v1.1
This commit is contained in:
parent
1b053c4334
commit
53eb27812c
161
add-asset.php
Normal file
161
add-asset.php
Normal file
@ -0,0 +1,161 @@
|
||||
<?php
|
||||
require_once 'auth-check.php';
|
||||
require_once 'db/config.php';
|
||||
|
||||
$success_message = '';
|
||||
$error_message = '';
|
||||
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
$name = $_POST['name'] ?? '';
|
||||
$asset_tag = $_POST['asset_tag'] ?? '';
|
||||
$status = $_POST['status'] ?? 'In Service';
|
||||
$location = $_POST['location'] ?? '';
|
||||
$manufacturer = $_POST['manufacturer'] ?? '';
|
||||
$model = $_POST['model'] ?? '';
|
||||
$purchase_date = $_POST['purchase_date'] ?? '';
|
||||
|
||||
if (empty($name) || empty($asset_tag) || empty($purchase_date)) {
|
||||
$error_message = 'Please fill in all required fields: Name, Asset Tag, and Purchase Date.';
|
||||
} else {
|
||||
try {
|
||||
$pdo = db();
|
||||
$sql = "INSERT INTO assets (name, asset_tag, status, location, manufacturer, model, purchase_date) VALUES (?, ?, ?, ?, ?, ?, ?)";
|
||||
$stmt = $pdo->prepare($sql);
|
||||
$stmt->execute([$name, $asset_tag, $status, $location, $manufacturer, $model, $purchase_date]);
|
||||
|
||||
header("Location: index.php?success=asset_added");
|
||||
exit;
|
||||
|
||||
} catch (PDOException $e) {
|
||||
$error_message = 'Database error: ' . $e->getMessage();
|
||||
}
|
||||
}
|
||||
}
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Add New Asset - IC-Inventory</title>
|
||||
<meta name="description" content="Add a new asset to the inventory.">
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
|
||||
<link rel="stylesheet" href="assets/css/custom.css?v=<?php echo time(); ?>">
|
||||
<link rel="preconnect" href="https://fonts.googleapis.com">
|
||||
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
||||
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
|
||||
<script src="https://unpkg.com/feather-icons"></script>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<div class="wrapper">
|
||||
<nav id="sidebar" class="d-flex flex-column flex-shrink-0 p-3">
|
||||
<a href="/" class="d-flex align-items-center mb-3 mb-md-0 me-md-auto text-decoration-none">
|
||||
<span class="fs-4">IC-Inventory</span>
|
||||
</a>
|
||||
<hr>
|
||||
<ul class="nav nav-pills flex-column mb-auto">
|
||||
<li class="nav-item">
|
||||
<a href="index.php" class="nav-link" aria-current="page">
|
||||
<i data-feather="home" class="me-2"></i>
|
||||
Dashboard
|
||||
</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="index.php" class="nav-link active">
|
||||
<i data-feather="box" class="me-2"></i>
|
||||
Assets
|
||||
</a>
|
||||
</li>
|
||||
<?php if ($_SESSION['user_role'] === 'Admin'): ?>
|
||||
<li>
|
||||
<a href="users.php" class="nav-link">
|
||||
<i data-feather="users" class="me-2"></i>
|
||||
Users
|
||||
</a>
|
||||
</li>
|
||||
<?php endif; ?>
|
||||
<li>
|
||||
<a href="#" class="nav-link">
|
||||
<i data-feather="settings" class="me-2"></i>
|
||||
Settings
|
||||
</a>
|
||||
</li>
|
||||
</ul>
|
||||
<hr>
|
||||
<div>
|
||||
<span class="d-flex align-items-center text-decoration-none"><strong><?php echo htmlspecialchars($_SESSION['user_name']); ?></strong></span>
|
||||
<a href="logout.php" class="d-flex align-items-center text-decoration-none">
|
||||
<i data-feather="log-out" class="me-2"></i>
|
||||
<strong>Logout</strong>
|
||||
</a>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<main id="content">
|
||||
<div class="header">
|
||||
<h1>Add New Asset</h1>
|
||||
<div class="theme-switcher" id="theme-switcher">
|
||||
<i data-feather="moon"></i>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="surface p-4">
|
||||
<?php if ($error_message): ?>
|
||||
<div class="alert alert-danger"><?php echo htmlspecialchars($error_message); ?></div>
|
||||
<?php endif; ?>
|
||||
|
||||
<form action="add-asset.php" method="post">
|
||||
<div class="row">
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="name" class="form-label">Asset Name*</label>
|
||||
<input type="text" class="form-control" id="name" name="name" required>
|
||||
</div>
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="asset_tag" class="form-label">Asset Tag*</label>
|
||||
<input type="text" class="form-control" id="asset_tag" name="asset_tag" required>
|
||||
</div>
|
||||
</div>
|
||||
<div class="row">
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="status" class="form-label">Status</label>
|
||||
<select class="form-select" id="status" name="status">
|
||||
<option>In Service</option>
|
||||
<option>Under Repair</option>
|
||||
<option>Retired</option>
|
||||
</select>
|
||||
</div>
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="location" class="form-label">Location</label>
|
||||
<input type="text" class="form-control" id="location" name="location">
|
||||
</div>
|
||||
</div>
|
||||
<div class="row">
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="manufacturer" class="form-label">Manufacturer</label>
|
||||
<input type="text" class="form-control" id="manufacturer" name="manufacturer">
|
||||
</div>
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="model" class="form-label">Model</label>
|
||||
<input type="text" class="form-control" id="model" name="model">
|
||||
</div>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label for="purchase_date" class="form-label">Purchase Date*</label>
|
||||
<input type="date" class="form-control" id="purchase_date" name="purchase_date" required>
|
||||
</div>
|
||||
|
||||
<button type="submit" class="btn btn-primary">Add Asset</button>
|
||||
<a href="index.php" class="btn btn-secondary">Cancel</a>
|
||||
</form>
|
||||
</div>
|
||||
</main>
|
||||
</div>
|
||||
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>
|
||||
<script src="assets/js/main.js?v=<?php echo time(); ?>"></script>
|
||||
<script>
|
||||
feather.replace();
|
||||
</script>
|
||||
</body>
|
||||
</html>
|
||||
130
add-user.php
Normal file
130
add-user.php
Normal file
@ -0,0 +1,130 @@
|
||||
<?php
|
||||
require_once 'auth-check.php';
|
||||
if ($_SESSION['user_role'] !== 'Admin') {
|
||||
header("Location: index.php?error=access_denied");
|
||||
exit;
|
||||
}
|
||||
require_once 'db/config.php';
|
||||
|
||||
$error_message = '';
|
||||
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
$name = $_POST['name'] ?? '';
|
||||
$email = $_POST['email'] ?? '';
|
||||
$password = $_POST['password'] ?? '';
|
||||
$role = $_POST['role'] ?? 'Employee';
|
||||
|
||||
if (empty($name) || empty($email) || empty($password)) {
|
||||
$error_message = 'Please fill in all required fields.';
|
||||
} elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
||||
$error_message = 'Invalid email format.';
|
