+
+
+
+
+
+
+
+
+
+
diff --git a/download_map.php b/download_map.php
new file mode 100644
index 0000000..8fcc400
--- /dev/null
+++ b/download_map.php
@@ -0,0 +1,56 @@
+
diff --git a/export_pdf.php b/export_pdf.php
new file mode 100644
index 0000000..f56d3d9
--- /dev/null
+++ b/export_pdf.php
@@ -0,0 +1,277 @@
+getMessage()));
+}
+
+function generateMapForPDF($mapId, $basemaps, $layers, $centerLon, $centerLat, $zoom, $width, $height) {
+ $config = getGeoServerConfig();
+ $proxyUrl = 'geoserver_proxy.php?map_id='$mapId;
+
+ ob_start();
+ ?>
+
+
+
+
+
+
+
+
+
+
+
+
+
+ SetCreator('GeoLite');
+ $pdf->SetAuthor('GeoLite System');
+ $pdf->SetTitle('Map Export: ' . $map['title']);
+ $pdf->SetSubject('Map Export');
+
+ // Set margins
+ $pdf->SetMargins(15, 15, 15);
+ $pdf->SetAutoPageBreak(TRUE, 15);
+
+ // Add a page
+ $pdf->AddPage();
+
+ // Set font
+ $pdf->SetFont('helvetica', 'B', 16);
+ $pdf->Cell(0, 10, 'Map Export: ' . $map['title'], 0, 1, 'C');
+
+ $pdf->SetFont('helvetica', '', 12);
+ $pdf->Ln(5);
+
+ // Map information
+ $pdf->Cell(0, 8, 'Map Information:', 0, 1, 'L');
+ $pdf->SetFont('helvetica', '', 10);
+ $pdf->Cell(0, 6, 'Center: ' . $centerLon . ', ' . $centerLat, 0, 1, 'L');
+ $pdf->Cell(0, 6, 'Zoom Level: ' . $zoom, 0, 1, 'L');
+ $pdf->Cell(0, 6, 'Export Date: ' . date('Y-m-d H:i:s'), 0, 1, 'L');
+
+ $pdf->Ln(5);
+ $pdf->SetFont('helvetica', '', 12);
+ $pdf->Cell(0, 8, 'Layers:', 0, 1, 'L');
+ $pdf->SetFont('helvetica', '', 10);
+
+ foreach ($layers as $layer) {
+ $layerName = explode(':', $layer)[1] ?? $layer;
+ $pdf->Cell(0, 6, '• ' . $layerName, 0, 1, 'L');
+ }
+
+ $pdf->Ln(10);
+ $pdf->SetFont('helvetica', '', 10);
+ $pdf->Cell(0, 6, 'Note: This is a text-based export. For visual map export,', 0, 1, 'C');
+ $pdf->Cell(0, 6, 'please use the browser\'s print function or take a screenshot.', 0, 1, 'C');
+
+ // Output PDF
+ $pdf->Output('map_export.pdf', 'D');
+}
+
+// Check if TCPDF is available, if not, create a simple HTML response
+if (!class_exists('TCPDF')) {
+ // Fallback: create a simple HTML page that can be printed
+ ob_start();
+ ?>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ + + +
+ +My Documents
+ + +
+
+
+
+ No Documents Yet
+Upload your first document to get started
+
+
+
+
+
+
+
+
+
+
+
+ +
+
+
+
+
+
+
+ No description provided
+
+
+
+
+
+ Download
+
+
+ Edit
+
+
+
+
+
+
+
+ Map Export -
+
+
+
+ Map Information
+Center: ,
+Zoom Level:
+Export Date:
+
+
+
+ Layers
+-
+
+
+
+
+
+
+
+
+
diff --git a/geoserver_proxy.php b/geoserver_proxy.php
new file mode 100644
index 0000000..0962004
--- /dev/null
+++ b/geoserver_proxy.php
@@ -0,0 +1,167 @@
+ $value) {
+ $lowerName = strtolower($name);
+ // Skip headers that shouldn't be forwarded
+ if (!in_array($lowerName, ['host', 'connection', 'authorization', 'cookie', 'referer', 'origin'])) {
+ $headersToForward[] = "$name: $value";
+ }
+}
+
+// Add Accept header if not present
+if (!isset($headersToForward['Accept'])) {
+ $headersToForward[] = 'Accept: */*';
+}
+
+curl_setopt($ch, CURLOPT_HTTPHEADER, $headersToForward);
+
+// Get response headers
+$responseHeaders = [];
+curl_setopt($ch, CURLOPT_HEADERFUNCTION, function($curl, $header) use (&$responseHeaders) {
+ $len = strlen($header);
+ $header = explode(':', $header, 2);
+ if (count($header) < 2) {
+ return $len;
+ }
+
+ $name = strtolower(trim($header[0]));
+ $value = trim($header[1]);
+
+ // Skip headers that shouldn't be forwarded to client
+ if (!in_array($name, ['transfer-encoding', 'connection'])) {
+ $responseHeaders[$name] = $value;
+ }
+
+ return $len;
+});
+
+// Execute request
+$response = curl_exec($ch);
+
+// Check for errors
+if (curl_errno($ch)) {
+ http_response_code(500);
+ header('Content-Type: application/json');
+ echo json_encode([
+ 'error' => 'Proxy error: ' . curl_error($ch),
+ 'url' => $geoserverUrl
+ ]);
+ curl_close($ch);
+ exit;
+}
+
+// Get response info
+$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+$contentType = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
+
+curl_close($ch);
+
+// Set response code
+http_response_code($httpCode);
+
+// Forward response headers
+foreach ($responseHeaders as $name => $value) {
+ header("$name: $value");
+}
+
+// Ensure Content-Type is set
+if (!isset($responseHeaders['content-type']) && $contentType) {
+ header("Content-Type: $contentType");
+}
+
+// Add CORS headers for same-origin requests (optional but helpful)
+header("Access-Control-Allow-Origin: " . ($_SERVER['HTTP_ORIGIN'] ?? '*'));
+header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
+header("Access-Control-Allow-Headers: Content-Type");
+header("Access-Control-Allow-Credentials: true");
+
+// Output response
+echo $response;
diff --git a/html_pages.php b/html_pages.php
new file mode 100644
index 0000000..5ae0751
--- /dev/null
+++ b/html_pages.php
@@ -0,0 +1,506 @@
+
+
+
+
+
+
+ Note: This is a text-based export. Use your browser's print function (Ctrl+P) to create a PDF.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/incl/.htaccess b/incl/.htaccess
new file mode 100644
index 0000000..439ece3
--- /dev/null
+++ b/incl/.htaccess
@@ -0,0 +1,6 @@
+# Deny direct access to files in the incl directory
+# This prevents users from accessing configuration files directly via browser
+
+Order Deny,Allow
+Deny from all
+
diff --git a/incl/Auth.php b/incl/Auth.php
new file mode 100644
index 0000000..d0b003a
--- /dev/null
+++ b/incl/Auth.php
@@ -0,0 +1,258 @@
+getMessage());
+ }
+
+ return false;
+}
+
+/**
+ * Logout the current user
+ */
+function logout() {
+ ensureSession();
+ $_SESSION = array();
+
+ // Destroy session cookie
+ if (isset($_COOKIE[session_name()])) {
+ setcookie(session_name(), '', time() - 3600, '/');
+ }
+
+ session_destroy();
+}
+
+/**
+ * Require authentication - redirect to login if not authenticated
+ * @param string $loginPage Path to login page (default: login.php)
+ */
+function requireAuth($loginPage = 'login.php') {
+ if (!isLoggedIn()) {
+ header('Location: ' . $loginPage);
+ exit;
+ }
+}
+
+/**
+ * Get current username
+ * @return string|null Username if logged in, null otherwise
+ */
+function getCurrentUsername() {
+ ensureSession();
+ return isset($_SESSION['username']) ? $_SESSION['username'] : null;
+}
+
+/**
+ * Get current fullname
+ * @return string|null Username if logged in, null otherwise
+ */
+function getCurrentFullname() {
+ ensureSession();
+ return isset($_SESSION['full_name']) ? $_SESSION['full_name'] : null;
+}
+
+
+/**
+ * Get current user ID
+ * @return int|null User ID if logged in, null otherwise
+ */
+function getCurrentUserId() {
+ ensureSession();
+ return isset($_SESSION['user_id']) ? $_SESSION['user_id'] : null;
+}
+
+/**
+ * Get current user's group ID
+ * @return int|null Group ID if logged in, null otherwise
+ */
+function getCurrentUserGroupId() {
+ ensureSession();
+ return isset($_SESSION['group_id']) ? $_SESSION['group_id'] : null;
+}
+
+/**
+ * Get current user's group name
+ * @return string|null Group name if logged in, null otherwise
+ */
+function getCurrentUserGroupName() {
+ ensureSession();
+ return isset($_SESSION['group_name']) ? $_SESSION['group_name'] : null;
+}
+
+/**
+ * Check if current user is admin
+ * @return bool True if user is in Admin group
+ */
+function isAdmin() {
+ ensureSession();
+ return isset($_SESSION['group_name']) && $_SESSION['group_name'] === 'Admin';
+}
+
+/**
+ * Require admin privileges - redirect or show error
+ * @param string $redirectPage Page to redirect to if not admin (default: index.php)
+ */
+function requireAdmin($redirectPage = 'index.php') {
+ if (!isLoggedIn()) {
+ header('Location: login.php');
+ exit;
+ }
+
+ if (!isAdmin()) {
+ header('Location: ' . $redirectPage . '?error=access_denied');
+ exit;
+ }
+}
+
+/**
+ * Check if user has permission to view an item
+ * @param string $itemType Type of item (map, dashboard, document, html_page)
+ * @param int $itemId ID of the item
+ * @return bool True if user has permission
+ */
+function canView($itemType, $itemId) {
+ if (!isLoggedIn()) {
+ return checkPermission(1, $itemType, $itemId, 'can_view');
+ }
+
+ // Admins can view everything
+ if (isAdmin()) {
+ return true;
+ }
+
+ $groupId = getCurrentUserGroupId();
+ if (!$groupId) {
+ return false;
+ }
+
+ try {
+ return checkPermission($groupId, $itemType, $itemId, 'can_view') ||
+ checkPermission(1, $itemType, $itemId, 'can_view');
+ } catch (Exception $e) {
+ error_log("Permission check error: " . $e->getMessage());
+ return false;
+ }
+}
+
+/**
+ * Check if user has permission to edit an item
+ * @param string $itemType Type of item (map, dashboard, document, html_page)
+ * @param int $itemId ID of the item
+ * @return bool True if user has permission
+ */
+function canEdit($itemType, $itemId) {
+ if (!isLoggedIn()) {
+ return false;
+ }
+
+ // Admins can edit everything
+ if (isAdmin()) {
+ return true;
+ }
+
+ $groupId = getCurrentUserGroupId();
+ if (!$groupId) {
+ return false;
+ }
+
+ try {
+ return checkPermission($groupId, $itemType, $itemId, 'can_edit');
+ } catch (Exception $e) {
+ error_log("Permission check error: " . $e->getMessage());
+ return false;
+ }
+}
+
+/**
+ * Check if user has permission to delete an item
+ * @param string $itemType Type of item (map, dashboard, document, html_page)
+ * @param int $itemId ID of the item
+ * @return bool True if user has permission
+ */
+function canDelete($itemType, $itemId) {
+ if (!isLoggedIn()) {
+ return false;
+ }
+
+ // Admins can delete everything
+ if (isAdmin()) {
+ return true;
+ }
+
+ $groupId = getCurrentUserGroupId();
+ if (!$groupId) {
+ return false;
+ }
+
+ try {
+ return checkPermission($groupId, $itemType, $itemId, 'can_delete');
+ } catch (Exception $e) {
+ error_log("Permission check error: " . $e->getMessage());
+ return false;
+ }
+}
+
+/**
+ * Get all items that the current user has permission to view
+ * @param string $itemType Type of item
+ * @param array $allItems Array of all items
+ * @return array Filtered array of items user can view
+ */
+function filterItemsByPermission($itemType, $allItems) {
+ // Admins can see everything
+ if (isAdmin()) {
+ return $allItems;
+ }
+
+ // Filter items based on permissions
+ return array_filter($allItems, function($item) use ($itemType) {
+ return canView($itemType, $item['id']);
+ });
+}
diff --git a/incl/Config.php b/incl/Config.php
new file mode 100644
index 0000000..67b58bd
--- /dev/null
+++ b/incl/Config.php
@@ -0,0 +1,68 @@
+ [
+ 'header' => "Authorization: Basic " . base64_encode($config['geoserver_username'] . ":" . $config['geoserver_password'])
+ ]
+ ]);
+
+ try {
