106 lines
3.1 KiB
PHP
106 lines
3.1 KiB
PHP
<?php
|
|
session_set_cookie_params([
|
|
'lifetime' => 0,
|
|
'path' => '/',
|
|
'domain' => '',
|
|
'secure' => false,
|
|
'httponly' => true,
|
|
'samesite' => 'Lax'
|
|
]);
|
|
session_start();
|
|
|
|
header('Content-Type: application/json');
|
|
error_reporting(E_ALL);
|
|
ini_set('display_errors', '0');
|
|
|
|
if (empty($_SESSION['user_logged_in'])) {
|
|
http_response_code(401);
|
|
echo json_encode(['error' => 'Nicht eingeloggt']);
|
|
exit;
|
|
}
|
|
|
|
if (empty($_SESSION['is_admin'])) {
|
|
http_response_code(403);
|
|
echo json_encode(['error' => 'Keine Berechtigung']);
|
|
exit;
|
|
}
|
|
|
|
include_once(__DIR__ . '/../../../controller/DatabaseController.php');
|
|
include_once(__DIR__ . '/../../../controller/NotifyController.php');
|
|
|
|
$daten = json_decode(file_get_contents('php://input'), true) ?? [];
|
|
$action = $daten['action'] ?? '';
|
|
|
|
try {
|
|
$notificationCtl = new Notification();
|
|
|
|
switch ($action) {
|
|
|
|
case 'get_entries': {
|
|
$entries = $notificationCtl->getAllMessages();
|
|
|
|
foreach ($entries as &$entry) {
|
|
$entry['GESEHEN_ANZAHL'] = $notificationCtl->countSeenBy((int)$entry['ID']);
|
|
}
|
|
|
|
echo json_encode(['success' => true, 'entries' => array_values($entries)]);
|
|
break;
|
|
}
|
|
|
|
case 'add_entry': {
|
|
$titel = trim($daten['titel'] ?? '');
|
|
$nachricht = trim($daten['nachricht'] ?? '');
|
|
|
|
if ($titel === '' || $nachricht === '') {
|
|
throw new InvalidArgumentException('Titel und Nachricht erforderlich');
|
|
}
|
|
|
|
$notificationCtl->createMessage($titel, $nachricht);
|
|
|
|
echo json_encode(['success' => true]);
|
|
break;
|
|
}
|
|
|
|
case 'edit_entry': {
|
|
$id = $daten['id'] ?? null;
|
|
$titel = trim($daten['titel'] ?? '');
|
|
$nachricht = trim($daten['nachricht'] ?? '');
|
|
|
|
if (!is_numeric($id)) {
|
|
throw new InvalidArgumentException('Ungültige ID');
|
|
}
|
|
if ($titel === '' || $nachricht === '') {
|
|
throw new InvalidArgumentException('Titel und Nachricht erforderlich');
|
|
}
|
|
|
|
$notificationCtl->updateMessage((int)$id, $titel, $nachricht);
|
|
|
|
echo json_encode(['success' => true]);
|
|
break;
|
|
}
|
|
|
|
case 'delete_entry': {
|
|
$id = $daten['id'] ?? null;
|
|
|
|
if (!is_numeric($id)) {
|
|
throw new InvalidArgumentException('Ungültige ID');
|
|
}
|
|
|
|
$notificationCtl->deleteMessage((int)$id);
|
|
|
|
echo json_encode(['success' => true]);
|
|
break;
|
|
}
|
|
|
|
default:
|
|
throw new InvalidArgumentException("Unbekannte Aktion: $action");
|
|
}
|
|
} catch (InvalidArgumentException $e) {
|
|
http_response_code(400);
|
|
echo json_encode(['error' => $e->getMessage()]);
|
|
} catch (Throwable $e) {
|
|
http_response_code(500);
|
|
error_log($e->getMessage());
|
|
echo json_encode(['error' => 'Serverfehler']);
|
|
}
|