🚀 Initial release: CorePlan v1.0 Community Edition
This commit is contained in:
root
+27
@@ -0,0 +1,27 @@
|
|||||||
|
# Wir nutzen ein schlankes, offizielles PHP 8.2 Image mit Apache
|
||||||
|
FROM php:8.2-apache
|
||||||
|
|
||||||
|
# Aktiviere Apache Rewrite und SSL
|
||||||
|
RUN a2enmod rewrite ssl
|
||||||
|
|
||||||
|
# ERLAUBE .htaccess OVERRIDES
|
||||||
|
RUN sed -i 's/AllowOverride None/AllowOverride All/g' /etc/apache2/apache2.conf
|
||||||
|
|
||||||
|
# Installiere SQLite, PDO und OpenSSL
|
||||||
|
RUN apt-get update && apt-get install -y libsqlite3-dev openssl \
|
||||||
|
&& docker-php-ext-install pdo pdo_sqlite \
|
||||||
|
&& apt-get clean \
|
||||||
|
&& rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
|
# Generiere ein Self-Signed Zertifikat (Gebrandet auf Tessmann Digital)
|
||||||
|
# Die Pfade entsprechen genau denen, die Apache in der default-ssl.conf erwartet
|
||||||
|
RUN openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
|
||||||
|
-keyout /etc/ssl/private/ssl-cert-snakeoil.key \
|
||||||
|
-out /etc/ssl/certs/ssl-cert-snakeoil.pem \
|
||||||
|
-subj "/C=DE/ST=Brandenburg/L=Gruenheide/O=Tessmann Digital/CN=localhost"
|
||||||
|
|
||||||
|
# Aktiviere den virtuellen SSL-Host von Apache
|
||||||
|
RUN a2ensite default-ssl
|
||||||
|
|
||||||
|
# Setze das Arbeitsverzeichnis
|
||||||
|
WORKDIR /var/www/html
|
||||||
Executable
BIN
Binary file not shown.
@@ -0,0 +1,8 @@
|
|||||||
|
[25-Aug-2026 09:59:23 UTC] Exception: SQLSTATE[HY000]: General error: 1 no such column: closed_at in /var/www/html/projects.php on line 96
|
||||||
|
[25-Aug-2026 09:59:29 UTC] Exception: SQLSTATE[HY000]: General error: 1 no such column: closed_at in /var/www/html/projects.php on line 96
|
||||||
|
[25-Aug-2026 09:59:35 UTC] Exception: SQLSTATE[HY000]: General error: 1 no such column: closed_at in /var/www/html/projects.php on line 96
|
||||||
|
[25-Aug-2026 10:01:24 UTC] Exception: SQLSTATE[HY000]: General error: 1 no such column: closed_at in /var/www/html/projects.php on line 96
|
||||||
|
[25-Aug-2026 10:29:45 UTC] Error [2]: Cannot modify header information - headers already sent by (output started at /var/www/html/auth.php:1) in /var/www/html/router.php on line 6
|
||||||
|
[25-Aug-2026 10:29:45 UTC] Exception: Cannot modify header information - headers already sent by (output started at /var/www/html/auth.php:1) in /var/www/html/router.php on line 6
|
||||||
|
[25-Aug-2026 10:29:52 UTC] Error [2]: Cannot modify header information - headers already sent by (output started at /var/www/html/auth.php:1) in /var/www/html/router.php on line 6
|
||||||
|
[25-Aug-2026 10:29:52 UTC] Exception: Cannot modify header information - headers already sent by (output started at /var/www/html/auth.php:1) in /var/www/html/router.php on line 6
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
version: '3.8'
|
||||||
|
|
||||||
|
services:
|
||||||
|
coretemplate:
|
||||||
|
build: .
|
||||||
|
container_name: coreplan_app
|
||||||
|
ports:
|
||||||
|
# Außen 8443, intern 443 (HTTPS)
|
||||||
|
- "8443:443"
|
||||||
|
volumes:
|
||||||
|
- ./src:/var/www/html
|
||||||
|
- ./data:/var/www/data
|
||||||
|
restart: unless-stopped
|
||||||
@@ -0,0 +1,4 @@
|
|||||||
|
RewriteEngine On
|
||||||
|
RewriteCond %{REQUEST_FILENAME} !-f
|
||||||
|
RewriteCond %{REQUEST_FILENAME} !-d
|
||||||
|
RewriteRule ^(.*)$ index.php [QSA,L]
|
||||||
+437
@@ -0,0 +1,437 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="de">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
<title>CorePlan</title>
|
||||||
|
<style>
|
||||||
|
:root { --bg-color: #12141c; --surface-color: #1e212b; --surface-hover: #2a2e3d; --text-main: #ffffff; --text-muted: #8b92a5; --accent-blue: #3b82f6; --accent-red: #ef4444; --accent-green: #10b981; --accent-orange: #f59e0b; }
|
||||||
|
body { background-color: var(--bg-color); color: var(--text-main); font-family: -apple-system, sans-serif; display: flex; justify-content: center; align-items: flex-start; min-height: 100vh; margin: 0; padding: 20px; box-sizing: border-box; }
|
||||||
|
.container { background-color: var(--surface-color); padding: 2.5rem; border-radius: 12px; box-shadow: 0 10px 25px rgba(0,0,0,0.5); width: 100%; max-width: 350px; margin-top: 10vh; }
|
||||||
|
.dashboard-container { max-width: 1000px; padding: 2rem; margin-top: 0; }
|
||||||
|
h1, h2, h3 { margin-top: 0; } h1 { font-size: 1.5rem; text-align: center; }
|
||||||
|
.form-group { margin-bottom: 1.5rem; } label { display: block; margin-bottom: 0.5rem; color: var(--text-muted); font-size: 0.9rem; }
|
||||||
|
input, select, textarea { width: 100%; box-sizing: border-box; padding: 0.75rem; background-color: var(--bg-color); border: 1px solid var(--surface-hover); color: white; border-radius: 6px; outline: none; transition: border 0.2s; font-family: inherit; }
|
||||||
|
input:focus, select:focus, textarea:focus { border-color: var(--accent-blue); }
|
||||||
|
button { width: 100%; padding: 0.75rem; background-color: var(--accent-blue); color: white; border: none; border-radius: 6px; font-weight: bold; cursor: pointer; transition: opacity 0.2s; }
|
||||||
|
button:hover { opacity: 0.9; }
|
||||||
|
.error-msg { color: var(--accent-red); font-size: 0.85rem; text-align: center; margin-bottom: 1rem; display: none; }
|
||||||
|
.hidden { display: none !important; }
|
||||||
|
.log-container { margin-top: 1.5rem; background-color: var(--bg-color); border-radius: 8px; padding: 1.5rem; overflow-x: auto; }
|
||||||
|
table { width: 100%; border-collapse: collapse; font-size: 0.85rem; } th, td { padding: 0.75rem; text-align: left; border-bottom: 1px solid var(--surface-hover); }
|
||||||
|
th { color: var(--text-muted); font-weight: 600; text-transform: uppercase; letter-spacing: 0.05em; font-size: 0.75rem; } tr:last-child td { border-bottom: none; }
|
||||||
|
tr:hover { background-color: rgba(255,255,255,0.02); }
|
||||||
|
.badge { background: rgba(255,255,255,0.1); padding: 3px 8px; border-radius: 4px; font-size: 0.75rem; display: inline-block; }
|
||||||
|
.btn-delete { background-color: transparent; color: var(--accent-red); border: none; padding: 0; width: auto; font-size: 1.1rem; }
|
||||||
|
|
||||||
|
.list-container { display: flex; flex-direction: column; gap: 1.5rem; margin-top: 1.5rem; }
|
||||||
|
.project-card { background-color: var(--surface-hover); border-radius: 8px; padding: 1.5rem; border: 1px solid transparent; transition: border-color 0.2s, transform 0.2s; cursor: pointer; position: relative; }
|
||||||
|
.project-card:hover { border-color: var(--accent-blue); transform: translateX(5px); }
|
||||||
|
.project-header { display: flex; justify-content: space-between; align-items: flex-start; margin-bottom: 0.5rem; }
|
||||||
|
.project-title { font-size: 1.2rem; font-weight: bold; margin: 0; }
|
||||||
|
.project-desc { color: var(--text-muted); font-size: 0.9rem; margin-bottom: 0.5rem; }
|
||||||
|
.progress-bg { background-color: var(--bg-color); height: 6px; border-radius: 3px; overflow: hidden; margin-top: 5px; }
|
||||||
|
.progress-fill { background-color: var(--accent-blue); height: 100%; transition: width 0.3s; }
|
||||||
|
.assigned-badge { font-size: 0.7rem; background: rgba(59, 130, 246, 0.2); color: var(--accent-blue); padding: 2px 6px; border-radius: 4px; position: absolute; top: 1.5rem; right: 3.5rem; }
|
||||||
|
|
||||||
|
.modal-overlay { position: fixed; top: 0; left: 0; width: 100vw; height: 100vh; background: rgba(0, 0, 0, 0.75); display: flex; justify-content: center; align-items: center; z-index: 1000; padding: 20px; box-sizing: border-box;}
|
||||||
|
.modal-content { background-color: var(--surface-color); width: 100%; max-width: 900px; border-radius: 12px; padding: 2rem; box-shadow: 0 10px 25px rgba(0,0,0,0.5); max-height: 90vh; overflow-y: auto; }
|
||||||
|
.modal-header { display: flex; justify-content: space-between; align-items: center; border-bottom: 1px solid var(--surface-hover); padding-bottom: 1rem; margin-bottom: 1rem; }
|
||||||
|
.btn-close { background: transparent; color: var(--text-muted); border: none; font-size: 1.5rem; cursor: pointer; padding: 0; width: auto; }
|
||||||
|
.btn-close:hover { color: var(--accent-red); }
|
||||||
|
|
||||||
|
.phase-header { font-weight: bold; font-size: 1.1rem; color: var(--accent-blue); margin-top: 1.5rem; border-bottom: 1px solid var(--surface-hover); padding-bottom: 0.5rem; }
|
||||||
|
.task-item { display: flex; align-items: flex-start; gap: 12px; padding: 0.75rem; border-bottom: 1px solid rgba(255,255,255,0.02); position: relative; }
|
||||||
|
.task-item:hover { background-color: rgba(255,255,255,0.02); }
|
||||||
|
.task-item.done { opacity: 0.5; } .task-item.done .task-text { text-decoration: line-through; }
|
||||||
|
.task-checkbox { width: 18px; height: 18px; cursor: pointer; accent-color: var(--accent-blue); margin-top: 3px; }
|
||||||
|
.task-details { display: flex; flex-direction: column; flex-grow: 1; }
|
||||||
|
.task-meta { font-size: 0.75rem; display: flex; gap: 10px; margin-top: 4px; color: var(--text-muted); flex-wrap: wrap;}
|
||||||
|
.prio-badge { font-size: 0.65rem; padding: 2px 6px; border-radius: 4px; font-weight: bold; text-transform: uppercase; }
|
||||||
|
.task-actions { display: none; position: absolute; right: 10px; top: 10px; gap: 5px; } .task-item:hover .task-actions { display: flex; }
|
||||||
|
.btn-icon { background: transparent; border: none; padding: 5px; cursor: pointer; color: var(--text-muted); font-size: 1rem; width: auto; } .btn-icon:hover { color: var(--text-main); } .btn-icon.del:hover { color: var(--accent-red); }
|
||||||
|
.pm-controls { display: flex; gap: 10px; margin-bottom: 1.5rem; background: rgba(0,0,0,0.2); padding: 10px; border-radius: 6px; flex-wrap: wrap;}
|
||||||
|
|
||||||
|
.license-banner { padding: 15px; margin-bottom: 20px; border-radius: 6px; display: flex; flex-direction: column; gap: 5px; }
|
||||||
|
.license-community { background: rgba(255,255,255,0.05); border-left: 4px solid var(--text-muted); }
|
||||||
|
.license-active { background: rgba(16, 185, 129, 0.1); border-left: 4px solid var(--accent-green); }
|
||||||
|
.license-expired { background: rgba(239, 68, 68, 0.1); border-left: 4px solid var(--accent-red); }
|
||||||
|
.info-box { background: rgba(59, 130, 246, 0.1); border-left: 4px solid var(--accent-blue); padding: 10px; border-radius: 0 4px 4px 0; margin-bottom: 1.5rem; font-size: 0.9rem;}
|
||||||
|
.deadline-box { background: var(--surface-hover); padding: 1.5rem; border-radius: 8px; margin-top: 1.5rem; border-left: 4px solid var(--accent-orange); }
|
||||||
|
.deadline-item { padding: 8px; margin-bottom: 5px; border-radius: 4px; font-size: 0.9rem; }
|
||||||
|
.deadline-warn { background: rgba(245, 158, 11, 0.1); border-left: 3px solid var(--accent-orange); }
|
||||||
|
.deadline-danger { background: rgba(239, 68, 68, 0.2); border-left: 3px solid var(--accent-red); color: var(--accent-red); }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
|
||||||
|
<div class="container" id="loginView">
|
||||||
|
<h1>CorePlan Login</h1>
|
||||||
|
<div class="error-msg" id="loginError">Login fehlgeschlagen.</div>
|
||||||
|
<form id="loginForm">
|
||||||
|
<div class="form-group"><label>Benutzername</label><input type="text" id="username" required></div>
