removed link profil

to handle everything properly

CSS/style.css

@@ -11,16 +11,6 @@ body {
     max-width: 100vw;
     overflow-x: hidden;
 }
-#wrapper {
-    flex: 1 0 auto;
-    min-height: 0;
-    display: flex;
-    flex-direction: column;
-    justify-content: flex-start;
-    margin-bottom: 20px;
-    width: 100vw;
-    max-width: 100vw;
-}
 
 a {
     color: black;
@@ -111,12 +101,6 @@ a {
     grid-column-end: 6;
 }
 
-.container-rest {
-    grid-column-start: 1;
-    grid-column-end: 6;
-    padding-left: 50px;
-}
-
 .link-impressum {
     padding-left: 30px;
 
@@ -150,32 +134,94 @@ a {
     border-radius: 10px;
 }
 
-.login-container {
-    position: absolute;
-    top: 200px;
+.form-container {
     background-color: #BAC8D4;
-    width: 900px;
-    height: 450px;
+    width: 100%;
+    max-width: 400px;
     border-radius: 10px;
     display: flex;
     flex-direction: column;
     align-items: center;
-    justify-content: center;
     box-sizing: border-box;
+    padding: 32px 24px 24px 24px;
+    margin: 32px auto;
 }
-
-.event-container  {
-    position: absolute;
-    top: 200px;
-    background-color: #BAC8D4;
-    width: 900px;
-    height: 450px;
-    border-radius: 10px;
+.form-horizontal {
+    width: 100%;
     display: flex;
     flex-direction: column;
-    align-items: center;
-    justify-content: center;
+    gap: 12px;
+    margin-bottom: 10px;
+}
+.form-horizontal label {
+    margin-bottom: 2px;
+}
+.form-horizontal input[type="text"],
+.form-horizontal input[type="email"],
+.form-horizontal input[type="password"] {
+    width: 100%;
+    padding: 8px 10px;
+    border: 1px solid #BAC8D4;
+    border-radius: 4px;
+    font-size: 1rem;
     box-sizing: border-box;
+    background: #fff;
+}
+.form-horizontal input[type="date"],
+.form-horizontal input[type="number"],
+.form-horizontal select,
+.form-horizontal textarea {
+    width: 100%;
+    padding: 8px 10px;
+    border: 1px solid #BAC8D4;
+    border-radius: 4px;
+    font-size: 1rem;
+    box-sizing: border-box;
+    background: #fff;
+}
+.form-horizontal textarea {
+    resize: vertical;
+    min-height: 100px;
+}
+.form-horizontal button {
+    width: 100%;
+    padding: 10px 0;
+    border: none;
+    border-radius: 4px;
+    background: #4d4d4d;
+    color: #fff;
+    font-size: 1rem;
+    margin-top: 8px;
+    cursor: pointer;
+    transition: background 0.2s;
+}
+.form-horizontal button:hover {
+    background: #333;
+}
+.button-register {
+    width: 100%;
+    padding: 10px 0;
+    border: none;
+    border-radius: 4px;
+    background: #4d4d4d;
+    color: #fff;
+    font-size: 1rem;
+    margin-top: 8px;
+    cursor: pointer;
+    transition: background 0.2s;
+}
+.button-register:hover {
+    background: #333;
+}
+.login-error, .form-error {
+    background: #ffe0e0;
+    color: #b30000;
+    border: 1px solid #ffb3b3;
+    border-radius: 6px;
+    padding: 10px 16px;
+    margin-bottom: 18px;
+    width: 100%;
+    text-align: center;
 }
 
 @media (max-width: 600px) {
@@ -185,10 +231,6 @@ a {
         max-width: 100vw;
         overflow-x: hidden;
     }
-    #wrapper {
-        width: 100vw;
-        max-width: 100vw;
-    }
     #navigation {
         width: 100vw;
         min-width: 0;
@@ -282,13 +324,10 @@ a {
         text-align: center;
         padding: 0;
     }
-    .desktop-only {
-        display: none !important;
-    }
     .mobile-only {
         display: block !important;
     }
-    .login-container {
+    .form-container {
         position: static;
         width: 95vw;
         max-width: 400px;
@@ -297,7 +336,7 @@ a {
         padding: 16px 8px;
         box-sizing: border-box;
     }
-    .event-container {
+    .content-container {
         position: static;
         width: 95vw;
         max-width: 400px;
@@ -306,23 +345,23 @@ a {
         padding: 16px 8px;
         box-sizing: border-box;
     }
-    .login-container h1 {
+    .form-container h1 {
         font-size: 1.5em;
         text-align: center;
     }
-    .event-container h1 {
+    .content-container h1 {
         font-size: 1.5em;
         text-align: center;
     }
-    .login-container form,
-    .login-container label,
-    .login-container input {
+    .form-container form,
+    .form-container label,
+    .form-container input {
         width: 100%;
         max-width: 100%;
         box-sizing: border-box;
     }
-    .login-container button,
-    .login-container a {
+    .form-container button,
+    .form-container a {
         width: 100%;
         max-width: 100%;
         margin-top: 8px;
@@ -374,4 +413,243 @@ a {
     .nav-links .links {
         margin: 0 12px;
     }
+    .content-container {
+        width: 90vw;
+        max-width: 1200px;
+        margin: 24px auto;
+        padding: 16px 8px;
+        box-sizing: border-box;
+        display: flex;
+        flex-direction: column;
+        align-items: center;
+    }
+    .news-header {
+        text-align: center;
+        margin-bottom: 24px;
+    }
+    .news-header h2 {
+        margin-bottom: 16px;
+    }
+    .news-header .admin-btn {
+        margin: 0 auto;
+        display: inline-block;
+    }
+    .event-header {
+        text-align: center;
+        margin-bottom: 24px;
+    }
+    .event-header h2 {
+        margin-bottom: 16px;
+    }
+    .event-header .admin-btn {
+        margin: 0 auto;
+        display: inline-block;
+    }
+    .card--wide {
+        max-width: 700px;
+        width: auto;
+        margin: 0 auto;
+        display: block;
+        overflow-wrap: break-word;
+    }
+}
+table {
+    width: 100%;
+    border-collapse: separate;
+    border-spacing: 0;
+    background: #fff;
+    border-radius: 10px;
+    box-shadow: 0 2px 12px rgba(0,0,0,0.07);
+    margin: 24px 0;
+    overflow: hidden;
+}
+thead th {
+    background: #BAC8D4;
+    color: #222;
+    font-weight: 600;
+    padding: 12px 8px;
+    text-align: left;
+    border-bottom: 2px solid #e0e0e0;
+}
+tbody td {
+    padding: 10px 8px;
+    border-bottom: 1px solid #f0f0f0;
+    vertical-align: top;
+}
+tbody tr:last-child td {
+    border-bottom: none;
+}
+tbody tr:hover {
+    background: #f5faff;
+}
+.admin-btn, .admin-btn:visited {
+    display: inline-block;
+    background: #4d4d4d;
+    color: #fff;
+    border-radius: 5px;
+    padding: 7px 16px;
+    margin: 8px 0 12px 0;
+    text-decoration: none;
+    font-size: 1em;
+    font-weight: 500;
+    transition: background 0.2s;
+}
+.admin-btn:hover {
+    background: #222;
+    color: #fff;
+}
+td a {
+    color: #09add0;
+    text-decoration: underline;
+    margin: 0 4px;
+    font-size: 0.98em;
+}
+td a:hover {
+    color: #007b9e;
+}
+
+.news-cards {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 24px;
+    justify-content: flex-start;
+    margin: 24px 0;
+}
+.card {
+    background: #fff;
+    border-radius: 12px;
+    box-shadow: 0 2px 12px rgba(0,0,0,0.08);
+    padding: 20px 18px 16px 18px;
+    max-width: 340px;
+    min-width: 220px;
+    flex: 1 1 300px;
+    display: flex;
+    flex-direction: column;
+    justify-content: space-between;
+    margin: 0;
+    overflow-wrap: break-word;
+    overflow: hidden;
+}
+.card h3 {
+    margin: 0 0 10px 0;
+    font-size: 1.25em;
+    color: #222;
+    font-weight: bold;
+    border-bottom: 2px solid #e0e0e0;
+    padding-bottom: 6px;
+}
+.card .news-date {
+    font-size: 0.95em;
+    color: #888;
+    margin-bottom: 16px;
+    margin-top: 2px;
+    display: block;
+    letter-spacing: 0.5px;
+}
+.card .news-desc {
+    font-size: 1em;
+    color: #333;
+    margin-bottom: 14px;
+    white-space: pre-line;
+}
+.card .admin-btn {
+    align-self: flex-end;
+    margin: 0 0 0 8px;
+    padding: 6px 12px;
+    font-size: 0.97em;
+}
+.card--wide {
+    max-width: 700px;
+    width: 100%;
+    margin: 0 auto;
+    display: block;
+    overflow: visible;
+    overflow-wrap: break-word;
+}
+.news-desc a {
+    color: #007b9e;
+    font-weight: 600;
+    text-decoration: underline;
+    margin-left: 4px;
+    transition: color 0.2s;
+}
+.news-desc a:hover {
+    color: #09add0;
+    text-decoration: underline;
+}
+.news-card-actions {
+    margin-top: auto;
+    display: flex;
+    gap: 12px;
+}
+.news-desc {
+    min-height: 80px;
+    margin-bottom: 14px;
+}
+@media (max-width: 700px) {
+    .news-cards {
+        flex-direction: column;
+        gap: 16px;
+    }
+    .card {
+        max-width: 98vw;
+        min-width: unset;
+        width: 100%;
+    }
+}
+.status-box {
+    background: #e6f9e6;
+    color: #217a21;
+    border: 1px solid #b3e6b3;
+    border-radius: 6px;
+    padding: 10px 16px;
+    margin-bottom: 18px;
+    width: 100%;
+    text-align: center;
+}
+.error-box {
+    background: #ffe0e0;
+    color: #b30000;
+    border: 1px solid #ffb3b3;
+    border-radius: 6px;
+    padding: 10px 16px;
+    margin-bottom: 18px;
+    width: 100%;
+    text-align: center;
+}
+.gutschein-header-block {
+    width: 100%;
+    max-width: 1100px;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    margin-bottom: 18px;
+}
+.gutschein-table {
+    max-width: 1100px;
+    width: 100%;
+    margin: 0 auto;
+}
+
+.event-details {
+    background: white;
+    padding: 20px;
+    border-radius: 8px;
+    margin-bottom: 20px;
+    box-shadow: 0 2px 8px rgba(0,0,0,0.1);
+}
+
+.event-details h2 {
+    margin-top: 0;
+    color: #333;
+    font-size: 1.5em;
+}
+
+.event-details p {
+    margin: 8px 0;
+    line-height: 1.4;
+}
+
+.event-details strong {
+    color: #4d4d4d;
 }

