From 07413b7c4602d542f248ed97dd6975f5e62a1cc8 Mon Sep 17 00:00:00 2001
From: Borgal <mueller.lars@online.de>
Date: Fri, 24 Oct 2025 14:53:57 +0200
Subject: [PATCH] =?UTF-8?q?Colors=20in=20normales=20Me=C3=BC=20geschoben?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 admin/colors.php | 173 ----------------------------------------
 colors.php       | 204 +++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 204 insertions(+), 173 deletions(-)
 delete mode 100755 admin/colors.php
 create mode 100755 colors.php

diff --git a/admin/colors.php b/admin/colors.php
deleted file mode 100755
index ac6200c..0000000
--- a/admin/colors.php
+++ /dev/null
@@ -1,173 +0,0 @@
-<?php
-include('../inc/check_login.php');
-include('../inc/check_admin.php');
-require_once '../inc/db.php';
-
-$message = '';
-$message_type = '';
-$edit_mode = false;
-$edit_color = null;
-
-// --- Löschen ---
-if (isset($_GET['action']) && $_GET['action'] == 'delete' && isset($_GET['id'])) {
-    $id = $_GET['id'];
-    $stmt = mysqli_prepare($conn, "DELETE FROM colors WHERE id = ?");
-    mysqli_stmt_bind_param($stmt, "i", $id);
-    if (mysqli_stmt_execute($stmt)) {
-        $message = "Farbe erfolgreich gelöscht!";
-        $message_type = 'success';
-    } else {
-        $message = "Fehler beim Löschen der Farbe.";
-        $message_type = 'danger';
-    }
-    mysqli_stmt_close($stmt);
-}
-
-// --- Bearbeiten ---
-if (isset($_GET['action']) && $_GET['action'] == 'edit' && isset($_GET['id'])) {
-    $id = $_GET['id'];
-    $stmt = mysqli_prepare($conn, "SELECT id, name, hex_code FROM colors WHERE id = ?");
-    mysqli_stmt_bind_param($stmt, "i", $id);
-    mysqli_stmt_execute($stmt);
-    $result = mysqli_stmt_get_result($stmt);
-    $edit_color = mysqli_fetch_assoc($result);
-    mysqli_stmt_close($stmt);
-    $edit_mode = true;
-}
-
-// --- Hinzufügen / Aktualisieren ---
-if ($_SERVER["REQUEST_METHOD"] == "POST") {
-    $name = $_POST['name'];
-    $hex_code = $_POST['hex_code'];
-    $id = $_POST['id'] ?? null;
-
-    if ($id) {
-        $stmt = mysqli_prepare($conn, "UPDATE colors SET name = ?, hex_code = ? WHERE id = ?");
-        mysqli_stmt_bind_param($stmt, "ssi", $name, $hex_code, $id);
-        if (mysqli_stmt_execute($stmt)) {
-            $message = "Farbe erfolgreich aktualisiert!";
-            $message_type = 'success';
-        } else {
-            $message = "Fehler beim Aktualisieren der Farbe.";
-            $message_type = 'danger';
-        }
-        mysqli_stmt_close($stmt);
-    } else {
-        $stmt = mysqli_prepare($conn, "INSERT INTO colors (name, hex_code) VALUES (?, ?)");
-        mysqli_stmt_bind_param($stmt, "ss", $name, $hex_code);
-        if (mysqli_stmt_execute($stmt)) {
-            $message = "Neue Farbe erfolgreich hinzugefügt!";
-            $message_type = 'success';
-        } else {
-            $message = "Fehler beim Hinzufügen der Farbe.";
-            $message_type = 'danger';
-        }
-        mysqli_stmt_close($stmt);
-    }
-}
-
-// --- Farben auslesen ---
-$colors = [];
-$result = mysqli_query($conn, "SELECT id, name, hex_code FROM colors ORDER BY name");
-while ($row = mysqli_fetch_assoc($result)) {
-    $colors[] = $row;
-}
-
-require_once '../inc/header.php';
-?>
-
-<div class="container mt-5">
-
-    <?php if ($message) : ?>
-        <div class="alert alert-<?= $message_type ?> alert-dismissible fade show" role="alert">
-            <?= htmlspecialchars($message) ?>
-            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
-        </div>
-    <?php endif; ?>
-
-    <div class="d-flex justify-content-between align-items-center mb-4">
-        <h2 class="mb-0">Farbverwaltung</h2>
-    </div>
-
-    <div class="collapse <?= $edit_mode ? 'show' : '' ?>" id="colorFormCollapse">
-        <div class="card shadow mb-4">
-            <div class="card-header bg-primary-subtle text-secondary">
-                <h4 class="mb-0"><?= $edit_mode ? 'Farbe bearbeiten' : 'Neue Farbe hinzufügen'; ?></h4>
-            </div>
-            <div class="card-body">
-                <form action="colors.php" method="post">
-                    <?php if ($edit_mode): ?>
-                        <input type="hidden" name="id" value="<?= htmlspecialchars($edit_color['id']); ?>">
-                    <?php endif; ?>
-                    <div class="row g-3">
-                        <div class="col-md-6">
-                            <label for="name" class="form-label">Name der Farbe</label>
