Medowar
/
feuerwehr-freising-antragsformular


			
				
					
						
						
							12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394
							<?php

declare(strict_types=1);

use App\App\Bootstrap;
use App\Admin\Auth;
use App\Security\Csrf;
use App\Storage\JsonStore;

require dirname(__DIR__) . '/src/autoload.php';
Bootstrap::init();
$app = Bootstrap::config('app');

$auth = new Auth();
$auth->requireLogin();

$id = trim((string) ($_GET['id'] ?? ''));
$store = new JsonStore();
$submission = $store->getSubmissionByKey($id);

if ($submission === null) {
    http_response_code(404);
    echo 'Antrag nicht gefunden.';
    exit;
}

$csrf = Csrf::token();
?><!doctype html>
<html lang="de">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Antragsdetails</title>
    <link rel="stylesheet" href="<?= htmlspecialchars(Bootstrap::url('assets/css/tokens.css')) ?>">
    <link rel="stylesheet" href="<?= htmlspecialchars(Bootstrap::url('assets/css/base.css')) ?>">
</head>
<body class="admin-page">
<header class="site-header">
    <div class="container header-inner">
        <a class="brand" href="<?= htmlspecialchars(Bootstrap::url('admin/index.php')) ?>">
            <img class="brand-logo" src="<?= htmlspecialchars(Bootstrap::url('assets/images/feuerwehr-Logo-invers.webp')) ?>" alt="Feuerwehr Logo">
            <div class="brand-title"><?= htmlspecialchars((string) ($app['project_name'] ?? 'Admin')) ?></div>
        </a>
    </div>
</header>
<main class="container">
    <section class="card">
        <p><a href="<?= htmlspecialchars(Bootstrap::url('admin/index.php')) ?>">Zur Übersicht</a></p>
        <h1>Antragsdetails</h1>
        <p><strong>E-Mail:</strong> <?= htmlspecialchars((string) ($submission['email'] ?? '')) ?></p>
        <p><strong>Eingereicht:</strong> <?= htmlspecialchars((string) ($submission['submitted_at'] ?? '')) ?></p>

        <h2>Formulardaten</h2>
        <div class="table-responsive">
            <table class="table-compact">
                <tbody>
                    <?php foreach ((array) ($submission['form_data'] ?? []) as $key => $value): ?>
                        <tr>
                            <th><?= htmlspecialchars((string) $key) ?></th>
                            <td><?= htmlspecialchars(is_scalar($value) ? (string) $value : json_encode($value, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES)) ?></td>
                        </tr>
                    <?php endforeach; ?>
                </tbody>
            </table>
        </div>

        <h2>Uploads</h2>
        <?php if (empty($submission['uploads'])): ?>
            <p>Keine Uploads vorhanden.</p>
        <?php else: ?>
            <p><a href="<?= htmlspecialchars(Bootstrap::url('admin/download-zip.php?id=' . urlencode((string) ($submission['application_key'] ?? '')))) ?>">Alle Uploads als ZIP herunterladen</a></p>
            <?php foreach ((array) $submission['uploads'] as $field => $files): ?>
                <h3><?= htmlspecialchars((string) $field) ?></h3>
                <ul>
                    <?php foreach ((array) $files as $idx => $file): ?>
                        <li>
                            <?= htmlspecialchars((string) ($file['original_filename'] ?? 'Datei')) ?>
                            - <a href="<?= htmlspecialchars(Bootstrap::url('admin/download.php?id=' . urlencode((string) ($submission['application_key'] ?? '')) . '&field=' . urlencode((string) $field) . '&index=' . urlencode((string) $idx))) ?>">Download</a>
                        </li>
                    <?php endforeach; ?>
                </ul>
            <?php endforeach; ?>
        <?php endif; ?>

        <h2>Löschen</h2>
        <form method="post" action="<?= htmlspecialchars(Bootstrap::url('admin/delete.php')) ?>" onsubmit="return confirm('Antrag wirklich löschen?');">
            <input type="hidden" name="csrf" value="<?= htmlspecialchars($csrf) ?>">
            <input type="hidden" name="id" value="<?= htmlspecialchars((string) ($submission['application_key'] ?? '')) ?>">
            <button type="submit" class="btn">Antrag löschen</button>
        </form>
    </section>
</main>
</body>
</html>