Alexander Andreev
c94dc1e73e
Split comment users and comment moderation into separate admin sections, and add comment search by photo and user for faster moderation. Rework public photo viewing with full-frame repeated watermarking, in-section prev/next navigation, sticky desktop sidebar, and a mobile bottom nav with section return and photo position.
1200 lines
53 KiB
PHP
1200 lines
53 KiB
PHP
<?php
|
||
|
||
declare(strict_types=1);
|
||
|
||
require_once __DIR__ . '/lib/db_gallery.php';
|
||
|
||
const MAX_UPLOAD_BYTES = 3 * 1024 * 1024;
|
||
|
||
$configPath = __DIR__ . '/deploy-config.php';
|
||
if (!is_file($configPath)) {
|
||
http_response_code(500);
|
||
exit('deploy-config.php not found');
|
||
}
|
||
$config = require $configPath;
|
||
$tokenExpected = (string)($config['token'] ?? '');
|
||
$tokenIncoming = (string)($_REQUEST['token'] ?? '');
|
||
if ($tokenExpected === '' || !hash_equals($tokenExpected, $tokenIncoming)) {
|
||
http_response_code(403);
|
||
exit('Forbidden');
|
||
}
|
||
|
||
$requestAction = (string)($_REQUEST['action'] ?? '');
|
||
if ($_SERVER['REQUEST_METHOD'] === 'GET' && $requestAction === 'photo_comments') {
|
||
$photoId = (int)($_GET['photo_id'] ?? 0);
|
||
if ($photoId < 1) {
|
||
http_response_code(400);
|
||
header('Content-Type: application/json; charset=utf-8');
|
||
echo json_encode(['ok' => false, 'message' => 'Некорректный photo_id'], JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
|
||
$photo = photoById($photoId);
|
||
if (!$photo) {
|
||
http_response_code(404);
|
||
header('Content-Type: application/json; charset=utf-8');
|
||
echo json_encode(['ok' => false, 'message' => 'Фото не найдено'], JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
|
||
header('Content-Type: application/json; charset=utf-8');
|
||
echo json_encode([
|
||
'ok' => true,
|
||
'photo' => ['id' => (int)$photo['id'], 'code_name' => (string)$photo['code_name']],
|
||
'comments' => commentsByPhoto($photoId),
|
||
], JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
|
||
$message = '';
|
||
$errors = [];
|
||
|
||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||
$action = (string)($_POST['action'] ?? '');
|
||
$isAjax = (string)($_POST['ajax'] ?? '') === '1'
|
||
|| strtolower((string)($_SERVER['HTTP_X_REQUESTED_WITH'] ?? '')) === 'xmlhttprequest';
|
||
|
||
try {
|
||
if ($action === 'create_section') {
|
||
$name = trim((string)($_POST['name'] ?? ''));
|
||
$sort = (int)($_POST['sort_order'] ?? 1000);
|
||
if ($name === '') throw new RuntimeException('Название раздела пустое');
|
||
sectionCreate($name, $sort);
|
||
$message = 'Раздел создан';
|
||
}
|
||
|
||
if ($action === 'update_section') {
|
||
$sectionId = (int)($_POST['section_id'] ?? 0);
|
||
$name = trim((string)($_POST['name'] ?? ''));
|
||
$sort = (int)($_POST['sort_order'] ?? 1000);
|
||
if ($sectionId < 1) throw new RuntimeException('Некорректный раздел');
|
||
if ($name === '') throw new RuntimeException('Название раздела пустое');
|
||
if (!sectionById($sectionId)) throw new RuntimeException('Раздел не найден');
|
||
sectionUpdate($sectionId, $name, $sort);
|
||
$message = 'Раздел обновлён';
|
||
if ($isAjax) {
|
||
header('Content-Type: application/json; charset=utf-8');
|
||
echo json_encode(['ok' => true, 'message' => $message], JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
}
|
||
|
||
if ($action === 'delete_section') {
|
||
$sectionId = (int)($_POST['section_id'] ?? 0);
|
||
if ($sectionId < 1) throw new RuntimeException('Некорректный раздел');
|
||
if (!sectionById($sectionId)) throw new RuntimeException('Раздел не найден');
|
||
|
||
removeSectionImageFiles($sectionId);
|
||
sectionDelete($sectionId);
|
||
deleteSectionStorage($sectionId);
|
||
$message = 'Раздел удалён';
|
||
}
|
||
|
||
if ($action === 'update_welcome') {
|
||
$text = trim((string)($_POST['welcome_text'] ?? ''));
|
||
settingSet('welcome_text', $text);
|
||
$message = 'Приветственное сообщение сохранено';
|
||
}
|
||
|
||
if ($action === 'upload_before_bulk') {
|
||
$sectionId = (int)($_POST['section_id'] ?? 0);
|
||
if ($sectionId < 1 || !sectionById($sectionId)) throw new RuntimeException('Выбери раздел');
|
||
if (!isset($_FILES['before_bulk'])) throw new RuntimeException('Файлы не переданы');
|
||
|
||
$result = saveBulkBefore($_FILES['before_bulk'], $sectionId);
|
||
$message = 'Загружено: ' . $result['ok'];
|
||
$errors = array_merge($errors, $result['errors']);
|
||
}
|
||
|
||
if ($action === 'photo_update') {
|
||
$photoId = (int)($_POST['photo_id'] ?? 0);
|
||
$code = trim((string)($_POST['code_name'] ?? ''));
|
||
$sort = (int)($_POST['sort_order'] ?? 1000);
|
||
$descr = trim((string)($_POST['description'] ?? ''));
|
||
$descr = $descr !== '' ? $descr : null;
|
||
|
||
if ($photoId < 1) throw new RuntimeException('Некорректный photo_id');
|
||
if ($code === '') throw new RuntimeException('Код фото пустой');
|
||
|
||
$st = db()->prepare('UPDATE photos SET code_name=:c, sort_order=:s, description=:d WHERE id=:id');
|
||
$st->execute(['c' => $code, 's' => $sort, 'd' => $descr, 'id' => $photoId]);
|
||
|
||
if (isset($_FILES['after']) && (int)($_FILES['after']['error'] ?? UPLOAD_ERR_NO_FILE) !== UPLOAD_ERR_NO_FILE) {
|
||
$p = photoById($photoId);
|
||
if (!$p) throw new RuntimeException('Фото не найдено');
|
||
$up = saveSingleImage($_FILES['after'], $code . 'р', (int)$p['section_id']);
|
||
photoFileUpsert($photoId, 'after', $up['path'], $up['mime'], $up['size']);
|
||
}
|
||
|
||
$message = 'Фото обновлено';
|
||
if ($isAjax) {
|
||
header('Content-Type: application/json; charset=utf-8');
|
||
echo json_encode(['ok' => true, 'message' => $message], JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
}
|
||
|
||
if ($action === 'photo_delete') {
|
||
$photoId = (int)($_POST['photo_id'] ?? 0);
|
||
if ($photoId > 0) {
|
||
$p = photoById($photoId);
|
||
if ($p) {
|
||
foreach (['before_path', 'after_path'] as $k) {
|
||
if (!empty($p[$k])) {
|
||
$abs = __DIR__ . '/' . ltrim((string)$p[$k], '/');
|
||
if (is_file($abs)) @unlink($abs);
|
||
}
|
||
}
|
||
}
|
||
$st = db()->prepare('DELETE FROM photos WHERE id=:id');
|
||
$st->execute(['id' => $photoId]);
|
||
$message = 'Фото удалено';
|
||
}
|
||
}
|
||
|
||
if ($action === 'rotate_photo_file') {
