{% extends "admin_base.html" %}
{% set active = 'review' %}
{% block admin_content %}
<h1 class="page-title">投稿审核 <span class="muted small">（软件 {{ sw | length }} / 漏洞 {{ vulns | length }} / 文章 {{ arts | length }} 条待处理）</span></h1>

<div class="panel">
  <h2>待审软件</h2>
  <table class="table">
    <thead><tr><th>软件</th><th>版本</th><th>板块</th><th class="num">文件</th><th>投稿人</th><th>提交时间</th><th class="num">审核</th></tr></thead>
    <tbody>
      {% for s in sw %}
      <tr>
        <td>
          <a href="/admin/software/{{ s['id'] }}/edit" title="查看/编辑内容"><strong>{{ s['name'] }}</strong></a>
          {% if s['remark'] %}<br><span class="muted small">备注：{{ s['remark'] }}</span>{% endif %}
        </td>
        <td>{{ s['version'] or '-' }}</td>
        <td>{{ s['category_name'] or '-' }}</td>
        <td class="num">{{ s['file_count'] }}</td>
        <td>{{ s['submitter_name'] }}</td>
        <td class="muted">{{ s['created_at'] }}</td>
        <td class="num nowrap">
          <form method="post" action="/admin/review/software/{{ s['id'] }}" class="inline">
            <input type="hidden" name="action" value="approve">
            <button class="btn btn-sm btn-primary" type="submit">通过发布</button>
          </form>
          <form method="post" action="/admin/review/software/{{ s['id'] }}" class="inline review-reject">
            <input type="hidden" name="action" value="reject">
            <input type="hidden" name="note" value="">
            <button class="btn btn-sm btn-danger" type="submit">驳回</button>
          </form>
        </td>
      </tr>
      {% else %}<tr><td colspan="7" class="muted">没有待审核的软件投稿</td></tr>{% endfor %}
    </tbody>
  </table>
</div>

<div class="panel">
  <h2>待审漏洞补丁</h2>
  <table class="table">
    <thead><tr><th>标题</th><th>等级</th><th>CVE</th><th class="num">补丁</th><th>投稿人</th><th>提交时间</th><th class="num">审核</th></tr></thead>
    <tbody>
      {% for v in vulns %}
      {% set sev = severities.get(v['severity'], severities['medium']) %}
      <tr>
        <td><a href="/admin/vulns/{{ v['id'] }}/edit" title="查看/编辑内容"><strong>{{ v['title'] }}</strong></a></td>
        <td><span class="sev {{ sev[1] }}">{{ sev[0] }}</span></td>
        <td class="mono">{{ v['cve_no'] or '-' }}</td>
        <td class="num">{{ v['file_count'] }}</td>
        <td>{{ v['submitter_name'] }}</td>
        <td class="muted">{{ v['created_at'] }}</td>
        <td class="num nowrap">
          <form method="post" action="/admin/review/vuln/{{ v['id'] }}" class="inline">
            <input type="hidden" name="action" value="approve">
            <button class="btn btn-sm btn-primary" type="submit">通过发布</button>
          </form>
          <form method="post" action="/admin/review/vuln/{{ v['id'] }}" class="inline review-reject">
            <input type="hidden" name="action" value="reject">
            <input type="hidden" name="note" value="">
            <button class="btn btn-sm btn-danger" type="submit">驳回</button>
          </form>
        </td>
      </tr>
      {% else %}<tr><td colspan="7" class="muted">没有待审核的漏洞补丁投稿</td></tr>{% endfor %}
    </tbody>
  </table>
</div>

<div class="panel">
  <h2>待审技术文章</h2>
  <table class="table">
    <thead><tr><th>标题</th><th>摘要</th><th>投稿人</th><th>提交时间</th><th class="num">审核</th></tr></thead>
    <tbody>
      {% for a in arts %}
      <tr>
        <td><a href="/admin/articles/{{ a['id'] }}/edit" title="查看/编辑内容"><strong>{{ a['title'] }}</strong></a></td>
        <td class="muted small">{{ a['summary'] | truncate(60) }}</td>
        <td>{{ a['submitter_name'] }}</td>
        <td class="muted">{{ a['created_at'] }}</td>
        <td class="num nowrap">
          <form method="post" action="/admin/review/article/{{ a['id'] }}" class="inline">
            <input type="hidden" name="action" value="approve">
            <button class="btn btn-sm btn-primary" type="submit">通过发布</button>
          </form>
          <form method="post" action="/admin/review/article/{{ a['id'] }}" class="inline review-reject">
            <input type="hidden" name="action" value="reject">
            <input type="hidden" name="note" value="">
            <button class="btn btn-sm btn-danger" type="submit">驳回</button>
          </form>
        </td>
      </tr>
      {% else %}<tr><td colspan="5" class="muted">没有待审核的文章投稿</td></tr>{% endfor %}
    </tbody>
  </table>
</div>
<script>
// 驳回前弹窗填写原因，写入隐藏域后提交
document.querySelectorAll(".review-reject").forEach(function (form) {
  form.addEventListener("submit", function (e) {
    var note = prompt("驳回原因（会展示给投稿人）：");
    if (note === null) { e.preventDefault(); return; }
    if (!note.trim()) { alert("请填写驳回原因"); e.preventDefault(); return; }
    form.querySelector('input[name="note"]').value = note.trim();
  });
});
</script>
{% endblock %}