From 086537466006663c9095d24ef24cb12091d15ae3 Mon Sep 17 00:00:00 2001
From: Lars Gebhardt-Kusche <lars@kusche.berlin>
Date: Sun, 23 Nov 2025 02:45:22 +0100
Subject: [PATCH] as

---
 partials/landing/login/login.php |   5 +
 public/account.php               | 201 -------------------------------
 public/logout.php                |  11 --
 public/register.php              | 197 ------------------------------
 4 files changed, 5 insertions(+), 409 deletions(-)
 delete mode 100644 public/account.php
 delete mode 100644 public/logout.php
 delete mode 100644 public/register.php

diff --git a/partials/landing/login/login.php b/partials/landing/login/login.php
index 2083515..1026f1f 100644
--- a/partials/landing/login/login.php
+++ b/partials/landing/login/login.php
@@ -90,6 +90,7 @@ if ($flash && !empty($flash['context']) && in_array($flash['context'], ['login',
                             required
                             class="w-full rounded-lg border border-brand-border bg-brand-bg/60 px-3 py-2 text-sm text-brand-text placeholder:text-brand-muted/60 focus:outline-none focus:ring-2 focus:ring-brand-primary/60"
                             placeholder="you@example.com"
+                            autocomplete="username"
                         >
                     </div>
 
@@ -104,6 +105,7 @@ if ($flash && !empty($flash['context']) && in_array($flash['context'], ['login',
                             required
                             class="w-full rounded-lg border border-brand-border bg-brand-bg/60 px-3 py-2 text-sm text-brand-text placeholder:text-brand-muted/60 focus:outline-none focus:ring-2 focus:ring-brand-primary/60"
                             placeholder="••••••••"
+                            autocomplete="current-password"
                         >
                     </div>
 
@@ -153,6 +155,7 @@ if ($flash && !empty($flash['context']) && in_array($flash['context'], ['login',
                             required
                             class="w-full rounded-lg border border-brand-border bg-brand-bg/60 px-3 py-2 text-sm text-brand-text placeholder:text-brand-muted/60 focus:outline-none focus:ring-2 focus:ring-brand-primary/60"
                             placeholder="Dein Name"
+                            autocomplete="name"
                         >
                     </div>
 
@@ -167,6 +170,7 @@ if ($flash && !empty($flash['context']) && in_array($flash['context'], ['login',
                             required
                             class="w-full rounded-lg border border-brand-border bg-brand-bg/60 px-3 py-2 text-sm text-brand-text placeholder:text-brand-muted/60 focus:outline-none focus:ring-2 focus:ring-brand-primary/60"
                             placeholder="you@example.com"
+                            autocomplete="email"
                         >
                     </div>
 
@@ -181,6 +185,7 @@ if ($flash && !empty($flash['context']) && in_array($flash['context'], ['login',
                             required
                             class="w-full rounded-lg border border-brand-border bg-brand-bg/60 px-3 py-2 text-sm text-brand-text placeholder:text-brand-muted/60 focus:outline-none focus:ring-2 focus:ring-brand-primary/60"
                             placeholder="Mindestens 8 Zeichen"
+                            autocomplete="new-password"
                         >
                     </div>
 
