exit-game/admin.php

<?php
session_start();
require_once 'config.php'; 
require_once 'db_config.php'; 

// --- 1. LOGIN / LOGOUT SCHUTZ ---
if (isset($_GET['logout'])) { session_destroy(); header("Location: admin.php"); exit; }

$show_login = true;
if (isset($_SESSION['admin_auth']) && $_SESSION['admin_auth'] === true) { $show_login = false; }

if (isset($_POST['login_auth'])) {
    if ($_POST['pw'] === ADMIN_PASSWORD) {
        $_SESSION['admin_auth'] = true;
        $show_login = false;
    } else { $login_error = "Falsches Passwort!"; }
}

if ($show_login):
?>
<!DOCTYPE html>
<html lang="de">
<head>
    <meta charset="UTF-8">
    <title>Admin Login</title>
    <style>
        body { font-family: 'Segoe UI', sans-serif; background: #f4f7f6; color: #333; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; }
        .login-box { background: white; padding: 40px; border-radius: 12px; border: 1px solid #ddd; box-shadow: 0 4px 15px rgba(0,0,0,0.1); text-align: center; width: 300px; }
        input { width: 100%; padding: 12px; margin: 15px 0; border-radius: 5px; border: 1px solid #ccc; background: #fff; color: #333; box-sizing: border-box; }
        button { background: #e67e22; color: white; border: none; padding: 12px; border-radius: 5px; cursor: pointer; width: 100%; font-weight: bold; }
        .error { color: #e74c3c; font-size: 0.9em; }
    </style>
</head>
<body>
    <div class="login-box">
        <h2>🔐 Admin Login</h2>
        <?php if(isset($login_error)) echo "<div class='error'>$login_error</div>"; ?>
        <form method="POST">
            <input type="password" name="pw" placeholder="Passwort" autofocus required>
            <button type="submit" name="login_auth">Einloggen</button>
        </form>
    </div>
</body>
</html>
<?php exit; endif; ?>

<?php
// --- 2. DATENBANK LOGIK ---
$msg = "";
$msg_type = "success";

if (isset($_POST['add_new_game'])) {
    $ean = trim($_POST['new_ean']);
    $titel = trim($_POST['new_titel']);
    $level = (empty($_POST['new_level']) || $_POST['new_level'] == 'Unknown') ? 'Unknown' : $_POST['new_level'];
    $typ_id = ($_POST['new_typ_id'] == '0') ? null : (int)$_POST['new_typ_id'];
    $bild_url = trim($_POST['new_bild_url']);

    try {
        $stmt = $pdo->prepare("INSERT INTO spiele (titel, typ_id, ean, level, bild_url) VALUES (?, ?, ?, ?, ?)");
        $stmt->execute([$titel, $typ_id, $ean, $level, $bild_url]);
        $msg = "✅ Spiel erfolgreich angelegt!";
    } catch (PDOException $e) {
        if ($e->getCode() == 23000) { 
            $msg = "❌ Fehler: Die EAN $ean existiert bereits!";
            $msg_type = "error";
        } else { $msg = "Fehler: " . $e->getMessage(); }
    }
}

if (isset($_POST['update_game'])) {
    $stmt = $pdo->prepare("UPDATE spiele SET titel = ?, typ_id = ?, ean = ?, level = ?, bild_url = ? WHERE id = ?");
    $stmt->execute([$_POST['titel'], ($_POST['typ_id'] == '0' ? null : (int)$_POST['typ_id']), $_POST['ean'], $_POST['level'], $_POST['bild_url'], (int)$_POST['spiel_id']]);
    $msg = "💾 Änderungen gespeichert!";
}

if (isset($_POST['delete_game'])) {
    $pdo->prepare("DELETE FROM spiele WHERE id = ?")->execute([(int)$_POST['spiel_id']]);
    $msg = "🗑 Spiel gelöscht!";
}

$spiele = $pdo->query("SELECT s.*, t.bezeichnung as typ_name FROM spiele s LEFT JOIN game_typen t ON s.typ_id = t.id ORDER BY s.id DESC")->fetchAll();
$typen = $pdo->query("SELECT * FROM game_typen ORDER BY bezeichnung ASC")->fetchAll();
?>

<!DOCTYPE html>
<html lang="de">
<head>
    <meta charset="UTF-8">
    <title>EXIT Admin - Stammdaten</title>
    <style>
        body { font-family: 'Segoe UI', sans-serif; background: #f4f7f6; color: #333; padding: 20px; scroll-behavior: smooth; }
        .container { max-width: 1400px; margin: 0 auto; position: relative; }
        
