Aggiunto codice

2025-09-10 11:03:25 +02:00
commit d61ef2091b
23 changed files with 2611 additions and 0 deletions
--- a/htdocs/admin/classes.php
+++ b/htdocs/admin/classes.php
@@ -0,0 +1,63 @@
+<?php
+session_start();
+if (!isset($_SESSION['admin'])) { header("Location: login.php"); exit; }
+include("../db.php");
+
+if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['name'])) {
+    $name = $_POST['name'];
+    if (!empty($name)) { $conn->query("INSERT INTO classes (name) VALUES ('$name')"); }
+    header("Location: classes.php"); exit;
+}
+
+if (isset($_GET['delete'])) {
+    $id = intval($_GET['delete']);
+    $conn->query("DELETE FROM classes WHERE id=$id");
+    header("Location: classes.php"); exit;
+}
+?>
+<!DOCTYPE html>
+<html>
+<head>
+    <title>Gestisci Classi</title>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <link rel="stylesheet" href="style.css">
+</head>
+<body>
+  <!-- Navbar -->
+  <div class="navbar">
+    <div class="logo">Admin Dashboard</div>
+    <div class="links">
+      <a href="index.php">Dashboard</a>
+      <a href="logout.php">Logout</a>
+    </div>
+  </div>
+
+  <div class="admin-container">
+    <h1>Gestisci Classi</h1>
+    <a href="index.php" class="back-link">⬅ Torna al Dashboard</a>
+
+    <form method="POST">
+      <input type="text" name="name" placeholder="Nome Classe" required>
+      <button type="submit">Aggiungi</button>
+    </form>
+
+    <table>
+      <tr><th>ID</th><th>Nome</th><th>Azione</th></tr>
+      <?php
+      $res = $conn->query("SELECT * FROM classes ORDER BY name ASC");
+      while($row=$res->fetch_assoc()){
+        echo "<tr>
+                <td>{$row['id']}</td>
+                <td>{$row['name']}</td>
+                <td><a href='classes.php?delete={$row['id']}' class='delete-link'>Elimina</a></td>
+              </tr>";
+      }
+      ?>
+    </table>
+    <p>
+      Nota: Questa pagina si vede meglio da computer desktop. Se sei da computer, puoi ignorare questo messaggio.
+    </p>
+    <p style="text-align: center;">Copyright (C) 2025 EmmeV. All rights reserved.</p>
+  </div>
+</body>
+</html>
--- a/htdocs/admin/composer.json
+++ b/htdocs/admin/composer.json
@@ -0,0 +1,5 @@
+{
+    "require": {
+        "jumbojett/openid-connect-php": "^1.0"
+    }
+}
--- a/htdocs/admin/composer.lock
+++ b/htdocs/admin/composer.lock
@@ -0,0 +1,288 @@
+{
+    "_readme": [
+        "This file locks the dependencies of your project to a known state",
+        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
+        "This file is @generated automatically"
+    ],
+    "content-hash": "c6deed93995bf2c39b35a421c16edbdd",
+    "packages": [
+        {
+            "name": "jumbojett/openid-connect-php",
+            "version": "v1.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/jumbojett/OpenID-Connect-PHP.git",
+                "reference": "f327e7eb0626d55ddb6abc7b7c9e6ad3af4e5d51"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/jumbojett/OpenID-Connect-PHP/zipball/f327e7eb0626d55ddb6abc7b7c9e6ad3af4e5d51",
+                "reference": "f327e7eb0626d55ddb6abc7b7c9e6ad3af4e5d51",
+                "shasum": ""
+            },
+            "require": {
+                "ext-curl": "*",
+                "ext-json": "*",
+                "php": ">=7.0",
+                "phpseclib/phpseclib": "^3.0.7"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "<10",
+                "roave/security-advisories": "dev-latest",
+                "yoast/phpunit-polyfills": "^2.0"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "Apache-2.0"
+            ],
+            "description": "Bare-bones OpenID Connect client",
+            "support": {
+                "issues": "https://github.com/jumbojett/OpenID-Connect-PHP/issues",
+                "source": "https://github.com/jumbojett/OpenID-Connect-PHP/tree/v1.0.2"
+            },
+            "time": "2024-09-13T07:08:11+00:00"
+        },
+        {
+            "name": "paragonie/constant_time_encoding",
+            "version": "v3.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/paragonie/constant_time_encoding.git",
+                "reference": "df1e7fde177501eee2037dd159cf04f5f301a512"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/paragonie/constant_time_encoding/zipball/df1e7fde177501eee2037dd159cf04f5f301a512",
+                "reference": "df1e7fde177501eee2037dd159cf04f5f301a512",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9",