||||
} else {
|
||||
try {
|
||||
$pdo = db();
|
||||
|
||||
// Check if email already exists
|
||||
$stmt = $pdo->prepare("SELECT id FROM users WHERE email = ?");
|
||||
$stmt->execute([$email]);
|
||||
if ($stmt->fetch()) {
|
||||
$error_message = 'Email already exists.';
|
||||
} else {
|
||||
$hashed_password = password_hash($password, PASSWORD_DEFAULT);
|
||||
|
||||
$sql = "INSERT INTO users (name, email, password, role) VALUES (?, ?, ?, ?)";
|
||||
$stmt = $pdo->prepare($sql);
|
||||
$stmt->execute([$name, $email, $hashed_password, $role]);
|
||||
|
||||
header("Location: users.php?success=user_added");
|
||||
exit;
|
||||
}
|
||||
} catch (PDOException $e) {
|
||||
$error_message = 'Database error: ' . $e->getMessage();
|
||||
}
|
||||
}
|
||||
}
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Add New User - IC-Inventory</title>
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
|
||||
<link rel="stylesheet" href="assets/css/custom.css?v=<?php echo time(); ?>">
|
||||
<link rel="preconnect" href="https://fonts.googleapis.com">
|
||||
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
||||
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
|
||||
<script src="https://unpkg.com/feather-icons"></script>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<div class="wrapper">
|
||||
<nav id="sidebar" class="d-flex flex-column flex-shrink-0 p-3">
|
||||
<a href="/" class="d-flex align-items-center mb-3 mb-md-0 me-md-auto text-decoration-none">
|
||||
<span class="fs-4">IC-Inventory</span>
|
||||
</a>
|
||||
<hr>
|
||||
<ul class="nav nav-pills flex-column mb-auto">
|
||||
<li class="nav-item"><a href="index.php" class="nav-link">Dashboard</a></li>
|
||||
<li><a href="index.php" class="nav-link">Assets</a></li>
|
||||
<?php if ($_SESSION['user_role'] === 'Admin'): ?>
|
||||
<li><a href="users.php" class="nav-link active">Users</a></li>
|
||||
<?php endif; ?>
|
||||
<li><a href="#" class="nav-link">Settings</a></li>
|
||||
</ul>
|
||||
<hr>
|
||||
<div>
|
||||
<span class="d-flex align-items-center text-decoration-none"><strong><?php echo htmlspecialchars($_SESSION['user_name']); ?></strong></span>
|
||||
<a href="logout.php" class="d-flex align-items-center text-decoration-none">
|
||||
<i data-feather="log-out" class="me-2"></i>
|
||||
<strong>Logout</strong>
|
||||
</a>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<main id="content">
|
||||
<div class="header">
|
||||
<h1>Add New User</h1>
|
||||
<div class="theme-switcher" id="theme-switcher"><i data-feather="moon"></i></div>
|
||||
</div>
|
||||
|
||||
<div class="surface p-4">
|
||||
<?php if ($error_message): ?>
|
||||
<div class="alert alert-danger"><?php echo htmlspecialchars($error_message); ?></div>
|
||||
<?php endif; ?>
|
||||
|
||||
<form action="add-user.php" method="post">
|
||||
<div class="mb-3">
|
||||
<label for="name" class="form-label">Name*</label>
|
||||
<input type="text" class="form-control" id="name" name="name" required>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label for="email" class="form-label">Email*</label>
|
||||
<input type="email" class="form-control" id="email" name="email" required>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label for="password" class="form-label">Password*</label>
|
||||
<input type="password" class="form-control" id="password" name="password" required>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label for="role" class="form-label">Role</label>
|
||||
<select class="form-select" id="role" name="role">
|
||||
<option>Employee</option>
|
||||
<option>Asset Manager</option>
|
||||
<option>IT Technician</option>
|
||||
<option>Admin</option>
|
||||
</select>
|
||||
</div>
|
||||
|
||||
<button type="submit" class="btn btn-primary">Add User</button>
|
||||
<a href="users.php" class="btn btn-secondary">Cancel</a>
|
||||
</form>
|
||||
</div>
|
||||
</main>
|
||||
</div>
|
||||
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>
|
||||
<script src="assets/js/main.js?v=<?php echo time(); ?>"></script>
|
||||
<script>feather.replace();</script>
|
||||
</body>
|
||||
</html>
|
||||
125
assets/css/custom.css
Normal file
125
assets/css/custom.css
Normal file
@ -0,0 +1,125 @@
|
||||
/* General Styles */
|
||||
:root {
|
||||
--primary-color: #4A90E2;
|
||||
--secondary-color: #50E3C2;
|
||||
--light-bg: #F7F9FC;
|
||||
--light-surface: #FFFFFF;
|
||||
--light-text: #333333;
|
||||
--dark-bg: #121212;
|
||||
--dark-surface: #1E1E1E;
|
||||
--dark-text: #E0E0E0;
|
||||
--border-radius: 8px;
|
||||
}
|
||||
|
||||
body {
|
||||
font-family: 'Inter', -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
|
||||
transition: background-color 0.3s, color 0.3s;
|
||||
}
|
||||
|
||||
/* Light Mode */
|
||||
body {
|
||||
background-color: var(--light-bg);
|
||||
color: var(--light-text);
|
||||
}
|
||||
|
||||
/* Dark Mode */
|
||||
body.dark-mode {
|
||||
background-color: var(--dark-bg);
|
||||
color: var(--dark-text);
|
||||
}
|
||||
|
||||
.surface {
|
||||
background-color: var(--light-surface);
|
||||
border-radius: var(--border-radius);
|
||||
box-shadow: 0 4px 6px rgba(0,0,0,0.1);
|
||||
transition: background-color 0.3s;
|
||||
}
|
||||
|
||||
body.dark-mode .surface {
|
||||
background-color: var(--dark-surface);
|
||||
box-shadow: 0 4px 6px rgba(0,0,0,0.2);
|
||||
}
|
||||
|
||||
/* Layout */
|
||||
.wrapper {
|
||||
display: flex;
|
||||
min-height: 100vh;
|
||||
}
|
||||
|
||||
#sidebar {
|
||||
width: 250px;
|
||||
background-color: var(--light-surface);
|
||||
transition: background-color 0.3s;
|
||||
padding: 20px;
|
||||
box-shadow: 2px 0 5px rgba(0,0,0,0.1);
|
||||
}
|
||||
|
||||
body.dark-mode #sidebar {
|
||||
background-color: var(--dark-surface);
|
||||
box-shadow: 2px 0 5px rgba(0,0,0,0.2);
|
||||
}
|
||||
|
||||
#content {
|
||||
flex-grow: 1;
|
||||
padding: 2rem;
|
||||
}
|
||||
|
||||
/* Header */
|
||||
.header {
|
||||
display: flex;
|
||||
justify-content: space-between;
|
||||
align-items: center;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
|
||||
/* Theme Switcher */
|
||||
.theme-switcher {
|
||||
cursor: pointer;
|
||||
}
|
||||
|
||||
/* Asset Table */
|
||||
.asset-table {
|
||||
width: 100%;
|
||||
border-collapse: collapse;
|
||||
}
|
||||
|
||||
.asset-table th, .asset-table td {
|
||||
padding: 12px 15px;
|
||||
text-align: left;
|
||||
border-bottom: 1px solid #ddd;
|
||||
}
|
||||
|
||||
body.dark-mode .asset-table th, body.dark-mode .asset-table td {
|
||||
border-bottom: 1px solid #444;
|
||||
}
|
||||
|
||||
.asset-table th {
|
||||
background-color: var(--light-bg);
|
||||
}
|
||||
|
||||
body.dark-mode .asset-table th {
|
||||
background-color: var(--dark-bg);
|
||||
}
|
||||
|
||||
.status {
|
||||
padding: 5px 10px;
