#FFFFFF",
},
"files.exclude": {
"*.git*": true,
"WEBROOT/config_backups": true,
"WEBROOT/static": true,
"WEBROOT/templates": true,
},
"editor.renderWhitespace": "all",
"editor.smoothScrolling": true,
"editor.fontSize": 14,
"editor.formatOnSave": true,
"editor.minimap.enabled": true,
"editor.minimap.scale": 2,
"editor.minimap.side": "right",
"editor.minimap.maxColumn": 100,
"editor.minimap.renderCharacters": true,
"editor.minimap.showSlider": "always",
"files.autoSave": "off",
"files.autoSaveDelay": 3000,
"window.title": "BACKEND",
"workbench.editor.wrapTabs": true,
},
"extensions": {
"recommendations": [
"oderwat.indent-rainbow",
"pranaygp.vscode-css-peek",
"wayou.vscode-todo-highlight",
"mrmlnc.vscode-mustache",
"fabiospampinato.vscode-highlight",
"junstyle.php-cs-fixer",
"mtea.gettext-editor",
"neilbrayfield.php-docblocker",
"bmewburn.vscode-intelephense-client",
"mohamed-ali.html-css-class-completion",
"rifi2k.format-html-in-php",
"mrorz.language-gettext",
"voldemortensen.rainbow-tags",
]
}
}
VSCODE;
$files['WEBROOT/src/utils/databaseMethods.php'] = <<<'PHP'
<?php
function DatabaseCreateTable($table, $columnsDefinition) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$sql = "CREATE TABLE IF NOT EXISTS `$table` ($columnsDefinition)";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute()) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function DatabaseShowTables() {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$tablesResult = $conn->query("SHOW TABLES");
if (!$tablesResult) {
die("Fehler beim Laden der Tabellen: " . $conn->error);
}
$tables = [];
while ($tableRow = $tablesResult->fetch_array()) {
$tables[] = $tableRow[0];
}
return $tables;
}
function DatabaseShowTableStructure($table) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$stmt = $conn->prepare("SHOW COLUMNS FROM `$table`");
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute()) {
die("Fehler beim Execute: " . $stmt->error);
}
$result = $stmt->get_result();
$columns = [];
while ($column = $result->fetch_assoc()) {
$columns[] = [
"Field" => $column["Field"],
"Type" => $column["Type"],
"Null" => $column["Null"],
"Key" => $column["Key"],
"Default" => $column["Default"],
"Extra" => $column["Extra"]
];
}
return $columns;
}
function DatabaseShow($table, $columns = "*", $where = "", ...$values) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$sql = "SELECT $columns FROM `$table`";
if (!empty($where)) {
$sql .= " WHERE $where";
}
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
$result = $stmt->get_result();
return $result->fetch_all(MYSQLI_ASSOC);
}
function DatabaseInsert($table, $columns, ...$values) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$placeholders = rtrim(str_repeat("?,", count($values)), ",");
$sql = "INSERT INTO `$table` ($columns) VALUES ($placeholders)";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function DatabaseDelete($table, $where, ...$values) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$sql = "DELETE FROM `$table` WHERE $where";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function DatabaseUpdate($table, $set, $where, ...$values) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$sql = "UPDATE `$table` SET $set WHERE $where";
$stmt = $conn->prepare($sql);
if (!$stmt) {
die("Fehler beim Prepare: " . $conn->error);
}
if (!$stmt->execute($values)) {
die("Fehler beim Execute: " . $stmt->error);
}
return true;
}
function getFKValue($conn, $table, $key, $value, $id, &$cache) {
if ($id === null) return null;
$cacheKey = $table . "_" . $id;
if (isset($cache[$cacheKey])) {
return $cache[$cacheKey];
}
$stmt = $conn->prepare("SELECT `$value` FROM `$table` WHERE `$key` = ? LIMIT 1");
if (!$stmt) {
die("FK Prepare Fehler: " . $conn->error);
}
$stmt->bind_param("i", $id);
$stmt->execute();
$result = $stmt->get_result()->fetch_assoc();
$valueResult = $result[$value] ?? null;
