mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-05-07 03:29:19 +02:00
318 lines
16 KiB
PHP
318 lines
16 KiB
PHP
<?php
|
|
require_once __DIR__ . "/../../bootstrap.php";
|
|
require_once __DIR__ . '/../../src/AdminAuth.php';
|
|
AdminAuth::requireLogin();
|
|
|
|
$pageTitle = "Paramètres";
|
|
|
|
$hasPassword = AdminAuth::hasPassword();
|
|
$maintenanceOn = file_exists(APP_ROOT . '/storage/maintenance.flag');
|
|
|
|
require_once APP_ROOT . '/src/Database.php';
|
|
require_once APP_ROOT . '/src/SmtpRelay.php';
|
|
$db = new Database();
|
|
$siteSettings = $db->getAllSettings();
|
|
$stats = $db->getThesesStats();
|
|
$smtpSettings = SmtpRelay::getSettings($db);
|
|
$smtpConfigured = SmtpRelay::isConfigured($db);
|
|
|
|
if (empty($_SESSION['csrf_token'])) {
|
|
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
|
|
}
|
|
?>
|
|
<?php $isAdmin = true; $bodyClass = 'admin-body'; require_once APP_ROOT . '/templates/head.php'; ?>
|
|
<?php include APP_ROOT . '/templates/header.php'; ?>
|
|
|
|
<main id="main-content">
|
|
<h1>Paramètres</h1>
|
|
|
|
|
|
|
|
<!-- ══════════════════════════════════════════════════════════════
|
|
MAINTENANCE
|
|
══════════════════════════════════════════════════════════════ -->
|
|
<section aria-labelledby="settings-maintenance-title">
|
|
<h2 id="settings-maintenance-title">Maintenance</h2>
|
|
|
|
<div class="param-maintenance-row">
|
|
<?php if ($maintenanceOn): ?>
|
|
<p>
|
|
<strong>⚠ Mode maintenance activé</strong> — le site public est inaccessible.
|
|
</p>
|
|
<form method="post" action="actions/maintenance.php">
|
|
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
|
|
<input type="hidden" name="action" value="disable_maintenance">
|
|
<input type="hidden" name="redirect" value="/admin/parametres.php">
|
|
<button type="submit">Désactiver la maintenance</button>
|
|
</form>
|
|
<?php else: ?>
|
|
<p>Site public : <strong>en ligne</strong></p>
|
|
<form method="post" action="actions/maintenance.php">
|
|
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
|
|
<input type="hidden" name="action" value="enable_maintenance">
|
|
<input type="hidden" name="redirect" value="/admin/parametres.php">
|
|
<button type="submit" class="param-btn-warning"
|
|
onclick="return confirm('Mettre le site en maintenance ? Les visiteurs verront une page 503.')">
|
|
Activer la maintenance
|
|
</button>
|
|
</form>
|
|
<?php endif; ?>
|
|
</div>
|
|
|
|
<!-- Export database -->
|
|
<fieldset class="param-export-zone">
|
|
<legend>Exporter la base de données</legend>
|
|
<p>Télécharger une copie complète de la base de données SQLite.
|
|
Cela inclut tous les TFE, auteurs, jury, mots-clés, paramètres, etc.</p>
|
|
<button type="button" class="param-btn-export"
|
|
onclick="document.getElementById('export-db-dialog').showModal()">
|
|
Exporter la base de données
|
|
</button>
|
|
</fieldset>
|
|
|
|
<!-- Danger zone: delete all TFE → now inside maintenance -->
|
|
<fieldset class="param-danger-zone">
|
|
<legend>Supprimer tous les TFE</legend>
|
|
<p>
|
|
Supprime définitivement tous les TFE de la base de données, y compris auteurs,
|
|
promoteurs, tags, fichiers associés. Cette action est <strong>irréversible</strong>.
