Sicherheit: - Bulk-Erstellung serverseitig auf eingeloggte Nutzer beschränkt; expire_minutes wird validiert (anonym: nur Default/Template-Werte, eingeloggt: max. 1 Jahr) - IP-basiertes Rate-Limit über neue Tabelle request_throttle (Voucher-Erstellung + Passwort-Reset-Anfragen), Session-Fallback für Alt-Installationen; Migration 0002 - session_regenerate_id() nach Login, Secure-Cookie-Flag bei HTTPS - Admin-/Aktiv-Status wird pro Request live aus der DB geprüft (Rechteentzug & Deaktivierung wirken sofort); Schutz vor Selbst-Degradierung im Benutzer-Edit - Alle state-ändernden Admin-Aktionen von GET auf POST umgestellt (kein CSRF-Token mehr in URLs) - login_simple.php (Legacy, Debug-Leak) entfernt; cron_test.php nur noch für Admins; .htaccess auf Apache-2.4-Syntax inkl. cron_test.php - M365 Client Secret wird nicht mehr ins Formular zurückgegeben - Updater: Zip-Slip-/Pfad-Traversal-Schutz, Backup vor dem Anwenden mit automatischem Rollback bei Fehlern, AuditLogger-Bug behoben - cron_sync: Token-Vergleich mit hash_equals; login_attempts-Pruning - CSV-Export gegen Excel-Formula-Injection abgesichert Bugfixes: - M365-Login: Fallback auf userPrincipalName, wenn Graph kein 'mail' liefert (Nutzer ohne Exchange-Postfach konnten sich nie anmelden) - PRG-Pattern überall: F5 erzeugt keine Duplikat-Voucher und wiederholt keine Admin-Aktionen (Session-Flash-Messages) - QR-Code nicht mehr invertiert (schwarz auf weiß, scanbar) - Bulk-Erstellung nutzt den UniFi 'n'-Parameter: 1 API-Call statt n× Login + Voucherlisten-Abruf; exaktes Code-Matching per create_time statt "global neuester Voucher" - Mailer: doppelte Zeilenumbrüche behoben, AUTH nur mit Credentials, SMTP-Dot-Stuffing, CLI-sicherer EHLO-Host - forgot_password: System-URL-Auto-Detect (Reset-Link war sonst relativ/kaputt) + Rate-Limit - Audit-Log-Labels an tatsächliche Action-Keys angepasst; Voucher-Erstellung (einzeln & bulk) wird jetzt auditiert - Site-Edit testet die Verbindung auch ohne Passwortänderung UX/UI: - Alert-/Badge-Styles zentral in global.css mit Dark-Mode-Variablen (vorher 7× dupliziert mit hart codierten Hellfarben) - Sticky-Formulare + Tab-Erhalt nach Validierungsfehlern (Bulk), Settings kehren nach dem Speichern zum aktiven Tab zurück - Gültigkeit menschenlesbar (z.B. "8 Stunden" statt "480 Minuten") - Voucher-Name-Default "Gast/Guest" im öffentlichen Modus - Favicon auch auf Login-/öffentlichen Seiten - Verbindungstest-Button pro Site-Karte (Health-Check) - i18n-Pass: Confirm-Dialoge, Toasts, Fehl-/Erfolgsmeldungen in de/en - Sprachumschalter ohne fetch+reload (kein Re-Submit-Dialog) - A11y: Esc schließt Modals, aria-live für Toasts, aria-labels auf Icon-Buttons; APP_KEY-Warnbanner im Dashboard - Dashboard-Sync: set_time_limit passend zur Site-Anzahl; Voucher-Sync mit Map statt SELECT pro Voucher Tooling: - GitHub-Actions-Workflow: PHP-Lint aller Dateien + de/en-Key-Parität https://claude.ai/code/session_01KKVpVPJjrTKGoRgpJcySD4
520 lines
13 KiB
CSS
520 lines
13 KiB
CSS
/* === DARK MODE CSS VARIABLES === */
|
|
:root {
|
|
--bg-body: #f5f7fa;
|
|
--bg-card: #ffffff;
|
|
--bg-header: #ffffff;
|
|
--bg-sidebar: #ffffff;
|
|
--bg-hover: #f8f9fa;
|
|
--bg-input: #ffffff;
|
|
--bg-table-head: #f8f9fa;
|
|
--bg-badge-info: #d1ecf1;
|
|
--text-primary: #333333;
|
|
--text-secondary: #666666;
|
|
--text-muted: #999999;
|
|
--text-badge-info: #0c5460;
|
|
--border-color: #e0e0e0;
|
|
--border-hover: #667eea;
|
|
--shadow: rgba(0,0,0,0.05);
|
|
--shadow-lg: rgba(0,0,0,0.3);
|
|
--accent: #667eea;