|
||
$photoId = (int)($_POST['photo_id'] ?? 0);
|
||
$kind = (string)($_POST['kind'] ?? '');
|
||
$direction = (string)($_POST['direction'] ?? 'right');
|
||
if ($photoId < 1) throw new RuntimeException('Некорректный photo_id');
|
||
if (!in_array($kind, ['before', 'after'], true)) throw new RuntimeException('Некорректный тип файла');
|
||
|
||
$photo = photoById($photoId);
|
||
if (!$photo) throw new RuntimeException('Фото не найдено');
|
||
|
||
$pathKey = $kind === 'before' ? 'before_path' : 'after_path';
|
||
$relPath = (string)($photo[$pathKey] ?? '');
|
||
if ($relPath === '') throw new RuntimeException('Файл отсутствует');
|
||
|
||
$absPath = __DIR__ . '/' . ltrim($relPath, '/');
|
||
if (!is_file($absPath)) throw new RuntimeException('Файл не найден на диске');
|
||
|
||
$degrees = $direction === 'left' ? -90 : 90;
|
||
rotateImageOnDisk($absPath, $degrees);
|
||
|
||
$st = db()->prepare('UPDATE photo_files SET updated_at=CURRENT_TIMESTAMP WHERE photo_id=:pid AND kind=:kind');
|
||
$st->execute(['pid' => $photoId, 'kind' => $kind]);
|
||
|
||
$message = 'Изображение повернуто';
|
||
if ($isAjax) {
|
||
header('Content-Type: application/json; charset=utf-8');
|
||
echo json_encode(['ok' => true, 'message' => $message, 'photo_id' => $photoId, 'kind' => $kind], JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
}
|
||
|
||
if ($action === 'create_commenter') {
|
||
$displayName = trim((string)($_POST['display_name'] ?? ''));
|
||
if ($displayName === '') throw new RuntimeException('Укажи имя комментатора');
|
||
$u = commenterCreate($displayName);
|
||
$link = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http') . '://' . ($_SERVER['HTTP_HOST'] ?? 'localhost') . '/?viewer=' . urlencode($u['token']);
|
||
$message = 'Комментатор создан: ' . $u['display_name'] . ' | ссылка: ' . $link;
|
||
}
|
||
|
||
if ($action === 'delete_commenter') {
|
||
$id = (int)($_POST['id'] ?? 0);
|
||
if ($id > 0) {
|
||
commenterDelete($id);
|
||
$message = 'Комментатор удалён (доступ отозван)';
|
||
}
|
||
}
|
||
|
||
if ($action === 'regenerate_commenter_token') {
|
||
$id = (int)($_POST['id'] ?? 0);
|
||
if ($id > 0) {
|
||
$token = commenterRegenerateToken($id);
|
||
$link = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http') . '://' . ($_SERVER['HTTP_HOST'] ?? 'localhost') . '/?viewer=' . urlencode($token);
|
||
$message = 'Токен обновлён | ссылка: ' . $link;
|
||
}
|
||
}
|
||
|
||
if ($action === 'delete_comment') {
|
||
$id = (int)($_POST['id'] ?? 0);
|
||
if ($id > 0) {
|
||
commentDelete($id);
|
||
$message = 'Комментарий удалён';
|
||
if ($isAjax) {
|
||
header('Content-Type: application/json; charset=utf-8');
|
||
echo json_encode(['ok' => true, 'message' => $message], JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
}
|
||
}
|
||
} catch (Throwable $e) {
|
||
if ($isAjax) {
|
||
header('Content-Type: application/json; charset=utf-8');
|
||
http_response_code(400);
|
||
echo json_encode(['ok' => false, 'message' => $e->getMessage()], JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
$errors[] = $e->getMessage();
|
||
}
|
||
}
|
||
|
||
$sections = sectionsAll();
|
||
$activeSectionId = (int)($_GET['section_id'] ?? ($_POST['section_id'] ?? ($sections[0]['id'] ?? 0)));
|
||
$activeSection = $activeSectionId > 0 ? sectionById($activeSectionId) : null;
|
||
if (!$activeSection && $sections !== []) {
|
||
$activeSectionId = (int)$sections[0]['id'];
|
||
$activeSection = sectionById($activeSectionId);
|
||
}
|
||
$photos = $activeSectionId > 0 ? photosBySection($activeSectionId) : [];
|
||
$commenters = commentersAll();
|
||
$welcomeText = settingGet('welcome_text', 'Добро пожаловать в галерею. Выберите раздел слева, чтобы посмотреть фотографии.');
|
||
$adminMode = (string)($_GET['mode'] ?? 'photos');
|
||
if ($adminMode === 'media') {
|
||
$adminMode = 'photos';
|
||
}
|
||
if (!in_array($adminMode, ['sections', 'photos', 'commenters', 'comments', 'welcome'], true)) {
|
||
$adminMode = 'photos';
|
||
}
|
||
$previewVersion = (string)time();
|
||
$commentPhotoQuery = trim((string)($_GET['comment_photo'] ?? ($_POST['comment_photo'] ?? '')));
|
||
$commentUserQuery = trim((string)($_GET['comment_user'] ?? ($_POST['comment_user'] ?? '')));
|
||
$filteredComments = commentsSearch($commentPhotoQuery, $commentUserQuery, 200);
|
||
$photoCommentCounts = commentCountsByPhotoIds(array_map(static fn(array $p): int => (int)$p['id'], $photos));
|
||
|
||
function h(string $v): string { return htmlspecialchars($v, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8'); }
|
||
function assetUrl(string $path): string { $f=__DIR__ . '/' . ltrim($path,'/'); $v=is_file($f)?(string)filemtime($f):(string)time(); return $path . '?v=' . rawurlencode($v); }
|
||
|
||
function commentCountsByPhotoIds(array $photoIds): array
|
||
{
|
||
$photoIds = array_values(array_unique(array_map('intval', $photoIds)));
|
||
if ($photoIds === []) {
|
||
return [];
|
||
}
|
||
|
||
$placeholders = implode(',', array_fill(0, count($photoIds), '?'));
|
||
$st = db()->prepare("SELECT photo_id, COUNT(*) AS cnt FROM photo_comments WHERE photo_id IN ($placeholders) GROUP BY photo_id");
|
||
$st->execute($photoIds);
|
||
|
||
$map = [];
|
||
foreach ($st->fetchAll() as $row) {
|
||
$map[(int)$row['photo_id']] = (int)$row['cnt'];
|
||
}
|
||
return $map;
|
||
}
|
||
|
||
function commentsSearch(string $photoQuery, string $userQuery, int $limit = 200): array
|
||
{
|
||
$limit = max(1, min(500, $limit));
|
||
$where = [];
|
||
$params = [];
|
||
|
||
if ($photoQuery !== '') {
|
||
$where[] = 'p.code_name LIKE :photo';
|
||
$params['photo'] = '%' . $photoQuery . '%';
|
||
}
|
||
if ($userQuery !== '') {
|
||
$where[] = 'COALESCE(u.display_name, "") LIKE :user';
|
||
$params['user'] = '%' . $userQuery . '%';
|
||
}
|
||
|
||
$sql = 'SELECT c.id, c.photo_id, c.comment_text, c.created_at, p.code_name, u.display_name
|
||
FROM photo_comments c
|
||
JOIN photos p ON p.id=c.photo_id
|
||
LEFT JOIN comment_users u ON u.id=c.user_id';
|
||
|
||
if ($where !== []) {
|
||
$sql .= ' WHERE ' . implode(' AND ', $where);
|
||
}
|
||
|
||
$sql .= ' ORDER BY c.id DESC LIMIT ' . $limit;
|
||
$st = db()->prepare($sql);
|
||
$st->execute($params);
|
||
