{% extends "admin_base.html" %}
{% set active = 'submit_vuln' if submitter_mode else 'vulns' %}
{% block title %}{{ page_title }} - {{ site_name }}{% endblock %}
{% block admin_content %}
<h1 class="page-title">{{ page_title }}</h1>
{% if error %}<div class="alert alert-error">{{ error }}</div>{% endif %}
{% if submitter_mode and item and item['review_note'] %}
<div class="alert alert-error">审核驳回：{{ item['review_note'] }}（修改后保存将重新提交审核）</div>
{% elif submitter_mode %}
<div class="alert alert-ok">提交后需管理员审核，通过后才会出现在前台漏洞板块</div>
{% endif %}
<form class="panel form" method="post" enctype="multipart/form-data" action="{{ form_action }}">
  <div class="form-row">
    <label>漏洞标题 <em>*</em>
      <input type="text" name="title" required maxlength="128" value="{{ item['title'] if item else (form.get('title','') if form else '') }}" placeholder="如：OpenSSL 缓冲区溢出漏洞">
    </label>
    <label>CVE 编号
      <input type="text" name="cve_no" maxlength="32" value="{{ item['cve_no'] if item else (form.get('cve_no','') if form else '') }}" placeholder="如 CVE-2026-1234（可选）">
    </label>
  </div>
  <div class="form-row">
    <label>严重程度
      {% set cur_sev = item['severity'] if item else (form.get('severity','medium') if form else 'medium') %}
      <select name="severity">
        {% for key, (label, cls) in severities.items() %}
        <option value="{{ key }}" {% if cur_sev == key %}selected{% endif %}>{{ label }}</option>
        {% endfor %}
      </select>
    </label>
    <label>官方公告链接
      <input type="text" name="official_url" maxlength="500" value="{{ item['official_url'] if item else (form.get('official_url','') if form else '') }}" placeholder="https://…（可选）">
    </label>
  </div>
  <div class="form-row">
    <label>影响产品
      <input type="text" name="affected_product" maxlength="128" value="{{ item['affected_product'] if item else (form.get('affected_product','') if form else '') }}" placeholder="如：OpenSSL">
    </label>
    <label>影响版本
      <input type="text" name="affected_version" maxlength="128" value="{{ item['affected_version'] if item else (form.get('affected_version','') if form else '') }}" placeholder="如：3.0.0 - 3.0.7">
    </label>
  </div>
  <label>漏洞描述（支持 Markdown 语法）
    <div class="md-toolbar">
      <button type="button" class="btn btn-sm btn-ghost md-upload-btn" data-kind="image">📷 插入图片</button>
      <button type="button" class="btn btn-sm btn-ghost md-upload-btn" data-kind="video">🎬 插入视频</button>
      <span class="muted small md-tip">可直接 Ctrl+V 粘贴截图，或拖入图片/视频</span>
    </div>
    <textarea name="description" class="md-editor" rows="10" placeholder="漏洞成因、影响范围、修复建议、补丁安装方法…">{{ item['description'] if item else (form.get('description','') if form else '') }}</textarea>
  </label>
  {% if not submitter_mode and item %}
  <div class="check-row">
    <label class="checkbox"><input type="checkbox" name="status" value="1" {% if item['status'] == 1 %}checked{% endif %}> 发布（取消勾选则下线）</label>
  </div>
  {% endif %}

  <h2 class="form-section">补丁文件</h2>
  {% if item %}
  <div class="existing-files">
    {% for f in files %}
    <div class="file-edit-row">
      <input type="hidden" name="existing_ids" value="{{ f['id'] }}">
      <input type="text" name="existing_labels" value="{{ f['label'] }}" class="label-input">
      <span class="muted small mono">{{ f['original_name'] }} · {{ f['file_size'] | human_size }} · 下载 {{ f['download_count'] }} 次</span>
      <label class="checkbox small"><input type="checkbox" name="delete_ids" value="{{ f['id'] }}"> 删除</label>
    </div>
    {% endfor %}
  </div>
  {% endif %}
  <div id="file-rows">
    <div class="file-new-row">
      <input type="text" name="file_labels" placeholder="备注标签，如：x86_64 补丁包" class="label-input">
      <input type="text" name="file_paths" class="mono" placeholder="服务器路径（大文件用）/srv/software/xx.zip">
      <span class="file-picked muted small"></span>
      <input type="file" name="files_0">
      <button type="button" class="btn btn-sm btn-danger row-del" title="移除本行">×</button>
    </div>
  </div>
  <button type="button" class="btn btn-ghost btn-sm" id="add-file-row">＋ 再添加一个补丁文件</button>
  <p class="muted small">每行先写备注标签，再二选一：填服务器路径（大文件推荐）或选择上传文件；两者都留空则该行忽略。补丁文件可选填，也可以只提供官方公告链接。</p>

  <div class="form-actions">
    <a class="btn btn-ghost" href="{{ cancel_url }}">取消</a>
    <button class="btn btn-primary" type="submit">{% if submitter_mode %}{% if item %}保存并重新提交{% else %}提交审核{% endif %}{% else %}{% if item %}保存修改{% else %}确认发布{% endif %}{% endif %}</button>
  </div>
</form>
{% endblock %}