Unifi-Voucher-Tool/assets/global.css
Claude 6e19958a37
Security-, Bugfix- und UX-Überarbeitung auf Basis des Code-Reviews
Sicherheit:
- Bulk-Erstellung serverseitig auf eingeloggte Nutzer beschränkt;
  expire_minutes wird validiert (anonym: nur Default/Template-Werte,
  eingeloggt: max. 1 Jahr)
- IP-basiertes Rate-Limit über neue Tabelle request_throttle
  (Voucher-Erstellung + Passwort-Reset-Anfragen), Session-Fallback
  für Alt-Installationen; Migration 0002
- session_regenerate_id() nach Login, Secure-Cookie-Flag bei HTTPS
- Admin-/Aktiv-Status wird pro Request live aus der DB geprüft
  (Rechteentzug & Deaktivierung wirken sofort); Schutz vor
  Selbst-Degradierung im Benutzer-Edit
- Alle state-ändernden Admin-Aktionen von GET auf POST umgestellt
  (kein CSRF-Token mehr in URLs)
- login_simple.php (Legacy, Debug-Leak) entfernt; cron_test.php nur
  noch für Admins; .htaccess auf Apache-2.4-Syntax inkl. cron_test.php
- M365 Client Secret wird nicht mehr ins Formular zurückgegeben
- Updater: Zip-Slip-/Pfad-Traversal-Schutz, Backup vor dem Anwenden
  mit automatischem Rollback bei Fehlern, AuditLogger-Bug behoben
- cron_sync: Token-Vergleich mit hash_equals; login_attempts-Pruning
- CSV-Export gegen Excel-Formula-Injection abgesichert

Bugfixes:
- M365-Login: Fallback auf userPrincipalName, wenn Graph kein 'mail'
  liefert (Nutzer ohne Exchange-Postfach konnten sich nie anmelden)
- PRG-Pattern überall: F5 erzeugt keine Duplikat-Voucher und
  wiederholt keine Admin-Aktionen (Session-Flash-Messages)
- QR-Code nicht mehr invertiert (schwarz auf weiß, scanbar)
- Bulk-Erstellung nutzt den UniFi 'n'-Parameter: 1 API-Call statt
  n× Login + Voucherlisten-Abruf; exaktes Code-Matching per
  create_time statt "global neuester Voucher"
- Mailer: doppelte Zeilenumbrüche behoben, AUTH nur mit Credentials,
  SMTP-Dot-Stuffing, CLI-sicherer EHLO-Host
- forgot_password: System-URL-Auto-Detect (Reset-Link war sonst
  relativ/kaputt) + Rate-Limit
- Audit-Log-Labels an tatsächliche Action-Keys angepasst;
  Voucher-Erstellung (einzeln & bulk) wird jetzt auditiert
- Site-Edit testet die Verbindung auch ohne Passwortänderung

UX/UI:
- Alert-/Badge-Styles zentral in global.css mit Dark-Mode-Variablen
  (vorher 7× dupliziert mit hart codierten Hellfarben)
- Sticky-Formulare + Tab-Erhalt nach Validierungsfehlern (Bulk),
  Settings kehren nach dem Speichern zum aktiven Tab zurück
- Gültigkeit menschenlesbar (z.B. "8 Stunden" statt "480 Minuten")
- Voucher-Name-Default "Gast/Guest" im öffentlichen Modus
- Favicon auch auf Login-/öffentlichen Seiten
- Verbindungstest-Button pro Site-Karte (Health-Check)
- i18n-Pass: Confirm-Dialoge, Toasts, Fehl-/Erfolgsmeldungen in de/en
- Sprachumschalter ohne fetch+reload (kein Re-Submit-Dialog)
- A11y: Esc schließt Modals, aria-live für Toasts, aria-labels auf
  Icon-Buttons; APP_KEY-Warnbanner im Dashboard
- Dashboard-Sync: set_time_limit passend zur Site-Anzahl;
  Voucher-Sync mit Map statt SELECT pro Voucher

Tooling:
- GitHub-Actions-Workflow: PHP-Lint aller Dateien + de/en-Key-Parität

https://claude.ai/code/session_01KKVpVPJjrTKGoRgpJcySD4
2026-06-09 19:43:13 +00:00

520 lines
13 KiB
CSS

/* === DARK MODE CSS VARIABLES === */
:root {
--bg-body: #f5f7fa;
--bg-card: #ffffff;
--bg-header: #ffffff;
--bg-sidebar: #ffffff;
--bg-hover: #f8f9fa;
--bg-input: #ffffff;
--bg-table-head: #f8f9fa;
--bg-badge-info: #d1ecf1;
--text-primary: #333333;
--text-secondary: #666666;
--text-muted: #999999;
--text-badge-info: #0c5460;
--border-color: #e0e0e0;
--border-hover: #667eea;
--shadow: rgba(0,0,0,0.05);
--shadow-lg: rgba(0,0,0,0.3);
--accent: #667eea;
--accent-hover: #5568d3;
--danger: #dc3545;
--success: #28a745;
--warning: #ffc107;
--code-bg: #f8f9fa;
--input-border: #e0e0e0;
--input-focus: #667eea;
--modal-overlay: rgba(0,0,0,0.5);
--scrollbar-track: #f1f1f1;
--scrollbar-thumb: #c1c1c1;
--toast-bg: #ffffff;
