v1.0.0.9

Publisium

← Changes All versions

339 lines · 18.2 KB

<?php
declare(strict_types=1);
require_once __DIR__ . '/includes/config.php';
require_once __DIR__ . '/includes/database.php';
require_once __DIR__ . '/includes/auth.php';
require_once __DIR__ . '/includes/csrf.php';
require_once __DIR__ . '/includes/activity-log.php';
require_once __DIR__ . '/includes/site-front.php';
Auth::boot();
Auth::requireRoleAtLeast(Auth::ROLE_EDITOR_IN_CHIEF);
$currentUser = Auth::user();
$currentRole = Auth::role();
$db = Database::site();
$flashMessage = null;
$flashType = 'success';
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (!Csrf::verify($_POST['csrf_token'] ?? null)) {
$flashMessage = 'Your session expired. Please try again.';
$flashType = 'error';
} else {
require __DIR__ . '/dashboard-actions/manage-ads.php';
ActivityLog::record('ads.' . (string) ($_POST['action'] ?? ''));
$flashMessage = 'Saved.';
}
}
$editId = (int) ($_GET['edit'] ?? 0) ?: null;
$editingAd = null;
if ($editId !== null) {
$statement = $db->prepare('SELECT * FROM ads WHERE id = :id LIMIT 1');
$statement->execute(['id' => $editId]);
$editingAd = $statement->fetch() ?: null;
}
$ads = $db->query('SELECT * FROM ads ORDER BY created_at DESC')->fetchAll();
$exclusionArticles = $db->query('SELECT id, title, status, published_at FROM articles WHERE deleted_at IS NULL ORDER BY COALESCE(published_at, created_at) DESC, id DESC')->fetchAll();
$exclusionPages = $db->query('SELECT id, title, slug FROM pages ORDER BY title ASC')->fetchAll();
$editingExclusions = SiteFront::adExclusions($editingAd ?? []);
$adAudienceSummary = static function (array $ad): string {
$parts = [SiteFront::AD_AUDIENCES[$ad['audience'] ?? 'all'] ?? SiteFront::AD_AUDIENCES['all']];
if ((int) ($ad['hide_for_subscribers'] ?? 0) === 1 && ($ad['audience'] ?? 'all') !== 'paid') {
$parts[] = 'not subscribers';
}
$consent = (string) ($ad['consent_category'] ?? 'none');
if ($consent !== 'none') {
$parts[] = 'after ' . (['analytics' => 'analytics', 'marketing' => 'marketing', 'both' => 'analytics and marketing'][$consent] ?? 'marketing') . ' consent';
}
$excluded = SiteFront::adExclusions($ad);
$excludedCount = count($excluded['articles']) + count($excluded['pages']) + ($excluded['home'] ? 1 : 0);
if ($excludedCount > 0) {
$parts[] = $excludedCount . ' excluded';
}
return implode(', ', $parts);
};
$dashActivePage = 'ads';
$dashPageTitle = 'Ads';
require __DIR__ . '/includes/dash-header.php';
?>
<?php if ($flashMessage !== null): ?>
<div class="dash-flash dash-flash-<?= htmlspecialchars($flashType) ?>"><?= Icons::icon($flashType === 'error' ? 'x' : 'check', 'icon icon-sm') ?><?= htmlspecialchars($flashMessage) ?></div>
<?php endif; ?>
<div class="dash-header-row">
<h1 class="dash-title"><?= Icons::icon("ads", "icon icon-lg") ?>Ads</h1>
<button type="button" class="dash-btn dash-btn-primary" id="ad-new-btn"><?= Icons::icon('plus', 'icon icon-sm') ?>New ad</button>
</div>
<table class="dash-table">
<thead>
<tr>
<th><?= Icons::icon('heading', 'icon icon-sm') ?>Name</th>
<th><?= Icons::icon('ads', 'icon icon-sm') ?>Type</th>
<th><?= Icons::icon('flag', 'icon icon-sm') ?>Where</th>
<th><?= Icons::icon('eye', 'icon icon-sm') ?>Active</th>
<th><?= Icons::icon('users', 'icon icon-sm') ?>Who sees it</th>
<th></th>
</tr>
</thead>
<tbody>
<?php foreach ($ads as $ad): ?>
<tr>
<td><?= htmlspecialchars($ad['name']) ?></td>
<td><?= htmlspecialchars(['static_text' => 'Text', 'static_image' => 'Image', 'script' => 'Code'][$ad['type']] ?? $ad['type']) ?></td>
<td><?= htmlspecialchars(SiteFront::AD_PLACEMENTS[$ad['placement']] ?? $ad['placement']) ?></td>
<td><?= $ad['is_active'] ? 'Yes' : 'No' ?></td>
<td><?= htmlspecialchars($adAudienceSummary($ad)) ?></td>
<td class="dash-table-actions">
<button type="button" class="dash-btn-small js-edit-ad"
data-id="<?= (int) $ad['id'] ?>"
data-name="<?= htmlspecialchars($ad['name'], ENT_QUOTES) ?>"