Controller/AuthController.php

@@ -48,12 +48,13 @@ class AuthController
 
         $result = $this->model->login($email, $password);
         
-        if ($result === true) {
-            $_SESSION['user'] = $email;
+        if ($result['success']) {
+            $_SESSION['user'] = $result['user']['email'];
+            $_SESSION['is_admin'] = $result['user']['is_admin'];
             $this->view->setDoMethodName('showLoginSuccess');
         } else {
             $this->view->setVars([
-                'errors' => ['login' => is_string($result) ? $result : "Login fehlgeschlagen."],
+                'errors' => ['login' => $result['error']],
                 'validData' => ['email' => $email],
                 'loginSuccess' => false
             ]);
@@ -63,14 +64,14 @@ class AuthController
 
     public function register() {
         $data = [
-            'first_name' => $_POST['vorname'] ?? '',
-            'last_name' => $_POST['nachname'] ?? '',
-            'street' => $_POST['strasse'] ?? '',
-            'house_number' => $_POST['hausnr'] ?? '',
-            'postal_code' => $_POST['plz'] ?? '',
-            'city' => $_POST['ort'] ?? '',
-            'country' => $_POST['land'] ?? '',
-            'phone' => $_POST['tel'] ?? '',
+            'first_name' => $_POST['first_name'] ?? '',
+            'last_name' => $_POST['last_name'] ?? '',
+            'street' => $_POST['street'] ?? '',
+            'house_number' => $_POST['house_number'] ?? '',
+            'postal_code' => $_POST['postal_code'] ?? '',
+            'city' => $_POST['city'] ?? '',
+            'country' => $_POST['country'] ?? '',
+            'phone' => $_POST['phone'] ?? '',
             'email' => $_POST['email'] ?? '',
             'password' => $_POST['password'] ?? '',
             'password_repeat' => $_POST['password_repeat'] ?? '',
@@ -80,13 +81,15 @@ class AuthController
         $result = $this->model->register($data);
 
         if ($result === true) {
-            $this->view->setVars(['success' => 'Registrierung erfolgreich!']);
-            $this->view->render('Auth/showLoginForm');
-            exit;
+            $this->view->setDoMethodName('showRegistrationSuccess');
+        } else {
+            if (is_array($result)) {
+                $errors['register'] = implode('<br>', $result);
             } else {
                 $errors['register'] = is_string($result) ? $result : "Registrierung fehlgeschlagen.";
+            }
             $this->view->setVars(['errors' => $errors, 'validData' => $data]);
-            $this->view->render('Auth/showRegistrationForm');
+            $this->view->setDoMethodName('showRegistrationForm');
         }
     }
 
@@ -102,8 +105,7 @@ class AuthController
         exit;
     }
 
-    public function changePassword()
-    {
+    public function changePassword() {
         $email = $_POST['email'] ?? '';
         $oldpw = $_POST['old_password'] ?? '';
         $newpw = $_POST['password'] ?? '';

Controller/EventController.php

@@ -3,6 +3,7 @@
 namespace Blog\Controller;
 
 use Blog\Model\EventModel;
+use Blog\Model\StandortModel;
 
 class EventController {
 
@@ -22,20 +23,33 @@ class EventController {
     }
 
     public function createEvent() {
-        $data = [
-            'name' => $_POST['name'] ?? null,
-            'beschreibung' => $_POST['beschreibung'] ?? null,
-            'standortid' => $_POST['standortid'] ?? null,
-            'datum_von' => $_POST['datum_von'] ?? null,
-            'datum_bis' => $_POST['datum_bis'] ?? null,
-            'max_tickets' => $_POST['max_tickets'] ?? null,
-            'preis' => $_POST['preis'] ?? null
-        ];
-
-        $this->model->createEvent($data);
-        $this->view->setVars(['event' => $data]);
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=Event&do=showEvents');
             exit;
         }
+        $data = [
+            'name' => $_POST['name'] ?? '',
+            'start_date' => $_POST['start_date'] ?? '',
+            'end_date' => $_POST['end_date'] ?? '',
+            'location_id' => $_POST['location_id'] ?? '',
+            'description' => $_POST['description'] ?? '',
+            'max_tickets' => $_POST['max_tickets'] ?? '',
+            'ticket_price' => $_POST['ticket_price'] ?? ''
+        ];
+        $errors = [];
+        if (empty($data['name']) || empty($data['start_date']) || empty($data['end_date']) || empty($data['location_id']) || empty($data['description']) || empty($data['max_tickets']) || empty($data['ticket_price'])) {
+            $errors['event'] = 'Bitte alle Felder ausfüllen.';
+        }
+        if (!empty($errors)) {
+            $standortModel = new StandortModel();
+            $locations = $standortModel->getStandorte();
+            $this->view->setVars(['errors' => $errors, 'validData' => $data, 'locations' => $locations]);
+            $this->view->setDoMethodName('showCreateEvent');
+            return;
+        }
+        $this->model->createEvent($data);
+        $this->view->setDoMethodName('showCreateForwarding');
+    }
 
     public function editEventForm() {
         $id = $_GET['ausstellungid'];
@@ -43,22 +57,105 @@ class EventController {
         $this->view->setVars(['event' => $event]);
     }
 
-    public function updateEvent($id, $data) {
-        $id = $_POST['ausstellungid'];
+    public function updateEvent() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
+        $id = $_POST['id'] ?? null;
         $data = [
-            'standortid' => $_POST['standortid'] ?? null,
-            'datum_von' => $_POST['datum_von'] ?? null,
-            'datum_bis' => $_POST['datum_bis'] ?? null,
-            'name' => $_POST['name'] ?? null,
-            'beschreibung' => $_POST['beschreibung'] ?? null,
-            'max_tickets' => $_POST['max_tickets'] ?? null,
-            'preis' => $_POST['preis'] ?? null
+            'name' => $_POST['name'] ?? '',
+            'start_date' => $_POST['start_date'] ?? '',
+            'end_date' => $_POST['end_date'] ?? '',
+            'location_id' => $_POST['location_id'] ?? '',
+            'description' => $_POST['description'] ?? '',
+            'max_tickets' => $_POST['max_tickets'] ?? '',
+            'ticket_price' => $_POST['ticket_price'] ?? ''
         ];
+        $errors = [];
+        if (empty($data['name']) || empty($data['start_date']) || empty($data['end_date']) || empty($data['location_id']) || empty($data['description']) || empty($data['max_tickets']) || empty($data['ticket_price'])) {
+            $errors['event'] = 'Bitte alle Felder ausfüllen.';
+        }
+        if (!empty($errors)) {
+            $standortModel = new StandortModel();
+            $location = $standortModel->getStandort($data['location_id']);
+            $eventView = [
+                'id' => $id,
+                'name' => $data['name'],
+                'start_date' => $data['start_date'],
+                'end_date' => $data['end_date'],
+                'location_id' => $data['location_id'],
+                'location_name' => $location['city'] ?? '',
+                'description' => $data['description'],
+                'max_tickets' => $data['max_tickets'],
+                'ticket_price' => $data['ticket_price'],
+            ];
+            $this->view->setVars(['event' => $eventView, 'errors' => $errors]);
+            $this->view->setDoMethodName('showUpdateEvent');
+            return;
+        }
         $this->model->updateEvent($id, $data);
+        $this->view->setDoMethodName('showUpdateForwarding');
     }
 
-    public function deleteEvent($id) {
+    public function deleteEvent() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
+        $id = $_GET['event_id'] ?? null;
+        if ($id) {
             $this->model->deleteEvent($id);
             $this->view->setVars(['id' => $id]);
+            $this->view->setDoMethodName('deleteEvent');
+        } else {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
+    }
+
+    public function showUpdateEvent() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
+        $id = $_GET['event_id'] ?? null;
+        if (!$id) {
+            $this->view->setVars(['error' => 'Keine Event-ID angegeben.']);
+            return;
+        }
+        $event = $this->model->getEvent($id);
+        if (!$event) {
+            $this->view->setVars(['error' => 'Event nicht gefunden.']);
+            return;
+        }
+        $standortModel = new StandortModel();
+        $location = $standortModel->getStandort($event['location_id']);
+        $eventView = [
+            'id' => $event['event_id'],
+            'name' => $event['name'],
+            'start_date' => $event['start_date'],
+            'end_date' => $event['end_date'],
+            'location_id' => $event['location_id'],
+            'location_name' => $location['city'] ?? '',
+            'description' => $event['description'],
+            'max_tickets' => $event['max_tickets'],
+            'ticket_price' => $event['ticket_price'],
+        ];
+        $this->view->setVars(['event' => $eventView, 'errors' => []]);
+    }
+
+    public function showCreateEvent() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
+        $standortModel = new StandortModel();
+        $locations = $standortModel->getStandorte();
+        $this->view->setVars([
+            'locations' => $locations,
+            'errors' => [],
+            'validData' => []
+        ]);
     }
 }

Controller/GutscheinController.php

@@ -19,16 +19,27 @@ class GutscheinController {
         $this->view->setVars(['gutscheine' => $gutscheine]);
     }
 
