playlist.php - master - marazmdev/streamliveV17

playlist.php

66 строк4 KB

TwixoffStudio

Create: ai_client.php, antibot.php, auth.php, bbcode.php, bbcode_toolbar.php, crypto.php, db.php, ddos_shield.php, embed_helper.php, footer.php, functions.php, gamification.php, geo.php, github_api.php, header.php, header2.php, headershorts.php, migrations.php, mini_player.php, moderator_auth.php, oauth.php, profile_gamification_block.php, recommendations.php, rss.php, stats.php, totp.php, video_embed.php, broadcast_channel.php, broadcast_channels.php, broadcast_post_poll.php, broadcast_post_send.php, catalog.php, channel.php, channel-full.php, channel-pc.php, channel_favorite.php, channel_like.php, channel_manage.php, chat_ban.php, chat_delete.php, chat_poll.php, chat_send.php, check_stream_live.php, comment_add.php, comment_delete.php, continue_watching.php, dashboard.php, developers.php, diagnose.php, diagnose_network.php, docs.php, embed.php, embedstreamtok.php, favorites.php, forum.php, forum_category.php, forum_new_thread.php, forum_thread.php, github_connect.php, github_deploy.php, htaccess_pretty_urls_snippet.txt, index.php, message_poll.php, message_send.php, messages.php, moderator_debug.php, N8C42w.js, new_channel.php, news.php, now_playing.php, playerjs.js, playlist.php, playlist_add.php, playlists.php, profile.php, rating.php, README.md, README_GAMIFICATION_AND_MODERATION.md, README_GITHUB_DEPLOY.md, README_MASTER.md, README_NETWORK_PROXY.md, README_VIDEO_FIX_FINAL.md, README_VIDEO_HOSTING.md, robots.txt, rss_channels.php, rss_forum.php, s.php, services.php, short_like.php, shorts.php, sitemap.xml.php, smotrim.php, stats.php, sticker_packs.php, stickers_available.php, streamtok.php, streamtok2.php, user_search.php, video.php, video_comment_add.php, video_favorite.php, video_import.php, video_like.php, video_preview.php, video_progress_get.php, video_progress_save.php, videos.php, watch_room.php, watch_room_chat_send.php, watch_room_action.php, watch_room_chat_poll.php, watch_room_poll.php, antibot_challenge.php, antibot_challenge_view.php, antibot_image.svg.php, antibot_verify.php, fix_charset.sql, 001_add_comments.sql, 002_add_forum.sql, 003_add_features.sql, 004_add_messaging.sql, 005_add_rtmp.sql, 006_add_antibot.sql, 007_add_broadcast_pause.sql, 008_add_broadcast_channels.sql, 009_add_channel_visibility.sql, 010_add_geo_and_verify.sql, 011_add_phone.sql, 012_add_stats.sql, 013_add_rss_forum_link.sql, 014_add_sticker_packs.sql, 015_add_oauth_provider.sql, 016_add_stream_status_cache.sql, 017_gamification_and_moderation.sql, 018_github_deploy.sql, 019_videos.sql, 020_video_moderation.sql, 020_video_thumbnails_moderation_recs.sql, 021_ddos_shield.sql, 022_playlists_progress_watchrooms.sql, schema.sql, stream_videos_schema.sql, videos_schema.sql

19 июл 2026, 07:00

Верифицирован

19 июл 2026, 07:000ea3a25

<?php
require_once __DIR__ . '/includes/functions.php';
require_once __DIR__ . '/includes/auth.php';

$slug = trim((string)($_GET['slug'] ?? ''));
$stmt = db()->prepare('SELECT p.*, u.username AS owner_name FROM playlists p JOIN users u ON u.id = p.user_id WHERE p.slug = ?');
$stmt->execute([$slug]);
$playlist = $stmt->fetch();
if (!$playlist) { http_response_code(404); require_once __DIR__ . '/includes/header.php'; echo '<div class="container"><p>Плейлист не найден</p></div>'; require_once __DIR__ . '/includes/footer.php'; exit; }

