Creata dashboard amministratore

2026-05-14 14:52:04 +00:00 · 2026-04-08 11:48:50 +02:00
parent 9bec64e811
commit 3ca10395b5
1 changed files with 76 additions and 0 deletions
@@ -0,0 +1,76 @@
+<?php
+session_start();
+include '../db_conf.php';
+
+// Controlla se l'utente è loggato
+if (!isset($_SESSION['id'])) {
+    header('Location: ../login.php');
+    exit();
+}
+
+// Controlla se l'utente ha ruolo admin
+$user_id = $_SESSION['id'];
+$sql_role = "SELECT Role FROM Users WHERE UserID = ?";
+$stmt_role = $conn->prepare($sql_role);
+$stmt_role->bind_param("i", $user_id);
+$stmt_role->execute();
+$stmt_role->bind_result($role);
+$stmt_role->fetch();
+$stmt_role->close();
+
+if ($role !== 'admin') {
+    http_response_code(403);
+    die("Accesso negato. Solo gli amministratori possono accedere a questa sezione.");
+}
+
+// Query per ottenere tutti i prodotti
+$sql = "SELECT p.ProductID, p.ProductName, c.Name AS 'CategoryName', p.Description, p.Price, p.StockQuantity, p.ImagePath FROM Products p JOIN Categories c ON p.CategoryID=c.CategoryID";
+$result = $conn->query($sql);
+
+if ($result === false) {
+    die("Errore nella query: " . $conn->error);
+}
+?>
+
+<!DOCTYPE html>
+<html lang="it">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Dashboard amministratore - TechStore</title>
+    <link rel="stylesheet" href="/assets/style.css">
+    <script src="/assets/js/cart.js"></script>
+</head>
+<body>
+    <header style="display: flex; justify-content: space-between; align-items: center; padding: 10px; background-color: #f2f2f2; border-bottom: 1px solid #ddd;">
+        <div id="logo" style="font-size: 24px; font-weight: bold;"><a href="/index.php"><img src="/img/logo.png" alt="Logo TechStore" height="32px"></a></div>
+        <div>
+            <a href="/cart.php"><button style="margin-left: 10px; padding: 8px 16px; background-color: #007bff; color: white; border: none; border-radius: 4px; cursor: pointer;">Carrello</button></a>
+            <?php if (isset($_SESSION['name'])): ?>
+                <a href="/logout.php"><button style="margin-left: 10px; padding: 8px 16px; background-color: #dc3545; color: white; border: none; border-radius: 4px; cursor: pointer;">Logout</button></a>
+                <span style="margin-left: 10px;">Benvenuto, <?php echo htmlspecialchars($_SESSION['name']); ?></span>
+            <?php else: ?>
+                <a href="/login.php"><button style="margin-left: 10px; padding: 8px 16px; background-color: #28a745; color: white; border: none; border-radius: 4px; cursor: pointer;">Accesso</button></a>
+            <?php endif; ?>
+        </div>
+    </header>
+
+    <?php if (isset($_SESSION['name'])): ?>
+        <div class="account-layout">
+            <div class="my-sidebar">
+                <ul>
+                    <li><a href="/admin">Dashboard</a></li>
+                    <li><a href="/admin/manageOrders.php">Gestione ordini</a></li>
+                </ul>
+            </div>
+            <div class="my-container">
+                <h1>Hello World!<h1>
+            </div>
+        </div>
+    <?php else: ?>
+        <?php header('Location: login.php'); ?>
+    <?php endif; ?>
+
+    <?php $conn->close(); ?>
+</body>
+</html>