+    public function createGutscheinForm() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php');
+            exit;
+        }
+        $this->view->setDoMethodName('createGutscheinForm');
+    }
+
     public function createGutschein() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php');
+            exit;
+        }
         $data = [
             'code' => $_POST['code'] ?? null,
-            'rabatt' => $_POST['rabatt'] ?? null,
-            'eventid' => $_POST['eventid'] ?? null,
-            'gültigkeit' => $_POST['gültigkeit'] ?? null
+            'discount' => $_POST['discount'] ?? null,
+            'event_id' => $_POST['event_id'] ?? null,
+            'valid_until' => $_POST['valid_until'] ?? null
         ];
-        $erg = $this->model->createGutschein($data);
-        $this->view->setVars(['gutschein' => $erg]);
-        exit;
+        $this->model->createGutschein($data);
+        $this->view->setDoMethodName('showCreateSuccess');
     }
 
     public function editGutscheinForm() {
@@ -43,15 +54,29 @@ class GutscheinController {
         $id = $_POST['gutscheinid'];
         $data = [
             'code' => $_POST['code'] ?? null,
-                'rabatt' => $_POST['rabatt'] ?? null,
-                'eventid' => $_POST['eventid'] ?? null,
-                'gültigkeit' => $_POST['gültigkeit'] ?? null
+            'discount' => $_POST['discount'] ?? null,
+            'event_id' => $_POST['event_id'] ?? null,
+            'valid_until' => $_POST['valid_until'] ?? null
         ];
         $this->model->updateGutschein($id, $data);
+        header('Location: index.php?controller=Gutschein&do=adminVerwaltung');
+        exit;
     }
 
     public function deleteGutschein() {
         $id = $_GET['gutscheinid'] ?? null;
         $this->model->deleteGutschein($id);
+        header('Location: index.php?controller=Gutschein&do=adminVerwaltung');
+        exit;
+    }
+
+    public function adminVerwaltung() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php');
+            exit;
+        }
+        $gutscheine = $this->model->getGutscheine();
+        $this->view->setVars(['gutscheine' => $gutscheine]);
+        $this->view->setDoMethodName('showGutscheine');
     }
 }

Controller/NewsController.php

@@ -20,34 +20,102 @@ class NewsController {
     }
 
     public function createNews() {
-        $data = [
-            'name' => $_POST['name'],
-            'beschreibung' => $_POST['beschreibung'],
-            'datum' => $_POST['datum'],
-        ];
-        $erg = $this->model->createNews($data);
-        $this->view->setVars(['news' => $erg]);
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=News&do=showNews');
             exit;
         }
+        $data = [
+            'name' => $_POST['name'] ?? '',
+            'description' => $_POST['description'] ?? '',
+            'date' => $_POST['date'] ?? date('Y-m-d'),
+        ];
+        $errors = [];
+        if (empty($data['name']) || empty($data['description']) || empty($data['date'])) {
+            $errors['news'] = 'Bitte alle Felder ausfüllen.';
+        }
+        if (!empty($errors)) {
+            $this->view->setVars(['errors' => $errors, 'validData' => $data]);
+            $this->view->setDoMethodName('createNewsForm');
+            return;
+        }
+        $this->model->createNews($data);
+        $this->view->setDoMethodName('showCreateSuccess');
+    }
+
+    public function createNewsForm() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=News&do=showNews');
+            exit;
+        }
+        $this->view->setVars([
+            'errors' => [],
+            'validData' => []
+        ]);
+    }
 
     public function editNewsForm() {
-        $id = $_GET['newsid'];
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=News&do=showNews');
+            exit;
+        }
+        $id = $_GET['id'] ?? null;
+        if ($id) {
             $news = $this->model->getNewsById($id);
-        $this->view->setVars(['news' => $news]);
+            $validData = [
+                'name' => $news['name'] ?? '',
+                'description' => $news['description'] ?? '',
+                'date' => $news['date'] ?? date('Y-m-d'),
+            ];
+            $this->view->setVars(['validData' => $validData, 'id' => $id, 'errors' => []]);
+        }
     }
 
     public function updateNews() {
-        $id = $_POST['newsid'] ?? null;
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=News&do=showNews');
+            exit;
+        }
+        $id = $_POST['id'] ?? null;
         $data = [
-            'name' => $_POST['name'],
-            'beschreibung' => $_POST['beschreibung'],
-            'datum' => $_POST['datum'],
+            'name' => $_POST['name'] ?? '',
+            'description' => $_POST['description'] ?? '',
+            'date' => $_POST['date'] ?? date('Y-m-d'),
         ];
+        $errors = [];
+        if (empty($data['name']) || empty($data['description']) || empty($data['date'])) {
+            $errors['news'] = 'Bitte alle Felder ausfüllen.';
+        }
+        if (!empty($errors)) {
+            $this->view->setVars(['errors' => $errors, 'validData' => $data, 'id' => $id]);
+            $this->view->setDoMethodName('editNewsForm');
+            return;
+        }
         $this->model->updateNews($id, $data);
+        $this->view->setDoMethodName('showEditSuccess');
     }
 
     public function deleteNews() {
-        $id = $_GET['newsid'] ?? null;
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=News&do=showNews');
+            exit;
+        }
+        $id = $_GET['id'] ?? null;
+        if ($id) {
             $this->model->deleteNews($id);
         }
+        $this->view->setDoMethodName('showDeleteSuccess');
+    }
+
+    public function showNewsDetail() {
+        $id = $_GET['id'] ?? null;
+        if ($id) {
+            $news = $this->model->getNewsById($id);
+            if ($news) {
+                $this->view->setVars(['news' => $news]);
+                return;
+            }
+        }
+        header('Location: index.php?controller=News&do=showNews');
+        exit;
+    }
 }

Controller/RegisterController.php

@@ -1,10 +0,0 @@
-<?php
-namespace Blog\Controller;
-
-class RegisterController {
-    function showRegisterPage()
-    {
-
-    }
-}
-

Controller/TicketController.php

@@ -3,37 +3,120 @@
 namespace Blog\Controller;
 
 use Blog\Model\TicketModel;
+use Blog\Model\EventModel;
+use Blog\Model\StandortModel;
 
 class TicketController {
 
     private $ticketModel;
+    private $eventModel;
     private $view;
 
     public function __construct($view) {
         $this->ticketModel = new TicketModel();
+        $this->eventModel = new EventModel();
         $this->view = $view;
     }
 
     public function showTickets() {
-        $tickets = $this->ticketModel->getTickets();
+        if (!isset($_SESSION['user_id'])) {
+            $this->view->setVars(['redirect' => 'index.php?controller=Auth&do=showLoginForm']);
+            return;
+        }
+        
+        $tickets = $this->ticketModel->getUserTickets($_SESSION['user_id']);
         $this->view->setVars(['tickets' => $tickets]);
     }
 
+    public function showBuyTicketForm() {
+        if (!isset($_SESSION['user_id'])) {
+            $this->view->setVars(['redirect' => 'index.php?controller=Auth&do=showLoginForm']);
+            return;
+        }
+
+        $event_id = $_GET['event_id'] ?? null;
+        if (!$event_id) {
+            $this->view->setVars(['redirect' => 'index.php?controller=Event&do=showEvents']);
+            return;
+        }
+
+        $event = $this->eventModel->getEvent($event_id);
+        if (!$event) {
+            $this->view->setVars(['redirect' => 'index.php?controller=Event&do=showEvents']);
+            return;
+        }
+
+        // Check if user already has a ticket for this event
+        $hasTicket = $this->ticketModel->hasTicket($_SESSION['user_id'], $event_id);
+        
+        $this->view->setVars([
+            'event' => $event,
+            'hasTicket' => $hasTicket['count'] > 0
+        ]);
+    }
+
     public function buyTicket() {
+        if (!isset($_SESSION['user_id'])) {
+            header('Location: index.php?controller=Auth&do=showLoginForm');
+            exit;
+        }
+
+        $event_id = $_POST['event_id'] ?? null;
+        if (!$event_id) {
+            $this->view->setVars(['error' => 'Keine Event-ID angegeben.']);
+            return;
+        }
+
+        $event = $this->eventModel->getEvent($event_id);
+        if (!$event) {
+            $this->view->setVars(['error' => 'Event nicht gefunden.']);
+            return;
+        }
+
+        // Check if user already has a ticket for this event
+        $hasTicket = $this->ticketModel->hasTicket($_SESSION['user_id'], $event_id);
+        if ($hasTicket['count'] > 0) {
+            $this->view->setVars(['error' => 'Sie haben bereits ein Ticket für dieses Event.']);
+            return;
+        }
+
+        // Calculate valid until date (event end date + 30 days)
+        $valid_until = date('Y-m-d', strtotime($event['end_date'] . ' +30 days'));
+        
         $data = [
-            'userid' => $_POST['userid'],
-            'eventid' => $_POST['eventid'],
-            'kaufdatum' => date('Y-m-d'),
-            'gültigkeitsdatum' => $_POST['gültigkeitsdatum']
+            'user_id' => $_SESSION['user_id'],
+            'event_id' => $event_id,
+            'purchase_date' => date('Y-m-d'),
+            'valid_until' => $valid_until
         ];
-        $erg = $this->ticketModel->buyTicket($data);
-        $this->view->setVars(['ticket' => $erg]);
+
+        try {
+            $ticket_id = $this->ticketModel->buyTicket($data);
+            $this->view->setVars([
+                'event' => $event,
+                'ticket_id' => $ticket_id,
+                'purchase_date' => $data['purchase_date'],
+                'valid_until' => $valid_until
+            ]);
+            $this->view->setDoMethodName('buyTicket');
+        } catch (Exception $e) {
+            $this->view->setVars(['error' => 'Fehler beim Kauf des Tickets: ' . $e->getMessage()]);
+            $this->view->setDoMethodName('showBuyTicketForm');
+        }
     }
 
     public function deleteTicket() {
-        $ticketid = $_GET['ticketid'] ?? null;
-        if ($ticketid) {
-            $this->ticketModel->deleteTicket($ticketid);
+        if (!isset($_SESSION['user_id'])) {
+            $this->view->setVars(['redirect' => 'index.php?controller=Auth&do=showLoginForm']);
+            return;
         }
+
+        $ticket_id = $_GET['ticket_id'] ?? null;
+        if ($ticket_id) {
+            $this->ticketModel->deleteTicket($ticket_id);
+        }
+        
+        // Redirect to tickets page using JavaScript
+        $this->view->setVars(['redirect' => 'index.php?controller=Ticket&do=showTickets']);
     }
 }

Controller/WelcomeController.php

@@ -1,18 +0,0 @@
-<?php
-
-namespace Blog\Controller;
-
-class WelcomeController
-{
-    function showWelcome() {
-        
-    }
-
-    function showProjects() {
-        
-    }
-
-    function showTutorials() {
-        
-    }
-}

