Files
HouseHub/settings.php
FeFeClochette a7a8244a33
Deploy HouseHub / deploy (push) Successful in 2s
enable view
2026-09-17 10:49:49 +02:00

861 lines
40 KiB
PHP
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
<?php
require __DIR__ . '/includes/auth.php';
require_login();
require_once __DIR__ . '/includes/meta_db.php';
require_once __DIR__ . '/includes/crypto.php';
require_once __DIR__ . '/includes/icloud_caldav.php';
require_once __DIR__ . '/includes/i18n.php';
$user_id = $_SESSION['user']['id'];
$family_id = $_SESSION['user']['family_id'];
$error = null;
$success = null;
$meta_pdo->exec("
CREATE TABLE IF NOT EXISTS user_calendar_integrations (
id INT AUTO_INCREMENT PRIMARY KEY,
user_id INT NOT NULL,
provider VARCHAR(50) NOT NULL DEFAULT 'icloud_caldav',
username VARCHAR(255) NOT NULL,
secret_encrypted TEXT NOT NULL,
dav_principal_url VARCHAR(1024) DEFAULT NULL,
calendar_url VARCHAR(1024) DEFAULT NULL,
status VARCHAR(30) DEFAULT 'connected',
last_sync_at DATETIME DEFAULT NULL,
created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
updated_at DATETIME DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
UNIQUE KEY uq_user_provider (user_id, provider)
)");
// ─── Actions ──────────────────────────────────────────────────────────────────
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (!verify_csrf($_POST['csrf_token'] ?? null)) {
if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) === 'xmlhttprequest') {
header('Content-Type: application/json');
echo json_encode(['success' => false, 'error' => tr('error_csrf')]);
exit;
}
$error = tr('error_csrf');
} else {
$action = $_POST['action'] ?? '';
if ($action === 'set_modules' && $family_id) {
$all = ['calendar', 'budget', 'holidays', 'gifts', 'garage', 'memo', 'todo', 'liste', 'calendar_ios', 'printvault', 'planka', 'food'];
$allViews = ['food_meals', 'food_liste', 'budget_prev', 'budget_epargne', 'budget_provisions'];
$enabled = array_values(array_filter($all, fn($m) => isset($_POST['mod_' . $m])));
$enabledViews = array_values(array_filter($allViews, fn($v) => isset($_POST['view_' . $v])));
if (empty($enabled)) {
$error = tr('set_err_min_module');
} else {
$meta_pdo->prepare("UPDATE families SET enabled_modules = ?, enabled_views = ? WHERE id = ?")
->execute([json_encode($enabled), json_encode($enabledViews), $family_id]);
$_SESSION['enabled_modules'] = $enabled;
$_SESSION['enabled_views'] = $enabledViews;
$success = tr('set_success_modules');
}
}
if ($action === 'set_lang') {
$lang = $_POST['lang'] ?? 'fr';
if (in_array($lang, ['fr', 'ca', 'en'])) {
$_SESSION['app_lang'] = $lang;
$meta_pdo->prepare("UPDATE users SET lang = ? WHERE id = ?")
->execute([$lang, $user_id]);
$success = tr('set_success_lang');
}
}
if ($action === 'update_profile') {
$display_name = trim($_POST['display_name'] ?? '');
$color = trim($_POST['color'] ?? '#0891b2');
if (!$display_name) {
$error = tr('set_err_empty_name');
} else {
$meta_pdo->prepare("UPDATE users SET display_name = ? WHERE id = ?")
->execute([$display_name, $user_id]);
require_once __DIR__ . '/includes/db.php';
if (isset($pdo)) {
$stmtPeopleColor = $pdo->prepare("UPDATE pf_people SET color = ? WHERE user_id = ?");
$stmtPeopleColor->execute([$color, $user_id]);
}
$_SESSION['user']['display_name'] = $display_name;
$success = tr('set_success_profile');
}
}
if ($action === 'change_password') {
$current = $_POST['current_password'] ?? '';
$new = $_POST['new_password'] ?? '';
$confirm = $_POST['confirm_password'] ?? '';
$row = $meta_pdo->prepare("SELECT password_hash FROM users WHERE id = ?");
$row->execute([$user_id]);
$row = $row->fetch();
if (!password_verify($current, $row['password_hash'])) {
$error = tr('set_err_wrong_pwd');
} elseif (strlen($new) < 6) {
$error = tr('set_err_pwd_length');
} elseif ($new !== $confirm) {
$error = tr('set_err_pwd_match');
} else {
$meta_pdo->prepare("UPDATE users SET password_hash = ? WHERE id = ?")
->execute([password_hash($new, PASSWORD_BCRYPT), $user_id]);
$success = tr('set_success_pwd');
}
}
if ($action === 'update_family_name' && $family_id) {
$name = trim($_POST['family_name'] ?? '');
if ($name) {
$meta_pdo->prepare("UPDATE families SET name = ? WHERE id = ?")