data-type="<?= htmlspecialchars($ad['type'], ENT_QUOTES) ?>"
data-placement="<?= htmlspecialchars($ad['placement'], ENT_QUOTES) ?>"
data-content="<?= htmlspecialchars($ad['content'], ENT_QUOTES) ?>"
data-link-url="<?= htmlspecialchars((string) $ad['link_url'], ENT_QUOTES) ?>"
data-is-active="<?= (int) $ad['is_active'] ?>"
data-hide-for-subscribers="<?= (int) ($ad['hide_for_subscribers'] ?? 0) ?>"
data-audience="<?= htmlspecialchars((string) ($ad['audience'] ?? 'all'), ENT_QUOTES) ?>"
data-consent="<?= htmlspecialchars((string) ($ad['consent_category'] ?? 'none'), ENT_QUOTES) ?>"
data-excluded="<?= htmlspecialchars((string) json_encode(SiteFront::adExclusions($ad)), ENT_QUOTES) ?>"><?= Icons::icon('edit', 'icon icon-sm') ?>Edit</button>
<form method="post" style="display:inline;" onsubmit="return confirm('Delete this ad? It disappears from the site right away.');">
<?= Csrf::field() ?>
<input type="hidden" name="action" value="delete_ad">
<input type="hidden" name="ad_id" value="<?= (int) $ad['id'] ?>">
<button type="submit" class="dash-btn-small dash-btn-danger"><?= Icons::icon('trash', 'icon icon-sm') ?>Delete</button>
</form>
</td>
</tr>
<?php endforeach; ?>
<?php if (empty($ads)): ?>
<tr>
<td colspan="6">No ads yet. Click New ad to add one.</td>
</tr>
<?php endif; ?>
</tbody>
</table>
<div id="ad-form-wrapper" class="sidebar-box" style="max-width:560px;margin-top:20px;<?= $editingAd ? '' : 'display:none;' ?>">
<h2 class="dash-subtitle" style="margin-top:0;"><?= Icons::icon('megaphone', 'icon icon-sm') ?><span id="ad-form-title"><?= $editingAd ? 'Edit ad' : 'New ad' ?></span></h2>
<form method="post" id="ad-form">
<?= Csrf::field() ?>
<input type="hidden" name="action" value="save_ad">
<input type="hidden" name="ad_id" id="ad_id_input" value="<?= $editingAd ? (int) $editingAd['id'] : '' ?>">
<label><?= Icons::icon('heading', 'icon icon-sm') ?>Name</label>
<input type="text" name="name" id="ad_name_input" value="<?= htmlspecialchars($editingAd['name'] ?? '') ?>" required>
<label><?= Icons::icon('ads', 'icon icon-sm') ?>Type</label>
<select name="type" id="ad_type_select">
<option value="static_text" <?= ($editingAd['type'] ?? '') === 'static_text' ? 'selected' : '' ?>>Text</option>
<option value="static_image" <?= ($editingAd['type'] ?? '') === 'static_image' ? 'selected' : '' ?>>Image</option>
<option value="script" <?= ($editingAd['type'] ?? '') === 'script' ? 'selected' : '' ?>>Code from an ad network (HTML or JavaScript)</option>
</select>
<label><?= Icons::icon('flag', 'icon icon-sm') ?>Where it shows up on the site</label>
<select name="placement" id="ad_placement_input" required>
<?php foreach (SiteFront::AD_PLACEMENTS as $placementKey => $placementLabel): ?>
<option value="<?= htmlspecialchars($placementKey, ENT_QUOTES) ?>" <?= ($editingAd['placement'] ?? 'header') === $placementKey ? 'selected' : '' ?>><?= htmlspecialchars($placementLabel) ?></option>
<?php endforeach; ?>
</select>
<label id="content_label"><?= Icons::icon('quote', 'icon icon-sm') ?>Content (the text, a link to the image, or the ad code)</label>
<textarea name="content" id="ad_content_input" rows="6" class="be-code"><?= htmlspecialchars($editingAd['content'] ?? '') ?></textarea>
<label><?= Icons::icon('external', 'icon icon-sm') ?>Link (optional, where people go when they click, not used for code ads)</label>
<input type="text" name="link_url" id="ad_link_url_input" value="<?= htmlspecialchars($editingAd['link_url'] ?? '') ?>">
<label><input type="checkbox" name="is_active" id="ad_is_active_input" <?= ($editingAd['is_active'] ?? 1) ? 'checked' : '' ?>> Active</label>
<label><?= Icons::icon('users', 'icon icon-sm') ?>Who sees it</label>
<select name="audience" id="ad_audience_input">
<?php foreach (SiteFront::AD_AUDIENCES as $audienceKey => $audienceLabel): ?>
