芝麻web文件管理V1.00

编辑当前文件:/home/pulsehostuk9/www/client.pulsehost.co.uk/index.php

<?php
/**
 * Client Portal (PHP) – Pulsehost Edition (Full)
 * ----------------------------------------------
 * Single-file app with:
 * - Admin dashboard (add clients, recent uploads, per‑client file view)
 * - Client portal (brief editor; upload assets & written content)
 * - MySQL (default here) or SQLite
 * - Basic security: hashed passwords, CSRF, MIME checks
 */

// ======== CONFIG ========
const APP_NAME = 'Pulsehost Client Portal';
const BASE_URL = '';

// SQLite path (only used if DB_DRIVER='sqlite')
const DB_FILE  = __DIR__ . '/data/portal.sqlite';

// Choose database driver: 'mysql' or 'sqlite'
const DB_DRIVER = 'mysql';

// MySQL settings (active when DB_DRIVER='mysql')
const MYSQL_HOST = 'localhost';
const MYSQL_DB   = 'pulsehostuk9_portal1';
const MYSQL_USER = 'pulsehostuk9_portadmin5';
const MYSQL_PASS = 'jAMH26d$b1D8B&Ko,O';

const UPLOAD_BASE = __DIR__ . '/uploads';
const MAX_UPLOAD_BYTES = 20 * 1024 * 1024; // 20MB per file

// Allowed MIME types
$ALLOWED_ASSET_MIMES = [
  'image/png','image/jpeg','image/gif','image/svg+xml','image/webp',
  'application/zip','application/pdf','image/vnd.adobe.photoshop','application/postscript'
];
$ALLOWED_CONTENT_MIMES = [
  'text/plain','text/markdown','application/pdf',
  'application/msword','application/vnd.openxmlformats-officedocument.wordprocessingml.document',
  'application/vnd.openxmlformats-officedocument.wordprocessingml.template',
  'application/vnd.oasis.opendocument.text',
];

// ======== BOOTSTRAP ========
session_start();
init_storage();
preflight();
try {
  $pdo = db();
  maybe_migrate($pdo);
  maybe_seed_admin($pdo);
} catch (Throwable $e) {
  friendly_fatal('Database error', 'Could not initialize the database. Details: ' . h($e->getMessage()));
}

$action = $_GET['action'] ?? 'home';

switch ($action) {
  // Auth & navigation
  case 'home':           route_home(); break;
  case 'login':          route_login($pdo); break;
  case 'logout':         route_logout(); break;

// Admin
  case 'admin':          require_admin(); route_admin_dashboard($pdo); break;
  case 'create_client':  require_admin(); route_create_client($pdo); break;
  case 'reset_client_pw':require_admin(); route_reset_client_pw($pdo); break;
  case 'admin_files':    require_admin(); route_admin_files($pdo); break;

// Client actions
  case 'client':         require_client(); route_client_dashboard($pdo); break;
  case 'save_brief':     require_client(); route_save_brief($pdo); break;
  case 'upload':         require_client(); route_upload($pdo); break;
  case 'delete_upload':  require_client(); route_delete_upload($pdo); break;

default:               route_home(); break;
}
exit;

