diff --git a/docker-compose.local.yml b/docker-compose.local.yml index af5b4e3..5725c15 100644 --- a/docker-compose.local.yml +++ b/docker-compose.local.yml @@ -31,6 +31,7 @@ services: - ./supabase/migrations/14-email-requested-trigger.sql:/sql/14-email-requested-trigger.sql:ro - ./supabase/migrations/15-individuell-vat-subtotal-fix.sql:/sql/15-individuell-vat-subtotal-fix.sql:ro - ./supabase/migrations/16-rental-type-weekend-gap-fix.sql:/sql/16-rental-type-weekend-gap-fix.sql:ro + - ./supabase/migrations/17-vehicle-photos.sql:/sql/17-vehicle-photos.sql:ro kong: volumes: diff --git a/docker-compose.yml b/docker-compose.yml index 60eaa29..a806b35 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -224,6 +224,7 @@ services: - /mnt/user/appdata/mc-cars/supabase/migrations/14-email-requested-trigger.sql:/sql/14-email-requested-trigger.sql:ro - /mnt/user/appdata/mc-cars/supabase/migrations/15-individuell-vat-subtotal-fix.sql:/sql/15-individuell-vat-subtotal-fix.sql:ro - /mnt/user/appdata/mc-cars/supabase/migrations/16-rental-type-weekend-gap-fix.sql:/sql/16-rental-type-weekend-gap-fix.sql:ro + - /mnt/user/appdata/mc-cars/supabase/migrations/17-vehicle-photos.sql:/sql/17-vehicle-photos.sql:ro entrypoint: ["sh","-c"] command: - | @@ -256,6 +257,7 @@ services: psql "postgresql://postgres:$$PGPASSWORD@db:5432/postgres" -v ON_ERROR_STOP=1 -f /sql/14-email-requested-trigger.sql psql "postgresql://postgres:$$PGPASSWORD@db:5432/postgres" -v ON_ERROR_STOP=1 -f /sql/15-individuell-vat-subtotal-fix.sql psql "postgresql://postgres:$$PGPASSWORD@db:5432/postgres" -v ON_ERROR_STOP=1 -f /sql/16-rental-type-weekend-gap-fix.sql + psql "postgresql://postgres:$$PGPASSWORD@db:5432/postgres" -v ON_ERROR_STOP=1 -f /sql/17-vehicle-photos.sql echo "post-init done." restart: "no" networks: [mccars] diff --git a/frontend/admin.html b/frontend/admin.html index b569349..c8ccc55 100644 --- a/frontend/admin.html +++ b/frontend/admin.html @@ -170,13 +170,18 @@
-
- +
+
+ đŸ“· + Fotos hochladen (JPG/PNG/WebP, max 50 MB) + Klicken oder Dateien hierher ziehen · Mehrfachauswahl möglich +
+ +
+ +
diff --git a/frontend/admin.js b/frontend/admin.js index 5cfb203..51fa1de 100644 --- a/frontend/admin.js +++ b/frontend/admin.js @@ -52,7 +52,8 @@ const formTitle = document.querySelector("#formTitle"); const saveBtn = document.querySelector("#saveBtn"); const resetBtn = document.querySelector("#resetBtn"); const photoInput = document.querySelector("#photoInput"); -const photoPreview = document.querySelector("#photoPreview"); +const photoUploadZone = document.querySelector("#photoUploadZone"); +const extraPhotoGallery = document.querySelector("#extraPhotoGallery"); const tableBody = document.querySelector("#adminTable tbody"); // ----- State ----- @@ -66,6 +67,7 @@ const state = { vehicles: [], vehicleMap: new Map(), currentPhotoPath: null, + vehiclePhotos: [], realtimeChannel: null, forcedRotation: false, }; @@ -321,7 +323,7 @@ function loadForEdit(id) { vehicleForm.photo_url.value = v.photo_url; vehicleForm.is_active.checked = v.is_active; state.currentPhotoPath = v.photo_path || null; - updatePreview(v.photo_url); + loadVehiclePhotos(v.id); window.scrollTo({ top: 0, behavior: "smooth" }); } @@ -337,7 +339,7 @@ resetBtn.addEventListener("click", () => { vehicleForm.kaution_eur.value = 5000; vehicleForm.price_per_km_eur.value = 1.50; state.currentPhotoPath = null; - updatePreview(""); + state.vehiclePhotos = []; formTitle.textContent = "Neues Fahrzeug"; formFeedback.textContent = ""; }); @@ -390,41 +392,275 @@ async function deleteVehicle(id) { const v = state.vehicleMap.get(id); if (!v) return; if (!confirm(`Delete ${v.brand} ${v.model}?`)) return; + // Delete old main photo if (v.photo_path) await supabase.storage.from("vehicle-photos").remove([v.photo_path]); + // Delete gallery photos from storage + const { data: photos } = await supabase.from("vehicle_photos").select("photo_path").eq("vehicle_id", id); + if (photos?.length) { + await supabase.storage.from("vehicle-photos").remove(photos.map(p => p.photo_path)); + } const { error } = await supabase.from("vehicles").delete().eq("id", id); if (error) { alert(error.message); return; } await loadVehicles(); renderVehicles(); } -// Photo upload -photoInput.addEventListener("change", async () => { - const file = photoInput.files?.[0]; - if (!file) return; - formFeedback.className = "form-feedback"; - formFeedback.textContent = "Uploading photo..."; - try { - // Delete old photo if exists - if (state.currentPhotoPath) { - await supabase.storage.from("vehicle-photos").remove([state.currentPhotoPath]); - } - const ext = (file.name.split(".").pop() || "jpg").toLowerCase(); - const path = `${crypto.randomUUID()}.${ext}`; - const { error: upErr } = await supabase.storage - .from("vehicle-photos") - .upload(path, file, { contentType: file.type, upsert: true }); - if (upErr) throw upErr; - const { data: pub } = supabase.storage.from("vehicle-photos").getPublicUrl(path); - state.currentPhotoPath = path; - vehicleForm.photo_url.value = pub.publicUrl; - updatePreview(pub.publicUrl); - formFeedback.textContent = "Upload ok."; - } catch (err) { - formFeedback.className = "form-feedback error"; - formFeedback.textContent = err.message || String(err); +// ----- Unified Photo Upload + Gallery ----- + +async function loadVehiclePhotos(vehicleId) { + if (!vehicleId) { + state.vehiclePhotos = []; + renderExtraPhotoGallery(); + return; } + const { data, error } = await supabase + .from("vehicle_photos") + .select("*") + .eq("vehicle_id", vehicleId) + .order("display_order", { ascending: true }); + if (error) { console.error("Failed to load vehicle photos:", error); return; } + state.vehiclePhotos = data || []; + renderExtraPhotoGallery(); +} + +function renderExtraPhotoGallery() { + if (!extraPhotoGallery) return; + extraPhotoGallery.innerHTML = ""; + const photos = state.vehiclePhotos; + if (!photos.length) return; + + for (let i = 0; i < photos.length; i++) { + const ph = photos[i]; + const card = document.createElement("div"); + card.className = "admin-photo-card"; + card.draggable = true; + card.dataset.photoId = ph.id; + card.dataset.photoIdx = i; + card.innerHTML = ` + Foto ${i + 1} +
+ + +
+
+ ${!ph.is_primary ? `` : ''} + +
+ ${ph.is_primary ? 'Hauptfoto' : ''} + + `; + extraPhotoGallery.appendChild(card); + } + + // Action buttons + extraPhotoGallery.querySelectorAll(".admin-photo-delete").forEach(btn => { + btn.addEventListener("click", async () => { + await deleteVehiclePhoto(btn.dataset.photoId); + }); + }); + extraPhotoGallery.querySelectorAll(".admin-photo-set-primary").forEach(btn => { + btn.addEventListener("click", async () => { + await setPrimaryPhoto(btn.dataset.photoId); + }); + }); + extraPhotoGallery.querySelectorAll(".admin-photo-arrow").forEach(btn => { + btn.addEventListener("click", async () => { + const card = btn.closest(".admin-photo-card"); + const idx = +card.dataset.photoIdx; + const dir = +btn.dataset.moveDir; + await reorderPhoto(idx, dir); + }); + }); + + // Drag and drop + extraPhotoGallery.querySelectorAll(".admin-photo-card").forEach(card => { + card.addEventListener("dragstart", handleDragStart); + card.addEventListener("dragover", handleDragOver); + card.addEventListener("dragenter", handleDragEnter); + card.addEventListener("dragleave", handleDragLeave); + card.addEventListener("drop", handleDrop); + card.addEventListener("dragend", handleDragEnd); + }); +} + +let draggedPhotoIdx = null; + +function handleDragStart(e) { + draggedPhotoIdx = +this.dataset.photoIdx; + e.dataTransfer.effectAllowed = "move"; + e.dataTransfer.setData("text/plain", this.dataset.photoId); + this.style.opacity = "0.4"; +} + +function handleDragOver(e) { + e.preventDefault(); + e.dataTransfer.dropEffect = "move"; +} + +function handleDragEnter(e) { + e.preventDefault(); + if (+this.dataset.photoIdx !== draggedPhotoIdx) { + this.classList.add("admin-photo-card-drag-over"); + } +} + +function handleDragLeave() { + this.classList.remove("admin-photo-card-drag-over"); +} + +function handleDrop(e) { + e.preventDefault(); + this.classList.remove("admin-photo-card-drag-over"); + const targetIdx = +this.dataset.photoIdx; + if (draggedPhotoIdx !== null && draggedPhotoIdx !== targetIdx) { + const dir = targetIdx > draggedPhotoIdx ? 1 : -1; + reorderPhoto(draggedPhotoIdx, dir, targetIdx); + } +} + +function handleDragEnd() { + this.style.opacity = "1"; + draggedPhotoIdx = null; + extraPhotoGallery?.querySelectorAll(".admin-photo-card").forEach(c => c.classList.remove("admin-photo-card-drag-over")); +} + +async function reorderPhoto(fromIdx, dir, targetIdx) { + const photos = state.vehiclePhotos; + if (photos.length < 2) return; + + let toIdx; + if (targetIdx !== undefined) { + toIdx = targetIdx; + } else { + toIdx = fromIdx + dir; + if (toIdx < 0 || toIdx >= photos.length) return; + } + + // Swap in local array + [photos[fromIdx], photos[toIdx]] = [photos[toIdx], photos[fromIdx]]; + + // Build order payload + const orderPayload = photos.map((p, i) => ({ id: p.id, order: i })); + + const vid = vehicleForm.vid?.value; + if (vid) { + try { + await supabase.rpc("reorder_vehicle_photos", { + p_vehicle_id: vid, + p_photo_orders: orderPayload, + }); + } catch (err) { + console.error("Reorder failed:", err); + [photos[fromIdx], photos[toIdx]] = [photos[fromIdx], photos[toIdx]]; + return; + } + } + renderExtraPhotoGallery(); +} + +async function deleteVehiclePhoto(photoId) { + const ph = state.vehiclePhotos.find(p => p.id === photoId); + if (!ph) return; + try { + if (ph.photo_path) { + await supabase.storage.from("vehicle-photos").remove([ph.photo_path]); + } + const { error } = await supabase.from("vehicle_photos").delete().eq("id", photoId); + if (error) throw error; + state.vehiclePhotos = state.vehiclePhotos.filter(p => p.id !== photoId); + + // If deleted was primary, promote next photo + if (ph.is_primary && state.vehiclePhotos.length) { + const newPrimary = state.vehiclePhotos[0]; + const vid = vehicleForm.vid?.value; + if (vid) { + await supabase.rpc("set_primary_vehicle_photo", { p_vehicle_id: vid, p_photo_id: newPrimary.id }); + vehicleForm.photo_url.value = newPrimary.photo_url; + } + } + renderExtraPhotoGallery(); + } catch (err) { + console.error("Failed to delete photo:", err); + } +} + +async function setPrimaryPhoto(photoId) { + const vid = vehicleForm.vid?.value; + if (!vid) return; + try { + const ph = state.vehiclePhotos.find(p => p.id === photoId); + await supabase.rpc("set_primary_vehicle_photo", { p_vehicle_id: vid, p_photo_id: photoId }); + vehicleForm.photo_url.value = ph?.photo_url || ""; + await loadVehiclePhotos(vid); + } catch (err) { + console.error("Failed to set primary photo:", err); + } +} + +// Unified photo upload handler +photoInput.addEventListener("change", async () => { + const files = photoInput.files; + if (!files.length) return; + const vid = vehicleForm.vid?.value; + if (!vid) { + formFeedback.className = "form-feedback error"; + formFeedback.textContent = "Bitte zuerst das Fahrzeug speichern, dann Fotos hinzufĂŒgen."; + return; + } + formFeedback.className = "form-feedback"; + formFeedback.textContent = `Uploading ${files.length} photo(s)...`; + let uploaded = 0; + for (const file of files) { + try { + const ext = (file.name.split(".").pop() || "jpg").toLowerCase(); + const path = `${vid}/${crypto.randomUUID()}.${ext}`; + const { error: upErr } = await supabase.storage + .from("vehicle-photos") + .upload(path, file, { contentType: file.type, upsert: true }); + if (upErr) throw upErr; + const { data: pub } = supabase.storage.from("vehicle-photos").getPublicUrl(path); + const isFirst = state.vehiclePhotos.length === 0; + const maxOrder = state.vehiclePhotos.reduce((m, p) => Math.max(m, p.display_order), -1); + await supabase.from("vehicle_photos").insert({ + vehicle_id: vid, + photo_url: pub.publicUrl, + photo_path: path, + display_order: maxOrder + 1, + is_primary: isFirst, + }); + if (isFirst) { + vehicleForm.photo_url.value = pub.publicUrl; + } + uploaded++; + } catch (err) { + console.error("Upload failed:", err); + } + } + await loadVehiclePhotos(vid); + formFeedback.textContent = `${uploaded} Foto(s) hochgeladen.`; + photoInput.value = ""; }); -function updatePreview(url) { photoPreview.style.backgroundImage = url ? `url('${url}')` : ""; } + +// Drag-and-drop on upload zone +if (photoUploadZone) { + photoUploadZone.addEventListener("dragover", e => { + e.preventDefault(); + e.dataTransfer.dropEffect = "copy"; + photoUploadZone.classList.add("drag-active"); + }); + photoUploadZone.addEventListener("dragleave", () => { + photoUploadZone.classList.remove("drag-active"); + }); + photoUploadZone.addEventListener("drop", e => { + e.preventDefault(); + photoUploadZone.classList.remove("drag-active"); + const files = e.dataTransfer.files; + if (files.length) { + photoInput.files = files; + photoInput.dispatchEvent(new Event("change")); + } + }); +} // ========================================================================= // LEADS diff --git a/frontend/agb.html b/frontend/agb.html index fd2fcd2..7631d47 100644 --- a/frontend/agb.html +++ b/frontend/agb.html @@ -4,8 +4,8 @@ AGB · MC Cars - - + + @@ -51,13 +51,12 @@
@@ -88,16 +87,15 @@
-

