removed link profil

Merge remote-tracking branch 'origin/frontendBackendFinal' into frontendBackendFinal
good changes
2025-07-11 23:45:26 +02:00 · 2025-07-11 23:35:46 +02:00 · 2025-07-11 23:33:11 +02:00 · 2025-07-11 23:21:08 +02:00 · 2025-07-11 23:09:17 +02:00 · 2025-07-11 22:55:51 +02:00
55 changed files with 1996 additions and 778 deletions
--- a/CSS/style.css
+++ b/CSS/style.css
@@ -4,9 +4,12 @@ body {
    font-size: 15px;
    margin: 0;
    padding: 0;
-}
-#wrapper {
-
+    min-height: 100vh;
+    display: flex;
+    flex-direction: column;
+    width: 100vw;
+    max-width: 100vw;
+    overflow-x: hidden;
 }

 a {
@@ -16,6 +19,11 @@ a {
 #navigation {
    display: flex;
    justify-content: center;
+    position: sticky;
+    top: 0;
+    z-index: 1000;
+    background: #BAC8D4;
+    width: 100vw;
 }
 .link-container {
    display: grid;
@@ -38,17 +46,19 @@ a {
    background-size: contain;
 }
 #footer {
-    position: absolute;
+    position: relative;
    bottom: 0;
    left: 0;
-    width: 100%;
-    height: 240px;
+    width: 100vw;
+    height: 180px;
    background-color: #BAC8D4;
-
-    display: grid;
-    grid-template-columns: 6% 5% 43% 32% 14%;
-    grid-template-rows: 45% 10% 45%;
+    display: flex;
+    flex-direction: column;
    align-items: center;
+    justify-content: center;
+    flex-shrink: 0;
+    z-index: 999;
+    padding: 10px 0;
 }

 .container-zahlungsmittel {
@@ -61,11 +71,16 @@ a {
 }

 .inhalt {
+    flex: 1 1 auto;
    display: flex;
-    height: 10px;
    justify-content: center;
    align-items: center;
-    width: 100%;
+    width: 100vw;
+    min-height: 0;
+    min-width: 0;
+    margin: 0;
+    padding: 0 2vw;
+    box-sizing: border-box;
 }

 .zahlungsmittel-img {
@@ -86,12 +101,6 @@ a {
    grid-column-end: 6;
 }

-.container-rest {
-    grid-column-start: 1;
-    grid-column-end: 6;
-    padding-left: 50px;
-}
-
 .link-impressum {
    padding-left: 30px;

@@ -102,109 +111,109 @@ a {
    padding-right: 30px;
 }
 .container-welcome-inhalt {
-    grid-template-columns: 39% 61%;
    display: grid;
-    width: 110em;
-    min-height: 80%;
+    grid-template-columns: 1fr 1fr;
+    width: 100%;
+    max-width: 900px;
+    min-height: 200px;
    border-radius: 10px;
-}
-
-.beispiel-austellung1-img {
-    height: 480px;
-    width: 670px;
-    background-image: url("../images/beispiel-austellung1.png");
-    background-position: center;
-    background-size: contain;
-    justify-self: right;
-    border-radius: 10px;
-}
-.beispiel-austellung2-img {
-    background-image: url("../images/beispiel-austellung2.png");
-    background-position: center;
-    background-size: contain;
-    justify-self: right;
-    border-radius: 10px;
-}
-
-/* Login Page Styles */
-.login-page-bg {
-    min-height: 100vh;
-    display: flex;
+    background: white;
+    box-shadow: 0 2px 16px rgba(0,0,0,0.08);
+    justify-items: center;
    align-items: center;
-    justify-content: center;
-    background: linear-gradient(135deg, #DFF0F2 60%, #BAC8D4 100%);
+    box-sizing: border-box;
+    padding: 10px 0;
 }

