@@ -167,6 +190,11 @@ document.addEventListener('DOMContentLoaded', () => {
En attente
+
+
+
+
+
diff --git a/public/admin/tags.php b/public/admin/tags.php
new file mode 100644
index 0000000..235270b
--- /dev/null
+++ b/public/admin/tags.php
@@ -0,0 +1,97 @@
+getAllTagsWithCount();
+} catch (Exception $e) {
+ die("Erreur : " . htmlspecialchars($e->getMessage()));
+}
+
+$error = $_SESSION['admin_error'] ?? null;
+$success = $_SESSION['admin_success'] ?? null;
+unset($_SESSION['admin_error'], $_SESSION['admin_success']);
+?>
+
+
+
+ Mots-clés ()
+
+
+ ⚠
+
+
+ ✓
+
+
+
+
+
+ | Nom |
+ TFE associés |
+ Actions |
+
+
+
+
+
+ |
+ |
+
+
+
+
+
+
+
+
+
+ |
+
+
+
+
+
+
+
diff --git a/public/assets/admin.css b/public/assets/admin.css
index 0363ce0..a1f12ff 100644
--- a/public/assets/admin.css
+++ b/public/assets/admin.css
@@ -641,3 +641,96 @@ html, body {
border-color: #e55;
color: #e55;
}
+
+/* Inline form actions (tags page) */
+.admin-inline-form {
+ display: flex;
+ align-items: center;
+ gap: .4rem;
+ flex-wrap: wrap;
+}
+
+.admin-input--inline {
+ padding: .28rem .5rem;
+ font-size: .82rem;
+}
+
+.admin-select--inline {
+ padding: .28rem .5rem;
+ font-size: .82rem;
+}
+
+.admin-btn--sm {
+ padding: .28rem .65rem;
+ font-size: .8rem;
+}
+
+.admin-btn--warning {
+ background: #7a5400;
+ border-color: #b87a00;
+}
+.admin-btn--warning:hover {
+ background: #9a6a00;
+}
+
+.admin-btn--danger {
+ background: #6b1a1a;
+ border-color: #a03030;
+}
+.admin-btn--danger:hover {
+ background: #8a2020;
+}
+
+/* Maintenance mode bar */
+.admin-maintenance-bar {
+ display: flex;
+ align-items: center;
+ justify-content: space-between;
+ gap: 1rem;
+ background: #1a1a2e;
+ border: 1px solid #333;
+ border-radius: 4px;
+ padding: .65rem 1rem;
+ margin-bottom: 1.5rem;
+ font-size: .88rem;
+ color: var(--admin-text-muted);
+}
+
+.admin-maintenance-bar--active {
+ background: #2a1a00;
+ border-color: #7a5400;
+ color: #e0a030;
+}
+
+/* Visibility / access badges */
+.status-access {
+ display: inline-block;
+ font-size: .7rem;
+ padding: .1rem .4rem;
+ border-radius: 3px;
+ margin-top: .2rem;
+ background: #333;
+ color: #aaa;
+ letter-spacing: .03em;
+}
+
+.status-access--Libre,
+.status-access--libre {
+ background: #0a2a0a;
+ color: #6fbe6f;
+ border: 1px solid #2a5a2a;
+}
+
+.status-access--Interne,
+.status-access--interne {
+ background: #1a1a2a;
+ color: #7a8fcc;
+ border: 1px solid #3a4a8a;
+}
+
+.status-access--Interdit,
+.status-access--interdit {
+ background: #2a0a0a;
+ color: #cc6060;
+ border: 1px solid #7a2020;
+}
diff --git a/public/maintenance.php b/public/maintenance.php
new file mode 100644
index 0000000..f9abbea
--- /dev/null
+++ b/public/maintenance.php
@@ -0,0 +1,59 @@
+
+
+
+
+
+ Maintenance – Posterg
+
+
+
+
+ POSTERG
+ Maintenance en cours
+
+ Le site est temporairement indisponible pour des raisons de maintenance.
+ Merci de réessayer dans quelques instants.
+
+
+
+
diff --git a/public/media.php b/public/media.php
index d2fceed..655748e 100644
--- a/public/media.php
+++ b/public/media.php
@@ -46,6 +46,38 @@ if (!is_file($realFull)) {
exit;
}
+// --- 2b. Visibility gate: check access_type_id for thesis files ---------------
+// Only applies to paths under theses/ (uploaded thesis content).