+ $response = file_get_contents($url, false, $context);
+ if ($response === false) {
+ throw new Exception("Failed to fetch layers from GeoServer");
+ }
+
+ $data = json_decode($response, true);
+ $layers = [];
+
+ if (isset($data['layers']['layer'])) {
+ foreach ($data['layers']['layer'] as $layer) {
+ if (isset($layer['name'])) {
+ // Split the layer name into workspace and layer name
+ $parts = explode(':', $layer['name']);
+ if (count($parts) === 2) {
+ $layers[] = [
+ 'id' => $layer['name'],
+ 'workspace' => $parts[0],
+ 'name' => $parts[1],
+ 'title' => isset($layer['title']) ? $layer['title'] : $parts[1]
+ ];
+ }
+ }
+ }
+ }
+
+ return $layers;
+ } catch (Exception $e) {
+ error_log("Error fetching GeoServer layers: " . $e->getMessage());
+ return [];
+ }
+}
+
+/**
+ * Get GeoServer configuration
+ * @return array The GeoServer configuration array
+ */
+function getGeoServerConfig() {
+ $pdo = getDbConnection();
+ $config = $pdo->query("SELECT * FROM public.geoserver_config WHERE id=1")->fetch(PDO::FETCH_ASSOC);
+ return $config;
+}
+
+function saveGeoServerConfig($url, $username, $password) {
+ $pdo = getDbConnection();
+
+ $config = getGeoServerConfig();
+
+ $password = empty($password) ? $config['geoserver_password'] : $password;
+
+ $stmt = $pdo->prepare("UPDATE public.geoserver_config SET geoserver_url = ?, geoserver_username = ?, geoserver_password = ? WHERE id=1");
+ $stmt->execute([$url, $username, $password ]);
+}
diff --git a/incl/Database.php b/incl/Database.php
new file mode 100644
index 0000000..fd94f53
--- /dev/null
+++ b/incl/Database.php
@@ -0,0 +1,1081 @@
+setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+ $pdo->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
+ // Convert PostgreSQL booleans to PHP booleans
+ $pdo->setAttribute(PDO::ATTR_STRINGIFY_FETCHES, false);
+ $pdo->setAttribute(PDO::ATTR_EMULATE_PREPARES, false);
+ return $pdo;
+ } catch (PDOException $e) {
+ error_log("Database connection error: " . $e->getMessage());
+ throw new Exception("Database connection failed");
+ }
+}
+
+/**
+ * Save a map to the database
+ * @param string $title Map title
+ * @param string $description Map description
+ * @param string $html_content The generated HTML content
+ * @param array $basemaps Selected basemaps
+ * @param array $layers Selected layers
+ * @param array $features Selected features
+ * @param array $initialExtent Initial extent settings
+ * @param int|null $categoryId Category ID (optional)
+ * @return int The ID of the saved map
+ */
+function saveMap($title, $description, $html_content, $basemaps, $layers, $features, $initialExtent, $categoryId = null, $filters = null) {
+ $pdo = getDbConnection();
+
+ $sql = "INSERT INTO maps (title, description, html_content, basemaps, layers, features, initial_extent, filters, category_id, created_at, updated_at)
+ VALUES (:title, :description, :html_content, :basemaps, :layers, :features, :initial_extent, :filters, :category_id, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ RETURNING id";
+
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute([
+ 'title' => $title,
+ 'description' => $description,
+ 'html_content' => $html_content,
+ 'basemaps' => json_encode($basemaps),
+ 'layers' => json_encode($layers),
+ 'features' => json_encode($features),
+ 'initial_extent' => json_encode($initialExtent),
+ 'filters' => json_encode($filters ?? []),
+ 'category_id' => $categoryId
+ ]);
+
+ $result = $stmt->fetch();
+ return $result['id'];
+}
+
+/**
+ * Get all maps from the database
+ * @return array Array of maps with category information
+ */
+function getAllMaps() {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT m.id, m.title, m.description, m.thumbnail, m.created_at, m.updated_at,
+ c.id as category_id, c.name as category_name, c.color as category_color, c.icon as category_icon
+ FROM maps m
+ LEFT JOIN categories c ON m.category_id = c.id
+ ORDER BY m.created_at DESC";
+ $stmt = $pdo->query($sql);
+
+ return $stmt->fetchAll();
+}
+
+/**
+ * Get a single map by ID
+ * @param int $id Map ID
+ * @return array|null Map data or null if not found
+ */
+function getMapById($id) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT * FROM maps WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute(['id' => $id]);
+
+ return $stmt->fetch();
+}
+
+/**
+ * Delete a map by ID
+ * @param int $id Map ID
+ * @return bool Success status
+ */
+function deleteMap($id) {
+ $pdo = getDbConnection();
+
+ $sql = "DELETE FROM maps WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute(['id' => $id]);
+}
+
+/**
+ * Update a map
+ * @param int $id Map ID
+ * @param string $title Map title
+ * @param string $description Map description
+ * @param string $html_content The generated HTML content
+ * @param array $basemaps Selected basemaps
+ * @param array $layers Selected layers
+ * @param array $features Selected features
+ * @param array $initialExtent Initial extent settings
+ * @param int|null $categoryId Category ID (optional)
+ * @return bool Success status
+ */
+function updateMap($id, $title, $description, $html_content, $basemaps, $layers, $features, $initialExtent, $categoryId = null, $filters = null) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE maps SET
+ title = :title,
+ description = :description,
+ html_content = :html_content,
+ basemaps = :basemaps,
+ layers = :layers,
+ features = :features,
+ initial_extent = :initial_extent,
+ filters = :filters,
+ category_id = :category_id,
+ updated_at = CURRENT_TIMESTAMP
+ WHERE id = :id";
+
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'id' => $id,
+ 'title' => $title,
+ 'description' => $description,
+ 'html_content' => $html_content,
+ 'basemaps' => json_encode($basemaps),
+ 'layers' => json_encode($layers),
+ 'features' => json_encode($features),
+ 'initial_extent' => json_encode($initialExtent),
+ 'filters' => json_encode($filters ?? []),
+ 'category_id' => $categoryId
+ ]);
+}
+
+/* ==================== DASHBOARD FUNCTIONS ==================== */
+
+/**
+ * Save a dashboard to the database
+ * @param string $title Dashboard title
+ * @param string $description Dashboard description
+ * @param array $config Dashboard configuration (widgets, layout, etc.)
+ * @param int|null $categoryId Category ID (optional)
+ * @return int The ID of the saved dashboard
+ */
+function saveDashboard($title, $description, $config, $categoryId = null) {
+ $pdo = getDbConnection();
+
+ $sql = "INSERT INTO dashboards (title, description, config, category_id, created_at, updated_at)
+ VALUES (:title, :description, :config, :category_id, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ RETURNING id";
+
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute([
+ 'title' => $title,
+ 'description' => $description,
+ 'config' => json_encode($config),
+ 'category_id' => $categoryId
+ ]);
+
+ $result = $stmt->fetch();
+ return $result['id'];
+}
+
+/**
+ * Get all dashboards from the database
+ * @return array Array of dashboards with category information
+ */
+function getAllDashboards() {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT d.id, d.title, d.description, d.thumbnail, d.created_at, d.updated_at,
+ c.id as category_id, c.name as category_name, c.color as category_color, c.icon as category_icon
+ FROM dashboards d
+ LEFT JOIN categories c ON d.category_id = c.id
+ ORDER BY d.created_at DESC";
+ $stmt = $pdo->query($sql);
+
+ return $stmt->fetchAll();
+}
+
+/**
+ * Get a single dashboard by ID
+ * @param int $id Dashboard ID
+ * @return array|null Dashboard data or null if not found
+ */
+function getDashboardById($id) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT * FROM dashboards WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute(['id' => $id]);
+
+ return $stmt->fetch();
+}
+
+/**
+ * Delete a dashboard by ID
+ * @param int $id Dashboard ID
+ * @return bool Success status
+ */
+function deleteDashboard($id) {
+ $pdo = getDbConnection();
+
+ $sql = "DELETE FROM dashboards WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute(['id' => $id]);
+}
+
+/**
+ * Update a dashboard
+ * @param int $id Dashboard ID
+ * @param string $title Dashboard title
+ * @param string $description Dashboard description
+ * @param array $config Dashboard configuration
+ * @param int|null $categoryId Category ID (optional)
+ * @return bool Success status
+ */
+function updateDashboard($id, $title, $description, $config, $categoryId = null) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE dashboards SET
+ title = :title,
+ description = :description,
+ config = :config,
+ category_id = :category_id,
+ updated_at = CURRENT_TIMESTAMP
+ WHERE id = :id";
+
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'id' => $id,
+ 'title' => $title,
+ 'description' => $description,
+ 'config' => json_encode($config),
+ 'category_id' => $categoryId
+ ]);
+}
+
+/* ==================== DOCUMENTS FUNCTIONS ==================== */
+
+/**
+ * Save a document to the database
+ * @param string $title Document title
+ * @param string $description Document description
+ * @param string $filename Unique filename
+ * @param string $originalFilename Original filename
+ * @param string $filePath Path to the uploaded file
+ * @param int $fileSize File size in bytes
+ * @param string $mimeType File MIME type
+ * @param int|null $categoryId Category ID (optional)
+ * @return int The ID of the saved document
+ */
+function saveDocument($title, $description, $filename, $originalFilename, $filePath, $fileSize, $mimeType, $categoryId = null) {
+ $pdo = getDbConnection();
+
+ $sql = "INSERT INTO documents (title, description, filename, original_filename, file_size, mime_type, category_id, created_at, updated_at)
+ VALUES (:title, :description, :filename, :original_filename, :file_size, :mime_type, :category_id, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ RETURNING id";
+
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute([
+ 'title' => $title,
+ 'description' => $description,
+ 'filename' => $filename,
+ 'original_filename' => $originalFilename,
+ 'file_size' => $fileSize,
+ 'mime_type' => $mimeType,
+ 'category_id' => $categoryId
+ ]);
+
+ $result = $stmt->fetch();
+ return $result['id'];
+}
+
+/**
+ * Get all documents from the database
+ * @return array Array of documents with category information
+ */
+function getAllDocuments() {
+ try {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT d.id, d.title, d.description, d.thumbnail, d.original_filename, d.file_size, d.mime_type, d.created_at, d.updated_at,
+ c.id as category_id, c.name as category_name, c.color as category_color, c.icon as category_icon