// ======== REQUIREMENTS CHECK ========
function preflight(): void {
  $issues = [];
  if (version_compare(PHP_VERSION, '8.1.0', '<')) {
    $issues[] = 'PHP 8.1+ required. Current version: ' . h(PHP_VERSION);
  }
  if (!extension_loaded('fileinfo')) {
    $issues[] = 'Enable PHP extension <code>fileinfo</code> (needed for uploads).';
  }
  if (!is_dir(UPLOAD_BASE)) ensure_dir(UPLOAD_BASE);
  if (!is_writable(UPLOAD_BASE)) {
    $issues[] = 'Uploads directory not writable: <code>' . h(UPLOAD_BASE) . '</code>.';
  }
  if (DB_DRIVER === 'sqlite') {
    if (!extension_loaded('pdo_sqlite') || !extension_loaded('sqlite3')) {
      $issues[] = 'Enable <code>pdo_sqlite</code> and <code>sqlite3</code> or switch to MySQL.';
    }
    if (!is_dir(dirname(DB_FILE))) ensure_dir(dirname(DB_FILE));
    if (!is_writable(dirname(DB_FILE))) {
      $issues[] = 'Data dir not writable: <code>' . h(dirname(DB_FILE)) . '</code>.';
    }
  } else {
    if (!extension_loaded('pdo_mysql')) {
      $issues[] = 'Enable <code>pdo_mysql</code> for MySQL.';
    }
  }
  if ($issues) { render_setup_page($issues); exit; }
}
function render_setup_page(array $issues): void {
  echo "<!doctype html><meta charset='utf-8'><title>".h(APP_NAME)." • Setup</title><style>body{font-family:system-ui;max-width:780px;margin:40px auto;padding:0 16px}li{margin:6px 0}</style>";
  echo '<h1>First‑run checks</h1><ol>'; foreach ($issues as $i) echo '<li>'.$i.'</li>'; echo '</ol><p>Fix the above and refresh.</p>';
}
function friendly_fatal(string $title, string $message): void {
  echo "<!doctype html><meta charset='utf-8'><title>".h(APP_NAME)." • $title</title><style>body{font-family:system-ui;max-width:780px;margin:40px auto;padding:0 16px}</style><h1>".h($title)."</h1><div>$message</div>";
}

// ======== ROUTES ========
function route_home() {
  if (current_user()) { is_admin() ? redirect('index.php?action=admin') : redirect('index.php?action=client'); }
  echo layout('Login', view_login());
}

function route_logout() { $_SESSION = []; session_destroy(); redirect('index.php'); }

function route_admin_dashboard(PDO $pdo) {
  $clients = $pdo->query('SELECT c.id, c.company, u.name, u.email, c.created_at FROM clients c JOIN users u ON u.id=c.user_id ORDER BY c.created_at DESC')->fetchAll(PDO::FETCH_ASSOC);
  $uploads = $pdo->query('SELECT u.id, u.client_id, cl.company, u.kind, u.original_name, u.filename, u.uploaded_at FROM uploads u JOIN clients cl ON cl.id=u.client_id ORDER BY u.uploaded_at DESC LIMIT 50')->fetchAll(PDO::FETCH_ASSOC);
  echo layout('Admin', view_admin_dashboard($clients, $uploads));
}

function route_admin_files(PDO $pdo) {
  $client_id = (int)($_GET['client_id'] ?? 0);
  if ($client_id <= 0) { redirect('index.php?action=admin'); }
  $stmt = $pdo->prepare('SELECT c.*, u.name, u.email FROM clients c JOIN users u ON u.id=c.user_id WHERE c.id=:id');
  $stmt->execute([':id'=>$client_id]);
  $client = $stmt->fetch(PDO::FETCH_ASSOC);
  if (!$client) { redirect('index.php?action=admin'); }

$stmt = $pdo->prepare('SELECT * FROM uploads WHERE client_id=:cid ORDER BY uploaded_at DESC');
  $stmt->execute([':cid'=>$client_id]);
  $files = $stmt->fetchAll(PDO::FETCH_ASSOC);

$list = function(array $items, string $kind) {
    $html = "<ul class='files' style='display:block'>"; $found = false;
    foreach ($items as $f) {
      if ($f['kind'] !== $kind) continue; $found = true;
      $url = 'uploads/' . (int)$f['client_id'] . '/' . ($kind==='asset'?'assets':'content') . '/' . rawurlencode($f['filename']);
      $html .= "<li><a href='".h($url)."' target='_blank'>".h($f['original_name'])."</a> <span class='muted'>(".h($f['uploaded_at']).")</span></li>";
    }
    if (!$found) $html .= "<li class='muted'>No files</li>"; return $html . "</ul>";
  };