|
|
--accent-hover: #5568d3;
|
|
--danger: #dc3545;
|
|
--success: #28a745;
|
|
--warning: #ffc107;
|
|
--code-bg: #f8f9fa;
|
|
--input-border: #e0e0e0;
|
|
--input-focus: #667eea;
|
|
--modal-overlay: rgba(0,0,0,0.5);
|
|
--scrollbar-track: #f1f1f1;
|
|
--scrollbar-thumb: #c1c1c1;
|
|
--toast-bg: #ffffff;
|
|
--stat-sub: #f0f0f0;
|
|
--alert-error-bg: #fee;
|
|
--alert-error-border: #fcc;
|
|
--alert-error-text: #c33;
|
|
--alert-success-bg: #efe;
|
|
--alert-success-border: #cfc;
|
|
--alert-success-text: #3c3;
|
|
--badge-success-bg: #d4edda;
|
|
--badge-success-text: #155724;
|
|
--badge-warning-bg: #fff3cd;
|
|
--badge-warning-text: #856404;
|
|
--badge-danger-bg: #f8d7da;
|
|
--badge-danger-text: #721c24;
|
|
}
|
|
|
|
[data-theme="dark"] {
|
|
--bg-body: #0f1117;
|
|
--bg-card: #1a1d27;
|
|
--bg-header: #1a1d27;
|
|
--bg-sidebar: #1a1d27;
|
|
--bg-hover: #22273a;
|
|
--bg-input: #22273a;
|
|
--bg-table-head: #22273a;
|
|
--bg-badge-info: #0c3d47;
|
|
--text-primary: #e8eaf0;
|
|
--text-secondary: #a0a8b8;
|
|
--text-muted: #6b7280;
|
|
--text-badge-info: #7dd3eb;
|
|
--border-color: #2e3347;
|
|
--border-hover: #667eea;
|
|
--shadow: rgba(0,0,0,0.3);
|
|
--shadow-lg: rgba(0,0,0,0.6);
|
|
--accent: #7c8ff5;
|
|
--accent-hover: #667eea;
|
|
--danger: #ef4444;
|
|
--success: #22c55e;
|
|
--warning: #f59e0b;
|
|
--code-bg: #22273a;
|
|
--input-border: #2e3347;
|
|
--input-focus: #7c8ff5;
|
|
--modal-overlay: rgba(0,0,0,0.7);
|
|
--scrollbar-track: #1a1d27;
|
|
--scrollbar-thumb: #3a3f5a;
|
|
--toast-bg: #1a1d27;
|
|
--stat-sub: #22273a;
|
|
--alert-error-bg: #3a161c;
|
|
--alert-error-border: #5c2230;
|
|
--alert-error-text: #f5a3ad;
|
|
--alert-success-bg: #122e1d;
|
|
--alert-success-border: #1e4d30;
|
|
--alert-success-text: #86e0a3;
|
|
--badge-success-bg: #122e1d;
|
|
--badge-success-text: #86e0a3;
|
|
--badge-warning-bg: #3a2f10;
|
|
--badge-warning-text: #f0c95c;
|
|
--badge-danger-bg: #3a161c;
|
|
--badge-danger-text: #f5a3ad;
|
|
}
|
|
|
|
/* === DARK MODE OVERRIDES FOR COMMON ELEMENTS === */
|
|
[data-theme="dark"] body {
|
|
background: var(--bg-body);
|
|
color: var(--text-primary);
|
|
}
|
|
|
|
[data-theme="dark"] .header {
|
|
background: var(--bg-header) !important;
|
|
border-color: var(--border-color) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .sidebar {
|
|
background: var(--bg-sidebar) !important;
|
|
border-color: var(--border-color) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .sidebar-nav a {
|
|
color: var(--text-secondary) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .sidebar-nav a:hover,
|
|
[data-theme="dark"] .sidebar-nav a.active {
|
|
background: var(--bg-hover) !important;
|
|
color: var(--accent) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .card,
|
|
[data-theme="dark"] .stat-card,
|
|
[data-theme="dark"] .site-status-card,
|
|
[data-theme="dark"] .site-card {
|
|
background: var(--bg-card) !important;
|
|
border-color: var(--border-color) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .card-header,
|
|
[data-theme="dark"] .modal-header {
|
|
border-color: var(--border-color) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .card-title,
|
|
[data-theme="dark"] .page-title,
|
|
[data-theme="dark"] .modal-title,
|
|
[data-theme="dark"] .stat-card-value,
|
|
[data-theme="dark"] h1, [data-theme="dark"] h2, [data-theme="dark"] h3 {
|
|
color: var(--text-primary) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .page-subtitle,
|
|
[data-theme="dark"] .stat-card-title,