Model/AuthModel.php

@@ -11,7 +11,7 @@ class AuthModel extends Database
     public function login(string $email, string $password)
     {
         $pdo = $this->linkDB();
-        $sql = "SELECT email, password, valid_until FROM user WHERE email = :email";
+        $sql = "SELECT email, password, valid_until, is_admin FROM user WHERE email = :email";
         $params = [":email" => $email];
 
         try {
@@ -20,15 +20,15 @@ class AuthModel extends Database
             $user = $sth->fetch(PDO::FETCH_ASSOC);
         } catch (PDOException $e) {
             new \Blog\Library\ErrorMsg("Fehler beim Abrufen der Benutzerdaten.", $e);
-            return "Interner Datenbankfehler."; // Nur für Debug sichtbar machen, sonst besser allgemein halten
+            return ['success' => false, 'error' => "Interner Datenbankfehler."];
         }
 
         if (!$user) {
-            return "Benutzer mit dieser E-Mail wurde nicht gefunden.";
+            return ['success' => false, 'error' => "Benutzer mit dieser E-Mail wurde nicht gefunden."];
         }
 
         if (!password_verify($password, $user['password'])) {
-            return "Das eingegebene Passwort ist falsch.";
+            return ['success' => false, 'error' => "Das eingegebene Passwort ist falsch."];
         }
 
         try {
@@ -36,14 +36,14 @@ class AuthModel extends Database
             $validUntil = new DateTime($user['valid_until']);
 
             if ($now > $validUntil) {
-                return "Ihr Passwort ist abgelaufen. Bitte setzen Sie ein neues über \"Passwort vergessen\".";
+                return ['success' => false, 'error' => "Ihr Passwort ist abgelaufen. Bitte setzen Sie ein neues über \"Passwort vergessen\"."];
             }
         } catch (\Exception $e) {
             new \Blog\Library\ErrorMsg("Fehler beim Verarbeiten des Gültigkeitsdatums.", $e);
-            return "Fehler bei der Passwortprüfung.";
+            return ['success' => false, 'error' => "Fehler bei der Passwortprüfung."];
         }
 
-        return true;
+        return ['success' => true, 'user' => $user];
     }
 
     public function register($data) {
@@ -52,7 +52,7 @@ class AuthModel extends Database
         }
 
         $requiredFields = [
-            'email', 'password', 'street', 'house_number', 'city', 'postal_code',
+            'email', 'password', 'password_repeat', 'street', 'house_number', 'city', 'postal_code',
             'country', 'first_name', 'last_name', 'phone'
         ];
 
@@ -71,8 +71,9 @@ class AuthModel extends Database
             return "Passwörter stimmen nicht überein.";
         }
 
-        if ($this->pwRequirementCheck($data['password']) !== true) {
-            return "Passwort muss mindestens 8 Zeichen lang sein und mindestens ein Großbuchstabe, ein Kleinbuchstabe, eine Zahl und ein Sonderzeichen enthalten.";
+        $pwCheck = $this->pwRequirementCheck($data['password']);
+        if ($pwCheck !== true) {
+            return $pwCheck; // Array mit spezifischen Fehlern zurückgeben
         }
 
         $hashedPassword = password_hash($data['password'], PASSWORD_DEFAULT);
@@ -220,16 +221,16 @@ class AuthModel extends Database
     public function pwRequirementCheck($password){
         $error = [];
 
-        if(strlen($password) <= 8)
-            $error[] = "min 8 Charackter";
+        if(strlen($password) < 8)
+            $error[] = "Passwort: mindestens 8 Zeichen";
         if(!preg_match("/[A-Z]/", $password))
-            $error[] = "min one large Character";
+            $error[] = "Passwort: mindestens ein Großbuchstabe";
         if(!preg_match("/[a-z]/", $password))
-            $error[] = "min one small charakter";
+            $error[] = "Passwort: mindestens ein Kleinbuchstabe";
         if(!preg_match("/[0-9]/", $password))
-            $error[] = "min one number";
-        if(!preg_match("[^a-zA-Z0-9\s]", $password));
-        $error[] = "min one special character";
+            $error[] = "Passwort: mindestens eine Zahl";
+        if(!preg_match("/[^a-zA-Z0-9\s]/", $password))
+            $error[] = "Passwort: mindestens ein Sonderzeichen";
 
         if(empty($error))
             return true;

Model/NewsModel.php

@@ -24,9 +24,9 @@ class NewsModel extends Database {
         $pdo = $this->linkDB();
         $sql = "UPDATE news SET name = :name, description = :description, date = :date WHERE news_id = :news_id;";
         $params = [
-            ":name" => $news['titel'],
-            ":description" => $news['inhalt'],
-            ":date" => $news['datum'],
+            ":name" => $news['name'],
+            ":description" => $news['description'],
+            ":date" => $news['date'],
             ":news_id" => $newsId
         ];
         try {
@@ -56,9 +56,9 @@ class NewsModel extends Database {
         $pdo = $this->linkDB();
         $sql = "INSERT INTO news (name, description, date) VALUES (:name, :description, :date);";
         $params = [
-            ":name" => $news['titel'],
-            ":description" => $news['inhalt'],
-            ":date" => $news['datum']
+            ":name" => $news['name'],
+            ":description" => $news['description'],
+            ":date" => $news['date']
         ];
         try {
             $sth = $pdo->prepare($sql);

Model/TicketModel.php

@@ -8,7 +8,12 @@ class TicketModel extends Database {
 
     public function getTickets() {
         $pdo = $this->linkDB();
-        $sql = "SELECT * FROM ticket ORDER BY ticket_id ASC;";
+        $sql = "SELECT t.*, e.name as event_name, e.start_date, e.end_date, e.ticket_price, 
+                       l.city as location_city, l.street as location_street, l.house_number as location_house_number
+                FROM ticket t 
+                JOIN event e ON t.event_id = e.event_id 
+                JOIN location l ON e.location_id = l.location_id 
+                ORDER BY t.purchase_date DESC;";
         try {
             $sth = $pdo->prepare($sql);
             $sth->execute();
@@ -19,8 +24,52 @@ class TicketModel extends Database {
         }
     }
 
+    public function getUserTickets($user_id) {
+        $pdo = $this->linkDB();
+        $sql = "SELECT t.*, e.name as event_name, e.start_date, e.end_date, e.ticket_price, 
+                       l.city as location_city, l.street as location_street, l.house_number as location_house_number
+                FROM ticket t 
+                JOIN event e ON t.event_id = e.event_id 
+                JOIN location l ON e.location_id = l.location_id 
+                WHERE t.user_id = :user_id 
+                ORDER BY t.purchase_date DESC;";
+        $params = [":user_id" => $user_id];
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+            return $sth->fetchAll(\PDO::FETCH_ASSOC);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Lesen der Benutzer-Tickets.", $e);
+            die;
+        }
+    }
+
     public function buyTicket($data) {
         $pdo = $this->linkDB();
+        
+        // First check if the event still has available tickets
+        $checkSql = "SELECT e.max_tickets, COUNT(t.ticket_id) as sold_tickets 
+                     FROM event e 
+                     LEFT JOIN ticket t ON e.event_id = t.event_id 
+                     WHERE e.event_id = :event_id 
+                     GROUP BY e.event_id, e.max_tickets";
+        
+        try {
+            $checkStmt = $pdo->prepare($checkSql);
+            $checkStmt->execute([':event_id' => $data['event_id']]);
+            $eventInfo = $checkStmt->fetch(\PDO::FETCH_ASSOC);
+            
+            if (!$eventInfo) {
+                throw new \Exception("Event nicht gefunden.");
+            }
+            
+            if ($eventInfo['sold_tickets'] >= $eventInfo['max_tickets']) {
+                throw new \Exception("Alle Tickets für dieses Event sind bereits verkauft.");
+            }
+        } catch (PDOException $e) {
+            throw new \Exception("Fehler bei der Ticketverfügbarkeitsprüfung.");
+        }
+        
         $sql = "INSERT INTO ticket (user_id, event_id, purchase_date, valid_until)
                 VALUES (:user_id, :event_id, :purchase_date, :valid_until);";
         $params = [
@@ -34,8 +83,7 @@ class TicketModel extends Database {
             $sth->execute($params);
             return $pdo->lastInsertId();
         } catch (PDOException $e) {
-            new \Blog\Library\ErrorMsg("Fehler beim Kauf des Tickets.", $e);
-            die;
+            throw new \Exception("Fehler beim Kauf des Tickets.");
         }
     }
 

Views/Auth/forgotPassword.phtml

@@ -1,5 +1,5 @@
 <div class="inhalt">
-    <div class="login-container">
+    <div class="form-container">
         <h1>Anmelden</h1>
         <?php if (!empty($errors['login'])): ?>
             <div class="login-error"><?=htmlspecialchars($errors['login'])?></div>

Views/Auth/showLoginForm.phtml

@@ -1,8 +1,8 @@
 <div class="inhalt">
-    <div class="login-container">
+    <div class="form-container">
         <h1>Anmelden</h1>
         <?php if (!empty($errors['login'])): ?>
-            <div class="login-error"><?=htmlspecialchars($errors['login'])?></div>
+            <div class="error-box"><?=htmlspecialchars($errors['login'])?></div>
         <?php endif; ?>
         <form class="form-horizontal" action="index.php" method="post">
             <input type="hidden" name="controller" value="Auth">
@@ -11,7 +11,7 @@
             <input class="input-email" type="email" name="email" id="email" placeholder="E-Mail" required>
             <label for="password">Passwort</label>
             <input class="input-passwort" type="password" name="password" id="password" placeholder="Passwort" required>
-            <button class="button-loggin" type="submit">Login</button>
+            <button class="button-login" type="submit">Login</button>
         </form>
         <div style="text-align:center; margin-top: 1.5em;">
             <a class="link-passwort-vergessen" href="?controller=Auth&do=showForgotPasswordForm">Passwort vergessen?</a>