$body  = "<div class='wrap'><div class='topbar'><img src='branding/logo.png' alt='Logo' style='height:40px;margin-right:12px;'><h1>Files • ".h($client['company'])."</h1><div class='spacer'></div><a class='link' href='index.php?action=admin'>Back</a></div>";
  $body .= '<section class="card"><h2>Brand Assets</h2>'.$list($files,'asset').'</section>';
  $body .= '<section class="card"><h2>Written Content</h2>'.$list($files,'content').'</section></div>';
  echo layout('Admin Files', $body);
}

function route_client_dashboard(PDO $pdo) {
  $user = current_user();
  $stmt = $pdo->prepare('SELECT * FROM clients WHERE user_id=:u');
  $stmt->execute([':u'=>$user['id']]);
  $client = $stmt->fetch(PDO::FETCH_ASSOC);
  if (!$client) { echo layout('Error', '<p class="text-red-600">Client record missing.</p>'); return; }
  $assets = list_uploads($pdo, (int)$client['id'], 'asset');
  $contents = list_uploads($pdo, (int)$client['id'], 'content');
  echo layout('Client Portal', view_client_dashboard($client, $assets, $contents));
}

function route_save_brief(PDO $pdo) {
  if ($_SERVER['REQUEST_METHOD'] !== 'POST') { http_response_code(405); exit; }
  check_csrf();
  $user = current_user();
  $stmt = $pdo->prepare('SELECT id FROM clients WHERE user_id=:u');
  $stmt->execute([':u'=>$user['id']]);
  $client_id = (int)$stmt->fetchColumn();
  $brief = trim($_POST['brief'] ?? '');
  $pdo->prepare('UPDATE clients SET brief_text=:b WHERE id=:id')->execute([':b'=>$brief, ':id'=>$client_id]);
  flash('Brief saved', 'success');
  redirect('index.php?action=client#brief');
}

function route_upload(PDO $pdo) {
  if ($_SERVER['REQUEST_METHOD'] !== 'POST') { http_response_code(405); exit; }
  check_csrf();
  $user = current_user();
  $type = ($_POST['type'] ?? '') === 'content' ? 'content' : 'asset';
  $stmt = $pdo->prepare('SELECT id FROM clients WHERE user_id=:u');
  $stmt->execute([':u'=>$user['id']]);
  $client_id = (int)$stmt->fetchColumn();
  if (!isset($_FILES['files'])) { flash('No files uploaded', 'error'); redirect('index.php?action=client#'.$type); }

global $ALLOWED_ASSET_MIMES, $ALLOWED_CONTENT_MIMES;
  $allow = $type === 'asset' ? $ALLOWED_ASSET_MIMES : $ALLOWED_CONTENT_MIMES;

$count = count($_FILES['files']['name']); $saved = 0; $errors = [];
  for ($i=0; $i<$count; $i++) {
    $orig = $_FILES['files']['name'][$i]; $tmp = $_FILES['files']['tmp_name'][$i];
    $err = $_FILES['files']['error'][$i]; $size = $_FILES['files']['size'][$i];
    if ($err !== UPLOAD_ERR_OK) { $errors[] = "$orig: upload error"; continue; }
    if ($size > MAX_UPLOAD_BYTES) { $errors[] = "$orig: too large"; continue; }
    $finfo = finfo_open(FILEINFO_MIME_TYPE); $mime = finfo_file($finfo, $tmp) ?: 'application/octet-stream'; finfo_close($finfo);
    if (!in_array($mime, $allow, true)) { $errors[] = "$orig: disallowed type ($mime)"; continue; }
    $safeName = uniqid('', true) . '_' . preg_replace('/[^A-Za-z0-9._-]/', '_', $orig);
    $destDir = client_dir($client_id, $type === 'asset' ? 'assets' : 'content'); ensure_dir($destDir);
    $dest = $destDir . '/' . $safeName;
    if (!move_uploaded_file($tmp, $dest)) { $errors[] = "$orig: failed to save"; continue; }
    $stmt = $pdo->prepare('INSERT INTO uploads (client_id, kind, filename, original_name) VALUES (:cid,:k,:f,:o)');
    $stmt->execute([':cid'=>$client_id, ':k'=>$type, ':f'=>$safeName, ':o'=>$orig]);
    $saved++;
  }
  if ($saved) flash("$saved file(s) uploaded", 'success');
  if ($errors) flash(implode(' | ', $errors), 'error');
  redirect('index.php?action=client#' . $type);
}