+                "vimeo/psalm": "^4|^5"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "ParagonIE\\ConstantTime\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Paragon Initiative Enterprises",
+                    "email": "security@paragonie.com",
+                    "homepage": "https://paragonie.com",
+                    "role": "Maintainer"
+                },
+                {
+                    "name": "Steve 'Sc00bz' Thomas",
+                    "email": "steve@tobtu.com",
+                    "homepage": "https://www.tobtu.com",
+                    "role": "Original Developer"
+                }
+            ],
+            "description": "Constant-time Implementations of RFC 4648 Encoding (Base-64, Base-32, Base-16)",
+            "keywords": [
+                "base16",
+                "base32",
+                "base32_decode",
+                "base32_encode",
+                "base64",
+                "base64_decode",
+                "base64_encode",
+                "bin2hex",
+                "encoding",
+                "hex",
+                "hex2bin",
+                "rfc4648"
+            ],
+            "support": {
+                "email": "info@paragonie.com",
+                "issues": "https://github.com/paragonie/constant_time_encoding/issues",
+                "source": "https://github.com/paragonie/constant_time_encoding"
+            },
+            "time": "2024-05-08T12:36:18+00:00"
+        },
+        {
+            "name": "paragonie/random_compat",
+            "version": "v9.99.100",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/paragonie/random_compat.git",
+                "reference": "996434e5492cb4c3edcb9168db6fbb1359ef965a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/paragonie/random_compat/zipball/996434e5492cb4c3edcb9168db6fbb1359ef965a",
+                "reference": "996434e5492cb4c3edcb9168db6fbb1359ef965a",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">= 7"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "4.*|5.*",
+                "vimeo/psalm": "^1"
+            },
+            "suggest": {
+                "ext-libsodium": "Provides a modern crypto API that can be used to generate random bytes."
+            },
+            "type": "library",
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Paragon Initiative Enterprises",
+                    "email": "security@paragonie.com",
+                    "homepage": "https://paragonie.com"
+                }
+            ],
+            "description": "PHP 5.x polyfill for random_bytes() and random_int() from PHP 7",
+            "keywords": [
+                "csprng",
+                "polyfill",
+                "pseudorandom",
+                "random"
+            ],
+            "support": {
+                "email": "info@paragonie.com",
+                "issues": "https://github.com/paragonie/random_compat/issues",
+                "source": "https://github.com/paragonie/random_compat"
+            },
+            "time": "2020-10-15T08:29:30+00:00"
+        },
+        {
+            "name": "phpseclib/phpseclib",
+            "version": "3.0.46",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phpseclib/phpseclib.git",
+                "reference": "56483a7de62a6c2a6635e42e93b8a9e25d4f0ec6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/56483a7de62a6c2a6635e42e93b8a9e25d4f0ec6",
+                "reference": "56483a7de62a6c2a6635e42e93b8a9e25d4f0ec6",
+                "shasum": ""
+            },
+            "require": {
+                "paragonie/constant_time_encoding": "^1|^2|^3",
+                "paragonie/random_compat": "^1.4|^2.0|^9.99.99",
+                "php": ">=5.6.1"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "*"
+            },
+            "suggest": {
+                "ext-dom": "Install the DOM extension to load XML formatted public keys.",
+                "ext-gmp": "Install the GMP (GNU Multiple Precision) extension in order to speed up arbitrary precision integer arithmetic operations.",
+                "ext-libsodium": "SSH2/SFTP can make use of some algorithms provided by the libsodium-php extension.",
+                "ext-mcrypt": "Install the Mcrypt extension in order to speed up a few other cryptographic operations.",
+                "ext-openssl": "Install the OpenSSL extension in order to speed up a wide variety of cryptographic operations."