return $st->fetchAll();
|
||
}
|
||
|
||
function saveBulkBefore(array $files, int $sectionId): array
|
||
{
|
||
$ok = 0;
|
||
$errors = [];
|
||
|
||
$names = $files['name'] ?? [];
|
||
$tmp = $files['tmp_name'] ?? [];
|
||
$sizes = $files['size'] ?? [];
|
||
$errs = $files['error'] ?? [];
|
||
if (!is_array($names)) {
|
||
$names = [$names];
|
||
$tmp = [$tmp];
|
||
$sizes = [$sizes];
|
||
$errs = [$errs];
|
||
}
|
||
|
||
foreach ($names as $i => $orig) {
|
||
$file = [
|
||
'name' => $orig,
|
||
'tmp_name' => $tmp[$i] ?? '',
|
||
'size' => $sizes[$i] ?? 0,
|
||
'error' => $errs[$i] ?? UPLOAD_ERR_NO_FILE,
|
||
];
|
||
|
||
try {
|
||
$base = (string)pathinfo((string)$orig, PATHINFO_FILENAME);
|
||
$base = trim(preg_replace('/[^\p{L}\p{N}._-]+/u', '_', $base) ?? 'photo', '._-');
|
||
if ($base === '') $base = 'photo';
|
||
|
||
$codeName = nextUniqueCodeName($base);
|
||
$photoId = photoCreate($sectionId, $codeName, null, nextSortOrderForSection($sectionId));
|
||
$saved = saveSingleImage($file, $codeName, $sectionId);
|
||
photoFileUpsert($photoId, 'before', $saved['path'], $saved['mime'], $saved['size']);
|
||
$ok++;
|
||
} catch (Throwable $e) {
|
||
$errors[] = (string)$orig . ': ' . $e->getMessage();
|
||
}
|
||
}
|
||
|
||
return ['ok' => $ok, 'errors' => $errors];
|
||
}
|
||
|
||
function saveSingleImage(array $file, string $baseName, int $sectionId): array
|
||
{
|
||
$allowedMime = ['image/jpeg' => 'jpg', 'image/png' => 'png', 'image/webp' => 'webp', 'image/gif' => 'gif'];
|
||
$err = (int)($file['error'] ?? UPLOAD_ERR_NO_FILE);
|
||
if ($err !== UPLOAD_ERR_OK) throw new RuntimeException('Ошибка загрузки');
|
||
$size = (int)($file['size'] ?? 0);
|
||
if ($size < 1 || $size > MAX_UPLOAD_BYTES) throw new RuntimeException('Превышен лимит 3 МБ');
|
||
|
||
$tmp = (string)($file['tmp_name'] ?? '');
|
||
if (!is_uploaded_file($tmp)) throw new RuntimeException('Некорректный источник');
|
||
|
||
$mime = mime_content_type($tmp) ?: '';
|
||
if (!isset($allowedMime[$mime])) throw new RuntimeException('Недопустимый тип файла');
|
||
|
||
$safeBase = preg_replace('/[^\p{L}\p{N}._-]+/u', '_', $baseName) ?? 'photo';
|
||
$safeBase = trim($safeBase, '._-');
|
||
if ($safeBase === '') $safeBase = 'photo';
|
||
|
||
$ext = $allowedMime[$mime];
|
||
$dir = __DIR__ . '/photos/section_' . $sectionId;
|
||
if (!is_dir($dir)) mkdir($dir, 0775, true);
|
||
$name = uniqueName($dir, $safeBase, $ext);
|
||
$dest = $dir . '/' . $name;
|
||
|
||
if (!move_uploaded_file($tmp, $dest)) throw new RuntimeException('Не удалось сохранить файл');
|
||
|
||
return [
|
||
'path' => 'photos/section_' . $sectionId . '/' . $name,
|
||
'mime' => $mime,
|
||
'size' => $size,
|
||
];
|
||
}
|
||
|
||
function uniqueName(string $dir, string $base, string $ext): string
|
||
{
|
||
$i = 0;
|
||
do {
|
||
$name = $i === 0 ? "{$base}.{$ext}" : "{$base}_{$i}.{$ext}";
|
||
$i++;
|
||
} while (is_file($dir . '/' . $name));
|
||
return $name;
|
||
}
|
||
|
||
function deleteSectionStorage(int $sectionId): void
|
||
{
|
||
$dir = __DIR__ . '/photos/section_' . $sectionId;
|
||
if (!is_dir($dir)) {
|
||
return;
|
||
}
|
||
|
||
deleteDirRecursive($dir);
|
||
}
|
||
|
||
function deleteDirRecursive(string $dir): void
|
||
{
|
||
$items = scandir($dir);
|
||
if (!is_array($items)) {
|
||
return;
|
||
}
|
||
|
||
foreach ($items as $item) {
|
||
if ($item === '.' || $item === '..') {
|
||
continue;
|
||
}
|
||
|
||
$path = $dir . '/' . $item;
|
||
if (is_dir($path)) {
|
||
deleteDirRecursive($path);
|
||
continue;
|
||
}
|
||
|
||
@unlink($path);
|
||
}
|
||
|
||
@rmdir($dir);
|
||
}
|
||
|
||
function removeSectionImageFiles(int $sectionId): void
|
||
{
|
||
$st = db()->prepare('SELECT pf.file_path
|
||
FROM photo_files pf
|
||
JOIN photos p ON p.id = pf.photo_id
|
||
WHERE p.section_id = :sid');
|
||
$st->execute(['sid' => $sectionId]);
|
||
$paths = $st->fetchAll(PDO::FETCH_COLUMN);
|
||
if (!is_array($paths)) {
|
||
return;
|
||
}
|
||
|
||
foreach ($paths as $path) {
|
||
if (!is_string($path) || $path === '') {
|
||
continue;
|
||
}
|
||
|
||
$abs = __DIR__ . '/' . ltrim($path, '/');
|
||
if (is_file($abs)) {
|
||
@unlink($abs);
|
||
}
|
||
}
|
||
}
|
||
|
||
function rotateImageOnDisk(string $path, int $degrees): void
|
||
{
|
||
$mime = mime_content_type($path) ?: '';
|
||
if (!in_array($mime, ['image/jpeg', 'image/png', 'image/webp', 'image/gif'], true)) {
|
||
throw new RuntimeException('Недопустимый тип файла для поворота');
|
||
}
|
||
|
||
if (extension_loaded('imagick')) {
|
||
$im = new Imagick($path);
|
||
$im->setImageOrientation(Imagick::ORIENTATION_TOPLEFT);
|
||
$im->rotateImage(new ImagickPixel('none'), $degrees);
|
||
$im->setImagePage(0, 0, 0, 0);
|
||
if ($mime === 'image/jpeg') {
|
||
$im->setImageCompressionQuality(92);
|
||
}
|
||
$im->writeImage($path);
|
||
$im->clear();
|
||
$im->destroy();
|
||
return;
|
||
}
|
||
|
||
$src = match ($mime) {
|
||
'image/jpeg' => @imagecreatefromjpeg($path),
|
||
'image/png' => @imagecreatefrompng($path),
|
||
'image/webp' => function_exists('imagecreatefromwebp') ? @imagecreatefromwebp($path) : false,
|
||
'image/gif' => @imagecreatefromgif($path),
|
||
default => false,
|
||
};
|
||
if (!$src) {
|
||
throw new RuntimeException('Не удалось открыть изображение');
|
||
}
|
||
|
||
$bgColor = 0;
|
||
if ($mime === 'image/png' || $mime === 'image/webp') {
|
||
$bgColor = imagecolorallocatealpha($src, 0, 0, 0, 127);
|
||
}
|
||
|
||
$rotated = imagerotate($src, -$degrees, $bgColor);
|
||
if (!$rotated) {
|
||
imagedestroy($src);
|
||
throw new RuntimeException('Не удалось повернуть изображение');
|
||
}
|
||
|
||
if ($mime === 'image/png' || $mime === 'image/webp') {
|
||
imagealphablending($rotated, false);
|
||
imagesavealpha($rotated, true);
|
||
}
|
||
|
||
$ok = match ($mime) {
|
||
'image/jpeg' => imagejpeg($rotated, $path, 92),
|
||
'image/png' => imagepng($rotated, $path),
|
||
'image/webp' => function_exists('imagewebp') ? imagewebp($rotated, $path, 92) : false,
|
||
'image/gif' => imagegif($rotated, $path),
|
||
default => false,
|
||
};
|
||
|
||
imagedestroy($src);
|
||
imagedestroy($rotated);
|
||
|
||
if (!$ok) {
|
||
throw new RuntimeException('Не удалось сохранить повернутое изображение');
|
||
}
|
||
}
|
||