--stat-sub: #f0f0f0;
--alert-error-bg: #fee;
--alert-error-border: #fcc;
--alert-error-text: #c33;
--alert-success-bg: #efe;
--alert-success-border: #cfc;
--alert-success-text: #3c3;
--badge-success-bg: #d4edda;
--badge-success-text: #155724;
--badge-warning-bg: #fff3cd;
--badge-warning-text: #856404;
--badge-danger-bg: #f8d7da;
--badge-danger-text: #721c24;
}
[data-theme="dark"] {
--bg-body: #0f1117;
--bg-card: #1a1d27;
--bg-header: #1a1d27;
--bg-sidebar: #1a1d27;
--bg-hover: #22273a;
--bg-input: #22273a;
--bg-table-head: #22273a;
--bg-badge-info: #0c3d47;
--text-primary: #e8eaf0;
--text-secondary: #a0a8b8;
--text-muted: #6b7280;
--text-badge-info: #7dd3eb;
--border-color: #2e3347;
--border-hover: #667eea;
--shadow: rgba(0,0,0,0.3);
--shadow-lg: rgba(0,0,0,0.6);
--accent: #7c8ff5;
--accent-hover: #667eea;
--danger: #ef4444;
--success: #22c55e;
--warning: #f59e0b;
--code-bg: #22273a;
--input-border: #2e3347;
--input-focus: #7c8ff5;
--modal-overlay: rgba(0,0,0,0.7);
--scrollbar-track: #1a1d27;
--scrollbar-thumb: #3a3f5a;
--toast-bg: #1a1d27;
--stat-sub: #22273a;
--alert-error-bg: #3a161c;
--alert-error-border: #5c2230;
--alert-error-text: #f5a3ad;
--alert-success-bg: #122e1d;
--alert-success-border: #1e4d30;
--alert-success-text: #86e0a3;
--badge-success-bg: #122e1d;
--badge-success-text: #86e0a3;
--badge-warning-bg: #3a2f10;
--badge-warning-text: #f0c95c;
--badge-danger-bg: #3a161c;
--badge-danger-text: #f5a3ad;
}
/* === DARK MODE OVERRIDES FOR COMMON ELEMENTS === */
[data-theme="dark"] body {
background: var(--bg-body);
color: var(--text-primary);
}
[data-theme="dark"] .header {
background: var(--bg-header) !important;
border-color: var(--border-color) !important;
}
[data-theme="dark"] .sidebar {
background: var(--bg-sidebar) !important;
border-color: var(--border-color) !important;
}
[data-theme="dark"] .sidebar-nav a {
color: var(--text-secondary) !important;
}
[data-theme="dark"] .sidebar-nav a:hover,
[data-theme="dark"] .sidebar-nav a.active {
background: var(--bg-hover) !important;
color: var(--accent) !important;
}
[data-theme="dark"] .card,
[data-theme="dark"] .stat-card,
[data-theme="dark"] .site-status-card,
[data-theme="dark"] .site-card {
background: var(--bg-card) !important;
border-color: var(--border-color) !important;
}
[data-theme="dark"] .card-header,
[data-theme="dark"] .modal-header {
border-color: var(--border-color) !important;
}
[data-theme="dark"] .card-title,
[data-theme="dark"] .page-title,
[data-theme="dark"] .modal-title,
[data-theme="dark"] .stat-card-value,
[data-theme="dark"] h1, [data-theme="dark"] h2, [data-theme="dark"] h3 {
color: var(--text-primary) !important;
}
[data-theme="dark"] .page-subtitle,
[data-theme="dark"] .stat-card-title,
[data-theme="dark"] .stat-card-sub,
[data-theme="dark"] label {
color: var(--text-secondary) !important;
}
[data-theme="dark"] .table th {
background: var(--bg-table-head) !important;
color: var(--text-secondary) !important;
}
[data-theme="dark"] .table td {
color: var(--text-primary) !important;
border-color: var(--border-color) !important;
}
[data-theme="dark"] .table tr:hover {
background: var(--bg-hover) !important;
}
[data-theme="dark"] input[type="text"],
[data-theme="dark"] input[type="email"],
[data-theme="dark"] input[type="password"],
[data-theme="dark"] input[type="number"],
[data-theme="dark"] input[type="url"],
[data-theme="dark"] select,
[data-theme="dark"] textarea {
background: var(--bg-input) !important;
border-color: var(--input-border) !important;
color: var(--text-primary) !important;
}
[data-theme="dark"] input::placeholder,
[data-theme="dark"] textarea::placeholder {
color: var(--text-muted) !important;
}
[data-theme="dark"] input:focus,
[data-theme="dark"] select:focus,
[data-theme="dark"] textarea:focus {
border-color: var(--input-focus) !important;
}
[data-theme="dark"] .btn-secondary {
background: var(--bg-hover) !important;