        /* Alerts */
        .alert { padding: 15px; border-radius: 8px; margin-bottom: 20px; font-weight: bold; text-align: center; position: sticky; top: 10px; z-index: 1000; border: 1px solid transparent; }
        .alert-success { background: #d4edda; color: #155724; border-color: #c3e6cb; box-shadow: 0 4px 10px rgba(0,0,0,0.05); }
        .alert-error { background: #f8d7da; color: #721c24; border-color: #f5c6cb; }
        
        .admin-card { background: white; padding: 20px; border-radius: 12px; box-shadow: 0 4px 15px rgba(0,0,0,0.05); margin-bottom: 30px; border: 1px solid #eee; }
        table { width: 100%; border-collapse: collapse; margin-top: 20px; table-layout: fixed; background: white; }
        th, td { padding: 12px 10px; border-bottom: 1px solid #f0f0f0; text-align: left; overflow: hidden; }
        th { background: #f8f9fa; color: #555; font-size: 0.85em; text-transform: uppercase; letter-spacing: 1px; border-top: 1px solid #eee; }
        input, select { padding: 8px; border: 1px solid #ddd; border-radius: 6px; width: 100%; box-sizing: border-box; background: #fff; color: #333; font-size: 0.95em; transition: border-color 0.2s; }
        input:focus, select:focus { border-color: #e67e22; outline: none; }
        
        /* Spaltenbreiten Tabelle */
        .col-img { width: 60px; }
        .col-titel { width: auto; } 
        .col-ean { width: 130px; }
        .col-typ { width: 160px; }
        .col-lvl { width: 150px; }
        .col-url { width: 180px; }
        .col-akt { width: 100px; text-align: center; }

        .lvl-unknown { background: #fff3e0 !important; border-color: #ffb74d !important; color: #e65100 !important; }
        .btn { padding: 10px 15px; border: none; border-radius: 6px; cursor: pointer; font-weight: bold; color: white; text-decoration: none; display: inline-block; font-size: 0.9em; transition: opacity 0.2s; }
        .btn:hover { opacity: 0.85; }
        .btn-add { background: #27ae60; width: 100%; margin-top: 10px; }
        .btn-save { background: #2980b9; }
        .btn-del { background: #c0392b; }
        .btn-nav { background: #e67e22; }
        .btn-scroll { background: #7f8c8d; margin-left: 5px; }

        /* Floating Button */
        #scrollToTop { position: fixed; bottom: 30px; right: 30px; background: #34495e; color: white; width: 45px; height: 45px; border-radius: 50%; border: none; cursor: pointer; display: none; font-size: 20px; z-index: 1000; box-shadow: 0 4px 10px rgba(0,0,0,0.2); }
        
        .img-preview { width: 40px; height: 40px; object-fit: cover; border-radius: 4px; background: #eee; display: block; margin: 0 auto; border: 1px solid #ddd; }
    </style>
</head>
<body id="top">

<div class="container">
    <div style="display:flex; justify-content: space-between; align-items: center; margin-bottom: 20px;">
        <h1 style="color: #2c3e50;">🛠 Stammdaten Verwaltung</h1>
        <div>
            <a href="index.php" class="btn btn-nav">Dashboard</a>
            <button onclick="window.scrollTo(0, document.body.scrollHeight);" class="btn btn-scroll">⬇ Nach unten</button>
            <a href="admin.php?logout=1" class="btn btn-del" style="margin-left:15px;">Logout</a>
        </div>
    </div>

    <?php if ($msg): ?>
        <div class="alert alert-<?= $msg_type ?>" id="msg-box"><?= $msg ?></div>
    <?php endif; ?>

    <div class="admin-card">
        <h3 style="margin-top:0; color: #2c3e50;">🆕 Neues Spiel hinzufügen</h3>
        <form method="POST">
            <div style="display: grid; grid-template-columns: 3fr 1fr 1.2fr 1.2fr 2fr; gap: 10px;">
                <input type="text" name="new_titel" placeholder="Spieltitel" required>
                <input type="text" name="new_ean" placeholder="EAN" required>
                <select name="new_typ_id">
                    <option value="0">-- Typ: Unbekannt --</option>
                    <?php foreach($typen as $t): ?>
                        <option value="<?= $t['id'] ?>"><?= htmlspecialchars($t['bezeichnung']) ?></option>
                    <?php endforeach; ?>
                </select>
                <select name="new_level">
                    <option value="Unknown" selected>-- Level: Unbekannt --</option>
                    <option value="Einsteiger">Einsteiger</option>
                    <option value="Fortgeschrittene">Fortgeschrittene</option>
                    <option value="Profi">Profi</option>
                </select>
                <input type="text" name="new_bild_url" placeholder="Bild-URL (Optional)">
            </div>
            <button type="submit" name="add_new_game" class="btn btn-add">Spiel in Datenbank speichern</button>
        </form>
    </div>