->execute([$name, $family_id]);
$success = tr('set_success_family');
}
}
if ($action === 'regen_invite' && $family_id) {
$new_code = bin2hex(random_bytes(8));
$meta_pdo->prepare("UPDATE families SET invite_code = ? WHERE id = ?")
->execute([$new_code, $family_id]);
$success = tr('set_success_invite');
}
if ($action === 'upload_home_bg' && $family_id) {
$upload_dir = '/uploads/';
if (!is_dir($upload_dir)) @mkdir($upload_dir, 0755, true);
$file = $_FILES['home_bg'] ?? null;
if ($file && $file['error'] === 0) {
$ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
if (!in_array($ext, ['jpg','jpeg','png','webp'])) {
$error = tr('set_err_bg_format');
} else {
$dest = $upload_dir . 'home_bg_' . $family_id . '.' . $ext;
foreach (glob($upload_dir . 'home_bg_' . $family_id . '.*') as $old) @unlink($old);
if (move_uploaded_file($file['tmp_name'], $dest)) {
$success = tr('set_success_bg');
} else {
$error = tr('set_err_upload');
}
}
}
}
if ($action === 'reset_home_bg' && $family_id) {
foreach (glob('/uploads/home_bg_' . $family_id . '.*') as $old) @unlink($old);
$success = tr('set_success_bg_reset');
}
if ($action === 'grocery_history_max' && $family_id) {
require_once __DIR__ . '/includes/db.php';
if (!isset($pdo)) {
$error = tr('set_err_db_unavailable');
} else {
$n = (int) ($_POST['history_max'] ?? 20);
$n = max(1, min(50, $n));
try {
$pdo->prepare(
"INSERT INTO pf_notes (note_type, reference_id, content) VALUES ('grocery_settings','history_max',?) ON DUPLICATE KEY UPDATE content=VALUES(content)"
)->execute([(string) $n]);
$success = tr('groceries_settings_saved') ?: 'Paramètres des courses enregistrés.';
} catch (\Throwable $e) {
$error = (tr('groceries_settings_error') ?: 'Erreur') . ' : ' . $e->getMessage();
}
}
}
if ($action === 'calendar_ios_save') {
$username = trim($_POST['icloud_username'] ?? '');
$appPassword = hh_normalize_apple_app_password((string) ($_POST['icloud_app_password'] ?? ''));
$calendarUrl = trim($_POST['icloud_calendar_url'] ?? '');
if (!$username || !$appPassword || !$calendarUrl) {
$error = tr('set_err_ios_missing');
} else {
try {
$resolvedUrl = hh_icloud_resolve_calendar_url_if_needed($username, $appPassword, $calendarUrl);
$encrypted = hh_encrypt_secret($appPassword);
$meta_pdo->prepare("
INSERT INTO user_calendar_integrations (user_id, provider, username, secret_encrypted, calendar_url, status, updated_at)
VALUES (?, 'icloud_caldav', ?, ?, ?, 'connected', NOW())
ON DUPLICATE KEY UPDATE username=VALUES(username), secret_encrypted=VALUES(secret_encrypted), calendar_url=VALUES(calendar_url), status='connected', updated_at=NOW()
")->execute([$user_id, $username, $encrypted, $resolvedUrl]);
$msg = tr('set_success_ios');
if (rtrim($resolvedUrl, '/') !== rtrim($calendarUrl, '/')) {
$msg .= tr('set_success_ios_auto');
}
$success = $msg;
} catch (\Throwable $e) {
$error = tr('set_err_ios_save') . $e->getMessage();
}
}
}
if ($action === 'calendar_ios_test') {
$row = $meta_pdo->prepare("SELECT id, username, secret_encrypted, calendar_url FROM user_calendar_integrations WHERE user_id = ? AND provider='icloud_caldav'");
$row->execute([$user_id]);
$integration = $row->fetch();
if (!$integration) {
$error = tr('set_err_ios_none');
} else {
try {
$pwd = hh_normalize_apple_app_password(hh_decrypt_secret($integration['secret_encrypted']));
$calendarUrl = trim($integration['calendar_url']);
$resolvedUrl = hh_icloud_resolve_calendar_url_if_needed($integration['username'], $pwd, $calendarUrl);
$code = hh_caldav_test_calendar_collection($integration['username'], $pwd, $resolvedUrl);
if (in_array($code, [200, 207], true)) {
if (rtrim($resolvedUrl, '/') !== rtrim($calendarUrl, '/')) {
$meta_pdo->prepare("UPDATE user_calendar_integrations SET calendar_url = ? WHERE id = ?")