|
||||||
|
<div class="form-group"><label>Passwort</label><input type="password" id="password" required></div>
|
||||||
|
<button type="submit">Anmelden</button>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div class="container dashboard-container hidden" id="dashboardView">
|
||||||
|
<div style="display: flex; justify-content: space-between; align-items: center; border-bottom: 1px solid var(--surface-hover); padding-bottom: 1rem; margin-bottom: 1rem; flex-wrap: wrap; gap: 10px;">
|
||||||
|
<h1 style="margin: 0;">CorePlan <span style="font-size: 0.9rem; color: var(--text-muted); font-weight: normal;">| <span id="userNameDisplay"></span> (<span id="userRoleDisplay"></span>)</span></h1>
|
||||||
|
<div style="display: flex; gap: 10px; flex-wrap: wrap;">
|
||||||
|
<button onclick="toggleView('myarea')" style="width: auto; background-color: var(--surface-hover); color: var(--accent-blue);">👤 Mein Bereich</button>
|
||||||
|
<button onclick="toggleView('projects')" style="width: auto; background-color: transparent; border: 1px solid var(--text-muted); color: var(--text-main);">Projekte</button>
|
||||||
|
<button id="navLogs" onclick="toggleView('logs')" style="width: auto; background-color: transparent; border: 1px solid var(--text-muted); color: var(--text-main);">Logs</button>
|
||||||
|
<button id="navSettings" onclick="toggleView('settings')" style="width: auto; background-color: transparent; border: 1px solid var(--text-muted); color: var(--text-main);">Settings</button>
|
||||||
|
<button id="navUsers" onclick="toggleView('users')" style="width: auto; background-color: transparent; border: 1px solid var(--text-muted); color: var(--text-main);">Benutzer</button>
|
||||||
|
<button onclick="logout()" style="width: auto; background-color: var(--accent-red);">Abmelden</button>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div id="tabMyarea">
|
||||||
|
<h2 style="margin-bottom: 0.5rem;">Mein Bereich</h2>
|
||||||
|
<p style="color: var(--text-muted); font-size: 0.9rem; margin-top: 0;">Übersicht deiner aktiven Projekt-Zuweisungen und offenen Aufgaben.</p>
|
||||||
|
|
||||||
|
<div class="deadline-box">
|
||||||
|
<h3 style="margin-top: 0; margin-bottom: 1rem; color: var(--accent-orange);">🚨 Anstehende Deadlines (nächste 7 Tage)</h3>
|
||||||
|
<div id="upcomingDeadlinesBox" style="display: flex; flex-direction: column; gap: 5px;"></div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div style="display: flex; gap: 2rem; margin-top: 2rem; flex-wrap: wrap;">
|
||||||
|
<div style="flex: 1; min-width: 300px;">
|
||||||
|
<h3>Meine Projekte</h3>
|
||||||
|
<div id="myProjectsContainer" class="list-container" style="margin-top: 0;"></div>
|
||||||
|
</div>
|
||||||
|
<div style="flex: 1; min-width: 300px;">
|
||||||
|
<h3>Meine Aufgaben</h3>
|
||||||
|
<div id="myTasksContainer" style="background: var(--surface-hover); border-radius: 8px; padding: 1rem;"></div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div id="tabProjects" class="hidden">
|
||||||
|
<div class="log-container">
|
||||||
|
<h3 style="margin-top: 0; margin-bottom: 1rem;">Neues Projekt starten</h3>
|
||||||
|
<form id="projectForm" style="display: flex; gap: 10px; flex-wrap: wrap; align-items: flex-start;">
|
||||||
|
<div style="flex: 1; min-width: 200px;"><input type="text" id="projTitle" placeholder="Projekt Titel" required></div>
|
||||||
|
<div style="flex: 2; min-width: 200px;"><input type="text" id="projDesc" placeholder="Kurze Beschreibung..."></div>
|
||||||
|
<div style="flex: 1; min-width: 150px;"><input type="date" id="projDeadline" title="Deadline (Optional)"></div>
|
||||||
|
<textarea id="projBriefing" placeholder="Projekt-Steckbrief / Zielsetzung (Optional)" style="width: 100%; min-height: 60px; margin-top: 5px;"></textarea>
|
||||||
|
<button type="submit" style="width: auto; padding: 0.75rem 2rem; margin-top: 5px;">Projekt Anlegen</button>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
<div id="projectsGrid" class="list-container"></div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div id="tabLogs" class="log-container hidden"><h3 style="margin-top: 0;">System Audit Log</h3><table><thead><tr><th>Zeit</th><th>User</th><th>Aktion</th><th>Info</th></tr></thead><tbody id="logTableBody"></tbody></table></div>
|
||||||
|
|
||||||
|
<div id="tabSettings" class="hidden">
|
||||||
|
<div class="log-container" style="border: 1px solid var(--accent-blue);">
|
||||||
|
<h3 style="margin-top: 0; color: var(--accent-blue);">Lizenz & Version</h3>
|
||||||
|
<div id="licenseBannerBox"></div>
|
||||||
|
<form id="licenseForm" style="display: flex; gap: 10px; margin-top: 1rem;">
|
||||||
|
<input type="text" id="licenseInput" placeholder="Lizenzschlüssel hier einfügen..." required style="flex: 1;">
|
||||||
|
<button type="submit" style="width: auto;">Lizenz aktivieren</button>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div class="log-container" style="margin-top: 1.5rem;">
|
||||||
|
<h3 style="margin-top: 0; color: var(--accent-green);">Gotify Push-Benachrichtigungen (Globales Radar)</h3>
|
||||||
|
<p style="font-size: 0.85rem; color: var(--text-muted); margin-bottom: 1rem;">Sendet alle System-Alarme zentral auf dein Admin-Handy.</p>
|
||||||
|
<form style="display: flex; gap: 10px; flex-wrap: wrap; margin-bottom: 10px;">
|
||||||
|
<input type="url" id="setGotifyUrl" placeholder="Gotify URL (z.B. https://push.domain.de)" style="flex: 2; min-width: 200px;">
|
||||||
|
<input type="text" id="setGotifyToken" placeholder="App Token" style="flex: 1; min-width: 150px;">
|
||||||
|
<button type="button" onclick="saveSpecificSettings(['GOTIFY_URL', 'GOTIFY_TOKEN'], [document.getElementById('setGotifyUrl').value, document.getElementById('setGotifyToken').value])" style="width: auto;">Gotify Speichern</button>
|
||||||
|
<button type="button" onclick="testGotify()" style="width: auto; background-color: transparent; border: 1px solid var(--accent-blue); color: var(--accent-blue);">🔔 Test Senden</button>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div class="log-container" style="margin-top: 1.5rem;">
|
||||||
|
<h3 style="margin-top: 0; color: var(--accent-orange);">SMTP E-Mail Server (Persönliches Radar)</h3>
|
||||||
|
<p style="font-size: 0.85rem; color: var(--text-muted); margin-bottom: 1rem;">Verschickt personalisierte Erinnerungen an User (unterstützt Port 465 SSL oder 587 TLS).</p>
|
||||||
|
<form style="display: flex; gap: 10px; flex-wrap: wrap; margin-bottom: 10px;">
|
||||||
|
<input type="text" id="setSmtpHost" placeholder="SMTP Host (z.B. mail.domain.de)" style="flex: 1; min-width: 150px;">
|
||||||
|
<input type="number" id="setSmtpPort" placeholder="Port (z.B. 465 oder 587)" style="flex: 1; min-width: 80px;">
|
||||||
|
<input type="text" id="setSmtpUser" placeholder="Benutzername" style="flex: 1; min-width: 120px;">
|
||||||
|
<input type="password" id="setSmtpPass" placeholder="Passwort" style="flex: 1; min-width: 120px;">
|
||||||
|
<input type="email" id="setSmtpFrom" placeholder="Absender (From:)" style="flex: 1.5; min-width: 150px;">
|
||||||
|
<button type="button" onclick="saveSpecificSettings(['SMTP_HOST', 'SMTP_PORT', 'SMTP_USER', 'SMTP_PASS', 'SMTP_FROM'], [document.getElementById('setSmtpHost').value, document.getElementById('setSmtpPort').value, document.getElementById('setSmtpUser').value, document.getElementById('setSmtpPass').value, document.getElementById('setSmtpFrom').value])" style="width: auto;">SMTP Speichern</button>
|
||||||
|
<button type="button" onclick="testSmtp()" style="width: auto; background-color: transparent; border: 1px solid var(--accent-blue); color: var(--accent-blue);">📧 Test Senden</button>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div class="log-container" style="margin-top: 1.5rem;">
|
||||||
|
<h3 style="margin-top: 0;">Erweiterte Systemeinstellungen</h3>
|
||||||
|
<form id="settingsForm" style="display: flex; gap: 10px; margin-bottom: 1rem;"><input type="text" id="configKey" placeholder="Schlüssel" required style="flex: 1;"><input type="text" id="configValue" placeholder="Wert" required style="flex: 2;"><button type="submit" style="width: auto;">Speichern</button></form>
|
||||||
|
<table><thead><tr><th>Schlüssel</th><th>Wert</th><th style="text-align: right;">Aktion</th></tr></thead><tbody id="settingsTableBody"></tbody></table>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div id="tabUsers" class="log-container hidden">
|
||||||
|
<h3 style="margin-top: 0;">Nutzerverwaltung (Admins)</h3>
|
||||||
|
<form id="userForm" style="display: flex; gap: 10px; margin-bottom: 1rem; flex-wrap: wrap;">
|
||||||
|
<input type="text" id="newUsername" placeholder="Benutzername" required style="flex: 1; min-width: 120px;">
|
||||||
|
<input type="email" id="newUserEmail" placeholder="E-Mail Adresse" style="flex: 1.5; min-width: 150px;">
|
||||||
|
<input type="password" id="newUserPass" placeholder="Passwort" required style="flex: 1; min-width: 120px;">
|
||||||
|
<select id="newUserRole" style="flex: 1; min-width: 100px;"><option value="user">User</option><option value="pm">Projektmanager (PM)</option><option value="admin">Admin</option></select>
|
||||||
|
<button type="submit" style="width: auto;">Anlegen</button>
|
||||||
|
</form>
|
||||||
|
<table><thead><tr><th>ID</th><th>User</th><th>E-Mail</th><th>Rolle</th><th style="text-align: right;">Aktion</th></tr></thead><tbody id="usersTableBody"></tbody></table>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<!-- MAIN TASK MODAL -->
|
||||||
|
<div id="taskModal" class="modal-overlay hidden">
|
||||||
|
<div class="modal-content">
|
||||||
|
<div class="modal-header"><h2 id="modalProjectTitle" style="margin: 0;">Projekt Details</h2><button class="btn-close" onclick="closeTaskModal()">✖</button></div>
|
||||||
|
<div class="modal-body">
|
||||||
|
<div style="display:flex; justify-content: space-between; margin-bottom: 1rem;"><span id="modalProjectStatus" class="badge">Aktiv</span></div>
|
||||||
|
<div id="modalBriefingBox" class="info-box hidden"><strong>Steckbrief:</strong> <span id="modalBriefingText"></span></div>
|
||||||
|
<div id="modalCloseComment" style="display:none; color: var(--text-muted); font-size: 0.9rem; font-style: italic; margin-bottom: 1.5rem; border-left: 3px solid var(--surface-hover); padding-left: 10px;"></div>
|
||||||
|
<div id="pmControls" class="pm-controls hidden"><button onclick="assignProjectToMe()" style="background-color: var(--surface-color); border: 1px solid var(--text-muted); color: var(--text-main); width: auto; font-size: 0.85rem;">🙋 Mir zuweisen</button><button onclick="extendProject()" style="background-color: var(--accent-blue); width: auto; font-size: 0.85rem;">⏳ Verlängern</button><button onclick="closeProject('closed')" style="background-color: var(--accent-green); width: auto; font-size: 0.85rem;">✔ Abschließen</button><button onclick="closeProject('canceled')" style="background-color: var(--accent-red); width: auto; font-size: 0.85rem;">✖ Abbrechen</button></div>
|
||||||
|
<form id="taskAddForm" style="display: flex; gap: 10px; margin-bottom: 2rem; flex-wrap: wrap; background: rgba(0,0,0,0.2); padding: 15px; border-radius: 8px;">
|
||||||
|
<input type="text" id="newTaskPhase" placeholder="Phase (z.B. Phase 1)" required style="flex: 1; min-width: 120px;">
