alfa version; uploaded into test server (coder)

1 files changed, 50 insertions, 63 deletions

diff --git a/public/app/routes/backend.php b/public/app/routes/backend.php
index 475f52b..ed02295 100644
--- a/public/app/routes/backend.php
+++ b/public/app/routes/backend.php
@@ -5,17 +5,25 @@ use app\controllers\admin\Course_admin;
 use app\models\admin\Privilege_model;
 use app\extends\Cache_service;
 
+
+/** admin pages
+ * -----------------------------------------------------------------------------
+ * NOTE:
+ * All adminitration routes MUST INCLUDE an Auth::allowRoles() check
+ */
+
 // admin panel
-// ---
-Route::add('/admin', function () {
+////////////////////////////////////////////////////////////////////////////////
+
+Route::add('/admin', function () {      // admin panel
     Auth::allowRoles([1, 2, 3]);        // allow few admin-panel roles
     Render::view('admin/skeleton', [
         'title' => 'Διαχείριση Classroom',
         'action' => 'panel',
     ]);
 });
-Route::add('/admin/panel', function () {
-    Auth::allowRoles([1, 2, 3]);        // allow few admin-panel roles
+Route::add('/admin/panel', function () {    // admin panel #2
+    Auth::allowRoles([1, 2, 3]);
     Render::view('admin/skeleton', [
         'title' => 'Διαχείριση Classroom',
         'action' => 'panel',
@@ -24,8 +32,9 @@ Route::add('/admin/panel', function () {
 
 
 // admin lessons
-// ---
-Route::add('/admin/lessons', function () {
+////////////////////////////////////////////////////////////////////////////////
+
+Route::add('/admin/lessons', function () {      // request admin-lessons page
     Auth::allowRoles([1, 2, 3]);        // allow few admin-panel roles
     Render::view('admin/skeleton', [
         'title' => 'Διαχείριση Μαθημάτων',
@@ -34,12 +43,11 @@ Route::add('/admin/lessons', function () {
 });
 
 
-// admin categories (=courses) /////////////////////////////////////////////////
-// -----------------------------------------------------------------------------
+// admin categories (=courses)
+////////////////////////////////////////////////////////////////////////////////
 
-// manage categories page
-// ---
-Route::add('/admin/categories', function () {
+
+Route::add('/admin/categories', function () {       // manage categories page
     Auth::allowRoles([1, 2, 3]);
     Render::view('admin/skeleton', [
         'title' => 'Διαχείριση Κεφαλαίων',
@@ -48,37 +56,29 @@ Route::add('/admin/categories', function () {
 });
 
 
-// ajax: get all categories (courses; with breadcrumbs)
-// ---
-Route::add('/admin/api/categories', function () {
+
+Route::add('/admin/api/categories', function () {       // ajax: get all courses; with breadcrumbs
     Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
     Course_admin::breadcrumbs();
 });
 
-
-// ajax: add new category (course)
-// ---
-Route::add('/admin/api/categories/add', function () {
-    Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
+Route::add('/admin/api/categories/add', function () {   // ajax: add new category (course)
+    Auth::allowRoles([1, 2, 3]);
     Course_admin::add_course();
 }, 'post');
 
-// ajax: edit category (course)
-// ---
-Route::add('/admin/api/categories/update', function () {
-        Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
-        Course_admin::update_course();
-    },
-    'post'
-);
+Route::add('/admin/api/categories/update', function () {    // ajax: edit category (course)
+    Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
+    Course_admin::update_course();
+},
+'post');
 
 
-// admin privileges ////////////////////////////////////////////////////////////
-// -----------------------------------------------------------------------------
+// admin privileges
+////////////////////////////////////////////////////////////////////////////////
 
-// manage privileges page
-// ---
-Route::add('/admin/privileges', function () {
+
+Route::add('/admin/privileges', function () {       // manage privileges page
     Auth::allowRoles([1, 2, 3]);
     Render::view('admin/skeleton', [
         'title' => 'Διαχείριση Δικαιωμάτων Πρόσβασης',
@@ -88,7 +88,6 @@ Route::add('/admin/privileges', function () {
 
 // ajax: get all privileges (courses; with breadcrumbs)
 // use proxy (cache results); send as json
-// ---
 Route::add('/admin/api/privileges', function () {
     Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
     Render::json( Cache_service::privileges_hierarchy() );
@@ -100,13 +99,12 @@ Route::add('/admin/api/privileges', function () {
 
 
 
-// admin lesson ////////////////////////////////////////////////////////////////
-// -----------------------------------------------------------------------------
+// admin lesson
+////////////////////////////////////////////////////////////////////////////////
 
 
-// new lesson
 // ---
-Route::add('/admin/edit_lesson', function () {
+Route::add('/admin/edit_lesson', function () {      // new lesson form
     Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
     Render::view('admin/skeleton', [
         'title' => 'Νέο Μάθημα',
@@ -114,10 +112,8 @@ Route::add('/admin/edit_lesson', function () {
     ]);
 });
 
-// edit lesson (give lesson-id)
-// ---
-Route::add('/admin/edit_lesson/([0-9]*)', function ($id) {
-    Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
+Route::add('/admin/edit_lesson/([0-9]*)', function ($id) {      // edit lesson form
+    Auth::allowRoles([1, 2, 3]);
     Render::view('admin/skeleton', [
         'title' => 'Επεξεργασία Μαθήματος',
         'action' => 'edit_lesson',
@@ -125,39 +121,35 @@ Route::add('/admin/edit_lesson/([0-9]*)', function ($id) {
     ]);
 });
 
-// ajax: get lesson
-// ---
-Route::add('/admin/api/lesson/([0-9]*)', function ($id) {
+
+Route::add('/admin/api/lesson/([0-9]*)', function ($id) {       // ajax: get lesson
     Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
     Course_admin::get_lesson($id);
 });
 
-// ajax: add lesson
-// ---
-Route::add('/admin/api/lesson/add', function () {
+
+Route::add('/admin/api/lesson/add', function () {           // ajax: add lesson
     Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
     Course_admin::add_lesson();
 }, 'post');
 
-// ajax: update lesson
-// ---
-Route::add('/admin/api/lesson/update', function () {
+
+Route::add('/admin/api/lesson/update', function () {        // ajax: update lesson
     Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
     Course_admin::update_lesson();
 }, 'post');
 
-// ajax: get all lessons
-// ---
-Route::add('/admin/api/lessons', function () {
+
+Route::add('/admin/api/lessons', function () {      // ajax: get all lessons
     Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
     Course_admin::all_lessons();
 });
 
 
-// admin files /////////////////////////////////////////////////////////////////
+// admin files 
 ////////////////////////////////////////////////////////////////////////////////
 
-Route::add('/admin/files', function () {
+Route::add('/admin/files', function () {    // admin-files panel
     Auth::allowRoles([1, 2, 3]);
     Render::view('admin/skeleton', [
         'title' => 'Διαχείριση Μέσων (media)',
@@ -165,10 +157,9 @@ Route::add('/admin/files', function () {
     ]);
 });
 
-// ajax: get lesson
-// ---
-Route::add('/admin/api/files', function () {
-    Auth::allowRoles([1, 2, 3]);    // allow few admin-panel roles
+
+Route::add('/admin/api/files', function () {    // ajax: get lesson
+    Auth::allowRoles([1, 2, 3]);
     Render::json(Course_admin::files());
 });
 
@@ -179,7 +170,3 @@ Route::add('/admin/api/file_upload', function () {
     Render::json(Course_admin::upload_file());
 }, 'post');
 
-
-
-
-