+ |
+
+
+
+
+
+
+
+ |
@@ -188,7 +223,7 @@ $pagination = $pagination ?? [
|
+ ">
@@ -348,6 +383,124 @@ $pagination = $pagination ?? [
+
+
errorHandler = new ErrorHandler();
}
public function run()
{
try {
self::$router->resolve();
- } catch (\Exception $e) {
- http_response_code(500);
- if ($_ENV['APP_ENV'] === 'development') {
- echo 'Error';
- echo '' . $e->getMessage() . ' ';
- echo '' . $e->getTraceAsString() . ' ';
- } else {
- echo '500 - Internal Server Error';
- }
+ } catch (\Throwable $e) {
+ // Use centralized error handler
+ $this->errorHandler->handleException($e);
}
}
}
diff --git a/core/Auth.php b/core/Auth.php
index 1f2541e..2a2d770 100644
--- a/core/Auth.php
+++ b/core/Auth.php
@@ -69,5 +69,37 @@ class Auth
exit;
}
}
+
+ /**
+ * Require admin role (redirect with error if not admin)
+ */
+ public static function requireAdmin(): void
+ {
+ // First ensure user is authenticated
+ self::require();
+
+ // Then check for admin role
+ if (!isset($_SESSION['role']) || $_SESSION['role'] !== 'admin') {
+ $_SESSION['error'] = 'Access denied. Admin privileges required.';
+ header('Location: /');
+ exit;
+ }
+ }
+
+ /**
+ * Check if current user is admin
+ */
+ public static function isAdmin(): bool
+ {
+ return isset($_SESSION['role']) && $_SESSION['role'] === 'admin';
+ }
+
+ /**
+ * Get current user's role
+ */
+ public static function role(): ?string
+ {
+ return $_SESSION['role'] ?? null;
+ }
}
diff --git a/core/Database.php b/core/Database.php
index 68abde8..d69380a 100644
--- a/core/Database.php
+++ b/core/Database.php
@@ -18,11 +18,23 @@ class Database
private function connect()
{
- $host = $_ENV['DB_HOST'];
- $port = $_ENV['DB_PORT'];
- $database = $_ENV['DB_DATABASE'];
- $username = $_ENV['DB_USERNAME'];
- $password = $_ENV['DB_PASSWORD'];
+ $host = $_ENV['DB_HOST'] ?? null;
+ $port = $_ENV['DB_PORT'] ?? '3306';
+ $database = $_ENV['DB_DATABASE'] ?? null;
+ $username = $_ENV['DB_USERNAME'] ?? null;
+ $password = $_ENV['DB_PASSWORD'] ?? '';
+
+ // Validate required credentials
+ if (empty($host) || empty($database) || empty($username)) {
+ throw new \Exception(
+ "Database credentials not configured!\n\n" .
+ "Missing in .env file:\n" .
+ (!empty($host) ? "" : "- DB_HOST\n") .
+ (!empty($database) ? "" : "- DB_DATABASE\n") .
+ (!empty($username) ? "" : "- DB_USERNAME\n") .
+ "\nPlease update your .env file with valid database credentials."
+ );
+ }
try {
$dsn = "mysql:host=$host;port=$port;dbname=$database;charset=utf8mb4";
@@ -32,7 +44,7 @@ class Database
PDO::ATTR_EMULATE_PREPARES => false,
]);
} catch (PDOException $e) {
- die("Database connection failed: " . $e->getMessage());
+ throw new \Exception("Database connection failed: " . $e->getMessage());
}
}
diff --git a/database/migrations/015_create_error_logs_table.sql b/database/migrations/015_create_error_logs_table.sql
new file mode 100644
index 0000000..20a7e66
--- /dev/null
+++ b/database/migrations/015_create_error_logs_table.sql
@@ -0,0 +1,51 @@
+-- Create error logs table for debugging and error tracking
+-- This table stores all application errors for analysis and troubleshooting
+
+CREATE TABLE IF NOT EXISTS error_logs (
+ id INT PRIMARY KEY AUTO_INCREMENT,
+ error_id VARCHAR(32) UNIQUE NOT NULL COMMENT 'Unique reference ID for user reporting',
+ error_type VARCHAR(100) NOT NULL COMMENT 'Exception class name',
+ error_message TEXT NOT NULL COMMENT 'Error message',
+ error_file VARCHAR(500) NOT NULL COMMENT 'File where error occurred',
+ error_line INT NOT NULL COMMENT 'Line number where error occurred',
+ stack_trace TEXT COMMENT 'Full stack trace',
+
+ -- Request context
+ request_method VARCHAR(10) COMMENT 'HTTP method (GET, POST, etc)',
+ request_uri VARCHAR(500) COMMENT 'Request URI',
+ request_data TEXT COMMENT 'JSON encoded POST/GET data (sanitized)',
+
+ -- User context
+ user_id INT NULL COMMENT 'User who encountered the error',
+ user_agent TEXT COMMENT 'Browser user agent string',
+ ip_address VARCHAR(45) COMMENT 'IP address (IPv4 or IPv6)',
+ session_data TEXT COMMENT 'Session data (sanitized, no passwords)',
+
+ -- System context
+ php_version VARCHAR(20) COMMENT 'PHP version at time of error',
+ memory_usage BIGINT COMMENT 'Memory usage in bytes',
+
+ -- Tracking
+ occurred_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP COMMENT 'First occurrence timestamp',
+ occurrences INT DEFAULT 1 COMMENT 'Number of times this error occurred',
+ last_occurred_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT 'Last occurrence timestamp',
+
+ -- Management
+ is_resolved BOOLEAN DEFAULT FALSE COMMENT 'Admin marked as resolved',
+ resolved_at TIMESTAMP NULL COMMENT 'When marked as resolved',
+ resolved_by INT NULL COMMENT 'Admin user who resolved it',
