Atlas: Infrastruktur + Team-Konventionen + Sprachregel Lernarbeit
- Design-System (assets/css/design-system.css) mit 21 Komponenten, iPad-Responsive-Breakpoints, Touch-Ziele 36px, Music-Player, Glossar-Tooltips - Templates (sims/template.html + student/teacher-Dashboard) - Docs: module-interface.md (inkl. 4a Sprachregel, 4b Leichte Sprache, 4c iPad), content-architecture.md, crash-recovery.md, music-registry.md - Admin-Infrastruktur: admin-modules.html + api/admin-modules.php (Titel, Emoji, Bild, Status, Dauer, Alter pro Modul) - Inbox-System: _inbox/README.md + _status.md fuer Atlas + Briefings an Klima, Glossar, Lehrplan, Fluss - Zentrale SFX-Pipeline (scripts/generate-sounds.py) - DALL-E-Bilder: 8 Badges + 5 Glossar-Repraesentationsbilder (Querformat) - Logo + Inter-Font lokal - PHP-APIs: admin, glossar, levels, licenses, progress, waypoints, assignments, profile, tickets - Spielsprache entfernt (admin-modules, admin-levels, schueler) - Landing-Page-Bearbeitungen (Boote sichtbarer, Button-Hintergrund) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
+142
-1
@@ -39,6 +39,25 @@ if ($action === 'register') {
|
||||
Session::start();
|
||||
Session::loginTeacher($teacherId);
|
||||
|
||||
// "Meine Klasse" automatisch anlegen
|
||||
$chars = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789';
|
||||
$joinCode = '';
|
||||
do {
|
||||
$joinCode = '';
|
||||
for ($i = 0; $i < 6; $i++) $joinCode .= $chars[random_int(0, strlen($chars) - 1)];
|
||||
$exists = $db->fetchOne('SELECT id FROM classes WHERE join_code = ?', [$joinCode]);
|
||||
} while ($exists);
|
||||
|
||||
$db->execute(
|
||||
'INSERT INTO classes (teacher_id, name, school_year, join_code) VALUES (?, ?, ?, ?)',
|
||||
[$teacherId, 'Meine Klasse', date('Y') . '/' . (date('y') + 1), $joinCode]
|
||||
);
|
||||
|
||||
// Willkommens-Mail senden (nicht-blockierend)
|
||||
if (class_exists('Mailer')) {
|
||||
Mailer::sendWelcomeTeacher($email, $displayName);
|
||||
}
|
||||
|
||||
Response::ok([
|
||||
'teacherId' => $teacherId,
|
||||
'displayName' => $displayName,
|
||||
@@ -75,6 +94,68 @@ if ($action === 'login') {
|
||||
]);
|
||||
}
|
||||
|
||||
// === SCHÜLER*IN SELBST-REGISTRIERUNG (mit Klassencode) ===
|
||||
if ($action === 'student_register') {
|
||||
$classCode = strtoupper(trim($body['classCode'] ?? ''));
|
||||
$username = trim($body['username'] ?? '');
|
||||
$password = $body['password'] ?? '';
|
||||
|
||||
if (!$classCode || !$username || !$password) Response::error('Klassencode, Benutzername und Passwort erforderlich');
|
||||
if (strlen($password) < 4) Response::error('Passwort muss mindestens 4 Zeichen haben');
|
||||
|
||||
$class = $db->fetchOne('SELECT id, name FROM classes WHERE join_code = ?', [$classCode]);
|
||||
if (!$class) Response::error('Klassencode ungültig');
|
||||
|
||||
// Prüfen ob Username schon existiert
|
||||
$existing = $db->fetchOne('SELECT id FROM students WHERE class_id = ? AND username = ?', [$class['id'], $username]);
|
||||
if ($existing) Response::error('Benutzername in dieser Klasse bereits vergeben');
|
||||
|
||||
$hash = password_hash($password, PASSWORD_DEFAULT);
|
||||
$db->execute(
|
||||
'INSERT INTO students (class_id, username, password, display_name, is_anonymous) VALUES (?, ?, ?, ?, 0)',
|
||||
[$class['id'], $username, $hash, $username]
|
||||
);
|
||||
|
||||
// Direkt einloggen
|
||||
$sessionId = Session::createStudent((int)$class['id'], $username);
|
||||
|
||||
Response::ok([
|
||||
'sessionId' => $sessionId,
|
||||
'displayName' => $username,
|
||||
'className' => $class['name'],
|
||||
]);
|
||||
}
|
||||
|
||||
// === SCHÜLER*IN LOGIN OHNE KLASSENCODE (sucht über alle Klassen) ===
|
||||
if ($action === 'student_login_by_username') {
|
||||
$username = trim($body['username'] ?? '');
|
||||
$password = $body['password'] ?? '';
|
||||
|
||||
if (!$username || !$password) Response::error('Benutzername und Passwort erforderlich');
|
||||
|
||||
$student = $db->fetchOne(
|
||||
'SELECT s.id, s.password, s.display_name, s.class_id, c.name as class_name, c.join_code
|
||||
FROM students s JOIN classes c ON c.id = s.class_id
|
||||
WHERE s.username = ? AND s.deleted_at IS NULL
|
||||
ORDER BY s.last_login DESC LIMIT 1',
|
||||
[$username]
|
||||
);
|
||||
|
||||
if (!$student || !password_verify($password, $student['password'])) {
|
||||