-                            <input type="text" class="form-control" id="name" name="name"
-                                value="<?= htmlspecialchars($edit_color['name'] ?? ''); ?>" required>
-                        </div>
-                        <div class="col-md-6">
-                            <label for="hex_code" class="form-label">Hex-Code</label>
-                            <input type="color" class="form-control form-control-color" id="hex_code" name="hex_code"
-                                value="<?= htmlspecialchars($edit_color['hex_code'] ?? '#'); ?>">
-                        </div>
-                        <div class="col-12 d-flex justify-content-start mt-2">
-                            <button type="submit" class="btn btn-sm btn-outline-<?= $edit_mode ? 'success' : 'primary'; ?> me-2">
-                                <?= $edit_mode ? 'Speichern' : 'Hinzufügen'; ?>
-                            </button>
-                            <a href="colors.php" class="btn btn-sm btn-outline-secondary">Abbrechen</a>
-                        </div>
-                    </div>
-                </form>
-            </div>
-        </div>
-        <hr class="mt-4 mb-4">
-    </div>
-
-    <div class="card shadow">
-        <div class="card-header bg-secondary bg-opacity-50 text-secondary d-flex justify-content-between align-items-center mb-4">
-            <h4 class="mb-0">Aktuelle Farben</h4>
-            <a class="btn btn-sm d-flex align-items-center justify-content-center" data-bs-toggle="collapse" href="#colorFormCollapse" role="button" aria-expanded="false" aria-controls="colorFormCollapse">Add
-                <span class="material-symbols-outlined">add</span>
-            </a>
-        </div>
-        <div class="card-body">
-            <?php if (empty($colors)): ?>
-                <p class="text-muted text-center">Es sind noch keine Farben vorhanden.</p>
-            <?php else: ?>
-                <div class="table-responsive">
-                    <table class="table table-striped table-hover">
-                        <thead>
-                            <tr>
-                                <th>Name</th>
-                                <th>Hex-Code</th>
-                                <th>Farbe</th>
-                                <th>Aktionen</th>
-                            </tr>
-                        </thead>
-                        <tbody>
-                            <?php foreach ($colors as $color): ?>
-                                <tr>
-                                    <td><?= htmlspecialchars($color['name']); ?></td>
-                                    <td><?= htmlspecialchars($color['hex_code']); ?></td>
-                                    <td>
-                                        <div style="background-color: <?= htmlspecialchars($color['hex_code']); ?>; width: 40px; height: 20px; border: 1px solid #ccc;"></div>
-                                    </td>
-                                    <td>
-                                        <a href="colors.php?action=edit&id=<?= htmlspecialchars($color['id']); ?>" class="text-dark me-1 text-decoration-none">
-                                            <span class="material-icons">mode_edit_outline</span>
-                                        </a>
-                                        <a href="colors.php?action=delete&id=<?= htmlspecialchars($color['id']); ?>" class="text-danger text-decoration-none" onclick="return confirm('Sind Sie sicher, dass Sie diese Farbe löschen möchten?');">
-                                            <span class="material-icons">delete_outline</span>
-                                        </a>
-                                    </td>
-                                </tr>
-                            <?php endforeach; ?>
-                        </tbody>
-                    </table>
-                </div>
-            <?php endif; ?>
-        </div>
-    </div>
-</div>
-
-<?php include('../inc/footer.php'); ?>
\ No newline at end of file
diff --git a/colors.php b/colors.php
new file mode 100755
index 0000000..63c18f1
--- /dev/null
+++ b/colors.php
@@ -0,0 +1,204 @@
+<?php
+session_start(); // Sicherstellen, dass Session läuft
+if (!isset($_SESSION['user_id'])) {
+    header("Location: login.php");
+    exit();
+}
+
+require_once 'inc/db.php';
+
+// Prüfen, ob der aktuelle Benutzer Admin ist
+$is_admin = ($_SESSION['role'] === 'admin');
+