->execute([$resolvedUrl, $integration['id']]);
}
$success = sprintf(tr('set_success_ios_test'), $code);
} else {
$error = sprintf(tr('set_err_ios_test'), $code);
}
} catch (\Throwable $e) {
$error = tr('set_err_ios_test_fail') . $e->getMessage();
}
}
}
if ($action === 'calendar_ios_disconnect') {
$meta_pdo->prepare("DELETE FROM user_calendar_integrations WHERE user_id = ? AND provider='icloud_caldav'")->execute([$user_id]);
$success = tr('set_success_ios_del');
}
// --- GESTION DES PROFILS RATTACHÉS (Enfants, Nounous, etc.) ---
if ($action === 'add_attached_profile') {
$name = trim($_POST['profile_name'] ?? '');
$role = trim($_POST['profile_role'] ?? 'child');
$color = trim($_POST['profile_color'] ?? '#3b82f6');
if ($name) {
require_once __DIR__ . '/includes/db.php';
if (isset($pdo)) {
$stmt = $pdo->prepare("INSERT INTO pf_people (name, role, color) VALUES (?, ?, ?)");
$stmt->execute([$name, $role, $color]);
$success = "Profil de {$name} ajouté avec succès.";
}
} else {
$error = "Le prénom est obligatoire.";
}
}
if ($action === 'update_attached_profile_color') {
$profile_id = (int)($_POST['profile_id'] ?? 0);
$color = trim($_POST['color'] ?? '#3b82f6');
if ($profile_id > 0) {
require_once __DIR__ . '/includes/db.php';
if (isset($pdo)) {
$stmt = $pdo->prepare("UPDATE pf_people SET color = ? WHERE id = ? AND user_id IS NULL");
$stmt->execute([$color, $profile_id]);
$success = "Couleur mise à jour.";
}
}
}
if ($action === 'delete_attached_profile') {
$profile_id = (int)($_POST['profile_id'] ?? 0);
if ($profile_id > 0) {
require_once __DIR__ . '/includes/db.php';
if (isset($pdo)) {
$stmt = $pdo->prepare("DELETE FROM pf_people WHERE id = ? AND user_id IS NULL");
$stmt->execute([$profile_id]);
$success = tr('set_success_profile_del');
}
}
}
if ($action === 'update_profile_color') {
$profile_id = (int)($_POST['profile_id'] ?? 0);
$color = trim($_POST['color'] ?? '#0891b2');
if ($profile_id > 0) {
require_once __DIR__ . '/includes/db.php';
if (isset($pdo)) {
$stmt = $pdo->prepare("UPDATE pf_people SET color = ? WHERE id = ? AND user_id IS NULL");
$stmt->execute([$color, $profile_id]);
$success = tr('set_success_color_profile');
}
}
}
if ($action === 'update_attached_profile_color') {
$profile_id = (int)($_POST['profile_id'] ?? 0);
$color = trim($_POST['color'] ?? '');
// Vérification stricte format Hexadécimal
if ($profile_id > 0 && preg_match('/^#[a-f0-9]{6}$/i', $color)) {
require_once __DIR__ . '/includes/db.php';
if (isset($pdo)) {
// user_id IS NULL garantit qu'on ne modifie pas un vrai compte Parent par accident
$stmt = $pdo->prepare("UPDATE pf_people SET color = ? WHERE id = ? AND user_id IS NULL");
$stmt->execute([$color, $profile_id]);
if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) === 'xmlhttprequest') {
header('Content-Type: application/json');
echo json_encode(['success' => true]);
exit;
}
$success = tr('set_success_color_update');
}
}
}
}
}
// ─── Chargement données ───────────────────────────────────────────────────────
if ($family_id) {
require_once __DIR__ . '/includes/db.php';
}
$stmtUser = $meta_pdo->prepare("SELECT * FROM users WHERE id = ?");
$stmtUser->execute([$user_id]);
$user = $stmtUser->fetch();
$user_color = '#0891b2';
if ($family_id && isset($pdo)) {
$stmtColorFetch = $pdo->prepare("SELECT color FROM pf_people WHERE user_id = ?");
$stmtColorFetch->execute([$user_id]);
$fetched_color = $stmtColorFetch->fetchColumn();
if ($fetched_color) {
$user_color = $fetched_color;
}
}
$family = null;
$members = [];
$attached_profiles = [];
if ($family_id) {
$fam = $meta_pdo->prepare("SELECT * FROM families WHERE id = ?");
$fam->execute([$family_id]);
$family = $fam->fetch();
$mem = $meta_pdo->prepare("SELECT display_name, username, created_at, is_admin FROM users WHERE family_id = ? ORDER BY id");
$mem->execute([$family_id]);
$members = $mem->fetchAll();
if (isset($pdo)) {
$stmtAttached = $pdo->query("SELECT id, name, role, color FROM pf_people WHERE user_id IS NULL ORDER BY role ASC, name ASC");
$attached_profiles = $stmtAttached->fetchAll(PDO::FETCH_ASSOC);
}
}
