260 lines
13 KiB
PHP
260 lines
13 KiB
PHP
<?php
|
||
declare(strict_types=1);
|
||
|
||
session_start();
|
||
$config = require __DIR__ . '/config.php';
|
||
|
||
function db(): PDO
|
||
{
|
||
static $pdo;
|
||
global $config;
|
||
if ($pdo instanceof PDO) {
|
||
return $pdo;
|
||
}
|
||
$db = $config['db'];
|
||
$dsn = "mysql:host={$db['host']};port={$db['port']};dbname={$db['name']};charset=utf8mb4";
|
||
$pdo = new PDO($dsn, $db['user'], $db['pass'], [
|
||
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
|
||
PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
|
||
PDO::ATTR_EMULATE_PREPARES => false,
|
||
]);
|
||
return $pdo;
|
||
}
|
||
|
||
function h(?string $value): string
|
||
{
|
||
return htmlspecialchars($value ?? '', ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
|
||
}
|
||
|
||
function redirect(string $path): never
|
||
{
|
||
header('Location: ' . $path);
|
||
exit;
|
||
}
|
||
|
||
function csrf_token(): string
|
||
{
|
||
if (empty($_SESSION['csrf'])) {
|
||
$_SESSION['csrf'] = bin2hex(random_bytes(32));
|
||
}
|
||
return $_SESSION['csrf'];
|
||
}
|
||
|
||
function verify_csrf(): void
|
||
{
|
||
$token = (string) ($_POST['csrf'] ?? '');
|
||
if (!hash_equals((string) ($_SESSION['csrf'] ?? ''), $token)) {
|
||
http_response_code(419);
|
||
exit('表單已過期，請返回後重新操作。');
|
||
}
|
||
}
|
||
|
||
function require_login(): void
|
||
{
|
||
if (empty($_SESSION['admin_id'])) {
|
||
redirect('login.php');
|
||
}
|
||
}
|
||
|
||
function flash(string $type, string $message): void
|
||
{
|
||
$_SESSION['flash'] = ['type' => $type, 'message' => $message];
|
||
}
|
||
|
||
function take_flash(): ?array
|
||
{
|
||
$flash = $_SESSION['flash'] ?? null;
|
||
unset($_SESSION['flash']);
|
||
return is_array($flash) ? $flash : null;
|
||
}
|
||
|
||
function modules(): array
|
||
{
|
||
return [
|
||
'albums' => [
|
||
'label' => '專輯管理', 'icon' => 'disc', 'table' => 'albums', 'order' => 'release_date DESC, id DESC',
|
||
'fields' => [
|
||
'title' => ['label' => '專輯名稱', 'type' => 'text', 'required' => true],
|
||
'title_ko' => ['label' => '韓文／英文名稱', 'type' => 'text'],
|
||
'release_date' => ['label' => '發行日期', 'type' => 'date'],
|
||
'era' => ['label' => '時期', 'type' => 'select', 'options' => ['classic' => '輝煌全盛期', 'reunion' => '啟動新篇章']],
|
||
'cover_media_id' => ['label' => '封面媒體編號', 'type' => 'number'],
|
||
'summary' => ['label' => '專輯簡介', 'type' => 'textarea'],
|
||
'sort_order' => ['label' => '排序', 'type' => 'number', 'default' => '0'],
|
||
'status' => ['label' => '公開狀態', 'type' => 'status', 'required' => true],
|
||
],
|
||
'list' => ['title', 'release_date', 'era', 'status', 'updated_at'],
|
||
],
|
||
'songs' => [
|
||
'label' => '歌曲管理', 'icon' => 'music-note-list', 'table' => 'songs', 'order' => 'album_id, track_no, id',
|
||
'fields' => [
|
||
'album_id' => ['label' => '所屬專輯', 'type' => 'relation', 'table' => 'albums', 'required' => true],
|
||
'track_no' => ['label' => '曲序', 'type' => 'number'],
|
||
'title' => ['label' => '歌名', 'type' => 'text', 'required' => true],
|
||
'title_ko' => ['label' => '韓文歌名', 'type' => 'text'],
|
||
'lyrics_url' => ['label' => '歌詞頁連結', 'type' => 'url'],
|
||
'video_url' => ['label' => '影片連結', 'type' => 'url'],
|
||
'is_title_track' => ['label' => '主打歌', 'type' => 'checkbox'],
|
||
'status' => ['label' => '公開狀態', 'type' => 'status', 'required' => true],
|
||
],
|
||
'list' => ['title', 'album_id', 'track_no', 'is_title_track', 'status', 'updated_at'],
|
||
],
|
||
'stages' => [
|
||
'label' => '打歌舞台管理', 'icon' => 'mic', 'table' => 'stage_performances', 'order' => 'stage_date DESC, sort_order, id',
|
||
'fields' => [
|
||
'song_id' => ['label' => '所屬歌曲', 'type' => 'relation', 'table' => 'songs', 'required' => true],
|
||
'stage_date' => ['label' => '播出日期', 'type' => 'date', 'required' => true],
|
||