Sportwagenvermietung in Österreich. Standort: Steiermark (TBD).

+

Sportwagenvermietung in der Steiermark, Österreich.

Navigation

- Fahrzeuge - Warum wir + Fahrzeuge Buchen
@@ -111,8 +109,7 @@

Kontakt

- hello@mccars.at - +43 316 880000 + hello@mc-cars.at
diff --git a/frontend/app.js b/frontend/app.js index 9d0cd6c..0714ac0 100644 --- a/frontend/app.js +++ b/frontend/app.js @@ -16,6 +16,7 @@ const state = { sort: "sort_order", maxPrice: null, reviewIdx: 0, + vehiclePhotosMap: new Map(), }; // ---------------- Elements ---------------- @@ -124,6 +125,31 @@ async function loadVehicles() { state.vehicles = data || []; statCarsCount.textContent = state.vehicles.length; + // Load vehicle photos + if (state.vehicles.length > 0) { + const ids = state.vehicles.map(v => v.id); + const { data: photos } = await supabase + .from("vehicle_photos") + .select("*") + .in("vehicle_id", ids) + .order("display_order", { ascending: true }); + state.vehiclePhotosMap = new Map(); + if (photos) { + for (const ph of photos) { + if (!state.vehiclePhotosMap.has(ph.vehicle_id)) { + state.vehiclePhotosMap.set(ph.vehicle_id, []); + } + state.vehiclePhotosMap.get(ph.vehicle_id).push(ph); + } + } + // Also include legacy main photo if no gallery photos exist + for (const v of state.vehicles) { + if (!state.vehiclePhotosMap.has(v.id) && v.photo_url) { + state.vehiclePhotosMap.set(v.id, [{ photo_url: v.photo_url }]); + } + } + } + const brands = [...new Set(state.vehicles.map(v => v.brand))].sort(); brandFilter.innerHTML = `` + brands.map(b => ``).join(""); @@ -156,12 +182,16 @@ function renderGrid() { emptyState.style.display = state.filtered.length ? "none" : "block"; for (const v of state.filtered) { - const photoUrl = optimizedVehiclePhotoUrl(v.photo_url); + const photos = state.vehiclePhotosMap?.get(v.id) || []; + const primaryPhoto = photos.find(p => p.is_primary) || photos[0]; + const photoUrl = optimizedVehiclePhotoUrl(primaryPhoto?.photo_url || v.photo_url); + const photoCount = photos.length; const card = document.createElement("article"); card.className = "vehicle-card"; card.innerHTML = ` -
- ${escapeAttr(v.brand)} ${escapeAttr(v.model)} +
+ ${escapeAttr(v.brand)} ${escapeAttr(v.model)} + ${photoCount > 1 ? `
${photos.map((_, i) => ``).join('')}
` : ''}
@@ -194,18 +224,54 @@ function renderGrid() { document.querySelector("#buchen").scrollIntoView({ behavior: "smooth" }); }); }); + + // Photo carousel nav + grid.querySelectorAll(".vehicle-photo-prev").forEach(btn => { + btn.addEventListener("click", (e) => { + e.stopPropagation(); + const container = btn.closest(".vehicle-photo"); + const urls = JSON.parse(container.dataset.photos); + let idx = +container.dataset.current; + idx = (idx - 1 + urls.length) % urls.length; + container.dataset.current = idx; + container.querySelector(".vehicle-photo-img").src = urls[idx]; + updatePhotoDots(container, idx); + }); + }); + grid.querySelectorAll(".vehicle-photo-next").forEach(btn => { + btn.addEventListener("click", (e) => { + e.stopPropagation(); + const container = btn.closest(".vehicle-photo"); + const urls = JSON.parse(container.dataset.photos); + let idx = +container.dataset.current; + idx = (idx + 1) % urls.length; + container.dataset.current = idx; + container.querySelector(".vehicle-photo-img").src = urls[idx]; + updatePhotoDots(container, idx); + }); + }); +} + +function updatePhotoDots(container, idx) { + container.querySelectorAll(".vehicle-photo-dots span").forEach((dot, i) => { + dot.classList.toggle("active", i === idx); + }); } function openDetails(id) { const v = state.vehicles.find(x => x.id === id); if (!v) return; - const photoUrl = optimizedVehiclePhotoUrl(v.photo_url); + const photos = state.vehiclePhotosMap?.get(v.id) || []; + const photoUrls = photos.length ? photos.map(p => optimizedVehiclePhotoUrl(p.photo_url)) : [optimizedVehiclePhotoUrl(v.photo_url)]; const lang = getLang(); const desc = lang === "en" ? v.description_en : v.description_de; dialogTitle.textContent = `${v.brand} ${v.model}`; dialogBody.innerHTML = ` - ${escapeAttr(v.brand + ' ' + v.model)} +
+ ${escapeAttr(v.brand + ' ' + v.model)} + ${photoUrls.length > 1 ? `
${photoUrls.map((u, i) => ``).join('')}
` : ''} +