|
||||
border-radius: 20px;
|
||||
font-size: 0.8rem;
|
||||
font-weight: bold;
|
||||
}
|
||||
|
||||
.status-in-service { background-color: #d4edda; color: #155724; }
|
||||
.status-under-repair { background-color: #fff3cd; color: #856404; }
|
||||
.status-retired { background-color: #f8d7da; color: #721c24; }
|
||||
|
||||
/* Sidebar */
|
||||
#sidebar .nav-link {
|
||||
color: var(--light-text);
|
||||
}
|
||||
body.dark-mode #sidebar .nav-link {
|
||||
color: var(--dark-text);
|
||||
}
|
||||
#sidebar .nav-link.active {
|
||||
color: var(--primary-color);
|
||||
font-weight: bold;
|
||||
}
|
||||
17
assets/js/main.js
Normal file
17
assets/js/main.js
Normal file
@ -0,0 +1,17 @@
|
||||
document.addEventListener('DOMContentLoaded', () => {
|
||||
const themeSwitcher = document.getElementById('theme-switcher');
|
||||
const currentTheme = localStorage.getItem('theme');
|
||||
|
||||
if (currentTheme === 'dark') {
|
||||
document.body.classList.add('dark-mode');
|
||||
}
|
||||
|
||||
themeSwitcher.addEventListener('click', () => {
|
||||
document.body.classList.toggle('dark-mode');
|
||||
let theme = 'light';
|
||||
if (document.body.classList.contains('dark-mode')) {
|
||||
theme = 'dark';
|
||||
}
|
||||
localStorage.setItem('theme', theme);
|
||||
});
|
||||
});
|
||||
8
auth-check.php
Normal file
8
auth-check.php
Normal file
@ -0,0 +1,8 @@
|
||||
<?php
|
||||
session_start();
|
||||
|
||||
if (!isset($_SESSION['user_id'])) {
|
||||
header("Location: login.php");
|
||||
exit;
|
||||
}
|
||||
?>
|
||||
27
db/migrations/001_create_assets_table.sql
Normal file
27
db/migrations/001_create_assets_table.sql
Normal file
@ -0,0 +1,27 @@
|
||||
CREATE TABLE IF NOT EXISTS `assets` (
|
||||
`id` INT AUTO_INCREMENT PRIMARY KEY,
|
||||
`name` VARCHAR(255) NOT NULL,
|
||||
`asset_tag` VARCHAR(255) UNIQUE NOT NULL,
|
||||
`serial_number` VARCHAR(255),
|
||||
`model` VARCHAR(255),
|
||||
`manufacturer` VARCHAR(255),
|
||||
`category` VARCHAR(255),
|
||||
`status` VARCHAR(50) NOT NULL,
|
||||
`location` VARCHAR(255),
|
||||
`purchase_date` DATE,
|
||||
`purchase_cost` DECIMAL(10, 2),
|
||||
`warranty_end` DATE,
|
||||
`vendor` VARCHAR(255),
|
||||
`assigned_to` INT,
|
||||
`notes` TEXT,
|
||||
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
||||
`updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
|
||||
);
|
||||
|
||||
-- Seed data
|
||||
INSERT INTO `assets` (`name`, `asset_tag`, `status`, `location`, `purchase_date`, `assigned_to`, `manufacturer`, `model`) VALUES
|
||||
('Laptop', 'ASSET-001', 'In Service', 'Office A', '2023-01-15', 1, 'Dell', 'XPS 15'),
|
||||
('Monitor', 'ASSET-002', 'In Service', 'Office A', '2023-01-15', 1, 'Dell', 'UltraSharp 27'),
|
||||
('Keyboard', 'ASSET-003', 'In Service', 'Office B', '2023-02-20', 2, 'Logitech', 'MX Keys'),
|
||||
('Mouse', 'ASSET-004', 'Under Repair', 'IT Department', '2023-02-20', NULL, 'Logitech', 'MX Master 3'),
|
||||
('Projector', 'ASSET-005', 'Retired', 'Storage', '2020-05-10', NULL, 'Epson', 'PowerLite 1781W');
|
||||
14
db/migrations/002_create_users_table.sql
Normal file
14
db/migrations/002_create_users_table.sql
Normal file
@ -0,0 +1,14 @@
|
||||
CREATE TABLE IF NOT EXISTS `users` (
|
||||
`id` int(11) NOT NULL AUTO_INCREMENT,
|
||||
`name` varchar(255) NOT NULL,
|
||||
`email` varchar(255) NOT NULL,
|
||||
`password` varchar(255) NOT NULL,
|
||||
`role` enum('Admin','Asset Manager','IT Technician','Employee') NOT NULL DEFAULT 'Employee',
|
||||
`created_at` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
PRIMARY KEY (`id`),
|
||||
UNIQUE KEY `email` (`email`)
|
||||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
||||
|
||||
-- Seed with a default admin user
|
||||
INSERT INTO `users` (`name`, `email`, `password`, `role`) VALUES
|
||||
('Admin User', 'admin@example.com', '$2y$10$92IXUNpkjO0rOQ5byMi.Ye4oKoEa3Ro9llC/.og/at2.uheWG/igi', 'Admin'); -- password is 'password'
|
||||
28
delete-asset.php
Normal file
28
delete-asset.php
Normal file
@ -0,0 +1,28 @@
|
||||
<?php
|
||||
require_once 'auth-check.php';
|
||||
if (!in_array($_SESSION['user_role'], ['Admin', 'Asset Manager', 'IT Technician'])) {
|
||||
header("Location: index.php?error=access_denied");
|
||||
exit;
|
||||
}
|
||||
require_once 'db/config.php';
|
||||
|
||||
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
|
||||
header("Location: index.php");
|
||||
exit;
|
||||
}
|
||||
|
||||
$asset_id = $_GET['id'];
|
||||
|
||||
try {
|
||||
$pdo = db();
|
||||
$stmt = $pdo->prepare("DELETE FROM assets WHERE id = ?");
|
||||
$stmt->execute([$asset_id]);
|
||||
|
||||
header("Location: index.php?success=asset_deleted");
|
||||
exit;
|
||||
|
||||
} catch (PDOException $e) {
|
||||
header("Location: index.php?error=db_error");
|
||||
exit;
|
||||
}
|
||||
?>
|
||||
34
delete-user.php
Normal file
34
delete-user.php
Normal file
@ -0,0 +1,34 @@
|
||||
<?php
|
||||
require_once 'auth-check.php';
|
||||
if ($_SESSION['user_role'] !== 'Admin') {
|
||||
header("Location: index.php?error=access_denied");
|
||||
exit;
|
||||
}
|
||||
require_once 'db/config.php';
|
||||
|
||||
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
|
||||
header("Location: users.php");
|
||||
exit;
|
||||
}
|
||||
|
||||
$user_id = $_GET['id'];
|
||||
|
||||
// Prevent deleting the default admin user (ID = 1)
|
||||
if ($user_id == 1) {
|
||||
header("Location: users.php?error=cannot_delete_admin");
|
||||
exit;
|
||||
}
|
||||
|
||||
try {
|
||||
$pdo = db();
|
||||
$stmt = $pdo->prepare("DELETE FROM users WHERE id = ?");
|
||||
$stmt->execute([$user_id]);
|
||||
|
||||
header("Location: users.php?success=user_deleted");
|
||||
exit;
|
||||
|
||||
} catch (PDOException $e) {
|
||||
header("Location: users.php?error=db_error");
|
||||
exit;
|
||||
}
|
||||
?>
|
||||
185
edit-asset.php
Normal file
185
edit-asset.php
Normal file
@ -0,0 +1,185 @@
|
||||
<?php
|
||||
require_once 'auth-check.php';
|
||||
require_once 'db/config.php';
|
||||
|
||||
$success_message = '';
|
||||
$error_message = '';
|
||||
$asset = null;
|
||||
|
||||
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
|
||||
header("Location: index.php");
|
||||
exit;
|
||||
}
|
||||
|
||||
$asset_id = $_GET['id'];
|
||||
|
||||
try {
|
||||
$pdo = db();
|
||||
$stmt = $pdo->prepare("SELECT * FROM assets WHERE id = ?");
|
||||
$stmt->execute([$asset_id]);
|
||||
$asset = $stmt->fetch(PDO::FETCH_ASSOC);
|
||||
|
||||
if (!$asset) {
|
||||
header("Location: index.php?error=not_found");
|
||||
exit;
|
||||
}
|
||||
} catch (PDOException $e) {
|
||||
$error_message = 'Database error: ' . $e->getMessage();
|
||||
}
|
||||
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
$name = $_POST['name'] ?? '';
|
||||
$asset_tag = $_POST['asset_tag'] ?? '';
