activity_groups.php 4.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142
  1. <?php
  2. require_once __DIR__ . '/auth.php';
  3. require_once __DIR__ . '/layout.php';
  4. require_admin();
  5. $pdo = get_pdo();
  6. if ($_SERVER['REQUEST_METHOD'] === 'POST') {
  7. require_csrf();
  8. $action = $_POST['action'] ?? '';
  9. if ($action === 'add') {
  10. $name = trim($_POST['groupName'] ?? '');
  11. $order = (int)($_POST['sortOrder'] ?? 0);
  12. if ($name !== '') {
  13. $pdo->prepare("INSERT INTO activity_groups (groupName, sortOrder) VALUES (?,?)")
  14. ->execute([$name, $order]);
  15. flash('success', "Group '$name' added.");
  16. } else {
  17. flash('error', 'Group name cannot be empty.');
  18. }
  19. }
  20. if ($action === 'edit') {
  21. $id = (int)$_POST['groupID'];
  22. $name = trim($_POST['groupName'] ?? '');
  23. $order = (int)($_POST['sortOrder'] ?? 0);
  24. if ($name !== '') {
  25. $pdo->prepare("UPDATE activity_groups SET groupName=?, sortOrder=? WHERE groupID=?")
  26. ->execute([$name, $order, $id]);
  27. flash('success', 'Group updated.');
  28. } else {
  29. flash('error', 'Group name cannot be empty.');
  30. }
  31. }
  32. if ($action === 'delete') {
  33. $id = (int)$_POST['groupID'];
  34. $pdo->prepare("DELETE FROM activity_groups WHERE groupID=?")->execute([$id]);
  35. flash('success', 'Group deleted.');
  36. }
  37. header('Location: activity_groups.php');
  38. exit;
  39. }
  40. $groups = $pdo->query("SELECT * FROM activity_groups ORDER BY sortOrder, groupID")->fetchAll();
  41. admin_head('Activity Groups', 'activity_groups.php');
  42. show_alerts();
  43. ?>
  44. <h1>Activity Groups</h1>
  45. <div class="card">
  46. <h2>Add New Group</h2>
  47. <form method="POST">
  48. <?= csrf_field() ?>
  49. <input type="hidden" name="action" value="add">
  50. <div class="form-row">
  51. <div>
  52. <label>Group Name</label>
  53. <input type="text" name="groupName" placeholder="e.g. Overnight" required>
  54. </div>
  55. <div>
  56. <label>Sort Order</label>
  57. <input type="number" name="sortOrder" value="0" min="0">
  58. </div>
  59. </div>
  60. <div style="display:flex;gap:.5rem;">
  61. <button type="submit" class="btn btn-primary">➕ Add Group</button>
  62. </div>
  63. </form>
  64. </div>
  65. <?php foreach ($groups as $g): ?>
  66. <form id="edit-form-<?= $g['groupID'] ?>" method="POST">
  67. <?= csrf_field() ?>
  68. <input type="hidden" name="action" value="edit">
  69. <input type="hidden" name="groupID" value="<?= $g['groupID'] ?>">
  70. </form>
  71. <?php endforeach; ?>
  72. <table class="tbl tbl-fixed">
  73. <colgroup>
  74. <col style="width:60px">
  75. <col>
  76. <col style="width:100px">
  77. <col style="width:100px">
  78. <col style="width:200px">
  79. </colgroup>
  80. <thead><tr><th>#</th><th>Name</th><th>Sort</th><th>Activities</th><th></th></tr></thead>
  81. <tbody>
  82. <?php foreach ($groups as $g):
  83. $cnt = $pdo->prepare("SELECT COUNT(*) FROM activities WHERE groupID=?");
  84. $cnt->execute([$g['groupID']]);
  85. $actCount = $cnt->fetchColumn();
  86. $id = $g['groupID'];
  87. ?>
  88. <tr id="row-<?= $id ?>" data-editing="false">
  89. <td style="color:var(--muted)"><?= $id ?></td>
  90. <td>
  91. <div class="view"><?= htmlspecialchars($g['groupName']) ?></div>
  92. <div class="edit"><input type="text" name="groupName" form="edit-form-<?= $id ?>" value="<?= htmlspecialchars($g['groupName']) ?>" required></div>
  93. </td>
  94. <td>
  95. <div class="view"><?= $g['sortOrder'] ?></div>
  96. <div class="edit"><input type="number" name="sortOrder" form="edit-form-<?= $id ?>" value="<?= (int)$g['sortOrder'] ?>" min="0"></div>
  97. </td>
  98. <td><span class="badge badge-group"><?= $actCount ?></span></td>
  99. <td>
  100. <div class="view actions-buttons">
  101. <button type="button" onclick="startEdit(<?= $id ?>)" class="btn btn-sm btn-teal">Edit</button>
  102. <form method="POST" onsubmit="return confirm('Delete this group and ALL its activities?')">
  103. <?= csrf_field() ?>
  104. <input type="hidden" name="action" value="delete">
  105. <input type="hidden" name="groupID" value="<?= $id ?>">
  106. <button type="submit" class="btn btn-sm btn-danger">Delete</button>
  107. </form>
  108. </div>
  109. <div class="edit actions-buttons">
  110. <button type="submit" form="edit-form-<?= $id ?>" class="btn btn-sm btn-primary">💾 Save</button>
  111. <button type="button" onclick="cancelEdit(<?= $id ?>)" class="btn btn-sm btn-secondary">Cancel</button>
  112. </div>
  113. </td>
  114. </tr>
  115. <?php endforeach; ?>
  116. </tbody>
  117. </table>
  118. <script>
  119. function startEdit(id) {
  120. var row = document.getElementById('row-' + id);
  121. row.dataset.editing = 'true';
  122. var input = row.querySelector('.edit input[name="groupName"]');
  123. if (input) input.focus();
  124. }
  125. function cancelEdit(id) {
  126. document.getElementById('row-' + id).dataset.editing = 'false';
  127. }
  128. </script>
  129. <?php admin_foot(); ?>