+$message = '';
+$message_type = '';
+$edit_mode = false;
+$edit_color = null;
+
+// --- Nur Admins: Löschen ---
+if ($is_admin && isset($_GET['action']) && $_GET['action'] == 'delete' && isset($_GET['id'])) {
+    $id = (int)$_GET['id'];
+    $stmt = mysqli_prepare($conn, "DELETE FROM colors WHERE id = ?");
+    mysqli_stmt_bind_param($stmt, "i", $id);
+    if (mysqli_stmt_execute($stmt)) {
+        $message = "Farbe erfolgreich gelöscht!";
+        $message_type = 'success';
+    } else {
+        $message = "Fehler beim Löschen der Farbe.";
+        $message_type = 'danger';
+    }
+    mysqli_stmt_close($stmt);
+    // Weiterleitung verhindert doppeltes Löschen beim Reload
+    header("Location: colors.php");
+    exit();
+}
+
+// --- Nur Admins: Bearbeiten (Vorbereitung) ---
+if ($is_admin && isset($_GET['action']) && $_GET['action'] == 'edit' && isset($_GET['id'])) {
+    $id = (int)$_GET['id'];
+    $stmt = mysqli_prepare($conn, "SELECT id, name, hex_code FROM colors WHERE id = ?");
+    mysqli_stmt_bind_param($stmt, "i", $id);
+    mysqli_stmt_execute($stmt);
+    $result = mysqli_stmt_get_result($stmt);
+    $edit_color = mysqli_fetch_assoc($result);
+    mysqli_stmt_close($stmt);
+    if ($edit_color) {
+        $edit_mode = true;
+    } else {
+        $message = "Farbe nicht gefunden.";
+        $message_type = 'warning';
+    }
+}
+
+// --- Nur Admins: Hinzufügen / Aktualisieren ---
+if ($is_admin && $_SERVER["REQUEST_METHOD"] == "POST") {
+    $name = trim($_POST['name'] ?? '');
+    $hex_code = trim($_POST['hex_code'] ?? '');
+    $id = !empty($_POST['id']) ? (int)$_POST['id'] : null;
+
+    if (empty($name) || empty($hex_code)) {
+        $message = "Name und Farbcode sind erforderlich.";
+        $message_type = 'danger';
+    } else {
+        if ($id) {
+            $stmt = mysqli_prepare($conn, "UPDATE colors SET name = ?, hex_code = ? WHERE id = ?");
+            mysqli_stmt_bind_param($stmt, "ssi", $name, $hex_code, $id);
+            if (mysqli_stmt_execute($stmt)) {
+                $message = "Farbe erfolgreich aktualisiert!";
+                $message_type = 'success';
+            } else {
+                $message = "Fehler beim Aktualisieren der Farbe.";
+                $message_type = 'danger';
+            }
+            mysqli_stmt_close($stmt);
+        } else {
+            $stmt = mysqli_prepare($conn, "INSERT INTO colors (name, hex_code) VALUES (?, ?)");
+            mysqli_stmt_bind_param($stmt, "ss", $name, $hex_code);
+            if (mysqli_stmt_execute($stmt)) {
+                $message = "Neue Farbe erfolgreich hinzugefügt!";
+                $message_type = 'success';
+            } else {
+                $message = "Fehler beim Hinzufügen der Farbe.";
+                $message_type = 'danger';
+            }
+            mysqli_stmt_close($stmt);
+        }
+        // Nach POST: Weiterleitung zur Anzeige (Post-Redirect-Get)
+        header("Location: colors.php");
+        exit();
+    }
+}
+
+// --- Farben für alle anzeigen ---
+$colors = [];
+$result = mysqli_query($conn, "SELECT id, name, hex_code FROM colors ORDER BY name");
+while ($row = mysqli_fetch_assoc($result)) {
+    $colors[] = $row;
+}
+
+require_once 'inc/header.php';
+?>
+
+<div class="container mt-5">
+
+    <?php if ($message): ?>
+        <div class="alert alert-<?= htmlspecialchars($message_type) ?> alert-dismissible fade show" role="alert">
+            <?= htmlspecialchars($message) ?>
+            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
+        </div>
+    <?php endif; ?>
+
+    <div class="d-flex justify-content-between align-items-center mb-4">
+        <h2 class="mb-0">Farbverwaltung</h2>
+        <?php if ($is_admin): ?>
+            <a class="btn btn-sm btn-outline-primary d-flex align-items-center" data-bs-toggle="collapse" href="#colorFormCollapse" role="button">
+                <span class="material-symbols-outlined me-1">add</span> Farbe hinzufügen
+            </a>
+        <?php endif; ?>
+    </div>
+
+    <?php if ($is_admin): ?>
+        <div class="collapse <?= $edit_mode ? 'show' : '' ?>" id="colorFormCollapse">
+            <div class="card shadow mb-4">
+                <div class="card-header bg-primary-subtle text-secondary">
+                    <h4 class="mb-0"><?= $edit_mode ? 'Farbe bearbeiten' : 'Neue Farbe hinzufügen'; ?></h4>
+                </div>
+                <div class="card-body">
+                    <form action="colors.php" method="post">