Views/Auth/showLoginSuccess.phtml

@@ -1,5 +1,5 @@
 <div class="inhalt">
-    <div class="login-success">
+    <div class="status-box">
         <h2>Login erfolgreich!</h2>
         <p>Sie werden in wenigen Sekunden zu den News weitergeleitet...</p>
     </div>

Views/Auth/showLogoutSuccess.phtml

@@ -1,5 +1,5 @@
 <div class="inhalt">
-    <div class="login-success">
+    <div class="status-box">
         <h2>Logout erfolgreich!</h2>
         <p>Sie werden in wenigen Sekunden zum Login weitergeleitet...</p>
     </div>

Views/Auth/showRegistrationForm.phtml

@@ -1,64 +1,37 @@
 <div class="inhalt">
-    <div class="login-container">
+    <div class="form-container">
         <h1>Registrieren</h1>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-vorname" type="text" placeholder="Vorname">
-            </label>
+        <?php if (!empty($errors['register'])): ?>
+            <div class="error-box"><?=htmlspecialchars($errors['register'])?></div>
+        <?php endif; ?>
+        <form class="form-horizontal" action="index.php" method="post">
+            <input type="hidden" name="controller" value="Auth">
+            <input type="hidden" name="do" value="register">
+            <label for="first_name">Vorname</label>
+            <input class="input-vorname" type="text" name="first_name" id="first_name" placeholder="Vorname" required value="<?=htmlspecialchars($validData['first_name'] ?? '')?>">
+            <label for="last_name">Nachname</label>
+            <input class="input-nachname" type="text" name="last_name" id="last_name" placeholder="Nachname" required value="<?=htmlspecialchars($validData['last_name'] ?? '')?>">
+            <label for="email">E-Mail</label>
+            <input class="input-email" type="email" name="email" id="email" placeholder="E-Mail" required value="<?=htmlspecialchars($validData['email'] ?? '')?>">
+            <label for="password">Passwort</label>
+            <input class="input-passwort" type="password" name="password" id="password" placeholder="Passwort" required>
+            <label for="password_repeat">Passwort wiederholen</label>
+            <input class="input-passwort-repeat" type="password" name="password_repeat" id="password_repeat" placeholder="Passwort wiederholen" required>
+            <label for="street">Straße</label>
+            <input class="input-strasse" type="text" name="street" id="street" placeholder="Straße" required value="<?=htmlspecialchars($validData['street'] ?? '')?>">
+            <label for="house_number">Hausnr.</label>
+            <input class="input-hausnr" type="text" name="house_number" id="house_number" placeholder="Hausnr." required value="<?=htmlspecialchars($validData['house_number'] ?? '')?>">
+            <label for="postal_code">Postleitzahl</label>
+            <input class="input-postleitzahl" type="text" name="postal_code" id="postal_code" placeholder="Postleitzahl" required value="<?=htmlspecialchars($validData['postal_code'] ?? '')?>">
+            <label for="city">Ort</label>
+            <input class="input-ort" type="text" name="city" id="city" placeholder="Ort" required value="<?=htmlspecialchars($validData['city'] ?? '')?>">
+            <label for="country">Land</label>
+            <input class="input-land" type="text" name="country" id="country" placeholder="Land" required value="<?=htmlspecialchars($validData['country'] ?? '')?>">
+            <label for="phone">Telefonnr.</label>
+            <input class="input-tel" type="text" name="phone" id="phone" placeholder="Telefonnr." required value="<?=htmlspecialchars($validData['phone'] ?? '')?>">
+            <button class="button-register" type="submit">Registrieren</button>
         </form>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-nachname" type="text" placeholder="Nachname">
-            </label>
-        </form>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-email" type="text" placeholder="E-Mail">
-            </label>
-        </form>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-passwort" type="text" placeholder="Passwort">
-            </label>
-        </form>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-passwort-repeat" type="text" placeholder="Passwort wiederholen">
-            </label>
-        </form>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-strasse" type="text" placeholder="Straße">
-            </label>
-        </form>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-hausnr" type="text" placeholder="Hausnr.">
-            </label>
-        </form>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-postleitzahl" type="text" placeholder="Postleitzahl">
-            </label>
-        </form>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-ort" type="text" placeholder="Ort">
-            </label>
-        </form>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-land" type="text" placeholder="Land">
-            </label>
-        </form>
-        <form class="form-horizontal" action="#" method="post">
-            <label>
-                <input class="input-tel" type="text" placeholder="Telefonnr.">
-            </label>
-        </form>
-        <button class="button-register">Registrieren</button>
         <a class="link-konto-erstellen" href="?controller=Auth&do=showLoginForm">Login</a>
-
     </div>
 </div>
 

Views/Auth/showRegistrationSuccess.phtml

@@ -0,0 +1,14 @@
+<div class="inhalt">
+    <div class="status-box">
+        <h2>Registrierung erfolgreich!</h2>
+        <p>Sie werden in wenigen Sekunden zum Login weitergeleitet...</p>
+    </div>
+</div>
+<script>
+    setTimeout(function() {
+        window.location.href = "?controller=Auth&do=showLoginForm";
+    }, 2000);
+</script>
+<noscript>
+    <meta http-equiv="refresh" content="2;url=?controller=Auth&do=showLoginForm">
+</noscript> 

Views/Event/createEvent.phtml

@@ -1,12 +0,0 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
-
-<div class="inhalt">
-    <div class="msg">
-        <p>Das Event "<?php echo $name?>" wurde erfolgreich erstellt!</p>
-        <a href="?controller=Event&do=showEvents">Weiter</a>
-    </div>
-</div>
-
-<?php include dirname(__DIR__).'/footer.phtml'; ?>

Views/Event/deleteEvent.phtml

@@ -4,9 +4,12 @@ include dirname(__DIR__).'/header.phtml';
 
 <div class="inhalt">
     <div class="msg">
-        <p>Das Event mit der id"<?php echo $id?>" wurde erfolgreich gelöscht!</p>
-        <a href="?controller=Event&do=showEvents">Weiter</a>
+        <p>Das Event mit der ID "<?php echo htmlspecialchars($id); ?>" wurde erfolgreich gelöscht!</p>
+        <p>Sie werden in 3 Sekunden zur Event-Übersicht weitergeleitet...</p>
+        <a href="?controller=Event&do=showEvents">Jetzt zur Event-Übersicht</a>
     </div>
 </div>
 
+<meta http-equiv="refresh" content="3;url=index.php?controller=Event&do=showEvents">
+
 <?php include dirname(__DIR__).'/footer.phtml'; ?>

Views/Event/showCreateEvent.phtml

@@ -0,0 +1,38 @@
+<div class="inhalt">
+    <div class="form-container">
+        <h1>Event erstellen</h1>
+        <?php if (!empty(
+            $errors['event'])): ?>
+            <div class="error-box"><?=htmlspecialchars($errors['event'])?></div>
+        <?php endif; ?>
+        <form class="form-horizontal" action="index.php" method="post">
+            <input type="hidden" name="controller" value="Event">
+            <input type="hidden" name="do" value="createEvent">
+            <label for="name">Name</label>
+            <input type="text" name="name" id="name" required value="<?=htmlspecialchars($validData['name'] ?? '')?>">
+            <label for="start_date">Startdatum</label>
+            <input type="date" name="start_date" id="start_date" required value="<?=htmlspecialchars($validData['start_date'] ?? '')?>">
+            <label for="end_date">Enddatum</label>
+            <input type="date" name="end_date" id="end_date" required value="<?=htmlspecialchars($validData['end_date'] ?? '')?>">
+            <label for="location_id">Standort</label>
+            <select name="location_id" id="location_id" required>
+                <option value="">Standort wählen</option>
+                <?php if (!empty($locations)): ?>
+                    <?php foreach ($locations as $loc): ?>
+                        <option value="<?= htmlspecialchars($loc['location_id']) ?>" <?= (isset($validData['location_id']) && $validData['location_id'] == $loc['location_id']) ? 'selected' : '' ?>>
+                            <?= htmlspecialchars($loc['city']) ?>, <?= htmlspecialchars($loc['street']) ?> <?= htmlspecialchars($loc['house_number']) ?>
+                        </option>
+                    <?php endforeach; ?>
+                <?php endif; ?>
+            </select>
+            <label for="description">Beschreibung</label>
+            <textarea name="description" id="description" rows="7" required><?=htmlspecialchars($validData['description'] ?? '')?></textarea>
+            <label for="max_tickets">Max. Tickets</label>
+            <input type="number" name="max_tickets" id="max_tickets" required value="<?=htmlspecialchars($validData['max_tickets'] ?? '')?>">
+            <label for="ticket_price">Ticketpreis</label>
+            <input type="number" step="0.01" name="ticket_price" id="ticket_price" required value="<?=htmlspecialchars($validData['ticket_price'] ?? '')?>">
+            <button class="button-register" type="submit">Event erstellen</button>
+        </form>
+        <a href="?controller=Event&do=showEvents">Zurück zur Übersicht</a>
+    </div>
+</div>

Views/Event/showCreateForwarding.phtml

@@ -0,0 +1,15 @@
+<div class="inhalt">
+    <div class="create-forwarding">
+        <h2>Erstellen...</h2>
+        <p>Sie werden in wenigen Sekunden zu der Erstell Seite weitergeleitet...</p>
+    </div>
+</div>
+<script>
+    setTimeout(function() {
+        window.location.href = "?controller=Event&do=showCreateEvent";
+    }, 2000); // 2 Sekunden warten
+</script>
+<noscript>
+    <meta http-equiv="refresh" content="2;url=?controller=Event&do=showCreateEvent">
+</noscript>
+