|
||||
$status = $_POST['status'] ?? 'In Service';
|
||||
$location = $_POST['location'] ?? '';
|
||||
$manufacturer = $_POST['manufacturer'] ?? '';
|
||||
$model = $_POST['model'] ?? '';
|
||||
$purchase_date = $_POST['purchase_date'] ?? '';
|
||||
|
||||
if (empty($name) || empty($asset_tag) || empty($purchase_date)) {
|
||||
$error_message = 'Please fill in all required fields: Name, Asset Tag, and Purchase Date.';
|
||||
} else {
|
||||
try {
|
||||
$pdo = db();
|
||||
$sql = "UPDATE assets SET name = ?, asset_tag = ?, status = ?, location = ?, manufacturer = ?, model = ?, purchase_date = ? WHERE id = ?";
|
||||
$stmt = $pdo->prepare($sql);
|
||||
$stmt->execute([$name, $asset_tag, $status, $location, $manufacturer, $model, $purchase_date, $asset_id]);
|
||||
|
||||
header("Location: index.php?success=asset_updated");
|
||||
exit;
|
||||
|
||||
} catch (PDOException $e) {
|
||||
$error_message = 'Database error: ' . $e->getMessage();
|
||||
}
|
||||
}
|
||||
}
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Edit Asset - IC-Inventory</title>
|
||||
<meta name="description" content="Edit an existing asset in the inventory.">
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
|
||||
<link rel="stylesheet" href="assets/css/custom.css?v=<?php echo time(); ?>">
|
||||
<link rel="preconnect" href="https://fonts.googleapis.com">
|
||||
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
||||
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
|
||||
<script src="https://unpkg.com/feather-icons"></script>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<div class="wrapper">
|
||||
<nav id="sidebar" class="d-flex flex-column flex-shrink-0 p-3">
|
||||
<a href="/" class="d-flex align-items-center mb-3 mb-md-0 me-md-auto text-decoration-none">
|
||||
<span class="fs-4">IC-Inventory</span>
|
||||
</a>
|
||||
<hr>
|
||||
<ul class="nav nav-pills flex-column mb-auto">
|
||||
<li class="nav-item">
|
||||
<a href="index.php" class="nav-link" aria-current="page">
|
||||
<i data-feather="home" class="me-2"></i>
|
||||
Dashboard
|
||||
</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="index.php" class="nav-link active">
|
||||
<i data-feather="box" class="me-2"></i>
|
||||
Assets
|
||||
</a>
|
||||
</li>
|
||||
<?php if ($_SESSION['user_role'] === 'Admin'): ?>
|
||||
<li>
|
||||
<a href="users.php" class="nav-link">
|
||||
<i data-feather="users" class="me-2"></i>
|
||||
Users
|
||||
</a>
|
||||
</li>
|
||||
<?php endif; ?>
|
||||
<li>
|
||||
<a href="#" class="nav-link">
|
||||
<i data-feather="settings" class="me-2"></i>
|
||||
Settings
|
||||
</a>
|
||||
</li>
|
||||
</ul>
|
||||
<hr>
|
||||
<div>
|
||||
<span class="d-flex align-items-center text-decoration-none"><strong><?php echo htmlspecialchars($_SESSION['user_name']); ?></strong></span>
|
||||
<a href="logout.php" class="d-flex align-items-center text-decoration-none">
|
||||
<i data-feather="log-out" class="me-2"></i>
|
||||
<strong>Logout</strong>
|
||||
</a>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<main id="content">
|
||||
<div class="header">
|
||||
<h1>Edit Asset</h1>
|
||||
<div class="theme-switcher" id="theme-switcher">
|
||||
<i data-feather="moon"></i>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="surface p-4">
|
||||
<?php if ($error_message): ?>
|
||||
<div class="alert alert-danger"><?php echo htmlspecialchars($error_message); ?></div>
|
||||
<?php endif; ?>
|
||||
|
||||
<?php if ($asset): ?>
|
||||
<form action="edit-asset.php?id=<?php echo $asset_id; ?>" method="post">
|
||||
<div class="row">
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="name" class="form-label">Asset Name*</label>
|
||||
<input type="text" class="form-control" id="name" name="name" value="<?php echo htmlspecialchars($asset['name']); ?>" required>
|
||||
</div>
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="asset_tag" class="form-label">Asset Tag*</label>
|
||||
<input type="text" class="form-control" id="asset_tag" name="asset_tag" value="<?php echo htmlspecialchars($asset['asset_tag']); ?>" required>
|
||||
</div>
|
||||
</div>
|
||||
<div class="row">
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="status" class="form-label">Status</label>
|
||||
<select class="form-select" id="status" name="status">
|
||||
<option <?php if ($asset['status'] === 'In Service') echo 'selected'; ?>>In Service</option>
|
||||
<option <?php if ($asset['status'] === 'Under Repair') echo 'selected'; ?>>Under Repair</option>
|
||||
<option <?php if ($asset['status'] === 'Retired') echo 'selected'; ?>>Retired</option>
|
||||
</select>
|
||||
</div>
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="location" class="form-label">Location</label>
|
||||
<input type="text" class="form-control" id="location" name="location" value="<?php echo htmlspecialchars($asset['location']); ?>">
|
||||
</div>
|
||||
</div>
|
||||
<div class="row">
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="manufacturer" class="form-label">Manufacturer</label>
|
||||
<input type="text" class="form-control" id="manufacturer" name="manufacturer" value="<?php echo htmlspecialchars($asset['manufacturer']); ?>">
|
||||
</div>
|
||||
<div class="col-md-6 mb-3">
|
||||
<label for="model" class="form-label">Model</label>
|
||||
<input type="text" class="form-control" id="model" name="model" value="<?php echo htmlspecialchars($asset['model']); ?>">
|
||||
</div>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label for="purchase_date" class="form-label">Purchase Date*</label>
|
||||
<input type="date" class="form-control" id="purchase_date" name="purchase_date" value="<?php echo htmlspecialchars($asset['purchase_date']); ?>" required>
|
||||
</div>
|
||||
|
||||
<button type="submit" class="btn btn-primary">Update Asset</button>
|
||||
<a href="index.php" class="btn btn-secondary">Cancel</a>
|
||||
</form>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
</main>
|
||||
</div>
|
||||
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>
|
||||
<script src="assets/js/main.js?v=<?php echo time(); ?>"></script>
|
||||
<script>
|
||||
feather.replace();
|
||||
</script>
|
||||
</body>
|
||||
</html>
|
||||
160
edit-user.php
Normal file
160
edit-user.php
Normal file
@ -0,0 +1,160 @@
|
||||
<?php
|
||||
require_once 'auth-check.php';
|
||||
if ($_SESSION['user_role'] !== 'Admin') {
|
||||
header("Location: index.php?error=access_denied");
|
||||
exit;
|
||||
}
|
||||
require_once 'db/config.php';
|
||||
|
||||
$error_message = '';
|
||||
$user = null;
|
||||
|
||||
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
|
||||
header("Location: users.php");
|
||||
exit;
|
||||
}
|
||||
|
||||
$user_id = $_GET['id'];
|
||||
|
||||
try {
|
||||