+                        <?php if ($edit_mode): ?>
+                            <input type="hidden" name="id" value="<?= htmlspecialchars($edit_color['id']); ?>">
+                        <?php endif; ?>
+                        <div class="row g-3">
+                            <div class="col-md-6">
+                                <label for="name" class="form-label">Name der Farbe</label>
+                                <input type="text" class="form-control" id="name" name="name"
+                                    value="<?= htmlspecialchars($edit_color['name'] ?? ''); ?>" required>
+                            </div>
+                            <div class="col-md-6">
+                                <label for="hex_code" class="form-label">Hex-Code</label>
+                                <input type="color" class="form-control form-control-color" id="hex_code" name="hex_code"
+                                    value="<?= htmlspecialchars($edit_color['hex_code'] ?? '#000000'); ?>">
+                            </div>
+                            <div class="col-12 d-flex justify-content-start mt-2">
+                                <button type="submit" class="btn btn-sm btn-outline-<?= $edit_mode ? 'success' : 'primary'; ?> me-2">
+                                    <?= $edit_mode ? 'Speichern' : 'Hinzufügen'; ?>
+                                </button>
+                                <a href="colors.php" class="btn btn-sm btn-outline-secondary">Abbrechen</a>
+                            </div>
+                        </div>
+                    </form>
+                </div>
+            </div>
+            <hr class="mt-4 mb-4">
+        </div>
+    <?php endif; ?>
+
+    <div class="card shadow">
+        <div class="card-header bg-secondary bg-opacity-50 text-secondary">
+            <h4 class="mb-0">Aktuelle Farben</h4>
+        </div>
+        <div class="card-body">
+            <?php if (empty($colors)): ?>
+                <p class="text-muted text-center">Es sind noch keine Farben vorhanden.</p>
+            <?php else: ?>
+                <div class="table-responsive">
+                    <table class="table table-striped table-hover">
+                        <thead>
+                            <tr>
+                                <th>Name</th>
+                                <th>Hex-Code</th>
+                                <th>Farbe</th>
+                                <?php if ($is_admin): ?>
+                                    <th>Aktionen</th>
+                                <?php endif; ?>
+                            </tr>
+                        </thead>
+                        <tbody>
+                            <?php foreach ($colors as $color): ?>
+                                <tr>
+                                    <td><?= htmlspecialchars($color['name']); ?></td>
+                                    <td><?= htmlspecialchars($color['hex_code']); ?></td>
+                                    <td>
+                                        <div style="background-color: <?= htmlspecialchars($color['hex_code']); ?>; width: 40px; height: 20px; border: 1px solid #ccc;"></div>
+                                    </td>
+                                    <?php if ($is_admin): ?>
+                                        <td>
+                                            <a href="colors.php?action=edit&id=<?= htmlspecialchars($color['id']); ?>" class="text-dark me-1 text-decoration-none">
+                                                <span class="material-icons">mode_edit_outline</span>
+                                            </a>
+                                            <a href="colors.php?action=delete&id=<?= htmlspecialchars($color['id']); ?>" class="text-danger text-decoration-none" onclick="return confirm('Sind Sie sicher, dass Sie diese Farbe löschen möchten?');">
+                                                <span class="material-icons">delete_outline</span>
+                                            </a>
+                                        </td>
+                                    <?php endif; ?>
+                                </tr>
+                            <?php endforeach; ?>
+                        </tbody>
+                    </table>
+                </div>
+            <?php endif; ?>
+        </div>
+    </div>
+</div>
+
+<?php include('inc/footer.php'); ?>
\ No newline at end of file