+ FROM documents d
+ LEFT JOIN categories c ON d.category_id = c.id
+ ORDER BY d.created_at DESC";
+ $stmt = $pdo->query($sql);
+
+ return $stmt->fetchAll();
+ } catch (PDOException $e) {
+ // Table might not exist yet
+ return [];
+ }
+}
+
+/**
+ * Get a single document by ID
+ * @param int $id Document ID
+ * @return array|null Document data or null if not found
+ */
+function getDocumentById($id) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT * FROM documents WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute(['id' => $id]);
+
+ return $stmt->fetch();
+}
+
+/**
+ * Delete a document by ID
+ * @param int $id Document ID
+ * @return bool Success status
+ */
+function deleteDocument($id) {
+ $pdo = getDbConnection();
+
+ $sql = "DELETE FROM documents WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute(['id' => $id]);
+}
+
+/**
+ * Update a document
+ * @param int $id Document ID
+ * @param string $title Document title
+ * @param string $description Document description
+ * @param int|null $categoryId Category ID (optional)
+ * @return bool Success status
+ */
+function updateDocument($id, $title, $description, $categoryId = null) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE documents SET
+ title = :title,
+ description = :description,
+ category_id = :category_id,
+ updated_at = CURRENT_TIMESTAMP
+ WHERE id = :id";
+
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'id' => $id,
+ 'title' => $title,
+ 'description' => $description,
+ 'category_id' => $categoryId
+ ]);
+}
+
+/* ==================== HTML PAGES FUNCTIONS ==================== */
+
+/**
+ * Save an HTML page to the database
+ * @param string $title Page title
+ * @param string $description Page description
+ * @param string $htmlContent HTML content
+ * @param int|null $categoryId Category ID (optional)
+ * @return int The ID of the saved HTML page
+ */
+function saveHtmlPage($title, $description, $htmlContent, $categoryId = null) {
+ $pdo = getDbConnection();
+
+ $sql = "INSERT INTO html_pages (title, description, html_content, category_id, created_at, updated_at)
+ VALUES (:title, :description, :html_content, :category_id, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ RETURNING id";
+
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute([
+ 'title' => $title,
+ 'description' => $description,
+ 'html_content' => $htmlContent,
+ 'category_id' => $categoryId
+ ]);
+
+ $result = $stmt->fetch();
+ return $result['id'];
+}
+
+/**
+ * Get all HTML pages from the database
+ * @return array Array of HTML pages with category information
+ */
+function getAllHtmlPages() {
+ try {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT h.id, h.title, h.description, h.thumbnail, h.created_at, h.updated_at,
+ c.id as category_id, c.name as category_name, c.color as category_color, c.icon as category_icon
+ FROM html_pages h
+ LEFT JOIN categories c ON h.category_id = c.id
+ ORDER BY h.created_at DESC";
+ $stmt = $pdo->query($sql);
+
+ return $stmt->fetchAll();
+ } catch (PDOException $e) {
+ // Table might not exist yet
+ return [];
+ }
+}
+
+/**
+ * Get a single HTML page by ID
+ * @param int $id HTML page ID
+ * @return array|null HTML page data or null if not found
+ */
+function getHtmlPageById($id) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT * FROM html_pages WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute(['id' => $id]);
+
+ return $stmt->fetch();
+}
+
+/**
+ * Delete an HTML page by ID
+ * @param int $id HTML page ID
+ * @return bool Success status
+ */
+function deleteHtmlPage($id) {
+ $pdo = getDbConnection();
+
+ $sql = "DELETE FROM html_pages WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute(['id' => $id]);
+}
+
+/**
+ * Update an HTML page
+ * @param int $id HTML page ID
+ * @param string $title Page title
+ * @param string $description Page description
+ * @param string $htmlContent HTML content
+ * @param int|null $categoryId Category ID (optional)
+ * @return bool Success status
+ */
+function updateHtmlPage($id, $title, $description, $htmlContent, $categoryId = null) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE html_pages SET
+ title = :title,
+ description = :description,
+ html_content = :html_content,
+ category_id = :category_id,
+ updated_at = CURRENT_TIMESTAMP
+ WHERE id = :id";
+
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'id' => $id,
+ 'title' => $title,
+ 'description' => $description,
+ 'html_content' => $htmlContent,
+ 'category_id' => $categoryId
+ ]);
+}
+
+/* ==================== THUMBNAIL FUNCTIONS ==================== */
+
+/**
+ * Update thumbnail for a map
+ * @param int $id Map ID
+ * @param string $thumbnailPath Path to thumbnail image
+ * @return bool Success status
+ */
+function updateMapThumbnail($id, $thumbnailPath) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE maps SET thumbnail = :thumbnail, updated_at = CURRENT_TIMESTAMP WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'id' => $id,
+ 'thumbnail' => $thumbnailPath
+ ]);
+}
+
+/**
+ * Update thumbnail for a dashboard
+ * @param int $id Dashboard ID
+ * @param string $thumbnailPath Path to thumbnail image
+ * @return bool Success status
+ */
+function updateDashboardThumbnail($id, $thumbnailPath) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE dashboards SET thumbnail = :thumbnail, updated_at = CURRENT_TIMESTAMP WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'id' => $id,
+ 'thumbnail' => $thumbnailPath
+ ]);
+}
+
+/**
+ * Update thumbnail for a document
+ * @param int $id Document ID
+ * @param string $thumbnailPath Path to thumbnail image
+ * @return bool Success status
+ */
+function updateDocumentThumbnail($id, $thumbnailPath) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE documents SET thumbnail = :thumbnail, updated_at = CURRENT_TIMESTAMP WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'id' => $id,
+ 'thumbnail' => $thumbnailPath
+ ]);
+}
+
+/**
+ * Update thumbnail for an HTML page
+ * @param int $id HTML page ID
+ * @param string $thumbnailPath Path to thumbnail image
+ * @return bool Success status
+ */
+function updateHtmlPageThumbnail($id, $thumbnailPath) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE html_pages SET thumbnail = :thumbnail, updated_at = CURRENT_TIMESTAMP WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'id' => $id,
+ 'thumbnail' => $thumbnailPath
+ ]);
+}
+
+/* ==================== USER MANAGEMENT FUNCTIONS ==================== */
+
+/**
+ * Get user by username
+ * @param string $username Username
+ * @return array|null User data with group info or null if not found
+ */
+function getUserByUsername($username) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT u.*, g.name as group_name
+ FROM users u
+ LEFT JOIN groups g ON u.group_id = g.id
+ WHERE u.username = :username";
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute(['username' => $username]);
+
+ return $stmt->fetch();
+}
+
+/**
+ * Get user by ID
+ * @param int $id User ID
+ * @return array|null User data with group info or null if not found
+ */
+function getUserById($id) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT u.*, g.name as group_name
+ FROM users u
+ LEFT JOIN groups g ON u.group_id = g.id
+ WHERE u.id = :id";
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute(['id' => $id]);
+
+ return $stmt->fetch();
+}
+
+/**
+ * Get all users
+ * @return array Array of users with group info
+ */
+function getAllUsers() {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT u.*, g.name as group_name
+ FROM users u
+ LEFT JOIN groups g ON u.group_id = g.id
+ ORDER BY u.username";
+ $stmt = $pdo->query($sql);
+
+ return $stmt->fetchAll();
+}
+
+/**
+ * Create a new user
+ * @param string $username Username
+ * @param string $password Plain text password (will be hashed)
+ * @param string $fullName Full name
+ * @param string $email Email address
+ * @param int $groupId Group ID
+ * @param bool $isActive Whether user is active
+ * @return int New user ID
+ */
+function createUser($username, $password, $fullName, $email, $groupId, $isActive = true) {
+ $pdo = getDbConnection();
+
+ $passwordHash = password_hash($password, PASSWORD_DEFAULT);
+
+ $sql = "INSERT INTO users (username, password_hash, full_name, email, group_id, is_active, created_at, updated_at)
+ VALUES (:username, :password_hash, :full_name, :email, :group_id, :is_active, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ RETURNING id";
+
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute([
+ 'username' => $username,
+ 'password_hash' => $passwordHash,
+ 'full_name' => $fullName,
+ 'email' => $email,
+ 'group_id' => $groupId,
+ 'is_active' => $isActive
+ ]);
+
+ $result = $stmt->fetch();
+ return $result['id'];
+}
+
+/**
+ * Update a user
+ * @param int $id User ID
+ * @param string $username Username
+ * @param string $fullName Full name
+ * @param string $email Email address
+ * @param int $groupId Group ID
+ * @param bool $isActive Whether user is active
+ * @param string|null $password New password (optional, only if changing)
+ * @return bool Success status
+ */
+function updateUser($id, $username, $fullName, $email, $groupId, $isActive, $password = null) {
+ $pdo = getDbConnection();
+
+ if ($password !== null && $password !== '') {
+ $passwordHash = password_hash($password, PASSWORD_DEFAULT);
+ $sql = "UPDATE users SET
+ username = :username,
+ password_hash = :password_hash,
+ full_name = :full_name,
+ email = :email,
+ group_id = :group_id,
+ is_active = :is_active,
+ updated_at = CURRENT_TIMESTAMP
+ WHERE id = :id";
+
+ return $pdo->prepare($sql)->execute([
+ 'id' => $id,
+ 'username' => $username,
+ 'password_hash' => $passwordHash,
+ 'full_name' => $fullName,
+ 'email' => $email,
+ 'group_id' => $groupId,
+ 'is_active' => $isActive
+ ]);
+ } else {
+ $sql = "UPDATE users SET
+ username = :username,
+ full_name = :full_name,
+ email = :email,
+ group_id = :group_id,
+ is_active = :is_active,
+ updated_at = CURRENT_TIMESTAMP
+ WHERE id = :id";
+
+ return $pdo->prepare($sql)->execute([
+ 'id' => $id,
+ 'username' => $username,
+ 'full_name' => $fullName,
+ 'email' => $email,
+ 'group_id' => $groupId,
+ 'is_active' => $isActive
+ ]);
+ }
+}
+
+/**
+ * Delete a user
+ * @param int $id User ID
+ * @return bool Success status
+ */
+function deleteUser($id) {
+ $pdo = getDbConnection();
+
+ $sql = "DELETE FROM users WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute(['id' => $id]);
+}
+
+/**
+ * Update user's last login time
+ * @param int $userId User ID
+ * @return bool Success status
+ */