|
|
</p>
|
|
<form method="post" action="actions/delete.php"
|
|
onsubmit="return confirm('⚠ Supprimer définitivement TOUS les TFE ? Cette action est IRRÉVERSIBLE.')">
|
|
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
|
|
<input type="hidden" name="delete_all" value="1">
|
|
<button type="submit" class="param-btn-danger">Supprimer tous les TFE (<?= $stats['total'] ?? '?' ?>)</button>
|
|
</form>
|
|
</fieldset>
|
|
</section>
|
|
|
|
<!-- ══════════════════════════════════════════════════════════════
|
|
FORMULAIRE
|
|
══════════════════════════════════════════════════════════════ -->
|
|
<section aria-labelledby="settings-formulaire-title">
|
|
<h2 id="settings-formulaire-title">Formulaire</h2>
|
|
<p>Options de visibilité disponibles dans le formulaire d'ajout de TFE.</p>
|
|
<p class="param-note">L'option <strong>Libre</strong> ne sera activée qu'à partir de l'année académique prochaine.</p>
|
|
|
|
<form method="post" action="actions/settings.php" class="param-form">
|
|
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
|
|
<input type="hidden" name="section" value="formulaire">
|
|
|
|
<fieldset>
|
|
<legend>Types d'accès</legend>
|
|
|
|
<label class="param-checkbox">
|
|
<input type="checkbox" name="access_type_interdit_enabled" value="1"
|
|
<?= ($siteSettings['access_type_interdit_enabled'] ?? '1') === '1' ? 'checked' : '' ?>>
|
|
<span>
|
|
<strong>Interdit</strong><br>
|
|
<small>TFE non disponible en physique ni sur le site</small>
|
|
</span>
|
|
</label>
|
|
|
|
<label class="param-checkbox">
|
|
<input type="checkbox" name="access_type_interne_enabled" value="1"
|
|
<?= ($siteSettings['access_type_interne_enabled'] ?? '1') === '1' ? 'checked' : '' ?>>
|
|
<span>
|
|
<strong>Interne</strong><br>
|
|
<small>TFE accessible uniquement sur place en physique</small>
|
|
</span>
|
|
</label>
|
|
|
|
<label class="param-checkbox param-checkbox--disabled">
|
|
<input type="checkbox" name="access_type_libre_enabled" value="1"
|
|
<?= ($siteSettings['access_type_libre_enabled'] ?? '0') === '1' ? 'checked' : '' ?>>
|
|
<span>
|
|
<strong>Libre</strong><br>
|
|
<small>Libre accès — disponible à partir de l'année académique prochaine</small>
|
|
</span>
|
|
</label>
|
|
</fieldset>
|
|
|
|
<button type="submit">Enregistrer</button>
|
|
</form>
|
|
</section>
|
|
|
|
<!-- ══════════════════════════════════════════════════════════════
|
|
RELAY SMTP
|
|
══════════════════════════════════════════════════════════════ -->
|
|
<section aria-labelledby="settings-smtp-title">
|
|
<h2 id="settings-smtp-title">Relay SMTP</h2>
|
|
<p>
|
|
Identifiants du serveur SMTP utilisé pour l'envoi d'e-mails
|
|
(notifications, partage de TFE, etc.).