diff --git a/public/account.php b/public/account.php
deleted file mode 100644
index d7289cd..0000000
--- a/public/account.php
+++ /dev/null
@@ -1,201 +0,0 @@
-<?php
-// public/account.php
-declare(strict_types=1);
-
-require __DIR__ . '/../src/auth.php';
-
-auth_require_login();
-
-$lang = auth_get_lang();
-$user = auth_current_user();
-$errors = [];
-$flashSuccess = '';
-$flashError = '';
-
-if ($_SERVER['REQUEST_METHOD'] === 'POST') {
-    if (!auth_verify_csrf($_POST['_csrf'] ?? null)) {
-        $flashError = 'Sicherheitsfehler. Bitte Formular erneut absenden.';
-    } else {
-        $fullName      = $_POST['full_name'] ?? ($user['full_name'] ?? '');
-        $preferredLang = $_POST['preferred_lang'] ?? ($user['preferred_lang'] ?? $lang);
-
-        $result = auth_update_profile((int)$user['id'], $fullName, $preferredLang);
-
-        if ($result['success'] ?? false) {
-            $flashSuccess = 'Profil wurde aktualisiert.';
-            $user = auth_current_user(); // neu laden
-        } else {
-            $errors = $result['errors'] ?? [];
-        }
-    }
-}
-
-$csrfToken = auth_csrf_token();
-$initials  = auth_user_initials($user);
-$avatarUrl = auth_user_avatar_url($user);
-?>
-<!DOCTYPE html>
-<html lang="<?php echo htmlspecialchars($lang, ENT_QUOTES, 'UTF-8'); ?>">
-<head>
-    <meta charset="UTF-8">
-    <title>Mein Konto – usbcheck.it</title>
-    <meta name="viewport" content="width=device-width, initial-scale=1">
-
-    <!-- Fonts: Montserrat + Inter -->
-    <link rel="preconnect" href="https://fonts.googleapis.com">
-    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500&family=Montserrat:wght@600;700&display=swap" rel="stylesheet">
-
-    <!-- Main stylesheet -->
-    <link rel="stylesheet" href="/assets/css/main.css?v=1">
-</head>
-<body>
-<?php include __DIR__ . '/partials/header.php'; ?>
-
-<main class="account-page">
-    <div class="container">
-        <div class="account-grid">
-            <!-- Profil -->
-            <section class="account-card">
-                <h1 class="account-title">Mein Profil</h1>
-                <p class="account-subtitle">
-                    Passe deinen Namen und deine bevorzugte Sprache an. Der Avatar wird aktuell aus deinen Initialen generiert.
-                </p>
-
-                <?php if ($flashSuccess): ?>
-                    <div class="auth-flash-success">
-                        <?php echo htmlspecialchars($flashSuccess, ENT_QUOTES, 'UTF-8'); ?>
-                    </div>
-                <?php endif; ?>
-
-                <?php if ($flashError): ?>
-                    <div class="auth-flash-error">
-                        <?php echo htmlspecialchars($flashError, ENT_QUOTES, 'UTF-8'); ?>
-                    </div>
-                <?php endif; ?>
-
-                <form method="post" novalidate>
-                    <input type="hidden" name="_csrf" value="<?php echo htmlspecialchars($csrfToken, ENT_QUOTES, 'UTF-8'); ?>">
-
-                    <div class="form-row">
-                        <label class="form-label" for="email">E-Mail-Adresse</label>
-                        <input
-                            class="form-input"
-                            type="email"
-                            id="email"
-                            name="email"
-                            value="<?php echo htmlspecialchars($user['email'] ?? '', ENT_QUOTES, 'UTF-8'); ?>"
-                            readonly
-                        >
-                        <div class="form-help">
-                            E-Mail-Änderungen bitte später über einen separaten Flow.
-                        </div>
-                    </div>
-
-                    <div class="form-row">
-                        <label class="form-label" for="username">Benutzername</label>
-                        <input
-                            class="form-input"
-                            type="text"
-                            id="username"
-                            name="username"
-                            value="<?php echo htmlspecialchars($user['username'] ?? '', ENT_QUOTES, 'UTF-8'); ?>"
-                            readonly
-                        >
-                        <div class="form-help">
-                            Benutzername ist aktuell nicht änderbar.
-                        </div>
-                    </div>
-
-                    <div class="form-row">
-                        <label class="form-label" for="full_name">Vollständiger Name</label>
-                        <input
-                            class="form-input"
-                            type="text"
-                            id="full_name"
-                            name="full_name"
-                            required
-                            value="<?php echo htmlspecialchars($_POST['full_name'] ?? ($user['full_name'] ?? ''), ENT_QUOTES, 'UTF-8'); ?>"
-                        >
-                        <?php if (!empty($errors['full_name'])): ?>
-                            <div class="form-error"><?php echo htmlspecialchars($errors['full_name'], ENT_QUOTES, 'UTF-8'); ?></div>
-                        <?php endif; ?>
-                    </div>
-
-                    <div class="form-row">
-                        <label class="form-label" for="preferred_lang">Bevorzugte Sprache</label>
-                        <select class="form-select" id="preferred_lang" name="preferred_lang">
-                            <?php
-                            $selLang = $_POST['preferred_lang'] ?? ($user['preferred_lang'] ?? $lang);
-                            $opts = [
-                                'de' => 'Deutsch',
-                                'en' => 'English',
-                                'it' => 'Italiano',
-                                'fr' => 'Français',
-                            ];
-                            foreach ($opts as $code => $label) {