+function updateUserLastLogin($userId) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE users SET last_login = CURRENT_TIMESTAMP WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute(['id' => $userId]);
+}
+
+/* ==================== GROUP MANAGEMENT FUNCTIONS ==================== */
+
+/**
+ * Get all groups
+ * @return array Array of groups
+ */
+function getAllGroups() {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT * FROM groups ORDER BY name";
+ $stmt = $pdo->query($sql);
+
+ return $stmt->fetchAll();
+}
+
+/**
+ * Get group by ID
+ * @param int $id Group ID
+ * @return array|null Group data or null if not found
+ */
+function getGroupById($id) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT * FROM groups WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute(['id' => $id]);
+
+ return $stmt->fetch();
+}
+
+/**
+ * Create a new group
+ * @param string $name Group name
+ * @param string $description Group description
+ * @return int New group ID
+ */
+function createGroup($name, $description) {
+ $pdo = getDbConnection();
+
+ $sql = "INSERT INTO groups (name, description, created_at)
+ VALUES (:name, :description, CURRENT_TIMESTAMP)
+ RETURNING id";
+
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute([
+ 'name' => $name,
+ 'description' => $description
+ ]);
+
+ $result = $stmt->fetch();
+ return $result['id'];
+}
+
+/**
+ * Update a group
+ * @param int $id Group ID
+ * @param string $name Group name
+ * @param string $description Group description
+ * @return bool Success status
+ */
+function updateGroup($id, $name, $description) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE groups SET
+ name = :name,
+ description = :description
+ WHERE id = :id";
+
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'id' => $id,
+ 'name' => $name,
+ 'description' => $description
+ ]);
+}
+
+/**
+ * Delete a group
+ * @param int $id Group ID
+ * @return bool Success status
+ */
+function deleteGroup($id) {
+ $pdo = getDbConnection();
+
+ // Note: This will fail if users are assigned to this group due to foreign key constraint
+ // That's intentional - you should reassign users first
+ $sql = "DELETE FROM groups WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute(['id' => $id]);
+}
+
+/**
+ * Get count of users in a group
+ * @param int $groupId Group ID
+ * @return int Number of users in group
+ */
+function getGroupUserCount($groupId) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT COUNT(*) as count FROM users WHERE group_id = :group_id";
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute(['group_id' => $groupId]);
+
+ $result = $stmt->fetch();
+ return $result['count'];
+}
+
+/* ==================== CATEGORIES FUNCTIONS ==================== */
+
+/**
+ * Get categories for dropdown selection
+ * @return array Array of categories formatted for dropdowns
+ */
+function getCategoriesForDropdown() {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT id, name FROM categories ORDER BY name";
+ $stmt = $pdo->query($sql);
+
+ return $stmt->fetchAll();
+}
+
+/**
+ * Get all categories
+ * @return array Array of categories
+ */
+function getAllCategories() {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT * FROM categories ORDER BY name";
+ $stmt = $pdo->query($sql);
+
+ return $stmt->fetchAll();
+}
+
+/**
+ * Get a single category by ID
+ * @param int $id Category ID
+ * @return array|null Category data or null if not found
+ */
+function getCategoryById($id) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT * FROM categories WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute(['id' => $id]);
+
+ return $stmt->fetch();
+}
+
+/**
+ * Create a new category
+ * @param string $name Category name
+ * @param string $description Category description
+ * @param string $color Hex color code
+ * @param string $icon Bootstrap icon class
+ * @return int New category ID
+ */
+function createCategory($name, $description, $color = '#667eea', $icon = 'bi-tag') {
+ $pdo = getDbConnection();
+
+ $sql = "INSERT INTO categories (name, description, color, icon, created_at, updated_at)
+ VALUES (:name, :description, :color, :icon, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ RETURNING id";
+
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute([
+ 'name' => $name,
+ 'description' => $description,
+ 'color' => $color,
+ 'icon' => $icon
+ ]);
+
+ $result = $stmt->fetch();
+ return $result['id'];
+}
+
+/**
+ * Update a category
+ * @param int $id Category ID
+ * @param string $name Category name
+ * @param string $description Category description
+ * @param string $color Hex color code
+ * @param string $icon Bootstrap icon class
+ * @return bool Success status
+ */
+function updateCategory($id, $name, $description, $color, $icon) {
+ $pdo = getDbConnection();
+
+ $sql = "UPDATE categories SET
+ name = :name,
+ description = :description,
+ color = :color,
+ icon = :icon,
+ updated_at = CURRENT_TIMESTAMP
+ WHERE id = :id";
+
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'id' => $id,
+ 'name' => $name,
+ 'description' => $description,
+ 'color' => $color,
+ 'icon' => $icon
+ ]);
+}
+
+/**
+ * Delete a category
+ * @param int $id Category ID
+ * @return bool Success status
+ */
+function deleteCategory($id) {
+ $pdo = getDbConnection();
+
+ $sql = "DELETE FROM categories WHERE id = :id";
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute(['id' => $id]);
+}
+
+/* ==================== PERMISSION MANAGEMENT FUNCTIONS ==================== */
+
+/**
+ * Check if a group has a specific permission on an item
+ * @param int $groupId Group ID
+ * @param string $itemType Type of item (map, dashboard, document, html_page)
+ * @param int $itemId ID of the item
+ * @param string $permissionType Permission type (can_view, can_edit, can_delete)
+ * @return bool True if group has permission
+ */
+function checkPermission($groupId, $itemType, $itemId, $permissionType) {
+ $pdo = getDbConnection();
+
+ // Check for specific item permission first
+ $sql = "SELECT $permissionType FROM permissions
+ WHERE group_id = :group_id
+ AND item_type = :item_type
+ AND (item_id = :item_id OR item_id IS NULL)
+ ORDER BY item_id DESC NULLS LAST
+ LIMIT 1";
+
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute([
+ 'group_id' => $groupId,
+ 'item_type' => $itemType,
+ 'item_id' => $itemId
+ ]);
+
+ $result = $stmt->fetch();
+
+ return $result && $result[$permissionType] === true;
+}
+
+/**
+ * Get all permissions for a group
+ * @param int $groupId Group ID
+ * @return array Array of permissions
+ */
+function getGroupPermissions($groupId) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT * FROM permissions WHERE group_id = :group_id ORDER BY item_type, item_id";
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute(['group_id' => $groupId]);
+
+ return $stmt->fetchAll();
+}
+
+/**
+ * Get permissions for a specific item
+ * @param string $itemType Type of item
+ * @param int $itemId ID of the item
+ * @return array Array of group permissions for this item
+ */
+function getItemPermissions($itemType, $itemId) {
+ $pdo = getDbConnection();
+
+ $sql = "SELECT p.*, g.name as group_name
+ FROM permissions p
+ LEFT JOIN groups g ON p.group_id = g.id
+ WHERE p.item_type = :item_type
+ AND p.item_id = :item_id
+ ORDER BY g.name";
+
+ $stmt = $pdo->prepare($sql);
+ $stmt->execute([
+ 'item_type' => $itemType,
+ 'item_id' => $itemId
+ ]);
+
+ return $stmt->fetchAll();
+}
+
+/**
+ * Set permission for a group on an item
+ * @param int $groupId Group ID
+ * @param string $itemType Type of item
+ * @param int|null $itemId ID of the item (null for all items of this type)
+ * @param bool $canView Can view permission
+ * @param bool $canEdit Can edit permission
+ * @param bool $canDelete Can delete permission
+ * @return bool Success status
+ */
+function setPermission($groupId, $itemType, $itemId, $canView, $canEdit, $canDelete) {
+ $pdo = getDbConnection();
+
+ $sql = "INSERT INTO permissions (group_id, item_type, item_id, can_view, can_edit, can_delete, created_at)
+ VALUES (:group_id, :item_type, :item_id, :can_view, :can_edit, :can_delete, CURRENT_TIMESTAMP)
+ ON CONFLICT (group_id, item_type, item_id)
+ DO UPDATE SET
+ can_view = :can_view,
+ can_edit = :can_edit,
+ can_delete = :can_delete";
+
+ $stmt = $pdo->prepare($sql);
+
+ return $stmt->execute([
+ 'group_id' => $groupId,
+ 'item_type' => $itemType,
+ 'item_id' => $itemId,
+ 'can_view' => $canView,
+ 'can_edit' => $canEdit,
+ 'can_delete' => $canDelete
+ ]);
+}
+
+/**
+ * Remove permission for a group on an item
+ * @param int $groupId Group ID
+ * @param string $itemType Type of item
+ * @param int|null $itemId ID of the item (null for all items of this type)
+ * @return bool Success status
+ */
+function removePermission($groupId, $itemType, $itemId) {
+ $pdo = getDbConnection();
+
+ if ($itemId === null) {
+ $sql = "DELETE FROM permissions WHERE group_id = :group_id AND item_type = :item_type AND item_id IS NULL";
+ $stmt = $pdo->prepare($sql);
+ return $stmt->execute([
+ 'group_id' => $groupId,
+ 'item_type' => $itemType
+ ]);
+ } else {
+ $sql = "DELETE FROM permissions WHERE group_id = :group_id AND item_type = :item_type AND item_id = :item_id";
+ $stmt = $pdo->prepare($sql);
+ return $stmt->execute([
+ 'group_id' => $groupId,
+ 'item_type' => $itemType,
+ 'item_id' => $itemId
+ ]);
+ }
+}
diff --git a/incl/Settings.php b/incl/Settings.php
new file mode 100644
index 0000000..1b550bc
--- /dev/null
+++ b/incl/Settings.php
@@ -0,0 +1,128 @@
+pdo = $pdo;
+ $this->assetsDir = $assetsDir ?? __DIR__ . '/../assets/brand';
+ $this->assetsUrlBase = $assetsUrlBase ?? '/assets/brand';
+ if (!is_dir($this->assetsDir)) @mkdir($this->assetsDir, 0775, true);
+ }
+
+ public function load(): array
+ {
+ $defaults = [
+ 'site_name' => 'GeoLite',
+ 'primary_color' => '#667eea',
+ 'footer_text' => '© ' . date('Y') . ' GeoLite',
+ 'logo_url' => null,
+ 'hero_image' => null,
+ ];
+ $db = $this->pdo->query("SELECT site_name, primary_color, footer_text, logo_url, hero_image FROM app_settings WHERE id = 1")
+ ->fetch(PDO::FETCH_ASSOC) ?: [];
+
+ // Optional file fallback if you keep settings.php
+ $file = __DIR__ . '/../settings.php';
+ $fileArr = file_exists($file) ? include $file : [];
+
+ return array_merge($defaults, array_filter($db), is_array($fileArr) ? array_filter($fileArr) : []);
+ }
+
+ /** Returns [settings, errors] */
+ public function save(array $post, array $files): array
+ {
+ $errors = [];
+ $current = $this->load();
+
+ $site_name = trim($post['site_name'] ?? $current['site_name']);
+ $primary_color = trim($post['primary_color'] ?? $current['primary_color']);