|
||
function nextSortOrderForSection(int $sectionId): int
|
||
{
|
||
$st = db()->prepare('SELECT COALESCE(MAX(sort_order),0)+10 FROM photos WHERE section_id=:sid');
|
||
$st->execute(['sid' => $sectionId]);
|
||
return (int)$st->fetchColumn();
|
||
}
|
||
|
||
function nextUniqueCodeName(string $base): string
|
||
{
|
||
$candidate = $base;
|
||
$i = 1;
|
||
while (true) {
|
||
$st = db()->prepare('SELECT 1 FROM photos WHERE code_name=:c LIMIT 1');
|
||
$st->execute(['c' => $candidate]);
|
||
if (!$st->fetchColumn()) {
|
||
return $candidate;
|
||
}
|
||
$candidate = $base . '_' . $i;
|
||
$i++;
|
||
}
|
||
}
|
||
?>
|
||
<!doctype html>
|
||
<html lang="ru">
|
||
<head>
|
||
<meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
|
||
<title>Админка</title>
|
||
<link rel="icon" type="image/svg+xml" href="<?= h(assetUrl('favicon.svg')) ?>">
|
||
<link rel="stylesheet" href="<?= h(assetUrl('style.css')) ?>">
|
||
<style>
|
||
.wrap{max-width:1180px;margin:0 auto;padding:24px}
|
||
.card{background:#fff;border:1px solid #e5e7eb;border-radius:12px;padding:14px;margin-bottom:14px}
|
||
.grid{display:grid;gap:12px;grid-template-columns:320px 1fr}
|
||
.in{width:100%;padding:8px;border:1px solid #d1d5db;border-radius:8px}
|
||
.btn{border:0;background:#1f6feb;color:#fff;padding:8px 12px;border-radius:8px;cursor:pointer;display:inline-flex;align-items:center;justify-content:center;white-space:nowrap}
|
||
.btn-danger{background:#b42318}
|
||
.btn-secondary{background:#eaf1ff;color:#1f6feb}
|
||
.btn-xs{padding:6px 8px;font-size:12px;line-height:1}
|
||
.ok{background:#ecfdf3;padding:8px;border-radius:8px;margin-bottom:8px}
|
||
.err{background:#fef2f2;padding:8px;border-radius:8px;margin-bottom:8px}
|
||
.tbl{width:100%;border-collapse:collapse}
|
||
.tbl td,.tbl th{padding:8px;border-bottom:1px solid #eee;vertical-align:top}
|
||
.sec a{display:block;padding:8px 10px;border-radius:8px;text-decoration:none;color:#111}
|
||
.sec a.active{background:#eef4ff;color:#1f6feb}
|
||
.small{font-size:12px;color:#667085}
|
||
.inline-form{margin:0}
|
||
.preview-actions{display:flex;gap:6px;margin-top:6px;flex-wrap:nowrap}
|
||
.preview-actions form{margin:0}
|
||
.row-actions{display:flex;flex-direction:column;align-items:flex-start;gap:8px}
|
||
.modal{position:fixed;inset:0;z-index:90;display:flex;align-items:center;justify-content:center;padding:16px}
|
||
.modal[hidden]{display:none}
|
||
.modal-backdrop{position:absolute;inset:0;background:rgba(15,23,42,.44)}
|
||
.modal-card{position:relative;z-index:1;max-width:760px;width:min(100%,760px);max-height:80dvh;overflow:auto;background:#fff;border:1px solid #dbe3ef;border-radius:12px;padding:14px;box-shadow:0 24px 48px rgba(15,23,42,.22)}
|
||
.modal-head{display:flex;align-items:center;justify-content:space-between;gap:10px;margin-bottom:10px}
|
||
.modal-close{border:0;background:#eef2ff;color:#1f6feb;width:32px;height:32px;border-radius:8px;font-size:22px;line-height:1;cursor:pointer}
|
||
.comment-row{padding:10px 0;border-top:1px solid #eef2f7}
|
||
.comment-row:first-child{border-top:0;padding-top:0}
|
||
.comment-row-head{display:flex;align-items:center;justify-content:space-between;gap:8px;margin-bottom:6px}
|
||
.comment-row-body{white-space:pre-wrap}
|
||
.comment-search{display:grid;grid-template-columns:minmax(180px,1fr) minmax(180px,1fr) auto auto;gap:8px;align-items:center;margin-bottom:12px}
|
||
.comment-search .btn{height:36px}
|
||
@media (max-width:760px){.comment-search{grid-template-columns:1fr}}
|
||
@media (max-width:960px){.grid{grid-template-columns:1fr}}
|
||
</style>
|
||
</head>
|
||
<body><div class="wrap">
|
||
<h1>Админка</h1>
|
||
<?php if ($message!==''): ?><div class="ok"><?= h($message) ?></div><?php endif; ?>
|
||
<?php foreach($errors as $e): ?><div class="err"><?= h($e) ?></div><?php endforeach; ?>
|
||
|
||
<div class="grid">
|
||
<aside>
|
||
<section class="card">
|
||
<h3>Меню</h3>
|
||
<div class="sec">
|
||
<a class="<?= $adminMode==='sections'?'active':'' ?>" href="?token=<?= urlencode($tokenIncoming) ?>&mode=sections<?= $activeSectionId>0 ? '§ion_id='.(int)$activeSectionId : '' ?>">Разделы</a>
|
||
<a class="<?= $adminMode==='photos'?'active':'' ?>" href="?token=<?= urlencode($tokenIncoming) ?>&mode=photos<?= $activeSectionId>0 ? '§ion_id='.(int)$activeSectionId : '' ?>">Фото</a>
|
||
<a class="<?= $adminMode==='welcome'?'active':'' ?>" href="?token=<?= urlencode($tokenIncoming) ?>&mode=welcome">Приветственное сообщение</a>
|
||
<a class="<?= $adminMode==='commenters'?'active':'' ?>" href="?token=<?= urlencode($tokenIncoming) ?>&mode=commenters">Пользователи комментариев</a>
|
||
<a class="<?= $adminMode==='comments'?'active':'' ?>" href="?token=<?= urlencode($tokenIncoming) ?>&mode=comments">Комментарии</a>
|
||
</div>
|
||
</section>
|
||
|
||
<?php if ($adminMode === 'sections' || $adminMode === 'photos'): ?>
|
||
<section class="card">
|
||
<h3><?= $adminMode === 'sections' ? 'Разделы' : 'Выбор раздела для фото' ?></h3>
|
||
<div class="sec">
|
||
<?php foreach($sections as $s): ?>
|
||
<a class="<?= (int)$s['id']===$activeSectionId?'active':'' ?>" href="?token=<?= urlencode($tokenIncoming) ?>&mode=<?= h($adminMode) ?>§ion_id=<?= (int)$s['id'] ?>"><?= h((string)$s['name']) ?> <span class="small">(<?= (int)$s['photos_count'] ?>)</span></a>
|
||
<?php endforeach; ?>
|
||
</div>
|
||
|
||
<?php if ($adminMode === 'photos' && !$activeSection): ?>
|
||
<div class="small" style="margin-top:8px">Создай раздел во вкладке "Разделы", чтобы загружать фото.</div>
|
||
<?php endif; ?>
|
||
</section>
|
||
|
||
<?php endif; ?>
|
||
|
||
<?php if ($adminMode === 'commenters'): ?>
|
||
<section class="card">
|
||
<h3>Новый пользователь комментариев</h3>
|
||
<form method="post" action="?token=<?= urlencode($tokenIncoming) ?>&mode=commenters">
|
||
<input type="hidden" name="action" value="create_commenter"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>">
|
||
<p><input class="in" name="display_name" placeholder="Имя" required></p>
|
||
<button class="btn" type="submit">Создать</button>
|
||
</form>
|
||
<div class="small" style="margin-top:8px">Ссылка доступа показывается в зелёном сообщении после создания.</div>
|
||
</section>
|
||
<?php endif; ?>
|
