You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
360 lines
19 KiB
PHP
360 lines
19 KiB
PHP
<?php
|
|
require_once 'includes/db.php';
|
|
require_once 'includes/auth.php';
|
|
|
|
checkAuth();
|
|
checkAdmin(); // Tylko admin tu wejdzie
|
|
|
|
$message = '';
|
|
|
|
// ---------------------------------------------------------
|
|
// 0. INICJALIZACJA DOMYŚLNYCH USTAWIEŃ FIRM (jeśli nie istnieją)
|
|
// ---------------------------------------------------------
|
|
$default_settings = [
|
|
'company_1_name' => 'Moje Przedsiębiorstwo IT',
|
|
'company_1_details' => 'ul. Główna 1, 00-000 Warszawa | NIP: 0987654321',
|
|
'company_2_name' => 'Spółka Celowa Sp. z o.o.',
|
|
'company_2_details' => 'ul. Przykładowa 10, 00-000 Warszawa | NIP: 1234567890 | KRS: 0000123456'
|
|
];
|
|
|
|
foreach ($default_settings as $key => $val) {
|
|
// INSERT IGNORE dodaje wpis tylko wtedy, gdy taki klucz jeszcze nie istnieje w tabeli
|
|
$stmt = $pdo->prepare("INSERT IGNORE INTO " . DB_PREFIX . "settings (setting_key, setting_value) VALUES (?, ?)");
|
|
$stmt->execute([$key, $val]);
|
|
}
|
|
|
|
// ---------------------------------------------------------
|
|
// 1. WGRYWANIE LOGO
|
|
// ---------------------------------------------------------
|
|
if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_FILES['logo'])) {
|
|
if ($_FILES['logo']['error'] === 0) {
|
|
$upload_dir = 'uploads/';
|
|
if (!is_dir($upload_dir)) mkdir($upload_dir, 0777, true);
|
|
|
|
$file_ext = strtolower(pathinfo($_FILES['logo']['name'], PATHINFO_EXTENSION));
|
|
if(in_array($file_ext, ['jpg', 'jpeg', 'png', 'gif', 'svg'])) {
|
|
$new_name = 'logo_' . time() . '.' . $file_ext;
|
|
$dest_path = $upload_dir . $new_name;
|
|
|
|
if (move_uploaded_file($_FILES['logo']['tmp_name'], $dest_path)) {
|
|
$stmt = $pdo->prepare("REPLACE INTO " . DB_PREFIX . "settings (setting_key, setting_value) VALUES ('logo_path', ?)");
|
|
$stmt->execute([$dest_path]);
|
|
$message = "<div class='alert alert-success'>Pomyślnie zaktualizowano logo!</div>";
|
|
} else {
|
|
$message = "<div class='alert alert-danger'>Błąd: Nie udało się zapisać pliku. Sprawdź uprawnienia folderu 'uploads'.</div>";
|
|
}
|
|
} else {
|
|
$message = "<div class='alert alert-warning'>Błąd: Dozwolone są tylko pliki graficzne (JPG, PNG, GIF, SVG).</div>";
|
|
}
|
|
}
|
|
}
|
|
|
|
// ---------------------------------------------------------
|
|
// 1B. ZAPISYWANIE DANYCH FIRM
|
|
// ---------------------------------------------------------
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'update_company_settings') {
|
|
$settings_to_update = ['company_1_name', 'company_1_details', 'company_2_name', 'company_2_details'];
|
|
|
|
try {
|
|
$pdo->beginTransaction();
|
|
$update_stmt = $pdo->prepare("UPDATE " . DB_PREFIX . "settings SET setting_value = ? WHERE setting_key = ?");
|
|
|
|
foreach ($settings_to_update as $key) {
|
|
if (isset($_POST[$key])) {
|
|
$update_stmt->execute([trim($_POST[$key]), $key]);
|
|
}
|
|
}
|
|
$pdo->commit();
|
|
$message = "<div class='alert alert-success'>Ustawienia firmowe zostały zapisane!</div>";
|
|
} catch (PDOException $e) {
|
|
$pdo->rollBack();
|
|
$message = "<div class='alert alert-danger'>Błąd zapisu: " . $e->getMessage() . "</div>";
|
|
}
|
|
}
|
|
|
|
// ---------------------------------------------------------
|
|
// 2. DODAWANIE UŻYTKOWNIKA
|
|
// ---------------------------------------------------------
|
|
if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['add_user'])) {
|
|
$new_user = trim($_POST['new_username']);
|
|
$new_pass = $_POST['new_password'];
|
|
$new_role = $_POST['new_role'];
|
|
|
|
if (!empty($new_user) && !empty($new_pass)) {
|
|
try {
|
|
$hashed_pass = password_hash($new_pass, PASSWORD_BCRYPT);
