211 lines
4.4 KiB
PHP
211 lines
4.4 KiB
PHP
<?php
|
|
require '_sql.php';
|
|
require '_func.php';
|
|
|
|
$uuid = $_GET['uuid'] ?? null;
|
|
if (!$uuid) {
|
|
http_response_code(400);
|
|
exit('Ungültige Anfrage');
|
|
}
|
|
|
|
/**
|
|
* Admin-Weiterleitung (nur wenn Session existiert)
|
|
*/
|
|
if (isset($_COOKIE['PHPSESSID'])) {
|
|
session_start(['read_and_close' => true]);
|
|
if ($_SESSION['is_admin'] ?? false) {
|
|
header('Location: /admin.php?uuid=' . urlencode($uuid));
|
|
exit;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* UUID auflösen
|
|
*/
|
|
$token = $sql->single(
|
|
"SELECT * FROM access_tokens
|
|
WHERE uuid = ?
|
|
AND (expires_at IS NULL OR expires_at > NOW())",
|
|
"s",
|
|
[$uuid]
|
|
);
|
|
|
|
if (!$token) {
|
|
http_response_code(404);
|
|
exit('Identität nicht gefunden');
|
|
}
|
|
|
|
/**
|
|
* Sichtbare Stammdaten laden
|
|
*/
|
|
$fields = $sql->get(
|
|
"SELECT f.field_key, f.field_value
|
|
FROM identity_fields f
|
|
JOIN token_permissions p ON p.field_key = f.field_key
|
|
WHERE f.identity_id = ? AND p.token_id = ?
|
|
ORDER BY f.field_key",
|
|
"ii",
|
|
[$token['identity_id'], $token['id']]
|
|
);
|
|
|
|
/**
|
|
* Sichtbare Dateien laden
|
|
*/
|
|
$files = $sql->get(
|
|
"SELECT id, filename, mime_type
|
|
FROM files
|
|
WHERE identity_id = ?
|
|
AND (token_id IS NULL OR token_id = ?)
|
|
ORDER BY uploaded_at DESC",
|
|
"ii",
|
|
[$token['identity_id'], $token['id']]
|
|
);
|
|
|
|
/**
|
|
* Feldnamen hübsch machen
|
|
*/
|
|
function label(string $key): string {
|
|
return match ($key) {
|
|
'name' => 'Name',
|
|
'email' => 'E-Mail',
|
|
'phone' => 'Telefon',
|
|
'address' => 'Adresse',
|
|
default => ucfirst($key),
|
|
};
|
|
}
|
|
?>
|
|
<!DOCTYPE html>
|
|
<html lang="de">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<title>Digitale Identität</title>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
|
|
<style>
|
|
:root {
|
|
--bg: #0f172a;
|
|
--card: #020617;
|
|
--text: #e5e7eb;
|
|
--muted: #94a3b8;
|
|
--accent: #38bdf8;
|
|
--border: #1e293b;
|
|
}
|
|
|
|
* { box-sizing: border-box; }
|
|
|
|
body {
|
|
margin: 0;
|
|
font-family: system-ui, -apple-system, sans-serif;
|
|
background: linear-gradient(135deg, #020617, #0f172a);
|
|
color: var(--text);
|
|
min-height: 100vh;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
padding: 1.5rem;
|
|
}
|
|
|
|
.card {
|
|
width: 100%;
|
|
max-width: 520px;
|
|
background: var(--card);
|
|
border: 1px solid var(--border);
|
|
border-radius: 16px;
|
|
padding: 1.75rem;
|
|
box-shadow: 0 20px 40px rgba(0,0,0,.6);
|
|
}
|
|
|
|
h1 {
|
|
margin: 0 0 1rem;
|
|
font-size: 1.5rem;
|
|
text-align: center;
|
|
}
|
|
|
|
.field {
|
|
margin-bottom: 1rem;
|
|
}
|
|
|
|
.label {
|
|
font-size: .75rem;
|
|
text-transform: uppercase;
|
|
color: var(--muted);
|
|
letter-spacing: .05em;
|
|
}
|
|
|
|
.value {
|
|
font-size: 1rem;
|
|
margin-top: .25rem;
|
|
word-break: break-word;
|
|
}
|
|
|
|
a {
|
|
color: var(--accent);
|
|
text-decoration: none;
|
|
}
|
|
|
|
a:hover {
|
|
text-decoration: underline;
|
|
}
|
|
|
|
.files {
|
|
margin-top: 2rem;
|
|
padding-top: 1rem;
|
|
border-top: 1px solid var(--border);
|
|
}
|
|
|
|
.file {
|
|
display: flex;
|
|
justify-content: space-between;
|
|
align-items: center;
|
|
padding: .5rem 0;
|
|
}
|
|
|
|
.file span {
|
|
color: var(--muted);
|
|
font-size: .85rem;
|
|
}
|
|
|
|
footer {
|
|
margin-top: 1.5rem;
|
|
text-align: center;
|
|
font-size: .75rem;
|
|
color: var(--muted);
|
|
}
|
|
</style>
|
|
</head>
|
|
|
|
<body>
|
|
<div class="card">
|
|
<h1>Identität</h1>
|
|
|
|
<?php foreach ($fields as $field): ?>
|
|
<div class="field">
|
|
<div class="label"><?= htmlspecialchars(label($field['field_key'])) ?></div>
|
|
<div class="value">
|
|
<?= nl2br(htmlspecialchars($field['field_value'])) ?>
|
|
</div>
|
|
</div>
|
|
<?php endforeach; ?>
|
|
|
|
<?php if ($files): ?>
|
|
<div class="files">
|
|
<h2 style="font-size:1rem;margin-bottom:.5rem;">Dateien</h2>
|
|
|
|
<?php foreach ($files as $file): ?>
|
|
<div class="file">
|
|
<span><?= htmlspecialchars($file['filename']) ?></span>
|
|
<a href="/download.php?id=<?= (int)$file['id'] ?>&uuid=<?= urlencode($uuid) ?>">
|
|
Download
|
|
</a>
|
|
</div>
|
|
<?php endforeach; ?>
|
|
</div>
|
|
<?php endif; ?>
|
|
|
|
<footer>
|
|
Zugriff über sicheren Link
|
|
</footer>
|
|
</div>
|
|
</body>
|
|
</html>
|