239 lines
8.5 KiB
PHP
239 lines
8.5 KiB
PHP
<?php
|
|
|
|
namespace App\Controllers;
|
|
|
|
use App\Core\Controller;
|
|
use App\Services\ApkService;
|
|
|
|
class AdminController extends Controller {
|
|
|
|
private function checkAuth() {
|
|
if (!isset($_SESSION['user_id'])) {
|
|
$this->redirect('/admin/login');
|
|
}
|
|
}
|
|
|
|
public function loginForm() {
|
|
if (isset($_SESSION['user_id'])) {
|
|
$this->redirect('/admin/dashboard');
|
|
}
|
|
$this->view('admin/login');
|
|
}
|
|
|
|
public function login() {
|
|
$username = $_POST['username'] ?? '';
|
|
$password = $_POST['password'] ?? '';
|
|
|
|
$db = db_pdo();
|
|
$stmt = $db->prepare("SELECT * FROM users WHERE username = ?");
|
|
$stmt->execute([$username]);
|
|
$user = $stmt->fetch();
|
|
|
|
if ($user && password_verify($password, $user['password'])) {
|
|
$_SESSION['user_id'] = $user['id'];
|
|
$_SESSION['username'] = $user['username'];
|
|
$this->redirect('/admin/dashboard');
|
|
} else {
|
|
$error = "Invalid username or password";
|
|
$this->view('admin/login', ['error' => $error]);
|
|
}
|
|
}
|
|
|
|
public function logout() {
|
|
session_destroy();
|
|
$this->redirect('/admin/login');
|
|
}
|
|
|
|
public function dashboard() {
|
|
$this->checkAuth();
|
|
$apkService = new ApkService();
|
|
$db = db_pdo();
|
|
$stats = [
|
|
'total_apks' => count($apkService->getAllApks()),
|
|
'total_downloads' => $this->getTotalDownloads(),
|
|
'total_users' => $db->query("SELECT COUNT(*) FROM users")->fetchColumn(),
|
|
'pending_withdrawals' => $db->query("SELECT COUNT(*) FROM withdrawals WHERE status = 'pending'")->fetchColumn(),
|
|
'recent_apks' => array_slice($apkService->getAllApks(), 0, 5)
|
|
];
|
|
$this->view('admin/dashboard', $stats);
|
|
}
|
|
|
|
private function getTotalDownloads() {
|
|
$db = db_pdo();
|
|
return $db->query("SELECT SUM(total_downloads) FROM apks")->fetchColumn() ?: 0;
|
|
}
|
|
|
|
// APK Management
|
|
public function apks() {
|
|
$this->checkAuth();
|
|
$apkService = new ApkService();
|
|
$apks = $apkService->getAllApks();
|
|
$this->view('admin/apks/index', ['apks' => $apks]);
|
|
}
|
|
|
|
public function addApkForm() {
|
|
$this->checkAuth();
|
|
$db = db_pdo();
|
|
$categories = $db->query("SELECT * FROM categories")->fetchAll();
|
|
$this->view('admin/apks/form', ['action' => 'add', 'categories' => $categories]);
|
|
}
|
|
|
|
public function addApk() {
|
|
$this->checkAuth();
|
|
$title = $_POST['title'];
|
|
$slug = $this->slugify($title);
|
|
$description = $_POST['description'];
|
|
$version = $_POST['version'];
|
|
$image_url = $_POST['image_url'];
|
|
$download_url = $_POST['download_url'];
|
|
$category_id = $_POST['category_id'] ?? null;
|
|
$status = $_POST['status'] ?? 'published';
|
|
$is_vip = isset($_POST['is_vip']) ? 1 : 0;
|
|
|
|
$icon_path = $this->handleUpload('icon_file');
|
|
|
|
$db = db_pdo();
|
|
$stmt = $db->prepare("INSERT INTO apks (title, slug, description, version, image_url, icon_path, download_url, category_id, status, is_vip, display_order) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0)");
|
|
$stmt->execute([$title, $slug, $description, $version, $image_url, $icon_path, $download_url, $category_id, $status, $is_vip]);
|
|
|
|
$this->redirect('/admin/apks');
|
|
}
|
|
|
|
public function editApkForm($params) {
|
|
$this->checkAuth();
|
|
$apkService = new ApkService();
|
|
$apk = $apkService->getApkById($params['id']);
|
|
$db = db_pdo();
|
|
$categories = $db->query("SELECT * FROM categories")->fetchAll();
|
|
$this->view('admin/apks/form', ['action' => 'edit', 'apk' => $apk, 'categories' => $categories]);
|
|
}
|
|
|
|
public function editApk($params) {
|
|
$this->checkAuth();
|
|
$title = $_POST['title'];
|
|
$description = $_POST['description'];
|
|
$version = $_POST['version'];
|
|
$image_url = $_POST['image_url'];
|
|
$download_url = $_POST['download_url'];
|
|
$category_id = $_POST['category_id'] ?? null;
|
|
$status = $_POST['status'];
|
|
$is_vip = isset($_POST['is_vip']) ? 1 : 0;
|
|
|
|
$db = db_pdo();
|
|