$calendarIntegration = $meta_pdo->prepare("SELECT username, calendar_url, status, last_sync_at FROM user_calendar_integrations WHERE user_id = ? AND provider='icloud_caldav'");
$calendarIntegration->execute([$user_id]);
$calendarIntegration = $calendarIntegration->fetch();
$groceryHistoryMaxSetting = 20;
if ($family_id && isset($pdo)) {
try {
$gv = $pdo->query("SELECT content FROM pf_notes WHERE note_type='grocery_settings' AND reference_id='history_max'")->fetchColumn();
if ($gv !== false && $gv !== null && $gv !== '') {
$groceryHistoryMaxSetting = max(1, min(50, (int) $gv));
}
} catch (\Throwable $e) {}
}
$pageTitle = tr('set_title_page');
$activePage = "settings";
require __DIR__ . '/header.php';
?>
<div class="pf-container pf-settings-page">
<h1 class="pf-settings-title"><?= tr('set_title_page') ?></h1>
<section class="pf-panel-card">
<h2 class="pf-card-h2"><?= tr('set_title_lang') ?></h2>
<form method="post" class="pf-lang-form">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="set_lang">
<?php
$s = 'class="pf-flag-inline"';
$fr_flag = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 18 12" width="20" height="13" '.$s.'><rect width="6" height="12" fill="#002395"/><rect x="6" width="6" height="12" fill="#fff"/><rect x="12" width="6" height="12" fill="#ED2939"/></svg>';
$en_flag = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 60 30" width="20" height="13" '.$s.'><rect width="60" height="30" fill="#012169"/><path d="M0,0 L60,30 M60,0 L0,30" stroke="#fff" stroke-width="6"/><path d="M0,0 L60,30 M60,0 L0,30" stroke="#C8102E" stroke-width="4"/><path d="M30,0 V30 M0,15 H60" stroke="#fff" stroke-width="10"/><path d="M30,0 V30 M0,15 H60" stroke="#C8102E" stroke-width="6"/></svg>';
$senyera = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 18 12" width="20" height="13" '.$s.'><rect width="18" height="12" fill="#FCDD09"/><rect y="1.33" width="18" height="1.33" fill="#DA121A"/><rect y="4" width="18" height="1.33" fill="#DA121A"/><rect y="6.67" width="18" height="1.33" fill="#DA121A"/><rect y="9.33" width="18" height="1.33" fill="#DA121A"/></svg>';
$langs = [
'fr' => ['flag' => $fr_flag, 'label' => 'Français'],
'en' => ['flag' => $en_flag, 'label' => 'English'],
'ca' => ['flag' => $senyera, 'label' => 'Català'],
];
$currentLang = $_SESSION['app_lang'] ?? 'fr';
foreach ($langs as $code => $lang):
?>
<button type="submit" name="lang" value="<?= $code ?>"
class="pf-btn <?= $currentLang === $code ? 'pf-btn--current-lang' : 'btn-secondary' ?>">
<?= $lang['flag'] ?> <?= $lang['label'] ?>
</button>
<?php endforeach; ?>
</form>
</section>
<?php if ($family_id): ?>
<section class="pf-panel-card">
<h2 class="pf-card-h2 pf-card-h2--tight"><?= tr('set_title_modules') ?></h2>
<p class="pf-muted-note"><?= tr('set_desc_modules') ?></p>
<?php
$enabledMods = $_SESSION['enabled_modules'] ?? ['calendar','budget','holidays','gifts','calendar_ios'];
$enabledViews = $_SESSION['enabled_views'] ?? ['food_meals', 'food_liste', 'budget_prev', 'budget_epargne', 'budget_provisions'];
$allModules = [
'calendar' => ['icon' => '📅', 'label' => tr('menu_calendar')],
'budget' => [
'icon' => '💰',
'label' => tr('menu_budget'),
'mandatory_note' => tr('budget_mandatory_note'),
'views' => [
'budget_prev' => tr('budget_tab_prev'),
'budget_epargne' => tr('budget_tab_savings'),
'budget_provisions' => tr('budget_tab_provisions')
]
],
'holidays' => ['icon' => '🏖️', 'label' => tr('menu_holidays')],
'gifts' => ['icon' => '🎁', 'label' => tr('menu_gifts')],
'garage' => ['icon' => '🚗', 'label' => tr('menu_garage')],
'memo' => ['icon' => '📝', 'label' => tr('menu_memo')],
'todo' => ['icon' => '✅', 'label' => tr('menu_todo')],
'liste' => ['icon' => '🛒', 'label' => tr('menu_liste')],
'food' => [
'icon' => '🍳',
'label' => tr('mod_food_name'),
'views' => [
'food_meals' => tr('food_tab_meals'),
'food_liste' => tr('food_tab_list')
]
],
'calendar_ios' => ['icon' => '📱', 'label' => tr('menu_calendar_ios')],
'printvault' => ['icon' => '🖨️', 'label' => tr('menu_printvault')],
'planka' => ['icon' => '📋', 'label' => tr('menu_planka')],
];
?>