-                                $selected = ($code === $selLang) ? 'selected' : '';
-                                echo '<option value="' . htmlspecialchars($code, ENT_QUOTES, 'UTF-8') . '" ' . $selected . '>'
-                                    . htmlspecialchars($label, ENT_QUOTES, 'UTF-8') . '</option>';
-                            }
-                            ?>
-                        </select>
-                    </div>
-
-                    <div class="form-actions">
-                        <button type="submit" class="btn btn-primary">
-                            Änderungen speichern
-                        </button>
-                        <a href="/logout.php" class="auth-link">
-                            Logout
-                        </a>
-                    </div>
-                </form>
-            </section>
-
-            <!-- Avatar / Meta -->
-            <section class="account-card">
-                <h2 class="account-title">Avatar &amp; Konto</h2>
-                <p class="account-subtitle">
-                    Dein Avatar wird aktuell aus deinen Initialen erzeugt. Später kannst du hier ein eigenes Bild hochladen.
-                </p>
-
-                <div class="account-avatar-preview">
-                    <?php if ($avatarUrl): ?>
-                        <div class="user-avatar" style="background-image:url('<?php echo htmlspecialchars($avatarUrl, ENT_QUOTES, 'UTF-8'); ?>'); background-size:cover; background-position:center; color:transparent;">
-                            &nbsp;
-                        </div>
-                    <?php else: ?>
-                        <div class="user-avatar">
-                            <?php echo htmlspecialchars($initials, ENT_QUOTES, 'UTF-8'); ?>
-                        </div>
-                    <?php endif; ?>
-                    <div class="account-avatar-note">
-                        <strong>Avatar-Vorschau</strong><br>
-                        Standardmäßig Initialen aus deinem Namen.<br>
-                        Upload-Funktion folgt in einem späteren Schritt.
-                    </div>
-                </div>
-
-                <div class="account-meta" style="margin-top:1.5rem;">
-                    <p><strong>Account-ID:</strong> <?php echo (int)$user['id']; ?></p>
-                    <p><strong>Registriert am:</strong>
-                        <?php
-                        if (!empty($user['created_at'])) {
-                            echo htmlspecialchars($user['created_at'], ENT_QUOTES, 'UTF-8');
-                        } else {
-                            echo '–';
-                        }
-                        ?>
-                    </p>
-                </div>
-            </section>
-        </div>
-    </div>
-</main>
-
-<?php include __DIR__ . '/partials/footer.php'; ?>
-
-<script src="/assets/js/lang.js?v=1"></script>
-</body>
-</html>
diff --git a/public/logout.php b/public/logout.php
deleted file mode 100644
index 7b6116e..0000000
--- a/public/logout.php
+++ /dev/null
@@ -1,11 +0,0 @@
-<?php
-declare(strict_types=1);
-
-require __DIR__ . '/../config/db.php';
-require __DIR__ . '/../src/Auth.php';
-
-$auth = new Auth($pdo);
-$auth->logout();
-
-header('Location: /');
-exit;
diff --git a/public/register.php b/public/register.php
deleted file mode 100644
index 1c544c6..0000000
--- a/public/register.php
+++ /dev/null
@@ -1,197 +0,0 @@
-<?php
-// public/register.php
-declare(strict_types=1);
-
-require __DIR__ . '/../src/auth.php';
-
-$lang = auth_get_lang();
-$errors = [];
-$globalError = '';
-$result = null;
-
-if ($_SERVER['REQUEST_METHOD'] === 'POST') {
-    if (!auth_verify_csrf($_POST['_csrf'] ?? null)) {
-        $globalError = 'Sicherheitsfehler. Bitte Formular erneut absenden.';
-    } else {
-        $email            = $_POST['email'] ?? '';
-        $username         = $_POST['username'] ?? '';
-        $fullName         = $_POST['full_name'] ?? '';
-        $password         = $_POST['password'] ?? '';
-        $passwordConfirm  = $_POST['password_confirm'] ?? '';
-        $preferredLang    = $_POST['preferred_lang'] ?? $lang;
-
-        $result = auth_register_user(
-            $email,
-            $username,
-            $fullName,
-            $password,
-            $passwordConfirm,
-            $preferredLang
-        );
-
-        if ($result['success'] ?? false) {
-            // Direkt nach Account-Seite
-            header('Location: /account.php');
-            exit;
-        }
-
-        $errors = $result['errors'] ?? [];
-    }
-}
-
-$csrfToken = auth_csrf_token();
-?>
-<!DOCTYPE html>
-<html lang="<?php echo htmlspecialchars($lang, ENT_QUOTES, 'UTF-8'); ?>">
-<head>
-    <meta charset="UTF-8">
-    <title>Registrieren – usbcheck.it</title>
-    <meta name="viewport" content="width=device-width, initial-scale=1">
-
-    <!-- Fonts: Montserrat + Inter -->
-    <link rel="preconnect" href="https://fonts.googleapis.com">
-    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500&family=Montserrat:wght@600;700&display=swap" rel="stylesheet">
-
-    <!-- Main stylesheet -->
-    <link rel="stylesheet" href="/assets/css/main.css?v=1">
-</head>
-<body>
-<?php include __DIR__ . '/partials/header.php'; ?>
-
-<main class="auth-page">
-    <div class="container">
-        <div class="auth-layout">
-            <div class="auth-card">
-                <h1 class="auth-title">Konto erstellen</h1>
-                <p class="auth-subtitle">
-                    Erstelle einen kostenlosen Account, um deine USB-Tests zu speichern und mehrere Sticks zu verwalten.
-                </p>
-
-                <?php if ($globalError): ?>
-                    <div class="auth-flash-error">
-                        <?php echo htmlspecialchars($globalError, ENT_QUOTES, 'UTF-8'); ?>
-                    </div>
-                <?php endif; ?>
-
-                <form method="post" novalidate>
