72 lines
1.9 KiB
PHP
72 lines
1.9 KiB
PHP
<?php
|
|
/**
|
|
* Theme Management Controller
|
|
*
|
|
* Handles theme switching and management functionality.
|
|
* Allows users to view available themes and change the active theme.
|
|
*
|
|
* Actions:
|
|
* - switch_to: Changes the active theme for the current user
|
|
*/
|
|
|
|
// Initialize security
|
|
require_once '../app/helpers/security.php';
|
|
$security = SecurityHelper::getInstance();
|
|
|
|
// Only allow access to logged-in users
|
|
if (!Session::isValidSession()) {
|
|
header('Location: ' . $app_root . '?page=login');
|
|
exit;
|
|
}
|
|
|
|
// Get any old feedback messages
|
|
include '../app/helpers/feedback.php';
|
|
|
|
// Handle theme switching
|
|
if (isset($_GET['switch_to'])) {
|
|
$themeName = $_GET['switch_to'];
|
|
|
|
// Validate CSRF token for state-changing operations
|
|
if (!$security->verifyCsrfToken($_GET['csrf_token'] ?? '')) {
|
|
Feedback::flash('SECURITY', 'CSRF_INVALID');
|
|
header("Location: $app_root?page=theme");
|
|
exit();
|
|
}
|
|
|
|
if (\App\Helpers\Theme::setCurrentTheme($themeName)) {
|
|
// Set success message
|
|
Feedback::flash('THEME', 'THEME_CHANGED');
|
|
} else {
|
|
// Set error message
|
|
Feedback::flash('THEME', 'THEME_CHANGE_FAILED');
|
|
}
|
|
|
|
// Redirect back to prevent form resubmission
|
|
$redirect = $app_root . '?page=theme';
|
|
header("Location: $redirect");
|
|
exit;
|
|
}
|
|
|
|
// Get available themes and current theme for the view
|
|
$themes = \App\Helpers\Theme::getAvailableThemes();
|
|
$currentTheme = \App\Helpers\Theme::getCurrentThemeName();
|
|
|
|
// Prepare theme data with screenshot URLs for the view
|
|
$themeData = [];
|
|
foreach ($themes as $id => $name) {
|
|
$themeData[$id] = [
|
|
'name' => $name,
|
|
'screenshotUrl' => \App\Helpers\Theme::getAssetUrl($id, 'screenshot.png'),
|
|
'isActive' => $id === $currentTheme
|
|
];
|
|
}
|
|
|
|
// Make theme data available to the view
|
|
$themes = $themeData;
|
|
|
|
// Generate CSRF token for the form
|
|
$csrf_token = $security->generateCsrfToken();
|
|
|
|
// Load the template
|
|
include '../app/templates/theme.php';
|