Views/Event/showEvents.phtml

@@ -1,7 +1,13 @@
 <?php if (!empty($events)): ?>
     <div class="inhalt">
-    <div class="event-container">
+    <div class="content-container">
+        <div class="event-header">
             <h2>Alle Ausstellungen</h2>
+            <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                <a href="?controller=Event&do=showCreateEvent" class="admin-btn">Event erstellen</a>
+            <?php endif; ?>
+        </div>
+        
     <div class="event-container-inhalt">
     <table>
         <thead>
@@ -10,24 +16,59 @@
             <th>Beschreibung</th>
             <th>Von</th>
             <th>Bis</th>
-            <th>Max. Tickets</th>
+            <th>Preis</th>
+            <th>Tickets</th>
+            <th>Aktionen</th>
+            <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                <th>Admin</th>
+            <?php endif; ?>
         </tr>
         </thead>
         <tbody>
         <?php foreach ($events as $event): ?>
-            <tr>
+            <tr class="event-row" data-event-id="<?php echo $event['event_id']; ?>" style="cursor: pointer;">
                 <td><?php echo htmlspecialchars($event['name']); ?></td>
                 <td><?php echo nl2br(htmlspecialchars($event['description'])); ?></td>
                 <td><?php echo date('d.m.Y', strtotime($event['start_date'])); ?></td>
                 <td><?php echo date('d.m.Y', strtotime($event['end_date'])); ?></td>
+                <td><?php echo number_format($event['ticket_price'], 2, ',', '.'); ?> €</td>
                 <td><?php echo (int) $event['max_tickets']; ?></td>
+                <td>
+                    <a href="?controller=Ticket&do=showBuyTicketForm&event_id=<?php echo $event['event_id']; ?>" class="admin-btn">Ticket kaufen</a>
+                </td>
+                <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                    <td>
+                        <a href="?controller=Event&do=showUpdateEvent&event_id=<?php echo $event['event_id']; ?>" class="admin-btn">Bearbeiten</a>
+                        <a href="?controller=Event&do=deleteEvent&event_id=<?php echo $event['event_id']; ?>" class="admin-btn" onclick="return confirm('Wirklich löschen?');">Löschen</a>
+                    </td>
+                <?php endif; ?>
             </tr>
         <?php endforeach; ?>
         </tbody>
     </table>
+    </div>
+    </div>
+    </div>
+
+    <script>
+        document.addEventListener('DOMContentLoaded', function() {
+            const eventRows = document.querySelectorAll('.event-row');
+            
+            eventRows.forEach(function(row) {
+                row.addEventListener('dblclick', function(e) {
+                    // Don't trigger if clicking on a link or button
+                    if (e.target.tagName === 'A' || e.target.tagName === 'BUTTON') {
+                        return;
+                    }
+                    
+                    const eventId = this.getAttribute('data-event-id');
+                    if (eventId) {
+                        window.location.href = 'index.php?controller=Ticket&do=showBuyTicketForm&event_id=' + eventId;
+                    }
+                });
+            });
+        });
+    </script>
 <?php else: ?>
     <p>Derzeit sind keine Ausstellungen verfügbar.</p>
 <?php endif; ?>  
-    </div>
-    </div>
-    </div>  

Views/Event/showUpdateEvent.phtml

@@ -0,0 +1,31 @@
+<div class="inhalt">
+    <div class="form-container">
+        <h1>Event bearbeiten</h1>
+        <?php if (!empty(
+            $errors['event'])): ?>
+            <div class="error-box"><?=htmlspecialchars($errors['event'])?></div>
+        <?php endif; ?>
+        <form class="form-horizontal" action="index.php" method="post">
+            <input type="hidden" name="controller" value="Event">
+            <input type="hidden" name="do" value="updateEvent">
+            <input type="hidden" name="id" value="<?=htmlspecialchars($event['id'] ?? '')?>">
+            <label for="name">Name</label>
+            <input type="text" name="name" id="name" required value="<?=htmlspecialchars($event['name'] ?? '')?>">
+            <label for="start_date">Startdatum</label>
+            <input type="date" name="start_date" id="start_date" required value="<?=htmlspecialchars($event['start_date'] ?? '')?>">
+            <label for="end_date">Enddatum</label>
+            <input type="date" name="end_date" id="end_date" required value="<?=htmlspecialchars($event['end_date'] ?? '')?>">
+            <label for="location_id">Standort</label>
+            <input type="text" name="location_name" value="<?=htmlspecialchars($event['location_name'] ?? '')?>" readonly>
+            <input type="hidden" name="location_id" value="<?=htmlspecialchars($event['location_id'] ?? '')?>">
+            <label for="description">Beschreibung</label>
+            <textarea name="description" id="description" rows="7" required><?=htmlspecialchars($event['description'] ?? '')?></textarea>
+            <label for="max_tickets">Max. Tickets</label>
+            <input type="number" name="max_tickets" id="max_tickets" required value="<?=htmlspecialchars($event['max_tickets'] ?? '')?>">
+            <label for="ticket_price">Ticketpreis</label>
+            <input type="number" step="0.01" name="ticket_price" id="ticket_price" required value="<?=htmlspecialchars($event['ticket_price'] ?? '')?>">
+            <button class="button-register" type="submit">Änderungen speichern</button>
+        </form>
+        <a href="?controller=Event&do=showEvents">Zurück zur Übersicht</a>
+    </div>
+</div>

Views/Event/showUpdateForwarding.phtml

@@ -0,0 +1,15 @@
+<div class="inhalt">
+    <div class="update-forwarding">
+        <h2>Editieren...</h2>
+        <p>Sie werden in wenigen Sekunden zur Edit Seite weitergeleitet...</p>
+    </div>
+</div>
+<script>
+    setTimeout(function() {
+        window.location.href = "?controller=Event&do=showUpdateEvent";
+    }, 2000); // 2 Sekunden warten
+</script>
+<noscript>
+    <meta http-equiv="refresh" content="2;url=?controller=Event&do=showUpdateEvent">
+</noscript>
+

Views/Event/updateEvent.phtml

@@ -1,12 +0,0 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
-
-<div class="inhalt">
-    <div class="msg">
-        <p>Das Event mit der ID "<?php echo $ausstellungid?>" wurde erfolgreich bearbeitet!</p>
-        <a href="?controller=Event&do=showEvents">Weiter</a>
-    </div>
-</div>
-
-<?php include dirname(__DIR__).'/footer.phtml'; ?>

Views/Gutschein/createGutscheinForm.phtml

@@ -0,0 +1,19 @@
+<div class="inhalt">
+  <div class="form-container">
+    <h1>Neuen Gutschein anlegen</h1>
+    <form class="form-horizontal" action="index.php" method="post">
+      <input type="hidden" name="controller" value="Gutschein">
+      <input type="hidden" name="do" value="createGutschein">
+      <label for="code">Code</label>
+      <input type="text" id="code" name="code" required>
+      <label for="discount">Rabatt (%)</label>
+      <input type="number" id="discount" name="discount" min="0" max="100" required>
+      <label for="event_id">Event-ID</label>
+      <input type="number" id="event_id" name="event_id" required>
+      <label for="valid_until">Gültig bis</label>
+      <input type="date" id="valid_until" name="valid_until" required>
+      <button class="admin-btn" type="submit">Erstellen</button>
+    </form>
+    <a href="?controller=Gutschein&do=adminVerwaltung" class="admin-btn" style="background:#888;">Abbrechen</a>
+  </div>
+</div> 

Views/Gutschein/editGutscheinForm.phtml

@@ -0,0 +1,20 @@
+<div class="inhalt">
+  <div class="form-container">
+    <h1>Gutschein bearbeiten</h1>
+    <form class="form-horizontal" action="index.php" method="post">
+      <input type="hidden" name="controller" value="Gutschein">
+      <input type="hidden" name="do" value="updateGutschein">
+      <input type="hidden" name="gutscheinid" value="<?=htmlspecialchars($gutschein['voucher_id'])?>">
+      <label for="code">Code</label>
+      <input type="text" id="code" name="code" required value="<?=htmlspecialchars($gutschein['code'])?>">
+      <label for="discount">Rabatt (%)</label>
+      <input type="number" id="discount" name="discount" min="0" max="100" required value="<?=htmlspecialchars($gutschein['discount'])?>">
+      <label for="event_id">Event-ID</label>
+      <input type="number" id="event_id" name="event_id" required value="<?=htmlspecialchars($gutschein['event_id'])?>">
+      <label for="valid_until">Gültig bis</label>
+      <input type="date" id="valid_until" name="valid_until" required value="<?=htmlspecialchars($gutschein['valid_until'])?>">
+      <button class="admin-btn" type="submit">Speichern</button>
+    </form>
+    <a href="?controller=Gutschein&do=adminVerwaltung" class="admin-btn" style="background:#888;">Abbrechen</a>
+  </div>
+</div> 

Views/Gutschein/showCreateSuccess.phtml

@@ -0,0 +1,14 @@
+<div class="inhalt">
+  <div class="status-box">
+    <h2>Gutschein erfolgreich erstellt!</h2>
+    <p>Du wirst in wenigen Sekunden zur Übersicht weitergeleitet...</p>
+  </div>
+</div>
+<script>
+  setTimeout(function() {
+    window.location.href = "?controller=Gutschein&do=adminVerwaltung";
+  }, 2000);
+</script>
+<noscript>
+  <meta http-equiv="refresh" content="2;url=?controller=Gutschein&do=adminVerwaltung">
+</noscript> 

Views/Gutschein/showGutscheine.phtml

@@ -1,10 +1,10 @@
-<?php include dirname(__DIR__) . '/header.phtml'; ?>
-
-<div class="inhalt">
+<div class="inhalt" style="flex-direction:column;align-items:center;">
+    <div class="gutschein-header-block">
         <h2>Alle Gutscheine</h2>
-    <a href="?controller=Gutschein&do=createGutscheinForm">Neuen Gutschein anlegen</a>
+        <a href="?controller=Gutschein&do=createGutscheinForm" class="admin-btn">Neuen Gutschein anlegen</a>
+    </div>
 <?php if (!empty($gutscheine)): ?>
-    <table border="1" cellpadding="8" cellspacing="0">
+    <table class="gutschein-table">
         <thead>
         <tr>
             <th>Code</th>
@@ -22,8 +22,8 @@
                 <td><?php echo (int)$g['event_id']; ?></td>
                 <td><?php echo htmlspecialchars($g['valid_until']); ?></td>
                 <td>
-                    <a href="?controller=Gutschein&action=editGutscheinForm&id=<?php echo $g['gutscheinid']; ?>">Bearbeiten</a> |
-                    <a href="?controller=Gutschein&action=deleteGutschein&id=<?php echo $g['gutscheinid']; ?>" onclick="return confirm('Wirklich löschen?');">Löschen</a>
+                    <a href="?controller=Gutschein&do=editGutscheinForm&gutscheinid=<?php echo $g['voucher_id']; ?>" class="admin-btn">Bearbeiten</a>
+                    <a href="?controller=Gutschein&do=deleteGutschein&gutscheinid=<?php echo $g['voucher_id']; ?>" class="admin-btn" onclick="return confirm('Wirklich löschen?');">Löschen</a>
                 </td>
             </tr>
         <?php endforeach; ?>
@@ -33,4 +33,3 @@
     <p>Keine Gutscheine vorhanden.</p>
 <?php endif; ?>
 </div>
-<?php include dirname(__DIR__) . '/footer.phtml'; ?>