<form method="post">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="set_modules">
<div class="pf-stack-md">
<?php foreach ($allModules as $key => $mod): $active = in_array($key, $enabledMods); ?>
<div class="pf-module-card-wrapper">
<div class="pf-module-top-row">
<label class="pf-module-tile-compact">
<input type="checkbox" name="mod_<?= $key ?>" <?= $active ? 'checked' : '' ?> class="pf-checkbox-lg js-mod-checkbox">
<span class="pf-tile-icon"><?= $mod['icon'] ?></span>
<span class="pf-tile-label"><?= $mod['label'] ?></span>
</label>
<?php if (!empty($mod['views'])): ?>
<div class="pf-module-inline-pills">
<?php foreach ($mod['views'] as $vKey => $vLabel): ?>
<label class="pf-sub-module-pill">
<input type="checkbox" name="view_<?= $vKey ?>" <?= in_array($vKey, $enabledViews) ? 'checked' : '' ?>>
<span class="pf-pill-text"><?= htmlspecialchars($vLabel) ?></span>
</label>
<?php endforeach; ?>
</div>
<?php endif; ?>
</div>
<?php if (!empty($mod['mandatory_note'])): ?>
<div class="pf-module-info-footer">
ℹ️ <?= $mod['mandatory_note'] ?>
</div>
<?php endif; ?>
</div>
<?php endforeach; ?>
</div>
<button type="submit" class="pf-btn"><?= tr('btn_save') ?></button>
</form>
</section>
<?php endif; ?>
<section class="pf-panel-card">
<h2 class="pf-card-h2 pf-card-h2--tight"><?= tr('set_title_ios') ?></h2>
<p class="pf-muted-note"><?= tr('set_desc_ios') ?></p>
<form method="post" class="pf-stack-md">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="calendar_ios_save">
<div class="pf-form-group">
<label class="pf-label"><?= tr('set_label_apple_id') ?></label>
<input type="text" name="icloud_username" class="pf-input" value="<?= htmlspecialchars($calendarIntegration['username'] ?? '') ?>" placeholder="<?= tr('placeholder_apple_id') ?>" required>
</div>
<div class="pf-form-group">
<label class="pf-label"><?= tr('set_label_apple_pwd') ?></label>
<input type="password" name="icloud_app_password" class="pf-input" placeholder="<?= tr('placeholder_apple_pwd') ?>" required>
</div>
<div class="pf-form-group">
<label class="pf-label"><?= tr('set_label_apple_url') ?></label>
<input type="url" name="icloud_calendar_url" class="pf-input" value="<?= htmlspecialchars($calendarIntegration['calendar_url'] ?? '') ?>" placeholder="https://caldav.icloud.com/..." required>
</div>
<div class="pf-flex-gap-8">
<button type="submit" class="pf-btn"><?= tr('btn_save') ?></button>
</div>
</form>
<div class="pf-flex-gap-8 pf-mt-sm">
<form method="post">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="calendar_ios_test">
<button type="submit" class="pf-btn btn-secondary"><?= tr('set_btn_test_ios') ?></button>
</form>
<form method="post">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="calendar_ios_disconnect">
<button type="submit" class="pf-btn btn-secondary"><?= tr('set_btn_disconnect_ios') ?></button>
</form>
</div>
</section>
<?php if ($family_id):
$bg_file = null;
foreach (glob('/uploads/home_bg_' . $family_id . '.*') as $f) { $bg_file = $f; break; }
$has_custom_bg = $bg_file !== null;
?>
<section class="pf-panel-card">
<h2 class="pf-card-h2 pf-card-h2--tight"><?= tr('set_title_bg') ?></h2>
<p class="pf-muted-note"><?= tr('set_desc_bg') ?></p>
<?php if ($has_custom_bg): ?>
<div class="pf-home-bg-preview">
<img src="/home-bg.php" alt="Fond actuel">
<span class="pf-badge-overlay"><?= tr('set_badge_custom_bg') ?></span>
</div>
<?php endif; ?>
<form method="post" enctype="multipart/form-data" class="pf-inline-form-end">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="upload_home_bg">
<div class="pf-form-group">
<label class="pf-label"><?= tr('set_label_new_bg') ?></label>
<input type="file" name="home_bg" class="pf-input" accept="image/jpeg,image/png,image/webp" required>
</div>
<button type="submit" class="pf-btn pf-shrink-0"><?= tr('btn_save') ?></button>
</form>
<?php if ($has_custom_bg): ?>
<form method="post" class="pf-mt-sm">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="reset_home_bg">
<button type="submit" class="pf-btn btn-secondary pf-btn-sm-text"
onclick="return confirm('<?= addslashes(tr('set_confirm_reset_bg')) ?>')"><?= tr('set_btn_reset_bg') ?></button>