|
||||||
|
<input type="text" id="newTaskTitle" placeholder="Neues To-Do..." required style="flex: 2; min-width: 200px;">
|
||||||
|
<select id="newTaskAssignee" class="user-select-dropdown" style="flex: 1; min-width: 120px;"><option value="">-- Frei --</option></select>
|
||||||
|
<select id="newTaskPriority" style="flex: 1; min-width: 100px;"><option value="1">🔥 Hoch</option><option value="2" selected>⚡ Mittel</option><option value="3">🧊 Niedrig</option></select>
|
||||||
|
<input type="date" id="newTaskDeadline" title="Ziel-Datum" style="flex: 1; min-width: 130px;">
|
||||||
|
<button type="submit" style="width: 100%;">Hinzufügen</button>
|
||||||
|
</form>
|
||||||
|
<div id="taskList"></div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<!-- EDIT TASK MODAL -->
|
||||||
|
<div id="editTaskModal" class="modal-overlay hidden" style="z-index: 1050; background: rgba(0,0,0,0.85);">
|
||||||
|
<div class="modal-content" style="max-width: 500px;">
|
||||||
|
<div class="modal-header"><h3 style="margin:0;">Task bearbeiten</h3><button class="btn-close" onclick="document.getElementById('editTaskModal').classList.add('hidden')">✖</button></div>
|
||||||
|
<form id="taskEditForm" style="display: flex; flex-direction: column; gap: 15px;">
|
||||||
|
<input type="hidden" id="editTaskId">
|
||||||
|
<input type="text" id="editTaskTitle" placeholder="To-Do Titel" required>
|
||||||
|
<input type="text" id="editTaskPhase" placeholder="Phase" required>
|
||||||
|
<select id="editTaskAssignee" class="user-select-dropdown"><option value="">-- Nicht zugewiesen --</option></select>
|
||||||
|
<select id="editTaskPriority"><option value="1">🔥 Hoch</option><option value="2">⚡ Mittel</option><option value="3">🧊 Niedrig</option></select>
|
||||||
|
<input type="date" id="editTaskDeadline" title="Ziel-Datum">
|
||||||
|
<button type="submit">Speichern</button>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<!-- NEU: EDIT USER MODAL -->
|
||||||
|
<div id="editUserModal" class="modal-overlay hidden" style="z-index: 1050; background: rgba(0,0,0,0.85);">
|
||||||
|
<div class="modal-content" style="max-width: 400px;">
|
||||||
|
<div class="modal-header"><h3 style="margin:0;">Benutzer bearbeiten</h3><button class="btn-close" onclick="document.getElementById('editUserModal').classList.add('hidden')">✖</button></div>
|
||||||
|
<form id="userEditForm" style="display: flex; flex-direction: column; gap: 15px;">
|
||||||
|
<input type="hidden" id="editUserId">
|
||||||
|
<div><label>Benutzername</label><input type="text" id="editUserName" required></div>
|
||||||
|
<div><label>E-Mail</label><input type="email" id="editUserEmail"></div>
|
||||||
|
<div><label>Rolle</label><select id="editUserRole"><option value="user">User</option><option value="pm">Projektmanager (PM)</option><option value="admin">Admin</option></select></div>
|
||||||
|
<div><label>Passwort überschreiben (leer = keine Änderung)</label><input type="password" id="editUserPass" placeholder="***"></div>
|
||||||
|
<button type="submit">Speichern</button>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<script>
|
||||||
|
let currentUserRole = 'user'; let currentUserId = null; let allUsers = [];
|
||||||
|
|
||||||
|
document.addEventListener('DOMContentLoaded', checkSession);
|
||||||
|
|
||||||
|
function checkSession() {
|
||||||
|
fetch('/api/me').then(res => res.json()).then(data => {
|
||||||
|
if (data.success) {
|
||||||
|
currentUserRole = data.role; currentUserId = data.user_id; document.getElementById('userRoleDisplay').innerText = data.role.toUpperCase();
|
||||||
|
if(currentUserRole !== 'admin') { document.getElementById('navLogs').style.display = 'none'; document.getElementById('navSettings').style.display = 'none'; document.getElementById('navUsers').style.display = 'none'; }
|
||||||
|
fetchAllUsers(); showDashboard(data.username);
|
||||||
|
} else { document.getElementById('loginView').classList.remove('hidden'); }
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
function fetchAllUsers() {
|
||||||
|
fetch('/api/users').then(res => res.json()).then(data => {
|
||||||
|
if (data.success) {
|
||||||
|
allUsers = data.data; let options = '<option value="">-- Frei --</option>';
|
||||||
|
allUsers.forEach(u => options += `<option value="${u.id}">${u.username}</option>`);
|
||||||
|
document.querySelectorAll('.user-select-dropdown').forEach(el => el.innerHTML = options);
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
document.getElementById('loginForm').addEventListener('submit', function(e) { e.preventDefault(); const formData = new FormData(); formData.append('username', document.getElementById('username').value); formData.append('password', document.getElementById('password').value); fetch('/api/login', { method: 'POST', body: formData }).then(res => res.json()).then(data => { if (data.success) { document.getElementById('loginError').style.display = 'none'; checkSession(); } else { document.getElementById('loginError').style.display = 'block'; } }); });
|
||||||
|
function logout() { fetch('/api/logout').then(() => { location.reload(); }); }
|
||||||
|
function showDashboard(username) { document.getElementById('loginView').classList.add('hidden'); document.getElementById('dashboardView').classList.remove('hidden'); document.getElementById('userNameDisplay').innerText = username; toggleView('myarea'); }
|
||||||
|
function toggleView(tab) { document.getElementById('tabMyarea').classList.add('hidden'); document.getElementById('tabProjects').classList.add('hidden'); document.getElementById('tabLogs').classList.add('hidden'); document.getElementById('tabSettings').classList.add('hidden'); document.getElementById('tabUsers').classList.add('hidden'); const target = document.getElementById('tab'+tab.charAt(0).toUpperCase() + tab.slice(1)); if (target) target.classList.remove('hidden'); if (tab === 'projects') loadProjects(); else if (tab === 'logs') loadAuditLogs(); else if (tab === 'settings') loadSettings(); else if (tab === 'users') loadUsers(); else if (tab === 'myarea') loadMyArea(); }
|
||||||
|
|
||||||
|
// --- MEIN BEREICH & DEADLINES ---
|
||||||
|
function loadMyArea() {
|
||||||
|
fetch('/api/myarea').then(res => res.json()).then(data => {
|
||||||
|
if(data.success) {
|
||||||
|
const pGrid = document.getElementById('myProjectsContainer'); const tGrid = document.getElementById('myTasksContainer');
|
||||||
|
pGrid.innerHTML = ''; tGrid.innerHTML = '';
|
||||||
|
|
||||||
|
let upcomingHtml = '';
|
||||||
|
const now = new Date(); now.setHours(0,0,0,0);
|
||||||
|
const nextWeek = new Date(now); nextWeek.setDate(now.getDate() + 7);
|
||||||
|
|
||||||
|
if(data.projects.length === 0) pGrid.innerHTML = '<span style="color:var(--text-muted);">Keine aktiven Projekte zugewiesen.</span>';
|
||||||
|
data.projects.forEach(p => {
|
||||||
|
const safeTitle = p.title.replace(/'/g, "\\'"); const safeBriefing = (p.briefing || '').replace(/'/g, "\\'").replace(/"/g, '"');
|
||||||
|
pGrid.innerHTML += `<div class="project-card" onclick="openTaskModal(${p.id}, '${safeTitle}', '${p.status}', '', '${safeBriefing}')"><h3 style="margin:0; color:var(--accent-blue);">${p.title}</h3><p style="font-size:0.85rem; color:var(--text-muted);">${p.description || 'Keine Info'}</p></div>`;
|
||||||
|
if(p.deadline) {
|
||||||
|
let d = new Date(p.deadline);
|
||||||
|
if(d >= now && d <= nextWeek) upcomingHtml += `<div class="deadline-item deadline-warn"><strong>Projekt:</strong> ${p.title} (Fällig am: ${p.deadline})</div>`;
|
||||||
|
else if (d < now) upcomingHtml += `<div class="deadline-item deadline-danger"><strong>⚠️ Überfällig:</strong> Projekt "${p.title}" (war fällig am: ${p.deadline})</div>`;
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
if(data.tasks.length === 0) tGrid.innerHTML = '<span style="color:var(--text-muted);">Keine offenen Aufgaben. Gut gemacht!</span>';
|
||||||
|
else tGrid.innerHTML = '<ul style="list-style:none; padding:0; margin:0;"></ul>';
|
||||||
|
const ul = tGrid.querySelector('ul');
|
||||||
|
|
||||||
|
data.tasks.forEach(t => {
|
||||||
|
let prioHtml = t.priority == 1 ? `<span class="prio-badge" style="background: rgba(239, 68, 68, 0.2); color: var(--accent-red);">Hoch</span>` : (t.priority == 2 ? `<span class="prio-badge" style="background: rgba(245, 158, 11, 0.2); color: var(--accent-orange);">Mittel</span>` : `<span class="prio-badge" style="background: rgba(16, 185, 129, 0.2); color: var(--accent-green);">Niedrig</span>`);
|
||||||
|
let dlHtml = t.deadline ? `<span style="color:var(--accent-orange); font-size:0.75rem;">⏳ ${t.deadline}</span>` : '';
|
||||||
|
if(ul) ul.innerHTML += `<li style="padding: 10px; border-bottom: 1px solid rgba(255,255,255,0.05); display:flex; gap:10px; align-items:flex-start;"><input type="checkbox" class="task-checkbox" onclick="event.preventDefault(); toggleTaskGlobal(${t.id}, ${t.project_id}, 0)"><div><div style="font-weight:bold;">${t.title} ${prioHtml}</div><div style="font-size:0.8rem; color:var(--text-muted);">Projekt: ${t.project_title} ${dlHtml}</div></div></li>`;
|
||||||
|
if(t.deadline) {
|
||||||
|
let d = new Date(t.deadline);
|
||||||
|
if(d >= now && d <= nextWeek) upcomingHtml += `<div class="deadline-item deadline-warn"><strong>Task:</strong> ${t.title} im Projekt "${t.project_title}" (Fällig am: ${t.deadline})</div>`;
|
||||||
|
else if (d < now) upcomingHtml += `<div class="deadline-item deadline-danger"><strong>⚠️ Überfällig:</strong> Task "${t.title}" (war fällig am: ${t.deadline})</div>`;
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
if(upcomingHtml === '') upcomingHtml = '<span style="color:var(--text-muted);">Keine Deadlines in den nächsten 7 Tagen. Entspann dich! ☕</span>';
|
||||||
|
document.getElementById('upcomingDeadlinesBox').innerHTML = upcomingHtml;
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
|
function toggleTaskGlobal(taskId, projectId, state) { let comment = prompt("Kurzer Kommentar zur Erledigung:", ""); if (comment === null) return; const formData = new FormData(); formData.append('task_id', taskId); formData.append('project_id', projectId); formData.append('comment', comment); fetch('/api/tasks/toggle', { method: 'POST', body: formData }).then(res=>res.json()).then(data=>{ if(data.success) loadMyArea(); }); }
|
||||||
|
|
||||||
|
// --- PROJEKTE ---
|
||||||
|
function loadProjects() {
|
||||||
|
fetch('/api/projects').then(res => res.json()).then(data => {
|
||||||
|
if (data.success) {
|
||||||
|
const grid = document.getElementById('projectsGrid'); grid.innerHTML = '';
|
||||||
|
if (data.data.length === 0) { grid.innerHTML = '<p style="color: var(--text-muted);">Noch keine Projekte vorhanden.</p>'; return; }
|
||||||
|
data.data.forEach(p => {
|
||||||
|
let percent = p.total_tasks > 0 ? Math.round((p.completed_tasks / p.total_tasks) * 100) : 0; let timelineHtml = '';
|
||||||
|
if (p.deadline) {
|
||||||
|
const start = new Date(p.created_at.replace(' ', 'T')).getTime(); const end = new Date(p.deadline).getTime(); const now = new Date().getTime();
|
||||||
|
let timePercent = end > start ? Math.max(0, Math.min(100, ((now - start) / (end - start)) * 100)) : 0; const daysLeft = Math.ceil((end - now) / 86400000); const daysText = daysLeft >= 0 ? `${daysLeft} Tage verbleibend` : `${Math.abs(daysLeft)} Tage überfällig`; const timeColor = daysLeft < 0 ? 'var(--accent-red)' : (daysLeft <= 3 ? 'var(--accent-orange)' : 'var(--text-muted)');