Views/News/createNewsForm.phtml

@@ -0,0 +1,20 @@
+<div class="inhalt">
+  <div class="form-container">
+    <h1>News erstellen</h1>
+    <?php if (!empty($errors['news'])): ?>
+      <div class="error-box"><?=htmlspecialchars($errors['news'])?></div>
+    <?php endif; ?>
+    <form class="form-horizontal" action="index.php" method="post">
+      <input type="hidden" name="controller" value="News">
+      <input type="hidden" name="do" value="createNews">
+      <label for="name">Titel</label>
+      <input type="text" name="name" id="name" required value="<?=htmlspecialchars($validData['name'] ?? '')?>">
+      <label for="date">Datum</label>
+      <input type="date" name="date" id="date" required value="<?=htmlspecialchars($validData['date'] ?? date('Y-m-d'))?>">
+      <label for="description">Beschreibung</label>
+      <textarea name="description" id="description" rows="7" required><?=htmlspecialchars($validData['description'] ?? '')?></textarea>
+      <button class="button-register" type="submit">News speichern</button>
+    </form>
+    <a href="?controller=News&do=showNews">Zurück zur Übersicht</a>
+  </div>
+</div>

Views/News/editNewsForm.phtml

@@ -0,0 +1,21 @@
+<div class="inhalt">
+  <div class="form-container">
+    <h1>News bearbeiten</h1>
+    <?php if (!empty($errors['news'])): ?>
+      <div class="error-box"><?=htmlspecialchars($errors['news'])?></div>
+    <?php endif; ?>
+    <form class="form-horizontal" action="index.php" method="post">
+      <input type="hidden" name="controller" value="News">
+      <input type="hidden" name="do" value="updateNews">
+      <input type="hidden" name="id" value="<?=htmlspecialchars($id ?? '')?>">
+      <label for="name">Titel</label>
+      <input type="text" name="name" id="name" required value="<?=htmlspecialchars($validData['name'] ?? '')?>">
+      <label for="date">Datum</label>
+      <input type="date" name="date" id="date" required value="<?=htmlspecialchars($validData['date'] ?? date('Y-m-d'))?>">
+      <label for="description">Beschreibung</label>
+      <textarea name="description" id="description" rows="7" required><?=htmlspecialchars($validData['description'] ?? '')?></textarea>
+      <button class="button-register" type="submit">Änderungen speichern</button>
+    </form>
+    <a href="?controller=News&do=showNews">Zurück zur Übersicht</a>
+  </div>
+</div>

Views/News/showCreateSuccess.phtml

@@ -0,0 +1,14 @@
+<div class="inhalt">
+  <div class="status-box">
+    <h2>News erfolgreich erstellt!</h2>
+    <p>Du wirst in wenigen Sekunden zur Übersicht weitergeleitet...</p>
+  </div>
+</div>
+<script>
+  setTimeout(function() {
+    window.location.href = "?controller=News&do=showNews";
+  }, 2000);
+</script>
+<noscript>
+  <meta http-equiv="refresh" content="2;url=?controller=News&do=showNews">
+</noscript>

Views/News/showDeleteSuccess.phtml

@@ -0,0 +1,14 @@
+<div class="inhalt">
+  <div class="status-box">
+    <h2>News erfolgreich gelöscht!</h2>
+    <p>Du wirst in wenigen Sekunden zur Übersicht weitergeleitet...</p>
+  </div>
+</div>
+<script>
+  setTimeout(function() {
+    window.location.href = "?controller=News&do=showNews";
+  }, 2000);
+</script>
+<noscript>
+  <meta http-equiv="refresh" content="2;url=?controller=News&do=showNews">
+</noscript>

Views/News/showEditSuccess.phtml

@@ -0,0 +1,14 @@
+<div class="inhalt">
+  <div class="status-box">
+    <h2>News erfolgreich bearbeitet!</h2>
+    <p>Du wirst in wenigen Sekunden zur Übersicht weitergeleitet...</p>
+  </div>
+</div>
+<script>
+  setTimeout(function() {
+    window.location.href = "?controller=News&do=showNews";
+  }, 2000);
+</script>
+<noscript>
+  <meta http-equiv="refresh" content="2;url=?controller=News&do=showNews">
+</noscript>

Views/News/showNews.phtml

@@ -1,27 +1,36 @@
 <?php if (!empty($news)): ?>
     <div class="inhalt">
-    <div class="event-container">
+    <div class="content-container">
+        <div class="news-header">
             <h2>Alle Infos</h2>
-    <div class="event-container-inhalt">
-    <table>
-        <thead>
-        <tr>
-            <th>Name</th>
-            <th>Beschreibung</th>
-            <th>Datum</th>
-        </tr>
-        </thead>
-        <tbody>
+            <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                <a href="?controller=News&do=createNewsForm" class="admin-btn">News erstellen</a>
+            <?php endif; ?>
+        </div>
+    <div class="news-cards">
         <?php foreach ($news as $item): ?>
-            <tr>
-                <td><?php echo htmlspecialchars($item['name']); ?></td>
-                <td><?php echo nl2br(htmlspecialchars($item['name'])); ?></td>
-                <td><?php echo nl2br(htmlspecialchars($item['description'])); ?></td>
-                <td><?php echo date('d.m.Y', strtotime($item['date'])); ?></td>
-            </tr>
+            <div class="card">
+                <h3><?=htmlspecialchars($item['name'])?></h3>
+                <div class="news-date"><?=date('d.m.Y', strtotime($item['date']))?></div>
+                <div class="news-desc">
+                    <?php
+                        $desc = htmlspecialchars($item['description']);
+                        if (mb_strlen($desc) > 255) {
+                            $short = mb_substr($desc, 0, 255) . '...';
+                            echo nl2br($short) . ' <a href="?controller=News&do=showNewsDetail&id=' . $item['news_id'] . '">mehr lesen</a>';
+                        } else {
+                            echo nl2br($desc);
+                        }
+                    ?>
+                </div>
+                <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                    <div class="news-card-actions">
+                        <a href="?controller=News&do=editNewsForm&id=<?=$item['news_id']?>" class="admin-btn">Bearbeiten</a>
+                        <a href="?controller=News&do=deleteNews&id=<?=$item['news_id']?>" class="admin-btn" onclick="return confirm('Wirklich löschen?');">Löschen</a>
+                    </div>
+                <?php endif; ?>
+            </div>
         <?php endforeach; ?>
-        </tbody>
-    </table>
     </div>
 <?php else: ?>
     <p>Derzeit sind keine News verfügbar.</p>

Views/News/showNewsDetail.phtml

@@ -0,0 +1,10 @@
+<div class="inhalt">
+    <div class="content-container">
+        <div class="card card--wide">
+            <h2><?=htmlspecialchars($news['name'])?></h2>
+            <div class="news-date"><?=date('d.m.Y', strtotime($news['date']))?></div>
+            <div class="news-desc"><?=nl2br(htmlspecialchars($news['description']))?></div>
+            <a href="?controller=News&do=showNews" class="admin-btn">Zurück zur Übersicht</a>
+        </div>
+    </div>
+</div> 

Views/Ticket/buyTicket.phtml

@@ -1,12 +1,27 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
+<div class="inhalt">
+    <div class="form-container">
+        <h1>Ticket erfolgreich gekauft!</h1>
         
-    <div class="msg">
-        <p>Ihr Ticket für das Event "<?php echo $event['name']?>" wurde erfolgreich gekauft!</p>
-        <a href="?controller=Welcome&do=showWelcome">Weiter</a>
+        <?php if (isset($event) && isset($ticket_id)): ?>
+            <div class="status-box">
+                <h2><?= htmlspecialchars($event['name']) ?></h2>
+                <p><strong>Ticket-ID:</strong> #<?= $ticket_id ?></p>
+                <p><strong>Kaufdatum:</strong> <?= date('d.m.Y', strtotime($purchase_date)) ?></p>
+                <p><strong>Gültig bis:</strong> <?= date('d.m.Y', strtotime($valid_until)) ?></p>
+                <p><strong>Preis:</strong> <?= number_format($event['ticket_price'], 2, ',', '.') ?> €</p>
+                <p><strong>Datum:</strong> <?= date('d.m.Y', strtotime($event['start_date'])) ?> - <?= date('d.m.Y', strtotime($event['end_date'])) ?></p>
             </div>
             
-
-
-<?php include dirname(__DIR__).'/footer.phtml'; ?>
+            <div style="text-align:center; margin-top: 1.5em;">
+                <a href="?controller=Ticket&do=showTickets" class="admin-btn">Meine Tickets anzeigen</a>
+                <br><br>
+                <a href="?controller=Event&do=showEvents">Zurück zu den Events</a>
+            </div>
+        <?php else: ?>
+            <div class="error-box">Fehler beim Anzeigen der Ticket-Details.</div>
+            <div style="text-align:center; margin-top: 1.5em;">
+                <a href="?controller=Event&do=showEvents">Zurück zu den Events</a>
+            </div>
+        <?php endif; ?>
+    </div>
+</div>