'station' => ['label' => '電視台', 'type' => 'text', 'required' => true],
|
||
'program' => ['label' => '節目名稱', 'type' => 'text', 'required' => true],
|
||
'title' => ['label' => '舞台標題', 'type' => 'text', 'required' => true],
|
||
'youtube_url' => ['label' => 'YouTube 連結', 'type' => 'url'],
|
||
'note' => ['label' => '備註', 'type' => 'textarea'],
|
||
'sort_order' => ['label' => '排序', 'type' => 'number', 'default' => '0'],
|
||
'status' => ['label' => '公開狀態', 'type' => 'status', 'required' => true],
|
||
],
|
||
'list' => ['title', 'song_id', 'stage_date', 'station', 'program', 'status', 'updated_at'],
|
||
],
|
||
'concerts' => [
|
||
'label' => '演唱會管理', 'icon' => 'ticket-perforated', 'table' => 'concert_events', 'order' => 'event_date DESC, id DESC',
|
||
'fields' => [
|
||
'tour_name' => ['label' => '巡演／活動名稱', 'type' => 'text', 'required' => true],
|
||
'event_date' => ['label' => '演出日期', 'type' => 'date', 'required' => true],
|
||
'country' => ['label' => '國家', 'type' => 'text'],
|
||
'city' => ['label' => '城市', 'type' => 'text'],
|
||
'venue' => ['label' => '場館', 'type' => 'text'],
|
||
'member_names' => ['label' => '演出成員', 'type' => 'text'],
|
||
'poster_media_id' => ['label' => '海報媒體編號', 'type' => 'number'],
|
||
'source_url' => ['label' => '資料來源', 'type' => 'url'],
|
||
'notes' => ['label' => '備註', 'type' => 'textarea'],
|
||
'status' => ['label' => '公開狀態', 'type' => 'status', 'required' => true],
|
||
],
|
||
'list' => ['tour_name', 'event_date', 'city', 'venue', 'status', 'updated_at'],
|
||
],
|
||
'variety' => [
|
||
'label' => '綜藝節目管理', 'icon' => 'tv', 'table' => 'variety_shows', 'order' => 'air_start DESC, id DESC',
|
||
'fields' => [
|
||
'title' => ['label' => '節目名稱', 'type' => 'text', 'required' => true],
|
||
'series_name' => ['label' => '系列／單元', 'type' => 'text'],
|
||
'platform' => ['label' => '播出平台', 'type' => 'text'],
|
||
'air_start' => ['label' => '開始日期', 'type' => 'date'],
|
||
'air_end' => ['label' => '結束日期', 'type' => 'date'],
|
||
'member_names' => ['label' => '參與成員', 'type' => 'text'],
|
||
'episode_info' => ['label' => '集數', 'type' => 'text'],
|
||
'video_url' => ['label' => '影片連結', 'type' => 'url'],
|
||
'summary' => ['label' => '節目簡介', 'type' => 'textarea'],
|
||
'tags' => ['label' => '標籤', 'type' => 'text'],
|
||
'status' => ['label' => '公開狀態', 'type' => 'status', 'required' => true],
|
||
],
|
||
'list' => ['title', 'platform', 'air_start', 'member_names', 'status', 'updated_at'],
|
||
],
|
||
'locations' => [
|
||
'label' => 'Yellow Note', 'icon' => 'geo-alt', 'table' => 'locations', 'order' => 'visit_date DESC, sort_order, id',
|
||
'fields' => [
|
||
'title' => ['label' => '地點名稱', 'type' => 'text', 'required' => true],
|
||
'visit_date' => ['label' => '行程日期', 'type' => 'date'],
|
||
'day_label' => ['label' => '日次', 'type' => 'text'],
|
||
'address' => ['label' => '地址', 'type' => 'text'],
|
||
'latitude' => ['label' => '緯度', 'type' => 'number', 'step' => 'any'],
|
||
'longitude' => ['label' => '經度', 'type' => 'number', 'step' => 'any'],
|
||
'member_names' => ['label' => '參與成員', 'type' => 'text'],
|
||
'description' => ['label' => '行程說明', 'type' => 'textarea'],
|
||
'quote_text' => ['label' => '引言', 'type' => 'textarea'],
|
||
'tags' => ['label' => '標籤', 'type' => 'text'],
|
||
'media_id' => ['label' => '圖片媒體編號', 'type' => 'number'],
|
||
'source_url' => ['label' => '來源連結', 'type' => 'url'],
|
||
'sort_order' => ['label' => '排序', 'type' => 'number', 'default' => '0'],
|
||
'status' => ['label' => '公開狀態', 'type' => 'status', 'required' => true],
|
||
],
|
||
'list' => ['title', 'visit_date', 'member_names', 'tags', 'status', 'updated_at'],
|
||
],
|
||
'media' => [
|
||
'label' => '媒體庫', 'icon' => 'images', 'table' => 'media_assets', 'order' => 'id DESC',
|
||
'fields' => [
|
||
'display_name' => ['label' => '管理名稱', 'type' => 'text', 'required' => true],
|
||