|
||||||
|
timelineHtml = `<div style="margin-top: 15px; background: rgba(0,0,0,0.2); padding: 10px; border-radius: 6px;"><div style="display: flex; justify-content: space-between; font-size: 0.75rem; margin-bottom: 5px;"><span style="color: var(--text-muted);">Start: ${p.created_at.substring(0,10)}</span><span style="color: ${timeColor}; font-weight: bold;">⏳ ${daysText}</span><span style="color: var(--text-muted);">Ziel: ${p.deadline}</span></div><div class="progress-bg"><div class="progress-fill" style="width: ${timePercent}%; background-color: ${timeColor};"></div></div></div>`;
|
||||||
|
}
|
||||||
|
const safeTitle = p.title.replace(/'/g, "\\'"); const safeBriefing = (p.briefing || '').replace(/'/g, "\\'").replace(/"/g, '"');
|
||||||
|
const isClosed = p.status === 'closed'; const isCanceled = p.status === 'canceled'; let statusColor = 'var(--accent-green)'; let statusLabel = 'Aktiv';
|
||||||
|
if (isClosed) { statusColor = 'var(--text-muted)'; statusLabel = 'Abgeschlossen'; } if (isCanceled) { statusColor = 'var(--accent-red)'; statusLabel = 'Abgebrochen'; }
|
||||||
|
let deleteBtn = currentUserRole === 'admin' ? `<button class="btn-delete" onclick="event.stopPropagation(); deleteProject(${p.id}, '${safeTitle}')" title="Projekt löschen">✖</button>` : '';
|
||||||
|
let assignedHtml = p.assigned_username ? `<div class="assigned-badge">🙋 ${p.assigned_username}</div>` : '';
|
||||||
|
|
||||||
|
grid.innerHTML += `<div class="project-card" onclick="openTaskModal(${p.id}, '${safeTitle}', '${p.status}', '${(p.close_comment || '').replace(/'/g, "\\'")}', '${safeBriefing}')" style="opacity: ${isClosed||isCanceled ? '0.6' : '1'}; border-left: 3px solid ${statusColor};">${assignedHtml}<div class="project-header"><h3 class="project-title">${p.title} <span style="font-size: 0.75rem; color: ${statusColor}; font-weight: normal; margin-left: 10px;">[${statusLabel}]</span></h3>${deleteBtn}</div><p class="project-desc">${p.description || 'Keine Beschreibung'}</p><div style="font-size: 0.8rem; color: var(--text-muted); margin-bottom: 5px;">Task-Fortschritt (${p.completed_tasks}/${p.total_tasks})</div><div class="progress-bg" title="${percent}%"><div class="progress-fill ${percent === 100 ? 'done' : ''}" style="width: ${percent}%;"></div></div>${timelineHtml}</div>`;
|
||||||
|
});
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
document.getElementById('projectForm').addEventListener('submit', function(e) { e.preventDefault(); const formData = new FormData(); formData.append('title', document.getElementById('projTitle').value); formData.append('description', document.getElementById('projDesc').value); formData.append('briefing', document.getElementById('projBriefing').value); formData.append('deadline', document.getElementById('projDeadline').value); fetch('/api/projects', { method: 'POST', body: formData }).then(res => res.json()).then(data => { if (data.success) { document.getElementById('projectForm').reset(); loadProjects(); } else { alert(data.error); } }); });
|
||||||
|
function deleteProject(id, title) { if (!confirm(`Das Projekt "${title}" unwiderruflich löschen?`)) return; const formData = new FormData(); formData.append('id', id); fetch('/api/projects/delete', { method: 'POST', body: formData }).then(res => res.json()).then(data => { if (data.success) loadProjects(); else alert(data.error); }); }
|
||||||
|
|
||||||
|
function openTaskModal(id, title, status, closeComment, briefing) {
|
||||||
|
currentProjectId = id; document.getElementById('modalProjectTitle').innerText = title; document.getElementById('taskModal').classList.remove('hidden');
|
||||||
|
const badge = document.getElementById('modalProjectStatus'); const pmControls = document.getElementById('pmControls'); const taskForm = document.getElementById('taskAddForm'); const commentBox = document.getElementById('modalCloseComment');
|
||||||
|
const briefingBox = document.getElementById('modalBriefingBox'); const briefingText = document.getElementById('modalBriefingText');
|
||||||
|
if (briefing && briefing.trim() !== '') { briefingText.innerText = briefing; briefingBox.classList.remove('hidden'); } else { briefingBox.classList.add('hidden'); }
|
||||||
|
if (status !== 'active') { badge.innerText = status === 'canceled' ? 'Abgebrochen (Schreibgeschützt)' : 'Abgeschlossen (Schreibgeschützt)'; badge.style.background = status === 'canceled' ? 'var(--accent-red)' : 'var(--text-muted)'; pmControls.classList.add('hidden'); taskForm.style.display = 'none'; if (closeComment) { commentBox.innerText = `"${closeComment}"`; commentBox.style.display = 'block'; } else { commentBox.style.display = 'none'; } }
|
||||||
|
else { badge.innerText = 'Aktiv'; badge.style.background = 'var(--accent-green)'; taskForm.style.display = 'flex'; commentBox.style.display = 'none'; if(currentUserRole === 'pm' || currentUserRole === 'admin') pmControls.classList.remove('hidden'); else pmControls.classList.add('hidden'); }
|
||||||
|
loadTasks();
|
||||||
|
}
|
||||||
|
function closeTaskModal() { document.getElementById('taskModal').classList.add('hidden'); currentProjectId = null; loadProjects(); }
|
||||||
|
function assignProjectToMe() { if(!confirm('Möchtest du die Verantwortung für dieses Projekt übernehmen?')) return; const formData = new FormData(); formData.append('id', currentProjectId); fetch('/api/projects/assign', { method: 'POST', body: formData }).then(res=>res.json()).then(data=>{ if(data.success) { alert('Projekt zugewiesen!'); loadProjects(); } else alert(data.error); }); }
|
||||||
|
function extendProject() { const newDate = prompt("Bitte neue Deadline eingeben (JJJJ-MM-TT):", ""); if (!newDate) return; const formData = new FormData(); formData.append('id', currentProjectId); formData.append('deadline', newDate); fetch('/api/projects/extend', { method: 'POST', body: formData }).then(res=>res.json()).then(data=>{ if(data.success) closeTaskModal(); else alert(data.error); }); }
|
||||||
|
function closeProject(status) { const actionText = status === 'canceled' ? 'Abbruch' : 'Abschluss'; const comment = prompt(`Bitte hinterlasse einen zwingenden Kommentar zum ${actionText}:`, ""); if (!comment) { alert('Aktion abgebrochen.'); return; } if(!confirm(`Bist du sicher? Das Projekt wird permanent auf "${status}" gesetzt!`)) return; const formData = new FormData(); formData.append('id', currentProjectId); formData.append('status', status); formData.append('comment', comment); fetch('/api/projects/close', { method: 'POST', body: formData }).then(res=>res.json()).then(data=>{ if(data.success) closeTaskModal(); else alert(data.error); }); }
|
||||||
|
|
||||||
|
function loadTasks() {
|
||||||
|
fetch('/api/tasks?project_id=' + currentProjectId).then(res => res.json()).then(data => {
|
||||||
|
if(data.success) {
|
||||||
|
const list = document.getElementById('taskList'); list.innerHTML = '';
|
||||||
|
if (data.data.length === 0) { list.innerHTML = '<div style="color: var(--text-muted); font-size: 0.9rem;">Noch keine To-Dos angelegt.</div>'; return; }
|
||||||
|
const grouped = {}; data.data.forEach(t => { if (!grouped[t.phase]) grouped[t.phase] = []; grouped[t.phase].push(t); });
|
||||||
|
for (const phase in grouped) {
|
||||||
|
list.innerHTML += `<div class="phase-header">${phase}</div>`;
|
||||||
|
grouped[phase].forEach(t => {
|
||||||
|
const isDone = t.is_completed == 1; const isClosed = document.getElementById('modalProjectStatus').innerText.includes('Schreibgeschützt'); const disabledAttr = isClosed ? 'disabled' : '';
|
||||||
|
let prioHtml = t.priority == 1 ? `<span class="prio-badge" style="background: rgba(239, 68, 68, 0.2); color: var(--accent-red);">Hoch</span>` : (t.priority == 2 ? `<span class="prio-badge" style="background: rgba(245, 158, 11, 0.2); color: var(--accent-orange);">Mittel</span>` : `<span class="prio-badge" style="background: rgba(16, 185, 129, 0.2); color: var(--accent-green);">Niedrig</span>`);
|
||||||
|
let tTimelineHtml = (t.deadline && !isDone) ? `<span style="color: var(--accent-orange);">⏳ Ziel: ${t.deadline}</span>` : '';
|
||||||
|
let completedText = (isDone && t.completed_at) ? `<span style="color: var(--accent-green);">✔ Erledigt am: ${t.completed_at.substring(0,10)}</span>` : '';
|
||||||
|
if (isDone && t.completion_comment) completedText += `<div style="color: var(--text-muted); margin-top:4px; font-style:italic;">💬 "${t.completion_comment}"</div>`;
|
||||||
|
let assignHtml = t.assigned_username ? `<span style="color: var(--accent-blue);">🙋 Zuweisung: ${t.assigned_username}</span>` : '';
|
||||||
|
const safeTitle = t.title.replace(/'/g, "\\'").replace(/"/g, '"'); const safePhase = t.phase.replace(/'/g, "\\'").replace(/"/g, '"');
|
||||||
|
let actionsHtml = !isClosed ? `<div class="task-actions"><button class="btn-icon" onclick="openEditTodoModal(${t.id}, '${safeTitle}', '${safePhase}', ${t.priority}, '${t.deadline || ''}', '${t.assigned_to || ''}')" title="Bearbeiten">✏️</button><button class="btn-icon del" onclick="deleteTodo(${t.id}, '${safeTitle}')" title="Löschen">🗑️</button></div>` : '';
|
||||||
|
list.innerHTML += `<div class="task-item ${isDone ? 'done' : ''}"><input type="checkbox" class="task-checkbox" ${isDone ? 'checked' : ''} ${disabledAttr} onclick="event.preventDefault(); toggleTask(${t.id}, ${t.is_completed})"><div class="task-details"><div style="display: flex; align-items: center; gap: 10px;"><span class="task-text" style="font-size: 1.05rem;">${t.title}</span>${prioHtml}</div><div class="task-meta">${tTimelineHtml} ${assignHtml}</div><div>${completedText}</div></div>${actionsHtml}</div>`;
|
||||||
|
});
|
||||||
|
}
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
|
document.getElementById('taskAddForm').addEventListener('submit', function(e) { e.preventDefault(); const formData = new FormData(); formData.append('project_id', currentProjectId); formData.append('phase', document.getElementById('newTaskPhase').value); formData.append('title', document.getElementById('newTaskTitle').value); formData.append('priority', document.getElementById('newTaskPriority').value); formData.append('deadline', document.getElementById('newTaskDeadline').value); formData.append('assigned_to', document.getElementById('newTaskAssignee').value); fetch('/api/tasks/create', { method: 'POST', body: formData }).then(res=>res.json()).then(data=>{ if(data.success) { document.getElementById('newTaskTitle').value = ''; document.getElementById('newTaskDeadline').value = ''; loadTasks(); } }); });
|
||||||
|
function toggleTask(taskId, currentState) { let comment = ''; if (currentState == 0) { comment = prompt("Kurzer Kommentar zur Erledigung (optional):", ""); if (comment === null) return; } const formData = new FormData(); formData.append('task_id', taskId); formData.append('project_id', currentProjectId); formData.append('comment', comment); fetch('/api/tasks/toggle', { method: 'POST', body: formData }).then(res=>res.json()).then(data=>{ if(data.success) loadTasks(); }); }
|
||||||
|