color: var(--text-secondary) !important;
border-color: var(--border-color) !important;
}
[data-theme="dark"] .btn-secondary:hover {
background: var(--border-color) !important;
color: var(--text-primary) !important;
}
[data-theme="dark"] code {
background: var(--code-bg) !important;
color: var(--accent) !important;
}
[data-theme="dark"] .modal-content {
background: var(--bg-card) !important;
}
[data-theme="dark"] .badge-info {
background: var(--bg-badge-info) !important;
color: var(--text-badge-info) !important;
}
[data-theme="dark"] .stat-card-icon {
filter: brightness(0.8);
}
[data-theme="dark"] .info-box {
background: #0c2340 !important;
border-color: #1a4a7a !important;
}
[data-theme="dark"] .info-box h4 { color: #60a5fa !important; }
[data-theme="dark"] .info-box p { color: #93c5fd !important; }
[data-theme="dark"] .placeholder-info {
background: #1a1500 !important;
border-color: #44390a !important;
}
[data-theme="dark"] .placeholder-info h4 { color: #d4a017 !important; }
[data-theme="dark"] .placeholder-info code { background: #2a2000 !important; }
[data-theme="dark"] .user-menu {
background: var(--bg-hover) !important;
}
[data-theme="dark"] .filter-btn {
background: var(--bg-card) !important;
border-color: var(--border-color) !important;
color: var(--text-primary) !important;
}
[data-theme="dark"] .filter-btn.active {
background: var(--accent) !important;
border-color: var(--accent) !important;
color: white !important;
}
[data-theme="dark"] .tab-navigation {
background: var(--bg-table-head) !important;
border-color: var(--border-color) !important;
}
[data-theme="dark"] .tab-button {
color: var(--text-secondary) !important;
}
[data-theme="dark"] .tab-button.active {
background: var(--bg-card) !important;
color: var(--accent) !important;
}
[data-theme="dark"] .section-divider {
border-color: var(--border-color) !important;
}
[data-theme="dark"] .site-stat {
background: var(--bg-hover) !important;
}
[data-theme="dark"] .live-badge {
background: #052e16 !important;
color: #86efac !important;
}
[data-theme="dark"] .live-badge.loading {
background: #1a0e00 !important;
color: #fcd34d !important;
}
[data-theme="dark"] .live-badge.error {
background: #2d0a0a !important;
color: #fca5a5 !important;
}
/* === DARK MODE TOGGLE BUTTON === */
.dark-mode-toggle {
background: none;
border: 2px solid var(--border-color);
border-radius: 8px;
width: 38px;
height: 38px;
cursor: pointer;
display: flex;
align-items: center;
justify-content: center;
font-size: 18px;
transition: all 0.2s;
color: var(--text-secondary);
flex-shrink: 0;
}
.dark-mode-toggle:hover {
border-color: var(--accent);
color: var(--accent);
background: var(--bg-hover);
}
/* === LANGUAGE SWITCHER === */
.lang-switcher {
display: flex;
align-items: center;
gap: 4px;
background: var(--bg-hover);
border: 1px solid var(--border-color);
border-radius: 8px;
padding: 4px;
flex-shrink: 0;
}
.lang-btn {
padding: 4px 8px;
border: none;
background: none;
border-radius: 5px;
cursor: pointer;
font-size: 12px;
font-weight: 600;
color: var(--text-muted);
transition: all 0.2s;
}
.lang-btn.active {
background: var(--accent);
color: white;
}
.lang-btn:hover:not(.active) {
color: var(--accent);
}
/* === TOAST NOTIFICATIONS === */
#toast-container {
position: fixed;
bottom: 30px;
right: 30px;
z-index: 9999;
display: flex;
flex-direction: column;
gap: 10px;
pointer-events: none;
}
.toast {
background: var(--toast-bg);
padding: 14px 20px;
border-radius: 12px;
box-shadow: 0 10px 40px var(--shadow-lg);
display: flex;
align-items: center;
gap: 12px;
min-width: 300px;
max-width: 400px;
transform: translateX(120%);
transition: transform 0.3s cubic-bezier(0.34, 1.56, 0.64, 1);
pointer-events: all;
border: 1px solid var(--border-color);
}
.toast.show { transform: translateX(0); }
.toast.success { border-left: 4px solid var(--success); }
.toast.error { border-left: 4px solid var(--danger); }