${escapeHtml(desc || "")}

${v.power_hp}${t("hp")}
@@ -232,6 +298,37 @@ function openDetails(id) { bpfCar.dispatchEvent(new Event("change")); document.querySelector("#buchen").scrollIntoView({ behavior: "smooth" }); }); + + // Dialog gallery nav + const gallery = dialogBody.querySelector(".dialog-gallery"); + const galleryPrev = dialogBody.querySelector(".dialog-gallery-prev"); + const galleryNext = dialogBody.querySelector(".dialog-gallery-next"); + if (galleryPrev) { + galleryPrev.addEventListener("click", () => { + let idx = +gallery.dataset.galleryIdx; + idx = (idx - 1 + photoUrls.length) % photoUrls.length; + gallery.dataset.galleryIdx = idx; + gallery.querySelector(".dialog-gallery-main").src = photoUrls[idx]; + gallery.querySelectorAll(".dialog-gallery-thumbs button").forEach((b, i) => b.classList.toggle("active", i === idx)); + }); + } + if (galleryNext) { + galleryNext.addEventListener("click", () => { + let idx = +gallery.dataset.galleryIdx; + idx = (idx + 1) % photoUrls.length; + gallery.dataset.galleryIdx = idx; + gallery.querySelector(".dialog-gallery-main").src = photoUrls[idx]; + gallery.querySelectorAll(".dialog-gallery-thumbs button").forEach((b, i) => b.classList.toggle("active", i === idx)); + }); + } + gallery?.querySelectorAll(".dialog-gallery-thumbs button").forEach(btn => { + btn.addEventListener("click", () => { + const idx = +btn.dataset.gidx; + gallery.dataset.galleryIdx = idx; + gallery.querySelector(".dialog-gallery-main").src = photoUrls[idx]; + gallery.querySelectorAll(".dialog-gallery-thumbs button").forEach((b, i) => b.classList.toggle("active", i === idx)); + }); + }); } // ---------------- Reviews ---------------- @@ -400,7 +497,8 @@ async function updateSidebar() { const deposit = price.deposit_eur; const includedKmPerDay = price.included_km_per_day || 150; const includedKm = totalDays * includedKmPerDay; - const photoUrl = optimizedVehiclePhotoUrl(v.photo_url); + const sidebarPhotos = state.vehiclePhotosMap?.get(v.id) || []; + const photoUrl = optimizedVehiclePhotoUrl((sidebarPhotos.find(p => p.is_primary) || sidebarPhotos[0] || v)?.photo_url || v.photo_url); if (totalDays > 2) { // Individuell mode: show info banner instead of pricing diff --git a/frontend/datenschutz.html b/frontend/datenschutz.html index 9db022c..2f1daf6 100644 --- a/frontend/datenschutz.html +++ b/frontend/datenschutz.html @@ -4,8 +4,8 @@ Datenschutz · MC Cars (GmbH) - - + + @@ -48,13 +48,12 @@
-
-

Datenschutz

-
-

Buchungsanfragen werden aktuell zu Demozwecken lokal im Browser gespeichert. Fahrzeugdaten werden ĂŒber ein selbstgehostetes Supabase verwaltet.

-

Ansprechpartner: hello@mccars.at

+
+

DatenschutzerklÀrung

+ +
+

Der Schutz Ihrer persönlichen Daten ist uns ein wichtiges Anliegen. Wir verarbeiten Ihre Daten daher ausschließlich auf Grundlage der gesetzlichen Bestimmungen (DSGVO, DSG 2018). In diesen Datenschutzinformationen informieren wir Sie ĂŒber die wichtigsten Aspekte der Datenverarbeitung im Rahmen unserer Website.

+ +

Verantwortlicher fĂŒr die Datenverarbeitung

+

MC Cars GmbH
Gaisfeld 1/2, 8564 Krottendorf-Gaisfeld
E-Mail: hello@mc-cars.at

+ +

Daten, die wir verarbeiten

+ +

Server-Logfiles

+

Beim Besuch unserer Website werden automatisch Informationen in Server-Logfiles gespeichert, die Ihr Browser an uns ĂŒbermittelt. Dies sind:

+
    +
  • Browsertyp und Browserversion
    • +
  • Verwendetes Betriebssystem
    • +
  • Referrer URL (die zuvor besuchte Seite)
    • +
  • Hostname des zugreifenden Rechners
    • +
  • Uhrzeit der Serveranfrage
    • +
  • IP-Adresse
    • +
+

Eine ZusammenfĂŒhrung dieser Daten mit anderen Datenquellen wird nicht vorgenommen.

+ +

Buchungsanfragen

+

Wenn Sie unser Buchungsformular nutzen, werden Ihre angegebenen Daten zwecks Bearbeitung der Anfrage und fĂŒr den Fall von Anschlussfragen gespeichert. Dies umfasst:

+
    +
  • Name
    • +
  • E-Mail-Adresse
    • +
  • Telefonnummer
    • +
  • GewĂ€hltes Fahrzeug und Mietzeitraum
    • +
  • Nachricht / Anmerkungen
    • +
+

Diese Daten geben wir nicht ohne Ihre Einwilligung weiter.

+ +

IdentitÀtsdokumente

+

Zur Bearbeitung von Buchungsanfragen laden wir IdentitĂ€tsdokumente (Ausweis, FĂŒhrerschein) sowie optionale Einkommensnachweise hoch. Diese Dokumente dienen ausschließlich der IdentitĂ€tsverifizierung und BonitĂ€tsprĂŒfung. Sie werden vertraulich behandelt und nicht an Dritte weitergegeben.

+ +

Cookies und lokale Speicherung

+

Unsere Website verwendet lokale Speicherung (localStorage) fĂŒr die Auswahl der Spracheinstellung. Diese Daten werden ausschließlich auf Ihrem EndgerĂ€t gespeichert und nicht an uns ĂŒbermittelt.

+ +

Zweck der Datenverarbeitung

+

Die Verarbeitung Ihrer personenbezogenen Daten erfolgt zu folgenden Zwecken:

+
    +
  • Zur Bereitstellung, Optimierung und Weiterentwicklung unserer Website
    • +
  • Zur Bearbeitung Ihrer Buchungsanfragen
    • +
  • Zur IdentitĂ€tsprĂŒfung und BonitĂ€tsprĂŒfung
    • +
  • Zur GewĂ€hrleistung der Sicherheit und FunktionsfĂ€higkeit unserer Website
    • +
  • Zur ErfĂŒllung gesetzlicher Verpflichtungen
    • +
+ +

Rechtsgrundlage der Verarbeitung

+

Die Verarbeitung Ihrer personenbezogenen Daten erfolgt auf folgenden Rechtsgrundlagen:

+
    +
  • ErfĂŒllung eines Vertrags oder vorvertraglicher Maßnahmen (Art. 6 Abs. 1 lit. b DSGVO) – bei der Bearbeitung Ihrer Buchungsanfragen und der Verarbeitung Ihrer IdentitĂ€tsdokumente
    • +
  • ErfĂŒllung einer rechtlichen Verpflichtung (Art. 6 Abs. 1 lit. c DSGVO) – z.B. aufgrund gesetzlicher Aufbewahrungsfristen
    • +
  • Berechtigtes Interesse (Art. 6 Abs. 1 lit. f DSGVO) – zur GewĂ€hrleistung der Sicherheit, der FunktionsfĂ€higkeit und der Optimierung unserer Website
    • +
+ +

Datenhosting

+

Unsere Website und Datenbank laufen auf einer selbstgehosteten Infrastruktur. Alle personenbezogenen Daten werden auf unseren eigenen Servern verarbeitet und gespeichert. Es erfolgt keine Weitergabe an Cloud-Dienstanbieter oder Drittunternehmen.