'file_path' => ['label' => '檔案', 'type' => 'file'],
|
||
'media_type' => ['label' => '類型', 'type' => 'select', 'default' => 'image', 'options' => ['image' => '圖片', 'video' => '影片', 'pdf' => 'PDF', 'other' => '其他']],
|
||
'alt_text' => ['label' => '替代文字', 'type' => 'text'],
|
||
'source_note' => ['label' => '來源／授權註記', 'type' => 'textarea'],
|
||
'category' => ['label' => '分類', 'type' => 'text'],
|
||
'status' => ['label' => '使用狀態', 'type' => 'select', 'default' => 'draft', 'options' => ['available' => '可使用', 'draft' => '待整理', 'archived' => '封存']],
|
||
],
|
||
'list' => ['display_name', 'media_type', 'category', 'file_path', 'status', 'updated_at'],
|
||
],
|
||
];
|
||
}
|
||
|
||
function module_config(string $key): array
|
||
{
|
||
$all = modules();
|
||
if (!isset($all[$key])) {
|
||
http_response_code(404);
|
||
exit('找不到管理模組。');
|
||
}
|
||
return $all[$key];
|
||
}
|
||
|
||
function status_label(string $status): string
|
||
{
|
||
return ['draft' => '草稿', 'coming_soon' => '籌備中', 'published' => '公開', 'archived' => '封存', 'available' => '可使用'][$status] ?? $status;
|
||
}
|
||
|
||
function audit(string $action, string $entityType, ?int $entityId, array $details = []): void
|
||
{
|
||
$stmt = db()->prepare('INSERT INTO audit_logs (admin_user_id, action_name, entity_type, entity_id, details_json, ip_address) VALUES (?, ?, ?, ?, ?, ?)');
|
||
$stmt->execute([$_SESSION['admin_id'] ?? null, $action, $entityType, $entityId, json_encode($details, JSON_UNESCAPED_UNICODE), $_SERVER['REMOTE_ADDR'] ?? null]);
|
||
}
|
||
|
||
function render_header(string $title, string $active = ''): void
|
||
{
|
||
global $config;
|
||
$flash = take_flash();
|
||
$mods = modules();
|
||
?>
|
||
<!doctype html>
|
||
<html lang="zh-Hant">
|
||
<head>
|
||
<meta charset="utf-8">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||
<title><?= h($title) ?>｜<?= h($config['site_name']) ?> Admin</title>
|
||
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css">
|
||
<link rel="stylesheet" href="assets/admin.css">
|
||
</head>
|
||
<body>
|
||
<header class="admin-topbar">
|
||
<a class="admin-brand" href="index.php" aria-label="水晶男孩推廣部後台首頁">
|
||
<img class="admin-brand__logo" src="../assets/images/logov.svg" alt="SECHSKIES 水晶男孩推廣部">
|
||
<small>Admin</small>
|
||
</a>
|
||
<div class="admin-topbar__actions"><span><?= h($_SESSION['admin_name'] ?? '') ?></span><a href="../index.html" target="_blank" rel="noopener">查看前臺</a><a href="logout.php">登出</a></div>
|
||
</header>
|
||
<div class="admin-shell">
|
||
<aside class="admin-sidebar" id="admin-sidebar">
|
||
<nav aria-label="後臺管理選單">
|
||
<a class="<?= $active === 'dashboard' ? 'active' : '' ?>" href="index.php"><i class="bi bi-speedometer2"></i>控制台</a>
|
||
<p>內容資料</p>
|
||
<?php foreach ($mods as $key => $mod): ?>
|
||
<a class="<?= $active === $key ? 'active' : '' ?>" href="records.php?module=<?= h($key) ?>"><i class="bi bi-<?= h($mod['icon']) ?>"></i><?= h($mod['label']) ?></a>
|
||
<?php endforeach; ?>
|
||
<p>系統</p>
|
||
<a class="<?= $active === 'publishing' ? 'active' : '' ?>" href="publishing.php"><i class="bi bi-eye"></i>公開狀態</a>
|
||
<a class="<?= $active === 'admins' ? 'active' : '' ?>" href="admins.php"><i class="bi bi-shield-lock"></i>管理者帳號</a>
|
||
</nav>
|
||
</aside>
|
||
<main class="admin-main">
|
||
<button class="sidebar-toggle" type="button" data-sidebar-toggle aria-label="開啟管理選單"><i class="bi bi-list"></i></button>
|
||
<?php if ($flash): ?><div class="notice notice--<?= h($flash['type']) ?>"><?= h($flash['message']) ?></div><?php endif; ?>
|
||
<div class="page-heading"><div><p class="eyebrow">CONTENT MANAGEMENT</p><h1><?= h($title) ?></h1></div></div>
|
||
<?php
|
||
}
|
||
|
||
function render_footer(): void
|
||
{
|
||
?>
|
||
</main>
|
||
</div>
|
||
<script src="assets/admin.js"></script>
|
||
</body>
|
||
</html>
|
||
<?php
|
||
}
|