v1.0.0.0

StocketBase

← Changes All versions

128 lines · 5.8 KB

<?php
declare(strict_types=1);
require_once __DIR__ . '/includes/config.php';
require_once __DIR__ . '/includes/database.php';
require_once __DIR__ . '/includes/auth.php';
require_once __DIR__ . '/includes/csrf.php';
require_once __DIR__ . '/includes/activity-log.php';
Auth::boot();
Auth::requireRoleAtLeast(Auth::ROLE_STORE_OWNER);
$currentUser = Auth::user();
$currentRole = Auth::role();
$db = Database::site();
$flashMessage = null;
$flashType = 'success';
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (!Csrf::verify($_POST['csrf_token'] ?? null)) {
$flashMessage = 'Security check failed, please try again.';
$flashType = 'error';
} else {
require __DIR__ . '/dashboard-actions/manage-analytics.php';
ActivityLog::record('analytics.' . (string) ($_POST['action'] ?? ''));
$flashMessage = 'Saved.';
}
}
$editId = (int) ($_GET['edit'] ?? 0) ?: null;
$editingScript = null;
if ($editId !== null) {
$statement = $db->prepare('SELECT * FROM analytics_scripts WHERE id = :id LIMIT 1');
$statement->execute(['id' => $editId]);
$editingScript = $statement->fetch() ?: null;
}
$scripts = $db->query('SELECT * FROM analytics_scripts ORDER BY created_at DESC')->fetchAll();
$db->prepare('INSERT IGNORE INTO site_settings (setting_key, setting_value) VALUES (:key, :value)')
->execute(['key' => 'consent_footer_icon_enabled', 'value' => '0']);
$consentSetting = $db->prepare('SELECT setting_value FROM site_settings WHERE setting_key = :key LIMIT 1');
$consentSetting->execute(['key' => 'consent_manager_enabled']);
$consentEnabled = ($consentSetting->fetch()['setting_value'] ?? '0') === '1';
$consentSetting->execute(['key' => 'consent_footer_icon_enabled']);
$consentFooterIconEnabled = ($consentSetting->fetch()['setting_value'] ?? '0') === '1';
$dashActivePage = 'analytics';
$dashPageTitle = 'Analytics';
require __DIR__ . '/includes/dash-header.php';
?>
<?php if ($flashMessage !== null): ?>
<div class="dash-flash dash-flash-<?= htmlspecialchars($flashType) ?>"><?= Icons::icon($flashType === 'error' ? 'x' : 'check', 'icon icon-sm') ?><?= htmlspecialchars($flashMessage) ?></div>
<?php endif; ?>
<h1 class="dash-title"><?= Icons::icon("analytics", "icon icon-lg") ?>Analytics</h1>
<div class="sidebar-box" style="max-width:640px;margin-bottom:24px;">
<form method="post">
<?= Csrf::field() ?>
<input type="hidden" name="action" value="save_consent_settings">
<label><input type="checkbox" name="consent_manager_enabled" <?= $consentEnabled ? 'checked' : '' ?>> Enable consent manager (controls whether consent-gated scripts run before the visitor accepts)</label>
<label><input type="checkbox" name="consent_footer_icon_enabled" <?= $consentFooterIconEnabled ? 'checked' : '' ?>> Show cookie icon in footer (lets visitors reopen the consent manager)</label>
<button type="submit" class="dash-btn dash-btn-primary" style="margin-top:12px;"><?= Icons::icon('check', 'icon icon-sm') ?>Save</button>
</form>
</div>
<table class="dash-table">
<thead><tr><th><?= Icons::icon('heading', 'icon icon-sm') ?>Name</th><th><?= Icons::icon('layout', 'icon icon-sm') ?>Placement</th><th><?= Icons::icon('shield', 'icon icon-sm') ?>Requires consent</th><th><?= Icons::icon('toggle', 'icon icon-sm') ?>Active</th><th></th></tr></thead>
<tbody>
<?php foreach ($scripts as $script): ?>
<tr>
<td><?= htmlspecialchars($script['name']) ?></td>
<td><?= htmlspecialchars($script['placement']) ?></td>
<td><?= $script['requires_consent'] ? 'Yes' : 'No' ?></td>
<td><?= $script['is_active'] ? 'Yes' : 'No' ?></td>
<td class="dash-table-actions">
<a href="analytics.php?edit=<?= (int) $script['id'] ?>" class="dash-btn-small"><?= Icons::icon('edit', 'icon icon-sm') ?>Edit</a>
<form method="post" style="display:inline;" onsubmit="return confirm('Delete this script?');">
<?= Csrf::field() ?>
<input type="hidden" name="action" value="delete_analytics_script">
<input type="hidden" name="script_id" value="<?= (int) $script['id'] ?>">
<button type="submit" class="dash-btn-small dash-btn-danger"><?= Icons::icon('trash', 'icon icon-sm') ?>Delete</button>
</form>
</td>
</tr>
<?php endforeach; ?>
<?php if (empty($scripts)): ?>
<tr><td colspan="5">No analytics scripts yet.</td></tr>
<?php endif; ?>
</tbody>
</table>
<h2 class="dash-subtitle"><?= Icons::icon('plus', 'icon icon-sm') ?><?= $editingScript ? 'Edit script' : 'New script' ?></h2>
<form method="post">
<?= Csrf::field() ?>
<input type="hidden" name="action" value="save_analytics_script">
<?php if ($editingScript): ?>
<input type="hidden" name="script_id" value="<?= (int) $editingScript['id'] ?>">
<?php endif; ?>
<label>Name</label>
<input type="text" name="name" value="<?= htmlspecialchars($editingScript['name'] ?? '') ?>" required>
<label>Script code (raw HTML / <style> / <script>)</label>
<textarea name="script_code" rows="8" class="be-code"><?= htmlspecialchars($editingScript['script_code'] ?? '') ?></textarea>
<label>Placement</label>
<select name="placement">
<option value="head" <?= ($editingScript['placement'] ?? 'head') === 'head' ? 'selected' : '' ?>><head></option>
<option value="body_start" <?= ($editingScript['placement'] ?? '') === 'body_start' ? 'selected' : '' ?>>Start of <body></option>
<option value="body_end" <?= ($editingScript['placement'] ?? '') === 'body_end' ? 'selected' : '' ?>>End of <body></option>
</select>
<label><input type="checkbox" name="requires_consent" <?= ($editingScript['requires_consent'] ?? 1) ? 'checked' : '' ?>> Requires visitor consent before running</label>
<label><input type="checkbox" name="is_active" <?= ($editingScript['is_active'] ?? 1) ? 'checked' : '' ?>> Active</label>
<button type="submit" class="dash-btn dash-btn-primary" style="margin-top:16px;"><?= Icons::icon('check', 'icon icon-sm') ?>Save script</button>
</form>
<?php require __DIR__ . '/includes/dash-footer.php'; ?>