$pdo = db();
|
||||
$stmt = $pdo->prepare("SELECT id, name, email, role FROM users WHERE id = ?");
|
||||
$stmt->execute([$user_id]);
|
||||
$user = $stmt->fetch(PDO::FETCH_ASSOC);
|
||||
|
||||
if (!$user) {
|
||||
header("Location: users.php?error=not_found");
|
||||
exit;
|
||||
}
|
||||
} catch (PDOException $e) {
|
||||
$error_message = 'Database error: ' . $e->getMessage();
|
||||
}
|
||||
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
$name = $_POST['name'] ?? '';
|
||||
$email = $_POST['email'] ?? '';
|
||||
$role = $_POST['role'] ?? 'Employee';
|
||||
$password = $_POST['password'] ?? '';
|
||||
|
||||
if (empty($name) || empty($email)) {
|
||||
$error_message = 'Name and Email are required.';
|
||||
} elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
||||
$error_message = 'Invalid email format.';
|
||||
} else {
|
||||
try {
|
||||
$pdo = db();
|
||||
|
||||
// Check if email already exists for another user
|
||||
$stmt = $pdo->prepare("SELECT id FROM users WHERE email = ? AND id != ?");
|
||||
$stmt->execute([$email, $user_id]);
|
||||
if ($stmt->fetch()) {
|
||||
$error_message = 'Email already exists for another user.';
|
||||
} else {
|
||||
if (!empty($password)) {
|
||||
$hashed_password = password_hash($password, PASSWORD_DEFAULT);
|
||||
$sql = "UPDATE users SET name = ?, email = ?, role = ?, password = ? WHERE id = ?";
|
||||
$stmt = $pdo->prepare($sql);
|
||||
$stmt->execute([$name, $email, $role, $hashed_password, $user_id]);
|
||||
} else {
|
||||
$sql = "UPDATE users SET name = ?, email = ?, role = ? WHERE id = ?";
|
||||
$stmt = $pdo->prepare($sql);
|
||||
$stmt->execute([$name, $email, $role, $user_id]);
|
||||
}
|
||||
|
||||
header("Location: users.php?success=user_updated");
|
||||
exit;
|
||||
}
|
||||
} catch (PDOException $e) {
|
||||
$error_message = 'Database error: ' . $e->getMessage();
|
||||
}
|
||||
}
|
||||
}
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Edit User - IC-Inventory</title>
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
|
||||
<link rel="stylesheet" href="assets/css/custom.css?v=<?php echo time(); ?>">
|
||||
<link rel="preconnect" href="https://fonts.googleapis.com">
|
||||
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
||||
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
|
||||
<script src="https://unpkg.com/feather-icons"></script>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<div class="wrapper">
|
||||
<nav id="sidebar" class="d-flex flex-column flex-shrink-0 p-3">
|
||||
<a href="/" class="d-flex align-items-center mb-3 mb-md-0 me-md-auto text-decoration-none">
|
||||
<span class="fs-4">IC-Inventory</span>
|
||||
</a>
|
||||
<hr>
|
||||
<ul class="nav nav-pills flex-column mb-auto">
|
||||
<li class="nav-item"><a href="index.php" class="nav-link">Dashboard</a></li>
|
||||
<li><a href="index.php" class="nav-link">Assets</a></li>
|
||||
<?php if ($_SESSION['user_role'] === 'Admin'): ?>
|
||||
<li><a href="users.php" class="nav-link active">Users</a></li>
|
||||
<?php endif; ?>
|
||||
<li><a href="#" class="nav-link">Settings</a></li>
|
||||
</ul>
|
||||
<hr>
|
||||
<div>
|
||||
<span class="d-flex align-items-center text-decoration-none"><strong><?php echo htmlspecialchars($_SESSION['user_name']); ?></strong></span>
|
||||
<a href="logout.php" class="d-flex align-items-center text-decoration-none">
|
||||
<i data-feather="log-out" class="me-2"></i>
|
||||
<strong>Logout</strong>
|
||||
</a>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<main id="content">
|
||||
<div class="header">
|
||||
<h1>Edit User</h1>
|
||||
<div class="theme-switcher" id="theme-switcher"><i data-feather="moon"></i></div>
|
||||
</div>
|
||||
|
||||
<div class="surface p-4">
|
||||
<?php if ($error_message): ?>
|
||||
<div class="alert alert-danger"><?php echo htmlspecialchars($error_message); ?></div>
|
||||
<?php endif; ?>
|
||||
|
||||
<?php if ($user): ?>
|
||||
<form action="edit-user.php?id=<?php echo $user_id; ?>" method="post">
|
||||
<div class="mb-3">
|
||||
<label for="name" class="form-label">Name*</label>
|
||||
<input type="text" class="form-control" id="name" name="name" value="<?php echo htmlspecialchars($user['name']); ?>" required>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label for="email" class="form-label">Email*</label>
|
||||
<input type="email" class="form-control" id="email" name="email" value="<?php echo htmlspecialchars($user['email']); ?>" required>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label for="password" class="form-label">New Password</label>
|
||||
<input type="password" class="form-control" id="password" name="password">
|
||||
<div class="form-text">Leave blank to keep the current password.</div>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label for="role" class="form-label">Role</label>
|
||||
<select class="form-select" id="role" name="role">
|
||||
<option <?php if ($user['role'] === 'Employee') echo 'selected'; ?>>Employee</option>
|
||||
<option <?php if ($user['role'] === 'Asset Manager') echo 'selected'; ?>>Asset Manager</option>
|
||||
<option <?php if ($user['role'] === 'IT Technician') echo 'selected'; ?>>IT Technician</option>
|
||||
<option <?php if ($user['role'] === 'Admin') echo 'selected'; ?>>Admin</option>
|
||||
</select>
|
||||
</div>
|
||||
|
||||
<button type="submit" class="btn btn-primary">Update User</button>
|
||||
<a href="users.php" class="btn btn-secondary">Cancel</a>
|
||||
</form>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
</main>
|
||||
</div>
|
||||
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>
|
||||
<script src="assets/js/main.js?v=<?php echo time(); ?>"></script>
|
||||
<script>feather.replace();</script>
|
||||
</body>
|
||||
</html>
|
||||
308
index.php
308
index.php
@ -1,150 +1,186 @@
|
||||
<?php
|
||||
declare(strict_types=1);
|
||||
@ini_set('display_errors', '1');
|
||||
@error_reporting(E_ALL);
|
||||
@date_default_timezone_set('UTC');
|
||||
require_once 'auth-check.php';
|
||||
require_once 'db/config.php';
|
||||
|
||||
$phpVersion = PHP_VERSION;
|
||||
$now = date('Y-m-d H:i:s');
|
||||
// Function to execute query and return results
|
||||
function get_assets() {
|
||||
try {
|
||||
$pdo = db();
|
||||
// Check if table exists, if not, run migration
|
||||
$result = $pdo->query("SHOW TABLES LIKE 'assets'");
|
||||
if ($result->rowCount() == 0) {
|
||||
$sql = file_get_contents('db/migrations/001_create_assets_table.sql');
|
||||
$pdo->exec($sql);
|
||||
}
|
||||
|
||||
$stmt = $pdo->query('SELECT * FROM assets ORDER BY created_at DESC');
|
||||
return $stmt->fetchAll(PDO::FETCH_ASSOC);
|
||||
} catch (PDOException $e) {
|
||||
// In a real app, you'd log this error and show a user-friendly message.