|
|
$stmt = $pdo->prepare("INSERT INTO " . DB_PREFIX . "users (username, password, role) VALUES (?, ?, ?)");
|
|
$stmt->execute([$new_user, $hashed_pass, $new_role]);
|
|
$message = "<div class='alert alert-success'>Dodano nowego użytkownika: <strong>$new_user</strong></div>";
|
|
} catch (PDOException $e) {
|
|
$message = "<div class='alert alert-danger'>Błąd: Użytkownik o takiej nazwie prawdopodobnie już istnieje.</div>";
|
|
}
|
|
}
|
|
}
|
|
|
|
// ---------------------------------------------------------
|
|
// 3. RESET HASŁA UŻYTKOWNIKA
|
|
// ---------------------------------------------------------
|
|
if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['reset_password'])) {
|
|
$user_id = (int)$_POST['user_id'];
|
|
$new_pass = $_POST['new_password'];
|
|
|
|
if (!empty($new_pass)) {
|
|
$hashed_pass = password_hash($new_pass, PASSWORD_BCRYPT);
|
|
$stmt = $pdo->prepare("UPDATE " . DB_PREFIX . "users SET password = ? WHERE id = ?");
|
|
$stmt->execute([$hashed_pass, $user_id]);
|
|
$message = "<div class='alert alert-info'>Zmieniono hasło dla wybranego użytkownika.</div>";
|
|
}
|
|
}
|
|
|
|
// ---------------------------------------------------------
|
|
// 4. USUWANIE UŻYTKOWNIKA
|
|
// ---------------------------------------------------------
|
|
if (isset($_GET['delete'])) {
|
|
$id_to_delete = (int)$_GET['delete'];
|
|
if ($id_to_delete != $_SESSION['user_id']) {
|
|
$stmt = $pdo->prepare("DELETE FROM " . DB_PREFIX . "users WHERE id = ?");
|
|
$stmt->execute([$id_to_delete]);
|
|
$message = "<div class='alert alert-success'>Użytkownik został pomyślnie usunięty.</div>";
|
|
} else {
|
|
$message = "<div class='alert alert-warning'>Odmowa: Nie możesz usunąć własnego konta administratora!</div>";
|
|
}
|
|
}
|
|
|
|
// ---------------------------------------------------------
|
|
// POBIERANIE DANYCH DO WIDOKU
|
|
// ---------------------------------------------------------
|
|
$users = $pdo->query("SELECT id, username, role FROM " . DB_PREFIX . "users")->fetchAll();
|
|
|
|
$settings = [];
|
|
try {
|
|
$settings = $pdo->query("SELECT setting_key, setting_value FROM " . DB_PREFIX . "settings")->fetchAll(PDO::FETCH_KEY_PAIR);
|
|
} catch(PDOException $e) {
|
|
// Zabezpieczenie na wypadek awarii tabeli settings
|
|
}
|
|
|
|
$current_logo = $settings['logo_path'] ?? '';
|
|
?>
|
|
|
|
<!DOCTYPE html>
|
|
<html lang="pl" data-bs-theme="light" id="mainHtml">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>Panel Administratora - <?php echo defined('APP_NAME') ? APP_NAME : 'System'; ?></title>
|
|
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
|
|
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.0/font/bootstrap-icons.css">
|
|
<style>
|
|
.logo-img { max-height: 40px; width: auto; }
|
|
.transition-colors { transition: background-color 0.3s ease, color 0.3s ease; }
|
|
</style>
|
|
</head>
|
|
<body class="bg-body-tertiary transition-colors">
|
|
|
|
<nav class="navbar navbar-expand-lg navbar-dark bg-dark mb-4 shadow-sm">
|
|
<div class="container">
|
|
<a class="navbar-brand d-flex align-items-center" href="index.php">
|
|
<?php if($current_logo && file_exists($current_logo)): ?>
|
|
<img src="<?php echo $current_logo; ?>" alt="Logo" class="logo-img me-2">
|
|
<?php else: ?>
|
|
<span class="me-2">💻</span>
|
|
<?php endif; ?>
|
|
<strong><?php echo defined('APP_NAME') ? APP_NAME : 'System IT'; ?></strong>
|
|
</a>
|
|
|
|
<div class="navbar-nav ms-auto align-items-center">
|
|
<button class="btn btn-sm btn-outline-secondary me-3" onclick="toggleDarkMode()">
|
|
<i class="bi bi-moon-stars" id="themeIcon"></i>
|
|
</button>
|
|
<span class="nav-link text-light me-3 small">Admin: <strong><?php echo $_SESSION['username']; ?></strong></span>