<option value="<?= htmlspecialchars($audienceKey, ENT_QUOTES) ?>" <?= ($editingAd['audience'] ?? 'all') === $audienceKey ? 'selected' : '' ?>><?= htmlspecialchars($audienceLabel) ?></option>
<?php endforeach; ?>
</select>
<label><?= Icons::icon('shield', 'icon icon-sm') ?>Cookie consent</label>
<select name="consent_category" id="ad_consent_input">
<?php foreach (SiteFront::AD_CONSENTS as $consentKey => $consentLabel): ?>
<option value="<?= htmlspecialchars($consentKey, ENT_QUOTES) ?>" <?= ($editingAd['consent_category'] ?? 'none') === $consentKey ? 'selected' : '' ?>><?= htmlspecialchars($consentLabel) ?></option>
<?php endforeach; ?>
</select>
<p style="font-size:12.5px;color:var(--muted);margin:-4px 0 12px;">Ad networks that use cookies usually need marketing consent. Until the visitor agrees, the ad space stays empty. This only applies when cookie consent is turned on in Analytics.</p>
<label><input type="checkbox" name="hide_for_subscribers" id="ad_hide_for_subscribers_input" <?= ($editingAd['hide_for_subscribers'] ?? 1) ? 'checked' : '' ?>> Hide from paying subscribers</label>
<p style="font-size:12.5px;color:var(--muted);margin:-4px 0 12px;">Readers who are logged in with an active subscription won’t see this ad.</p>
<label><?= Icons::icon('x', 'icon icon-sm') ?>Don’t show it on <span id="ad_excluded_count" style="color:var(--muted);font-weight:400;"></span></label>
<p style="font-size:12.5px;color:var(--muted);margin:0 0 8px;">Tick the home page, pages or articles where this ad should never appear. It still shows everywhere else.</p>
<div class="ad-exclusions">
<label class="ad-exclusion-item"><input type="checkbox" name="exclude_home" class="js-ad-exclusion" data-kind="home" <?= $editingExclusions['home'] ? 'checked' : '' ?>> Home page</label>
<?php if (!empty($exclusionPages)): ?>
<div class="ad-exclusion-heading">Pages</div>
<div class="ad-exclusion-list">
<?php foreach ($exclusionPages as $exclusionPage): ?>
<label class="ad-exclusion-item"><input type="checkbox" name="excluded_pages[]" value="<?= (int) $exclusionPage['id'] ?>" class="js-ad-exclusion" data-kind="pages" <?= in_array((int) $exclusionPage['id'], $editingExclusions['pages'], true) ? 'checked' : '' ?>> <?= htmlspecialchars($exclusionPage['title']) ?> <span class="ad-exclusion-status">/<?= htmlspecialchars((string) $exclusionPage['slug']) ?></span></label>
<?php endforeach; ?>
</div>
<?php endif; ?>
<?php if (!empty($exclusionArticles)): ?>
<div class="ad-exclusion-heading">Articles</div>
<input type="search" id="ad_exclusion_filter" placeholder="Find an article" autocomplete="off">
<div class="ad-exclusion-list" id="ad_exclusion_articles">
<?php foreach ($exclusionArticles as $exclusionArticle): ?>
<label class="ad-exclusion-item" data-title="<?= htmlspecialchars(mb_strtolower((string) $exclusionArticle['title']), ENT_QUOTES) ?>"><input type="checkbox" name="excluded_articles[]" value="<?= (int) $exclusionArticle['id'] ?>" class="js-ad-exclusion" data-kind="articles" <?= in_array((int) $exclusionArticle['id'], $editingExclusions['articles'], true) ? 'checked' : '' ?>> <?= htmlspecialchars($exclusionArticle['title']) ?><span class="ad-exclusion-status"><?= htmlspecialchars($exclusionArticle['status'] === 'published' && !empty($exclusionArticle['published_at']) ? date('Y-m-d', strtotime((string) $exclusionArticle['published_at'])) : dashStatusLabel((string) $exclusionArticle['status'])) ?></span></label>
<?php endforeach; ?>
</div>
<?php endif; ?>
</div>
<div class="publish-actions">
<button type="submit" class="dash-btn dash-btn-primary"><?= Icons::icon('check', 'icon icon-sm') ?>Save ad</button>
<button type="button" class="dash-btn" id="ad-cancel-btn"><?= Icons::icon('x', 'icon icon-sm') ?>Cancel</button>
</div>
</form>
</div>
<script>
(function() {
var wrapper = document.getElementById('ad-form-wrapper');
var formTitle = document.getElementById('ad-form-title');
var form = document.getElementById('ad-form');
var exclusionBoxes = form.querySelectorAll('.js-ad-exclusion');