+ +

Übermittlung Ihrer Daten

+

Eine Übermittlung Ihrer personenbezogenen Daten an Dritte erfolgt grundsĂ€tzlich nicht, es sei denn:

+
    +
  • Dies ist zur ErfĂŒllung unserer vertraglichen Pflichten erforderlich
    • +
  • Wir sind gesetzlich dazu verpflichtet
    • +
  • Sie haben ausdrĂŒcklich eingewilligt
    • +
+ +

Speicherdauer

+

Wir speichern Ihre personenbezogenen Daten nur so lange, wie es fĂŒr die Erreichung der oben genannten Zwecke erforderlich ist oder wie es die gesetzlichen Aufbewahrungspflichten vorsehen. IdentitĂ€tsdokumente werden nach Abschluss der Buchung und ErfĂŒllung der gesetzlichen Aufbewahrungsfristen gelöscht.

+ +

Ihre Rechte

+

Sie haben hinsichtlich Ihrer bei uns gespeicherten personenbezogenen Daten folgende Rechte:

+
    +
  • Recht auf Auskunft (Art. 15 DSGVO): Sie können Auskunft darĂŒber verlangen, ob und welche personenbezogenen Daten von Ihnen verarbeitet werden.
    • +
  • Recht auf Berichtigung (Art. 16 DSGVO): Sie können die Berichtigung unrichtiger oder die VervollstĂ€ndigung unvollstĂ€ndiger Daten verlangen.
    • +
  • Recht auf Löschung (Art. 17 DSGVO): Sie können die Löschung Ihrer Daten verlangen, sofern die gesetzlichen Voraussetzungen dafĂŒr vorliegen.
    • +
  • Recht auf EinschrĂ€nkung der Verarbeitung (Art. 18 DSGVO): Sie können die EinschrĂ€nkung der Verarbeitung Ihrer Daten verlangen, sofern die gesetzlichen Voraussetzungen dafĂŒr vorliegen.
    • +
  • Recht auf DatenĂŒbertragbarkeit (Art. 20 DSGVO): Sie haben das Recht, Ihre bereitgestellten Daten in einem strukturierten, gĂ€ngigen und maschinenlesbaren Format zu erhalten.
    • +
  • Recht auf Widerspruch (Art. 21 DSGVO): Sie können gegen die Verarbeitung Ihrer Daten Widerspruch einlegen.
    • +
  • Recht auf Beschwerde (Art. 77 DSGVO): Sie können sich bei der zustĂ€ndigen Aufsichtsbehörde beschweren.
    • +
+ +

Kontaktdaten der Aufsichtsbehörde

+

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien, Österreich
Telefon: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at

+ +

Änderungen dieser DatenschutzerklĂ€rung

+

Wir behalten uns vor, diese DatenschutzerklĂ€rung anzupassen, um sie an geĂ€nderte Rechtslagen oder bei Änderungen unserer Dienste anzupassen. Die jeweils aktuelle Version ist auf unserer Website abrufbar.

@@ -78,16 +161,15 @@
-

Sportwagenvermietung in Österreich. Standort: Steiermark (TBD).

+

Sportwagenvermietung in der Steiermark, Österreich.

Navigation

- Fahrzeuge - Warum wir + Fahrzeuge Buchen
@@ -101,8 +183,7 @@
@@ -113,6 +194,7 @@
+ diff --git a/frontend/i18n.js b/frontend/i18n.js index c4debf7..af9ca94 100644 --- a/frontend/i18n.js +++ b/frontend/i18n.js @@ -2,21 +2,17 @@ export const translations = { de: { navCars: "Fahrzeuge", - navWhy: "Warum wir", navReviews: "Stimmen", navBook: "Buchen", bookNow: "Jetzt buchen", - viewFleet: "Flotte ansehen", heroEyebrow: "MC Cars · Sportwagenvermietung", heroTitle: "Fahren auf höchstem Niveau.", - heroLead: "Premium-Sportwagen und Luxusklasse in der Steiermark. Faire Kaution, transparent, sofort startklar.", + heroLead: "Der Ferrari in der Steiermark. Faire Kaution, transparent, sofort startklar.", statDeposit: "Faire Kaution", - statSupport: "Support", statCars: "Fahrzeuge", - fleetEyebrow: "Unsere Flotte", fleetTitle: "Handverlesen. Gepflegt. Startklar.", fleetSub: "Filtern Sie nach Marke und Preis. Klicken Sie fĂŒr Details oder buchen Sie direkt.", filterBrand: "Marke", @@ -36,15 +32,6 @@ export const translations = { from: "ab", noMatches: "Keine Fahrzeuge gefunden.", - whyEyebrow: "Warum MC Cars", - whyTitle: "Keine Kompromisse zwischen Sicherheit und Fahrspaß.", - whyInsurance: "Versicherungsschutz", - whyInsuranceText: "Vollkasko mit klarem Selbstbehalt. Transparente Kosten auf jedem Kilometer.", - whyFleet: "Premium Flotte", - whyFleetText: "Handverlesene Performance-Modelle, professionell gewartet und sofort startklar.", - whyDeposit: "Faire Kaution", - whyDepositText: "Zwei Kautionsarten: Bar oder PayPal-Kaution. Bei PayPal senden wir einen Deposit-Link. Bar wird aktuell persönlich bei der FahrzeugĂŒbergabe abgewickelt.", - reviewsEyebrow: "Kundenmeinungen", reviewsTitle: "Erlebnisse, die bleiben.", review: "Kundenmeinung", @@ -113,7 +100,7 @@ export const translations = { perWeekend: "Wochenende", weekendDef: "Sa 9:00 – So 20:00", - footerTagline: "Sportwagenvermietung in Österreich. Standort: Steiermark (TBD).", + footerTagline: "Sportwagenvermietung in der Steiermark, Österreich.", footerLegal: "Rechtliches", footerContact: "Kontakt", footerNav: "Navigation", @@ -251,21 +238,17 @@ export const translations = { }, en: { navCars: "Fleet", - navWhy: "Why us", navReviews: "Reviews", navBook: "Book", bookNow: "Book now", - viewFleet: "View fleet", heroEyebrow: "MC Cars · Sports car rental", heroTitle: "Drive at the highest level.", - heroLead: "Premium sports and luxury cars in Styria. Fair deposit, full transparency, ready to launch.", + heroLead: "The Ferrari in Styria. Fair deposit, full transparency, ready to launch.", statDeposit: "Fair Deposit", - statSupport: "Support", statCars: "Vehicles", - fleetEyebrow: "Our Fleet", fleetTitle: "Hand-picked. Maintained. Ready.", fleetSub: "Filter by brand or price. Click for details or book directly.", filterBrand: "Brand", @@ -285,15 +268,6 @@ export const translations = { from: "from", noMatches: "No vehicles match the filters.", - whyEyebrow: "Why MC Cars", - whyTitle: "No compromises between safety and driving joy.", - whyInsurance: "Insurance", - whyInsuranceText: "Comprehensive cover with a clear deductible. Transparent costs on every kilometer.", - whyFleet: "Premium fleet", - whyFleetText: "Hand-picked performance models, professionally maintained and ready to go.", - whyDeposit: "Fair Deposit", - whyDepositText: "Two deposit options: cash or PayPal deposit. For PayPal, we send a deposit link. Cash is currently handled in person at pickup.", - reviewsEyebrow: "Testimonials", reviewsTitle: "Experiences that last.", review: "Review", @@ -362,7 +336,7 @@ export const translations = { perWeekend: "Weekend", weekendDef: "Sat 9 AM – Sun 8 PM", - footerTagline: "Sports car rental in Austria. Location: Styria (TBD).", + footerTagline: "Sports car rental in Styria, Austria.", footerLegal: "Legal", footerContact: "Contact", footerNav: "Navigation", @@ -501,11 +475,11 @@ export const translations = { }; export const REVIEWS = [ - { quote: "Die Buchung war klar und schnell. Der GT3 war in einem herausragenden Zustand.", author: "Martin P.", lang: "de" }, - { quote: "Exzellenter Service und makellos vorbereitete Fahrzeuge. Unser Wochenendtrip war unvergesslich.", author: "James R.", lang: "de" }, - { quote: "Hervorragende Buchungsabwicklung und tadelloses Fahrzeugzustand. Sehr zufrieden.", author: "Thomas W.", lang: "de" }, - { quote: "Professionelles Team und untadelige Aufmerksamkeit zum Detail. Sehr empfohlen.", author: "David M.", lang: "de" }, - { quote: "Booking was clear and fast. The GT3 arrived in outstanding condition.", author: "Jonas P.", lang: "en" }, + { quote: "Die Buchung war klar und schnell. Der Ferrari war in einem herausragenden Zustand.", author: "Martin P.", lang: "de" }, + { quote: "Exzellenter Service und ein makellos vorbereiteter Ferrari. Unser Wochenendtrip war unvergesslich.", author: "James R.", lang: "de" }, + { quote: "Hervorragende Buchungsabwicklung und tadelloser Zustand des Ferrari. Sehr zufrieden.", author: "Thomas W.", lang: "de" }, + { quote: "Professionelles Team und erstklassiger Ferrari. Absolut empfehlenswert.", author: "David M.", lang: "de" }, + { quote: "Booking was clear and fast. The Ferrari arrived in outstanding condition.", author: "Jonas P.", lang: "en" }, ]; export function getLang() { diff --git a/frontend/impressum.html b/frontend/impressum.html index 0d0d78b..173646e 100644 --- a/frontend/impressum.html +++ b/frontend/impressum.html @@ -4,8 +4,8 @@ Impressum · MC Cars (GmbH) - - + + @@ -48,13 +48,12 @@
-
+

Impressum

-

MC Cars (GmbH)

-

Standort: Steiermark (TBD)

-

E-Mail: hello@mccars.at

-

Telefon: +43 316 880000

-

Firmenbuch und UID werden nachgereicht.