function deleteTodo(id, title) { if (!confirm(`To-Do "${title}" wirklich löschen?`)) return; const formData = new FormData(); formData.append('task_id', id); fetch('/api/tasks/delete', { method: 'POST', body: formData }).then(res=>res.json()).then(data=>{ if(data.success) loadTasks(); else alert(data.error); }); }
|
||||||
|
function openEditTodoModal(id, title, phase, prio, deadline, assignedTo) { document.getElementById('editTaskId').value = id; document.getElementById('editTaskTitle').value = title; document.getElementById('editTaskPhase').value = phase; document.getElementById('editTaskPriority').value = prio; document.getElementById('editTaskDeadline').value = deadline; document.getElementById('editTaskAssignee').value = assignedTo; document.getElementById('editTaskModal').classList.remove('hidden'); }
|
||||||
|
document.getElementById('taskEditForm').addEventListener('submit', function(e) { e.preventDefault(); const formData = new FormData(); formData.append('task_id', document.getElementById('editTaskId').value); formData.append('title', document.getElementById('editTaskTitle').value); formData.append('phase', document.getElementById('editTaskPhase').value); formData.append('priority', document.getElementById('editTaskPriority').value); formData.append('deadline', document.getElementById('editTaskDeadline').value); formData.append('assigned_to', document.getElementById('editTaskAssignee').value); fetch('/api/tasks/edit', { method: 'POST', body: formData }).then(res=>res.json()).then(data=>{ if(data.success) { document.getElementById('editTaskModal').classList.add('hidden'); loadTasks(); } else alert(data.error); }); });
|
||||||
|
|
||||||
|
function loadAuditLogs() { fetch('/api/logs').then(res => res.json()).then(data => { if (data.success) { const tbody = document.getElementById('logTableBody'); tbody.innerHTML = ''; data.data.forEach(log => { tbody.innerHTML += `<tr><td style="color: var(--text-muted);">${log.timestamp}</td><td><strong>${log.username}</strong></td><td>${log.action}</td><td>${log.target || '-'}</td></tr>`; }); } }); }
|
||||||
|
|
||||||
|
function saveSpecificSettings(keys, values) { let promises = []; for(let i=0; i<keys.length; i++) { let fd = new FormData(); fd.append('config_key', keys[i]); fd.append('config_value', values[i]); promises.push(fetch('/api/settings', { method: 'POST', body: fd })); } Promise.all(promises).then(() => { alert('Einstellungen erfolgreich gespeichert!'); loadSettings(); }); }
|
||||||
|
|
||||||
|
function loadSettings() {
|
||||||
|
fetch('/api/settings').then(res => res.json()).then(data => {
|
||||||
|
if (data.success) {
|
||||||
|
const tbody = document.getElementById('settingsTableBody'); tbody.innerHTML = '';
|
||||||
|
const banner = document.getElementById('licenseBannerBox');
|
||||||
|
let hasLicense = false; let sDict = {};
|
||||||
|
|
||||||
|
data.data.forEach(setting => {
|
||||||
|
sDict[setting.config_key] = setting.config_value;
|
||||||
|
if (setting.config_key !== 'LICENSE_KEY' && !['GOTIFY_URL', 'GOTIFY_TOKEN', 'SMTP_HOST', 'SMTP_PORT', 'SMTP_USER', 'SMTP_PASS', 'SMTP_FROM'].includes(setting.config_key)) {
|
||||||
|
tbody.innerHTML += `<tr><td><strong>${setting.config_key}</strong></td><td style="color: var(--text-muted);">${setting.config_value}</td><td style="text-align: right;"><button class="btn-delete" onclick="deleteSetting('${setting.config_key}')">✖</button></td></tr>`;
|
||||||
|
}
|
||||||
|
if (setting.config_key === 'LICENSE_KEY') {
|
||||||
|
hasLicense = true;
|
||||||
|
try {
|
||||||
|
let payloadStr = atob(setting.config_value.split('.')[0]); let payload = JSON.parse(payloadStr);
|
||||||
|
let isExpired = new Date(payload.expires) < new Date();
|
||||||
|
if (isExpired) { banner.innerHTML = `<div class="license-banner license-expired"><h3 style="margin:0; color:var(--accent-red);">⚠️ Lizenz abgelaufen</h3><span style="font-size:0.9rem; color:var(--text-muted);">Deine ${payload.tier} ist am ${payload.expires} abgelaufen. CorePlan läuft jetzt im Community Modus.</span></div>`; }
|
||||||
|
else { banner.innerHTML = `<div class="license-banner license-active"><h3 style="margin:0; color:var(--accent-green);">✔ ${payload.tier} aktiv</h3><span style="font-size:0.9rem; color:var(--text-muted);">Erlaubt bis zu ${payload.limit} aktive Projekte. Gültig bis: <strong>${payload.expires}</strong></span></div>`; }
|
||||||
|
} catch(e) { banner.innerHTML = `<div class="license-banner license-expired"><h3 style="margin:0; color:var(--accent-red);">❌ Ungültiger Lizenzschlüssel</h3><span style="font-size:0.9rem; color:var(--text-muted);">Der Schlüssel konnte nicht verifiziert werden.</span></div>`; }
|
||||||
|
}
|
||||||
|
});
|
||||||
|
if (!hasLicense) { banner.innerHTML = `<div class="license-banner license-community"><h3 style="margin:0; color:var(--text-main);">Community Edition (Max 3 Projekte)</h3><span style="font-size:0.9rem; color:var(--text-muted);">Hinterlege unten einen gültigen Lizenzschlüssel für unlimitierte Features.</span></div>`; }
|
||||||
|
|
||||||
|
if(document.getElementById('setGotifyUrl')) document.getElementById('setGotifyUrl').value = sDict['GOTIFY_URL'] || '';
|
||||||
|
if(document.getElementById('setGotifyToken')) document.getElementById('setGotifyToken').value = sDict['GOTIFY_TOKEN'] || '';
|
||||||
|
if(document.getElementById('setSmtpHost')) document.getElementById('setSmtpHost').value = sDict['SMTP_HOST'] || '';
|
||||||
|
if(document.getElementById('setSmtpPort')) document.getElementById('setSmtpPort').value = sDict['SMTP_PORT'] || '';
|
||||||
|
if(document.getElementById('setSmtpUser')) document.getElementById('setSmtpUser').value = sDict['SMTP_USER'] || '';
|
||||||
|
if(document.getElementById('setSmtpPass')) document.getElementById('setSmtpPass').value = sDict['SMTP_PASS'] || '';
|
||||||
|
if(document.getElementById('setSmtpFrom')) document.getElementById('setSmtpFrom').value = sDict['SMTP_FROM'] || '';
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
function testGotify() { fetch('/api/settings/test-gotify', { method: 'POST' }).then(res => res.json()).then(data => { if(data.success) alert("Test-Push erfolgreich an Gotify gesendet!"); else alert("Fehler: " + data.error); }); }
|
||||||
|
function testSmtp() { alert("Sende Test-Mail... Dies kann ein paar Sekunden dauern."); fetch('/api/settings/test-smtp', { method: 'POST' }).then(res => res.json()).then(data => { if(data.success) alert("Test-E-Mail erfolgreich an deine Admin-Adresse gesendet!"); else alert("SMTP Fehler: " + data.error); }); }
|
||||||
|
|
||||||
|
document.getElementById('licenseForm').addEventListener('submit', function(e) { e.preventDefault(); const formData = new FormData(); formData.append('config_key', 'LICENSE_KEY'); formData.append('config_value', document.getElementById('licenseInput').value); fetch('/api/settings', { method: 'POST', body: formData }).then(res => res.json()).then(data => { if (data.success) { document.getElementById('licenseInput').value = ''; loadSettings(); } }); });
|
||||||
|
|
||||||
|
// --- USERS ---
|
||||||
|
function loadUsers() { fetch('/api/users').then(res => res.json()).then(data => { if (data.success) { const tbody = document.getElementById('usersTableBody'); tbody.innerHTML = ''; data.data.forEach(u => { const safeName = u.username.replace(/'/g, "\\'"); const safeEmail = (u.email || '').replace(/'/g, "\\'"); tbody.innerHTML += `<tr><td>${u.id}</td><td><strong>${u.username}</strong></td><td>${u.email || '-'}</td><td><span class="badge">${u.role}</span></td><td style="text-align: right;"><button class="btn-icon" onclick="openEditUserModal(${u.id}, '${safeName}', '${safeEmail}', '${u.role}')" title="Bearbeiten">✏️</button><button class="btn-icon del" onclick="deleteUser(${u.id})" title="Löschen">🗑️</button></td></tr>`; }); } }); }
|
||||||
|
|
||||||
|
function openEditUserModal(id, username, email, role) { document.getElementById('editUserId').value = id; document.getElementById('editUserName').value = username; document.getElementById('editUserEmail').value = email; document.getElementById('editUserRole').value = role; document.getElementById('editUserPass').value = ''; document.getElementById('editUserModal').classList.remove('hidden'); }
|
||||||
|
document.getElementById('userEditForm').addEventListener('submit', function(e) { e.preventDefault(); const formData = new FormData(); formData.append('id', document.getElementById('editUserId').value); formData.append('username', document.getElementById('editUserName').value); formData.append('email', document.getElementById('editUserEmail').value); formData.append('role', document.getElementById('editUserRole').value); formData.append('password', document.getElementById('editUserPass').value); fetch('/api/users/edit', { method: 'POST', body: formData }).then(res => res.json()).then(data => { if(data.success) { document.getElementById('editUserModal').classList.add('hidden'); loadUsers(); fetchAllUsers(); } else alert(data.error); }); });
|
||||||
|
|
||||||
|
function deleteSetting(key) { if (!confirm(`Einstellung "${key}" wirklich löschen?`)) return; const formData = new FormData(); formData.append('config_key', key); fetch('/api/settings/delete', { method: 'POST', body: formData }).then(res => res.json()).then(data => { if (data.success) loadSettings(); else alert(data.error); }); }
|
||||||
|
function deleteUser(id) { if (!confirm('Diesen Benutzer wirklich löschen?')) return; const formData = new FormData(); formData.append('id', id); fetch('/api/users/delete', { method: 'POST', body: formData }).then(res => res.json()).then(data => { if (data.success) { loadUsers(); fetchAllUsers(); } else alert(data.error); }); }
|
||||||
|
document.getElementById('settingsForm').addEventListener('submit', function(e) { e.preventDefault(); const formData = new FormData(); formData.append('config_key', document.getElementById('configKey').value); formData.append('config_value', document.getElementById('configValue').value); fetch('/api/settings', { method: 'POST', body: formData }).then(res => res.json()).then(data => { if (data.success) { document.getElementById('configKey').value = ''; document.getElementById('configValue').value = ''; loadSettings(); } }); });
|
||||||
|
document.getElementById('userForm').addEventListener('submit', function(e) { e.preventDefault(); const formData = new FormData(); formData.append('username', document.getElementById('newUsername').value); formData.append('email', document.getElementById('newUserEmail').value); formData.append('password', document.getElementById('newUserPass').value); formData.append('role', document.getElementById('newUserRole').value); fetch('/api/users', { method: 'POST', body: formData }).then(res => res.json()).then(data => { if (data.success) { document.getElementById('newUsername').value = ''; document.getElementById('newUserEmail').value = ''; document.getElementById('newUserPass').value = ''; loadUsers(); fetchAllUsers(); } else { alert(data.error); } }); });
|
||||||
|
</script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
+162
@@ -0,0 +1,162 @@
|
|||||||
|
<?php
|
||||||
|
// /var/www/html/auth.php
|
||||||
|
|
||||||
|
function handleLogin() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
$username = trim($_POST['username'] ?? '');
|
||||||
|
$password = $_POST['password'] ?? '';
|
||||||
|
|
||||||
|
$stmt = $pdo->prepare("SELECT * FROM users WHERE username = ?");
|
||||||
|