// ======== VIEWS ========
function view_login(?string $error=null): string {
  $flash = consume_flash();
  return html_header('Login') . "
  <div class='wrap'>
    <div class='topbar'>
      <img src='branding/logo.png' alt='Pulsehost Logo' style='height:40px;margin-right:12px;'>
      <h1>Pulsehost Client Portal</h1>
      <div class='spacer'></div>
    </div>
    ".($flash?flash_html($flash):'')."
    ".($error?"<p class='f error'>$error</p>":'')."
    <section class='card'>
      <h2>Client Portal</h2>
      <form method='post' action='index.php?action=login'>".csrf_field()."
        <label>Email<br><input type='email' name='email' required></label>
        <label>Password<br><input type='password' name='password' required></label>
        <button type='submit'>Sign in</button>
      </form>
    </section>
  </div>
  " . html_footer();
}

function view_admin_dashboard(array $clients, array $uploads): string {
  $flash = consume_flash();
  $rows = '';
  foreach ($clients as $c) {
    $cid = (int)$c['id'];
    $rows .= "<tr><td>".h($c['company'])."</td><td>".h($c['name'])."</td><td>".h($c['email'])."</td><td>".h($c['created_at'])."</td><td>
      <form method='post' action='index.php?action=reset_client_pw' style='display:inline'>".csrf_field()."<input type='hidden' name='client_id' value='$cid'><button>Reset PW</button></form>
      <a class='btn' href='index.php?action=admin_files&client_id=$cid'>View Files</a>
    </td></tr>";
  }

$uploadRows = '';
  foreach ($uploads as $u) {
    $url = 'uploads/' . (int)$u['client_id'] . '/' . ($u['kind']==='asset'?'assets':'content') . '/' . rawurlencode($u['filename']);
    $uploadRows .= "<tr><td>".h($u['company'])."</td><td>".h($u['kind'])."</td><td><a href='".h($url)."' target='_blank'>".h($u['original_name'])."</a></td><td>".h($u['uploaded_at'])."</td></tr>";
  }

return html_header('Admin') . "
  <div class='wrap'>
    <div class='topbar'>
      <img src='branding/logo.png' alt='Pulsehost Logo' style='height:40px;margin-right:12px;'>
      <h1>Pulsehost Admin Dashboard</h1>
      <div class='spacer'></div>
      <a href='index.php?action=logout' class='link'>Sign out</a>
    </div>
    ".($flash?flash_html($flash):'')."

<section class='card'>
      <h2>Add Client</h2>
      <form method='post' action='index.php?action=create_client'>".csrf_field()."
        <div class='grid'>
          <label>Client name<input type='text' name='name' required></label>
          <label>Client email<input type='email' name='email' required></label>
          <label>Company<input type='text' name='company' required></label>
        </div>
        <button type='submit'>Create</button>
      </form>
    </section>

<section class='card'>
      <h2>Clients</h2>
      <div class='tablewrap'><table><thead><tr><th>Company</th><th>Contact</th><th>Email</th><th>Created</th><th>Actions</th></tr></thead><tbody>$rows</tbody></table></div>
    </section>