$cache[$cacheKey] = $valueResult;
return $valueResult;
}
function DatabaseShowWithFK($table, $fkMap = [], $columns = "*", $where = "", ...$values) {
include_once(__DIR__ . '/../database/databaseConnect.php');
$conn = db_connect();
$cache = [];
$select = is_array($columns) ? implode(", ", $columns) : $columns;
$sql = "SELECT $select FROM `$table`";
if (!empty($where)) {
$sql .= " WHERE $where";
}
$stmt = $conn->prepare($sql);
if (!$stmt) die("Fehler beim Prepare: " . $conn->error);
if (!empty($values)) {
$stmt->execute($values);
} else {
$stmt->execute();
}
$result = $stmt->get_result();
if (!$result) die("Fehler beim get_result: " . $conn->error);
$rows = $result->fetch_all(MYSQLI_ASSOC);
foreach ($rows as &$row) {
foreach ($fkMap as $fkColumn => $fkInfo) {
if (!isset($row[$fkColumn]) || $row[$fkColumn] === null) {
continue;
}
$row[$fkColumn] = getFKValue(
$conn,
$fkInfo['table'],
$fkInfo['key'],
$fkInfo['value'],
$row[$fkColumn],
$cache
);
}
}
return [
"rows" => $rows
];
}
PHP;
// --- CONFIG: env.ini ---
$files['WEBROOT/src/config/env.ini'] = <<<INI
[database]
APP_ENV = "dev"
DB_DEV_HOST = "localhost"
DB_DEV_USERNAME = "root"
DB_DEV_PASSWORD = ""
DB_DEV_DATABASE = "mein_projekt"
INI;
// --- DB: databaseConnect.php ---
$files['WEBROOT/src/database/databaseConnect.php'] = <<<'PHP'
<?php
function db_connect() {
$config = parse_ini_file(__DIR__ . '/../config/env.ini');
$env = strtoupper($config['APP_ENV']);
try {
$conn = new mysqli($config["DB_{$env}_HOST"], $config["DB_{$env}_USERNAME"], $config["DB_{$env}_PASSWORD"], $config["DB_{$env}_DATABASE"]);
$conn->set_charset("utf8mb4");
return $conn;
} catch (Exception $e) { return null; }
}
PHP;
// --- CORE ---
$files['WEBROOT/src/MVC/Core/Controller.php'] = <<<'PHP'
<?php
namespace MVC\Core;
class Controller {
protected $view;
public function __construct() {
$this->view = new View(__DIR__ . '/../View');
}
protected function render($template, $data = []) {
foreach ($data as $key => $value) {
$this->view->assign($key, $value);
}
return $this->view->render($template);
}
protected function json($data, $status = 200) {
header('Content-Type: application/json');
http_response_code($status);
echo json_encode($data);
exit;
}
}
PHP;
$files['WEBROOT/src/MVC/Core/Model.php'] = <<<'PHP'
<?php
namespace MVC\Core;
require_once __DIR__ . '/../../utils/databaseMethods.php';
abstract class Model {
protected static $table;
protected static $conn;
protected static function getConnection() {
if (!self::$conn) {
self::$conn = \db_connect();
}
return self::$conn;
}
public static function all() {
return \DatabaseShow(static::$table, "*");
}
public static function find($id, $column = 'ID') {
$result = \DatabaseShow(static::$table, "*", "$column = ?", $id);
return $result[0] ?? null;
}
public static function where($where, ...$params) {
return \DatabaseShow(static::$table, "*", $where, ...$params);
}
public static function insert($data) {
$columns = implode(", ", array_keys($data));
$values = array_values($data);
return \DatabaseInsert(static::$table, $columns, ...$values);
}
public static function update($data, $where, ...$whereParams) {
$sets = [];
$values = [];
foreach ($data as $column => $value) {
$sets[] = "$column = ?";
$values[] = $value;
}
$setString = implode(", ", $sets);
return \DatabaseUpdate(static::$table, $setString, $where, ...array_merge($values, $whereParams));
}
public static function delete($where, ...$params) {
return \DatabaseDelete(static::$table, $where, ...$params);
}
public static function query($sql, ...$params) {
$conn = self::getConnection();
if (empty($params)) {
return $conn->query($sql);
}
$stmt = $conn->prepare($sql);
$types = str_repeat('s', count($params));
$stmt->bind_param($types, ...$params);
$stmt->execute();
return $stmt->get_result();
}
}
PHP;
$files['WEBROOT/src/MVC/Core/View.php'] = <<<'PHP'
<?php
namespace MVC\Core;
class View {