+ $primary_color = $primary_color[0] === '#' ? $primary_color : '#'.$primary_color;
+ $footer_text = trim($post['footer_text'] ?? $current['footer_text']);
+
+ if ($site_name === '') $errors[] = 'Site name is required.';
+ if (!preg_match('/^#([A-Fa-f0-9]{3}|[A-Fa-f0-9]{6}|[A-Fa-f0-9]{8})$/', $primary_color))
+ $errors[] = 'Primary color must be a valid hex color (e.g., #667eea).';
+
+ $logo_url = $current['logo_url'];
+ $hero_url = $current['hero_image'];
+
+ if (!empty($files['logo']['name'])) {
+ $res = $this->processImageUpload($files['logo'], 'logo');
+ if (isset($res['error'])) $errors[] = $res['error']; else $logo_url = $res['url'];
+ }
+ if (!empty($files['hero_image']['name'])) {
+ $res = $this->processImageUpload($files['hero_image'], 'hero');
+ if (isset($res['error'])) $errors[] = $res['error']; else $hero_url = $res['url'];
+ }
+
+ if (!empty($post['delete_logo']) && $logo_url) { $this->unlinkIfLocal($logo_url); $logo_url = null; }
+ if (!empty($post['delete_hero']) && $hero_url) { $this->unlinkIfLocal($hero_url); $hero_url = null; }
+
+ if ($errors) {
+ return [[
+ 'site_name'=>$site_name,'primary_color'=>$primary_color,'footer_text'=>$footer_text,
+ 'logo_url'=>$logo_url,'hero_image'=>$hero_url
+ ], $errors];
+ }
+
+ // PostgreSQL UPSERT
+ $sql = "INSERT INTO app_settings (id, site_name, primary_color, footer_text, logo_url, hero_image, updated_at)
+ VALUES (1, :site_name, :primary_color, :footer_text, :logo_url, :hero_image, CURRENT_TIMESTAMP)
+ ON CONFLICT (id) DO UPDATE SET
+ site_name = EXCLUDED.site_name,
+ primary_color = EXCLUDED.primary_color,
+ footer_text = EXCLUDED.footer_text,
+ logo_url = EXCLUDED.logo_url,
+ hero_image = EXCLUDED.hero_image,
+ updated_at = CURRENT_TIMESTAMP";
+ $stmt = $this->pdo->prepare($sql);
+ $stmt->execute([
+ ':site_name' => $site_name,
+ ':primary_color' => $primary_color,
+ ':footer_text' => $footer_text,
+ ':logo_url' => $logo_url,
+ ':hero_image' => $hero_url
+ ]);
+
+ return [$this->load(), []];
+ }
+
+ private function processImageUpload(array $file, string $prefix): array
+ {
+ if (($file['error'] ?? UPLOAD_ERR_NO_FILE) !== UPLOAD_ERR_OK)
+ return ['error' => 'Upload error for ' . $prefix];
+
+ $tmp = $file['tmp_name'];
+ $finfo = @getimagesize($tmp);
+ if (!$finfo) return ['error' => 'File for ' . $prefix . ' is not a valid image.'];
+
+ $mime = $finfo['mime'] ?? '';
+ $ext = match ($mime) {
+ 'image/png' => 'png', 'image/jpeg' => 'jpg', 'image/webp' => 'webp', 'image/svg+xml' => 'svg',
+ default => null,
+ };
+ if (!$ext) return ['error' => 'Unsupported image type for ' . $prefix . ' (png, jpg, webp, svg).'];
+
+ $name = $prefix . '_' . date('Ymd_His') . '_' . bin2hex(random_bytes(4)) . '.' . $ext;
+ $dest = rtrim($this->assetsDir, '/\\') . DIRECTORY_SEPARATOR . $name;
+
+ if (!move_uploaded_file($tmp, $dest))
+ return ['error' => 'Failed to store uploaded ' . $prefix . '.'];
+
+ $url = rtrim($this->assetsUrlBase, '/') . '/' . $name;
+ return ['url' => $url];
+ }
+
+ private function unlinkIfLocal(string $url): void
+ {
+ $path = parse_url($url, PHP_URL_PATH);
+ $candidate = rtrim($this->assetsDir, '/\\') . DIRECTORY_SEPARATOR . basename($path);
+ if (strpos($candidate, rtrim($this->assetsDir, '/\\')) === 0 && file_exists($candidate)) {
+ @unlink($candidate);
+ }
+ }
+}
diff --git a/incl/db.php b/incl/db.php
new file mode 100644
index 0000000..2fc89d9
--- /dev/null
+++ b/incl/db.php
@@ -0,0 +1,5 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ + + +
+ +My HTML Pages
+ + +
+
+
+
+
+
+ No HTML Pages Yet
+Create your first HTML page to get started
+
+
+
+
+
diff --git a/incl/map_template.php b/incl/map_template.php
new file mode 100644
index 0000000..8944b1e
--- /dev/null
+++ b/incl/map_template.php
@@ -0,0 +1,1240 @@
+
+ var zoomBtn = document.getElementById("zoom-");
+ if (zoomBtn) {
+ zoomBtn.onclick = async function() {
+ var layerName = Layer.get("name");
+ var proxyUrl = "";
+ var url = proxyUrl + "?SERVICE=WMS&VERSION=1.1.1&REQUEST=GetCapabilities&LAYERS=" + layerName;
+
+ try {
+ const response = await fetch(url);
+ const text = await response.text();
+ const parser = new DOMParser();
+ const xmlDoc = parser.parseFromString(text, "text/xml");
+ const layerInfo = xmlDoc.getElementsByTagName("Layer");
+
+ for (let i = 0; i < layerInfo.length; i++) {
+ const name = layerInfo[i].getElementsByTagName("Name")[0];
+ if (name && name.textContent === layerName) {
+ const bboxes = layerInfo[i].getElementsByTagName("BoundingBox");
+ let bbox = null;
+ let sourceSRS = null;
+
+ // First try to find EPSG:4326 bbox
+ for (let j = 0; j < bboxes.length; j++) {
+ if (bboxes[j].getAttribute("SRS") === "EPSG:4326") {
+ bbox = bboxes[j];
+ sourceSRS = "EPSG:4326";
+ break;
+ }
+ }
+
+ // If no EPSG:4326 found, use the first available bbox
+ if (!bbox && bboxes.length > 0) {
+ bbox = bboxes[0];
+ sourceSRS = bbox.getAttribute("SRS");
+
+ // Ensure the projection is registered
+ try {
+ await ensureProjectionRegistered(sourceSRS);
+ } catch (error) {
+ console.error("Error registering projection:", error);
+ return;
+ }
+ }
+
+ if (bbox) {
+ const extent = [
+ parseFloat(bbox.getAttribute("minx")),
+ parseFloat(bbox.getAttribute("miny")),
+ parseFloat(bbox.getAttribute("maxx")),
+ parseFloat(bbox.getAttribute("maxy"))
+ ];
+
+ // Add padding to the extent
+ const width = extent[2] - extent[0];
+ const height = extent[3] - extent[1];
+ extent[0] -= width * 0.1;
+ extent[1] -= height * 0.1;
+ extent[2] += width * 0.1;
+ extent[3] += height * 0.1;
+
+ try {
+ let transformedExtent;
+ if (sourceSRS === "EPSG:4326") {
+ transformedExtent = ol.proj.transformExtent(extent, "EPSG:4326", "EPSG:3857");
+ } else {
+ const wgs84Extent = ol.proj.transformExtent(extent, sourceSRS, "EPSG:4326");
+ transformedExtent = ol.proj.transformExtent(wgs84Extent, "EPSG:4326", "EPSG:3857");
+ }
+
+ if (isNaN(transformedExtent[0]) || isNaN(transformedExtent[1]) ||
+ isNaN(transformedExtent[2]) || isNaN(transformedExtent[3])) {
+ throw new Error("Invalid transformed extent");
+ }
+
+ map.getView().fit(transformedExtent, {
+ padding: [50, 50, 50, 50],
+ duration: 1000,
+ maxZoom: 15
+ });
+ } catch (error) {
+ console.error("Error transforming extent:", error);
+ const defaultExtent = [-20037508.34, -20037508.34, 20037508.34, 20037508.34];
+ map.getView().fit(defaultExtent, {
+ padding: [50, 50, 50, 50],
+ duration: 1000,
+ maxZoom: 15
+ });
+ }
+ } else {
+ console.error("No bounding box found for layer");
+ }
+ break;
+ }
+ }
+ } catch (error) {
+ console.error("Error fetching layer extent:", error);
+ }
+ };
+ }
+
+
+
+
+
+
+
+
+
+
+
+
+ + + +
++ +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 0) {
+ var currentFeatureIndex = 0;
+ var totalFeatures = data.features.length;
+
+ function generatePopupHTML(featureIndex) {
+ var feature = data.features[featureIndex];
+ var props = feature.properties;
+ // Derive correct layer name from feature.id
+ var layerName = "Unknown Layer";
+ if (feature && feature.id) {
+ // GeoServer usually returns "workspace:layername.123"
+ var idStr = String(feature.id);
+ if (idStr.indexOf(".") > -1) idStr = idStr.split(".")[0];
+ if (idStr.indexOf(":") > -1) idStr = idStr.split(":").pop();
+ layerName = idStr;
+ } else if (props && (props._layer || props.layer || props.layer_name)) {
+ layerName = props._layer || props.layer || props.layer_name;
+ } else if (urlLayers.length > 0) {
+ layerName = urlLayers[0];
+ }
+
+ var html = "
+
+
+
+
+
+
+
+
+
+
+
+ 1): ?>
+
+
+
+
+ Description:
+Created:
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ";
+ html += "
";
+
+ html += "";
+ html += "";
+ html += "" + (featureIndex + 1) + " of " + totalFeatures + "";
+ html += "";
+ html += "
";
+ html += "";
+ html += "";
+
+ // Layer information
+ html += "
";
+
+ return html;
+ }
+
+ // Generate initial popup
+ popup.innerHTML = generatePopupHTML(currentFeatureIndex);
+ popup.style.display = "block";
+ overlay.setPosition(coordinate);
+
+ // Add navigation functions to window scope
+ window.navigateFeature = function(newIndex) {
+ if (newIndex >= 0 && newIndex < totalFeatures) {
+ currentFeatureIndex = newIndex;
+ popup.innerHTML = generatePopupHTML(currentFeatureIndex);
+ }
+ };
+
+ window.closePopup = function() {
+ popup.style.display = "none";
+ overlay.setPosition(undefined);
+ };
+
+ window.showTable = function() {
+ var f = data.features[currentFeatureIndex] || {};
+ var props = (f && f.properties) ? f.properties : {};
+ // ---- Resolve correct layer name from this feature ----
+ var layerName = "Unknown";
+ if (f && f.id) {
+ var idStr = String(f.id);
+ if (idStr.indexOf(".") > -1) idStr = idStr.split(".")[0]; // strip ".123"
+ if (idStr.indexOf(":") > -1) idStr = idStr.split(":").pop(); // strip "workspace:"
+ layerName = idStr || layerName;
+ } else if (props && (props._layer || props.layer || props.layer_name)) {
+ layerName = props._layer || props.layer || props.layer_name;
+ } else if (urlLayers && urlLayers.length > 0) {
+ layerName = urlLayers[0];
+ }
+
+ // ---- Try to detect a primary key candidate on the clicked feature ----
+ var pkCandidates = ["id","fid","gid","objectid","feature_id","pk","ogc_fid"];
+ var pkcol = null;
+ for (var i = 0; i < pkCandidates.length; i++) {
+ var k = pkCandidates[i];
+ if (Object.prototype.hasOwnProperty.call(props, k)) { pkcol = k; break; }
+ }
+ // Fallback: first property that ends with "_id"
+ if (!pkcol) {
+ Object.keys(props || {}).some(function(k){
+ if (/_id$/i.test(k)) { pkcol = k; return true; }
+ return false;
+ });
+ }
+ var pkval = pkcol ? props[pkcol] : null;
+ var q = "layer=" + encodeURIComponent(layerName);
+ if (pkcol && pkval !== undefined && pkval !== null) {
+ q += "&pkcol=" + encodeURIComponent(pkcol) + "&pk=" + encodeURIComponent(pkval);
+ }
+ var tableUrl = "view_table.php?" + q;
+
+ // Open modal and load content
+ var modal = new bootstrap.Modal(document.getElementById(\'tableModal\'));
+ var modalContent = document.getElementById(\'tableViewContent\');
+ // Update modal title if present
+ try {
+ var titleEl = document.querySelector(\'#tableModal .modal-title, #tableModalLabel\');
+ if (titleEl) { titleEl.textContent = \'Layer Table — \' + layerName; }
+ } catch(e) {}
+
+ // Show loading spinner
+ modalContent.innerHTML = \'";
+ html += "Layer: ";
+ html += "" + layerName + "";
+ html += "
";
+
+ // Action buttons
+ html += "";
+ html += "";
+ html += "";
+ html += "
";
+
+ // Feature attributes - show all properties
+ var propKeys = Object.keys(props);
+
+ propKeys.forEach(function(key, index) {
+ // Highlight important attributes like Name, Address, etc.