<section class='card'>
      <h2>Recent Uploads</h2>
      <div class='tablewrap'><table><thead><tr><th>Company</th><th>Type</th><th>File</th><th>Uploaded</th></tr></thead><tbody>$uploadRows</tbody></table></div>
    </section>
  </div>
  " . html_footer();
}

function view_client_dashboard(array $client, array $assets, array $contents): string {
  $flash = consume_flash();
  $assetList = render_upload_list($assets);
  $contentList = render_upload_list($contents);
  return html_header('Client Portal') . "
  <div class='wrap'>
    <div class='topbar'>
      <img src='branding/logo.png' alt='Pulsehost Logo' style='height:40px;margin-right:12px;'>
      <h1>".h($client['company'])." Portal</h1>
      <div class='spacer'></div>
      <a href='index.php?action=logout' class='link'>Sign out</a>
    </div>
    ".($flash?flash_html($flash):'')."

<section class='card' id='brief'>
      <h2>Project Brief</h2>
      <form method='post' action='index.php?action=save_brief'>".csrf_field()."
        <textarea name='brief' rows='10' placeholder='Goals, audience, style, pages, competitors, references...'>".h($client['brief_text'] ?? '')."</textarea>
        <div class='hint'>Markdown supported for basic formatting.</div>
        <button type='submit'>Save Brief</button>
      </form>
    </section>

<section class='card' id='asset'>
      <h2>Brand Assets</h2>
      <form method='post' action='index.php?action=upload' enctype='multipart/form-data'>".csrf_field()."
        <input type='hidden' name='type' value='asset'>
        <input type='file' name='files[]' multiple required>
        <div class='hint'>Allowed: images (PNG/JPG/GIF/SVG/WebP), PDF, ZIP, PSD/AI/PostScript. Max 20MB/file.</div>
        <button>Upload</button>
      </form>
      $assetList
    </section>

<section class='card' id='content'>
      <h2>Written Content</h2>
      <form method='post' action='index.php?action=upload' enctype='multipart/form-data'>".csrf_field()."
        <input type='hidden' name='type' value='content'>
        <input type='file' name='files[]' multiple required>
        <div class='hint'>Allowed: TXT, MD, DOC/DOCX, ODT, PDF. Max 20MB/file.</div>
        <button>Upload</button>
      </form>
      $contentList
    </section>
  </div>
  " . html_footer();
}

function render_upload_list(array $files): string {
  if (!$files) return "<div class='empty'>No files yet.</div>";
  $out = "<ul class='files'>";
  foreach ($files as $f) {
    $id = (int)$f['id'];
    $url = 'uploads/' . (int)$f['client_id'] . '/' . ($f['kind']==='asset'?'assets':'content') . '/' . rawurlencode($f['filename']);
    $out .= "<li><a href='".h($url)."' target='_blank'>".h($f['original_name'])."</a><span class='muted'> (".h($f['uploaded_at']).")</span>
      <form method='post' action='index.php?action=delete_upload' onsubmit=\"return confirm('Delete this file?');\" style='display:inline'>
        ".csrf_field()."
        <input type='hidden' name='upload_id' value='$id'>
        <button class='link danger'>Delete</button>
      </form>
    </li>";
  }
  $out .= '</ul>';
  return $out;
}

// ======== DB & STORAGE ========
function db(): PDO {
  if (DB_DRIVER === 'mysql') {
    $dsn = 'mysql:host=' . MYSQL_HOST . ';dbname=' . MYSQL_DB . ';charset=utf8mb4';
    $pdo = new PDO($dsn, MYSQL_USER, MYSQL_PASS, [
      PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
      PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
    ]);
    return $pdo;
  }
  $dsn = 'sqlite:' . DB_FILE; $pdo = new PDO($dsn); $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); return $pdo;
}

function maybe_migrate(PDO $pdo): void { if (DB_DRIVER === 'mysql') { maybe_migrate_mysql($pdo); } else { maybe_migrate_sqlite($pdo); } }