|
|
<a class="btn btn-outline-light btn-sm me-2" href="index.php"><i class="bi bi-arrow-left"></i> Powrót do zamówień</a>
|
|
<a class="btn btn-outline-danger btn-sm" href="logout.php">Wyloguj</a>
|
|
</div>
|
|
</div>
|
|
</nav>
|
|
|
|
<div class="container pb-5">
|
|
<div class="d-flex justify-content-between align-items-center mb-4">
|
|
<h2>Panel Zarządzania Systemem</h2>
|
|
</div>
|
|
|
|
<?php echo $message; ?>
|
|
|
|
<div class="row">
|
|
<div class="col-md-5 mb-4">
|
|
|
|
<div class="card shadow-sm mb-4 border-0">
|
|
<div class="card-header bg-secondary text-white">
|
|
<i class="bi bi-image"></i> Ustawienia Wizualne
|
|
</div>
|
|
<div class="card-body">
|
|
<form method="POST" enctype="multipart/form-data">
|
|
<div class="text-center mb-3">
|
|
<?php if($current_logo && file_exists($current_logo)): ?>
|
|
<img src="<?php echo $current_logo; ?>" class="img-thumbnail" style="max-height: 80px;">
|
|
<?php else: ?>
|
|
<div class="text-muted small">Brak wgranego logo</div>
|
|
<?php endif; ?>
|
|
</div>
|
|
<div class="mb-3">
|
|
<label class="form-label small">Zmień logotyp (PNG/JPG)</label>
|
|
<input type="file" name="logo" class="form-control form-control-sm" accept="image/*" required>
|
|
</div>
|
|
<button type="submit" class="btn btn-dark w-100 btn-sm">Wgraj plik na serwer</button>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="card shadow-sm border-0 mb-4">
|
|
<div class="card-header bg-info text-dark fw-bold">
|
|
<i class="bi bi-buildings"></i> Dane firm (Stopki wydruków)
|
|
</div>
|
|
<div class="card-body">
|
|
<form method="POST">
|
|
<input type="hidden" name="action" value="update_company_settings">
|
|
|
|
<div class="mb-3">
|
|
<label class="form-label small fw-bold text-primary">1. Przedsiębiorstwo (Nazwa)</label>
|
|
<input type="text" name="company_1_name" class="form-control form-control-sm border-primary" value="<?php echo htmlspecialchars($settings['company_1_name'] ?? ''); ?>" required>
|
|
</div>
|
|
<div class="mb-4">
|
|
<label class="form-label small fw-bold text-primary">Przedsiębiorstwo (Adres/NIP)</label>
|
|
<input type="text" name="company_1_details" class="form-control form-control-sm" value="<?php echo htmlspecialchars($settings['company_1_details'] ?? ''); ?>">
|
|
</div>
|
|
|
|
<div class="mb-3 border-top pt-3">
|
|
<label class="form-label small fw-bold text-success">2. Spółka (Nazwa)</label>
|
|
<input type="text" name="company_2_name" class="form-control form-control-sm border-success" value="<?php echo htmlspecialchars($settings['company_2_name'] ?? ''); ?>" required>
|
|
</div>
|
|
<div class="mb-4">
|
|
<label class="form-label small fw-bold text-success">Spółka (Adres/NIP/KRS)</label>
|
|
<input type="text" name="company_2_details" class="form-control form-control-sm" value="<?php echo htmlspecialchars($settings['company_2_details'] ?? ''); ?>">
|
|
</div>
|
|
|
|
<button type="submit" class="btn btn-info w-100 btn-sm fw-bold text-dark"><i class="bi bi-save"></i> Zapisz stopki firm</button>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="card shadow-sm border-0">
|
|
<div class="card-header bg-primary text-white">
|
|
<i class="bi bi-person-plus"></i> Dodaj pracownika
|
|
</div>
|
|
<div class="card-body">
|
|
<form method="POST">
|
|
<div class="mb-3">
|
|
<label class="form-label small">Login użytkownika</label>
|
|
<input type="text" name="new_username" class="form-control" required>
|
|
</div>
|
|
<div class="mb-3">
|
|
<label class="form-label small">Hasło początkowe</label>
|
|
<input type="password" name="new_password" class="form-control" required>
|
|
</div>
|
|
<div class="mb-3">
|
|
<label class="form-label small">Rola w systemie</label>
|
|