+ var importantKeys = ["name", "address", "title", "description", "type", "category"];
+ var isHighlighted = importantKeys.some(function(importantKey) {
+ return key.toLowerCase().includes(importantKey);
+ });
+
+ html += "";
+ html += "" + key + ": ";
+ html += "" + (props[key] || "N/A") + "";
+ html += "
";
+ });
+
+ html += "Loading...
Error loading table: \' + error.message + \'
\';
+ });
+ };
+
+ window.zoomToFeature = function() {
+ var f = data.features[currentFeatureIndex];
+ if (!f || !f.geometry) {
+ console.warn("No geometry found for feature.", f);
+ return;
+ }
+ try {
+ // Use ol/format/GeoJSON to convert to ol.Feature
+ var geojsonFormat = new ol.format.GeoJSON();
+ var olFeature = geojsonFormat.readFeature(f, {
+ dataProjection: "EPSG:4326", // Default from GeoServer JSON
+ featureProjection: map.getView().getProjection()
+ });
+
+ var geom = olFeature.getGeometry();
+ if (!geom) {
+ console.warn("No geometry parsed from feature.", f);
+ return;
+ }
+
+ var extent = geom.getExtent();
+
+ // Validate extent; handle cases where geometry extent is empty/invalid
+ var invalid = (
+ !extent || extent.length !== 4 ||
+ !isFinite(extent[0]) || !isFinite(extent[1]) ||
+ !isFinite(extent[2]) || !isFinite(extent[3]) ||
+ extent[0] === Infinity || extent[2] === -Infinity
+ );
+
+ if (invalid) {
+ // Try to derive an extent from the raw GeoJSON point or the click coordinate
+ var buffer = 5000;
+ if (f && f.geometry && f.geometry.type === "Point" && Array.isArray(f.geometry.coordinates)) {
+ var p = ol.proj.transform(f.geometry.coordinates, "EPSG:4326", map.getView().getProjection());
+ extent = [p[0] - buffer, p[1] - buffer, p[0] + buffer, p[1] + buffer];
+ } else if (typeof coordinate !== "undefined" && coordinate && coordinate.length === 2) {
+ extent = [coordinate[0] - buffer, coordinate[1] - buffer, coordinate[0] + buffer, coordinate[1] + buffer];
+ } else {
+ console.warn("Empty extent and no fallback available for zoom.", f);
+ return;
+ }
+ }
+
+ // For Points, pad extent a bit so it is not zoomed too far in
+ var isPoint = geom.getType() === "Point";
+ if (isPoint) {
+ var buffer = 5000; // meters; adjust for your data context
+ extent = [
+ extent[0] - buffer,
+ extent[1] - buffer,
+ extent[2] + buffer,
+ extent[3] + buffer
+ ];
+ }
+
+ map.getView().fit(extent, {
+ duration: 1000,
+ padding: [50, 50, 50, 50],
+ maxZoom: 15
+ });
+ } catch (err) {
+ console.error("Could not zoom to feature:", err, f);
+ }
+ };
+ }
+ })
+ .catch(function(error) {
+ console.error("Error fetching feature info:", error);
+ });
+ });
+ }';
+}
+?>
diff --git a/index.php b/index.php
new file mode 100644
index 0000000..7bebbaa
--- /dev/null
+++ b/index.php
@@ -0,0 +1,1398 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Search
+ +
+
+
+
+
+
+
+
+
+
+
+
+ Filter by Type
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Filter by Category
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ +
+Welcome
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Quick Start
+
+
+
+
+ Logout
+
+
+
+ Login
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/install.php b/install.php
new file mode 100644
index 0000000..4763a4e
--- /dev/null
+++ b/install.php
@@ -0,0 +1,487 @@
+db_host = trim($config['db_host'] ?? '');
+ $this->db_name = trim($config['db_name'] ?? '');
+ $this->db_user = trim($config['db_user'] ?? '');
+ $this->db_pass = trim($config['db_pass'] ?? '');
+ $this->db_port = trim($config['db_port'] ?? '5432');
+ $this->admin_password = trim($config['admin_password'] ?? '');
+ }
+
+ public function validate() {
+ $this->errors = [];
+
+ if (empty($this->db_host)) {
+ $this->errors[] = 'Database host is required.';
+ }
+
+ if (empty($this->db_name)) {
+ $this->errors[] = 'Database name is required.';
+ }
+
+ if (empty($this->db_user)) {
+ $this->errors[] = 'Database username is required.';
+ }
+
+ if (empty($this->db_pass)) {
+ $this->errors[] = 'Database password is required.';
+ }
+
+ if (empty($this->admin_password)) {
+ $this->errors[] = 'Admin password is required.';
+ }
+
+ if (!is_numeric($this->db_port) || $this->db_port < 1 || $this->db_port > 65535) {
+ $this->errors[] = 'Database port must be a valid port number (1-65535).';
+ }
+
+ if (strlen($this->admin_password) < 6) {
+ $this->errors[] = 'Admin password must be at least 6 characters long.';
+ }
+
+ return empty($this->errors);
+ }
+
+ public function testDatabaseConnection() {
+ try {
+ $this->pdo = new PDO(
+ "pgsql:host={$this->db_host};port={$this->db_port};dbname={$this->db_name}",
+ $this->db_user,
+ $this->db_pass,
+ [
+ PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
+ PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
+ PDO::ATTR_STRINGIFY_FETCHES => false,
+ PDO::ATTR_EMULATE_PREPARES => false
+ ]
+ );
+ return true;
+ } catch (PDOException $e) {
+ $this->errors[] = 'Database connection failed: ' . $e->getMessage();
+ return false;
+ }
+ }
+
+ public function updateConfigFile() {
+ $const_content = "db_host}\";
+const DB_NAME=\"{$this->db_name}\";
+const DB_USER=\"{$this->db_user}\";
+const DB_PASS=\"{$this->db_pass}\";
+const DB_PORT = {$this->db_port};
+const DB_SCMA='public';
+
+const SESS_USR_KEY = 'qgis_user';
+const WWW_DIR = '".__DIR__."';
+const DATA_DIR = '".dirname(__DIR__)."/data';
+";
+
+ // Ensure incl directory exists
+ if (!is_dir('incl')) {
+ if (!mkdir('incl', 0755, true)) {
+ $this->errors[] = 'Failed to create incl directory. Check permissions.';
+ return false;
+ }
+ }
+
+ if (file_put_contents('incl/const.php', $const_content) === false) {
+ $this->errors[] = 'Failed to write const.php file. Check file permissions.';
+ return false;
+ }
+
+ $this->success_messages[] = 'Configuration file updated successfully.';
+ return true;
+ }
+
+ public function runDatabaseSetup() {
+ try {
+ // Read SQL files
+ $setup_sql = file_get_contents('installer/setup.sql');
+ $init_sql = file_get_contents('installer/init.sql');
+
+ if ($setup_sql === false) {
+ $this->errors[] = 'Failed to read installer/setup.sql file.';
+ return false;
+ }
+
+ if ($init_sql === false) {
+ $this->errors[] = 'Failed to read installer/init.sql file.';
+ return false;
+ }
+
+ // Replace placeholder password with actual hash
+ $admin_password_hash = password_hash($this->admin_password, PASSWORD_DEFAULT);
+ $init_sql = str_replace('ADMIN_APP_PASS', $admin_password_hash, $init_sql);
+
+ // Execute setup SQL (creates tables)
+ $this->pdo->exec($setup_sql);
+ $this->success_messages[] = 'Database tables created successfully.';
+
+ // Execute init SQL (inserts initial data)
+ $this->pdo->exec($init_sql);
+ $this->success_messages[] = 'Initial data inserted successfully.';
+
+ return true;
+ } catch (PDOException $e) {
+ $this->errors[] = 'Database setup failed: ' . $e->getMessage();
+ return false;
+ }
+ }
+
+ public function createDataDirectory() {
+ $data_dir = __DIR__ . '/../data';
+ if (!is_dir($data_dir)) {
+ if (!mkdir($data_dir, 0755, true)) {
+ $this->errors[] = 'Failed to create data directory. Check permissions.';
+ return false;
+ }
+
+ if (!mkdir($data_dir.'/uploads', 0755, true)) {
+ $this->errors[] = 'Failed to create data/uploads directory. Check permissions.';
+ return false;
+ }
+ }
+
+ if (!is_dir('assets')) {
+ if (!mkdir('assets', 0755, true)) {
+ $this->errors[] = 'Failed to create assets directory. Check permissions.';
+ return false;
+ }
+ }
+
+ if (!is_dir('assets/brand')) {
+ if (!mkdir('assets/brand', 0755, true)) {
+ $this->errors[] = 'Failed to create assets/brand directory. Check permissions.';
+ return false;
+ }
+ }
+
+ $this->success_messages[] = 'Required directories created successfully.';
+ return true;
+ }
+
+ public function install() {
+ if (!$this->validate()) {
+ return false;
+ }
+
+ if (!$this->testDatabaseConnection()) {
+ return false;
+ }
+
+ if (!$this->updateConfigFile()) {
+ return false;
+ }
+
+ if (!$this->createDataDirectory()) {
+ return false;
+ }
+
+ if (!$this->runDatabaseSetup()) {
+ return false;
+ }
+
+ $this->success_messages[] = 'Installation completed successfully!';
+ return true;
+ }
+
+ public function getErrors() {
+ return $this->errors;
+ }
+
+ public function getSuccessMessages() {
+ return $this->success_messages;
+ }
+
+ public function hasErrors() {
+ return !empty($this->errors);
+ }
+
+ public function getFirstError() {
+ return !empty($this->errors) ? $this->errors[0] : '';
+ }
+
+ public function getAllMessages() {
+ return array_merge($this->success_messages, $this->errors);
+ }
+
+ public function cleanup(){
+ # remove install files
+ $files = scandir('installer');
+ foreach($files as $f){
+ unlink('installer/'.$f);
+ }
+ rmdir('installer');
+ unlink('install.php');
+ }
+}
+
+// Check if already installed
+if (file_exists('incl/const.php')) {
+ $const_content = file_get_contents('incl/const.php');
+ if (strpos($const_content, '${APP_DB}') === false) {
+ // Already installed, redirect to main page
+ header('Location: index.php');
+ exit;
+ }
+}
+
+$error = '';
+$success = '';
+
+// Check if form was submitted
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+ $installer = new GeoLiteInstaller($_POST);
+
+ if ($installer->install()) {
+ $installer->cleanup();
+ $success = implode(' ', $installer->getSuccessMessages()) . ' You can now access the application.';
+ } else {
+ $error = $installer->getFirstError();
+ }
+}
+?>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Access denied. You do not have permission to access that page.
