From f30053f15011e42c35980840d80f3db8c3077d15 Mon Sep 17 00:00:00 2001
From: Cedric <cedric.chagnaud@gmail.com>
Date: Thu, 18 Jun 2026 12:33:27 +0200
Subject: [PATCH] Actualiser admin/login.html

---
 admin/login.html | 148 ++++++++++++++++++++++++++---------------------
 1 file changed, 81 insertions(+), 67 deletions(-)
diff --git a/admin/login.html b/admin/login.html
index 3aa8fd6..4f484bb 100644
--- a/admin/login.html
+++ b/admin/login.html
@@ -1,73 +1,87 @@
-<script>
-  const API_URL = '../api.php';
+<!DOCTYPE html>
+<html lang="fr">
+<head>
+    <meta charset="UTF-8">
+    <title>Connexion Backoffice</title>
+    <style>
+        body { font-family: sans-serif; display: flex; justify-content: center; padding-top: 50px; }
+        .login-wrap { border: 1px solid #ccc; padding: 20px; border-radius: 8px; width: 300px; }
+    </style>
+</head>
+<body>
 
-  document.addEventListener('DOMContentLoaded', async () => {
-    const formBlock  = document.getElementById('login-form-block');
-    const blankBlock = document.getElementById('blank-setup-block');
+    <div class="login-wrap">
+        <h2>Backoffice</h2>
 
-    // Vérification de sécurité pour éviter l'erreur "null"
-    if (!formBlock || !blankBlock) {
-        console.error("Erreur : Un des blocs de connexion est introuvable dans le HTML.");
-        return;
-    }
+        <div id="login-form-block" style="display:none;">
+            <input type="password" id="login-pwd" placeholder="Mot de passe">
+            <button onclick="doLogin()">Accéder</button>
+        </div>
 
-    try {
-        const res = await fetch(`${API_URL}?action=check_security_status`);
-        const data = await res.json();
-        
-        if (data.is_blank === true) {
-            formBlock.style.display  = 'none';
-            blankBlock.style.display = 'block';
-        } else {
-            formBlock.style.display  = 'block';
-            blankBlock.style.display = 'none';
+        <div id="blank-setup-block" style="display:none;">
+            <p>Système non initialisé.</p>
+            <button onclick="doLoginBlank()">Se connecter sans mot de passe</button>
+        </div>
+    </div>
+
+    <script>
+        const API_URL = '../api.php';
+
+        document.addEventListener('DOMContentLoaded', async () => {
+            const formBlock  = document.getElementById('login-form-block');
+            const blankBlock = document.getElementById('blank-setup-block');
+
+            try {
+                const res = await fetch(`${API_URL}?action=check_security_status`);
+                const data = await res.json();
+                
+                if (data.is_blank === true) {
+                    formBlock.style.display  = 'none';
+                    blankBlock.style.display = 'block';
+                } else {
+                    formBlock.style.display  = 'block';
+                    blankBlock.style.display = 'none';
+                }
+            } catch(e) {
+                console.error("Erreur API :", e);
+                alert("Erreur de connexion au serveur.");
+            }
+        });
+
+        async function doLoginBlank() { await performLogin(""); }
+        async function doLogin() { 
+            const pwd = document.getElementById('login-pwd').value; 
+            await performLogin(pwd); 
         }
-    } catch(e) {
-        console.error("Erreur API :", e);
-    }
-});
 
-  async function doLoginBlank() {
-    await performLogin(""); // Envoie un mot de passe vide
-  }
-
-  async function doLogin() {
-    const pwd = document.getElementById('login-pwd').value;
-    await performLogin(pwd);
-  }
-
-  async function performLogin(pwd) {
-    try {
-      const res = await fetch(`${API_URL}?action=login`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ password: pwd })
-      });
-      
-      const data = await res.json();
-      console.log("Réponse login :", data);
-
-      if (data.success) {
-        localStorage.setItem('token', data.token);
-        
-        // Si blank, on force la création du mot de passe
-        if (data.blank === true) {
-          const newPwd = prompt("Système initialisé. Définissez votre mot de passe (min 4 caractères) :");
-          if (newPwd && newPwd.length >= 4) {
-            await fetch(`${API_URL}?action=setup_admin`, {
-              method: 'POST',
-              headers: { 'Content-Type': 'application/json', 'Authorization': data.token },
-              body: JSON.stringify({ password: newPwd })
-            });
-            alert("Mot de passe enregistré !");
-          }
+        async function performLogin(pwd) {
+            try {
+                const res = await fetch(`${API_URL}?action=login`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ password: pwd })
+                });
+                const data = await res.json();
+                if (data.success) {
+                    localStorage.setItem('token', data.token);
+                    if (data.blank === true) {
+                        const newPwd = prompt("Définissez votre mot de passe (min 4 caractères) :");
+                        if (newPwd && newPwd.length >= 4) {
+                            await fetch(`${API_URL}?action=setup_admin`, {
+                                method: 'POST',
+                                headers: { 'Content-Type': 'application/json', 'Authorization': data.token },
+                                body: JSON.stringify({ password: newPwd })
+                            });
+                        }
+                    }
+                    window.location.href = 'dashboard.html';
+                } else {
+                    alert("Erreur : " + (data.error || "Mot de passe incorrect"));
+                }
+            } catch(e) {
+                alert("Erreur technique : " + e.message);
+            }
         }
-        window.location.href = 'dashboard.html';
-      } else {
-        alert("Erreur : " + (data.error || "Mot de passe incorrect"));
-      }
-    } catch(e) {
-      alert("Erreur technique : " + e.message);
-    }
-  }
-</script>
\ No newline at end of file
+    </script>
+</body>
+</html>
\ No newline at end of file