$stmt->execute([$username]);
|
||||||
|
$user = $stmt->fetch();
|
||||||
|
|
||||||
|
if ($user && password_verify($password, $user['password_hash'])) {
|
||||||
|
$_SESSION['user_id'] = $user['id'];
|
||||||
|
$_SESSION['username'] = $user['username'];
|
||||||
|
$_SESSION['role'] = $user['role'];
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$user['id'], $user['username'], 'User Login', $_SERVER['REMOTE_ADDR']]);
|
||||||
|
echo json_encode(['success' => true]);
|
||||||
|
} else { echo json_encode(['success' => false]); }
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleLogout() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (isset($_SESSION['user_id'])) { $pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'User Logout', 'System']); }
|
||||||
|
session_destroy(); echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleGetLogs() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { http_response_code(403); exit; }
|
||||||
|
$stmt = $pdo->query("SELECT * FROM audit_logs ORDER BY id DESC LIMIT 50");
|
||||||
|
echo json_encode(['success' => true, 'data' => $stmt->fetchAll()]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleGetSettings() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { http_response_code(403); exit; }
|
||||||
|
$stmt = $pdo->query("SELECT * FROM settings ORDER BY config_key ASC");
|
||||||
|
echo json_encode(['success' => true, 'data' => $stmt->fetchAll()]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleSaveSettings() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { http_response_code(403); exit; }
|
||||||
|
$key = trim($_POST['config_key'] ?? ''); $value = trim($_POST['config_value'] ?? '');
|
||||||
|
if ($key === '') { echo json_encode(['success' => false, 'error' => 'Schlüssel darf nicht leer sein.']); exit; }
|
||||||
|
$pdo->prepare("REPLACE INTO settings (config_key, config_value) VALUES (?, ?)")->execute([$key, $value]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Setting Update', "Key: $key"]);
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleDeleteSetting() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { http_response_code(403); exit; }
|
||||||
|
$key = trim($_POST['config_key'] ?? '');
|
||||||
|
$pdo->prepare("DELETE FROM settings WHERE config_key = ?")->execute([$key]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Setting gelöscht', "Key: $key"]);
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleChangePassword() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
$userId = $_SESSION['user_id'] ?? 0; if (!$userId) { http_response_code(401); exit; }
|
||||||
|
$oldPass = $_POST['old_password'] ?? ''; $newPass = $_POST['new_password'] ?? '';
|
||||||
|
$stmt = $pdo->prepare("SELECT password_hash FROM users WHERE id = ?"); $stmt->execute([$userId]); $user = $stmt->fetch();
|
||||||
|
if ($user && password_verify($oldPass, $user['password_hash'])) {
|
||||||
|
if (strlen($newPass) < 4) { echo json_encode(['success' => false, 'error' => 'Min 4 Zeichen.']); exit; }
|
||||||
|
$newHash = password_hash($newPass, PASSWORD_DEFAULT);
|
||||||
|
$pdo->prepare("UPDATE users SET password_hash = ? WHERE id = ?")->execute([$newHash, $userId]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$userId, $_SESSION['username'], 'Passwort geändert', 'Self-Service']);
|
||||||
|
echo json_encode(['success' => true]);
|
||||||
|
} else { echo json_encode(['success' => false, 'error' => 'Altes Passwort falsch.']); }
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleGetUsers() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { http_response_code(403); exit; }
|
||||||
|
$stmt = $pdo->query("SELECT id, username, email, role FROM users ORDER BY id ASC");
|
||||||
|
echo json_encode(['success' => true, 'data' => $stmt->fetchAll()]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleCreateUser() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { http_response_code(403); exit; }
|
||||||
|
|
||||||
|
$username = trim($_POST['username'] ?? '');
|
||||||
|
$email = trim($_POST['email'] ?? '');
|
||||||
|
$password = $_POST['password'] ?? '';
|
||||||
|
$role = $_POST['role'] ?? 'user';
|
||||||
|
if (!in_array($role, ['admin', 'pm', 'user'])) $role = 'user';
|
||||||
|
|
||||||
|
try {
|
||||||
|
$hash = password_hash($password, PASSWORD_DEFAULT);
|
||||||
|
$pdo->prepare("INSERT INTO users (username, email, password_hash, role) VALUES (?, ?, ?, ?)")->execute([$username, $email, $hash, $role]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'User erstellt', "User: $username ($role)"]);
|
||||||
|
echo json_encode(['success' => true]);
|
||||||
|
} catch (PDOException $e) {
|
||||||
|
echo json_encode(['success' => false, 'error' => 'Fehler (evtl. existiert der Name schon).']);
|
||||||
|
}
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
// --- NEU: USER BEARBEITEN ---
|
||||||
|
function handleEditUser() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { http_response_code(403); exit; }
|
||||||
|
|
||||||
|
$id = $_POST['id'] ?? 0;
|
||||||
|
$username = trim($_POST['username'] ?? '');
|
||||||
|
$email = trim($_POST['email'] ?? '');
|
||||||
|
$role = $_POST['role'] ?? 'user';
|
||||||
|
$password = $_POST['password'] ?? ''; // Optional
|
||||||
|
|
||||||
|
if (!in_array($role, ['admin', 'pm', 'user'])) $role = 'user';
|
||||||
|
|
||||||
|
try {
|
||||||
|
if ($password !== '') {
|
||||||
|
$hash = password_hash($password, PASSWORD_DEFAULT);
|
||||||
|
$pdo->prepare("UPDATE users SET username = ?, email = ?, role = ?, password_hash = ? WHERE id = ?")->execute([$username, $email, $role, $hash, $id]);
|
||||||
|
} else {
|
||||||
|
$pdo->prepare("UPDATE users SET username = ?, email = ?, role = ? WHERE id = ?")->execute([$username, $email, $role, $id]);
|
||||||
|
}
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'User bearbeitet', "User ID: $id ($username)"]);
|
||||||
|
echo json_encode(['success' => true]);
|
||||||
|
} catch (PDOException $e) {
|
||||||
|
echo json_encode(['success' => false, 'error' => 'Fehler beim Speichern (evtl. Benutzername schon vergeben).']);
|
||||||
|
}
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleDeleteUser() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { http_response_code(403); exit; }
|
||||||
|
$deleteId = $_POST['id'] ?? 0;
|
||||||
|
if ($deleteId == $_SESSION['user_id']) { echo json_encode(['success' => false, 'error' => 'Du kannst dich nicht selbst löschen.']); exit; }
|
||||||
|
$pdo->prepare("DELETE FROM users WHERE id = ?")->execute([$deleteId]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'User gelöscht', "User ID: $deleteId"]);
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleTestSmtp() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { http_response_code(403); exit; }
|
||||||
|
|
||||||
|
$stmt = $pdo->prepare("SELECT email FROM users WHERE id = ?"); $stmt->execute([$_SESSION['user_id']]);
|
||||||
|
$user = $stmt->fetch();
|
||||||
|
if(!$user || empty($user['email'])) { echo json_encode(['success' => false, 'error' => 'Dein Admin-Account hat keine E-Mail-Adresse. Bitte bearbeite deinen Account unter "Benutzer".']); exit; }
|
||||||
|
|
||||||
|
$res = sendSmtpMail($user['email'], "CorePlan SMTP Test", "Hallo!\n\nDein CorePlan SMTP-Server (SSL/TLS) funktioniert einwandfrei.\n\nBeste Grüße,\nCorePlan System");
|
||||||
|
if($res === true) echo json_encode(['success' => true]); else echo json_encode(['success' => false, 'error' => $res]);
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleTestGotify() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { http_response_code(403); exit; }
|
||||||
|
$res = sendGotify("Test Alarm", "Hallo Admin, Gotify Kommunikation funktioniert!");
|
||||||
|
if($res === true) echo json_encode(['success' => true]); else echo json_encode(['success' => false, 'error' => $res]);
|
||||||
|
exit;
|
||||||
|
}
|
||||||
@@ -0,0 +1,29 @@
|
|||||||
|
<?php
|
||||||
|
// /var/www/html/cron.php
|
||||||
|
require_once 'database.php';
|
||||||
|
require_once 'mailer.php';
|
||||||
|
|
||||||
|
echo "Starte CorePlan Cronjob...\n";
|
||||||
|
|
||||||
|
// Datum exakt in 7 Tagen
|
||||||
|
$targetDate = date('Y-m-d', strtotime('+7 days'));
|
||||||
|
|
||||||
|
// 1. Projekte (Fällig in 7 Tagen)
|
||||||
|
$stmt = $pdo->query("SELECT p.title, p.deadline, u.email, u.username FROM projects p JOIN users u ON p.assigned_to = u.id WHERE p.status = 'active' AND p.deadline = '$targetDate'");
|
||||||
|
while($row = $stmt->fetch()) {
|
||||||
|
if(!empty($row['email'])) {
|
||||||
|
sendSmtpMail($row['email'], "Erinnerung: Projekt '{$row['title']}'", "Hallo {$row['username']},\n\ndas Projekt '{$row['title']}' ist in genau 7 Tagen fällig ({$row['deadline']}).\n\nBitte prüfe die offenen Tasks in CorePlan.\n\nDein CorePlan System");
|
||||||
|
}
|
||||||
|
sendGotify("Projekt-Deadline", "Projekt '{$row['title']}' (Zugewiesen an: {$row['username']}) ist in 7 Tagen fällig.");
|
||||||
|
}
|
||||||
|
|
||||||
|
// 2. Tasks (Fällig in 7 Tagen)
|
||||||
|
$stmt = $pdo->query("SELECT t.title, t.deadline, p.title as proj_title, u.email, u.username FROM tasks t JOIN projects p ON t.project_id = p.id JOIN users u ON t.assigned_to = u.id WHERE t.is_completed = 0 AND p.status = 'active' AND t.deadline = '$targetDate'");
|
||||||
|
while($row = $stmt->fetch()) {
|
||||||
|
if(!empty($row['email'])) {
|
||||||
|
sendSmtpMail($row['email'], "Erinnerung: To-Do '{$row['title']}'", "Hallo {$row['username']},\n\ndie Aufgabe '{$row['title']}' im Projekt '{$row['proj_title']}' ist in 7 Tagen fällig ({$row['deadline']}).\n\nDein CorePlan System");
|
||||||
|
}
|
||||||
|
// Gotify auch für Tasks, falls gewünscht.
|
||||||
|
}
|
||||||
|
|
||||||
|
echo "Cronjob erfolgreich beendet.\n";
|
||||||
@@ -0,0 +1,42 @@
|
|||||||
|
<?php
|
||||||
|
$dbPath = '/var/www/data/core.sqlite';
|
||||||
|
|
||||||
|
try {
|
||||||
|
$pdo = new PDO("sqlite:" . $dbPath);
|
||||||
|
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
||||||
|
$pdo->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
|
||||||
|
|
||||||
|
$pdo->exec("CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, username TEXT UNIQUE NOT NULL, password_hash TEXT NOT NULL, role TEXT DEFAULT 'user')");
|
||||||
|
// Auto-Migration Users
|
||||||
|
try { $pdo->exec("ALTER TABLE users ADD COLUMN email TEXT"); } catch (PDOException $e) {}
|
||||||
|
|
||||||
|
$pdo->exec("CREATE TABLE IF NOT EXISTS audit_logs (id INTEGER PRIMARY KEY AUTOINCREMENT, user_id INTEGER, username TEXT, action TEXT, target TEXT, timestamp DATETIME DEFAULT CURRENT_TIMESTAMP)");
|
||||||
|
$pdo->exec("CREATE TABLE IF NOT EXISTS settings (config_key TEXT PRIMARY KEY, config_value TEXT NOT NULL)");
|
||||||
|
|
||||||
|
$pdo->exec("CREATE TABLE IF NOT EXISTS projects (id INTEGER PRIMARY KEY AUTOINCREMENT, client_id INTEGER DEFAULT 0, title TEXT NOT NULL, description TEXT, deadline DATETIME, status TEXT DEFAULT 'active', closed_at DATETIME, last_activity DATETIME DEFAULT CURRENT_TIMESTAMP, created_at DATETIME DEFAULT CURRENT_TIMESTAMP)");
|
||||||
|
|
||||||
|
// Auto-Migration Projekte
|
||||||
|
try { $pdo->exec("ALTER TABLE projects ADD COLUMN closed_at DATETIME"); } catch (PDOException $e) {}
|
||||||
|
try { $pdo->exec("ALTER TABLE projects ADD COLUMN close_comment TEXT"); } catch (PDOException $e) {}