$user = current_user();
$isOwner = $user && (int)$user['id'] === (int)$playlist['user_id'];
if (!$playlist['is_public'] && !$isOwner) { http_response_code(403); require_once __DIR__ . '/includes/header.php'; echo '<div class="container"><p>Плейлист приватный</p></div>'; require_once __DIR__ . '/includes/footer.php'; exit; }

if ($_SERVER['REQUEST_METHOD'] === 'POST' && $isOwner) {
  csrf_verify();
  if (($_POST['action'] ?? '') === 'remove') {
    db()->prepare('DELETE FROM playlist_items WHERE playlist_id = ? AND video_id = ?')->execute([$playlist['id'], (int)$_POST['video_id']]);
  } elseif (($_POST['action'] ?? '') === 'delete_playlist') {
    db()->prepare('DELETE FROM playlists WHERE id = ?')->execute([$playlist['id']]);
    redirect('/playlists.php');
  }
  redirect('/playlist.php?slug=' . $slug);
}

$pageTitle = $playlist['title'];
require_once __DIR__ . '/includes/header.php';

$stmt = db()->prepare(
  "SELECT v.*, pi.position FROM playlist_items pi JOIN videos v ON v.id = pi.video_id
   WHERE pi.playlist_id = ? AND v.status = 'published' ORDER BY pi.position, pi.added_at"
);
$stmt->execute([$playlist['id']]);
$videos = $stmt->fetchAll();
?>
<div class="container" style="max-width:800px">
  <h1>🎞️ <?= e($playlist['title']) ?></h1>
  <p style="color:var(--text-dim);font-size:13px">
    от <a href="/profile.php?username=<?= urlencode($playlist['owner_name']) ?>" style="color:var(--accent-2)"><?= e($playlist['owner_name']) ?></a>
    · <?= count($videos) ?> видео <?= $playlist['is_public'] ? '· 🌐 публичный' : '· 🔒 приватный' ?>
  </p>
  <?php if ($isOwner): ?>
    <form method="POST" onsubmit="return confirm('Удалить плейлист целиком?')" style="margin-bottom:16px">
      <?= csrf_field() ?><input type="hidden" name="action" value="delete_playlist">
      <button type="submit" class="btn btn-outline btn-sm" style="color:var(--danger);border-color:var(--danger)">Удалить плейлист</button>
    </form>
  <?php endif; ?>

  <?php if (!$videos): ?><div class="empty-state"><p>Видео пока нет — добавляйте их со страницы просмотра кнопкой «В плейлист»</p></div><?php endif; ?>

  <?php foreach ($videos as $i => $v): ?>
    <div class="card" style="display:flex;gap:12px;align-items:center;padding:10px;margin-bottom:8px">
      <span style="color:var(--text-dim);width:24px;text-align:center"><?= $i + 1 ?></span>
      <a href="/video.php?slug=<?= e($v['slug']) ?>&playlist=<?= e($slug) ?>" style="display:flex;gap:12px;flex:1;text-decoration:none;color:inherit;align-items:center">
        <div style="width:100px;aspect-ratio:16/9;background:#111 url('<?= e($v['thumbnail_url'] ?: '/assets/img/video-placeholder.png') ?>') center/cover;border-radius:6px;flex-shrink:0"></div>
        <b style="font-size:13px"><?= e(mb_substr($v['title'], 0, 60)) ?></b>
      </a>
      <?php if ($isOwner): ?>
        <form method="POST"><?= csrf_field() ?><input type="hidden" name="action" value="remove"><input type="hidden" name="video_id" value="<?= (int)$v['id'] ?>">
          <button type="submit" class="btn btn-outline btn-sm">Убрать</button>
        </form>
      <?php endif; ?>
    </div>
  <?php endforeach; ?>
</div>
<?php require_once __DIR__ . '/includes/footer.php'; ?>