# TODO

- [x] Make thanks.php respect student mode (no header, centered "add new form" button)
  - [x] Add hidden input `student_mode` in add.php form when in student mode
  - [x] Append `mode=student` to thanks redirect in formulaire.php
  - [x] Update thanks.php to detect student mode, hide header, show centered button
- [x] Cleanup public/admin/add.php — standardise fieldsets and add licence explanation sections from docs PDF
  - [x] Organise all fields into `<fieldset>/<legend>` blocks: Informations du TFE, Composition du jury, Cadre académique, Fichiers, Métadonnées complémentaires
  - [x] Remove double-wrapping of jury-fieldset (it has its own `<fieldset>`)
  - [x] Add "Degrés d'ouverture et licences" section (Libre / Interne / Interdit + Généralités) wrapped in `if ($studentMode)` — hidden in admin

- [x] Migrate student mode form to shareable links system (/partage/<form-url>)
  - [x] Create `share_links` database table (id, slug YYYYMMDD-random, password_hash, is_active, usage_count, created_by, created_at, expires_at nullable)
  - [x] Create `ShareLink` model — generate slugs, validate, verify password, CRUD
  - [x] Create `public/partage/index.php` — public form page (no auth required, validates link active + password if set)
  - [x] Create `public/partage/.htaccess` — RewriteRule to route all partage paths to index.php
  - [x] Create `public/partage/thanks.php` — post-submission confirmation page
  - [x] Move student-specific licence explanation fieldset to partage form template
  - [x] Share-link specific CSRF token (session-scoped `share_csrf_<slug>`) instead of session CSRF

- [x] Create admin page for managing student access links
  - [x] Create `public/admin/student-access.php` — "Accès étudiant·e" page
  - [x] Link to new page from admin navigation
  - [x] Implement list view of all share links with status (active/disabled, password set, usage count, created date)
  - [x] Implement create new link modal/form (optional expiration, password)
  - [x] Implement toggle active/disabled status per link
  - [x] Implement password set/change/clear per link
  - [x] Implement delete link action
  - [x] Copy-to-clipboard button for full partage URL

- [ ] Security and validation considerations
  - [ ] Rate limiting on form submissions per share link
  - [ ] Add flash messages / error handling for invalid/disabled/password-protected links