|
||||||
|
try { $pdo->exec("ALTER TABLE projects ADD COLUMN briefing TEXT"); } catch (PDOException $e) {}
|
||||||
|
try { $pdo->exec("ALTER TABLE projects ADD COLUMN assigned_to INTEGER"); } catch (PDOException $e) {}
|
||||||
|
|
||||||
|
$pdo->exec("CREATE TABLE IF NOT EXISTS tasks (id INTEGER PRIMARY KEY AUTOINCREMENT, project_id INTEGER NOT NULL, title TEXT NOT NULL, is_completed INTEGER DEFAULT 0, completed_by INTEGER, created_at DATETIME DEFAULT CURRENT_TIMESTAMP, updated_at DATETIME DEFAULT CURRENT_TIMESTAMP)");
|
||||||
|
|
||||||
|
// Auto-Migration Tasks
|
||||||
|
try { $pdo->exec("ALTER TABLE tasks ADD COLUMN deadline DATETIME"); } catch (PDOException $e) {}
|
||||||
|
try { $pdo->exec("ALTER TABLE tasks ADD COLUMN completed_at DATETIME"); } catch (PDOException $e) {}
|
||||||
|
try { $pdo->exec("ALTER TABLE tasks ADD COLUMN priority INTEGER DEFAULT 2"); } catch (PDOException $e) {}
|
||||||
|
try { $pdo->exec("ALTER TABLE tasks ADD COLUMN phase TEXT DEFAULT 'Standard'"); } catch (PDOException $e) {}
|
||||||
|
try { $pdo->exec("ALTER TABLE tasks ADD COLUMN completion_comment TEXT"); } catch (PDOException $e) {}
|
||||||
|
try { $pdo->exec("ALTER TABLE tasks ADD COLUMN assigned_to INTEGER"); } catch (PDOException $e) {}
|
||||||
|
|
||||||
|
$stmt = $pdo->query("SELECT COUNT(*) FROM users");
|
||||||
|
if ($stmt->fetchColumn() == 0) {
|
||||||
|
$hash = password_hash('admin', PASSWORD_DEFAULT);
|
||||||
|
// Admin ohne Mail initialisieren, kann später gelöscht/neu angelegt werden
|
||||||
|
$pdo->prepare("INSERT INTO users (username, password_hash, role) VALUES (?, ?, ?)")->execute(['admin', $hash, 'admin']);
|
||||||
|
}
|
||||||
|
} catch (PDOException $e) {
|
||||||
|
die(json_encode(['success' => false, 'error' => 'Datenbankfehler: ' . $e->getMessage()]));
|
||||||
|
}
|
||||||
@@ -0,0 +1,36 @@
|
|||||||
|
<?php
|
||||||
|
// /var/www/html/index.php
|
||||||
|
|
||||||
|
ini_set('display_errors', 0);
|
||||||
|
error_reporting(E_ALL);
|
||||||
|
ini_set('log_errors', 1);
|
||||||
|
ini_set('error_log', '/var/www/data/php_errors.log');
|
||||||
|
|
||||||
|
set_error_handler(function($errno, $errstr, $errfile, $errline) {
|
||||||
|
error_log("Error [$errno]: $errstr in $errfile on line $errline");
|
||||||
|
if (error_reporting() & $errno) {
|
||||||
|
throw new ErrorException($errstr, 0, $errno, $errfile, $errline);
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
set_exception_handler(function($e) {
|
||||||
|
error_log("Exception: " . $e->getMessage() . " in " . $e->getFile() . " on line " . $e->getLine());
|
||||||
|
$request = $_SERVER['REQUEST_URI'] ?? '';
|
||||||
|
if (strpos($request, '/api/') === 0) {
|
||||||
|
http_response_code(500);
|
||||||
|
header('Content-Type: application/json');
|
||||||
|
echo json_encode(['success' => false, 'error' => 'Interner Systemfehler. Bitte Logs prüfen.']);
|
||||||
|
} else {
|
||||||
|
http_response_code(500);
|
||||||
|
echo "<h1 style='color:white; font-family:sans-serif; text-align:center; margin-top:50px;'>500 - Systemfehler</h1>";
|
||||||
|
}
|
||||||
|
exit;
|
||||||
|
});
|
||||||
|
|
||||||
|
header('Content-Type: application/json');
|
||||||
|
|
||||||
|
require_once 'database.php';
|
||||||
|
require_once 'mailer.php'; // NEU
|
||||||
|
require_once 'auth.php';
|
||||||
|
require_once 'projects.php';
|
||||||
|
require_once 'router.php';
|
||||||
@@ -0,0 +1,72 @@
|
|||||||
|
<?php
|
||||||
|
// /var/www/html/mailer.php
|
||||||
|
|
||||||
|
function sendSmtpMail($to, $subject, $message) {
|
||||||
|
global $pdo;
|
||||||
|
$stmt = $pdo->query("SELECT * FROM settings WHERE config_key IN ('SMTP_HOST', 'SMTP_PORT', 'SMTP_USER', 'SMTP_PASS', 'SMTP_FROM')");
|
||||||
|
$s = []; while($r = $stmt->fetch()) $s[$r['config_key']] = $r['config_value'];
|
||||||
|
|
||||||
|
$host = $s['SMTP_HOST'] ?? '';
|
||||||
|
$port = $s['SMTP_PORT'] ?? 587;
|
||||||
|
$user = $s['SMTP_USER'] ?? '';
|
||||||
|
$pass = $s['SMTP_PASS'] ?? '';
|
||||||
|
$from = $s['SMTP_FROM'] ?? '';
|
||||||
|
|
||||||
|
if(!$host || !$from) return "SMTP nicht vollständig konfiguriert.";
|
||||||
|
|
||||||
|
// SMTPS (Port 465) nutzt direkt SSL, Port 587 nutzt STARTTLS
|
||||||
|
$isSSL = ($port == 465);
|
||||||
|
$socketHost = $isSSL ? "ssl://$host" : $host;
|
||||||
|
|
||||||
|
$socket = @fsockopen($socketHost, $port, $errno, $errstr, 10);
|
||||||
|
if(!$socket) return "Verbindung fehlgeschlagen: $errstr ($errno)";
|
||||||
|
|
||||||
|
$res = fread($socket, 1024);
|
||||||
|
fputs($socket, "EHLO $host\r\n"); $res = fread($socket, 1024);
|
||||||
|
|
||||||
|
if (!$isSSL && $port != 25) {
|
||||||
|
fputs($socket, "STARTTLS\r\n"); $res = fread($socket, 1024);
|
||||||
|
stream_socket_enable_crypto($socket, true, STREAM_CRYPTO_METHOD_TLS_CLIENT);
|
||||||
|
fputs($socket, "EHLO $host\r\n"); $res = fread($socket, 1024);
|
||||||
|
}
|
||||||
|
|
||||||
|
if($user && $pass) {
|
||||||
|
fputs($socket, "AUTH LOGIN\r\n"); $res = fread($socket, 1024);
|
||||||
|
fputs($socket, base64_encode($user)."\r\n"); $res = fread($socket, 1024);
|
||||||
|
fputs($socket, base64_encode($pass)."\r\n"); $res = fread($socket, 1024);
|
||||||
|
if(substr($res, 0, 3) !== '235') return "Auth fehlgeschlagen: $res";
|
||||||
|
}
|
||||||
|
|
||||||
|
fputs($socket, "MAIL FROM: <$from>\r\n"); fread($socket, 1024);
|
||||||
|
fputs($socket, "RCPT TO: <$to>\r\n"); fread($socket, 1024);
|
||||||
|
fputs($socket, "DATA\r\n"); fread($socket, 1024);
|
||||||
|
|
||||||
|
$headers = "From: CorePlan <$from>\r\n";
|
||||||
|
$headers .= "To: <$to>\r\n";
|
||||||
|
$headers .= "Subject: =?UTF-8?B?".base64_encode($subject)."?=\r\n";
|
||||||
|
$headers .= "MIME-Version: 1.0\r\n";
|
||||||
|
$headers .= "Content-Type: text/plain; charset=UTF-8\r\n";
|
||||||
|
|
||||||
|
fputs($socket, $headers . "\r\n" . $message . "\r\n.\r\n");
|
||||||
|
$res = fread($socket, 1024);
|
||||||
|
fputs($socket, "QUIT\r\n"); fclose($socket);
|
||||||
|
|
||||||
|
if(substr($res, 0, 3) !== '250') return "Senden fehlgeschlagen: $res";
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
function sendGotify($title, $message) {
|
||||||
|
global $pdo;
|
||||||
|
$stmt = $pdo->query("SELECT * FROM settings WHERE config_key IN ('GOTIFY_URL', 'GOTIFY_TOKEN')");
|
||||||
|
$s = []; while($r = $stmt->fetch()) $s[$r['config_key']] = $r['config_value'];
|
||||||
|
if(empty($s['GOTIFY_URL']) || empty($s['GOTIFY_TOKEN'])) return "Gotify nicht konfiguriert.";
|
||||||
|
|
||||||
|
$url = rtrim($s['GOTIFY_URL'], '/') . '/message?token=' . $s['GOTIFY_TOKEN'];
|
||||||
|
$data = ['title' => $title, 'message' => $message, 'priority' => 5];
|
||||||
|
$options = [ 'http' => [ 'header' => "Content-type: application/json\r\n", 'method' => 'POST', 'content' => json_encode($data) ] ];
|
||||||
|
$context = stream_context_create($options);
|
||||||
|
$res = @file_get_contents($url, false, $context);
|
||||||
|
|
||||||
|
if ($res === false) return "Verbindung zu Gotify fehlgeschlagen.";
|
||||||
|
return true;
|
||||||
|
}
|
||||||
@@ -0,0 +1,184 @@
|
|||||||
|
<?php
|
||||||
|
function getProjectLimit() {
|
||||||
|
global $pdo;
|
||||||
|
$stmt = $pdo->query("SELECT config_value FROM settings WHERE config_key = 'LICENSE_KEY'");
|
||||||
|
$license = $stmt->fetchColumn();
|
||||||
|
if (!$license) return 3;
|
||||||
|
$parts = explode('.', $license);
|
||||||
|
if (count($parts) !== 2) return 3;
|
||||||
|
$payload = json_decode(base64_decode($parts[0]), true);
|
||||||
|
$secret = 'TESSMANN_COREPLAN_SECURE_2026_MASTER_KEY';
|
||||||
|
$expectedSig = hash_hmac('sha256', $parts[0], $secret);
|
||||||
|
if (!hash_equals($expectedSig, $parts[1])) return 3;
|
||||||
|
if (isset($payload['expires']) && strtotime($payload['expires']) < time()) return 3;
|
||||||
|
return (int)($payload['limit'] ?? 3);
|
||||||
|
}
|
||||||
|
|
||||||
|
function isPMorAdmin() { return in_array($_SESSION['role'] ?? '', ['admin', 'pm']); }
|
||||||
|
|
||||||
|
function handleGetProjects() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isset($_SESSION['user_id'])) { http_response_code(401); exit; }
|
||||||
|
$stmt = $pdo->query("
|
||||||
|
SELECT p.*, u.username as assigned_username,
|
||||||
|
(SELECT COUNT(*) FROM tasks WHERE project_id = p.id) as total_tasks,
|
||||||
|
(SELECT COUNT(*) FROM tasks WHERE project_id = p.id AND is_completed = 1) as completed_tasks
|
||||||
|
FROM projects p
|
||||||
|
LEFT JOIN users u ON p.assigned_to = u.id
|
||||||
|
ORDER BY CASE WHEN p.status = 'closed' THEN 1 WHEN p.status = 'canceled' THEN 2 ELSE 0 END, p.deadline ASC, p.id DESC
|
||||||
|
");
|
||||||
|
echo json_encode(['success' => true, 'data' => $stmt->fetchAll()]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleCreateProject() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isset($_SESSION['user_id'])) { http_response_code(401); exit; }
|
||||||
|
|
||||||
|
$activeCount = $pdo->query("SELECT COUNT(*) FROM projects WHERE status = 'active'")->fetchColumn();
|
||||||
|
$limit = getProjectLimit();
|
||||||
|
if ($activeCount >= $limit) {
|
||||||
|
$tierName = $limit === 3 ? "Community Edition" : "Standard Edition";
|
||||||
|
echo json_encode(['success' => false, 'error' => "Lizenzlimit der $tierName erreicht."]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
$title = trim($_POST['title'] ?? ''); $description = trim($_POST['description'] ?? ''); $briefing = trim($_POST['briefing'] ?? ''); $deadline = trim($_POST['deadline'] ?? '');
|
||||||
|
if ($title === '') { echo json_encode(['success' => false, 'error' => 'Titel darf nicht leer sein.']); exit; }
|
||||||
|
if ($deadline === '') $deadline = null;
|
||||||
|
|
||||||
|
$pdo->prepare("INSERT INTO projects (title, description, briefing, deadline) VALUES (?, ?, ?, ?)")->execute([$title, $description, $briefing, $deadline]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Projekt erstellt', "Projekt: $title"]);
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleAssignProject() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isPMorAdmin()) { echo json_encode(['success' => false, 'error' => 'Keine Berechtigung.']); exit; }
|
||||||
|
$id = $_POST['id'] ?? 0;
|
||||||
|
$pdo->prepare("UPDATE projects SET assigned_to = ?, last_activity = CURRENT_TIMESTAMP WHERE id = ?")->execute([$_SESSION['user_id'], $id]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Projekt zugewiesen', "ID: $id"]);
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleExtendProject() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isPMorAdmin()) { echo json_encode(['success' => false, 'error' => 'Keine Berechtigung.']); exit; }
|
||||||
|
$id = $_POST['id'] ?? 0; $deadline = trim($_POST['deadline'] ?? ''); if ($deadline === '') $deadline = null;
|
||||||
|
$pdo->prepare("UPDATE projects SET deadline = ?, last_activity = CURRENT_TIMESTAMP WHERE id = ? AND status = 'active'")->execute([$deadline, $id]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Projekt verlängert', "ID: $id"]);
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleCloseProject() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isPMorAdmin()) { echo json_encode(['success' => false, 'error' => 'Keine Berechtigung.']); exit; }
|
||||||
|
$id = $_POST['id'] ?? 0; $status = $_POST['status'] ?? 'closed'; $comment = trim($_POST['comment'] ?? '');
