mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-05-06 19:19:19 +02:00
fd4fb5ce4a
- Database: add deleteThesis() and bulkDeleteTheses() methods with file cleanup - Database: add SORT_MAP + buildOrderBy() for safe column sorting - Database: getThesesList() now respects sort/dir filter params - New action: actions/delete.php (single + batch delete with CSRF) - Admin index: delete button per row with confirmation dialog - Admin index: batch 'Supprimer' button in bulk actions bar - Admin index: sortable column headers (ID, Titre, Année, Orientation, AP, Statut) - Admin index: sort state preserved in pagination links - CSS: admin-btn-delete (red muted), admin-sort-link styles
56 lines
1.6 KiB
PHP
56 lines
1.6 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../../../config/bootstrap.php';
|
|
require_once __DIR__ . '/../../../src/AdminAuth.php';
|
|
|
|
AdminAuth::requireLogin();
|
|
|
|
require_once __DIR__ . '/../../../src/Database.php';
|
|
|
|
// CSRF validation
|
|
if (!isset($_POST['csrf_token'], $_SESSION['csrf_token'])
|
|
|| !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
|
|
App::flash('error', 'Erreur de sécurité : token invalide.');
|
|
header('Location: ../index.php');
|
|
exit;
|
|
}
|
|
|
|
$isBulk = !empty($_POST['bulk']);
|
|
|
|
try {
|
|
$db = new Database();
|
|
|
|
if ($isBulk) {
|
|
$ids = array_filter(array_map('intval', $_POST['selected_theses'] ?? []), fn($id) => $id > 0);
|
|
|
|
if (empty($ids)) {
|
|
App::flash('error', 'Aucun TFE sélectionné.');
|
|
header('Location: ../index.php');
|
|
exit;
|
|
}
|
|
|
|
$db->bulkDeleteTheses($ids);
|
|
$count = count($ids);
|
|
App::flash('success', "$count TFE(s) supprimé(s) avec succès.");
|
|
|
|
} else {
|
|
$thesisId = filter_var($_POST['thesis_id'] ?? '', FILTER_VALIDATE_INT);
|
|
|
|
if (!$thesisId || $thesisId <= 0) {
|
|
App::flash('error', 'ID invalide.');
|
|
header('Location: ../index.php');
|
|
exit;
|
|
}
|
|
|
|
$db->deleteThesis($thesisId);
|
|
App::flash('success', 'TFE supprimé avec succès.');
|
|
}
|
|
|
|
} catch (Exception $e) {
|
|
error_log('delete.php error: ' . $e->getMessage());
|
|
App::flash('error', 'Erreur lors de la suppression : ' . $e->getMessage());
|
|
}
|
|
|
|
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
|
|
header('Location: ../index.php');
|
|
exit;
|