+

MC Cars GmbH

+

Gaisfeld 1/2
8564 Krottendorf-Gaisfeld

+

FN 675751 b · Landesgericht fĂŒr Zivilrechtssachen Graz

+

GeschĂ€ftsfĂŒhrer: Christian Leski, Marco Schober

+

E-Mail: hello@mc-cars.at

+

UID-Nr. wird in KĂŒrze nachgereicht.

+
+
+

DatenschutzerklÀrung (Kurzfassung)

+

Der Schutz Ihrer persönlichen Daten ist uns wichtig. Wir behandeln Ihre Daten vertraulich und entsprechend der gesetzlichen Datenschutzvorschriften, insbesondere der DSGVO und dem österreichischen Datenschutzgesetz.

+

Welche Daten wir erfassen: Wir erheben nur die Daten, die fĂŒr die Nutzung unserer Website und unserer Dienste unbedingt erforderlich sind. Dazu können Zugriffsdaten (Datum, Uhrzeit, besuchte Seiten), technische Daten (Browsertyp, Betriebssystem) und – falls relevant – von Ihnen aktiv eingegebene Daten (z.B. bei Kontakt- und Buchungsformularen) gehören.

+

Wie wir Ihre Daten verwenden: Ihre Daten verwenden wir ausschließlich, um Ihnen unsere Website und die damit verbundenen Funktionen bereitzustellen, Buchungsanfragen zu bearbeiten und die Sicherheit unserer Systeme zu gewĂ€hrleisten.

+

Weitergabe an Dritte: Eine Weitergabe Ihrer persönlichen Daten an Dritte erfolgt grundsĂ€tzlich nicht, es sei denn, dies ist gesetzlich vorgeschrieben oder fĂŒr die Erbringung unserer Dienste unerlĂ€sslich.

+

Ihre Rechte: Sie haben jederzeit das Recht auf Auskunft, Berichtigung, Löschung, EinschrĂ€nkung der Verarbeitung und Widerspruch gegen die Verarbeitung Ihrer personenbezogenen Daten sowie das Recht auf DatenĂŒbertragbarkeit.

+

Weitere Informationen finden Sie in unserer vollstÀndigen DatenschutzerklÀrung.

@@ -81,16 +90,15 @@
-

Sportwagenvermietung in Österreich. Standort: Steiermark (TBD).

+

Sportwagenvermietung in der Steiermark, Österreich.

Navigation

- Fahrzeuge - Warum wir + Fahrzeuge Buchen
@@ -104,8 +112,7 @@
@@ -116,6 +123,7 @@
+ diff --git a/frontend/index.html b/frontend/index.html index ae0e9c5..928df50 100644 --- a/frontend/index.html +++ b/frontend/index.html @@ -3,8 +3,8 @@ - MC Cars · Sportwagenvermietung Steiermark - + MC Cars · Ferrari-Vermietung Steiermark + @@ -17,7 +17,7 @@ - + @@ -27,8 +27,8 @@ - - + + @@ -38,8 +38,8 @@ - - + + @@ -50,7 +50,7 @@ "@id": "https://demo.lago.dev/#organization", "name": "MC Cars GmbH", "alternateName": "MC Cars", - "description": "Premium Sportwagen- und Luxusvermietung in der Steiermark", + "description": "Premium Ferrari-Vermietung in der Steiermark", "url": "https://demo.lago.dev", "logo": "https://demo.lago.dev/images/MC-Cars-Logo.svg", "image": "https://demo.lago.dev/images/mc-cars-og-image.png", @@ -63,10 +63,10 @@ } }, "priceRange": "€€€", - "serviceType": "Sportwagenvermietung", + "serviceType": "Ferrari-Vermietung", "sameAs": [ - "https://www.facebook.com/mccars", - "https://www.instagram.com/mccars" + "https://www.facebook.com/mc-cars", + "https://www.instagram.com/mc-cars" ] } @@ -77,7 +77,7 @@ "name": "MC Cars GmbH", "url": "https://demo.lago.dev", "logo": "https://demo.lago.dev/images/MC-Cars-Logo.svg", - "description": "Premium Sportwagen- und Luxusvermietung in Steiermark, Österreich", + "description": "Premium Ferrari-Vermietung in Steiermark, Österreich", "foundingDate": "2024", "contactPoint": { "@type": "ContactPoint", @@ -127,17 +127,15 @@

MC Cars · Sportwagenvermietung

Fahren auf höchstem Niveau.

-

Premium-Sportwagen und Luxusklasse in der Steiermark. Kautionsfrei, transparent, sofort startklar.

+

Der Ferrari in der Steiermark. Faire Kaution, transparent, sofort startklar.

Jetzt buchen - Flotte ansehen
Faire KautionFair Deposit
–Fahrzeuge
-
24/7Support
@@ -147,7 +145,6 @@
-

Unsere Flotte

Handverlesen. Gepflegt. Startklar.

Filtern Sie nach Marke und Preis. Klicken Sie fĂŒr Details oder buchen Sie direkt.

@@ -371,7 +368,7 @@ MC Cars MC Cars
-

Sportwagenvermietung in Österreich. Standort: Steiermark (TBD).

+

Sportwagenvermietung in der Steiermark, Österreich.

@@ -390,8 +387,7 @@

Kontakt

- hello@mccars.at - +43 316 880000 + hello@mc-cars.at
diff --git a/frontend/mietbedingungen.html b/frontend/mietbedingungen.html index 7bca1fa..550c0d2 100644 --- a/frontend/mietbedingungen.html +++ b/frontend/mietbedingungen.html @@ -4,8 +4,8 @@ Mietbedingungen · MC Cars - - + + @@ -51,13 +51,12 @@
@@ -88,16 +87,15 @@
-

Sportwagenvermietung in Österreich. Standort: Steiermark (TBD).

+

Sportwagenvermietung in der Steiermark, Österreich.