+// Banners and covers are always public (no sensitivity).
+if (preg_match('#^theses/#', $requestedPath)) {
+ require_once __DIR__ . '/../src/Database.php';
+ try {
+ $mediaDb = Database::getInstance();
+ $mediaPdo = $mediaDb->getConnection();
+ // Find the thesis that owns this file path
+ $visStmt = $mediaPdo->prepare("
+ SELECT t.access_type_id FROM theses t
+ JOIN thesis_files tf ON tf.thesis_id = t.id
+ WHERE tf.file_path = ?
+ LIMIT 1
+ ");
+ $visStmt->execute([$requestedPath]);
+ $visRow = $visStmt->fetch();
+ if ($visRow) {
+ $accessTypeId = (int)($visRow['access_type_id'] ?? 1);
+ // 3 = Interdit — block entirely
+ if ($accessTypeId === 3) {
+ http_response_code(403);
+ exit;
+ }
+ // 2 = Interne — allow (no session auth requirement for now; could add later)
+ }
+ } catch (\Throwable $e) {
+ // On DB error, fail open (don't block legitimate requests)
+ error_log("media.php visibility check error: " . $e->getMessage());
+ }
+}
+
// --- 3. Verify MIME type from file content (not extension) --------------------
$finfo = new finfo(FILEINFO_MIME_TYPE);
diff --git a/public/tfe.php b/public/tfe.php
index 5343700..9e44183 100644
--- a/public/tfe.php
+++ b/public/tfe.php
@@ -128,6 +128,13 @@ $currentNav = '';
+ Accès :
+
+
+
+
Licence :
@@ -135,6 +142,13 @@ $currentNav = '';
+
+
+ Note :
+
+
+
+
Contact :
@@ -162,7 +176,24 @@ $currentNav = '';
-
+ getConnection()->prepare(
+ "SELECT access_type_id FROM theses WHERE id = ?"
+ );
+ $accessStmt->execute([$thesisId]);
+ $accessTypeId = (int)($accessStmt->fetchColumn() ?? 1);
+ } catch (\Throwable $e) {}
+ $isInterdit = ($accessTypeId === 3);
+ ?>
+
+
+ Ce TFE n'est pas disponible en ligne.
+
+
diff --git a/src/Database.php b/src/Database.php
index 384a466..06c7ab3 100644
--- a/src/Database.php
+++ b/src/Database.php
@@ -640,6 +640,69 @@ class Database {
return $this->findOrCreateTag((string)$keyword);
}
+ // ========================================================================
+ // TAG MANAGEMENT (admin)
+ // ========================================================================
+
+ /**
+ * Return all tags with a count of associated (published) theses.
+ */
+ public function getAllTagsWithCount(): array {
+ $stmt = $this->pdo->query("
+ SELECT tg.id, tg.name,
+ COUNT(DISTINCT tt.thesis_id) as thesis_count
+ FROM tags tg
+ LEFT JOIN thesis_tags tt ON tg.id = tt.tag_id
+ GROUP BY tg.id
+ ORDER BY tg.name COLLATE NOCASE
+ ");
+ return $stmt->fetchAll();
+ }
+
+ /**
+ * Rename a tag. Throws if the new name already exists.
+ */
+ public function renameTag(int $id, string $newName): void {
+ $newName = trim($newName);
+ if ($newName === '') throw new Exception("Le nom du tag ne peut pas être vide.");
+ // Check uniqueness
+ $stmt = $this->pdo->prepare("SELECT id FROM tags WHERE name = ? AND id != ?");
+ $stmt->execute([$newName, $id]);
+ if ($stmt->fetch()) throw new Exception("Un tag avec ce nom existe déjà.");
+ $this->pdo->prepare("UPDATE tags SET name = ? WHERE id = ?")->execute([$newName, $id]);
+ }
+
+ /**
+ * Merge sourceId into targetId: reassign all thesis_tags rows, then delete source.
+ * Uses INSERT OR IGNORE to avoid PK conflicts.