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "phpseclib/bootstrap.php"
+                ],
+                "psr-4": {
+                    "phpseclib3\\": "phpseclib/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Jim Wigginton",
+                    "email": "terrafrost@php.net",
+                    "role": "Lead Developer"
+                },
+                {
+                    "name": "Patrick Monnerat",
+                    "email": "pm@datasphere.ch",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Andreas Fischer",
+                    "email": "bantu@phpbb.com",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Hans-Jürgen Petrich",
+                    "email": "petrich@tronic-media.com",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Graham Campbell",
+                    "email": "graham@alt-three.com",
+                    "role": "Developer"
+                }
+            ],
+            "description": "PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.",
+            "homepage": "http://phpseclib.sourceforge.net",
+            "keywords": [
+                "BigInteger",
+                "aes",
+                "asn.1",
+                "asn1",
+                "blowfish",
+                "crypto",
+                "cryptography",
+                "encryption",
+                "rsa",
+                "security",
+                "sftp",
+                "signature",
+                "signing",
+                "ssh",
+                "twofish",
+                "x.509",
+                "x509"
+            ],
+            "support": {
+                "issues": "https://github.com/phpseclib/phpseclib/issues",
+                "source": "https://github.com/phpseclib/phpseclib/tree/3.0.46"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/terrafrost",
+                    "type": "github"
+                },
+                {
+                    "url": "https://www.patreon.com/phpseclib",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/phpseclib/phpseclib",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-06-26T16:29:55+00:00"
+        }
+    ],
+    "packages-dev": [],
+    "aliases": [],
+    "minimum-stability": "stable",
+    "stability-flags": [],
+    "prefer-stable": false,
+    "prefer-lowest": false,
+    "platform": [],
+    "platform-dev": [],
+    "plugin-api-version": "2.3.0"
+}
--- a/htdocs/admin/index.php
+++ b/htdocs/admin/index.php
@@ -0,0 +1,41 @@
+<?php
+session_start();
+if (!isset($_SESSION['admin'])) {
+    header("Location: login.php");
+    exit;
+}
+?>
+<!DOCTYPE html>
+<html>
+<head>
+    <title>Admin Dashboard</title>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <link rel="stylesheet" href="style.css">
+</head>
+<body>
+  <!-- Navbar -->
+  <div class="navbar">
+    <div class="logo">Admin Dashboard</div>
+    <div class="links">
+      <a href="/">Torna al sito</a>
+      <a href="logout.php">Logout</a>
+    </div>
+  </div>
+
+  <!-- Contenuto Dashboard -->
+  <div class="dashboard">
+    <h1>Benvenuto nel pannello di amministrazione!</h1>
+    <p>
+      <a href="classes.php">Gestisci Classi</a>
+      <a href="subjects.php">Gestisci Materie</a>
+      <a href="timetable.php">Gestisci Orario</a>
+      <!--<a href="logout.php">Logout</a>-->
+    </p>
+    <p>
+      Nota: Questa pagina si vede meglio da computer desktop. Se sei da computer, puoi ignorare questo messaggio.
+    </p>
+    <p style="text-align: center;">Copyright (C) 2025 EmmeV. All rights reserved.</p>
+  </div>
+</body>
+</html>
+
--- a/htdocs/admin/login.php
+++ b/htdocs/admin/login.php
@@ -0,0 +1,18 @@
+<?php
+require 'vendor/autoload.php';
+use Jumbojett\OpenIDConnectClient;
+session_start();
+// Configura il client Keycloak
+$oidc = new OpenIDConnectClient(
+    'https://<KEYCLOAK_URL>/realms/<REALM>/',
+    '<CLIENT_ID>',