</form>
<?php endif; ?>
</section>
<?php endif; ?>
<section class="pf-panel-card">
<h2 class="pf-card-h2"><?= tr('set_title_profile') ?></h2>
<form method="post">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="update_profile">
<div class="pf-form-group">
<label class="pf-label"><?= tr('set_label_username') ?></label>
<input type="text" class="pf-input pf-input--disabled-muted" value="<?= htmlspecialchars($user['username']) ?>" disabled>
</div>
<div class="pf-form-group">
<label class="pf-label"><?= tr('set_label_display_name') ?></label>
<input type="text" name="display_name" class="pf-input" value="<?= htmlspecialchars($user['display_name']) ?>" required>
</div>
<div class="pf-form-group">
<label class="pf-label" for="profile_color">Couleur thématique de mon profil</label>
<!-- Le champ caché qui va stocker la valeur -->
<input type="hidden" name="color" id="profile_color" value="<?= htmlspecialchars($user_color) ?>">
<!-- Le panel de couleurs prédéfinies -->
<div class="pf-color-palette" id="color-palette">
<?php
$palette = ['#ef4444', '#f97316', '#f59e0b', '#84cc16', '#10b981', '#14b8a6', '#06b6d4', '#0ea5e9', '#3b82f6', '#6366f1', '#8b5cf6', '#d946ef', '#f43f5e', '#64748b'];
foreach ($palette as $c):
$isSelected = (strtolower($user_color) === $c) ? 'selected' : '';
?>
<button type="button"
class="pf-color-swatch <?= $isSelected ?>"
style="background-color: <?= $c ?>;"
data-color="<?= $c ?>"
onclick="selectProfileColor(this, '<?= $c ?>')">
</button>
<?php endforeach; ?>
</div>
<span class="pf-muted-note pf-profile-color-note"><?= tr('set_desc_profile_color') ?></span>
</div>
<button type="submit" class="pf-btn"><?= tr('btn_save') ?></button>
</form>
</section>
<section class="pf-panel-card">
<h2 class="pf-card-h2"><?= tr('set_title_pwd') ?></h2>
<form method="post">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="change_password">
<div class="pf-form-group">
<label class="pf-label"><?= tr('set_label_cur_pwd') ?></label>
<input type="password" name="current_password" class="pf-input" required placeholder="••••••">
</div>
<div class="pf-form-group">
<label class="pf-label"><?= tr('set_label_new_pwd') ?></label>
<input type="password" name="new_password" class="pf-input" required placeholder="••••••" autocomplete="new-password">
</div>
<div class="pf-form-group">
<label class="pf-label"><?= tr('set_label_confirm_pwd') ?></label>
<input type="password" name="confirm_password" class="pf-input" required placeholder="••••••" autocomplete="new-password">
</div>
<button type="submit" class="pf-btn"><?= tr('set_btn_edit') ?></button>
</form>
</section>
<?php if ($family): ?>
<section class="pf-panel-card">
<h2 class="pf-card-h2"><?= tr('set_title_family') ?></h2>
<form method="post" class="pf-mb-section">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="update_family_name">
<div class="pf-form-group">
<label class="pf-label"><?= tr('set_label_family_name') ?></label>
<div class="pf-flex-gap-8">
<input type="text" name="family_name" class="pf-input" value="<?= htmlspecialchars($family['name']) ?>" required>
<button type="submit" class="pf-btn pf-shrink-0"><?= tr('btn_save') ?></button>
</div>
</div>
</form>
<div class="pf-dashed-panel">
<p class="pf-muted-note pf-muted-note--tight"><?= tr('set_desc_invite') ?></p>
<div class="pf-invite-row">
<code id="invite-code" class="pf-invite-code"
onclick="copyCode()" title="<?= tr('set_title_copy') ?>">
<?= htmlspecialchars($family['invite_code']) ?>
</code>
<span id="copy-msg" class="pf-copy-msg"><?= tr('set_msg_copied') ?></span>
<form method="post" class="pf-ml-auto">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="regen_invite">
<button type="submit" class="pf-btn btn-secondary pf-btn-sm-text"
onclick="return confirm('<?= addslashes(tr('set_confirm_new_code')) ?>')">
<?= tr('set_btn_new_code') ?>
</button>
</form>
</div>
<p class="pf-invite-footnote">
<?= tr('set_desc_register_link') ?> <strong><?= $_SERVER['HTTP_HOST'] ?>/register.php</strong>
</p>
</div>
<h3 class="pf-members-heading"><?= tr('set_title_members') ?> (<?= count($members) ?>)</h3>