var exclusionFilter = document.getElementById('ad_exclusion_filter');
var exclusionCount = document.getElementById('ad_excluded_count');
function updateExclusionCount() {
var count = 0;
exclusionBoxes.forEach(function(box) {
if (box.checked) {
count++;
}
});
exclusionCount.textContent = count > 0 ? '(' + count + ' selected)' : '';
}
function setExclusions(excluded) {
exclusionBoxes.forEach(function(box) {
var kind = box.dataset.kind;
if (kind === 'home') {
box.checked = !!excluded.home;
} else {
box.checked = (excluded[kind] || []).indexOf(parseInt(box.value, 10)) !== -1;
}
});
updateExclusionCount();
}
function filterArticles() {
if (!exclusionFilter) {
return;
}
var needle = exclusionFilter.value.trim().toLowerCase();
document.querySelectorAll('#ad_exclusion_articles .ad-exclusion-item').forEach(function(item) {
item.style.display = needle === '' || item.dataset.title.indexOf(needle) !== -1 ? '' : 'none';
});
}
var audienceInput = document.getElementById('ad_audience_input');
var hideForSubscribersInput = document.getElementById('ad_hide_for_subscribers_input');
// An ad meant only for subscribers can't also be hidden from them.
function syncHideForSubscribers() {
var onlySubscribers = audienceInput.value === 'paid';
if (onlySubscribers) {
hideForSubscribersInput.checked = false;
}
hideForSubscribersInput.disabled = onlySubscribers;
}
audienceInput.addEventListener('change', syncHideForSubscribers);
syncHideForSubscribers();
exclusionBoxes.forEach(function(box) {
box.addEventListener('change', updateExclusionCount);
});
if (exclusionFilter) {
exclusionFilter.addEventListener('input', filterArticles);
exclusionFilter.addEventListener('keydown', function(event) {
if (event.key === 'Enter') {
event.preventDefault();
}
});
}
updateExclusionCount();
function resetForm() {
form.reset();
document.getElementById('ad_id_input').value = '';
document.getElementById('ad_placement_input').value = 'header';
document.getElementById('ad_is_active_input').checked = true;
document.getElementById('ad_hide_for_subscribers_input').checked = true;
document.getElementById('ad_audience_input').value = 'all';
document.getElementById('ad_consent_input').value = 'none';
syncHideForSubscribers();
setExclusions({});
if (exclusionFilter) {
exclusionFilter.value = '';
filterArticles();
}
formTitle.textContent = 'New ad';
}
function showForm() {
wrapper.style.display = '';
wrapper.scrollIntoView({
behavior: 'smooth',
block: 'nearest'
});
}
document.getElementById('ad-new-btn').addEventListener('click', function() {
resetForm();
showForm();
});
document.getElementById('ad-cancel-btn').addEventListener('click', function() {
wrapper.style.display = 'none';
resetForm();
});
document.querySelectorAll('.js-edit-ad').forEach(function(button) {
button.addEventListener('click', function() {
document.getElementById('ad_id_input').value = this.dataset.id;
document.getElementById('ad_name_input').value = this.dataset.name;
document.getElementById('ad_type_select').value = this.dataset.type;
document.getElementById('ad_placement_input').value = this.dataset.placement;
document.getElementById('ad_content_input').value = this.dataset.content;
document.getElementById('ad_link_url_input').value = this.dataset.linkUrl;
document.getElementById('ad_is_active_input').checked = this.dataset.isActive === '1';
document.getElementById('ad_hide_for_subscribers_input').checked = this.dataset.hideForSubscribers === '1';
document.getElementById('ad_audience_input').value = this.dataset.audience || 'all';
document.getElementById('ad_consent_input').value = this.dataset.consent || 'none';
syncHideForSubscribers();
var excluded = {};
try {
excluded = JSON.parse(this.dataset.excluded || '{}') || {};
} catch (error) {
excluded = {};
}
setExclusions(excluded);
formTitle.textContent = 'Edit ad';
showForm();
});
});
})();
</script>
<?php require __DIR__ . '/includes/dash-footer.php'; ?>