From 35f149b4db2822de3ba68565989c2a3c65ff7d15 Mon Sep 17 00:00:00 2001
From: Flatlogic Bot <support@flatlogic.com>
Date: Wed, 17 Sep 2025 12:23:23 +0000
Subject: [PATCH] MagiCV

---
 admin/index.php     | 66 +++++++++++++++++++++++++++++++++++++++++++++
 includes/header.php |  3 +++
 2 files changed, 69 insertions(+)
 create mode 100644 admin/index.php

diff --git a/admin/index.php b/admin/index.php
new file mode 100644
index 0000000..c8aea29
--- /dev/null
+++ b/admin/index.php
@@ -0,0 +1,66 @@
+<?php
+session_start();
+require_once '../db/config.php';
+
+// Restrict access to admins
+if (!isset($_SESSION['user_id']) || $_SESSION['role'] !== 'admin') {
+    header('Location: ../dashboard.php');
+    exit();
+}
+
+// Fetch all users for the user management table
+try {
+    $p_users = $db->prepare('SELECT id, username, email, role, created_at FROM users ORDER BY created_at DESC');
+    $p_users->execute();
+    $users = $p_users->fetchAll(PDO::FETCH_ASSOC);
+} catch (PDOException $e) {
+    // For now, we'll just die on error. In a real app, log this.
+    die("Error fetching users: " . $e->getMessage());
+}
+
+$pageTitle = 'Admin Dashboard';
+include '../includes/header.php';
+?>
+
+<div class="container">
+    <h1 class="page-title">Admin Dashboard</h1>
+    <p>Welcome, <?php echo htmlspecialchars($_SESSION['username']); ?>!</p>
+
+    <div class="section">
+        <h2>User Management</h2>
+        <p>Here you can view all registered users.</p>
+        
+        <div class="table-responsive">
+            <table class="table">
+                <thead>
+                    <tr>
+                        <th>ID</th>
+                        <th>Username</th>
+                        <th>Email</th>
+                        <th>Role</th>
+                        <th>Registered At</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <?php if (empty($users)): ?>
+                        <tr>
+                            <td colspan="5">No users found.</td>
+                        </tr>
+                    <?php else: ?>
+                        <?php foreach ($users as $user): ?>
+                            <tr>
+                                <td><?php echo htmlspecialchars($user['id']); ?></td>
+                                <td><?php echo htmlspecialchars($user['username']); ?></td>
+                                <td><?php echo htmlspecialchars($user['email']); ?></td>
+                                <td><?php echo htmlspecialchars($user['role']); ?></td>
+                                <td><?php echo htmlspecialchars(date('Y-m-d H:i', strtotime($user['created_at']))); ?></td>
+                            </tr>
+                        <?php endforeach; ?>
+                    <?php endif; ?>
+                </tbody>
+            </table>
+        </div>
+    </div>
+</div>
+
+<?php include '../includes/footer.php'; ?>
diff --git a/includes/header.php b/includes/header.php
index 2a8210b..af97c42 100644
--- a/includes/header.php
+++ b/includes/header.php
@@ -23,6 +23,9 @@ if (session_status() == PHP_SESSION_NONE) {
                     <?php if (isset($_SESSION['role']) && $_SESSION['role'] == 'free'): ?>
                         <li><a href="/upgrade.php" class="button-secondary">Upgrade to PRO</a></li>
                     <?php endif; ?>
+                    <?php if (isset($_SESSION['role']) && $_SESSION['role'] == 'admin'): ?>
+                        <li><a href="/admin/index.php" class="button-secondary">Admin</a></li>
+                    <?php endif; ?>
                     <li><a href="/logout.php">Logout</a></li>
                 <?php else: ?>
                     <li><a href="/templates_preview.php">Templates</a></li>