Response::error('Benutzername oder Passwort falsch');
|
||||
}
|
||||
|
||||
$sessionId = Session::createStudent((int)$student['class_id'], $student['display_name'] ?: $username);
|
||||
$db->execute('UPDATE students SET last_login = NOW() WHERE id = ?', [$student['id']]);
|
||||
|
||||
Response::ok([
|
||||
'sessionId' => $sessionId,
|
||||
'studentId' => (int)$student['id'],
|
||||
'displayName' => $student['display_name'] ?: $username,
|
||||
'className' => $student['class_name'] ?? '',
|
||||
]);
|
||||
}
|
||||
|
||||
// === LOGOUT ===
|
||||
if ($action === 'logout') {
|
||||
Session::logout();
|
||||
@@ -89,7 +170,7 @@ if ($action === 'student_login') {
|
||||
|
||||
if (!$classCode || !$username || !$password) Response::error('Klassencode, Benutzername und Passwort erforderlich');
|
||||
|
||||
$class = $db->fetchOne('SELECT id FROM classes WHERE join_code = ?', [$classCode]);
|
||||
$class = $db->fetchOne('SELECT id, name FROM classes WHERE join_code = ?', [$classCode]);
|
||||
if (!$class) Response::error('Klasse nicht gefunden');
|
||||
|
||||
$student = $db->fetchOne(
|
||||
@@ -118,6 +199,44 @@ if ($action === 'student_login') {
|
||||
]);
|
||||
}
|
||||
|
||||
// === PASSWORT-RESET ANFORDERN ===
|
||||
if ($action === 'reset_request') {
|
||||
$email = trim($body['email'] ?? '');
|
||||
if (!$email) Response::error('E-Mail-Adresse erforderlich');
|
||||
|
||||
$teacher = $db->fetchOne('SELECT id, display_name FROM teachers WHERE email = ?', [$email]);
|
||||
if (!$teacher) {
|
||||
// Kein Fehler zurückgeben (Datenschutz)
|
||||
Response::ok(['message' => 'Falls ein Konto existiert, wurde eine E-Mail gesendet.']);
|
||||
}
|
||||
|
||||
$token = bin2hex(random_bytes(32));
|
||||
$db->execute('UPDATE teachers SET reset_token = ?, reset_expires = DATE_ADD(NOW(), INTERVAL 1 HOUR) WHERE id = ?', [$token, $teacher['id']]);
|
||||
|
||||
if (class_exists('Mailer')) {
|
||||
Mailer::sendPasswordReset($email, $teacher['display_name'] ?: 'Lehrkraft', $token);
|
||||
}
|
||||
|
||||
Response::ok(['message' => 'Falls ein Konto existiert, wurde eine E-Mail gesendet.']);
|
||||
}
|
||||
|
||||
// === PASSWORT-RESET BESTÄTIGEN ===
|
||||
if ($action === 'reset_confirm') {
|
||||
$token = trim($body['token'] ?? '');
|
||||
$newPassword = $body['newPassword'] ?? '';
|
||||
|
||||
if (!$token || !$newPassword) Response::error('Token und neues Passwort erforderlich');
|
||||
if (strlen($newPassword) < 8) Response::error('Passwort muss mindestens 8 Zeichen haben');
|
||||
|
||||
$teacher = $db->fetchOne('SELECT id FROM teachers WHERE reset_token = ? AND reset_expires > NOW()', [$token]);
|
||||
if (!$teacher) Response::error('Link ist ungültig oder abgelaufen');
|
||||
|
||||
$db->execute('UPDATE teachers SET password = ?, reset_token = NULL, reset_expires = NULL WHERE id = ?',
|
||||
[password_hash($newPassword, PASSWORD_DEFAULT), $teacher['id']]);
|
||||
|
||||
Response::ok(['message' => 'Passwort wurde geändert.']);
|
||||
}
|
||||
|
||||
// === STATUS ===
|
||||
if ($action === 'status') {
|
||||
Session::start();
|
||||
@@ -138,4 +257,26 @@ if ($action === 'status') {
|
||||
Response::ok(['role' => 'guest']);
|
||||
}
|
||||
|
||||
// === KONTAKTFORMULAR ===
|
||||
if ($action === 'contact') {
|
||||
$name = mb_substr(trim($body['name'] ?? ''), 0, 128);
|
||||
$email = trim($body['email'] ?? '');
|
||||
$subject = mb_substr(trim($body['subject'] ?? ''), 0, 128);
|
||||
$message = mb_substr(trim($body['message'] ?? ''), 0, 5000);
|
||||
|
||||
if (!$name || !$email || !$message) Response::error('Alle Felder erforderlich');
|
||||
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) Response::error('Ungültige E-Mail-Adresse');
|
||||
|
||||
if (class_exists('Mailer')) {
|
||||
$html = '<p><strong>Kontaktformular GeoGraSim</strong></p>'
|
||||
. '<p><strong>Von:</strong> ' . htmlspecialchars($name) . ' (' . htmlspecialchars($email) . ')</p>'
|
||||
. '<p><strong>Betreff:</strong> ' . htmlspecialchars($subject) . '</p>'
|
||||
. '<p><strong>Nachricht:</strong></p>'
|
||||
. '<p>' . nl2br(htmlspecialchars($message)) . '</p>';
|
||||
Mailer::send('support@geograsim.at', 'Kontakt: ' . $subject . ' — ' . $name, $html);
|
||||
}
|
||||
|
||||
Response::ok(['message' => 'Nachricht gesendet.']);
|
||||
}
|
||||
|
||||
Response::error('Unbekannte Aktion');
|
||||
|
||||
Reference in New Issue
Block a user