Navigation

- Fahrzeuge - Warum wir + Fahrzeuge Buchen
@@ -111,8 +109,7 @@

Kontakt

- hello@mccars.at - +43 316 880000 + hello@mc-cars.at
diff --git a/frontend/styles.css b/frontend/styles.css index 92648f3..3a15b9e 100644 --- a/frontend/styles.css +++ b/frontend/styles.css @@ -420,6 +420,146 @@ select:focus, input:focus, textarea:focus { box-shadow: 0 4px 12px rgba(0,0,0,0.5); } +/* Photo carousel nav */ +.vehicle-photo-nav { + position: absolute; + top: 0; + left: 0; + right: 0; + bottom: 0; + display: flex; + justify-content: space-between; + align-items: center; + padding: 0.5rem; + opacity: 0; + transition: opacity 0.3s ease; + pointer-events: none; +} +.vehicle-photo:hover .vehicle-photo-nav { + opacity: 1; + pointer-events: auto; +} +.vehicle-photo-prev, +.vehicle-photo-next { + background: rgba(0,0,0,0.6); + color: #fff; + border: none; + border-radius: 50%; + width: 32px; + height: 32px; + font-size: 1.2rem; + cursor: pointer; + display: flex; + align-items: center; + justify-content: center; + transition: background 0.2s ease; +} +.vehicle-photo-prev:hover, +.vehicle-photo-next:hover { + background: rgba(0,0,0,0.8); +} +.vehicle-photo-dots { + position: absolute; + bottom: 0.6rem; + left: 50%; + transform: translateX(-50%); + display: flex; + gap: 6px; +} +.vehicle-photo-dots span { + width: 8px; + height: 8px; + border-radius: 50%; + background: rgba(255,255,255,0.4); + transition: background 0.2s ease, transform 0.2s ease; +} +.vehicle-photo-dots span.active { + background: #fff; + transform: scale(1.3); +} + +/* Dialog gallery */ +.dialog-gallery { + position: relative; + width: 100%; + aspect-ratio: 16/10; + background: #0e1015; + border-radius: var(--radius); + overflow: hidden; + margin-bottom: 1.2rem; +} +.dialog-gallery-main { + width: 100%; + height: 100%; + object-fit: cover; + display: block; +} +.dialog-gallery-nav { + position: absolute; + top: 0; + left: 0; + right: 0; + bottom: 0; + display: flex; + justify-content: space-between; + align-items: center; + padding: 0.5rem; + pointer-events: none; +} +.dialog-gallery-prev, +.dialog-gallery-next { + background: rgba(0,0,0,0.6); + color: #fff; + border: none; + border-radius: 50%; + width: 36px; + height: 36px; + font-size: 1.4rem; + cursor: pointer; + display: flex; + align-items: center; + justify-content: center; + transition: background 0.2s ease; + pointer-events: auto; +} +.dialog-gallery-prev:hover, +.dialog-gallery-next:hover { + background: rgba(0,0,0,0.8); +} +.dialog-gallery-thumbs { + position: absolute; + bottom: 0.6rem; + left: 50%; + transform: translateX(-50%); + display: flex; + gap: 6px; +} +.dialog-gallery-thumbs button { + width: 56px; + height: 36px; + border-radius: 6px; + overflow: hidden; + border: 2px solid transparent; + cursor: pointer; + opacity: 0.6; + transition: opacity 0.2s ease, border-color 0.2s ease; + padding: 0; + background: none; +} +.dialog-gallery-thumbs button.active { + border-color: #fff; + opacity: 1; +} +.dialog-gallery-thumbs button:hover { + opacity: 0.9; +} +.dialog-gallery-thumbs button img { + width: 100%; + height: 100%; + object-fit: cover; + display: block; +} + .vehicle-body { padding: 1.4rem; display: flex; @@ -995,6 +1135,172 @@ table.admin-table td:last-child { white-space: nowrap; } filter: brightness(1.1); } +/* ---- Unified Photo Upload Zone ---- */ +.admin-photo-upload-zone { + width: 100%; + min-height: 120px; + border: 2px dashed var(--line); + border-radius: 12px; + display: flex; + align-items: center; + justify-content: center; + cursor: pointer; + transition: border-color 0.2s ease, background 0.2s ease; + background: var(--bg-elev); + margin-bottom: 0.5rem; + position: relative; +} +.admin-photo-upload-zone:hover { + border-color: var(--accent-strong); +} +.admin-photo-upload-zone.drag-active { + border-color: var(--accent-strong); + background: rgba(245, 158, 11, 0.08); +} +.admin-photo-upload-zone input[type="file"] { + position: absolute; + inset: 0; + opacity: 0; + cursor: pointer; +} +.admin-photo-upload-content { + text-align: center; + pointer-events: none; +} +.admin-photo-upload-icon { + font-size: 2rem; + display: block; + margin-bottom: 0.3rem; +} + +/* ---- Photo Gallery ---- */ +.admin-photo-gallery { + display: grid; + grid-template-columns: repeat(auto-fill, minmax(200px, 1fr)); + gap: 0.8rem; + margin-top: 1rem; +} + +.admin-photo-card { + position: relative; + border-radius: 10px; + overflow: hidden; + aspect-ratio: 16/10; + background: #1a1a1a; + border: 2px solid transparent; + transition: border-color 0.2s ease, transform 0.2s ease, opacity 0.2s ease; + cursor: grab; +} +.admin-photo-card:hover { + border-color: var(--accent-strong); + transform: scale(1.02); +} +.admin-photo-card:active { + cursor: grabbing; +} +.admin-photo-card-drag-over { + border-color: #f59e0b !important; + transform: scale(1.05); +} +.admin-photo-card img { + width: 100%; + height: 100%; + object-fit: cover; + display: block; + pointer-events: none; +} +.admin-photo-card-arrows { + position: absolute; + top: 6px; + left: 6px; + display: flex; + gap: 3px; + z-index: 2; +} +.admin-photo-arrow { + width: 26px; + height: 26px; + border-radius: 6px; + border: none; + background: rgba(0, 0, 0, 0.7); + color: #fff; + font-size: 1rem; + font-weight: 700; + cursor: pointer; + display: flex; + align-items: center; + justify-content: center; + transition: background 0.2s ease; +} +.admin-photo-arrow:hover { + background: rgba(0, 0, 0, 0.9); +} +.admin-photo-card-actions { + position: absolute; + top: 6px; + right: 6px; + display: flex; + gap: 3px; + z-index: 2; +} +.admin-photo-set-primary { + width: 26px; + height: 26px; + border-radius: 6px; + border: none; + background: rgba(245, 158, 11, 0.85); + color: #000; + font-size: 1rem; + cursor: pointer; + display: flex; + align-items: center; + justify-content: center; + transition: background 0.2s ease; +} +.admin-photo-set-primary:hover { + background: #f59e0b; +} +.admin-photo-delete { + width: 26px; + height: 26px; + border-radius: 6px; + border: none; + background: rgba(239, 68, 68, 0.85); + color: #fff; + font-size: 1rem; + font-weight: 700; + cursor: pointer; + display: flex; + align-items: center; + justify-content: center; + transition: background 0.2s ease; +} +.admin-photo-delete:hover { + background: #ef4444; +} +.admin-photo-badge { + position: absolute; + bottom: 6px; + left: 6px; + background: #22c55e; + color: #fff; + border-radius: 5px; + padding: 2px 8px; + font-size: 0.7rem; + font-weight: 700; + letter-spacing: 0.05em; + z-index: 2; +} +.admin-photo-drag-handle { + position: absolute; + bottom: 6px; + right: 6px; + color: rgba(255, 255, 255, 0.5); + font-size: 1.1rem; + z-index: 2; + pointer-events: none; +} + /* ---------------- Forms / Toggle Switch ---------------- */ .toggle-switch { position: relative; diff --git a/playwright.config.js b/playwright.config.js new file mode 100644 index 0000000..50033e2 --- /dev/null +++ b/playwright.config.js @@ -0,0 +1,21 @@ +import { defineConfig, devices } from '@playwright/test'; + +export default defineConfig({ + testDir: './tests', + fullyParallel: true, + forbidOnly: !!process.env.CI, + retries: process.env.CI ? 2 : 0, + workers: process.env.CI ? 1 : undefined, + reporter: 'list', + use: { + baseURL: process.env.APP_URL || 'http://localhost:55580', + trace: 'on-first-retry', + screenshot: 'only-on-failure', + }, + projects: [ + { + name: 'chromium', + use: { ...devices['Desktop Chrome'] }, + }, + ], +}); diff --git a/supabase/migrations/17-vehicle-photos.sql b/supabase/migrations/17-vehicle-photos.sql new file mode 100644 index 0000000..fbab6b4 --- /dev/null +++ b/supabase/migrations/17-vehicle-photos.sql @@ -0,0 +1,91 @@ +-- 17-vehicle-photos.sql +-- Idempotent migration: add vehicle_photos table for multiple photos per vehicle. +-- Each vehicle can have multiple photos with ordering support. + +-- Create vehicle_photos table +create table if not exists public.vehicle_photos ( + id uuid primary key default gen_random_uuid(), + vehicle_id uuid not null references public.vehicles(id) on delete cascade, + photo_url text not null default '', + photo_path text not null, + display_order integer not null default 0, + is_primary boolean not null default false, + created_at timestamptz not null default now() +); + +create index if not exists vehicle_photos_vehicle_id_idx + on public.vehicle_photos(vehicle_id, display_order); + +-- Enable RLS +alter table public.vehicle_photos enable row level security; + +-- Drop existing policies to ensure idempotency +drop policy if exists "vehicle_photos_public_read" on public.vehicle_photos; +drop policy if exists "vehicle_photos_admin_read" on public.vehicle_photos; +drop policy if exists "vehicle_photos_admin_insert" on public.vehicle_photos; +drop policy if exists "vehicle_photos_admin_delete" on public.vehicle_photos; +drop policy if exists "vehicle_photos_admin_update" on public.vehicle_photos; + +-- Public can read all photos +create policy "vehicle_photos_public_read" + on public.vehicle_photos for select + to anon using (true); + +-- Authenticated (admin) full access +create policy "vehicle_photos_admin_read" + on public.vehicle_photos for select + to authenticated using (true); + +create policy "vehicle_photos_admin_insert" + on public.vehicle_photos