function maybe_migrate_sqlite(PDO $pdo): void {
  $pdo->exec('CREATE TABLE IF NOT EXISTS users (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    name TEXT NOT NULL,
    email TEXT UNIQUE NOT NULL,
    password_hash TEXT NOT NULL,
    role TEXT NOT NULL CHECK(role IN ("admin","client"))
  )');
  $pdo->exec('CREATE TABLE IF NOT EXISTS clients (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    user_id INTEGER NOT NULL,
    company TEXT NOT NULL,
    brief_text TEXT NOT NULL DEFAULT "",
    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
    FOREIGN KEY(user_id) REFERENCES users(id) ON DELETE CASCADE
  )');
  $pdo->exec('CREATE TABLE IF NOT EXISTS uploads (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    client_id INTEGER NOT NULL,
    kind TEXT NOT NULL CHECK(kind IN ("asset","content")),
    filename TEXT NOT NULL,
    original_name TEXT NOT NULL,
    uploaded_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
    FOREIGN KEY(client_id) REFERENCES clients(id) ON DELETE CASCADE
  )');
}

function maybe_migrate_mysql(PDO $pdo): void {
  $pdo->exec('CREATE TABLE IF NOT EXISTS users (
    id INT AUTO_INCREMENT PRIMARY KEY,
    name VARCHAR(255) NOT NULL,
    email VARCHAR(255) NOT NULL UNIQUE,
    password_hash VARCHAR(255) NOT NULL,
    role ENUM("admin","client") NOT NULL
  ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4');

$pdo->exec('CREATE TABLE IF NOT EXISTS clients (
    id INT AUTO_INCREMENT PRIMARY KEY,
    user_id INT NOT NULL,
    company VARCHAR(255) NOT NULL,
    brief_text MEDIUMTEXT NOT NULL,
    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
    CONSTRAINT fk_clients_user FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
  ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4');

$pdo->exec('CREATE TABLE IF NOT EXISTS uploads (
    id INT AUTO_INCREMENT PRIMARY KEY,
    client_id INT NOT NULL,
    kind ENUM("asset","content") NOT NULL,
    filename VARCHAR(255) NOT NULL,
    original_name VARCHAR(255) NOT NULL,
    uploaded_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
    CONSTRAINT fk_uploads_client FOREIGN KEY (client_id) REFERENCES clients(id) ON DELETE CASCADE
  ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4');
}

function maybe_seed_admin(PDO $pdo): void {
  $count = (int)$pdo->query('SELECT COUNT(*) FROM users WHERE role="admin"')->fetchColumn();
  if ($count === 0) {
    $stmt = $pdo->prepare('INSERT INTO users (name,email,password_hash,role) VALUES ("Admin","admin@example.com",:p,"admin")');
    $stmt->execute([':p'=>password_hash('admin123', PASSWORD_DEFAULT)]);
  }
}

// ======== AUTH & HELPERS ========
function current_user(): ?array { return $_SESSION['user'] ?? null; }
function is_admin(): bool { return (current_user()['role'] ?? '') === 'admin'; }
function is_client(): bool { return (current_user()['role'] ?? '') === 'client'; }
function require_admin(): void { if (!is_admin()) redirect('index.php'); }
function require_client(): void { if (!is_client()) redirect('index.php'); }
function redirect(string $url): void { header('Location: ' . $url); exit; }
function h(string $s): string { return htmlspecialchars($s, ENT_QUOTES, 'UTF-8'); }
function generate_password(int $len=12): string { $bytes = random_bytes($len); return substr(strtr(base64_encode($bytes), '+/=', 'xyz'), 0, $len); }
function csrf_field(): string { if (empty($_SESSION['csrf'])) $_SESSION['csrf'] = bin2hex(random_bytes(16)); return '<input type="hidden" name="csrf" value="' . $_SESSION['csrf'] . '">'; }
function check_csrf(): void { if (!isset($_POST['csrf']) || !hash_equals($_SESSION['csrf'] ?? '', $_POST['csrf'])) { http_response_code(400); echo 'Invalid CSRF token'; exit; } }
function flash(string $msg, string $type='info'): void { $_SESSION['flash'][] = [$type,$msg]; }
function consume_flash(): array { $f = $_SESSION['flash'] ?? []; unset($_SESSION['flash']); return $f; }
function flash_html(array $items): string { $out = '<div class="flash">'; foreach ($items as [$t,$m]) { $out .= '<div class="f '.$t.'">'.h($m).'</div>'; } return $out.'</div>'; }

