David Dyer
242c5165e1
- Added role-based access control for user management links in admin navigation. - Improved user account display with a dedicated account link. - Implemented form submission confirmation for delete actions in the admin interface. - Introduced a password visibility toggle on the login page. - Added login throttling to prevent brute-force attacks, recording failed attempts. - Created a CLI script for creating an admin user, replacing the previous hardcoded admin credentials. - Updated database schema to support login attempt tracking. - Enhanced user editing functionality, allowing role changes with restrictions. - Improved modal handling for user actions, ensuring better focus management. - Added styles for new account management page and improved modal transitions.
45 lines
1.4 KiB
JavaScript
45 lines
1.4 KiB
JavaScript
// Announcements admin page: intercepts the status badge's toggle form so
|
|
// clicking it updates in place via fetch instead of reloading the whole
|
|
// page — same interaction as the menu item's status toggle. Everything
|
|
// else here (create/edit/delete) is still a plain form POST + reload.
|
|
|
|
document.addEventListener('submit', async (e) => {
|
|
const form = e.target;
|
|
if (!form.classList.contains('status-toggle-form')) return;
|
|
|
|
e.preventDefault();
|
|
const btn = form.querySelector('button');
|
|
btn.disabled = true;
|
|
|
|
try {
|
|
const response = await fetch('index.php', {
|
|
method: 'POST',
|
|
body: new FormData(form),
|
|
headers: { 'X-Requested-With': 'XMLHttpRequest' }
|
|
});
|
|
const data = await response.json();
|
|
|
|
if (data.success) {
|
|
btn.className = `status-badge ${data.status_class}`;
|
|
btn.textContent = data.status_label;
|
|
btn.title = `Click to turn ${data.is_active ? 'off' : 'on'}`;
|
|
} else {
|
|
alert(data.error || 'Failed to update status.');
|
|
}
|
|
} catch {
|
|
alert('Network error. Please try again.');
|
|
} finally {
|
|
btn.disabled = false;
|
|
}
|
|
});
|
|
|
|
// Asks before submitting any form marked .js-confirm-submit (e.g. delete),
|
|
// using the message in its data-confirm attribute.
|
|
document.addEventListener('submit', (e) => {
|
|
const form = e.target;
|
|
if (!form.classList.contains('js-confirm-submit')) return;
|
|
if (!confirm(form.dataset.confirm || 'Are you sure?')) {
|
|
e.preventDefault();
|
|
}
|
|
});
|