|
|
[data-theme="dark"] .stat-card-sub,
|
|
[data-theme="dark"] label {
|
|
color: var(--text-secondary) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .table th {
|
|
background: var(--bg-table-head) !important;
|
|
color: var(--text-secondary) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .table td {
|
|
color: var(--text-primary) !important;
|
|
border-color: var(--border-color) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .table tr:hover {
|
|
background: var(--bg-hover) !important;
|
|
}
|
|
|
|
[data-theme="dark"] input[type="text"],
|
|
[data-theme="dark"] input[type="email"],
|
|
[data-theme="dark"] input[type="password"],
|
|
[data-theme="dark"] input[type="number"],
|
|
[data-theme="dark"] input[type="url"],
|
|
[data-theme="dark"] select,
|
|
[data-theme="dark"] textarea {
|
|
background: var(--bg-input) !important;
|
|
border-color: var(--input-border) !important;
|
|
color: var(--text-primary) !important;
|
|
}
|
|
|
|
[data-theme="dark"] input::placeholder,
|
|
[data-theme="dark"] textarea::placeholder {
|
|
color: var(--text-muted) !important;
|
|
}
|
|
|
|
[data-theme="dark"] input:focus,
|
|
[data-theme="dark"] select:focus,
|
|
[data-theme="dark"] textarea:focus {
|
|
border-color: var(--input-focus) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .btn-secondary {
|
|
background: var(--bg-hover) !important;
|
|
color: var(--text-secondary) !important;
|
|
border-color: var(--border-color) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .btn-secondary:hover {
|
|
background: var(--border-color) !important;
|
|
color: var(--text-primary) !important;
|
|
}
|
|
|
|
[data-theme="dark"] code {
|
|
background: var(--code-bg) !important;
|
|
color: var(--accent) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .modal-content {
|
|
background: var(--bg-card) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .badge-info {
|
|
background: var(--bg-badge-info) !important;
|
|
color: var(--text-badge-info) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .stat-card-icon {
|
|
filter: brightness(0.8);
|
|
}
|
|
|
|
[data-theme="dark"] .info-box {
|
|
background: #0c2340 !important;
|
|
border-color: #1a4a7a !important;
|
|
}
|
|
|
|
[data-theme="dark"] .info-box h4 { color: #60a5fa !important; }
|
|
[data-theme="dark"] .info-box p { color: #93c5fd !important; }
|
|
|
|
[data-theme="dark"] .placeholder-info {
|
|
background: #1a1500 !important;
|
|
border-color: #44390a !important;
|
|
}
|
|
|
|
[data-theme="dark"] .placeholder-info h4 { color: #d4a017 !important; }
|
|
[data-theme="dark"] .placeholder-info code { background: #2a2000 !important; }
|
|
|
|
[data-theme="dark"] .user-menu {
|
|
background: var(--bg-hover) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .filter-btn {
|
|
background: var(--bg-card) !important;
|
|
border-color: var(--border-color) !important;
|
|
color: var(--text-primary) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .filter-btn.active {
|
|
background: var(--accent) !important;
|
|
border-color: var(--accent) !important;
|
|
color: white !important;
|
|
}
|
|
|
|
[data-theme="dark"] .tab-navigation {
|
|
background: var(--bg-table-head) !important;
|
|
border-color: var(--border-color) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .tab-button {
|
|
color: var(--text-secondary) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .tab-button.active {
|
|
background: var(--bg-card) !important;
|
|
color: var(--accent) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .section-divider {