+    '<CLIENT_SECRET>' // opzionale se public client
+);
+// Redirect post-login
+$oidc->setRedirectURL('https://<APP_DOMAIN>/admin/login.php');
+
+$oidc->authenticate();
+$userinfo = $oidc->getVerifiedClaims();
+$_SESSION['admin'] = $userinfo->preferred_username;
+header("Location: index.php");
+exit;
--- a/htdocs/admin/login.php.backup
+++ b/htdocs/admin/login.php.backup
@@ -0,0 +1,50 @@
+<?php
+session_start();
+include("../db.php");
+
+if ($_SERVER["REQUEST_METHOD"] == "POST") {
+    $username = $_POST['username'];
+    $password = $_POST['password'];
+    $stmt = $conn->prepare("SELECT * FROM admin WHERE username = ?");
+    $stmt->bind_param("s", $username);
+    $stmt->execute();
+    $res = $stmt->get_result();
+    if ($row = $res->fetch_assoc()) {
+        if (password_verify($password, $row['password'])) {
+            $_SESSION['admin'] = $row['username'];
+            header("Location: index.php");
+            exit;
+        }
+    }
+    $error = "Credenziali non valide";
+}
+?>
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Login Admin</title>
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <link rel="stylesheet" href="style.css">
+</head>
+<body>
+
+  <div class="navbar">
+    <div class="logo">Admin Dashboard</div>
+    <div class="links">
+      <a href="/">Torna al sito</a>
+    </div>
+  </div>
+
+  <!-- Container login -->
+  <div class="login-container">
+    <h1>Login Admin</h1>
+    <?php if(isset($error)) echo "<div class='error'>$error</div>"; ?>
+    <form method="post">
+      <input type="text" name="username" placeholder="Username" required><br>
+      <input type="password" name="password" placeholder="Password" required><br>
+      <button type="submit">Login</button>
+    </form>
+  </div>
+<p style="text-align: center;">Copyright (C) 2025 EmmeV. All rights reserved.</p>
+</body>
+</html>
--- a/htdocs/admin/logout.php
+++ b/htdocs/admin/logout.php
@@ -0,0 +1,5 @@
+<?php
+session_start();
+session_destroy();
+header('Location: https://<KEYCLOAK_URL>/realms/master/protocol/openid-connect/logout?post_logout_redirect_uri=https://<APP_DOMAIN>&client_id=<CLIENT_ID>');
+exit;
--- a/htdocs/admin/logout.php.backup
+++ b/htdocs/admin/logout.php.backup
@@ -0,0 +1,5 @@
+<?php
+session_start();
+session_destroy();
+header("Location: /index.php");
+?>
--- a/htdocs/admin/style.css
+++ b/htdocs/admin/style.css
@@ -0,0 +1,482 @@
+/* Body e font */
+body {
+  font-family: Arial, sans-serif;
+  background-color: #f0f2f5;
+  color: #333;
+  margin: 0;
+  padding: 20px;
+}
+
+/* Navbar */
+.navbar {
+  background-color: #2c3e50;
+  padding: 10px 20px;
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  color: #fff;
+  border-radius: 0 0 10px 10px;
+  margin-bottom: 20px;
+  box-shadow: 0 2px 5px rgba(0,0,0,0.1);
+}
+
+.navbar a {
+  color: #fff;
+  text-decoration: none;
+  margin-left: 15px;
+  font-weight: bold;
+  transition: color 0.2s;
+}
+
+.navbar a:hover {
+  color: #f39c12;
+}
+
+.navbar .logo {
+  font-size: 1.3em;
+  font-weight: bold;
+}
+
+/* Dashboard container */
+.dashboard {
+  max-width: 800px;
+  margin: 0 auto;
+  text-align: center;
+  background: #fff;
+  padding: 30px;
+  border-radius: 10px;
+  box-shadow: 0 2px 10px rgba(0,0,0,0.1);
+}
+
+.dashboard h1 {
+  margin-bottom: 20px;
+  color: #2c3e50;
+}
+
+.dashboard a {
+  display: inline-block;
+  margin: 10px;
+  padding: 12px 25px;
+  background-color: #1f618d;
+  color: #fff;
+  text-decoration: none;
+  border-radius: 8px;
+  transition: background-color 0.2s;
+}
+
+.dashboard a:hover {
+  background-color: #f39c12;
+  color: #fff;
+}
+/* Container principale */
+.admin-container {
+  max-width: 800px;
+  margin: 0 auto;
+  background: #fff;
+  padding: 30px;
+  border-radius: 10px;
+  box-shadow: 0 2px 10px rgba(0,0,0,0.1);
+}
+
+/* Titolo */
+.admin-container h1 {
+  text-align: center;