<select name="new_role" class="form-select">
|
|
<option value="user">Zwykły pracownik</option>
|
|
<option value="admin">Administrator</option>
|
|
</select>
|
|
</div>
|
|
<button type="submit" name="add_user" class="btn btn-primary w-100"><i class="bi bi-check2-circle"></i> Utwórz konto</button>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div class="col-md-7">
|
|
<div class="card shadow-sm text-nowrap border-0">
|
|
<div class="card-header bg-dark text-white">
|
|
<i class="bi bi-people"></i> Zarejestrowani pracownicy
|
|
</div>
|
|
<div class="card-body p-0">
|
|
<div class="table-responsive">
|
|
<table class="table table-hover mb-0 align-middle">
|
|
<thead class="table-light">
|
|
<tr>
|
|
<th class="px-3">ID</th>
|
|
<th>Login</th>
|
|
<th>Uprawnienia</th>
|
|
<th class="text-end px-4">Zarządzaj</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<?php foreach ($users as $u): ?>
|
|
<tr>
|
|
<td class="px-3 text-muted"><?php echo $u['id']; ?></td>
|
|
<td><strong><?php echo htmlspecialchars($u['username']); ?></strong></td>
|
|
<td>
|
|
<span class="badge <?php echo $u['role'] == 'admin' ? 'bg-danger' : 'bg-primary'; ?>">
|
|
<?php echo $u['role'] == 'admin' ? 'Administrator' : 'Użytkownik'; ?>
|
|
</span>
|
|
</td>
|
|
<td class="text-end px-3">
|
|
<button class="btn btn-sm btn-outline-info me-1" data-bs-toggle="modal" data-bs-target="#resetModal<?php echo $u['id']; ?>">
|
|
<i class="bi bi-shield-lock"></i> Reset hasła
|
|
</button>
|
|
|
|
<?php if ($u['id'] != $_SESSION['user_id']): ?>
|
|
<a href="?delete=<?php echo $u['id']; ?>" class="btn btn-sm btn-outline-danger" onclick="return confirm('Czy na pewno chcesz bezpowrotnie usunąć to konto?')">
|
|
<i class="bi bi-trash"></i> Usuń
|
|
</a>
|
|
<?php else: ?>
|
|
<button class="btn btn-sm btn-outline-secondary disabled"><i class="bi bi-person-check"></i> To ty</button>
|
|
<?php endif; ?>
|
|
|
|
<div class="modal fade" id="resetModal<?php echo $u['id']; ?>" tabindex="-1" aria-hidden="true">
|
|
<div class="modal-dialog modal-sm modal-dialog-centered">
|
|
<div class="modal-content text-start">
|
|
<form method="POST">
|
|
<div class="modal-header bg-light">
|
|
<h6 class="modal-title"><i class="bi bi-key"></i> Nowe hasło: <?php echo $u['username']; ?></h6>
|
|
<button type="button" class="btn-close" data-bs-dismiss="modal"></button>
|
|
</div>
|
|
<div class="modal-body">
|
|
<input type="hidden" name="user_id" value="<?php echo $u['id']; ?>">
|
|
<label class="form-label small">Wpisz nowe hasło:</label>
|
|
<input type="password" name="new_password" class="form-control" required minlength="4">
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="button" class="btn btn-secondary btn-sm" data-bs-dismiss="modal">Anuluj</button>
|
|
<button type="submit" name="reset_password" class="btn btn-info btn-sm text-white">Zapisz hasło</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<script>
|
|
function toggleDarkMode() {
|
|
const html = document.getElementById('mainHtml');
|
|
const icon = document.getElementById('themeIcon');
|
|
const currentTheme = html.getAttribute('data-bs-theme');
|
|
const newTheme = currentTheme === 'light' ? 'dark' : 'light';
|
|
|
|
html.setAttribute('data-bs-theme', newTheme);
|
|
icon.classList.toggle('bi-moon-stars', newTheme === 'light');
|
|
icon.classList.toggle('bi-sun', newTheme === 'dark');
|
|
localStorage.setItem('theme', newTheme);
|
|
}
|
|
|
|
if(localStorage.getItem('theme') === 'dark') {
|
|
document.getElementById('mainHtml').setAttribute('data-bs-theme', 'dark');
|
|
document.getElementById('themeIcon').classList.replace('bi-moon-stars', 'bi-sun');
|
|
}
|
|
</script>
|
|
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
|
|
</body>
|
|
</html>
|