|
|
border-color: var(--border-color) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .site-stat {
|
|
background: var(--bg-hover) !important;
|
|
}
|
|
|
|
[data-theme="dark"] .live-badge {
|
|
background: #052e16 !important;
|
|
color: #86efac !important;
|
|
}
|
|
|
|
[data-theme="dark"] .live-badge.loading {
|
|
background: #1a0e00 !important;
|
|
color: #fcd34d !important;
|
|
}
|
|
|
|
[data-theme="dark"] .live-badge.error {
|
|
background: #2d0a0a !important;
|
|
color: #fca5a5 !important;
|
|
}
|
|
|
|
/* === DARK MODE TOGGLE BUTTON === */
|
|
.dark-mode-toggle {
|
|
background: none;
|
|
border: 2px solid var(--border-color);
|
|
border-radius: 8px;
|
|
width: 38px;
|
|
height: 38px;
|
|
cursor: pointer;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
font-size: 18px;
|
|
transition: all 0.2s;
|
|
color: var(--text-secondary);
|
|
flex-shrink: 0;
|
|
}
|
|
.dark-mode-toggle:hover {
|
|
border-color: var(--accent);
|
|
color: var(--accent);
|
|
background: var(--bg-hover);
|
|
}
|
|
|
|
/* === LANGUAGE SWITCHER === */
|
|
.lang-switcher {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 4px;
|
|
background: var(--bg-hover);
|
|
border: 1px solid var(--border-color);
|
|
border-radius: 8px;
|
|
padding: 4px;
|
|
flex-shrink: 0;
|
|
}
|
|
.lang-btn {
|
|
padding: 4px 8px;
|
|
border: none;
|
|
background: none;
|
|
border-radius: 5px;
|
|
cursor: pointer;
|
|
font-size: 12px;
|
|
font-weight: 600;
|
|
color: var(--text-muted);
|
|
transition: all 0.2s;
|
|
}
|
|
.lang-btn.active {
|
|
background: var(--accent);
|
|
color: white;
|
|
}
|
|
.lang-btn:hover:not(.active) {
|
|
color: var(--accent);
|
|
}
|
|
|
|
/* === TOAST NOTIFICATIONS === */
|
|
#toast-container {
|
|
position: fixed;
|
|
bottom: 30px;
|
|
right: 30px;
|
|
z-index: 9999;
|
|
display: flex;
|
|
flex-direction: column;
|
|
gap: 10px;
|
|
pointer-events: none;
|
|
}
|
|
.toast {
|
|
background: var(--toast-bg);
|
|
padding: 14px 20px;
|
|
border-radius: 12px;
|
|
box-shadow: 0 10px 40px var(--shadow-lg);
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 12px;
|
|
min-width: 300px;
|
|
max-width: 400px;
|
|
transform: translateX(120%);
|
|
transition: transform 0.3s cubic-bezier(0.34, 1.56, 0.64, 1);
|
|
pointer-events: all;
|
|
border: 1px solid var(--border-color);
|
|
}
|
|
.toast.show { transform: translateX(0); }
|
|
.toast.success { border-left: 4px solid var(--success); }
|
|
.toast.error { border-left: 4px solid var(--danger); }
|
|
.toast.info { border-left: 4px solid var(--accent); }
|
|
.toast.warning { border-left: 4px solid var(--warning); }
|
|
.toast-icon { font-size: 18px; flex-shrink: 0; }
|
|
.toast.success .toast-icon { color: var(--success); }
|
|
.toast.error .toast-icon { color: var(--danger); }
|
|
.toast.info .toast-icon { color: var(--accent); }
|
|
.toast.warning .toast-icon { color: var(--warning); }
|
|
.toast-body { flex: 1; }
|
|
.toast-title { font-weight: 600; font-size: 14px; color: var(--text-primary); }
|
|
.toast-msg { font-size: 13px; color: var(--text-secondary); margin-top: 2px; }
|
|
.toast-close {
|
|
background: none; border: none; cursor: pointer;
|
|
color: var(--text-muted); font-size: 18px; padding: 0; line-height: 1;
|
|
transition: color 0.2s;
|
|
}
|
|
.toast-close:hover { color: var(--text-primary); }
|
|
|
|
/* === MOBILE RESPONSIVE === */
|
|
.mobile-menu-btn {
|
|
display: none;
|
|
background: none;
|
|
border: 2px solid var(--border-color);
|
|
border-radius: 8px;
|
|