|
||||
// For this initial setup, we'll just display the error.
|
||||
return ['error' => 'Database error: ' . $e->getMessage()];
|
||||
}
|
||||
}
|
||||
|
||||
$assets = get_assets();
|
||||
|
||||
function getStatusClass($status) {
|
||||
switch (strtolower($status)) {
|
||||
case 'in service':
|
||||
return 'status-in-service';
|
||||
case 'under repair':
|
||||
return 'status-under-repair';
|
||||
case 'retired':
|
||||
return 'status-retired';
|
||||
default:
|
||||
return '';
|
||||
}
|
||||
}
|
||||
?>
|
||||
<!doctype html>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||
<title>New Style</title>
|
||||
<?php
|
||||
// Read project preview data from environment
|
||||
$projectDescription = $_SERVER['PROJECT_DESCRIPTION'] ?? '';
|
||||
$projectImageUrl = $_SERVER['PROJECT_IMAGE_URL'] ?? '';
|
||||
?>
|
||||
<?php if ($projectDescription): ?>
|
||||
<!-- Meta description -->
|
||||
<meta name="description" content='<?= htmlspecialchars($projectDescription) ?>' />
|
||||
<!-- Open Graph meta tags -->
|
||||
<meta property="og:description" content="<?= htmlspecialchars($projectDescription) ?>" />
|
||||
<!-- Twitter meta tags -->
|
||||
<meta property="twitter:description" content="<?= htmlspecialchars($projectDescription) ?>" />
|
||||
<?php endif; ?>
|
||||
<?php if ($projectImageUrl): ?>
|
||||
<!-- Open Graph image -->
|
||||
<meta property="og:image" content="<?= htmlspecialchars($projectImageUrl) ?>" />
|
||||
<!-- Twitter image -->
|
||||
<meta property="twitter:image" content="<?= htmlspecialchars($projectImageUrl) ?>" />
|
||||
<?php endif; ?>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>IC-Inventory</title>
|
||||
<meta name="description" content="Built with Flatlogic Generator">
|
||||
<meta name="keywords" content="asset management, inventory control, company assets, IT inventory, asset tracking, equipment management, Built with Flatlogic Generator">
|
||||
<meta property="og:title" content="IC-Inventory">
|
||||
<meta property="og:description" content="Built with Flatlogic Generator">
|
||||
<meta property="og:image" content="">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
<meta name="twitter:image" content="">
|
||||
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
|
||||
<link rel="stylesheet" href="assets/css/custom.css?v=<?php echo time(); ?>">
|
||||
<link rel="preconnect" href="https://fonts.googleapis.com">
|
||||
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
||||
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;700&display=swap" rel="stylesheet">
|
||||
<style>
|
||||
:root {
|
||||
--bg-color-start: #6a11cb;
|
||||
--bg-color-end: #2575fc;
|
||||
--text-color: #ffffff;
|
||||
--card-bg-color: rgba(255, 255, 255, 0.01);
|
||||
--card-border-color: rgba(255, 255, 255, 0.1);
|
||||
}
|
||||
body {
|
||||
margin: 0;
|
||||
font-family: 'Inter', sans-serif;
|
||||
background: linear-gradient(45deg, var(--bg-color-start), var(--bg-color-end));
|
||||
color: var(--text-color);
|
||||
display: flex;
|
||||
justify-content: center;
|
||||
align-items: center;
|
||||
min-height: 100vh;
|
||||
text-align: center;
|
||||
overflow: hidden;
|
||||
position: relative;
|
||||
}
|
||||
body::before {
|
||||
content: '';
|
||||
position: absolute;
|
||||
top: 0;
|
||||
left: 0;
|
||||
width: 100%;
|
||||
height: 100%;
|
||||
background-image: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" width="100" height="100" viewBox="0 0 100 100"><path d="M-10 10L110 10M10 -10L10 110" stroke-width="1" stroke="rgba(255,255,255,0.05)"/></svg>');
|
||||
animation: bg-pan 20s linear infinite;
|
||||
z-index: -1;
|
||||
}
|
||||
@keyframes bg-pan {
|
||||
0% { background-position: 0% 0%; }
|
||||
100% { background-position: 100% 100%; }
|
||||
}
|
||||
main {
|
||||
padding: 2rem;
|
||||
}
|
||||
.card {
|
||||
background: var(--card-bg-color);
|
||||
border: 1px solid var(--card-border-color);
|
||||
border-radius: 16px;
|
||||
padding: 2rem;
|
||||
backdrop-filter: blur(20px);
|
||||
-webkit-backdrop-filter: blur(20px);
|
||||
box-shadow: 0 8px 32px 0 rgba(0, 0, 0, 0.1);
|
||||
}
|
||||
.loader {
|
||||
margin: 1.25rem auto 1.25rem;
|
||||
width: 48px;
|
||||
height: 48px;
|
||||
border: 3px solid rgba(255, 255, 255, 0.25);
|
||||
border-top-color: #fff;
|
||||
border-radius: 50%;
|
||||
animation: spin 1s linear infinite;
|
||||
}
|
||||
@keyframes spin {
|
||||
from { transform: rotate(0deg); }
|
||||
to { transform: rotate(360deg); }
|
||||
}
|
||||
.hint {
|
||||
opacity: 0.9;
|
||||
}
|
||||
.sr-only {
|
||||
position: absolute;
|
||||
width: 1px; height: 1px;
|
||||
padding: 0; margin: -1px;
|
||||
overflow: hidden;
|
||||
clip: rect(0, 0, 0, 0);
|
||||
white-space: nowrap; border: 0;
|
||||
}
|
||||
h1 {
|
||||
font-size: 3rem;
|
||||
font-weight: 700;
|
||||
margin: 0 0 1rem;
|
||||
letter-spacing: -1px;
|
||||
}
|
||||
p {
|
||||
margin: 0.5rem 0;
|
||||
font-size: 1.1rem;
|
||||
}
|
||||
code {
|
||||
background: rgba(0,0,0,0.2);
|
||||
padding: 2px 6px;
|
||||
border-radius: 4px;
|
||||
font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
|
||||
}
|
||||
footer {
|
||||
position: absolute;
|
||||
bottom: 1rem;
|
||||
font-size: 0.8rem;
|
||||
opacity: 0.7;
|
||||
}
|
||||
</style>
|
||||
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
|
||||
<script src="https://unpkg.com/feather-icons"></script>
|
||||
</head>
|
||||
<body>
|
||||
<main>
|
||||
<div class="card">
|
||||
<h1>Analyzing your requirements and generating your website…</h1>
|
||||
<div class="loader" role="status" aria-live="polite" aria-label="Applying initial changes">
|
||||
<span class="sr-only">Loading…</span>
|
||||
|
||||
<div class="wrapper">
|
||||
<nav id="sidebar" class="d-flex flex-column flex-shrink-0 p-3">
|
||||
<a href="/" class="d-flex align-items-center mb-3 mb-md-0 me-md-auto text-decoration-none">
|
||||
<span class="fs-4">IC-Inventory</span>
|
||||
</a>
|
||||
<hr>
|
||||
<ul class="nav nav-pills flex-column mb-auto">
|
||||
<li class="nav-item">
|
||||
<a href="#" class="nav-link active" aria-current="page">
|
||||
<i data-feather="home" class="me-2"></i>
|
||||
Dashboard
|
||||
</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="#" class="nav-link">
|
||||
<i data-feather="box" class="me-2"></i>
|
||||
Assets
|
||||
</a>
|
||||
</li>
|
||||
<?php if ($_SESSION['user_role'] === 'Admin'): ?>
|
||||
<li>
|
||||
<a href="users.php" class="nav-link">
|
||||
<i data-feather="users" class="me-2"></i>
|
||||
Users
|