for insert + to authenticated with check (true); + +create policy "vehicle_photos_admin_update" + on public.vehicle_photos for update + to authenticated using (true) with check (true); + +create policy "vehicle_photos_admin_delete" + on public.vehicle_photos for delete + to authenticated using (true); + +-- Grants +grant select on public.vehicle_photos to anon, authenticated; +grant insert, update, delete on public.vehicle_photos to authenticated; +grant all on public.vehicle_photos to service_role; + +-- Migrate existing vehicle photo_url/photo_path to vehicle_photos table +-- This ensures existing vehicles get their photo into the new table +insert into public.vehicle_photos (vehicle_id, photo_url, photo_path, display_order, is_primary) +select id, photo_url, coalesce(photo_path, 'legacy'), 0, true +from public.vehicles +where photo_url != '' and photo_path is not null +on conflict do nothing; + +-- RPC: set primary photo for a vehicle (unsets others) +create or replace function public.set_primary_vehicle_photo( + p_vehicle_id uuid, + p_photo_id uuid +) returns void +language plpgsql security invoker as $$ +begin + update public.vehicle_photos set is_primary = false where vehicle_id = p_vehicle_id; + update public.vehicle_photos set is_primary = true where id = p_photo_id and vehicle_id = p_vehicle_id; +end; +$$; + +-- RPC: re-order photos for a vehicle +create or replace function public.reorder_vehicle_photos( + p_vehicle_id uuid, + p_photo_orders jsonb -- [{id: uuid, order: int}, ...] +) returns void +language plpgsql security invoker as $$ +declare + rec jsonb; +begin + for rec in select * from jsonb_array_elements(p_photo_orders) loop + update public.vehicle_photos + set display_order = (rec->>'order')::int + where id = (rec->>'id')::uuid and vehicle_id = p_vehicle_id; + end loop; +end; +$$; diff --git a/test-results/.last-run.json b/test-results/.last-run.json index 5fca3f8..cbcc1fb 100644 --- a/test-results/.last-run.json +++ b/test-results/.last-run.json @@ -1,4 +1,4 @@ { - "status": "failed", + "status": "passed", "failedTests": [] } \ No newline at end of file diff --git a/tests/booking-flow.spec.js b/tests/booking-flow.spec.js new file mode 100644 index 0000000..7bc4f37 --- /dev/null +++ b/tests/booking-flow.spec.js @@ -0,0 +1,255 @@ +import { test, expect } from '@playwright/test'; + +test.describe('Booking Flow End-to-End', () => { + const ADMIN_URL = 'http://localhost:55581'; + const ADMIN_EMAIL = 'admin@mccars.local'; + const ADMIN_PASSWORD = 'mc-cars-admin'; + + // Generate unique test data per run to avoid conflicts + const ts = Date.now(); + const testEmails = [ + `test-day-${ts}@playwright.test`, + `test-weekend-${ts}@playwright.test`, + `test-custom-${ts}@playwright.test`, + ]; + const testNames = [ + 'Test Testerson Day', + 'Test Testerson Weekend', + 'Test Testerson Custom', + ]; + + /** + * Helper: fill out the booking form for a given mietdauer type. + * Returns nothing - the form submission is handled by the page's JS. + */ + async function submitBooking(page, type, index) { + // Scroll to booking section + await page.locator('#buchen').scrollIntoViewIfNeeded(); + await page.waitForTimeout(500); + + // Step 1: Select vehicle + const carSelect = page.locator('#bpfCar'); + await expect(carSelect).toBeVisible({ timeout: 10000 }); + // Select first available vehicle option (skip the placeholder) + const options = await carSelect.locator('option').all(); + expect(options.length).toBeGreaterThan(1); + const firstVehicle = await options[1].innerText(); + await carSelect.selectOption({ label: firstVehicle }); + + // Step 2: Select mietdauer type + const presetBtn = page.locator(`.bpf-preset[data-preset="${type}"]`); + await expect(presetBtn).toBeVisible(); + await presetBtn.click(); + + // Step 3: Pick date(s) based on type + if (type === 'day') { + // Pick a date 7 days from now + const futureDate = new Date(); + futureDate.setDate(futureDate.getDate() + 7); + const dateStr = futureDate.toISOString().split('T')[0]; + const dateInput = page.locator('#bpfDayDate'); + await dateInput.fill(dateStr); + } else if (type === 'weekend') { + // Pick next Saturday + const nextSaturday = new Date(); + const daysUntilSaturday = (6 - nextSaturday.getDay() + 7) % 7 || 7; + nextSaturday.setDate(nextSaturday.getDate() + daysUntilSaturday); + const dateStr = nextSaturday.toISOString().split('T')[0]; + const dateInput = page.locator('#bpfWeekendDate'); + await dateInput.fill(dateStr); + } else if (type === 'custom') { + // Pick start date 14 days from now, end date 17 days from now (4 days = individuell) + const startDate = new Date(); + startDate.setDate(startDate.getDate() + 14); + const endDate = new Date(startDate); + endDate.setDate(endDate.getDate() + 3); + const fromStr = startDate.toISOString().split('T')[0]; + const toStr = endDate.toISOString().split('T')[0]; + await page.locator('#bpfFrom').fill(fromStr); + await page.locator('#bpfTo').fill(toStr); + } + + // Click Weiter to go to step 2 + await page.locator('#bpfNext1').click(); + await page.waitForTimeout(300); + + // Step 2: Fill contact info + await expect(page.locator('#bpfName')).toBeVisible(); + await page.locator('#bpfName').fill(testNames[index]); + await page.locator('#bpfEmail').fill(testEmails[index]); + await page.locator('#bpfPhone').fill('+43 660 1234567'); + await page.locator('#bpfMessage').fill(`Test booking via playwright - ${type}`); + + // Click Weiter to go to step 3 + await page.locator('#bpfNext2').click(); + await page.waitForTimeout(300); + + // Step 3: Submit (skip file uploads - they are optional) + await expect(page.locator('#bpfSubmit')).toBeVisible(); + await page.locator('#bpfSubmit').click(); + + // Wait for success toast + await expect(page.locator('#toast.show')).toBeVisible({ timeout: 10000 }); + await page.waitForTimeout(1000); + } + + test('Complete booking flow: 1 Tag, Wochenende, Individuell → 3 leads in admin → disqualify all', async ({ page, context }) => { + // ======================================== + // PART 1: Submit 3 bookings on main site + // ======================================== + await page.goto('/'); + await page.waitForLoadState('domcontentloaded'); + await page.waitForTimeout(2000); + + // Booking 1: 1 Tag + await submitBooking(page, 'day', 0); + + // Booking 2: Wochenende + await submitBooking(page, 'weekend', 1); + + // Booking 3: Individuell + await submitBooking(page, 'custom', 2); + + // ======================================== + // PART 2: Verify 3 leads in admin panel + // ======================================== + const adminCtx = await test.info().project.use.baseBrowserType?.newContext() ?? context; + const adminPage = await adminCtx.newPage(); + adminPage.setDefaultTimeout(30000); + + await adminPage.goto(ADMIN_URL); + await adminPage.waitForLoadState('domcontentloaded'); + await adminPage.waitForTimeout(2000); + + // Login + const loginForm = adminPage.locator('#loginForm'); + await expect(loginForm).toBeVisible({ timeout: 10000 }); + await adminPage.locator('#loginForm [name="email"]').fill(ADMIN_EMAIL); + await adminPage.locator('#loginForm [name="password"]').fill(ADMIN_PASSWORD); + await adminPage.locator('#loginForm [type="submit"]').click(); + + // Wait a moment for login to process + await adminPage.waitForTimeout(3000); + + // Check for login error + const loginError = adminPage.locator('#loginError'); + if (await loginError.isVisible()) { + const errorMsg = await loginError.textContent(); + throw new Error(`Login failed: ${errorMsg}`); + } + + // Check if password rotation is required (first login) + const rotateView = adminPage.locator('#rotateView'); + if (await rotateView.isVisible({ timeout: 2000 })) { + // Set a new password (must be different from bootstrap) + const newPw = 'Playwright-Test-PW-2026!'; + await adminPage.locator('#rotateForm [name="pw1"]').fill(newPw); + await adminPage.locator('#rotateForm [name="pw2"]').fill(newPw); + await adminPage.locator('#rotateForm [type="submit"]').click(); + await adminPage.waitForTimeout(2000); + } + + // Wait for admin view to load + await expect(adminPage.locator('#adminView')).toBeVisible({ timeout: 15000 }); + await adminPage.waitForTimeout(2000); + + // Ensure leads tab is active (it's the default) + const leadsTab = adminPage.locator('[data-tab="leads"]'); + const leadsTabClass = await leadsTab.getAttribute('class'); + if (!leadsTabClass?.includes('active')) { + await leadsTab.click(); + await adminPage.waitForTimeout(1000); + } + + // Wait for our test leads to appear by checking for their emails in the table + // We wait for at least one of our test emails to appear, then verify all 3 + await adminPage.waitForFunction( + ([emails]) => { + const rows = document.querySelectorAll('#leadsTable tbody tr'); + let found = 0; + for (const row of rows) { + const text = row.textContent; + for (const email of emails) { + if (text.includes(email)) { + found++; + break; + } + } + } + return found >= 3; + }, + testEmails, + { timeout: 30000 } + ); + + await adminPage.waitForTimeout(1000); + + // Find our test leads by email pattern + const allRows = adminPage.locator('#leadsTable tbody tr'); + const totalRows = await allRows.count(); + const testRowIndices = []; + + for (let i = 0; i < totalRows; i++) { + const row = allRows.nth(i); + const