+  color: #2c3e50;
+  margin-bottom: 20px;
+}
+
+/* Link ritorno */
+.admin-container a.back-link {
+  display: inline-block;
+  margin-bottom: 15px;
+  text-decoration: none;
+  color: #1f618d;
+  font-weight: bold;
+}
+
+.admin-container a.back-link:hover {
+  color: #f39c12;
+}
+
+/* Form aggiungi classe */
+.admin-container form {
+  margin-bottom: 20px;
+  text-align: center;
+}
+
+.admin-container input[type="text"] {
+  padding: 8px 12px;
+  border: 1px solid #ccc;
+  border-radius: 6px;
+  width: 200px;
+  margin-right: 10px;
+}
+
+.admin-container button {
+  padding: 8px 15px;
+  border: none;
+  background-color: #1f618d;
+  color: #fff;
+  border-radius: 6px;
+  cursor: pointer;
+  transition: background-color 0.2s;
+}
+
+.admin-container button:hover {
+  background-color: #f39c12;
+}
+
+/* Tabella */
+.admin-container table {
+  width: 100%;
+  border-collapse: collapse;
+}
+
+.admin-container th, .admin-container td {
+  border: 1px solid #ccc;
+  padding: 10px;
+  text-align: center;
+}
+
+.admin-container th {
+  background-color: #eee;
+}
+
+.admin-container tr:hover td {
+  background-color: #f7f7f7;
+}
+
+.admin-container a.delete-link {
+  color: #e74c3c;
+  font-weight: bold;
+  text-decoration: none;
+  transition: color 0.2s;
+}
+
+.admin-container a.delete-link:hover {
+  color: #c0392b;
+}
+/* Login container */
+.login-container {
+  max-width: 400px;
+  margin: 80px auto;
+  background: #fff;
+  padding: 30px;
+  border-radius: 10px;
+  box-shadow: 0 2px 10px rgba(0,0,0,0.1);
+  text-align: center;
+}
+
+/* Titolo */
+.login-container h1 {
+  margin-bottom: 20px;
+  color: #2c3e50;
+}
+
+/* Input */
+.login-container input[type="text"],
+.login-container input[type="password"] {
+  width: 90%;
+  padding: 10px;
+  margin: 10px 0;
+  border-radius: 6px;
+  border: 1px solid #ccc;
+  font-size: 1em;
+}
+
+/* Pulsante */
+.login-container button {
+  padding: 10px 20px;
+  background-color: #1f618d;
+  color: #fff;
+  border: none;
+  border-radius: 6px;
+  cursor: pointer;
+  transition: background-color 0.2s;
+  font-size: 1em;
+}
+
+.login-container button:hover {
+  background-color: #f39c12;
+  color: #fff;
+}
+
+/* Messaggio errore */
+.login-container .error {
+  color: #e74c3c;
+  font-weight: bold;
+  margin-bottom: 10px;
+}
+
+/* Navbar minima per login */
+.navbar {
+  background-color: #2c3e50;
+  padding: 10px 20px;
+  color: #fff;
+  text-align: center;
+  border-radius: 0 0 10px 10px;
+  margin-bottom: 30px;
+}
+/* Riutilizziamo .admin-container, h1, navbar già definiti */
+
+/* Form Gestione Materie */
+.admin-container form input[type="text"] {
+  padding: 8px 12px;
+  border: 1px solid #ccc;
+  border-radius: 6px;
+  margin: 5px;
+  width: 200px;
+}
+
+.admin-container form button {
+  padding: 8px 20px;
+  background-color: #1f618d;
+  color: #fff;
+  border: none;
+  border-radius: 6px;
+  cursor: pointer;
+  transition: background-color 0.2s;
+}
+
+.admin-container form button:hover {
+  background-color: #f39c12;
+  color: #fff;
+}
+
+/* Tabella Materie */
+.admin-container table {
+  width: 100%;
+  border-collapse: collapse;
+  margin-top: 15px;
+}
+
+.admin-container th, .admin-container td {
+  border: 1px solid #ccc;
+  padding: 10px;
+  text-align: center;
+}
+
+.admin-container th {
+  background-color: #eee;
+}
+
+.admin-container tr:hover td {
+  background-color: #f7f7f7;
+}
+
+.admin-container a.delete-link {
+  color: #e74c3c;
+  font-weight: bold;
+  text-decoration: none;
+  transition: color 0.2s;
+}
+
+.admin-container a.delete-link:hover {
+  color: #c0392b;
+}
+/* Form gestione orario */
+.admin-container form {
+  display: flex;
+  flex-wrap: wrap;
+  justify-content: center;
+  gap: 15px;
+  margin-bottom: 20px;
+}
+
+.admin-container form select {
+  padding: 8px 12px;
+  border-radius: 6px;
+  border: 1px solid #ccc;
+  min-width: 120px;