$apk = $db->query("SELECT * FROM apks WHERE id = " . $params['id'])->fetch();
|
|
$icon_path = $this->handleUpload('icon_file') ?: $apk['icon_path'];
|
|
|
|
$stmt = $db->prepare("UPDATE apks SET title = ?, description = ?, version = ?, image_url = ?, icon_path = ?, download_url = ?, category_id = ?, status = ?, is_vip = ? WHERE id = ?");
|
|
$stmt->execute([$title, $description, $version, $image_url, $icon_path, $download_url, $category_id, $status, $is_vip, $params['id']]);
|
|
|
|
$this->redirect('/admin/apks');
|
|
}
|
|
|
|
public function updateOrder() {
|
|
$this->checkAuth();
|
|
$order = $_POST['order'] ?? [];
|
|
$db = db_pdo();
|
|
foreach ($order as $index => $id) {
|
|
$stmt = $db->prepare("UPDATE apks SET display_order = ? WHERE id = ?");
|
|
$stmt->execute([$index, $id]);
|
|
}
|
|
header('Content-Type: application/json');
|
|
echo json_encode(['success' => true]);
|
|
}
|
|
|
|
private function handleUpload($field) {
|
|
if (!isset($_FILES[$field]) || $_FILES[$field]['error'] !== UPLOAD_ERR_OK) {
|
|
return null;
|
|
}
|
|
|
|
$uploadDir = 'assets/uploads/icons/';
|
|
if (!is_dir($uploadDir)) {
|
|
mkdir($uploadDir, 0775, true);
|
|
}
|
|
|
|
$ext = pathinfo($_FILES[$field]['name'], PATHINFO_EXTENSION);
|
|
$fileName = uniqid() . '.' . $ext;
|
|
$targetPath = $uploadDir . $fileName;
|
|
|
|
if (move_uploaded_file($_FILES[$field]['tmp_name'], $targetPath)) {
|
|
return $targetPath;
|
|
}
|
|
|
|
return null;
|
|
}
|
|
|
|
// Category Management
|
|
public function categories() {
|
|
$this->checkAuth();
|
|
$db = db_pdo();
|
|
$categories = $db->query("SELECT * FROM categories")->fetchAll();
|
|
$this->view('admin/categories/index', ['categories' => $categories]);
|
|
}
|
|
|
|
public function addCategory() {
|
|
$this->checkAuth();
|
|
$name = $_POST['name'];
|
|
$slug = $this->slugify($name);
|
|
$db = db_pdo();
|
|
$stmt = $db->prepare("INSERT INTO categories (name, slug) VALUES (?, ?)");
|
|
$stmt->execute([$name, $slug]);
|
|
$this->redirect('/admin/categories');
|
|
}
|
|
|
|
public function deleteCategory($params) {
|
|
$this->checkAuth();
|
|
$db = db_pdo();
|
|
$stmt = $db->prepare("DELETE FROM categories WHERE id = ?");
|
|
$stmt->execute([$params['id']]);
|
|
$this->redirect('/admin/categories');
|
|
}
|
|
|
|
// Withdrawal Management
|
|
public function withdrawals() {
|
|
$this->checkAuth();
|
|
$db = db_pdo();
|
|
$withdrawals = $db->query("SELECT w.*, u.username FROM withdrawals w JOIN users u ON w.user_id = u.id ORDER BY w.created_at DESC")->fetchAll();
|
|
$this->view('admin/withdrawals/index', ['withdrawals' => $withdrawals]);
|
|
}
|
|
|
|
public function approveWithdrawal($params) {
|
|
$this->checkAuth();
|
|
$db = db_pdo();
|
|
$stmt = $db->prepare("UPDATE withdrawals SET status = 'approved' WHERE id = ?");
|
|
$stmt->execute([$params['id']]);
|
|
$this->redirect('/admin/withdrawals');
|
|
}
|
|
|
|
public function rejectWithdrawal($params) {
|
|
$this->checkAuth();
|
|
$db = db_pdo();
|
|
// Refund balance if rejected? The user didn't specify, but let's do it for fairness
|
|
$wd = $db->query("SELECT * FROM withdrawals WHERE id = " . $params['id'])->fetch();
|
|
if ($wd && $wd['status'] === 'pending') {
|
|
$stmt = $db->prepare("UPDATE users SET balance = balance + ? WHERE id = ?");
|
|
$stmt->execute([$wd['amount'], $wd['user_id']]);
|
|
|
|
$stmt = $db->prepare("UPDATE withdrawals SET status = 'rejected' WHERE id = ?");
|
|
$stmt->execute([$params['id']]);
|
|
}
|
|
$this->redirect('/admin/withdrawals');
|
|
}
|
|
|
|
public function deleteApk($params) {
|
|
$this->checkAuth();
|
|
$db = db_pdo();
|
|
$stmt = $db->prepare("DELETE FROM apks WHERE id = ?");
|
|
$stmt->execute([$params['id']]);
|
|
$this->redirect('/admin/apks');
|
|
}
|
|
|
|
private function slugify($text) {
|
|
$text = preg_replace('~[^\pL\d]+~u', '-', $text);
|
|
$text = iconv('utf-8', 'us-ascii//TRANSLIT', $text);
|
|
$text = preg_replace('~[^-\w]+~', '', $text);
|
|
$text = trim($text, '-');
|
|
$text = preg_replace('~-+~', '-', $text);
|
|
$text = strtolower($text);
|
|
return empty($text) ? 'n-a' : $text;
|
|
}
|
|
} |