|
||||||
|
if (!in_array($status, ['closed', 'canceled'])) $status = 'closed';
|
||||||
|
$pdo->prepare("UPDATE projects SET status = ?, closed_at = CURRENT_TIMESTAMP, close_comment = ? WHERE id = ? AND status = 'active'")->execute([$status, $comment, $id]);
|
||||||
|
$actionLog = $status === 'canceled' ? 'Projekt abgebrochen' : 'Projekt abgeschlossen';
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], $actionLog, "ID: $id"]);
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleDeleteProject() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (($_SESSION['role'] ?? '') !== 'admin') { echo json_encode(['success' => false, 'error' => 'Nur Admins dürfen löschen.']); exit; }
|
||||||
|
$id = $_POST['id'] ?? 0;
|
||||||
|
$stmt = $pdo->prepare("SELECT status, closed_at FROM projects WHERE id = ?"); $stmt->execute([$id]); $proj = $stmt->fetch();
|
||||||
|
if (!$proj) { echo json_encode(['success' => false, 'error' => 'Projekt nicht gefunden.']); exit; }
|
||||||
|
if ($proj['status'] === 'active') { echo json_encode(['success' => false, 'error' => 'Aktive Projekte können nicht gelöscht werden.']); exit; }
|
||||||
|
if ($proj['status'] === 'closed') {
|
||||||
|
$closedAt = strtotime($proj['closed_at']); $sixtyDaysAgo = strtotime('-60 days');
|
||||||
|
if ($closedAt > $sixtyDaysAgo) { $daysLeft = ceil(($closedAt - $sixtyDaysAgo) / 86400); echo json_encode(['success' => false, 'error' => "Löschsperre aktiv. Erfolgreiche Projekte erst in $daysLeft Tag(en) löschbar."]); exit; }
|
||||||
|
}
|
||||||
|
$pdo->prepare("DELETE FROM tasks WHERE project_id = ?")->execute([$id]);
|
||||||
|
$pdo->prepare("DELETE FROM projects WHERE id = ?")->execute([$id]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Projekt gelöscht', "ID: $id"]);
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleGetTasks() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isset($_SESSION['user_id'])) { http_response_code(401); exit; }
|
||||||
|
$projectId = $_GET['project_id'] ?? 0;
|
||||||
|
$stmt = $pdo->prepare("SELECT t.*, u.username as assigned_username FROM tasks t LEFT JOIN users u ON t.assigned_to = u.id WHERE t.project_id = ? ORDER BY t.is_completed ASC, t.phase ASC, t.priority ASC, t.deadline ASC, t.id ASC");
|
||||||
|
$stmt->execute([$projectId]);
|
||||||
|
echo json_encode(['success' => true, 'data' => $stmt->fetchAll()]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleCreateTask() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isset($_SESSION['user_id'])) { http_response_code(401); exit; }
|
||||||
|
|
||||||
|
$projectId = $_POST['project_id'] ?? 0; $title = trim($_POST['title'] ?? ''); $deadline = trim($_POST['deadline'] ?? ''); $phase = trim($_POST['phase'] ?? 'Standard'); $priority = (int)($_POST['priority'] ?? 2); $assignedTo = trim($_POST['assigned_to'] ?? '');
|
||||||
|
if ($deadline === '') $deadline = null; if ($phase === '') $phase = 'Standard'; if ($assignedTo === '') $assignedTo = null;
|
||||||
|
|
||||||
|
if ($title !== '') {
|
||||||
|
$pdo->prepare("INSERT INTO tasks (project_id, title, deadline, phase, priority, assigned_to) VALUES (?, ?, ?, ?, ?, ?)")->execute([$projectId, $title, $deadline, $phase, $priority, $assignedTo]);
|
||||||
|
$pdo->prepare("UPDATE projects SET last_activity = CURRENT_TIMESTAMP WHERE id = ?")->execute([$projectId]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Task erstellt', "Proj-ID: $projectId | Task: $title"]);
|
||||||
|
}
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleEditTask() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isset($_SESSION['user_id'])) { http_response_code(401); exit; }
|
||||||
|
|
||||||
|
$taskId = $_POST['task_id'] ?? 0; $title = trim($_POST['title'] ?? ''); $deadline = trim($_POST['deadline'] ?? ''); $phase = trim($_POST['phase'] ?? 'Standard'); $priority = (int)($_POST['priority'] ?? 2); $assignedTo = trim($_POST['assigned_to'] ?? '');
|
||||||
|
if ($deadline === '') $deadline = null; if ($phase === '') $phase = 'Standard'; if ($assignedTo === '') $assignedTo = null;
|
||||||
|
|
||||||
|
if ($title !== '') {
|
||||||
|
$pdo->prepare("UPDATE tasks SET title = ?, deadline = ?, phase = ?, priority = ?, assigned_to = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?")->execute([$title, $deadline, $phase, $priority, $assignedTo, $taskId]);
|
||||||
|
$stmt = $pdo->prepare("SELECT project_id FROM tasks WHERE id = ?"); $stmt->execute([$taskId]); $t = $stmt->fetch();
|
||||||
|
if ($t) $pdo->prepare("UPDATE projects SET last_activity = CURRENT_TIMESTAMP WHERE id = ?")->execute([$t['project_id']]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Task bearbeitet', "Task ID: $taskId ($title)"]);
|
||||||
|
}
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleToggleTask() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isset($_SESSION['user_id'])) { http_response_code(401); exit; }
|
||||||
|
$taskId = $_POST['task_id'] ?? 0; $projectId = $_POST['project_id'] ?? 0; $comment = trim($_POST['comment'] ?? '');
|
||||||
|
$stmt = $pdo->prepare("SELECT is_completed, title FROM tasks WHERE id = ?"); $stmt->execute([$taskId]); $task = $stmt->fetch();
|
||||||
|
if ($task) {
|
||||||
|
if ($task['is_completed'] == 0) {
|
||||||
|
$pdo->prepare("UPDATE tasks SET is_completed = 1, completed_by = ?, completed_at = CURRENT_TIMESTAMP, completion_comment = ? WHERE id = ?")->execute([$_SESSION['user_id'], $comment, $taskId]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Task erledigt', "Task: " . $task['title']]);
|
||||||
|
} else {
|
||||||
|
$pdo->prepare("UPDATE tasks SET is_completed = 0, completed_by = NULL, completed_at = NULL, completion_comment = NULL WHERE id = ?")->execute([$taskId]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Task reaktiviert', "Task: " . $task['title']]);
|
||||||
|
}
|
||||||
|
$pdo->prepare("UPDATE projects SET last_activity = CURRENT_TIMESTAMP WHERE id = ?")->execute([$projectId]);
|
||||||
|
}
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleDeleteTask() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isset($_SESSION['user_id'])) { http_response_code(401); exit; }
|
||||||
|
$taskId = $_POST['task_id'] ?? 0;
|
||||||
|
$stmt = $pdo->prepare("SELECT project_id, title FROM tasks WHERE id = ?"); $stmt->execute([$taskId]); $task = $stmt->fetch();
|
||||||
|
if ($task) {
|
||||||
|
$pdo->prepare("DELETE FROM tasks WHERE id = ?")->execute([$taskId]);
|
||||||
|
$pdo->prepare("UPDATE projects SET last_activity = CURRENT_TIMESTAMP WHERE id = ?")->execute([$task['project_id']]);
|
||||||
|
$pdo->prepare("INSERT INTO audit_logs (user_id, username, action, target) VALUES (?, ?, ?, ?)")->execute([$_SESSION['user_id'], $_SESSION['username'], 'Task gelöscht', "Task: " . $task['title']]);
|
||||||
|
}
|
||||||
|
echo json_encode(['success' => true]); exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleGetMyArea() {
|
||||||
|
global $pdo; @session_start();
|
||||||
|
if (!isset($_SESSION['user_id'])) { http_response_code(401); exit; }
|
||||||
|
$userId = $_SESSION['user_id'];
|
||||||
|
|
||||||
|
$stmtProj = $pdo->prepare("SELECT p.*, (SELECT COUNT(*) FROM tasks WHERE project_id = p.id) as total_tasks, (SELECT COUNT(*) FROM tasks WHERE project_id = p.id AND is_completed = 1) as completed_tasks FROM projects p WHERE assigned_to = ? AND status = 'active' ORDER BY deadline ASC");
|
||||||
|
$stmtProj->execute([$userId]);
|
||||||
|
$myProjects = $stmtProj->fetchAll();
|
||||||
|
|
||||||
|
$stmtTasks = $pdo->prepare("SELECT t.*, p.title as project_title FROM tasks t JOIN projects p ON t.project_id = p.id WHERE t.assigned_to = ? AND t.is_completed = 0 AND p.status = 'active' ORDER BY t.priority ASC, t.deadline ASC");
|
||||||
|
$stmtTasks->execute([$userId]);
|
||||||
|
$myTasks = $stmtTasks->fetchAll();
|
||||||
|
|
||||||
|
echo json_encode(['success' => true, 'projects' => $myProjects, 'tasks' => $myTasks]); exit;
|
||||||
|
}
|
||||||
@@ -0,0 +1,34 @@
|
|||||||
|
<?php
|
||||||
|
$request = $_SERVER['REQUEST_URI']; $path = parse_url($request, PHP_URL_PATH); $method = $_SERVER['REQUEST_METHOD'];
|
||||||
|
|
||||||
|
if ($path === '/' || $path === '') { header('Content-Type: text/html'); readfile('app.html'); exit;
|
||||||
|
} elseif ($path === '/api/login' && $method === 'POST') { handleLogin();
|
||||||
|
} elseif ($path === '/api/logout') { handleLogout();
|
||||||
|
} elseif ($path === '/api/status' && $method === 'GET') { echo json_encode(['success' => true, 'status' => 'online', 'system' => 'CorePlan']);
|
||||||
|
} elseif ($path === '/api/logs' && $method === 'GET') { handleGetLogs();
|
||||||
|
} elseif ($path === '/api/settings' && $method === 'GET') { handleGetSettings();
|
||||||
|
} elseif ($path === '/api/settings' && $method === 'POST') { handleSaveSettings();
|
||||||
|
} elseif ($path === '/api/settings/test-smtp' && $method === 'POST') { handleTestSmtp();
|
||||||
|
} elseif ($path === '/api/settings/test-gotify' && $method === 'POST') { handleTestGotify();
|
||||||
|
} elseif ($path === '/api/settings/delete' && $method === 'POST') { handleDeleteSetting();
|
||||||
|
} elseif ($path === '/api/password' && $method === 'POST') { handleChangePassword();
|
||||||
|
} elseif ($path === '/api/users' && $method === 'GET') { handleGetUsers();
|
||||||
|
} elseif ($path === '/api/users' && $method === 'POST') { handleCreateUser();
|
||||||
|
} elseif ($path === '/api/users/edit' && $method === 'POST') { handleEditUser(); // NEU
|
||||||
|
} elseif ($path === '/api/users/delete' && $method === 'POST') { handleDeleteUser();
|
||||||
|
// --- COREPLAN ENDPUNKTE ---
|
||||||
|
} elseif ($path === '/api/projects' && $method === 'GET') { handleGetProjects();
|
||||||
|
} elseif ($path === '/api/projects' && $method === 'POST') { handleCreateProject();
|
||||||
|
} elseif ($path === '/api/projects/close' && $method === 'POST') { handleCloseProject();
|
||||||
|
} elseif ($path === '/api/projects/extend' && $method === 'POST') { handleExtendProject();
|
||||||
|
} elseif ($path === '/api/projects/assign' && $method === 'POST') { handleAssignProject();
|
||||||
|
} elseif ($path === '/api/projects/delete' && $method === 'POST') { handleDeleteProject();
|
||||||
|
} elseif ($path === '/api/tasks' && $method === 'GET') { handleGetTasks();
|
||||||
|
} elseif ($path === '/api/tasks/create' && $method === 'POST') { handleCreateTask();
|
||||||
|
} elseif ($path === '/api/tasks/toggle' && $method === 'POST') { handleToggleTask();
|
||||||
|
} elseif ($path === '/api/tasks/edit' && $method === 'POST') { handleEditTask();
|
||||||
|
} elseif ($path === '/api/tasks/delete' && $method === 'POST') { handleDeleteTask();
|
||||||
|
} elseif ($path === '/api/myarea' && $method === 'GET') { handleGetMyArea();
|
||||||
|
} elseif ($path === '/api/me' && $method === 'GET') {
|
||||||
|
@session_start(); if (isset($_SESSION['user_id'])) { echo json_encode(['success' => true, 'username' => $_SESSION['username'], 'role' => $_SESSION['role'], 'user_id' => $_SESSION['user_id']]); } else { http_response_code(401); echo json_encode(['success' => false, 'error' => 'Not authenticated']); } exit;
|
||||||
|
} else { http_response_code(404); echo json_encode(['success' => false, 'error' => 'Endpoint not found']); }
|
||||||
Reference in New Issue
Block a user