+
+
+
+
+
+
+
+
+
+
+ No Content Available
+ +Create your first map, dashboard, document, or HTML page to get started with GeoLite
+
+
+ Create Your First Map
+
+
+ Create Your First Dashboard
+
+
+ Upload Document
+
+
+ Create HTML Page
+
+
+
+ You don't have access to any content yet. Please contact your administrator for access.
+ +
+
+
+
+
+
+
+
+
+
+ Filters
+
+
+
+
+
+
+
+
+ ; ?>)
+
+
+
+
+
+ +
+
+
+
+
+
+
+
+
+
+ No description provided
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ; ?>)
+
+
+
+
+
+ +
+
+
+
+
+
+
+
+
+
+ No description provided
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ; ?>)
+
+
+
+
+
+ +
+
+
+
+
+
+
+
+
+
+ No description provided
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ; ?>)
+
+
+
+
+
+ +
+
+
+
+
+
+
+
+
+
+ No description provided
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/installer/apache2.conf b/installer/apache2.conf
new file mode 100644
index 0000000..19be2ae
--- /dev/null
+++ b/installer/apache2.conf
@@ -0,0 +1,28 @@
+
+
+
+
+
+
+
+
+
+
+
+ GeoLite
+Map Builder & Dashboard Installation
+
+
+
+
+
+ Requirements
+-
+
- PostgreSQL database server +
- PHP 7.4+ with PDO PostgreSQL extension +
- Web server (Apache/Nginx) +
- Write permissions for incl/ directory +
+
+
+ ![<?= htmlspecialchars($brand['site_name']) ?> logo](<?= htmlspecialchars($brand['logo_url']) ?>)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ You have been successfully logged out.
+
+ Error:
+
+
+
+
+
+
+
+
diff --git a/pyproject.toml b/pyproject.toml
new file mode 100644
index 0000000..dacfae5
--- /dev/null
+++ b/pyproject.toml
@@ -0,0 +1,8 @@
+[build-system]
+requires = ["flit_core >=3.2,<4"]
+build-backend = "flit_core.buildapi"
+
+[project]
+name = "GeoLite"
+authors = [{name = "AcuGIS", email = "hello@citedcorp.com"}]
+dynamic = ["version", "description"]
diff --git a/quick-start.php b/quick-start.php
new file mode 100644
index 0000000..3a2820e
--- /dev/null
+++ b/quick-start.php
@@ -0,0 +1,536 @@
+
+
+
+
+
+
+
+
+
+
+
+ Map Preview
+ +
+
+
+
+
+
+
+
diff --git a/upload_thumbnail.php b/upload_thumbnail.php
new file mode 100644
index 0000000..1f89026
--- /dev/null
+++ b/upload_thumbnail.php
@@ -0,0 +1,119 @@
+ false, 'message' => 'Not authenticated']);
+}
+
+// Check method
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+ sendJson(['success' => false, 'message' => 'Invalid request method']);
+}
+
+// Get parameters
+$itemType = $_POST['item_type'] ?? '';
+$itemId = intval($_POST['item_id'] ?? 0);
+
+if (empty($itemType) || $itemId <= 0) {
+ sendJson(['success' => false, 'message' => 'Invalid parameters']);
+}
+
+// Check if user has edit permission
+if (!canEdit($itemType, $itemId)) {
+ sendJson(['success' => false, 'message' => 'You do not have permission to edit this item']);
+}
+
+// Validate item type
+$validTypes = ['map', 'dashboard', 'document', 'html_page'];
+if (!in_array($itemType, $validTypes)) {
+ sendJson(['success' => false, 'message' => 'Invalid item type']);
+}
+
+// Check file upload
+if (!isset($_FILES['thumbnail']) || $_FILES['thumbnail']['error'] !== UPLOAD_ERR_OK) {
+ sendJson(['success' => false, 'message' => 'No file uploaded or upload error']);
+}
+
+// Validate file type - use extension like documents.php does
+$file = $_FILES['thumbnail'];
+$originalFilename = basename($file['name']);
+$extension = strtolower(pathinfo($originalFilename, PATHINFO_EXTENSION));
+
+$allowedExtensions = ['jpg', 'jpeg', 'png', 'gif', 'webp'];
+if (!in_array($extension, $allowedExtensions)) {
+ sendJson(['success' => false, 'message' => 'Invalid file type. Only JPG, PNG, GIF, and WebP images are allowed.']);
+}
+
+// Validate file size (max 5MB)
+$maxSize = 5 * 1024 * 1024;
+if ($file['size'] > $maxSize) {
+ sendJson(['success' => false, 'message' => 'File too large. Maximum size is 5MB.']);
+}
+
+// Create thumbnails directory
+$uploadDir = 'assets/thumbnails';
+
+// Generate unique filename
+$filename = $itemType . '_' . $itemId . '_' . uniqid() . '.' . $extension;
+$uploadPath = $uploadDir . '/' . $filename;
+
+// Move uploaded file
+if (!move_uploaded_file($file['tmp_name'], $uploadPath)) {
+ sendJson(['success' => false, 'message' => 'Failed to save file']);
+}
+
+// Update database
+$relativePath = 'assets/thumbnails/' . $filename;
+
+try {
+ switch ($itemType) {
+ case 'map':
+ updateMapThumbnail($itemId, $relativePath);
+ break;
+ case 'dashboard':
+ updateDashboardThumbnail($itemId, $relativePath);
+ break;
+ case 'document':
+ updateDocumentThumbnail($itemId, $relativePath);
+ break;
+ case 'html_page':
+ updateHtmlPageThumbnail($itemId, $relativePath);
+ break;
+ }
+
+ sendJson([
+ 'success' => true,
+ 'message' => 'Thumbnail uploaded successfully',
+ 'thumbnail_path' => $relativePath
+ ]);
+
+} catch (Exception $e) {
+ // Delete uploaded file if database fails
+ if (file_exists($uploadPath)) {
+ unlink($uploadPath);
+ }
+
+ sendJson([
+ 'success' => false,
+ 'message' => 'Failed to update database: ' . $e->getMessage()
+ ]);
+}
diff --git a/users.php b/users.php
new file mode 100644
index 0000000..a245773
--- /dev/null
+++ b/users.php
@@ -0,0 +1,1095 @@
+getMessage();
+ }
+ }
+ } elseif ($action === 'update_user') {
+ $userId = intval($_POST['user_id'] ?? 0);
+ $username = trim($_POST['username'] ?? '');
+ $fullName = trim($_POST['full_name'] ?? '');
+ $email = trim($_POST['email'] ?? '');
+ $groupId = intval($_POST['group_id'] ?? 0);
+ $isActive = isset($_POST['is_active']) ? 1 : 0;
+ $password = $_POST['password'] ?? '';
+
+ if (empty($username)) {
+ $error = "Username is required.";
+ } else {
+ try {
+ updateUser($userId, $username, $fullName, $email, $groupId, $isActive, $password);
+ $success = "User updated successfully!";
+ } catch (Exception $e) {
+ $error = "Failed to update user: " . $e->getMessage();
+ }
+ }
+ } elseif ($action === 'delete_user') {
+ $userId = intval($_POST['user_id'] ?? 0);
+
+ // Prevent deleting self
+ if ($userId === getCurrentUserId()) {
+ $error = "You cannot delete your own account.";
+ } else {
+ try {
+ deleteUser($userId);
+ $success = "User deleted successfully!";
+ } catch (Exception $e) {
+ $error = "Failed to delete user: " . $e->getMessage();
+ }
+ }
+ } elseif ($action === 'set_permission') {
+ $groupId = intval($_POST['group_id'] ?? 0);
+ $itemType = $_POST['item_type'] ?? '';
+ $itemId = $_POST['item_id'] ?? null;
+ if ($itemId !== null && $itemId !== '') {
+ $itemId = intval($itemId);
+ } else {
+ $itemId = null;
+ }
+ $canView = isset($_POST['can_view']) ? 1 : 0;
+ $canEdit = isset($_POST['can_edit']) ? 1 : 0;
+ $canDelete = isset($_POST['can_delete']) ? 1 : 0;
+
+ try {
+ setPermission($groupId, $itemType, $itemId, $canView, $canEdit, $canDelete);
+ $success = "Permission set successfully!";
+ } catch (Exception $e) {
+ $error = "Failed to set permission: " . $e->getMessage();
+ }
+ } elseif ($action === 'remove_permission') {
+ $groupId = intval($_POST['group_id'] ?? 0);
+ $itemType = $_POST['item_type'] ?? '';
+ $itemId = $_POST['item_id'] ?? null;
+ if ($itemId !== null && $itemId !== '') {
+ $itemId = intval($itemId);
+ } else {
+ $itemId = null;
+ }
+
+ try {
+ removePermission($groupId, $itemType, $itemId);
+ $success = "Permission removed successfully!";
+ } catch (Exception $e) {
+ $error = "Failed to remove permission: " . $e->getMessage();
+ }
+ } elseif ($action === 'create_group') {
+ $name = trim($_POST['name'] ?? '');
+ $description = trim($_POST['description'] ?? '');
+
+ if (empty($name)) {
+ $error = "Group name is required.";
+ } else {
+ try {
+ createGroup($name, $description);
+ $success = "Group created successfully!";
+ } catch (Exception $e) {
+ $error = "Failed to create group: " . $e->getMessage();
+ }
+ }
+ } elseif ($action === 'update_group') {
+ $groupId = intval($_POST['group_id'] ?? 0);
+ $name = trim($_POST['name'] ?? '');
+ $description = trim($_POST['description'] ?? '');
+
+ if (empty($name)) {
+ $error = "Group name is required.";
+ } else {
+ try {
+ updateGroup($groupId, $name, $description);
+ $success = "Group updated successfully!";
+ } catch (Exception $e) {
+ $error = "Failed to update group: " . $e->getMessage();
+ }
+ }
+ } elseif ($action === 'delete_group') {
+ $groupId = intval($_POST['group_id'] ?? 0);
+
+ // Check if group has users
+ $userCount = getGroupUserCount($groupId);
+ if ($userCount > 0) {
+ $error = "Cannot delete group with {$userCount} user(s). Please reassign users first.";
+ } else {
+ try {
+ deleteGroup($groupId);
+ $success = "Group deleted successfully!";
+ } catch (Exception $e) {
+ $error = "Failed to delete group: " . $e->getMessage();
+ }
+ }
+ } elseif ($action === 'update_geoserver') {
+ $url = trim($_POST['geoserver_url'] ?? '');
+ $username = trim($_POST['geoserver_username'] ?? '');
+ $password = $_POST['geoserver_password'] ?? '';
+
+ if (empty($url) || empty($username) || empty($password)) {
+ $error = "Username/password and URL are required.";
+ } else {
+ try {
+ saveGeoServerConfig($url, $username, $password);
+ $success = "Geoserver updated successfully!";
+ } catch (Exception $e) {
+ $error = "Failed to update geoserver: " . $e->getMessage();
+ }
+ }
+ }
+}
+
+// Get all users
+try {
+ $users = getAllUsers();
+} catch (Exception $e) {
+ $error = "Failed to load users.";
+ $users = [];
+}
+
+// Get all groups
+try {
+ $groups = getAllGroups();
+} catch (Exception $e) {
+ $error = "Failed to load groups.";
+ $groups = [];
+}
+
+// Get permissions for all groups
+$allGroupPermissions = [];
+foreach ($groups as $group) {
+ try {
+ $allGroupPermissions[$group['id']] = getGroupPermissions($group['id']);
+ } catch (Exception $e) {
+ $allGroupPermissions[$group['id']] = [];
+ }
+}
+
+// Also get user counts for each group
+$groupUserCounts = [];
+foreach ($groups as $group) {
+ try {
+ $groupUserCounts[$group['id']] = getGroupUserCount($group['id']);
+ } catch (Exception $e) {
+ $groupUserCounts[$group['id']] = 0;
+ }
+}
+
+// Get selected group for permission management (from GET parameter)
+$selectedGroupId = isset($_GET['manage_permissions']) ? intval($_GET['manage_permissions']) : null;
+$selectedGroup = null;
+$selectedGroupPermissions = [];
+
+if ($selectedGroupId) {
+ $selectedGroup = getGroupById($selectedGroupId);
+ if ($selectedGroup) {
+ $selectedGroupPermissions = $allGroupPermissions[$selectedGroupId] ?? [];
+ }
+}
+
+// Get all content items for permission management
+try {
+ $allMaps = getAllMaps();
+ $allDashboards = getAllDashboards();
+ $allDocuments = getAllDocuments();
+ $allHtmlPages = getAllHtmlPages();
+} catch (Exception $e) {
+ $allMaps = [];
+ $allDashboards = [];
+ $allDocuments = [];
+ $allHtmlPages = [];
+}
+
+$geoserver_config = getGeoServerConfig();
+
+// Flush output buffer
+ob_end_flush();
+?>
+
+
+
+
+
+
+
+
+
+ Welcome to GeoLite
+This Quick Start guide will help you get started with creating Maps, Dashboards, Documents, and HTML pages in GeoLite, as well as managing users and permissions.
