baseline

pages/admin/users/theme().php

@@ -0,0 +1,66 @@
+<?php
+
+use MintyPHP\Http\Request;
+use MintyPHP\Router;
+use MintyPHP\Session;
+use MintyPHP\Service\UserService;
+use MintyPHP\Support\Guard;
+
+Guard::requireLogin();
+
+if (($_SERVER['REQUEST_METHOD'] ?? 'GET') !== 'POST') {
+    Router::redirect('admin');
+    return;
+}
+
+if (!Session::checkCsrfToken()) {
+    if (Request::wantsJson()) {
+        http_response_code(400);
+        Router::json(['ok' => false, 'error' => 'csrf']);
+        return;
+    }
+    Router::redirect('admin');
+    return;
+}
+
+$userId = (int) ($_SESSION['user']['id'] ?? 0);
+if ($userId <= 0) {
+    http_response_code(401);
+    if (Request::wantsJson()) {
+        Router::json(['ok' => false, 'error' => 'unauthorized']);
+        return;
+    }
+    Router::redirect('login');
+    return;
+}
+
+$theme = trim((string) ($_POST['theme'] ?? ''));
+if (!in_array($theme, ['light', 'dark'], true)) {
+    http_response_code(400);
+    if (Request::wantsJson()) {
+        Router::json(['ok' => false, 'error' => 'invalid_theme']);
+        return;
+    }
+    Router::redirect('admin');
+    return;
+}
+
+$updated = UserService::setTheme($userId, $theme);
+if (!$updated) {
+    http_response_code(500);
+    if (Request::wantsJson()) {
+        Router::json(['ok' => false, 'error' => 'update_failed']);
+        return;
+    }
+    Router::redirect('admin');
+    return;
+}
+
+$_SESSION['user']['theme'] = $theme;
+
+if (Request::wantsJson()) {
+    Router::json(['ok' => true, 'theme' => $theme]);
+    return;
+}
+
+Router::redirect('admin');