andreandClaude Opus 4.8
e68d357177
Plain-PHP fleet platform with id.andmore.pt SSO. Wires shared/platform-tools as a submodule (platform_update, backups, git/migration tools) like the other platforms. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
87 lines
4.1 KiB
PHP
87 lines
4.1 KiB
PHP
<?php
|
|
require __DIR__ . '/../../config/db.php';
|
|
require __DIR__ . '/../../config/functions.php';
|
|
|
|
$error = '';
|
|
$success = '';
|
|
|
|
// Self-locks after success by writing system_settings.setup_completed_at —
|
|
// relying only on "is there a sysadmin?" left the door open if anyone ever
|
|
// truncated the users table.
|
|
$setupDoneAt = (string) setting('setup_completed_at', '');
|
|
$alreadyDone = ($setupDoneAt !== '' || admin_exists($pdo));
|
|
|
|
if ($alreadyDone) {
|
|
$success = 'Já existe uma conta de administrador. Esta página já não é necessária — elimine views/auth/setup.php.';
|
|
} elseif ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
csrf_check();
|
|
$name = trim($_POST['name'] ?? '');
|
|
$email = trim($_POST['email'] ?? '');
|
|
$password = $_POST['password'] ?? '';
|
|
$confirm = $_POST['confirm'] ?? '';
|
|
|
|
if (!$name || !$email || !$password) {
|
|
$error = 'Todos os campos são obrigatórios.';
|
|
} elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
|
$error = 'Endereço de email inválido.';
|
|
} elseif (strlen($password) < 8) {
|
|
$error = 'A palavra-passe deve ter pelo menos 8 caracteres.';
|
|
} elseif ($password !== $confirm) {
|
|
$error = 'As palavras-passe não coincidem.';
|
|
} else {
|
|
$newId = auth_create_sysadmin($pdo, $name, $email, $password);
|
|
// Latch the gate so a future `users` truncate can't re-open setup.
|
|
db_update_setting($pdo, 'setup_completed_at', date('Y-m-d H:i:s'), $newId);
|
|
// Best-effort self-destruct.
|
|
@unlink(__FILE__);
|
|
$alreadyDone = true;
|
|
$success = 'Conta de sysadmin criada. <strong>Elimine este ficheiro (views/auth/setup.php) agora.</strong> <a href="' . base_url('views/auth/login.php') . '">Ir para o login →</a>';
|
|
}
|
|
}
|
|
|
|
include __DIR__ . '/../../includes/header.php';
|
|
?>
|
|
<div class="container" style="max-width:480px; margin-top:80px;">
|
|
<div class="card shadow-sm">
|
|
<div class="card-body p-4">
|
|
<h3 class="mb-1">Configuração inicial</h3>
|
|
<p class="text-muted small mb-4">Crie a conta de administrador. Elimine este ficheiro depois.</p>
|
|
|
|
<?php if ($error): ?>
|
|
<div class="alert alert-danger"><?= htmlspecialchars($error) ?></div>
|
|
<?php endif; ?>
|
|
<?php if ($success): ?>
|
|
<div class="alert alert-success"><?= $success ?></div>
|
|
<?php elseif (!$alreadyDone): ?>
|
|
<form method="POST">
|
|
<?= csrf_field() ?>
|
|
<div class="mb-3">
|
|
<label class="form-label" for="setup-name">Nome</label>
|
|
<input type="text" id="setup-name" name="name" class="form-control" required
|
|
autocomplete="name"
|
|
value="<?= htmlspecialchars($_POST['name'] ?? '') ?>">
|
|
</div>
|
|
<div class="mb-3">
|
|
<label class="form-label" for="setup-email">Email</label>
|
|
<input type="email" id="setup-email" name="email" class="form-control" required
|
|
autocomplete="email" inputmode="email"
|
|
value="<?= htmlspecialchars($_POST['email'] ?? '') ?>">
|
|
</div>
|
|
<div class="mb-3">
|
|
<label class="form-label" for="setup-password">Palavra-passe <span class="text-muted small">(mín. 8 caracteres)</span></label>
|
|
<input type="password" id="setup-password" name="password" class="form-control" required minlength="8"
|
|
autocomplete="new-password">
|
|
</div>
|
|
<div class="mb-4">
|
|
<label class="form-label" for="setup-confirm">Confirmar palavra-passe</label>
|
|
<input type="password" id="setup-confirm" name="confirm" class="form-control" required
|
|
autocomplete="new-password">
|
|
</div>
|
|
<button type="submit" class="btn btn-primary w-100">Criar conta de administrador</button>
|
|
</form>
|
|
<?php endif; ?>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<?php include __DIR__ . '/../../includes/footer.php'; ?>
|