protected $data = [];
protected $viewPath;
public function __construct($viewPath) {
$this->viewPath = $viewPath;
}
public function assign($key, $value) {
$this->data[$key] = $value;
}
public function render($template) {
extract($this->data);
$file = $this->viewPath . '/' . $template . '.php';
if (file_exists($file)) {
ob_start();
include $file;
return ob_get_clean();
}
return "View $template not found at $file";
}
}
PHP;
$files['WEBROOT/src/MVC/Core/Router.php'] = <<<'PHP'
<?php
namespace MVC\Core;
class Router {
protected $routes = [];
protected $middlewares = [];
public function add($service, $controller, $method, $middlewares = []) {
$this->routes[$service] = [
'controller' => $controller,
'method' => $method,
'middlewares' => $middlewares
];
}
public function dispatch($service) {
if (!isset($this->routes[$service])) {
throw new \Exception("Service '$service' not found.");
}
$route = $this->routes[$service];
// Run Middlewares
foreach ($route['middlewares'] as $middleware) {
$this->runMiddleware($middleware);
}
$controllerClass = $route['controller'];
$method = $route['method'];
if (!class_exists($controllerClass)) {
throw new \Exception("Controller class '$controllerClass' not found.");
}
$controller = new $controllerClass();
if (!method_exists($controller, $method)) {
throw new \Exception("Method '$method' not found in controller '$controllerClass'.");
}
return $controller->$method();
}
protected function runMiddleware($middleware) {
if ($middleware === 'admin') {
if (!isset($_SESSION['is_admin']) || $_SESSION['is_admin'] !== true) {
die("Access Denied: Admin rights required.");
}
}
if ($middleware === 'auth') {
if (empty($_SESSION['user_logged_in'])) {
header('Location: login.php');
exit;
}
}
}
}
PHP;
$files['WEBROOT/src/MVC/Layout/Layout.php'] = <<<'PHP'
<?php
namespace MVC\Layout;
class Layout {
protected $blocks = [];
protected $template;
public function __construct($template = 'main') { $this->template = $template; }
public function setBlock($name, $content) { $this->blocks[$name] = $content; }
public function getBlock($name) { return $this->blocks[$name] ?? ''; }
public function render() {
$layoutFile = __DIR__ . '/Templates/' . $this->template . '.php';
if (file_exists($layoutFile)) { ob_start(); include $layoutFile; return ob_get_clean(); }
return "Layout template nicht gefunden.";
}
}
PHP;
$files['WEBROOT/src/MVC/autoloader.php'] = <<<'PHP'
<?php
spl_autoload_register(function ($class) {
$prefix = 'MVC\\';
$base_dir = __DIR__ . '/';
$len = strlen($prefix);
if (strncmp($prefix, $class, $len) !== 0) {
return;
}
$relative_class = substr($class, $len);
$file = $base_dir . str_replace('\\', '/', $relative_class) . '.php';
if (file_exists($file)) {
require $file;
}
});
PHP;
// --- LAYOUT TEMPLATE ---
$files['WEBROOT/src/MVC/Layout/Templates/main.php'] = <<<'HTML'
<!DOCTYPE html>
<html lang="de" class="<?= ($_SESSION['theme'] ?? 'light') === 'dark' ? 'dark-mode' : '' ?>">
<head>
<meta charset="UTF-8">
<title><?= $this->getBlock('title') ?></title>
<style>
:root {
--bg: #ffffff;
--text: #333;
--sidebar: #f4f4f4;
--header: #007bff;
--accent: #007bff;
--border: #ddd;
}
.dark-mode {
--bg: #1a1a1a;
--text: #f4f4f4;
--sidebar: #252525;
--header: #111;
--accent: #3498db;
--border: #333;
}
body {
font-family: 'Segoe UI', sans-serif;
margin: 0;
background: var(--bg);
color: var(--text);
transition: 0.3s;
height: 100vh;
overflow: hidden;
display: flex;
flex-direction: column;
}
.main-header {
height: 60px;
background: var(--header);
color: white;
display: flex;
align-items: center;
justify-content: space-between;
padding: 0 20px;
box-shadow: 0 2px 5px rgba(0, 0, 0, 0.1);
z-index: 10;
}
.main-container {
flex: 1;
display: flex;
overflow: hidden;
}
.sidebar {
width: 260px;
background: var(--sidebar);
padding: 20px;
border-right: 1px solid var(--border);
overflow-y: auto;
}
.content {
flex: 1;
padding: 40px;
overflow-y: auto;