-                    <input type="hidden" name="_csrf" value="<?php echo htmlspecialchars($csrfToken, ENT_QUOTES, 'UTF-8'); ?>">
-
-                    <div class="form-row">
-                        <label class="form-label" for="email">E-Mail-Adresse</label>
-                        <input
-                            class="form-input"
-                            type="email"
-                            id="email"
-                            name="email"
-                            required
-                            value="<?php echo htmlspecialchars($_POST['email'] ?? '', ENT_QUOTES, 'UTF-8'); ?>"
-                        >
-                        <?php if (!empty($errors['email'])): ?>
-                            <div class="form-error"><?php echo htmlspecialchars($errors['email'], ENT_QUOTES, 'UTF-8'); ?></div>
-                        <?php endif; ?>
-                    </div>
-
-                    <div class="form-row">
-                        <label class="form-label" for="username">Benutzername</label>
-                        <input
-                            class="form-input"
-                            type="text"
-                            id="username"
-                            name="username"
-                            required
-                            value="<?php echo htmlspecialchars($_POST['username'] ?? '', ENT_QUOTES, 'UTF-8'); ?>"
-                        >
-                        <?php if (!empty($errors['username'])): ?>
-                            <div class="form-error"><?php echo htmlspecialchars($errors['username'], ENT_QUOTES, 'UTF-8'); ?></div>
-                        <?php endif; ?>
-                        <div class="form-help">
-                            3–32 Zeichen, Buchstaben/Zahlen/._- erlaubt.
-                        </div>
-                    </div>
-
-                    <div class="form-row">
-                        <label class="form-label" for="full_name">Vollständiger Name</label>
-                        <input
-                            class="form-input"
-                            type="text"
-                            id="full_name"
-                            name="full_name"
-                            required
-                            value="<?php echo htmlspecialchars($_POST['full_name'] ?? '', ENT_QUOTES, 'UTF-8'); ?>"
-                        >
-                        <?php if (!empty($errors['full_name'])): ?>
-                            <div class="form-error"><?php echo htmlspecialchars($errors['full_name'], ENT_QUOTES, 'UTF-8'); ?></div>
-                        <?php endif; ?>
-                    </div>
-
-                    <div class="form-row">
-                        <label class="form-label" for="password">Passwort</label>
-                        <input
-                            class="form-input"
-                            type="password"
-                            id="password"
-                            name="password"
-                            required
-                        >
-                        <?php if (!empty($errors['password'])): ?>
-                            <div class="form-error"><?php echo htmlspecialchars($errors['password'], ENT_QUOTES, 'UTF-8'); ?></div>
-                        <?php endif; ?>
-                        <div class="form-help">
-                            Mindestens 10 Zeichen. Bitte ein sicheres Passwort wählen.
-                        </div>
-                    </div>
-
-                    <div class="form-row">
-                        <label class="form-label" for="password_confirm">Passwort wiederholen</label>
-                        <input
-                            class="form-input"
-                            type="password"
-                            id="password_confirm"
-                            name="password_confirm"
-                            required
-                        >
-                        <?php if (!empty($errors['password_confirm'])): ?>
-                            <div class="form-error"><?php echo htmlspecialchars($errors['password_confirm'], ENT_QUOTES, 'UTF-8'); ?></div>
-                        <?php endif; ?>
-                    </div>
-
-                    <div class="form-row">
-                        <label class="form-label" for="preferred_lang">Bevorzugte Sprache</label>
-                        <select class="form-select" id="preferred_lang" name="preferred_lang">
-                            <?php
-                            $selLang = $_POST['preferred_lang'] ?? $lang;
-                            $opts = [
-                                'de' => 'Deutsch',
-                                'en' => 'English',
-                                'it' => 'Italiano',
-                                'fr' => 'Français',
-                            ];
-                            foreach ($opts as $code => $label) {
-                                $selected = ($code === $selLang) ? 'selected' : '';
-                                echo '<option value="' . htmlspecialchars($code, ENT_QUOTES, 'UTF-8') . '" ' . $selected . '>'
-                                    . htmlspecialchars($label, ENT_QUOTES, 'UTF-8') . '</option>';
-                            }
-                            ?>
-                        </select>
-                    </div>
-
-                    <div class="form-actions">
-                        <button type="submit" class="btn btn-primary">
-                            Konto erstellen
-                        </button>
-                        <a class="auth-link" href="/login.php">
-                            Bereits ein Konto? Login
-                        </a>
-                    </div>
-                </form>
-            </div>
-        </div>
-    </div>
-</main>
-
-<?php include __DIR__ . '/partials/footer.php'; ?>
-
-<script src="/assets/js/lang.js?v=1"></script>
-</body>
-</html>