PackIt/admin/activities.php

<?php
require_once __DIR__ . '/auth.php';
require_once __DIR__ . '/layout.php';
require_admin();

$pdo = get_pdo();

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    require_csrf();
    $action = $_POST['action'] ?? '';

    if ($action === 'add') {
        $name  = trim($_POST['activityName'] ?? '');
        $gid   = (int)$_POST['groupID'];
        $order = (int)($_POST['sortOrder'] ?? 0);
        $hidden = isset($_POST['hidden']) ? 1 : 0;
        if ($name !== '' && $gid > 0) {
            $pdo->prepare("INSERT INTO activities (groupID,activityName,sortOrder,hidden) VALUES (?,?,?,?)")
                ->execute([$gid, $name, $order, $hidden]);
            flash('success', "Activity '$name' added.");
        } else {
            flash('error', 'Please fill all fields.');
        }
    }

    if ($action === 'edit') {
        $id    = (int)$_POST['activityID'];
        $name  = trim($_POST['activityName'] ?? '');
        $gid   = (int)$_POST['groupID'];
        $order = (int)($_POST['sortOrder'] ?? 0);
        $hidden = isset($_POST['hidden']) ? 1 : 0;
        if ($name !== '') {
            $pdo->prepare("UPDATE activities SET activityName=?,groupID=?,sortOrder=?,hidden=? WHERE activityID=?")
                ->execute([$name, $gid, $order, $hidden, $id]);
            flash('success', 'Activity updated.');
        } else {
            flash('error', 'Name cannot be empty.');
        }
    }

    if ($action === 'delete') {
        $id = (int)$_POST['activityID'];
        $pdo->prepare("DELETE FROM activities WHERE activityID=?")->execute([$id]);
        flash('success', 'Activity deleted.');
    }

    header('Location: activities.php');
    exit;
}

$groups     = $pdo->query("SELECT * FROM activity_groups ORDER BY sortOrder,groupID")->fetchAll();
$activities = $pdo->query("
    SELECT a.*, ag.groupName
    FROM activities a
    JOIN activity_groups ag ON ag.groupID = a.groupID
    ORDER BY ag.sortOrder, a.sortOrder, a.activityID
")->fetchAll();

admin_head('Activities', 'activities.php');
show_alerts();
?>
<h1>Activities</h1>

<div class="card">
  <h2>Add New Activity</h2>
  <form method="POST">
    <?= csrf_field() ?>
    <input type="hidden" name="action" value="add">
    <div class="form-row">
      <div>
        <label>Activity Name</label>
        <input type="text" name="activityName" placeholder="e.g. Kayaking" required>
      </div>
      <div>
        <label>Group</label>
        <select name="groupID" required>
          <option value="">– select –</option>
          <?php foreach ($groups as $g): ?>
          <option value="<?= $g['groupID'] ?>"><?= htmlspecialchars($g['groupName']) ?></option>
          <?php endforeach; ?>
        </select>
      </div>
    </div>
    <div>
      <label>Sort Order</label>
      <input type="number" name="sortOrder" value="0" min="0" style="max-width:120px;">
    </div>
    <label class="check-label"><input type="checkbox" name="hidden" value="1"> Hidden (easter egg, revealed by clicking "Pack it!" 10&times; fast with nothing selected)</label>
    <div style="display:flex;gap:.5rem;margin-top:.25rem;">
      <button type="submit" class="btn btn-primary">➕ Add</button>
    </div>
  </form>
</div>

<?php foreach ($activities as $a): ?>
<form id="edit-form-<?= $a['activityID'] ?>" method="POST">
  <?= csrf_field() ?>
  <input type="hidden" name="action" value="edit">
  <input type="hidden" name="activityID" value="<?= $a['activityID'] ?>">
</form>
<?php endforeach; ?>

<table class="tbl tbl-fixed">
  <colgroup>
    <col style="width:60px">
    <col>
    <col style="width:180px">
    <col style="width:100px">
    <col style="width:90px">
    <col style="width:200px">
  </colgroup>
  <thead><tr><th>#</th><th>Name</th><th>Group</th><th>Sort</th><th>Hidden</th><th></th></tr></thead>
  <tbody>
  <?php foreach ($activities as $a):
    $id = $a['activityID'];
  ?>
  <tr id="row-<?= $id ?>" data-editing="false">
    <td style="color:var(--muted)"><?= $id ?></td>
    <td>
      <div class="view"><?= htmlspecialchars($a['activityName']) ?></div>
      <div class="edit"><input type="text" name="activityName" form="edit-form-<?= $id ?>" value="<?= htmlspecialchars($a['activityName']) ?>" required></div>
    </td>
    <td>
      <div class="view"><span class="badge badge-group"><?= htmlspecialchars($a['groupName']) ?></span></div>
      <div class="edit">
        <select name="groupID" form="edit-form-<?= $id ?>" required>
          <?php foreach ($groups as $g): ?>
          <option value="<?= $g['groupID'] ?>" <?= $a['groupID'] == $g['groupID'] ? 'selected' : '' ?>><?= htmlspecialchars($g['groupName']) ?></option>
          <?php endforeach; ?>
        </select>
      </div>
    </td>
    <td>
      <div class="view"><?= $a['sortOrder'] ?></div>
      <div class="edit"><input type="number" name="sortOrder" form="edit-form-<?= $id ?>" value="<?= (int)$a['sortOrder'] ?>" min="0"></div>
    </td>
    <td>
      <div class="view"><?php if ($a['hidden']): ?><span class="badge badge-secret">Secret</span><?php endif; ?></div>
      <div class="edit"><input type="checkbox" name="hidden" value="1" form="edit-form-<?= $id ?>" <?= $a['hidden'] ? 'checked' : '' ?> aria-label="Hidden"></div>
    </td>
    <td>
      <div class="view actions-buttons">
        <button type="button" onclick="startEdit(<?= $id ?>)" class="btn btn-sm btn-teal">Edit</button>
        <form method="POST" onsubmit="return confirm('Delete this activity?')">
          <?= csrf_field() ?>
          <input type="hidden" name="action" value="delete">
          <input type="hidden" name="activityID" value="<?= $id ?>">
          <button class="btn btn-sm btn-danger">Delete</button>
        </form>
      </div>
      <div class="edit actions-buttons">
        <button type="submit" form="edit-form-<?= $id ?>" class="btn btn-sm btn-primary">💾 Save</button>
        <button type="button" onclick="cancelEdit(<?= $id ?>)" class="btn btn-sm btn-secondary">Cancel</button>
      </div>
    </td>
  </tr>
  <?php endforeach; ?>
  </tbody>
</table>

<script>
function startEdit(id) {
  var row = document.getElementById('row-' + id);
  row.dataset.editing = 'true';
  var input = row.querySelector('.edit input[name="activityName"]');
  if (input) input.focus();
}
function cancelEdit(id) {
  document.getElementById('row-' + id).dataset.editing = 'false';
}
</script>

<?php admin_foot(); ?>