+}
+
+.admin-container form button {
+  padding: 8px 20px;
+  background-color: #1f618d;
+  color: #fff;
+  border: none;
+  border-radius: 6px;
+  cursor: pointer;
+  transition: background-color 0.2s;
+}
+
+.admin-container form button:hover {
+  background-color: #f39c12;
+  color: #fff;
+}
+
+/* Titolo */
+.admin-container h1 {
+  text-align: center;
+  color: #2c3e50;
+  margin-bottom: 20px;
+}
+
+/* Link ritorno */
+.admin-container a.back-link {
+  display: inline-block;
+  margin-bottom: 15px;
+  text-decoration: none;
+  color: #1f618d;
+  font-weight: bold;
+}
+
+.admin-container a.back-link:hover {
+  color: #f39c12;
+}
+
+/* Mobile responsive */
+@media (max-width: 768px) {
+
+  /* Form input gestione orario */
+  .admin-container form {
+    flex-direction: column;
+    align-items: stretch;
+  }
+
+  .admin-container form select,
+  .admin-container form input[type="text"],
+  .admin-container form button {
+    width: 100%;
+    margin: 5px 0;
+  }
+
+  /* Tabella */
+  .admin-container table,
+  .admin-container thead,
+  .admin-container tbody,
+  .admin-container th,
+  .admin-container td,
+  .admin-container tr {
+    display: block;
+    width: 100%;
+  }
+
+  .admin-container thead {
+    display: none; /* Nasconde intestazioni */
+  }
+
+  .admin-container tr {
+    margin-bottom: 15px;
+    border: 1px solid #ddd;
+    border-radius: 8px;
+    padding: 10px;
+    background: #fff;
+    box-shadow: 0 1px 5px rgba(0,0,0,0.05);
+  }
+
+  .admin-container td {
+    text-align: left;
+    padding-left: 50%;
+    position: relative;
+    border: none;
+    border-bottom: 1px solid #eee;
+    display: flex;
+    justify-content: space-between;
+    padding: 8px 10px;
+  }
+
+  .admin-container td::before {
+    content: attr(data-label);
+    position: absolute;
+    left: 10px;
+    width: 45%;
+    font-weight: bold;
+    white-space: nowrap;
+  }
+
+  .admin-container td:last-child {
+    border-bottom: 0;
+  }
+
+  .admin-container a.delete-link {
+    padding: 4px 8px;
+    font-size: 0.9em;
+  }
+}
+
+/* Extra piccolo schermo */
+@media (max-width: 480px) {
+  .admin-container td::before {
+    width: 50%;
+    font-size: 0.9em;
+  }
+
+  .admin-container td {
+    font-size: 0.9em;
+    padding: 6px 8px;
+  }
+
+  .admin-container form select,
+  .admin-container form input[type="text"],
+  .admin-container form button {
+    font-size: 0.95em;
+  }
+}
+
+.table-container {
+  width: 100%;
+  overflow-x: auto;
+}
+
+.responsive-table {
+  width: 100%;
+  border-collapse: collapse;
+}
+
+.responsive-table th,
+.responsive-table td {
+  border: 1px solid #ccc;
+  padding: 8px;
+  text-align: left;
+}
+
+.responsive-table th {
+  background: #f4f4f4;
+}
+
+/* Modalità mobile */
+@media (max-width: 768px) {
+  .responsive-table thead {
+    display: none; /* nasconde l’intestazione */
+  }
+  .responsive-table tr {
+    display: block;
+    margin-bottom: 15px;
+    border: 1px solid #ddd;
+    border-radius: 8px;
+    padding: 10px;
+    background: #fff;
+  }
+  .responsive-table td {
+    display: block;
+    justify-content: space-between;
+    padding: 8px 5px;
+    padding-top: 30px;        
+    border: none;
+    border-bottom: 1px solid #eee;
+    word-wrap: break-word;
+    white-space: normal;
+    max-width: 100%;
+    overflow: hidden;
+    text-overflow: ellipsis;
+  }
+  .responsive-table td:last-child {
+    border-bottom: none;
+  }
+  .responsive-table td::before {
+    content: attr(data-label);
+    font-weight: bold;
+    margin-right: 10px;
+    color: #333;
+    position: absolute;
+    left: 10px;
+    top: 10px;
+    width: 45%;
+    white-space: normal; /* permette a "Materia" di andare a capo */
+    font-weight: bold;
+  }
+  .response-table td span {
+    display: block; /* forza l'output del contenuto su una riga separata */
+  }
+}