.toast.info { border-left: 4px solid var(--accent); }
.toast.warning { border-left: 4px solid var(--warning); }
.toast-icon { font-size: 18px; flex-shrink: 0; }
.toast.success .toast-icon { color: var(--success); }
.toast.error .toast-icon { color: var(--danger); }
.toast.info .toast-icon { color: var(--accent); }
.toast.warning .toast-icon { color: var(--warning); }
.toast-body { flex: 1; }
.toast-title { font-weight: 600; font-size: 14px; color: var(--text-primary); }
.toast-msg { font-size: 13px; color: var(--text-secondary); margin-top: 2px; }
.toast-close {
background: none; border: none; cursor: pointer;
color: var(--text-muted); font-size: 18px; padding: 0; line-height: 1;
transition: color 0.2s;
}
.toast-close:hover { color: var(--text-primary); }
/* === MOBILE RESPONSIVE === */
.mobile-menu-btn {
display: none;
background: none;
border: 2px solid var(--border-color);
border-radius: 8px;
width: 38px;
height: 38px;
cursor: pointer;
align-items: center;
justify-content: center;
font-size: 16px;
color: var(--text-secondary);
transition: all 0.2s;
flex-shrink: 0;
}
.mobile-menu-btn:hover {
border-color: var(--accent);
color: var(--accent);
}
.sidebar-overlay {
display: none;
position: fixed;
top: 0; left: 0; right: 0; bottom: 0;
background: rgba(0,0,0,0.5);
z-index: 199;
}
.sidebar-overlay.active { display: block; }
@media (max-width: 768px) {
.mobile-menu-btn { display: flex; }
.sidebar {
transform: translateX(-100%);
transition: transform 0.3s ease;
z-index: 200;
}
.sidebar.mobile-open { transform: translateX(0); }
.main-content {
margin-left: 0 !important;
padding: 15px !important;
}
.header {
padding: 0 15px !important;
}
.stats-grid {
grid-template-columns: repeat(2, 1fr) !important;
}
.site-status {
grid-template-columns: 1fr !important;
}
.sites-grid {
grid-template-columns: 1fr !important;
}
.page-header {
flex-direction: column;
align-items: flex-start !important;
gap: 15px;
}
.table-container {
overflow-x: auto;
}
.header-right {
gap: 8px !important;
}
.user-menu span { display: none; }
.form-grid {
grid-template-columns: 1fr !important;
}
.tab-navigation {
flex-wrap: wrap;
}
.filter-row {
flex-wrap: wrap;
}
}
@media (max-width: 480px) {
.stats-grid {
grid-template-columns: 1fr !important;
}
.lang-switcher { display: none; }
}
/* === SCROLLBAR STYLING === */
::-webkit-scrollbar { width: 6px; height: 6px; }
::-webkit-scrollbar-track { background: var(--scrollbar-track); }
::-webkit-scrollbar-thumb { background: var(--scrollbar-thumb); border-radius: 3px; }
::-webkit-scrollbar-thumb:hover { background: var(--text-muted); }
/* === SMOOTH TRANSITIONS === */
body, .card, .sidebar, .header, input, select, textarea, .btn {
transition: background-color 0.2s, border-color 0.2s, color 0.2s;
}
/* === SHARED COMPONENTS: ALERTS & BADGES ===
Zentral definiert (statt pro Seite dupliziert), damit Light- und
Dark-Mode ueber die CSS-Variablen oben konsistent funktionieren. */
.alert {
display: flex;
align-items: center;
gap: 10px;
padding: 13px 18px;
border-radius: 10px;
font-size: 14px;
margin-bottom: 20px;
}
.alert-error {
background: var(--alert-error-bg);
border: 1px solid var(--alert-error-border);
color: var(--alert-error-text);
}
.alert-success {
background: var(--alert-success-bg);
border: 1px solid var(--alert-success-border);
color: var(--alert-success-text);
}
.badge {
display: inline-block;
padding: 3px 9px;
border-radius: 5px;
font-size: 11px;
font-weight: 500;
margin: 2px;
}
.badge-success { background: var(--badge-success-bg); color: var(--badge-success-text); }
.badge-warning { background: var(--badge-warning-bg); color: var(--badge-warning-text); }
.badge-danger { background: var(--badge-danger-bg); color: var(--badge-danger-text); }
.badge-info { background: var(--bg-badge-info); color: var(--text-badge-info); }
.badge-secondary { background: var(--bg-hover); color: var(--text-muted); }