+ +
+
+ Note: Most creation and management features require Admin access. Regular users can view and interact with content that has been shared with them.
+
+
+
+
+ Creating Maps
+Maps allow you to display geographic data from your GeoServer with customizable basemaps and interactive features.
+ +Step-by-Step Guide
+-
+
-
+ Access Map Builder
+ Navigate to the Map Builder by clicking "New Resource" → "Map" in the header (Admin only), or go directly tomap_builder.php. +
+ -
+ Select Basemaps
+ Choose one or more basemaps: +-
+
- OpenStreetMap (default open-source map) +
- Carto Light (light theme) +
- Carto Dark (dark theme) +
+ -
+ Choose WMS Layers
+ Select WMS (Web Map Service) layers from your GeoServer. These layers will be displayed on top of your basemap. +
+ -
+ Enable Features
+ Configure optional map features: +-
+
- Popups: Show information when clicking on map features +
- Zoom Buttons: Add zoom in/out controls +
- Opacity Controls: Allow users to adjust layer transparency +
+ -
+ Set Initial Extent
+ Optionally set the initial map view (center point and zoom level), or capture your current position. +
+ -
+ Enter Map Details
+ Provide a Map Title (required) and an optional description to help identify your map. +
+ -
+ Generate and Save
+ Click "Generate Map" to preview your map, then click "Save to Database" to save it. +
+
+
+ Tip: After saving, your map will appear on the home page and can be viewed by users with appropriate permissions.
+
+
+
+
+ Creating Dashboards
+Dashboards combine multiple widgets (maps, charts, tables, counters, and text) into a single interactive view for data visualization.
+ +Step-by-Step Guide
+-
+
-
+ Access Dashboard Builder
+ Click "New Resource" → "Dashboard" in the header (Admin only), or navigate todashboard_builder.php. +
+ -
+ Add Widgets
+ Drag widgets from the sidebar onto the canvas: +-
+
- Map: Interactive map with GeoServer layers +
- Chart: Data visualization (bar, line, pie charts) +
- Table: Display tabular data +
- Counter: Show counts, sums, or averages +
- Text: Add descriptions and annotations +
+ -
+ Configure Widgets
+ Click the gear icon (⚙️) on any widget to configure its settings, data source, and appearance. +
+ -
+ Reposition Widgets
+ Drag widgets by their header to reposition them on the canvas. +
+ -
+ Resize Widgets
+ Drag the bottom-right corner of any widget to resize it. +
+ -
+ Save Dashboard
+ Click "Save Dashboard" and enter a title and description. Your dashboard will be saved and accessible from the Dashboard Library. +
+
+
+ Tip: Dashboards can be exported as PDF for reports and presentations using the "Export PDF" button.
+
+
+
+
+ Creating HTML Pages
+HTML Pages allow you to create custom web pages with full HTML, CSS, and JavaScript support.
+ +Step-by-Step Guide
+-
+
-
+ Access HTML Pages
+ Click "New Resource" → "HTML Page" in the header (Admin only), or navigate tohtml_pages.php. +
+ -
+ Create New Page
+ Click the "Create New HTML Page" button. +
+ -
+ Enter Page Details
+ Provide a title and description for your HTML page. +
+ -
+ Write HTML Content
+ Enter your HTML, CSS, and JavaScript code in the editor. You have full control over the page structure and styling. +
+ -
+ Save and Preview
+ Click "Save" to save your HTML page. You can then view it from the main library. +
+
+
+ Tip: HTML pages can embed maps, charts, and other GeoLite resources using iframes or JavaScript APIs.
+
+
+
+
+ Creating Documents
+Documents allow you to upload and share PDFs, Word documents, images, and other file types.
+ +Step-by-Step Guide
+-
+
-
+ Access Documents
+ Click "New Resource" → "Document" in the header (Admin only), or navigate todocuments.php. +
+ -
+ Upload Document
+ Click the "Upload New Document" button. +
+ -
+ Select File
+ Choose a file from your computer. Supported formats include PDF, Word documents, images, and more. +
+ -
+ Enter Document Details
+ Provide a title and description for your document. This helps users identify the document in the library. +
+ -
+ Save
+ Click "Upload" to save your document. It will appear in the library and can be viewed or downloaded by users with appropriate permissions. +
+
+
+ Tip: Documents are stored securely and can be accessed by users based on their permission settings.
+
+
+
+
+
+
+
+
+ Managing Users
+User management allows administrators to create, edit, and manage user accounts in the system.
+ +Accessing User Management
+Only administrators can access user management. Navigate to it by:
+-
+
- Logging in as an administrator +
- Clicking "Administration" → "Manage Users" in the header +
- Or navigating directly to
users.php
+
Creating a New User
+-
+
- Click the "Create User" button +
- Fill in the required information:
+
-
+
- Username: Unique identifier for login +
- Password: User's password (stored securely) +
- Full Name: Display name +
- Email: User's email address +
- Group: Select "Admin" or "User" +
- Active: Check to enable the account +
+ - Click "Create User" to save +
Editing a User
+-
+
- Click the pencil icon (✏️) on any user row +
- Update the user details as needed +
- To change password: Enter a new password, or leave blank to keep the current password +
- Click "Save Changes" +
Deleting a User
+-
+
- Click the trash icon (🗑️) on any user row +
- Confirm the deletion +
- Note: You cannot delete your own account +
User Roles
+| Role | +Access | +Permissions | +
|---|---|---|
| Admin | +Everything | +Full access to all content and user management | +
| User | +Restricted | +Only sees items explicitly granted by admins | +
+
+ Important: Admin group has automatic full access - no need to set permissions. User group starts with NO access and must be granted permissions per item.
+
+
+
+
+
+
+
+
+ Managing Permissions
+Permissions control what content users can view, edit, or delete. This is essential for securing your GeoLite installation.
+ +Accessing Permission Management
+-
+
- Navigate to "Administration" → "Manage Users" +
- Click the "Manage Permissions" button or tab +
Granting Permissions
+To grant access to content for the User group:
+-
+
- In the Permissions section, select the appropriate tab:
+
-
+
- Maps: Manage map permissions +
- Dashboards: Manage dashboard permissions +
- Documents: Manage document permissions +
- HTML Pages: Manage HTML page permissions +
+ - Find the item you want to share and click "Edit" +
- Check the appropriate permission boxes:
+
-
+
- ☑️ View: User can see the item in the library and open it +
- ☑️ Edit: User can modify the item +
- ☑️ Delete: User can delete the item +
+ - Click "Save Permissions" to apply +
Permission Levels
+| Permission | +What It Does | +
|---|---|
| View | +User sees the item in library and can open it | +
| Edit | +User can modify the item | +
| Delete | +User can delete the item | +
+
+ Important Notes:
+-
+
- Users need View permission to see an item +
- Edit and Delete require View permission +
- Admin group has automatic full access - no need to set permissions +
- User group starts with NO access - must grant permissions per item +
+
+ Getting Started
+Ready to begin? Follow these steps to get started:
+-
+
-
+ Login
+ If you haven't already, login to GeoLite using your admin credentials. +
+ -
+ Create Your First Resource
+ Start by creating a Map, Dashboard, Document, or HTML Page using the guides above. +
+ -
+ Manage Users
+ Create additional user accounts and set appropriate permissions for them. +
+ -
+ Share Content
+ Use the permission management system to share your content with specific users or groups. +
+
+
+ Default Admin Credentials: Username: admin, Password: geolite
+ ⚠️ IMPORTANT: Change the default password immediately for security!
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Users
+ +
+
+
+
+
+
+
+ | Username | +Full Name | +Group | +Status | +Last Login | +Actions | +|
|---|---|---|---|---|---|---|
| + + + You + + | ++ | + | + + + + | ++ + Active + + Inactive + + | ++ + + + Never + + | ++ + + + + | +
+
+
+
+
+
+
+
+
+ Groups
+ +
+
+
+
+
+
+
+
+
+
+ + + + + ( users) +
+ + + + Full access to all content + + + + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ GeoServer
+
+
+
+
+
+
+
+ | URL | +Username | +Actions | +
|---|---|---|
| + | + | + + | +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/view_dashboard.php b/view_dashboard.php
new file mode 100644
index 0000000..7d67cf4
--- /dev/null
+++ b/view_dashboard.php
@@ -0,0 +1,2526 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/view_document.php b/view_document.php
new file mode 100644
index 0000000..218090a
--- /dev/null
+++ b/view_document.php
@@ -0,0 +1,51 @@
+getMessage()));
+}
diff --git a/view_html_page.php b/view_html_page.php
new file mode 100644
index 0000000..e5e8821
--- /dev/null
+++ b/view_html_page.php
@@ -0,0 +1,198 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ' . htmlspecialchars($page['title']) . '
+ + Return + +';
+
+ // Output the HTML page content
+ echo $page['html_content'];
+
+ echo '
+
+ ';
+
+} catch (Exception $e) {
+ echo '
+
+
+
+
+
+
+
+
+ ';
+}
diff --git a/view_map.php b/view_map.php
new file mode 100644
index 0000000..ebac563
--- /dev/null
+++ b/view_map.php
@@ -0,0 +1,81 @@
+ $map['title'],
+ 'description' => $map['description'],
+ 'created_at' => $map['created_at']
+ ];
+
+ // Generate the template with map metadata
+ $template = generateMapTemplate($mapId, $basemaps, $layers, $features, $initialExtent, $mapMetadata, $filters);
+
+ // Add Return button to sidebar after layer list
+ $homeButton = '
+ ';
+ $template = str_replace('
+
+
+