||
</aside>
|
||
|
||
<main>
|
||
<?php if ($adminMode === 'welcome'): ?>
|
||
<section class="card">
|
||
<h3>Приветственное сообщение (публичная часть)</h3>
|
||
<form method="post" action="?token=<?= urlencode($tokenIncoming) ?>&mode=welcome">
|
||
<input type="hidden" name="action" value="update_welcome"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>">
|
||
<p><textarea class="in" name="welcome_text" rows="5" placeholder="Текст приветствия"><?= h($welcomeText) ?></textarea></p>
|
||
<button class="btn" type="submit">Сохранить приветствие</button>
|
||
</form>
|
||
</section>
|
||
<?php endif; ?>
|
||
|
||
<?php if ($adminMode === 'sections'): ?>
|
||
<section class="card">
|
||
<h3>Редактировать выбранный раздел</h3>
|
||
<?php if ($activeSection): ?>
|
||
<form class="js-section-form" method="post" action="?token=<?= urlencode($tokenIncoming) ?>&mode=sections§ion_id=<?= (int)$activeSectionId ?>">
|
||
<input type="hidden" name="action" value="update_section"><input type="hidden" name="ajax" value="1"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="section_id" value="<?= (int)$activeSectionId ?>">
|
||
<p><input class="in" name="name" value="<?= h((string)$activeSection['name']) ?>" required></p>
|
||
<p><input class="in" type="number" name="sort_order" value="<?= (int)$activeSection['sort_order'] ?>"></p>
|
||
<div class="small js-save-status">Сохраняется автоматически при выходе из поля.</div>
|
||
</form>
|
||
<form method="post" action="?token=<?= urlencode($tokenIncoming) ?>&mode=sections" onsubmit="return confirmSectionDelete()" style="margin-top:8px">
|
||
<input type="hidden" name="action" value="delete_section"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="section_id" value="<?= (int)$activeSectionId ?>">
|
||
<button class="btn btn-danger" type="submit">Удалить раздел</button>
|
||
</form>
|
||
<?php else: ?>
|
||
<p class="small">Нет разделов для редактирования.</p>
|
||
<?php endif; ?>
|
||
</section>
|
||
|
||
<section class="card">
|
||
<h3>Создать раздел</h3>
|
||
<form method="post" action="?token=<?= urlencode($tokenIncoming) ?>&mode=sections">
|
||
<input type="hidden" name="action" value="create_section"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>">
|
||
<p><input class="in" name="name" placeholder="Новый раздел" required></p>
|
||
<p><input class="in" type="number" name="sort_order" value="1000"></p>
|
||
<button class="btn" type="submit">Создать раздел</button>
|
||
</form>
|
||
</section>
|
||
|
||
<?php endif; ?>
|
||
|
||
<?php if ($adminMode === 'photos'): ?>
|
||
<section class="card">
|
||
<h3>Загрузка фото “до” в выбранный раздел</h3>
|
||
<?php if ($activeSectionId > 0): ?>
|
||
<form method="post" enctype="multipart/form-data" action="?token=<?= urlencode($tokenIncoming) ?>&mode=photos§ion_id=<?= (int)$activeSectionId ?>">
|
||
<input type="hidden" name="action" value="upload_before_bulk"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="section_id" value="<?= (int)$activeSectionId ?>">
|
||
<p><input type="file" name="before_bulk[]" accept="image/jpeg,image/png,image/webp,image/gif" multiple required></p>
|
||
<button class="btn" type="submit">Загрузить массово</button>
|
||
</form>
|
||
<p class="small">После загрузки имя (code_name) заполняется автоматически из имени файла — затем можно отредактировать.</p>
|
||
<?php else: ?>
|
||
<p class="small">Сначала выбери раздел слева.</p>
|
||
<?php endif; ?>
|
||
</section>
|
||
|
||
<section class="card">
|
||
<h3>Фото в разделе</h3>
|
||
<table class="tbl">
|
||
<tr><th>До</th><th>После</th><th>Поля</th><th>Действия</th></tr>
|
||
<?php foreach($photos as $p): ?>
|
||
<?php $photoCommentCount = (int)($photoCommentCounts[(int)$p['id']] ?? 0); ?>
|
||
<tr>
|
||
<td>
|
||
<?php if (!empty($p['before_file_id'])): ?>
|
||
<img class="js-open js-preview-image" data-photo-id="<?= (int)$p['id'] ?>" data-kind="before" data-full="index.php?action=image&file_id=<?= (int)$p['before_file_id'] ?>&v=<?= urlencode($previewVersion) ?>" src="index.php?action=image&file_id=<?= (int)$p['before_file_id'] ?>&v=<?= urlencode($previewVersion) ?>" style="cursor:zoom-in;width:100px;height:70px;object-fit:cover;border:1px solid #e5e7eb;border-radius:6px">
|
||
<div class="preview-actions">
|
||
<form class="inline-form js-rotate-form" method="post" action="?token=<?= urlencode($tokenIncoming) ?>§ion_id=<?= (int)$activeSectionId ?>&mode=photos">
|
||
<input type="hidden" name="action" value="rotate_photo_file"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="photo_id" value="<?= (int)$p['id'] ?>"><input type="hidden" name="kind" value="before"><input type="hidden" name="direction" value="left">
|
||
<button class="btn btn-secondary btn-xs" type="submit">↺ 90°</button>
|
||
</form>
|
||
<form class="inline-form js-rotate-form" method="post" action="?token=<?= urlencode($tokenIncoming) ?>§ion_id=<?= (int)$activeSectionId ?>&mode=photos">
|
||
<input type="hidden" name="action" value="rotate_photo_file"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="photo_id" value="<?= (int)$p['id'] ?>"><input type="hidden" name="kind" value="before"><input type="hidden" name="direction" value="right">
|
||
<button class="btn btn-secondary btn-xs" type="submit">↻ 90°</button>
|
||
</form>
|
||
</div>
|
||
<?php endif; ?>
|
||
</td>
|
||
<td>
|
||
<?php if (!empty($p['after_file_id'])): ?>
|
||
<img class="js-open js-preview-image" data-photo-id="<?= (int)$p['id'] ?>" data-kind="after" data-full="index.php?action=image&file_id=<?= (int)$p['after_file_id'] ?>&v=<?= urlencode($previewVersion) ?>" src="index.php?action=image&file_id=<?= (int)$p['after_file_id'] ?>&v=<?= urlencode($previewVersion) ?>" style="cursor:zoom-in;width:100px;height:70px;object-fit:cover;border:1px solid #e5e7eb;border-radius:6px">
|
||
<div class="preview-actions">
|
||
<form class="inline-form js-rotate-form" method="post" action="?token=<?= urlencode($tokenIncoming) ?>§ion_id=<?= (int)$activeSectionId ?>&mode=photos">
|
||
<input type="hidden" name="action" value="rotate_photo_file"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="photo_id" value="<?= (int)$p['id'] ?>"><input type="hidden" name="kind" value="after"><input type="hidden" name="direction" value="left">
|
||