Views/Ticket/showBuyTicketForm.phtml

@@ -0,0 +1,48 @@
+<div class="inhalt">
+    <div class="form-container">
+        <h1>Ticket kaufen</h1>
+        
+        <?php if (isset($event)): ?>
+            <div class="event-details">
+                <h2><?= htmlspecialchars($event['name']) ?></h2>
+                <p><strong>Beschreibung:</strong> <?= nl2br(htmlspecialchars($event['description'])) ?></p>
+                <p><strong>Datum:</strong> <?= date('d.m.Y', strtotime($event['start_date'])) ?> - <?= date('d.m.Y', strtotime($event['end_date'])) ?></p>
+                <p><strong>Preis:</strong> <?= number_format($event['ticket_price'], 2, ',', '.') ?> €</p>
+                <p><strong>Max. Tickets:</strong> <?= (int) $event['max_tickets'] ?></p>
+            </div>
+            
+            <?php if ($hasTicket): ?>
+                <div class="status-box">
+                    <p>Sie haben bereits ein Ticket für dieses Event gekauft.</p>
+                    <a href="?controller=Ticket&do=showTickets" class="admin-btn">Meine Tickets anzeigen</a>
+                </div>
+            <?php else: ?>
+                <form class="form-horizontal" action="index.php" method="post">
+                    <input type="hidden" name="controller" value="Ticket">
+                    <input type="hidden" name="do" value="buyTicket">
+                    <input type="hidden" name="event_id" value="<?= $event['event_id'] ?>">
+                    
+                    <p>Möchten Sie ein Ticket für dieses Event kaufen?</p>
+                    <p><strong>Preis:</strong> <?= number_format($event['ticket_price'], 2, ',', '.') ?> €</p>
+                    
+                    <button class="button-login" type="submit">Jetzt kaufen</button>
+                </form>
+                
+                <div style="text-align:center; margin-top: 1.5em;">
+                    <a href="?controller=Event&do=showEvents">Zurück zu den Events</a>
+                </div>
+            <?php endif; ?>
+        <?php else: ?>
+            <div class="error-box">Event nicht gefunden.</div>
+            <div style="text-align:center; margin-top: 1.5em;">
+                <a href="?controller=Event&do=showEvents">Zurück zu den Events</a>
+            </div>
+        <?php endif; ?>
+    </div>
+</div>
+
+<?php if (isset($redirect)): ?>
+<script>
+    window.location.href = '<?= $redirect ?>';
+</script>
+<?php endif; ?>

Views/Tickets/showTickets.phtml

@@ -1,8 +1,53 @@
 <div class="inhalt">
-    <div class="tickets-container">
-        <h1>Tickets</h1>
-        <div class="tickets-container-inhalt">
-            
+    <div class="content-container">
+        <div class="event-header">
+            <h2>Meine Tickets</h2>
         </div>
+        
+        <?php if (!empty($tickets)): ?>
+            <div class="event-container-inhalt">
+                <table>
+                    <thead>
+                        <tr>
+                            <th>Event</th>
+                            <th>Datum</th>
+                            <th>Standort</th>
+                            <th>Preis</th>
+                            <th>Kaufdatum</th>
+                            <th>Gültig bis</th>
+                            <th>Aktionen</th>
+                        </tr>
+                    </thead>
+                    <tbody>
+                    <?php foreach ($tickets as $ticket): ?>
+                        <tr>
+                            <td><?= htmlspecialchars($ticket['event_name']) ?></td>
+                            <td><?= date('d.m.Y', strtotime($ticket['start_date'])) ?> - <?= date('d.m.Y', strtotime($ticket['end_date'])) ?></td>
+                            <td><?= htmlspecialchars($ticket['location_street'] . ' ' . $ticket['location_house_number'] . ', ' . $ticket['location_city']) ?></td>
+                            <td><?= number_format($ticket['ticket_price'], 2, ',', '.') ?> €</td>
+                            <td><?= date('d.m.Y', strtotime($ticket['purchase_date'])) ?></td>
+                            <td><?= date('d.m.Y', strtotime($ticket['valid_until'])) ?></td>
+                            <td>
+                                <a href="?controller=Ticket&do=deleteTicket&ticket_id=<?= $ticket['ticket_id'] ?>" 
+                                   class="admin-btn" 
+                                   onclick="return confirm('Ticket wirklich löschen?')">Löschen</a>
+                            </td>
+                        </tr>
+                    <?php endforeach; ?>
+                    </tbody>
+                </table>
+            </div>
+        <?php else: ?>
+            <div class="status-box">
+                <p>Sie haben noch keine Tickets gekauft.</p>
+                <a href="?controller=Event&do=showEvents" class="admin-btn">Events anzeigen</a>
+            </div>
+        <?php endif; ?>
     </div>
 </div>
+
+<?php if (isset($redirect)): ?>
+<script>
+    window.location.href = '<?= $redirect ?>';
+</script>
+<?php endif; ?>

Views/header.phtml

@@ -12,15 +12,18 @@
             <div id="logo" ><a class="link-logo" href="#"></a></div>
             <button id="nav-toggle-btn" aria-label="Menü ein-/ausklappen">&#9660;</button>
             <div class="nav-links">
+                <?php if (isset($_SESSION['user'])): ?>
                     <a id="link-tickets" class="links" href="?controller=Event&do=showEvents">Event</a>
                     <a id="link-infos" class="links" href="?controller=News&do=showNews">Infos</a>
-                <a id="link-profil" class="links" href="?controller=Profile&do=showProfile">Profil</a>
-                <?php if (isset($_SESSION['user'])): ?>
+                    <a id="link-tickets" class="links" href="?controller=Tickets&do=showTickets">Tickets</a>
+                    <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                        <a id="link-gutscheinverwaltung" class="links" href="?controller=Gutschein&do=adminVerwaltung">Gutscheine</a>
+                    <?php endif; ?>
                     <a id="link-logout" class="links" href="?controller=Auth&do=logout">Logout</a>
                 <?php else: ?>
                     <a id="link-login" class="links" href="?controller=Auth&do=showLoginForm">Login</a>
-                <?php endif; ?>
                     <a id="link-register" class="links" href="?controller=Auth&do=showRegistrationForm">Register</a>
+                <?php endif; ?>
                 <div id="profile-picture"></div>
             </div>
         </div>

bibarts.sql

@@ -108,5 +108,24 @@ VALUES
 -- News-Daten
 INSERT INTO news (name, description, date)
 VALUES
-    ('Neuer Standort eröffnet', 'Unsere Galerie in Köln ist jetzt geöffnet!', '2025-06-01'),
-    ('Frühbucher-Rabatt', 'Sichern Sie sich jetzt 15% Rabatt auf unsere Sommerausstellung.', '2025-05-20');
+    ('Branchen-News: bibarts schließt strategische Partnerschaft mit regionalen Veranstaltern', 'Die aufstrebende Ticketplattform bibarts hat heute eine Partnerschaft mit mehreren regionalen Veranstaltungsagenturen in Süddeutschland bekannt gegeben. Ziel der Zusammenarbeit ist die gemeinsame Digitalisierung lokaler Events und die Vereinfachung des Ticketverkaufsprozesses für kleinere Veranstalter.
+
+„Viele unserer Kunden sind Künstlerkollektive, Kulturvereine oder Betreiber kleiner Bühnen – für sie war der Einstieg in den digitalen Ticketverkauf bisher kompliziert oder zu teuer,“ erklärt der Vertriebsleiter von bibarts.
+
+Durch die Partnerschaft erhalten Veranstalter Zugang zu einem vereinfachten Onboarding-System, einer automatisierten Veranstaltungsverwaltung und einem integrierten Zahlungssystem. bibarts stellt zudem eigene Event-Widgets bereit, die direkt in bestehende Websites eingebettet werden können.
+
+Die ersten Live-Tests starten im Juli auf Veranstaltungen in Augsburg, Regensburg und Rosenheim. Bei Erfolg soll das Modell bundesweit ausgerollt werden. Marktanalysten sehen in bibarts einen ernstzunehmenden Konkurrenten für etablierte Anbieter wie Eventim oder Reservix – vor allem im Bereich Nischen- und Indie-Veranstaltungen.', '2025-06-01'),
+    ('bibarts bringts: Neue Ticketplattform sorgt für Chaos auf der Poetry-Slam-Bühne – aber im besten Sinne', '„Niemand hat damit gerechnet, dass Poetry & Pizza Vol. 7 restlos ausverkauft sein würde – außer vielleicht bibarts.“ So beschreibt der Veranstalter des beliebten Slam-Formats in Hamburg-Altona die Überraschung des Abends.
+
+Dank der neuen Ticketplattform bibarts, die laut Insidern „selbst mit einem Toaster kompatibel“ sei, wurden innerhalb von 48 Stunden über 300 Tickets verkauft – komplett online, ohne Papierkram, ohne Warteschlangen.
+
+Doch die größte Überraschung: Die Slammer wurden beim Einlass mit QR-Codes auf Bananen begrüßt – ein kreatives Gimmick von bibarts’ Entwicklerteam, das einen Testlauf für „alternative Ticketträger“ durchführt. Laut Veranstalter kamen fast 30 Gäste mit beschrifteten Bananen zum Einlass – der Scanner erkannte alle korrekt. 🍌✅
+
+„Wenn Technik und Kultur auf diese Weise verschmelzen, haben wir etwas richtig gemacht,“ scherzte ein Sprecher von bibarts nach der Show. Auch wenn die Banane wohl kein langfristiges Ticketmedium wird, sei der Abend ein voller Erfolg gewesen – sowohl auf als auch vor der Bühne.', '2025-05-20'),
+('bibarts launcht Wartelistenfunktion – und füllt plötzlich leergebliebene Reihen', 'Mit einem neuen Feature sorgt bibarts erneut für Schlagzeilen: Die Plattform hat kürzlich eine intelligente Wartelistenfunktion eingeführt, die automatisch frei gewordene Plätze an Interessierte nachbesetzt – ein Gamechanger für spontane Events und kurzfristige Absagen.
+
+Beim ersten Einsatz bei einem Impro-Theater in Köln meldeten sich über 40 Personen für die Warteliste. Als drei Gruppen krankheitsbedingt absagen mussten, sprang das System ein – und verschickte automatisch neue Tickets an Wartende. Innerhalb von 15 Minuten waren die Plätze wieder gefüllt.
+
+„Wir konnten dadurch die Show vor vollem Haus spielen – ohne Einnahmeverluste“, sagt die Theaterleitung. Das Feature basiert auf einem Prioritätssystem, das Fairness und Schnelligkeit kombiniert und sogar per SMS benachrichtigt.
+
+bibarts plant, die Funktion in Zukunft noch zu erweitern – etwa mit Echtzeit-Übersicht für Veranstalter oder integrierter Last-Minute-Werbung.', '2025-06-20');