+ */
+ public function mergeTag(int $sourceId, int $targetId): void {
+ if ($sourceId === $targetId) throw new Exception("Source et destination identiques.");
+ $this->pdo->beginTransaction();
+ try {
+ // Re-point thesis_tags rows from source → target (skip conflicts)
+ $this->pdo->prepare("
+ INSERT OR IGNORE INTO thesis_tags (tag_id, thesis_id)
+ SELECT ?, thesis_id FROM thesis_tags WHERE tag_id = ?
+ ")->execute([$targetId, $sourceId]);
+ // Delete the old source rows
+ $this->pdo->prepare("DELETE FROM thesis_tags WHERE tag_id = ?")->execute([$sourceId]);
+ // Delete the source tag itself
+ $this->pdo->prepare("DELETE FROM tags WHERE id = ?")->execute([$sourceId]);
+ $this->pdo->commit();
+ } catch (\Throwable $e) {
+ $this->pdo->rollBack();
+ throw $e;
+ }
+ }
+
+ /**
+ * Delete a tag and all its thesis_tags rows (cascades via FK).
+ */
+ public function deleteTag(int $id): void {
+ $this->pdo->prepare("DELETE FROM tags WHERE id = ?")->execute([$id]);
+ }
+
/**
* Get orientation ID by name
*/
@@ -749,6 +812,44 @@ class Database {
return $this->getLicenseTypes();
}
+ // ========================================================================
+ // VISIBILITY METHODS
+ // ========================================================================
+
+ /**
+ * Set the access_type_id (visibility) for a single thesis.
+ * @param int $thesisId
+ * @param int|null $accessTypeId 1=Libre, 2=Interne, 3=Interdit, null=unset
+ */
+ public function setVisibility(int $thesisId, ?int $accessTypeId): void {
+ $stmt = $this->pdo->prepare(
+ "UPDATE theses SET access_type_id = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?"
+ );
+ $stmt->execute([$accessTypeId, $thesisId]);
+ }
+
+ /**
+ * Set visibility for multiple theses at once.
+ * @param int[] $thesisIds
+ * @param int|null $accessTypeId
+ */
+ public function bulkSetVisibility(array $thesisIds, ?int $accessTypeId): void {
+ if (empty($thesisIds)) return;
+ $placeholders = implode(',', array_fill(0, count($thesisIds), '?'));
+ $params = array_merge([$accessTypeId], $thesisIds);
+ $this->pdo->prepare(
+ "UPDATE theses SET access_type_id = ?, updated_at = CURRENT_TIMESTAMP WHERE id IN ($placeholders)"
+ )->execute($params);
+ }
+
+ /**
+ * Get all access types (visibility options).
+ */
+ public function getAccessTypes(): array {
+ $stmt = $this->pdo->query("SELECT * FROM access_types ORDER BY id");
+ return $stmt->fetchAll();
+ }
+
// ========================================================================
// JURY METHODS
// ========================================================================
diff --git a/storage/.gitkeep b/storage/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/storage/migrations/002_add_visibility.sql b/storage/migrations/002_add_visibility.sql
new file mode 100644
index 0000000..a2ff229
--- /dev/null
+++ b/storage/migrations/002_add_visibility.sql
@@ -0,0 +1,9 @@
+-- Migration 002: Wire visibility states to existing access_type_id column.
+-- The access_types table already has Libre (1), Interne (2), Interdit (3).
+-- No structural changes needed — this migration is a no-op for the schema.
+-- It documents the intent and ensures access_types seed rows exist.
+
+INSERT OR IGNORE INTO access_types (id, name, description) VALUES
+ (1, 'Libre', 'TFE en libre accès à tout le monde sur la plateforme et en bibliothèque'),
+ (2, 'Interne', 'TFE accessible uniquement sur place en physique. Une note descriptive est disponible sur le site'),
+ (3, 'Interdit', 'TFE non disponible en physique ni sur le site. Une note descriptive est disponible sur le site');
diff --git a/storage/test.db b/storage/test.db
index 4c55718..8f2497a 100644
Binary files a/storage/test.db and b/storage/test.db differ
diff --git a/templates/admin/head.php b/templates/admin/head.php
index d96266b..d796e44 100644
--- a/templates/admin/head.php
+++ b/templates/admin/head.php
@@ -28,6 +28,7 @@
Ajouter un TFE
Importer une liste de TFE
Pages statiques
+ Mots-clés
Modifier
|