||||
</a>
|
||||
</li>
|
||||
<?php endif; ?>
|
||||
<li>
|
||||
<a href="#" class="nav-link">
|
||||
<i data-feather="settings" class="me-2"></i>
|
||||
Settings
|
||||
</a>
|
||||
</li>
|
||||
</ul>
|
||||
<hr>
|
||||
<div>
|
||||
<span class="d-flex align-items-center text-decoration-none"><strong><?php echo htmlspecialchars($_SESSION['user_name']); ?></strong></span>
|
||||
<a href="logout.php" class="d-flex align-items-center text-decoration-none">
|
||||
<i data-feather="log-out" class="me-2"></i>
|
||||
<strong>Logout</strong>
|
||||
</a>
|
||||
</div>
|
||||
<p class="hint"><?= ($_SERVER['HTTP_HOST'] ?? '') === 'appwizzy.com' ? 'AppWizzy' : 'Flatlogic' ?> AI is collecting your requirements and applying the first changes.</p>
|
||||
<p class="hint">This page will update automatically as the plan is implemented.</p>
|
||||
<p>Runtime: PHP <code><?= htmlspecialchars($phpVersion) ?></code> — UTC <code><?= htmlspecialchars($now) ?></code></p>
|
||||
</nav>
|
||||
|
||||
<main id="content">
|
||||
<div class="header">
|
||||
<h1>Asset Dashboard</h1>
|
||||
<div>
|
||||
<a href="add-asset.php" class="btn btn-primary">Add New Asset</a>
|
||||
<div class="theme-switcher" id="theme-switcher">
|
||||
<i data-feather="moon"></i>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<?php if (isset($_GET['success']) && $_GET['success'] === 'asset_added'): ?>
|
||||
<div class="alert alert-success">Asset successfully added!</div>
|
||||
<?php elseif (isset($_GET['success']) && $_GET['success'] === 'asset_updated'): ?>
|
||||
<div class="alert alert-success">Asset successfully updated!</div>
|
||||
<?php elseif (isset($_GET['success']) && $_GET['success'] === 'asset_deleted'): ?>
|
||||
<div class="alert alert-success">Asset successfully deleted!</div>
|
||||
<?php elseif (isset($_GET['error']) && $_GET['error'] === 'access_denied'): ?>
|
||||
<div class="alert alert-danger">You do not have permission to access that page.</div>
|
||||
<?php endif; ?>
|
||||
|
||||
<div class="surface p-4">
|
||||
<?php if (isset($assets['error'])): ?>
|
||||
<div class="alert alert-danger">
|
||||
<?php echo htmlspecialchars($assets['error']); ?>
|
||||
</div>
|
||||
<?php elseif (empty($assets)): ?>
|
||||
<div class="text-center p-5">
|
||||
<h4>No assets found.</h4>
|
||||
<p>Get started by adding your first company asset.</p>
|
||||
<a href="add-asset.php" class="btn btn-primary">Add Asset</a>
|
||||
</div>
|
||||
<?php else: ?>
|
||||
<div class="table-responsive">
|
||||
<table class="table asset-table">
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Name</th>
|
||||
<th>Asset Tag</th>
|
||||
<th>Status</th>
|
||||
<th>Location</th>
|
||||
<th>Manufacturer</th>
|
||||
<th>Model</th>
|
||||
<th>Purchase Date</th>
|
||||
<th>Actions</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<?php foreach ($assets as $asset): ?>
|
||||
<tr>
|
||||
<td><?php echo htmlspecialchars($asset['name']); ?></td>
|
||||
<td><?php echo htmlspecialchars($asset['asset_tag']); ?></td>
|
||||
<td><span class="status <?php echo getStatusClass($asset['status']); ?>"><?php echo htmlspecialchars($asset['status']); ?></span></td>
|
||||
<td><?php echo htmlspecialchars($asset['location']); ?></td>
|
||||
<td><?php echo htmlspecialchars($asset['manufacturer']); ?></td>
|
||||
<td><?php echo htmlspecialchars($asset['model']); ?></td>
|
||||
<td><?php echo htmlspecialchars($asset['purchase_date']); ?></td>
|
||||
<td>
|
||||
<a href="edit-asset.php?id=<?php echo $asset['id']; ?>" class="btn btn-sm btn-outline-primary">Edit</a>
|
||||
<?php if (in_array($_SESSION['user_role'], ['Admin', 'Asset Manager', 'IT Technician'])): ?>
|
||||
<a href="delete-asset.php?id=<?php echo $asset['id']; ?>" class="btn btn-sm btn-outline-danger" onclick="return confirm('Are you sure you want to delete this asset?');">Delete</a>
|
||||
<?php endif; ?>
|
||||
</td>
|
||||
</tr>
|
||||
<?php endforeach; ?>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
</main>
|
||||
<footer>
|
||||
Page updated: <?= htmlspecialchars($now) ?> (UTC)
|
||||
</footer>
|
||||
</div>
|
||||
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>
|
||||
<script src="assets/js/main.js?v=<?php echo time(); ?>"></script>
|
||||
<script>
|
||||
feather.replace();
|
||||
</script>
|
||||
</body>
|
||||
</html>
|
||||
87
login.php
Normal file
87
login.php
Normal file
@ -0,0 +1,87 @@
|
||||
<?php
|
||||
session_start();
|
||||
require_once 'db/config.php';
|
||||
|
||||
$error_message = '';
|
||||
|
||||
// If user is already logged in, redirect to dashboard
|
||||
if (isset($_SESSION['user_id'])) {
|
||||
header("Location: index.php");
|
||||
exit;
|
||||
}
|
||||
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
$email = $_POST['email'] ?? '';
|
||||
$password = $_POST['password'] ?? '';
|
||||
|
||||
if (empty($email) || empty($password)) {
|
||||
$error_message = 'Please enter both email and password.';
|
||||
} else {
|
||||
try {
|
||||
$pdo = db();
|
||||
$stmt = $pdo->prepare("SELECT * FROM users WHERE email = ?");
|
||||
$stmt->execute([$email]);
|
||||
$user = $stmt->fetch(PDO::FETCH_ASSOC);
|
||||
|
||||
if ($user && password_verify($password, $user['password'])) {
|
||||
$_SESSION['user_id'] = $user['id'];
|
||||
$_SESSION['user_name'] = $user['name'];
|
||||
$_SESSION['user_role'] = $user['role'];
|
||||
header("Location: index.php");
|
||||
exit;
|
||||
} else {
|
||||
$error_message = 'Invalid email or password.';
|
||||
}
|
||||
} catch (PDOException $e) {
|
||||
$error_message = 'Database error: ' . $e->getMessage();
|
||||
}
|
||||
}
|
||||
}
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Login - IC-Inventory</title>
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
|
||||
<link rel="stylesheet" href="assets/css/custom.css?v=<?php echo time(); ?>">
|
||||
<style>
|
||||
body {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
min-height: 100vh;
|
||||
background-color: #f7f9fc;
|
||||
}
|
||||
.login-card {
|
||||
max-width: 400px;
|
||||
width: 100%;
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<div class="card login-card shadow-sm">
|
||||
<div class="card-body p-5">
|
||||
<h1 class="card-title text-center mb-4">IC-Inventory</h1>
|
||||
<?php if ($error_message): ?>
|
||||
<div class="alert alert-danger"><?php echo htmlspecialchars($error_message); ?></div>
|
||||
<?php endif; ?>
|
||||
<form action="login.php" method="post">
|
||||
<div class="mb-3">
|
||||
<label for="email" class="form-label">Email address</label>