<button class="btn btn-secondary btn-xs" type="submit">↺ 90°</button>
|
||
</form>
|
||
<form class="inline-form js-rotate-form" method="post" action="?token=<?= urlencode($tokenIncoming) ?>§ion_id=<?= (int)$activeSectionId ?>&mode=photos">
|
||
<input type="hidden" name="action" value="rotate_photo_file"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="photo_id" value="<?= (int)$p['id'] ?>"><input type="hidden" name="kind" value="after"><input type="hidden" name="direction" value="right">
|
||
<button class="btn btn-secondary btn-xs" type="submit">↻ 90°</button>
|
||
</form>
|
||
</div>
|
||
<?php endif; ?>
|
||
</td>
|
||
<td>
|
||
<form class="js-photo-form" method="post" enctype="multipart/form-data" action="admin.php?token=<?= urlencode($tokenIncoming) ?>§ion_id=<?= (int)$activeSectionId ?>&mode=photos">
|
||
<input type="hidden" name="action" value="photo_update"><input type="hidden" name="ajax" value="1"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="photo_id" value="<?= (int)$p['id'] ?>">
|
||
<p><input class="in" name="code_name" value="<?= h((string)$p['code_name']) ?>"></p>
|
||
<p><input class="in" type="number" name="sort_order" value="<?= (int)$p['sort_order'] ?>"></p>
|
||
<p><label class="small" for="descr-<?= (int)$p['id'] ?>">Описание фотографии</label><textarea id="descr-<?= (int)$p['id'] ?>" class="in" name="description" placeholder="Описание фотографии"><?= h((string)($p['description'] ?? '')) ?></textarea></p>
|
||
<p class="small">Фото после (опционально): <input type="file" name="after" accept="image/jpeg,image/png,image/webp,image/gif"></p>
|
||
<div class="small js-save-status">Сохраняется автоматически при выходе из карточки.</div>
|
||
</form>
|
||
</td>
|
||
<td>
|
||
<div class="row-actions">
|
||
<div class="js-comment-indicator" data-photo-id="<?= (int)$p['id'] ?>" data-photo-name="<?= h((string)$p['code_name']) ?>">
|
||
<?php if ($photoCommentCount > 0): ?>
|
||
<button class="btn btn-secondary btn-xs js-open-comments" type="button" data-photo-id="<?= (int)$p['id'] ?>" data-photo-name="<?= h((string)$p['code_name']) ?>" data-comment-count="<?= $photoCommentCount ?>">Комментарии (<?= $photoCommentCount ?>)</button>
|
||
<?php else: ?>
|
||
<span class="small">Комментариев нет</span>
|
||
<?php endif; ?>
|
||
</div>
|
||
<form class="inline-form" method="post" action="?token=<?= urlencode($tokenIncoming) ?>§ion_id=<?= (int)$activeSectionId ?>&mode=photos" onsubmit="return confirm('Удалить фото?')">
|
||
<input type="hidden" name="action" value="photo_delete"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="photo_id" value="<?= (int)$p['id'] ?>">
|
||
<button class="btn btn-danger" type="submit">Удалить</button>
|
||
</form>
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
<?php endforeach; ?>
|
||
</table>
|
||
</section>
|
||
|
||
<?php endif; ?>
|
||
|
||
<?php if ($adminMode === 'commenters'): ?>
|
||
<section class="card">
|
||
<h3>Пользователи комментариев</h3>
|
||
<table class="tbl"><tr><th>Пользователь</th><th>Ссылка</th><th>Действия</th></tr>
|
||
<?php foreach($commenters as $u): ?>
|
||
<?php $viewerLink = !empty($u['token_plain']) ? ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http') . '://' . ($_SERVER['HTTP_HOST'] ?? 'localhost') . '/?viewer=' . urlencode((string)$u['token_plain'])) : ''; ?>
|
||
<tr><td><?= h((string)$u['display_name']) ?></td><td>
|
||
<?php if ($viewerLink !== ''): ?>
|
||
<input class="in" type="text" readonly value="<?= h($viewerLink) ?>" onclick="this.select()" style="min-width:320px">
|
||
<?php else: ?>
|
||
<span class="small">Нет сохранённой ссылки (старый пользователь)</span>
|
||
<?php endif; ?>
|
||
</td><td style="display:flex;gap:8px;flex-wrap:wrap">
|
||
<form method="post" action="?token=<?= urlencode($tokenIncoming) ?>&mode=commenters">
|
||
<input type="hidden" name="action" value="regenerate_commenter_token"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="id" value="<?= (int)$u['id'] ?>">
|
||
<button class="btn" type="submit">Новая ссылка</button>
|
||
</form>
|
||
<form method="post" action="?token=<?= urlencode($tokenIncoming) ?>&mode=commenters" onsubmit="return confirm('Удалить пользователя?')">
|
||
<input type="hidden" name="action" value="delete_commenter"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="id" value="<?= (int)$u['id'] ?>">
|
||
<button class="btn btn-danger" type="submit">Удалить доступ</button>
|
||
</form>
|
||
</td></tr>
|
||
<?php endforeach; ?>
|
||
</table>
|
||
</section>
|
||
<?php endif; ?>
|
||
|
||
<?php if ($adminMode === 'comments'): ?>
|
||
<section class="card">
|
||
<h3>Комментарии</h3>
|
||
<form method="get" action="admin.php" class="comment-search">
|
||
<input type="hidden" name="token" value="<?= h($tokenIncoming) ?>">
|
||
<input type="hidden" name="mode" value="comments">
|
||
<input class="in" type="search" name="comment_photo" value="<?= h($commentPhotoQuery) ?>" placeholder="Поиск по имени фото">
|
||
<input class="in" type="search" name="comment_user" value="<?= h($commentUserQuery) ?>" placeholder="Поиск по пользователю">
|
||
<button class="btn" type="submit">Найти</button>
|
||
<a class="btn btn-secondary" href="?token=<?= urlencode($tokenIncoming) ?>&mode=comments">Сбросить</a>
|
||
</form>
|
||
|
||
<?php if ($filteredComments === []): ?>
|
||
<p class="small">Комментарии не найдены.</p>
|
||
<?php else: ?>
|
||
<table class="tbl"><tr><th>Фото</th><th>Пользователь</th><th>Комментарий</th><th>Дата</th><th></th></tr>
|
||
<?php foreach($filteredComments as $c): ?>
|
||
<tr>
|
||
<td><?= h((string)$c['code_name']) ?></td>
|
||
<td><?= h((string)($c['display_name'] ?? '—')) ?></td>
|
||
<td><?= h((string)$c['comment_text']) ?></td>
|
||
<td><?= h((string)$c['created_at']) ?></td>
|
||
<td>
|
||
<form method="post" action="?token=<?= urlencode($tokenIncoming) ?>&mode=comments" onsubmit="return confirm('Удалить комментарий?')">
|
||
<input type="hidden" name="action" value="delete_comment"><input type="hidden" name="token" value="<?= h($tokenIncoming) ?>"><input type="hidden" name="id" value="<?= (int)$c['id'] ?>"><input type="hidden" name="comment_photo" value="<?= h($commentPhotoQuery) ?>"><input type="hidden" name="comment_user" value="<?= h($commentUserQuery) ?>">