}
.btn-toggle {
padding: 8px 15px;
border: 1px solid rgba(255, 255, 255, 0.3);
border-radius: 5px;
cursor: pointer;
background: transparent;
color: white;
font-size: 0.9rem;
}
.btn-toggle:hover {
background: rgba(255, 255, 255, 0.1);
}
nav a {
display: block;
padding: 12px;
text-decoration: none;
color: inherit;
border-radius: 5px;
margin-bottom: 5px;
}
nav a:hover {
background: rgba(0, 0, 0, 0.05);
}
.logo {
font-size: 1.4rem;
font-weight: bold;
}
</style>
</head>
<body>
<header class="main-header">
<div class="logo"><?= $this->getBlock('header_title') ?></div>
<div class="header-actions">
<?= $this->getBlock('header_actions') ?>
</div>
</header>
<div class="main-container">
<div class="sidebar">
<?= $this->getBlock('sidebar') ?>
</div>
<div class="content">
<?= $this->getBlock('content') ?>
</div>
</div>
<script>
function toggleTheme() {
fetch('?service=toggle_theme').then(() => location.reload());
}
</script>
</body>
</html>
HTML;
// --- CONTROLLERS ---
$files['WEBROOT/src/MVC/Controller/HomeController.php'] = <<<'PHP' <?php
namespace MVC\Controller;
use MVC\Core\Controller;
class HomeController extends Controller {
public function index() { return $this->render('home'); }
public function toggle_theme() {
$_SESSION['theme'] = ($_SESSION['theme'] ?? 'light') === 'dark' ? 'light' : 'dark';
return $this->json(['success' => true]);
}
}
PHP;
$files['WEBROOT/src/MVC/Controller/TestController.php'] = <<<'PHP'
<?php
namespace MVC\Controller;
use MVC\Core\Controller;
class TestController extends Controller {
public function service1() { return $this->render('test1', ['msg' => 'Service 1 ist bereit!']); }
public function service2() { return $this->render('test2', ['data' => ['Layout' => 'Header + Sidebar', 'Theme' => 'Auto-Toggle']]); }
}
PHP;
// --- VIEWS ---
$files['WEBROOT/src/MVC/View/home.php'] = "<h1>Dashboard</h1><p>Willkommen in deinem neuen MVC-System mit integriertem Header.</p>";
$files['WEBROOT/src/MVC/View/test1.php'] = "<h1>Service 1</h1><p><?= \$msg ?></p>";
$files['WEBROOT/src/MVC/View/test2.php'] = "<h1>System Check</h1>
<ul><?php foreach(\$data as \$k => \$v): ?><li><b><?= \$k ?>:</b> <?= \$v ?></li><?php endforeach; ?></ul>";
// --- API ---
$files['WEBROOT/api/v1/get.php'] = "<?php header('Content-Type: application/json'); echo json_encode(['status' => 'online']);";
// --- ENTRY POINT ---
$files['WEBROOT/index.php'] = <<<'PHP'
<?php
session_start();
require_once __DIR__ . '/src/MVC/autoloader.php';
$service = $_GET['service'] ?? 'home';
try {
$router = new \MVC\Core\Router();
$router->add('home', \MVC\Controller\HomeController::class, 'index');
$router->add('toggle_theme', \MVC\Controller\HomeController::class, 'toggle_theme');
$router->add('test1', \MVC\Controller\TestController::class, 'service1');
$router->add('test2', \MVC\Controller\TestController::class, 'service2');
$layout = new \MVC\Layout\Layout('main');
$layout->setBlock('title', 'MVC Starter');
$layout->setBlock('header_title', '🚀 MVC Dashboard');
$layout->setBlock('header_actions', '<button class="btn-toggle" onclick="toggleTheme()">🌓 Theme umschalten</button>');
// Sidebar Block
ob_start();
?>
<nav>
<a href="?service=home">🏠 Home</a>
<a href="?service=test1">🛠️ Test 1</a>
<a href="?service=test2">📊 Test 2</a>
</nav>
<?php
$layout->setBlock('sidebar', ob_get_clean());
$layout->setBlock('content', $router->dispatch($service));
echo $layout->render();
} catch (\Exception $e) {
http_response_code(404); echo "<h1>404</h1><p>" . $e->getMessage() . "</p>";
}
PHP;
// 3. Dateien schreiben
foreach ($files as $file => $content) {
$path = $baseDir . DIRECTORY_SEPARATOR . str_replace('/', DIRECTORY_SEPARATOR, $file);
file_put_contents($path, $content);
echo "📄 Datei erstellt: $file\n";
}
echo "\n✨ Projekt '$projectName' wurde mit HEADER initialisiert!\n";
echo "1. Starten: php server.php\n";
echo "2. Öffnen: http://localhost:8000\n";