Files
fitme3070.pt/views/admin/galerias/index.php
T
andreandClaude Opus 5.5 2f8f68c61a chore: olho da password em todos os campos, JS morto removido, .gitignore
- assets/js/password-toggle.js, carregado nos dois layouts: liga os botões
  existentes e cria um para cada campo de password que não o tenha (eram 3
  em 12). aria-pressed, aria-label que muda, fora da ordem de tabulação, e
  volta a ocultar ao submeter.
- Removidas 23 bibliotecas/folhas sem nenhuma referência (193 ficheiros),
  incluindo o jQuery 3.2.1 (CVE-2020-11022/11023) que se servia por URL, o
  Splide (a galeria passou a masonry própria em d70f13a), owl, mixitup,
  masonry, magnific-popup, slicknav, jquery.lazy, fullpage, TweenMax,
  circle-progress, progressbar, o template polo e cópias antigas do
  Bootstrap/FontAwesome em site/assets.
- .table-responsive nas listagens de eventos e galerias.
- .gitignore: sem os 5 padrões herdados do fotografia; *.sql/*.dump
  ignorados (exceto migrações e o esquema); .trash/ das imagens; nota sobre
  vendor/ versionado de propósito. database/andmore_fitme3070_dev.sql passa a
  database/schema.sql (só estrutura, 0 INSERT).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-25 07:19:54 +01:00

73 lines
3.4 KiB
PHP

<?php
require __DIR__ . '/../../../config/db.php';
require __DIR__ . '/../../../config/functions.php';
$user = require_admin();
// Handle delete BEFORE any output
// POST + CSRF: um link GET podia ser disparado a partir de outro site.
if (isset($_POST['delete']) && is_numeric($_POST['delete'])) {
csrf_check();
db_gallery_delete($pdo, (int) $_POST['delete']);
session()->setFlashdata('success', 'Galeria apagada — fica na lixeira 30 dias.');
header('Location: ' . base_url('views/admin/galerias/index.php'));
exit;
}
// Optimize every image in every gallery (resize/compress to the gallery cap)
if (isset($_POST['optimize_all'])) {
csrf_check();
$stats = ['resized' => 0, 'skipped' => 0, 'failed' => 0, 'saved' => 0];
foreach (glob(__DIR__ . '/../../../uploads/gallery/*', GLOB_ONLYDIR) ?: [] as $dir) {
foreach (img_optimize_dir($dir . '/', IMG_MAX_GALLERY) as $k => $v) $stats[$k] += $v;
}
session()->setFlashdata($stats['failed'] ? 'warning' : 'success', img_stats_message($stats));
header('Location: ' . base_url('views/admin/galerias/index.php'));
exit;
}
$galleries = db_gallery_list($pdo);
$page_title = 'Galerias';
include __DIR__ . '/../../../includes/header.php';
?>
<div class="container">
<div class="d-flex justify-content-between align-items-center mb-4">
<h1 class="h3 mb-0">Galerias</h1>
<div class="d-flex gap-2">
<form method="POST" class="mb-0">
<?= csrf_field() ?>
<button type="submit" name="optimize_all" value="1" class="btn btn-outline-success"
title="Redimensiona e comprime as imagens de todas as galerias para o máximo de <?= IMG_MAX_GALLERY ?>px"
onclick="return confirm('Otimizar as imagens de todas as galerias (máx. <?= IMG_MAX_GALLERY ?>px)? Os ficheiros originais serão substituídos.')">
<i class="bi bi-arrows-angle-contract me-1"></i>Otimizar imagens
</button>
</form>
<a class="btn btn-primary" href="<?= base_url('views/admin/galerias/create.php') ?>"><i class="bi bi-plus-lg me-1"></i>Nova Galeria</a>
</div>
</div>
<div class="card shadow-sm"><div class="card-body p-0">
<div class="table-responsive">
<table class="table table-hover align-middle mb-0">
<thead class="table-light"><tr>
<th>Nome</th><th style="width:120px">Ações</th>
</tr></thead>
<tbody>
<?php if (!$galleries): ?>
<tr><td colspan="2" class="text-center text-muted py-4">Nenhuma galeria.</td></tr>
<?php else: ?>
<?php foreach ($galleries as $g): ?>
<tr>
<td><strong><?= htmlspecialchars($g['name']) ?></strong></td>
<td>
<a class="btn btn-sm btn-outline-primary" href="edit.php?id=<?= $g['id'] ?>"><i class="bi bi-pencil"></i> Gerir</a>
<form method="POST" class="d-inline" onsubmit="return confirm('Apagar esta galeria e todas as suas imagens?')"><?= csrf_field() ?><button class="btn btn-sm btn-outline-danger" name="delete" value="<?= (int) $g['id'] ?>" aria-label="Apagar"><i class="bi bi-trash"></i></button></form>
</td>
</tr>
<?php endforeach; endif; ?>
</tbody>
</table>
</div>
</div></div>
</div>
<?php include __DIR__ . '/../../../includes/footer.php';