|
||
<button class="btn btn-danger" type="submit">Удалить</button>
|
||
</form>
|
||
</td>
|
||
</tr>
|
||
<?php endforeach; ?>
|
||
</table>
|
||
<?php endif; ?>
|
||
</section>
|
||
<?php endif; ?>
|
||
</main>
|
||
</div>
|
||
</div>
|
||
<div class="lightbox" id="lightbox" hidden>
|
||
<div class="lightbox-backdrop js-close"></div>
|
||
<div class="lightbox-content">
|
||
<button class="lightbox-close js-close" type="button" aria-label="Закрыть">×</button>
|
||
<img id="lightboxImage" src="" alt="">
|
||
</div>
|
||
</div>
|
||
<div class="modal" id="commentsModal" hidden>
|
||
<button class="modal-backdrop js-comments-close" type="button" aria-label="Закрыть окно комментариев"></button>
|
||
<section class="modal-card" role="dialog" aria-modal="true" aria-labelledby="commentsModalTitle">
|
||
<div class="modal-head">
|
||
<h3 id="commentsModalTitle" style="margin:0">Комментарии</h3>
|
||
<button class="modal-close js-comments-close" type="button" aria-label="Закрыть окно комментариев">×</button>
|
||
</div>
|
||
<div id="commentsModalBody" class="small">Загрузка...</div>
|
||
</section>
|
||
</div>
|
||
<script>
|
||
(() => {
|
||
const setupAutosave = (formSelector) => {
|
||
document.querySelectorAll(formSelector).forEach((form) => {
|
||
let dirty = false;
|
||
let busy = false;
|
||
let timer = null;
|
||
const status = form.querySelector('.js-save-status');
|
||
const ajaxInput = form.querySelector('input[name="ajax"]');
|
||
|
||
const setStatus = (text, isError = false) => {
|
||
if (!status) return;
|
||
status.textContent = text;
|
||
status.style.color = isError ? '#b42318' : '#667085';
|
||
};
|
||
|
||
const mark = () => {
|
||
dirty = true;
|
||
setStatus('Есть несохранённые изменения…');
|
||
};
|
||
|
||
form.querySelectorAll('input,textarea,select').forEach((el) => {
|
||
if (el.type === 'file') {
|
||
el.addEventListener('change', () => {
|
||
if (!el.files || el.files.length === 0) return;
|
||
if (ajaxInput) ajaxInput.value = '0';
|
||
setStatus('Загрузка файла…');
|
||
form.submit();
|
||
});
|
||
return;
|
||
}
|
||
|
||
el.addEventListener('input', mark);
|
||
el.addEventListener('change', mark);
|
||
el.addEventListener('blur', () => queueSave(80));
|
||
});
|
||
|
||
form.addEventListener('focusout', () => queueSave(120));
|
||
|
||
function queueSave(delay) {
|
||
clearTimeout(timer);
|
||
timer = setTimeout(() => {
|
||
if (form.contains(document.activeElement)) return;
|
||
submitNow();
|
||
}, delay);
|
||
}
|
||
|
||
async function submitNow() {
|
||
if (!dirty || busy) return;
|
||
busy = true;
|
||
setStatus('Сохраняю…');
|
||
|
||
try {
|
||
if (ajaxInput) ajaxInput.value = '1';
|
||
const fd = new FormData(form);
|
||
const endpoint = form.getAttribute('action') || window.location.href;
|
||
const r = await fetch(endpoint, {
|
||
method: 'POST',
|
||
body: fd,
|
||
headers: {
|
||
'X-Requested-With': 'XMLHttpRequest',
|
||
'Accept': 'application/json'
|
||
}
|
||
});
|
||
|
||
const raw = await r.text();
|
||
let j = null;
|
||
try {
|
||
j = JSON.parse(raw);
|
||
} catch {
|
||
throw new Error(raw.slice(0, 180) || 'Некорректный ответ сервера');
|
||
}
|
||
|
||
if (!r.ok || !j.ok) {
|
||
throw new Error(j?.message || 'Ошибка сохранения');
|
||
}
|
||
|
||
dirty = false;
|
||
setStatus('Сохранено');
|
||
} catch (e) {
|
||
console.warn('save failed', e);
|
||
setStatus('Ошибка сохранения: ' + (e?.message || 'unknown'), true);
|
||
} finally {
|
||
busy = false;
|
||
}
|
||
}
|
||
});
|
||
};
|
||
|
||
setupAutosave('.js-photo-form');
|
||
setupAutosave('.js-section-form');
|
||
|
||
window.confirmSectionDelete = () => {
|
||
const first = confirm('Удалить раздел?');
|
||
if (!first) {
|
||
return false;
|
||
}
|
||
|
||
return confirm('Будут удалены все фото в разделе (и версии "до", и версии "после"). Продолжить?');
|
||
};
|
||
|
||
const adminToken = <?= json_encode($tokenIncoming, JSON_UNESCAPED_UNICODE) ?>;
|
||
const commentsModal = document.getElementById('commentsModal');
|
||
const commentsModalTitle = document.getElementById('commentsModalTitle');
|
||
const commentsModalBody = document.getElementById('commentsModalBody');
|
||
let activePhotoId = 0;
|
||
let activePhotoName = '';
|
||
let activeCommentCount = 0;
|
||
|
||
const withFreshVersion = (url) => {
|
||
const u = new URL(url, window.location.href);
|
||
u.searchParams.set('v', String(Date.now()));
|
||
return `${u.pathname}${u.search}`;
|
||
};
|
||
|
||
const refreshPreviewImages = (photoId, kind) => {
|
||
document.querySelectorAll(`.js-preview-image[data-photo-id="${photoId}"][data-kind="${kind}"]`).forEach((imgEl) => {
|
||
const src = imgEl.getAttribute('src');
|
||
const full = imgEl.getAttribute('data-full');
|
||
if (src) {
|
||
imgEl.setAttribute('src', withFreshVersion(src));
|
||
}
|
||
if (full) {
|
||
imgEl.setAttribute('data-full', withFreshVersion(full));
|
||
}
|
||
});
|
||
};
|
||
|
||
document.querySelectorAll('.js-rotate-form').forEach((form) => {
|
||
form.addEventListener('submit', async (e) => {
|
||
e.preventDefault();
|
||
if (form.dataset.busy === '1') {
|
||
return;
|
||
}
|
||
|
||
const group = form.closest('.preview-actions');
|
||
const buttons = group ? group.querySelectorAll('button') : form.querySelectorAll('button');
|
||
form.dataset.busy = '1';
|
||
buttons.forEach((btn) => {
|
||
btn.disabled = true;
|
||
});
|
||
|
||
const fd = new FormData(form);
|
||
fd.set('ajax', '1');
|
||
try {
|
||
const endpoint = form.getAttribute('action') || window.location.href;
|
||
const r = await fetch(endpoint, {
|
||
method: 'POST',
|
||
body: fd,
|
||
headers: {
|
||
'X-Requested-With': 'XMLHttpRequest',
|
||
'Accept': 'application/json',
|
||
},
|
||
});
|
||
|
||
const raw = await r.text();
|
||
let j = null;
|
||
try {
|
||
j = JSON.parse(raw);
|
||
} catch {
|
||
throw new Error(raw.slice(0, 180) || 'Некорректный ответ сервера');
|
||
}
|
||
|
||
if (!r.ok || !j.ok) {
|
||
throw new Error(j?.message || 'Ошибка поворота');
|
||
}
|
||
|
||
const photoId = Number(fd.get('photo_id') || 0);
|
||
const kind = String(fd.get('kind') || '');
|
||
if (photoId > 0 && (kind === 'before' || kind === 'after')) {
|
||
refreshPreviewImages(photoId, kind);
|
||
}
|
||
} catch (err) {
|
||