--- a/htdocs/admin/subjects.php
+++ b/htdocs/admin/subjects.php
@@ -0,0 +1,79 @@
+<?php
+session_start();
+if (!isset($_SESSION['admin'])) { header("Location: login.php"); exit; }
+include("../db.php");
+
+if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['name'])) {
+    $name = $_POST['name']; 
+    $teacher = $_POST['teacher']; 
+    $room = $_POST['room'];
+    if (!empty($name)) { 
+        $conn->query("INSERT INTO subjects (name,teacher,room) VALUES ('$name','$teacher','$room')"); 
+    }
+    header("Location: subjects.php"); exit;
+}
+
+if (isset($_GET['delete'])) {
+    $id = intval($_GET['delete']);
+    $conn->query("DELETE FROM subjects WHERE id=$id");
+    header("Location: subjects.php"); exit;
+}
+?>
+<!DOCTYPE html>
+<html>
+<head>
+    <title>Gestisci Materie</title>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <link rel="stylesheet" href="style.css">
+</head>
+<body>
+
+<!-- Navbar -->
+  <div class="navbar">
+    <div class="logo">Admin Dashboard</div>
+    <div class="links">
+      <a href="index.php">Dashboard</a>
+      <a href="logout.php">Logout</a>
+    </div>
+  </div>
+
+<div class="admin-container">
+  <h1>Gestisci Materie</h1>
+  <a href="index.php" class="back-link">⬅ Torna al Dashboard</a>
+
+  <form method="POST">
+    <input type="text" name="name" placeholder="Materia" required>
+    <input type="text" name="teacher" placeholder="Docente" required>
+    <input type="text" name="room" placeholder="Laboratorio (opzionale)">
+    <button type="submit">Aggiungi</button>
+  </form>
+
+  <table>
+    <tr>
+      <th>ID</th>
+      <th>Materia</th>
+      <th>Docente</th>
+      <th>Aula</th>
+      <th>Azione</th>
+    </tr>
+    <?php
+    $res = $conn->query("SELECT * FROM subjects ORDER BY name ASC");
+    while($row=$res->fetch_assoc()){
+      echo "<tr>
+              <td>{$row['id']}</td>
+              <td>{$row['name']}</td>
+              <td>{$row['teacher']}</td>
+              <td>{$row['room']}</td>
+              <td><a href='subjects.php?delete={$row['id']}' class='delete-link'>Elimina</a></td>
+            </tr>";
+    }
+    ?>
+  </table>
+    <p>
+      Nota: Questa pagina si vede meglio da computer desktop. Se sei da computer, puoi ignorare questo messaggio.
+    </p>
+    <p style="text-align: center;">Copyright (C) 2025 EmmeV. All rights reserved.</p>
+</div>
+
+</body>
+</html>
--- a/htdocs/admin/timetable.php
+++ b/htdocs/admin/timetable.php
@@ -0,0 +1,149 @@
+<?php
+session_start();
+if (!isset($_SESSION['admin'])) { header("Location: login.php"); exit; }
+include("../db.php");
+
+if ($_SERVER["REQUEST_METHOD"] == "POST") {
+    $class_id = $_POST['class_id'];
+    $day = $_POST['day'];
+    $hour = $_POST['hour'];
+    $subject_id = $_POST['subject_id'];
+    $conn->query("INSERT INTO timetable (class_id,day,hour,subject_id) VALUES ($class_id,'$day',$hour,$subject_id)");
+    header("Location: timetable.php"); exit;
+}
+?>
+<?php
+include("../db.php"); // o il percorso corretto al tuo DB
+
+// Funzione per eliminare una voce del timetable
+function deleteTimetableEntry($conn, $id) {
+    $id = intval($id); // sicurezza
+    $conn->query("DELETE FROM timetable WHERE id=$id");
+}
+
+// Se è stato cliccato il link "Elimina"
+if(isset($_GET['delete'])) {
+    deleteTimetableEntry($conn, $_GET['delete']);
+    // Dopo l'eliminazione, reindirizza per evitare duplicazioni
+    header("Location: timetable.php");
+    exit;
+}
+?>
+<!DOCTYPE html>
+<html>
+<head>
+    <title>Gestisci Orario</title>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <link rel="stylesheet" href="style.css">
+</head>
+<body>
+<!-- Navbar -->
+  <div class="navbar">
+    <div class="logo">Admin Dashboard</div>
+    <div class="links">
+      <a href="index.php">Dashboard</a>
+      <a href="logout.php">Logout</a>
+    </div>
+  </div>
+
+<div class="admin-container">