|
||||
<input type="email" class="form-control" id="email" name="email" required>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label for="password" class="form-label">Password</label>
|
||||
<input type="password" class="form-control" id="password" name="password" required>
|
||||
</div>
|
||||
<button type="submit" class="btn btn-primary w-100">Login</button>
|
||||
</form>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>
|
||||
</body>
|
||||
</html>
|
||||
7
logout.php
Normal file
7
logout.php
Normal file
@ -0,0 +1,7 @@
|
||||
<?php
|
||||
session_start();
|
||||
session_unset();
|
||||
session_destroy();
|
||||
header("Location: login.php");
|
||||
exit;
|
||||
?>
|
||||
159
users.php
Normal file
159
users.php
Normal file
@ -0,0 +1,159 @@
|
||||
<?php
|
||||
require_once 'auth-check.php';
|
||||
if ($_SESSION['user_role'] !== 'Admin') {
|
||||
header("Location: index.php?error=access_denied");
|
||||
exit;
|
||||
}
|
||||
require_once 'db/config.php';
|
||||
|
||||
// Function to execute query and return results
|
||||
function get_users() {
|
||||
try {
|
||||
$pdo = db();
|
||||
// Check if table exists, if not, run migration
|
||||
$result = $pdo->query("SHOW TABLES LIKE 'users'");
|
||||
if ($result->rowCount() == 0) {
|
||||
$sql = file_get_contents('db/migrations/002_create_users_table.sql');
|
||||
$pdo->exec($sql);
|
||||
}
|
||||
|
||||
$stmt = $pdo->query('SELECT id, name, email, role, created_at FROM users ORDER BY created_at DESC');
|
||||
return $stmt->fetchAll(PDO::FETCH_ASSOC);
|
||||
} catch (PDOException $e) {
|
||||
return ['error' => 'Database error: ' . $e->getMessage()];
|
||||
}
|
||||
}
|
||||
|
||||
$users = get_users();
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>User Management - IC-Inventory</title>
|
||||
<meta name="description" content="Manage users of the IC-Inventory system.">
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
|
||||
<link rel="stylesheet" href="assets/css/custom.css?v=<?php echo time(); ?>">
|
||||
<link rel="preconnect" href="https://fonts.googleapis.com">
|
||||
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
||||
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
|
||||
<script src="https://unpkg.com/feather-icons"></script>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<div class="wrapper">
|
||||
<nav id="sidebar" class="d-flex flex-column flex-shrink-0 p-3">
|
||||
<a href="/" class="d-flex align-items-center mb-3 mb-md-0 me-md-auto text-decoration-none">
|
||||
<span class="fs-4">IC-Inventory</span>
|
||||
</a>
|
||||
<hr>
|
||||
<ul class="nav nav-pills flex-column mb-auto">
|
||||
<li class="nav-item">
|
||||
<a href="index.php" class="nav-link" aria-current="page">
|
||||
<i data-feather="home" class="me-2"></i>
|
||||
Dashboard
|
||||
</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="index.php" class="nav-link">
|
||||
<i data-feather="box" class="me-2"></i>
|
||||
Assets
|
||||
</a>
|
||||
</li>
|
||||
<?php if ($_SESSION['user_role'] === 'Admin'): ?>
|
||||
<li>
|
||||
<a href="users.php" class="nav-link active">
|
||||
<i data-feather="users" class="me-2"></i>
|
||||
Users
|
||||
</a>
|
||||
</li>
|
||||
<?php endif; ?>
|
||||
<li>
|
||||
<a href="#" class="nav-link">
|
||||
<i data-feather="settings" class="me-2"></i>
|
||||
Settings
|
||||
</a>
|
||||
</li>
|
||||
</ul>
|
||||
<hr>
|
||||
<div>
|
||||
<span class="d-flex align-items-center text-decoration-none"><strong><?php echo htmlspecialchars($_SESSION['user_name']); ?></strong></span>
|
||||
<a href="logout.php" class="d-flex align-items-center text-decoration-none">
|
||||
<i data-feather="log-out" class="me-2"></i>
|
||||
<strong>Logout</strong>
|
||||
</a>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<main id="content">
|
||||
<div class="header">
|
||||
<h1>User Management</h1>
|
||||
<div>
|
||||
<a href="add-user.php" class="btn btn-primary">Add New User</a>
|
||||
<div class="theme-switcher" id="theme-switcher">
|
||||
<i data-feather="moon"></i>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="surface p-4">
|
||||
<?php if (isset($_GET['success']) && $_GET['success'] === 'user_added'): ?>
|
||||
<div class="alert alert-success">User successfully added!</div>
|
||||
<?php elseif (isset($_GET['success']) && $_GET['success'] === 'user_updated'): ?>
|
||||
<div class="alert alert-success">User successfully updated!</div>
|
||||
<?php elseif (isset($_GET['success']) && $_GET['success'] === 'user_deleted'): ?>
|
||||
<div class="alert alert-success">User successfully deleted!</div>
|
||||
<?php elseif (isset($_GET['error']) && $_GET['error'] === 'cannot_delete_admin'): ?>
|
||||
<div class="alert alert-danger">The default admin user cannot be deleted.</div>
|
||||
<?php endif; ?>
|
||||
<?php if (isset($users['error'])): ?>
|
||||
<div class="alert alert-danger">
|
||||
<?php echo htmlspecialchars($users['error']); ?>
|
||||
</div>
|
||||
<?php elseif (empty($users)): ?>
|
||||
<div class="text-center p-5">
|
||||
<h4>No users found.</h4>
|
||||
<p>Get started by adding your first user.</p>
|
||||
<a href="add-user.php" class="btn btn-primary">Add User</a>
|
||||
</div>
|
||||
<?php else: ?>
|
||||
<div class="table-responsive">
|
||||
<table class="table user-table">
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Name</th>
|
||||
<th>Email</th>
|
||||
<th>Role</th>
|
||||
<th>Created At</th>
|
||||
<th>Actions</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<?php foreach ($users as $user): ?>
|
||||
<tr>
|
||||
<td><?php echo htmlspecialchars($user['name']); ?></td>
|
||||
<td><?php echo htmlspecialchars($user['email']); ?></td>
|
||||
<td><?php echo htmlspecialchars($user['role']); ?></td>
|
||||
<td><?php echo htmlspecialchars($user['created_at']); ?></td>
|
||||
<td>
|
||||
<a href="edit-user.php?id=<?php echo $user['id']; ?>" class="btn btn-sm btn-outline-primary">Edit</a>
|
||||
<a href="delete-user.php?id=<?php echo $user['id']; ?>" class="btn btn-sm btn-outline-danger" onclick="return confirm('Are you sure you want to delete this user?');">Delete</a>
|
||||
</td>
|
||||
</tr>
|
||||
<?php endforeach; ?>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
</main>
|
||||
</div>
|
||||
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>
|
||||
<script src="assets/js/main.js?v=<?php echo time(); ?>"></script>
|
||||
<script>
|
||||
feather.replace();
|
||||
</script>
|
||||
</body>
|
||||
</html>
|
||||
Loading…
x
Reference in New Issue
Block a user