{% extends "admin_base.html" %}
{% set active = 'vulns' %}
{% block admin_content %}
<div class="page-head">
  <h1 class="page-title">漏洞管理</h1>
  <div class="page-head-actions">
    <a class="btn btn-ghost" href="/vulns" target="_blank">查看前台</a>
    <a class="btn btn-primary" href="/admin/vulns/add">＋ 发布漏洞补丁</a>
  </div>
</div>
<form class="filter-bar" method="get" action="/admin/vulns">
  <input type="text" name="q" value="{{ q }}" placeholder="按标题 / CVE 搜索…">
  <button class="btn btn-ghost" type="submit">搜索</button>
</form>
<div class="panel">
  <table class="table">
    <thead><tr><th>标题</th><th>等级</th><th>CVE</th><th class="num">补丁</th><th class="num">浏览</th><th>状态</th><th>发布人</th><th>时间</th><th class="num">操作</th></tr></thead>
    <tbody>
      {% for v in rows %}
      {% set sev = severities.get(v['severity'], severities['medium']) %}
      <tr>
        <td>
          <a href="/vulns/{{ v['id'] }}" target="_blank"><strong>{{ v['title'] }}</strong></a>
          {% if v['affected_product'] %}<br><span class="muted small">影响：{{ v['affected_product'] }} {{ v['affected_version'] }}</span>{% endif %}
        </td>
        <td><span class="sev {{ sev[1] }}">{{ sev[0] }}</span></td>
        <td class="mono">{{ v['cve_no'] or '-' }}</td>
        <td class="num">{{ v['file_count'] }}</td>
        <td class="num muted">{{ v['view_count'] }}</td>
        <td>
          {% if v['status'] == 1 %}<span class="status-on">已发布</span>
          {% elif v['status'] == 2 %}<span class="status-pending">待审核</span>
          {% else %}<span class="status-off">已下线</span>{% endif %}
        </td>
        <td class="muted">{{ v['submitter_name'] or '-' }}</td>
        <td class="muted">{{ v['created_at'][:10] }}</td>
        <td class="num nowrap">
          <a class="btn btn-sm btn-ghost" href="/admin/vulns/{{ v['id'] }}/edit">编辑</a>
          <form method="post" action="/admin/vulns/{{ v['id'] }}/delete" class="inline" onsubmit="return confirm('确定删除【{{ v['title'] }}】？上传的补丁文件也会一并删除。')">
            <button class="btn btn-sm btn-danger" type="submit">删除</button>
          </form>
        </td>
      </tr>
      {% else %}
      <tr><td colspan="9" class="muted">还没有漏洞条目，点击右上角"发布漏洞补丁"开始吧</td></tr>
      {% endfor %}
    </tbody>
  </table>
</div>
{% endblock %}