width: 38px;
|
|
height: 38px;
|
|
cursor: pointer;
|
|
align-items: center;
|
|
justify-content: center;
|
|
font-size: 16px;
|
|
color: var(--text-secondary);
|
|
transition: all 0.2s;
|
|
flex-shrink: 0;
|
|
}
|
|
.mobile-menu-btn:hover {
|
|
border-color: var(--accent);
|
|
color: var(--accent);
|
|
}
|
|
|
|
.sidebar-overlay {
|
|
display: none;
|
|
position: fixed;
|
|
top: 0; left: 0; right: 0; bottom: 0;
|
|
background: rgba(0,0,0,0.5);
|
|
z-index: 199;
|
|
}
|
|
.sidebar-overlay.active { display: block; }
|
|
|
|
@media (max-width: 768px) {
|
|
.mobile-menu-btn { display: flex; }
|
|
|
|
.sidebar {
|
|
transform: translateX(-100%);
|
|
transition: transform 0.3s ease;
|
|
z-index: 200;
|
|
}
|
|
.sidebar.mobile-open { transform: translateX(0); }
|
|
|
|
.main-content {
|
|
margin-left: 0 !important;
|
|
padding: 15px !important;
|
|
}
|
|
|
|
.header {
|
|
padding: 0 15px !important;
|
|
}
|
|
|
|
.stats-grid {
|
|
grid-template-columns: repeat(2, 1fr) !important;
|
|
}
|
|
|
|
.site-status {
|
|
grid-template-columns: 1fr !important;
|
|
}
|
|
|
|
.sites-grid {
|
|
grid-template-columns: 1fr !important;
|
|
}
|
|
|
|
.page-header {
|
|
flex-direction: column;
|
|
align-items: flex-start !important;
|
|
gap: 15px;
|
|
}
|
|
|
|
.table-container {
|
|
overflow-x: auto;
|
|
}
|
|
|
|
.header-right {
|
|
gap: 8px !important;
|
|
}
|
|
|
|
.user-menu span { display: none; }
|
|
|
|
.form-grid {
|
|
grid-template-columns: 1fr !important;
|
|
}
|
|
|
|
.tab-navigation {
|
|
flex-wrap: wrap;
|
|
}
|
|
|
|
.filter-row {
|
|
flex-wrap: wrap;
|
|
}
|
|
}
|
|
|
|
@media (max-width: 480px) {
|
|
.stats-grid {
|
|
grid-template-columns: 1fr !important;
|
|
}
|
|
.lang-switcher { display: none; }
|
|
}
|
|
|
|
/* === SCROLLBAR STYLING === */
|
|
::-webkit-scrollbar { width: 6px; height: 6px; }
|
|
::-webkit-scrollbar-track { background: var(--scrollbar-track); }
|
|
::-webkit-scrollbar-thumb { background: var(--scrollbar-thumb); border-radius: 3px; }
|
|
::-webkit-scrollbar-thumb:hover { background: var(--text-muted); }
|
|
|
|
/* === SMOOTH TRANSITIONS === */
|
|
body, .card, .sidebar, .header, input, select, textarea, .btn {
|
|
transition: background-color 0.2s, border-color 0.2s, color 0.2s;
|
|
}
|
|
|
|
/* === SHARED COMPONENTS: ALERTS & BADGES ===
|
|
Zentral definiert (statt pro Seite dupliziert), damit Light- und
|
|
Dark-Mode ueber die CSS-Variablen oben konsistent funktionieren. */
|
|
.alert {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 10px;
|
|
padding: 13px 18px;
|
|
border-radius: 10px;
|
|
font-size: 14px;
|
|
margin-bottom: 20px;
|
|
}
|
|
.alert-error {
|
|
background: var(--alert-error-bg);
|
|
border: 1px solid var(--alert-error-border);
|
|
color: var(--alert-error-text);
|
|
}
|
|
.alert-success {
|
|
background: var(--alert-success-bg);
|
|
border: 1px solid var(--alert-success-border);
|
|
color: var(--alert-success-text);
|
|
}
|
|
|
|
.badge {
|
|
display: inline-block;
|
|
padding: 3px 9px;
|
|
border-radius: 5px;
|
|
font-size: 11px;
|
|
font-weight: 500;
|
|
margin: 2px;
|
|
}
|
|
.badge-success { background: var(--badge-success-bg); color: var(--badge-success-text); }
|
|
.badge-warning { background: var(--badge-warning-bg); color: var(--badge-warning-text); }
|
|
.badge-danger { background: var(--badge-danger-bg); color: var(--badge-danger-text); }
|
|
.badge-info { background: var(--bg-badge-info); color: var(--text-badge-info); }
|
|
.badge-secondary { background: var(--bg-hover); color: var(--text-muted); }
|