    <div class="admin-card" style="padding: 0; overflow: hidden;">
        <h3 style="padding: 20px 20px 0 20px; margin-bottom: 10px; color: #2c3e50;">📋 Aktueller Bestand</h3>
        <table>
            <thead>
                <tr>
                    <th class="col-img">Bild</th>
                    <th class="col-titel">Titel</th>
                    <th class="col-ean">EAN</th>
                    <th class="col-typ">Typ</th>
                    <th class="col-lvl">Level</th>
                    <th class="col-url">Bild-URL</th>
                    <th class="col-akt">Aktion</th>
                </tr>
            </thead>
            <tbody>
                <?php foreach ($spiele as $sp): 
                    $is_unknown = ($sp['level'] == 'Unknown' || empty($sp['level']));
                ?>
                <tr>
                    <form method="POST">
                        <input type="hidden" name="spiel_id" value="<?= $sp['id'] ?>">
                        <td class="col-img"><img src="<?= htmlspecialchars($sp['bild_url']) ?>" class="img-preview" alt="Cover" onerror="this.src='https://via.placeholder.com/40?text=?';"></td>
                        <td class="col-titel"><input type="text" name="titel" value="<?= htmlspecialchars($sp['titel']) ?>"></td>
                        <td class="col-ean"><input type="text" name="ean" value="<?= htmlspecialchars($sp['ean']) ?>"></td>
                        <td class="col-typ">
                            <select name="typ_id">
                                <option value="0">-- Unbekannt --</option>
                                <?php foreach($typen as $t): ?>
                                    <option value="<?= $t['id'] ?>" <?= ($sp['typ_id']==$t['id'])?'selected':'' ?>><?= htmlspecialchars($t['bezeichnung']) ?></option>
                                <?php endforeach; ?>
                            </select>
                        </td>
                        <td class="col-lvl">
                            <select name="level" class="<?= $is_unknown ? 'lvl-unknown' : '' ?>" onchange="this.className=this.value=='Unknown'?'lvl-unknown':''">
                                <option value="Unknown" <?= $is_unknown ? 'selected' : '' ?>>Unbekannt</option>
                                <option value="Einsteiger" <?= $sp['level']=='Einsteiger'?'selected':'' ?>>Einsteiger</option>
                                <option value="Fortgeschrittene" <?= $sp['level']=='Fortgeschrittene'?'selected':'' ?>>Fortgeschrittene</option>
                                <option value="Profi" <?= $sp['level']=='Profi'?'selected':'' ?>>Profi</option>
                            </select>
                        </td>
                        <td class="col-url"><input type="text" name="bild_url" value="<?= htmlspecialchars($sp['bild_url']) ?>"></td>
                        <td class="col-akt">
                            <button type="submit" name="update_game" class="btn btn-save" title="Speichern">💾</button>
                            <button type="submit" name="delete_game" class="btn btn-del" onclick="return confirm('Wirklich löschen?')" title="Löschen">🗑</button>
                        </td>
                    </form>
                </tr>
                <?php endforeach; ?>
            </tbody>
        </table>
    </div>
    
    <div id="page-bottom" style="padding-bottom: 60px; text-align: center; color: #999; font-size: 0.85em;">
        — Ende der Sammlungs-Liste —
    </div>
</div>

<button id="scrollToTop" onclick="window.scrollTo(0,0);" title="Nach oben">▲</button>

<script>
    // Erfolgsmeldung sanft ausblenden
    setTimeout(() => { 
        const msg = document.getElementById('msg-box');
        if(msg) {
            msg.style.transition = 'opacity 0.5s';
            msg.style.opacity = '0';
            setTimeout(() => { msg.style.display = 'none'; }, 500);
        }
    }, 3000);

    // Floating Button Logik
    window.onscroll = function() {
        const btn = document.getElementById("scrollToTop");
        if (document.body.scrollTop > 300 || document.documentElement.scrollTop > 300) {
            btn.style.display = "block";
        } else {
            btn.style.display = "none";
        }
    };
</script>

</body>
</html>