|
|
</p>
|
|
<div class="param-smtp-status">
|
|
<?php if ($smtpConfigured): ?>
|
|
<span class="param-badge-ok">✓ Configuré</span>
|
|
<span><?= htmlspecialchars($smtpSettings['host']) ?>:<?= (int)$smtpSettings['port'] ?> (<?= htmlspecialchars($smtpSettings['encryption']) ?>)</span>
|
|
<?php else: ?>
|
|
<span class="param-badge-warn">✗ Non configuré</span>
|
|
<?php endif; ?>
|
|
</div>
|
|
|
|
<form method="post" action="actions/settings.php" class="param-form">
|
|
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
|
|
<input type="hidden" name="section" value="smtp">
|
|
|
|
<div class="param-grid">
|
|
<div>
|
|
<label for="smtp_host">Hôte SMTP</label>
|
|
<input type="text" id="smtp_host" name="smtp_host"
|
|
value="<?= htmlspecialchars($smtpSettings['host']) ?>"
|
|
placeholder="smtp.example.com">
|
|
</div>
|
|
|
|
<div>
|
|
<label for="smtp_port">Port</label>
|
|
<input type="number" id="smtp_port" name="smtp_port"
|
|
value="<?= (int)$smtpSettings['port'] ?>"
|
|
min="1" max="65535">
|
|
</div>
|
|
|
|
<div>
|
|
<label for="smtp_encryption">Chiffrement</label>
|
|
<select id="smtp_encryption" name="smtp_encryption">
|
|
<option value="tls" <?= $smtpSettings['encryption'] === 'tls' ? 'selected' : '' ?>>TLS (STARTTLS)</option>
|
|
<option value="ssl" <?= $smtpSettings['encryption'] === 'ssl' ? 'selected' : '' ?>>SSL (SMTPS)</option>
|
|
<option value="none" <?= $smtpSettings['encryption'] === 'none' ? 'selected' : '' ?>>Aucun</option>
|
|
</select>
|
|
</div>
|
|
|
|
<div>
|
|
<label for="smtp_username">Nom d'utilisateur</label>
|
|
<input type="text" id="smtp_username" name="smtp_username"
|
|
value="<?= htmlspecialchars($smtpSettings['username']) ?>">
|
|
</div>
|
|
|
|
<div>
|
|
<label for="smtp_password">Mot de passe</label>
|
|
<input type="password" id="smtp_password" name="smtp_password"
|
|
value="<?= htmlspecialchars($smtpSettings['password']) ?>"
|
|
autocomplete="new-password"
|
|
placeholder="Laissez vide pour ne pas modifier">
|
|
</div>
|
|
</div>
|
|
|
|
<fieldset class="param-fieldset-inline">
|
|
<legend>Expéditeur par défaut</legend>
|
|
<div class="param-grid">
|
|
<div>
|
|
<label for="smtp_from_email">Adresse e-mail</label>
|
|
<input type="email" id="smtp_from_email" name="smtp_from_email"
|
|
value="<?= htmlspecialchars($smtpSettings['from_email']) ?>"
|
|
placeholder="noreply@example.com">
|
|
</div>
|
|
<div>
|
|
<label for="smtp_from_name">Nom d'expéditeur</label>
|
|
<input type="text" id="smtp_from_name" name="smtp_from_name"
|
|
value="<?= htmlspecialchars($smtpSettings['from_name']) ?>">
|
|
</div>
|
|
</div>
|
|
</fieldset>
|
|
|
|
<button type="submit">Enregistrer</button>
|
|
</form>
|
|
</section>
|
|
|
|
<!-- ══════════════════════════════════════════════════════════════
|
|
COMPTE ADMINISTRATEUR
|
|
══════════════════════════════════════════════════════════════ -->
|
|
<section aria-labelledby="settings-account-title">
|
|
<h2 id="settings-account-title">Compte administrateur</h2>
|
|
|
|
<dl class="param-account-status">
|
|
<div>
|
|
<dt>Authentification PHP</dt>
|
|
<dd><?php $badgeType = 'ok'; $badgeValue = $hasPassword; $badgeOkLabel = 'Active'; $badgeWarnLabel = 'Non configurée'; include APP_ROOT . '/templates/partials/status-badge.php'; ?></dd>
|
|
</div>
|
|
<div>
|
|
<dt>Stockage du hash</dt>
|
|
<dd>
|
|
<code>site_settings (DB)</code>
|
|
<?php $badgeType = 'ok'; $badgeValue = $hasPassword; $badgeOkLabel = 'Présent'; $badgeWarnLabel = 'Absent'; include APP_ROOT . '/templates/partials/status-badge.php'; ?>
|
|
</dd>
|
|
</div>
|
|
</dl>
|
|
|
|
<?php if (!$hasPassword): ?>
|
|
<p class="param-note">
|
|
Aucun mot de passe PHP configuré. Le formulaire ci-dessous stockera
|
|
un hash bcrypt dans la base de données.