// Wrap a view. Our view_* functions already include html_header/footer,
// so layout just returns the content unchanged.
function layout(string $title, string $content): string {
  return $content;
}

// ======== HTML LAYOUT ========
function html_header(string $pageTitle): string {
  return "<!doctype html><html lang='en'><head><meta charset='utf-8'>
  <meta name='viewport' content='width=device-width, initial-scale=1'>
  <title>".h(APP_NAME).' – '.h($pageTitle)."</title>
  <style>
    :root{--bg:#0f172a;--card:#111827;--muted:#94a3b8;--text:#e5e7eb;--accent:#22d3ee;--danger:#ef4444}
    *{box-sizing:border-box;font-family:system-ui,-apple-system,Segoe UI,Roboto,Inter,Arial}
    body{margin:0;background:linear-gradient(135deg,#0f172a,#111827);color:var(--text)}
    a{color:var(--accent);text-decoration:none}
    .wrap{max-width:980px;margin:30px auto;padding:0 16px}
    .topbar{display:flex;align-items:center;gap:12px;margin-bottom:20px}
    .spacer{flex:1}
    h1{margin:0;font-size:28px}
    h2{margin:0 0 12px;font-size:20px}
    .card{background:rgba(255,255,255,0.04);border:1px solid rgba(255,255,255,0.08);padding:18px;border-radius:16px;margin:14px 0}
    form label{display:block;margin:8px 0;font-size:14px}
    input,textarea,button{width:100%;padding:10px;border-radius:10px;border:1px solid rgba(255,255,255,0.1);background:rgba(255,255,255,0.05);color:var(--text)}
    button{cursor:pointer;background:linear-gradient(90deg,var(--accent),#60a5fa);border:none;font-weight:600}
    .tablewrap{overflow:auto}
    table{width:100%;border-collapse:collapse}
    th,td{padding:10px;border-bottom:1px solid rgba(255,255,255,0.1);text-align:left}
    .grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(220px,1fr));gap:10px}
    .note,.hint{color:var(--muted);font-size:12px;margin-top:6px}
    .flash{margin:10px 0}
    .f{padding:10px;border-radius:10px;margin:6px 0}
    .f.success{background:rgba(34,197,94,0.15);border:1px solid rgba(34,197,94,0.4)}
    .f.error{background:rgba(239,68,68,0.15);border:1px solid rgba(239,68,68,0.4)}
    .f.info{background:rgba(59,130,246,0.15);border:1px solid rgba(59,130,246,0.4)}
    .link{padding:8px 12px;border:1px solid rgba(255,255,255,0.15);border-radius:10px}
    .btn{padding:6px 10px;border:1px solid rgba(255,255,255,0.2);border-radius:8px;margin-left:6px}
    .danger{color:var(--danger)}
    .files{list-style:none;padding:0;margin:10px 0}
    .files li{display:flex;gap:10px;align-items:center;justify-content:space-between;padding:8px 0;border-bottom:1px dashed rgba(255,255,255,0.08)}
    .files form{width:auto;display:inline}
    .muted{color:var(--muted);font-size:12px;margin-left:6px}
    .empty{color:var(--muted);padding:8px 0}
  </style></head><body>";
}
function html_footer(): string { return "<footer style='opacity:.7;font-size:12px;text-align:center;padding:24px'>".h(APP_NAME)." • Powered by Pulsehost</footer></body></html>"; }
?>