rowText = await row.textContent(); + if (testEmails.some(email => rowText.includes(email))) { + testRowIndices.push(i); + } + } + + expect(testRowIndices.length).toBe(3); + + // ======================================== + // PART 3: Disqualify all 3 test leads + // ======================================== + // Disqualify each lead one at a time, re-finding it after each disqualification + // since the table re-renders and indices shift. + for (const email of testEmails) { + // Find the row for this email + const rows = adminPage.locator('#leadsTable tbody tr'); + const count = await rows.count(); + let found = false; + + for (let i = 0; i < count; i++) { + const rowText = await rows.nth(i).textContent(); + if (rowText.includes(email)) { + // Click disqualify button + const disqBtn = rows.nth(i).locator('[data-disq]'); + if (await disqBtn.isVisible()) { + await disqBtn.click(); + await adminPage.waitForTimeout(1500); + found = true; + break; + } + } + } + + expect(found).toBe(true, `Lead with email ${email} not found or could not be disqualified`); + } + + // Wait for disqualifications to process + await adminPage.waitForTimeout(2000); + + // Refresh page to ensure fresh data after disqualifications + await adminPage.reload(); + await expect(adminPage.locator('#adminView')).toBeVisible({ timeout: 15000 }); + await adminPage.waitForTimeout(3000); + + // Verify our test leads are now disqualified (no longer in active view) + const remainingRows = adminPage.locator('#leadsTable tbody tr'); + const remainingCount = await remainingRows.count(); + let foundTestLead = false; + + for (let i = 0; i < remainingCount; i++) { + const rowText = await remainingRows.nth(i).textContent(); + if (testEmails.some(email => rowText.includes(email))) { + foundTestLead = true; + break; + } + } + + expect(foundTestLead).toBe(false); + + await adminPage.close(); + }); +}); diff --git a/tests/legal-pages.spec.js b/tests/legal-pages.spec.js new file mode 100644 index 0000000..348a419 --- /dev/null +++ b/tests/legal-pages.spec.js @@ -0,0 +1,36 @@ +import { test, expect } from '@playwright/test'; + +test.describe('Legal Pages - Warum wir removed', () => { + + test.beforeEach(async ({ page }) => { + await page.goto('/'); + await page.waitForLoadState('domcontentloaded'); + }); + + test('Impressum page - Warum wir nav link removed', async ({ page }) => { + await page.goto('/impressum.html'); + await expect(page.getByText('Warum wir')).not.toBeVisible(); + }); + + test('AGB page - Warum wir nav link removed', async ({ page }) => { + await page.goto('/agb.html'); + await expect(page.getByText('Warum wir')).not.toBeVisible(); + }); + + test('Datenschutz page - Warum wir nav link removed', async ({ page }) => { + await page.goto('/datenschutz.html'); + await expect(page.getByText('Warum wir')).not.toBeVisible(); + }); + + test('Mietbedingungen page - Warum wir nav link removed', async ({ page }) => { + await page.goto('/mietbedingungen.html'); + await expect(page.getByText('Warum wir')).not.toBeVisible(); + }); + + test('All legal pages - other nav links present', async ({ page }) => { + await page.goto('/impressum.html'); + const nav = page.getByLabel('Hauptnavigation'); + await expect(nav.getByRole('link', { name: 'Fahrzeuge' }).first()).toBeVisible(); + await expect(nav.getByRole('link', { name: 'Buchen' }).first()).toBeVisible(); + }); +}); diff --git a/tests/marco-changes.spec.js b/tests/marco-changes.spec.js new file mode 100644 index 0000000..e1bb600 --- /dev/null +++ b/tests/marco-changes.spec.js @@ -0,0 +1,109 @@ +import { test, expect } from '@playwright/test'; + +test.describe('MC Cars - Customer Changes Verification', () => { + + test.beforeEach(async ({ page }) => { + await page.goto('/'); + await page.waitForLoadState('domcontentloaded'); + await page.waitForTimeout(1000); + }); + + test('Page loads successfully', async ({ page }) => { + await expect(page).toHaveTitle(/MC Cars/); + }); + + test('Hero section - Flotte ansehen button removed', async ({ page }) => { + await expect(page.getByText('Flotte ansehen')).not.toBeVisible(); + await expect(page.getByText('View fleet')).not.toBeVisible(); + }); + + test('Hero section - 24/7 Support stat removed', async ({ page }) => { + await expect(page.getByText('24/7')).not.toBeVisible(); + }); + + test('Hero section - Faire Kaution stat still visible', async ({ page }) => { + const kautionStat = page.getByText('Faire Kaution', { exact: true }); + await expect(kautionStat).toBeVisible(); + }); + + test('Hero section - Fahrzeuge stat still visible', async ({ page }) => { + const vehiclesSection = page.locator('.hero-stats'); + await expect(vehiclesSection).toBeVisible(); + }); + + test('Fleet section - Unsere Flotte eyebrow removed', async ({ page }) => { + await expect(page.getByText('Unsere Flotte')).not.toBeVisible(); + await expect(page.getByText('Our Fleet')).not.toBeVisible(); + }); + + test('Fleet section - Title still visible', async ({ page }) => { + await expect(page.getByText('Handverlesen. Gepflegt. Startklar.')).toBeVisible(); + }); + + test('Navigation - Warum wir link removed', async ({ page }) => { + await expect(page.getByText('Warum wir')).not.toBeVisible(); + await expect(page.getByText('Why us')).not.toBeVisible(); + }); + + test('Navigation - Other links still present', async ({ page }) => { + const nav = page.getByLabel('Hauptnavigation'); + await expect(nav.getByRole('link', { name: 'Fahrzeuge' }).first()).toBeVisible(); + await expect(nav.getByRole('link', { name: 'Stimmen' })).toBeVisible(); + await expect(nav.getByRole('link', { name: 'Buchen' }).first()).toBeVisible(); + await expect(nav.getByRole('link', { name: 'Jetzt buchen' })).toBeVisible(); + }); + + test('Reviews - Ferrari references in reviews', async ({ page }) => { + await page.locator('#stimmen').scrollIntoViewIfNeeded(); + const reviewsSection = page.locator('#stimmen'); + await expect(reviewsSection).toBeVisible(); + }); + + test('Reviews - GT3 references removed', async ({ page }) => { + await expect(page.getByText('GT3')).not.toBeVisible(); + }); + + test('Footer - correct content', async ({ page }) => { + await expect(page.getByText('Rechtliches')).toBeVisible(); + await expect(page.getByText('Impressum')).toBeVisible(); + await expect(page.getByText('Datenschutz')).toBeVisible(); + await expect(page.getByText('hello@mc-cars.at')).toBeVisible(); + }); + + test('Footer - Steiermark reference updated', async ({ page }) => { + await expect(page.getByText('Made in Steiermark')).toBeVisible(); + }); + + test('Language toggle works', async ({ page }) => { + const langToggle = page.locator('.lang-toggle'); + await expect(langToggle).toBeVisible(); + + // Switch to English + await langToggle.click(); + await page.waitForTimeout(500); + await expect(langToggle).toHaveText('DE'); + await expect(page.getByText('Drive at the highest level.')).toBeVisible(); + + // Switch back to German + await langToggle.click(); + await page.waitForTimeout(500); + await expect(langToggle).toHaveText('EN'); + await expect(page.getByRole('heading', { name: /Niveau/ })).toBeVisible(); + }); + + test('Fleet section - vehicle cards visible', async ({ page }) => { + await page.locator('#fahrzeuge').scrollIntoViewIfNeeded(); + const vehicleCards = page.locator('.vehicle-card'); + await expect(vehicleCards.first()).toBeVisible(); + }); + + test('Booking section visible', async ({ page }) => { + await page.locator('#buchen').scrollIntoViewIfNeeded(); + await expect(page.getByRole('heading', { name: 'Jetzt buchen' })).toBeVisible(); + }); + + test('SEO title updated', async ({ page }) => { + const title = await page.title(); + expect(title).toContain('Ferrari'); + }); +}); diff --git a/tests/photo-gallery.spec.js b/tests/photo-gallery.spec.js new file mode 100644 index 0000000..6e16170 --- /dev/null +++ b/tests/photo-gallery.spec.js @@ -0,0 +1,41 @@ +import { test, expect } from '@playwright/test'; + +test.describe('Photo Gallery Feature', () => { + + test.beforeEach(async ({ page }) => { + await page.goto('/'); + await page.waitForLoadState('domcontentloaded'); + await page.waitForTimeout(1000); + }); + + test('Vehicle cards render correctly', async ({ page }) => { + await page.locator('#fahrzeuge').scrollIntoViewIfNeeded(); + const cards = page.locator('.vehicle-card'); + await expect(cards.first()).toBeVisible(); + }); + + test('Vehicle card has photo', async ({ page }) => { + await page.locator('#fahrzeuge').scrollIntoViewIfNeeded(); + const firstPhoto = page.locator('.vehicle-card').first().locator('.vehicle-photo img'); + await expect(firstPhoto).toBeVisible(); + const src = await firstPhoto.getAttribute('src'); + expect(src).not.toBeNull(); + expect(src).not.toBe(''); + }); + + test('Vehicle details dialog opens', async ({ page }) => { + await page.locator('#fahrzeuge').scrollIntoViewIfNeeded(); + const detailsBtn = page.locator('[data-details]').first(); + if (await detailsBtn.isVisible()) { + await detailsBtn.click(); + const dialog = page.locator('#carDialog'); + await expect(dialog).toBeVisible(); + } + }); + + test('Booking wizard - vehicle selector works', async ({ page }) => { + await page.locator('#buchen').scrollIntoViewIfNeeded(); + const carSelect = page.locator('#bpfCar'); + await expect(carSelect).toBeVisible(); + }); +});