|
|
</p>
|
|
<?php endif; ?>
|
|
|
|
<form method="post" action="/admin/actions/account.php" class="param-form" autocomplete="off">
|
|
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
|
|
<input type="hidden" name="redirect" value="/admin/parametres.php">
|
|
|
|
<?php if ($hasPassword): ?>
|
|
<div>
|
|
<label for="current_password">Mot de passe actuel</label>
|
|
<input type="password" id="current_password"
|
|
name="current_password" required autocomplete="current-password">
|
|
</div>
|
|
<?php endif; ?>
|
|
|
|
<div>
|
|
<label for="new_password">Nouveau mot de passe</label>
|
|
<input type="password" id="new_password"
|
|
name="new_password" required autocomplete="new-password"
|
|
minlength="12">
|
|
<small>Minimum 12 caractères.</small>
|
|
</div>
|
|
|
|
<div>
|
|
<label for="confirm_password">Confirmer le mot de passe</label>
|
|
<input type="password" id="confirm_password"
|
|
name="confirm_password" required autocomplete="new-password">
|
|
</div>
|
|
|
|
<button type="submit">
|
|
<?= $hasPassword ? 'Mettre à jour le mot de passe' : 'Définir le mot de passe' ?>
|
|
</button>
|
|
</form>
|
|
|
|
<!-- Danger zone: remove credentials -->
|
|
<?php if ($hasPassword): ?>
|
|
<fieldset class="param-danger-zone">
|
|
<legend>Supprimer la configuration du mot de passe PHP</legend>
|
|
<p>
|
|
Supprime le hash de la base de données. L'accès admin
|
|
dépendra uniquement de l'authentification nginx Basic Auth si elle est configurée.
|
|
</p>
|
|
<form method="post" action="/admin/actions/account.php"
|
|
onsubmit="return confirm('Supprimer le mot de passe PHP ? L\'accès admin ne sera protégé que par nginx Basic Auth.')">>
|
|
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
|
|
<input type="hidden" name="action" value="remove_credentials">
|
|
<input type="hidden" name="redirect" value="/admin/parametres.php">
|
|
<input type="hidden" name="current_password_remove" value="">
|
|
<button type="submit" class="param-btn-danger">Supprimer le mot de passe</button>
|
|
</form>
|
|
</fieldset>
|
|
<?php endif; ?>
|
|
</section>
|
|
|
|
<!-- ══════════════════════════════════════════════════════════════════
|
|
EXPORT DATABASE DIALOG
|
|
═══════════════════════════════════════════════════════════════ -->
|
|
<dialog id="export-db-dialog" class="admin-dialog" aria-labelledby="export-db-dialog-title">
|
|
<div class="admin-dialog__header">
|
|
<h2 id="export-db-dialog-title">Exporter la base de données</h2>
|
|
<button type="button" class="admin-dialog__close" aria-label="Fermer"
|
|
onclick="document.getElementById('export-db-dialog').close()">✕</button>
|
|
</div>
|
|
|
|
<p>Télécharger une copie complète de la base de données SQLite.
|
|
Cela inclut tous les TFE, auteurs, jury, mots-clés, paramètres, etc.</p>
|
|
|
|
<div class="admin-form-footer">
|
|
<a href="/admin/actions/export-db.php" class="admin-btn">Exporter la base de données</a>
|
|
<button type="button" class="admin-btn-secondary"
|
|
onclick="document.getElementById('export-db-dialog').close()">Annuler</button>
|
|
</div>
|
|
</dialog>
|
|
</main>
|
|
|
|
<?php require_once APP_ROOT . '/templates/admin/footer.php'; ?>
|