<div class="pf-stack-sm">
<?php foreach ($members as $m): ?>
<div class="pf-member-card">
<div>
<strong><?= htmlspecialchars($m['display_name']) ?></strong>
<span class="pf-muted-inline">@<?= htmlspecialchars($m['username']) ?></span>
<?php if ($m['is_admin']): ?>
<span class="pf-admin-badge"><?= tr('set_badge_admin') ?></span>
<?php endif; ?>
</div>
<span class="pf-muted-tiny"><?= date('d/m/Y', strtotime($m['created_at'])) ?></span>
</div>
<?php endforeach; ?>
</div>
<h3 class="pf-members-heading pf-mt-lg">🧸 <?= tr('settings_attached_profiles_title') ?></h3>
<p class="pf-muted-note pf-muted-note--tight pf-mb-md"><?= tr('settings_attached_profiles_desc') ?></p>
<div class="pf-stack-sm" style="margin-bottom: 1.5rem;">
<?php foreach ($attached_profiles as $p):
$roleBadge = tr('role_unknown');
if (in_array($p['role'], ['child', 'enfant'])) $roleBadge = tr('role_child_icon');
elseif ($p['role'] === 'helper') $roleBadge = tr('role_helper_icon');
elseif ($p['role'] === 'relative') $roleBadge = tr('role_relative_icon');
$pColor = htmlspecialchars($p['color'] ?? '#3b82f6');
?>
<div class="pf-member-card" style="display: flex; justify-content: space-between; align-items: center; border-left: 4px solid <?= $pColor ?>;">
<div>
<strong><?= htmlspecialchars($p['name']) ?></strong>
<span class="pf-muted-inline"><?= $roleBadge ?></span>
</div>
<div style="display: flex; align-items: center; gap: 12px;">
<div class="pf-color-dropdown">
<button type="button" class="pf-color-trigger" style="background-color: <?= $pColor ?>;" title="<?= tr('change_color') ?>" onclick="toggleColorMenu(this)"></button>
<div class="pf-color-menu">
<?php foreach(['#ef4444', '#f97316', '#f59e0b', '#84cc16', '#10b981', '#14b8a6', '#06b6d4', '#0ea5e9', '#3b82f6', '#6366f1', '#8b5cf6', '#d946ef', '#f43f5e', '#64748b'] as $c): ?>
<button type="button" class="pf-color-swatch" style="background-color: <?= $c ?>;" onclick="updateAttachedProfileColor(<?= $p['id'] ?>, '<?= $c ?>', this)"></button>
<?php endforeach; ?>
</div>
</div>
<form method="post" style="margin:0;">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="delete_attached_profile">
<input type="hidden" name="profile_id" value="<?= $p['id'] ?>">
<button type="submit" class="btn-icon-action delete" title="<?= tr('btn_delete') ?>" style="background: none; border: none; cursor: pointer; font-size: 1.2rem; padding: 4px;" onclick="return confirm('<?= addslashes(tr('confirm_delete_profile')) ?>')">🗑️</button>
</form>
</div>
</div>
<?php endforeach; ?>
<?php if (empty($attached_profiles)): ?>
<div class="pf-muted-note" style="padding: 10px; text-align: center; border: 1px dashed var(--border-light); border-radius: 8px;"><?= tr('settings_no_attached_profiles') ?></div>
<?php endif; ?>
</div>
<form method="post" style="display: flex; gap: 8px; background: var(--bg-soft); padding: 12px; border-radius: 8px; border: 1px dashed var(--border-light); align-items: flex-end; flex-wrap: wrap;">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(csrf_token()) ?>">
<input type="hidden" name="action" value="add_attached_profile">
<div class="pf-form-group" style="margin-bottom: 0; flex: 2; min-width: 120px;">
<label class="pf-label" style="font-size: 0.8rem; margin-bottom: 4px;"><?= tr('label_firstname') ?></label>
<input type="text" name="profile_name" class="pf-input" placeholder="<?= tr('placeholder_firstname_ex') ?>" required>
</div>
<div class="pf-form-group" style="margin-bottom: 0; flex: 1.5; min-width: 120px;">
<label class="pf-label" style="font-size: 0.8rem; margin-bottom: 4px;"><?= tr('label_role') ?></label>
<select name="profile_role" class="pf-input" required>
<option value="child"><?= tr('role_child_icon') ?></option>
<option value="helper"><?= tr('role_helper_icon') ?></option>
<option value="relative"><?= tr('role_relative_icon') ?></option>
</select>
</div>
<div class="pf-form-group" style="margin-bottom: 0; display: flex; flex-direction: column; align-items: flex-start;">
<label class="pf-label" style="font-size: 0.8rem; margin-bottom: 4px;"><?= tr('label_color') ?></label>