+ notes TEXT COMMENT 'Admin notes about resolution',
+
+ -- Foreign keys
+ FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE SET NULL,
+ FOREIGN KEY (resolved_by) REFERENCES users(id) ON DELETE SET NULL,
+
+ -- Indexes for performance
+ KEY idx_error_id (error_id),
+ KEY idx_error_type (error_type),
+ KEY idx_occurred_at (occurred_at),
+ KEY idx_user_id (user_id),
+ KEY idx_is_resolved (is_resolved),
+ KEY idx_occurrences (occurrences)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
diff --git a/database/migrations/README.md b/database/migrations/README.md
index a43436b..ea3da12 100644
--- a/database/migrations/README.md
+++ b/database/migrations/README.md
@@ -26,6 +26,7 @@ If upgrading from v1.0.0, these incremental migrations will be applied:
- `012_link_remember_tokens_to_sessions.sql` - Remember token session linking
- `013_create_user_notifications_table.sql` - User notifications table
- `014_add_captcha_settings.sql` - CAPTCHA settings (v2, v3, Turnstile)
+- `015_create_error_logs_table.sql` - Error logging and debugging system
**Upgrade via:** Web updater at `/install/update`
diff --git a/env.example.txt b/env.example.txt
index eec0fca..32b77ec 100644
--- a/env.example.txt
+++ b/env.example.txt
@@ -1,4 +1,6 @@
-# Application
+# Application Environment
+# APP_ENV: 'development' (shows detailed debug pages) or 'production' (shows clean error pages)
+# IMPORTANT: Set to 'production' before deploying to hide sensitive debugging information!
APP_ENV=development
# Security - Encryption key (auto-generated during migration if not set)
diff --git a/public/index.php b/public/index.php
index 2db3c41..ef04fe5 100644
--- a/public/index.php
+++ b/public/index.php
@@ -5,12 +5,32 @@ require_once __DIR__ . '/../vendor/autoload.php';
use Core\Application;
use Core\Router;
use Dotenv\Dotenv;
+use App\Services\ErrorHandler;
define('PATH_ROOT', __DIR__ . '/../');
-// Load environment variables
+// Register global error handlers FIRST (before anything else can fail)
+ErrorHandler::register();
+
+// Load environment variables (using safeLoad to not throw if missing)
$dotenv = Dotenv::createImmutable(__DIR__ . '/..');
-$dotenv->load();
+try {
+ $dotenv->load();
+} catch (\Throwable $e) {
+ // If .env is missing, create a minimal one or use defaults
+ if (!file_exists(__DIR__ . '/../.env')) {
+ // Show helpful error about missing .env file
+ throw new \Exception(
+ ".env file not found! Please copy env.example.txt to .env and configure your settings.\n\n" .
+ "Quick fix:\n" .
+ "1. Copy env.example.txt to .env\n" .
+ "2. Update database credentials in .env\n" .
+ "3. Set APP_ENV=development or production\n\n" .
+ "Original error: " . $e->getMessage()
+ );
+ }
+ throw $e;
+}
// Configure and start session (with database sessions if available)
Core\SessionConfig::configure();
diff --git a/routes/web.php b/routes/web.php
index 0575dcc..492ee35 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -14,6 +14,7 @@ use App\Controllers\ProfileController;
use App\Controllers\UserController;
use App\Controllers\InstallerController;
use App\Controllers\NotificationController;
+use App\Controllers\ErrorLogController;
$router = Application::$router;
@@ -76,6 +77,7 @@ $router->post('/groups/store', [NotificationGroupController::class, 'store']);
$router->get('/groups/edit', [NotificationGroupController::class, 'edit']);
$router->post('/groups/update', [NotificationGroupController::class, 'update']);
$router->get('/groups/delete', [NotificationGroupController::class, 'delete']);
+$router->post('/groups/bulk-delete', [NotificationGroupController::class, 'bulkDelete']);
// Notification Channels
$router->post('/channels/add', [NotificationGroupController::class, 'addChannel']);
@@ -134,4 +136,15 @@ $router->get('/users/edit', [UserController::class, 'edit']);
$router->post('/users/update', [UserController::class, 'update']);
$router->get('/users/delete', [UserController::class, 'delete']);
$router->get('/users/toggle-status', [UserController::class, 'toggleStatus']);
+$router->post('/users/bulk-toggle-status', [UserController::class, 'bulkToggleStatus']);
+$router->post('/users/bulk-delete', [UserController::class, 'bulkDelete']);
+
+// Error Logs (Admin Only)
+$router->get('/errors', [ErrorLogController::class, 'index']);
+$router->get('/errors/{id}', [ErrorLogController::class, 'show']);
+$router->post('/errors/{id}/resolve', [ErrorLogController::class, 'markResolved']);
+$router->post('/errors/{id}/unresolve', [ErrorLogController::class, 'markUnresolved']);
+$router->post('/errors/{id}/delete', [ErrorLogController::class, 'delete']);
+$router->post('/errors/bulk-delete', [ErrorLogController::class, 'bulkDelete']);
+$router->post('/errors/clear-resolved', [ErrorLogController::class, 'clearResolved']);
|