Add 2026 calendar page and admin CMS backend, update map and member pages

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-30 14:32:51 +08:00
parent 17856bd9c3
commit 6dd5a2f0b7
26 changed files with 2965 additions and 370 deletions
@@ -0,0 +1,28 @@
+<?php
+declare(strict_types=1);
+require __DIR__ . '/bootstrap.php';
+if (!empty($_SESSION['admin_id'])) redirect('index.php');
+$error = '';
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    verify_csrf();
+    try {
+        $stmt = db()->prepare('SELECT * FROM admin_users WHERE username = ? AND is_active = 1 LIMIT 1');
+        $stmt->execute([trim((string) ($_POST['username'] ?? ''))]);
+        $user = $stmt->fetch();
+        if ($user && password_verify((string) ($_POST['password'] ?? ''), $user['password_hash'])) {
+            session_regenerate_id(true);
+            $_SESSION['admin_id'] = (int) $user['id'];
+            $_SESSION['admin_name'] = $user['display_name'];
+            db()->prepare('UPDATE admin_users SET last_login_at = NOW() WHERE id = ?')->execute([$user['id']]);
+            audit('login', 'admin_users', (int) $user['id']);
+            redirect('index.php');
+        }
+        $error = '帳號或密碼輸入錯誤。';
+    } catch (Throwable $e) {
+        $error = '資料庫尚未完成設定，請先執行初始化。';
+    }
+}
+?>
+<!doctype html><html lang="zh-Hant"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>管理登入｜水晶男孩推廣部</title><link rel="stylesheet" href="assets/admin.css"></head>
+<body class="auth-page"><main class="auth-card"><div class="auth-gem">◆</div><p class="eyebrow">SECHSKIES ARCHIVE</p><h1>推廣部管理登入</h1><p>把散落的記憶，好好收進同一片黃色海洋。</p><?php if (isset($_GET['setup'])): ?><div class="notice notice--success">管理者建立完成，請登入。</div><?php endif; ?><?php if ($error): ?><div class="notice notice--error"><?= h($error) ?></div><?php endif; ?>
+<form method="post"><input type="hidden" name="csrf" value="<?= h(csrf_token()) ?>"><label>管理者帳號<input name="username" required autocomplete="username" autofocus></label><label>密碼<input name="password" type="password" required autocomplete="current-password"></label><button class="button button--primary" type="submit">登入後臺</button><a class="text-link" href="setup.php">第一次使用？初始化系統</a></form></main></body></html>