+  <h1>Gestisci Orario</h1>
+  <a href="index.php" class="back-link">⬅ Torna al Dashboard</a>
+
+  <form method="POST" autocomplete="off">
+    Classe: 
+    <select name="class_id" required>
+      <option value="" selected disabled>--Scegli un'opzione--</option>
+      <?php 
+      $res=$conn->query("SELECT * FROM classes ORDER BY name ASC"); 
+      while($r=$res->fetch_assoc()) 
+        echo "<option value='{$r['id']}'>{$r['name']}</option>"; 
+      ?>
+    </select>
+
+    Giorno: 
+    <select name="day" required>
+      <option value="" selected disabled>--Scegli un'opzione--</option>
+      <option>Lunedì</option><option>Martedì</option><option>Mercoledì</option>
+      <option>Giovedì</option><option>Venerdì</option><option>Sabato</option>
+    </select>
+
+    Ora: 
+    <select name="hour" required>
+      <option value="" selected disabled>--Scegli un'opzione--</option>
+      <option value="1">1</option><option value="2">2</option><option value="3">3</option>
+      <option value="4">4</option><option value="5">5</option><option value="6">6</option>
+    </select>
+
+    Materia: 
+    <select name="subject_id" required>
+      <option value="" selected disabled>--Scegli un'opzione--</option>
+      <?php 
+  $res = $conn->query("SELECT * FROM subjects ORDER BY name ASC"); 
+  while($r = $res->fetch_assoc()) {
+      $label = $r['name'];
+      if(!empty($r['teacher'])) {
+          $label .= " (" . $r['teacher'] . ")";
+      }
+        if(!empty($r['room'])) {
+            $label .= " (" . $r['room'] . ")";
+        }
+      echo "<option value='{$r['id']}'>" . htmlspecialchars($label) . "</option>";
+  }
+  ?>
+    </select>
+
+    <button type="submit">Aggiungi</button>
+  </form>
+<?php
+// Recupera tutte le entry del timetable
+$res = $conn->query("SELECT timetable.id, classes.name AS class_name, timetable.day, timetable.hour, subjects.name AS subject_name, subjects.teacher as teacher, subjects.room as room
+                     FROM timetable
+                     LEFT JOIN classes ON timetable.class_id = classes.id
+                     LEFT JOIN subjects ON timetable.subject_id = subjects.id
+                     ORDER BY class_name, day, hour");
+?>
+
+<h2>Orario Inserito</h2>
+<div class="table-container">
+<table class="responsive-table" border="1" cellpadding="5" style="border-collapse:collapse; width:100%; max-width:1000px; margin:auto;">
+    <tr>
+        <th>Classe</th>
+        <th>Giorno</th>
+        <th>Ora</th>
+        <th>Materia</th>
+        <th>Azione</th>
+    </tr>
+
+    <?php while($row = $res->fetch_assoc()): ?>
+        <tr>
+            <td data-label="Classe"><span><?php echo htmlspecialchars($row['class_name']); ?></span></td>
+            <td data-label="Giorno"><span><?php echo htmlspecialchars($row['day']); ?></span></td>
+            <td data-label="Ora"><span><?php echo htmlspecialchars($row['hour']); ?></span></td>
+            <td data-label="Materia"><span><?php 
+        echo htmlspecialchars($row['subject_name']);
+        if(!empty($row['teacher'])) {
+            echo " (" . htmlspecialchars($row['teacher']) . ")";
+        }
+//	if(!empty($row['room'])) {
+//	    echo " (" . htmlspecialchars($row['room']) . ")";
+//	}
+        ?></span></td>
+            <td data-label="Azione"><span>
+                <a href="timetable.php?delete=<?php echo $row['id']; ?>" 
+                   onclick="return confirm('Sei sicuro di voler eliminare questa voce?');">
+                   Elimina
+                </a>
+            </span></td>
+        </tr>
+    <?php endwhile; ?>
+</table>
+</div>
+    <p>
+      Nota: Questa pagina si vede meglio da computer desktop. Se sei da computer, puoi ignorare questo messaggio.
+    </p>
+    <p style="text-align: center;">Copyright (C) 2025 EmmeV. All rights reserved.</p>
+</div>
+
+</body>
+</html>