<div style="display: flex; gap: 4px; flex-wrap: wrap; padding-bottom: 4px;">
<?php foreach(['#3b82f6', '#10b981', '#f59e0b', '#ef4444', '#8b5cf6', '#64748b'] as $i => $c): ?>
<label class="pf-radio-swatch" style="background-color: <?= $c ?>;" title="<?= $c ?>">
<input type="radio" name="profile_color" value="<?= $c ?>" <?= $i === 0 ? 'checked' : '' ?> style="display:none;">
</label>
<?php endforeach; ?>
</div>
</div>
<button type="submit" class="pf-btn pf-shrink-0" style="padding: 8px 16px; margin-bottom: 2px;"><?= tr('btn_add') ?></button>
</form>
</section>
<?php endif; ?>
<?php if (!empty($_SESSION['user']['is_admin'])): ?>
<div class="pf-settings-admin-link">
<a href="/admin/"><?= tr('set_link_admin') ?></a>
</div>
<?php endif; ?>
</div>
<script>
// --- INJECTION CSRF GLOBALE ---
document.querySelectorAll('form[method="post"]').forEach((form) => {
if (!form.querySelector('input[name="csrf_token"]')) {
const input = document.createElement('input');
input.type = 'hidden';
input.name = 'csrf_token';
input.value = window.CSRF_TOKEN || '';
form.appendChild(input);
}
});
// --- COPIE DU CODE D'INVITATION ---
function copyCode() {
const code = document.getElementById('invite-code').textContent.trim();
navigator.clipboard.writeText(code).then(() => {
const msg = document.getElementById('copy-msg');
msg.classList.add('is-visible');
setTimeout(() => msg.classList.remove('is-visible'), 2000);
});
}
// --- GESTION DES NOTIFICATIONS TOAST ---
document.addEventListener('DOMContentLoaded', () => {
<?php if ($success): ?>
if (typeof showToast === 'function') {
showToast(<?= json_encode($success) ?>, 'success');
} else {
alert(<?= json_encode($success) ?>);
}
<?php endif; ?>
<?php if ($error): ?>
if (typeof showToast === 'function') {
showToast(<?= json_encode($error) ?>, 'error');
} else {
alert(<?= json_encode($error) ?>);
}
<?php endif; ?>
});
function selectProfileColor(btn, hexColor) {
// 1. Mettre à jour l'input caché
document.getElementById('profile_color').value = hexColor;
// 2. Mettre à jour l'UI (enlever la classe selected partout, l'ajouter sur le bouton cliqué)
const swatches = document.querySelectorAll('#color-palette .pf-color-swatch');
swatches.forEach(el => el.classList.remove('selected'));
btn.classList.add('selected');
}
function toggleColorMenu(btn) {
// Fermer tous les autres popovers
document.querySelectorAll('.pf-color-menu').forEach(menu => {
if (menu !== btn.nextElementSibling) menu.classList.remove('is-open');
});
// Ouvrir/Fermer celui cliqué
btn.nextElementSibling.classList.toggle('is-open');
}
// Fermer le menu si on clique en dehors
document.addEventListener('click', (e) => {
if (!e.target.closest('.pf-color-dropdown')) {
document.querySelectorAll('.pf-color-menu').forEach(menu => menu.classList.remove('is-open'));
}
});
// --- MISE À JOUR DYNAMIQUE COULEUR PROFIL RATTACHÉ ---
async function updateAttachedProfileColor(profileId, newColor, btnElement) {
const fd = new FormData();
fd.append('action', 'update_attached_profile_color');
fd.append('profile_id', profileId);
fd.append('color', newColor);
fd.append('csrf_token', window.CSRF_TOKEN); // Sécurité absolue
try {
const res = await pachaFetch('/settings.php', { method: 'POST', body: fd });
if (res && res.success) {
if (typeof showToast === 'function') {
showToast(window.I18N['color_updated'] || 'Couleur mise à jour !', 'success');
}
const dropdown = btnElement.closest('.pf-color-dropdown');
if (dropdown) {
// Màj visuelle de la pastille déclencheur
dropdown.querySelector('.pf-color-trigger').style.backgroundColor = newColor;
dropdown.querySelector('.pf-color-menu').classList.remove('is-open');
}
// Màj de la bordure gauche de la carte
const card = btnElement.closest('.pf-member-card');
if (card) {
card.style.borderLeftColor = newColor;
}
} else {
if (typeof showToast === 'function') showToast(window.I18N['error_occured'] || 'Erreur', 'error');
}
} catch (err) {
console.error(err);
if (typeof showToast === 'function') showToast(window.I18N['error_occured'] || 'Erreur', 'error');
}
}
</script>
<?php require __DIR__ . '/footer.php'; ?>