alert('Не удалось повернуть фото: ' + (err?.message || 'unknown'));
|
||
} finally {
|
||
form.dataset.busy = '0';
|
||
buttons.forEach((btn) => {
|
||
btn.disabled = false;
|
||
});
|
||
}
|
||
});
|
||
});
|
||
|
||
const closeCommentsModal = () => {
|
||
if (!commentsModal) return;
|
||
commentsModal.hidden = true;
|
||
document.body.style.overflow = '';
|
||
};
|
||
|
||
const renderCommentIndicator = (photoId, photoName, count) => {
|
||
document.querySelectorAll(`.js-comment-indicator[data-photo-id="${photoId}"]`).forEach((wrap) => {
|
||
wrap.textContent = '';
|
||
if (count > 0) {
|
||
const btn = document.createElement('button');
|
||
btn.type = 'button';
|
||
btn.className = 'btn btn-secondary btn-xs js-open-comments';
|
||
btn.dataset.photoId = String(photoId);
|
||
btn.dataset.photoName = photoName;
|
||
btn.dataset.commentCount = String(count);
|
||
btn.textContent = `Комментарии (${count})`;
|
||
wrap.appendChild(btn);
|
||
} else {
|
||
const span = document.createElement('span');
|
||
span.className = 'small';
|
||
span.textContent = 'Комментариев нет';
|
||
wrap.appendChild(span);
|
||
}
|
||
});
|
||
};
|
||
|
||
const renderCommentsList = (comments) => {
|
||
if (!commentsModalBody) return;
|
||
commentsModalBody.textContent = '';
|
||
|
||
if (!Array.isArray(comments) || comments.length === 0) {
|
||
const empty = document.createElement('p');
|
||
empty.className = 'small';
|
||
empty.textContent = 'К этой карточке комментариев пока нет.';
|
||
commentsModalBody.appendChild(empty);
|
||
return;
|
||
}
|
||
|
||
comments.forEach((item) => {
|
||
const row = document.createElement('article');
|
||
row.className = 'comment-row';
|
||
row.dataset.commentId = String(item.id || 0);
|
||
|
||
const head = document.createElement('div');
|
||
head.className = 'comment-row-head';
|
||
|
||
const meta = document.createElement('div');
|
||
meta.className = 'small';
|
||
const displayName = item.display_name || '—';
|
||
const createdAt = item.created_at || '';
|
||
meta.textContent = `${displayName}${createdAt ? ' · ' + createdAt : ''}`;
|
||
|
||
const del = document.createElement('button');
|
||
del.type = 'button';
|
||
del.className = 'btn btn-danger btn-xs js-delete-comment';
|
||
del.dataset.commentId = String(item.id || 0);
|
||
del.textContent = 'Удалить';
|
||
|
||
head.append(meta, del);
|
||
|
||
const body = document.createElement('div');
|
||
body.className = 'comment-row-body';
|
||
body.textContent = item.comment_text || '';
|
||
|
||
row.append(head, body);
|
||
commentsModalBody.appendChild(row);
|
||
});
|
||
};
|
||
|
||
const openCommentsModal = async (photoId, photoName, count) => {
|
||
if (!commentsModal || !commentsModalBody || !commentsModalTitle) return;
|
||
|
||
activePhotoId = photoId;
|
||
activePhotoName = photoName;
|
||
activeCommentCount = Number.isFinite(count) ? count : 0;
|
||
commentsModalTitle.textContent = `Комментарии к фото: ${photoName}`;
|
||
commentsModalBody.textContent = 'Загрузка...';
|
||
commentsModal.hidden = false;
|
||
document.body.style.overflow = 'hidden';
|
||
|
||
try {
|
||
const endpoint = `${window.location.pathname}?token=${encodeURIComponent(adminToken)}&action=photo_comments&photo_id=${photoId}`;
|
||
const r = await fetch(endpoint, { headers: { 'Accept': 'application/json' } });
|
||
const j = await r.json();
|
||
if (!r.ok || !j.ok) {
|
||
throw new Error(j?.message || 'Не удалось загрузить комментарии');
|
||
}
|
||
renderCommentsList(j.comments || []);
|
||
} catch (e) {
|
||
commentsModalBody.textContent = `Ошибка загрузки: ${e?.message || 'unknown'}`;
|
||
}
|
||
};
|
||
|
||
document.addEventListener('click', (e) => {
|
||
const openBtn = e.target.closest('.js-open-comments');
|
||
if (openBtn) {
|
||
const photoId = Number(openBtn.dataset.photoId || 0);
|
||
if (photoId > 0) {
|
||
openCommentsModal(photoId, openBtn.dataset.photoName || '', Number(openBtn.dataset.commentCount || 0));
|
||
}
|
||
return;
|
||
}
|
||
|
||
if (e.target.closest('.js-comments-close')) {
|
||
closeCommentsModal();
|
||
return;
|
||
}
|
||
|
||
const delBtn = e.target.closest('.js-delete-comment');
|
||
if (!delBtn) {
|
||
return;
|
||
}
|
||
|
||
const commentId = Number(delBtn.dataset.commentId || 0);
|
||
if (commentId < 1) {
|
||
return;
|
||
}
|
||
|
||
if (!confirm('Удалить комментарий?')) {
|
||
return;
|
||
}
|
||
|
||
const fd = new FormData();
|
||
fd.set('action', 'delete_comment');
|
||
fd.set('token', adminToken);
|
||
fd.set('id', String(commentId));
|
||
fd.set('ajax', '1');
|
||
|
||
fetch(`${window.location.pathname}?token=${encodeURIComponent(adminToken)}&mode=comments`, {
|
||
method: 'POST',
|
||
body: fd,
|
||
headers: {
|
||
'X-Requested-With': 'XMLHttpRequest',
|
||
'Accept': 'application/json',
|
||
},
|
||
}).then(async (r) => {
|
||
const j = await r.json();
|
||
if (!r.ok || !j.ok) {
|
||
throw new Error(j?.message || 'Ошибка удаления');
|
||
}
|
||
|
||
const row = delBtn.closest('.comment-row');
|
||
if (row) {
|
||
row.remove();
|
||
}
|
||
activeCommentCount = Math.max(0, activeCommentCount - 1);
|
||
renderCommentIndicator(activePhotoId, activePhotoName, activeCommentCount);
|
||
|
||
if (commentsModalBody && commentsModalBody.querySelectorAll('.comment-row').length === 0) {
|
||
renderCommentsList([]);
|
||
}
|
||
}).catch((err) => {
|
||
alert('Не удалось удалить комментарий: ' + (err?.message || 'unknown'));
|
||
});
|
||
});
|
||
|
||
document.addEventListener('keydown', (e) => {
|
||
if (e.key === 'Escape' && commentsModal && !commentsModal.hidden) {
|
||
closeCommentsModal();
|
||
}
|
||
});
|
||
|
||
const lightbox = document.getElementById('lightbox');
|
||
const img = document.getElementById('lightboxImage');
|
||
if (lightbox && img) {
|
||
document.querySelectorAll('.js-open').forEach((el) => {
|
||
el.addEventListener('click', () => {
|
||
const src = el.getAttribute('data-full');
|
||
if (!src) return;
|
||
img.src = src;
|
||
lightbox.hidden = false;
|
||
document.body.style.overflow = 'hidden';
|
||
});
|
||
});
|
||
lightbox.querySelectorAll('.js-close').forEach((el) => el.addEventListener('click', () => {
|
||
lightbox.hidden = true; img.src = ''; document.body.style.overflow = '';
|
||
}));
|
||
}
|
||
})();
|
||
</script>
|
||
</body></html>
|