-.login-container {
-    background: #fff;
-    box-shadow: 0 4px 24px rgba(0,0,0,0.10);
-    border-radius: 16px;
-    padding: 40px 32px 32px 32px;
+.beispiel-austellung1-img, .beispiel-austellung2-img {
+    height: 200px;
+    width: 90vw;
+    max-width: 320px;
+    background-position: center;
+    background-size: contain;
+    border-radius: 10px;
+}
+
+.form-container {
+    background-color: #BAC8D4;
    width: 100%;
    max-width: 400px;
+    border-radius: 10px;
    display: flex;
    flex-direction: column;
    align-items: center;
+    box-sizing: border-box;
+    padding: 32px 24px 24px 24px;
+    margin: 32px auto;
 }
-
-.login-title {
-    margin-bottom: 24px;
-    color: #4d4d4d;
-    font-size: 2rem;
-    font-weight: 600;
-    letter-spacing: 1px;
-}
-
-.login-form {
+.form-horizontal {
    width: 100%;
    display: flex;
    flex-direction: column;
-    gap: 18px;
+    gap: 12px;
+    margin-bottom: 10px;
 }
-
-.login-field {
-    display: flex;
-    flex-direction: column;
-    gap: 6px;
+.form-horizontal label {
+    margin-bottom: 2px;
 }
-
-.login-field label {
-    font-weight: 500;
-    color: #4d4d4d;
-}
-
-.login-field input {
-    padding: 10px 12px;
+.form-horizontal input[type="text"],
+.form-horizontal input[type="email"],
+.form-horizontal input[type="password"] {
+    width: 100%;
+    padding: 8px 10px;
    border: 1px solid #BAC8D4;
-    border-radius: 6px;
+    border-radius: 4px;
    font-size: 1rem;
-    background: #F7FAFC;
-    transition: border 0.2s;
+    box-sizing: border-box;
+    background: #fff;
 }
-
-.login-field input:focus {
-    border: 1.5px solid #09add0;
-    outline: none;
+.form-horizontal input[type="date"],
+.form-horizontal input[type="number"],
+.form-horizontal select,
+.form-horizontal textarea {
+    width: 100%;
+    padding: 8px 10px;
+    border: 1px solid #BAC8D4;
+    border-radius: 4px;
+    font-size: 1rem;
+    box-sizing: border-box;
+    background: #fff;
 }
-
-.login-btn {
-    margin-top: 10px;
-    padding: 12px 0;
-    background: #09add0;
-    color: #fff;
+.form-horizontal textarea {
+    resize: vertical;
+    min-height: 100px;
+}
+.form-horizontal button {
+    width: 100%;
+    padding: 10px 0;
    border: none;
-    border-radius: 6px;
-    font-size: 1.1rem;
-    font-weight: 600;
+    border-radius: 4px;
+    background: #4d4d4d;
+    color: #fff;
+    font-size: 1rem;
+    margin-top: 8px;
    cursor: pointer;
    transition: background 0.2s;
 }
-
-.login-btn:hover {
-    background: #007b9e;
+.form-horizontal button:hover {
+    background: #333;
 }
-
-.login-error {
+.button-register {
+    width: 100%;
+    padding: 10px 0;
+    border: none;
+    border-radius: 4px;
+    background: #4d4d4d;
+    color: #fff;
+    font-size: 1rem;
+    margin-top: 8px;
+    cursor: pointer;
+    transition: background 0.2s;
+}
+.button-register:hover {
+    background: #333;
+}
+.login-error, .form-error {
    background: #ffe0e0;
    color: #b30000;
    border: 1px solid #ffb3b3;
@@ -215,28 +224,432 @@ a {
    text-align: center;
 }

-.login-success {
-    background: #e0ffe6;
-    color: #006633;
-    border: 1px solid #b3ffd1;
+@media (max-width: 600px) {
+    body {
+        font-size: 14px;
+        width: 100vw;
+        max-width: 100vw;
+        overflow-x: hidden;
+    }
+    #navigation {
+        width: 100vw;
+        min-width: 0;
+        padding: 0;
+        display: flex;
+        justify-content: center;
+        align-items: center;
+    }
+    .link-container {
+        width: 100vw;
+        min-width: 0;
+        display: flex;
+        flex-direction: column;
+        align-items: center;
+        justify-content: center;
+        row-gap: 8px;
+        border-radius: 0;
+        padding: 0 4px;
+    }
+    .links {
+        font-size: 18px;
+        justify-content: center;
+        align-items: center;
+        padding: 6px 0;
+        text-align: center;
+        width: 100%;
+    }
+    #logo {
+        width: 120px;
+        height: 40px;
+        margin: 0 auto 8px auto;
+        display: flex;
+        justify-content: center;
+        align-items: center;
+    }
+    .container-welcome-inhalt {
+        grid-template-columns: 1fr;
+        width: 100vw;
+        max-width: 100vw;
+        min-height: 0;
+        padding: 8px 0;
+    }
+    .beispiel-austellung1-img, .beispiel-austellung2-img {
+        width: 90vw;
+        max-width: 98vw;
+        height: 120px;
+        margin-bottom: 10px;
+    }
+    .inhalt {
+        width: 100vw;
+        min-width: 0;
+        max-width: 100vw;
+        padding: 0 2vw;
+        box-sizing: border-box;
+        flex-direction: column;
+        align-items: stretch;
+    }
+    #footer {
+        width: 100vw;
+        height: auto;
+        min-height: 120px;
+        padding: 10px 0 10px 0;
+        font-size: 13px;
+    }
+    .container-zahlungsmittel {
+        width: 100vw;
+        text-align: center;
+        padding: 0;
+    }
+    .header-zahlungsarten {
+        font-size: 1.1em;
+        padding-right: 0;
+        text-align: center;
+    }
+    .zahlungsmittel-img {
+        width: 90vw;
+        max-width: 200px;
+        height: 30px;
+        margin: 0 auto;
+    }
+    .line {
+        width: 95vw;
+    }
+    .link-impressum, .link-datenschutz, .link-nutzungsbedingungen {
+        display: block;
+        padding: 2px 0;
+        text-align: center;
+    }
+    .text-bib {
+        display: block;
+        text-align: center;
+        padding: 0;
+    }
+    .mobile-only {
+        display: block !important;
+    }
+    .form-container {
+        position: static;
+        width: 95vw;
+        max-width: 400px;
+        height: auto;
+        margin: 24px auto;
+        padding: 16px 8px;
+        box-sizing: border-box;
+    }
+    .content-container {
+        position: static;
+        width: 95vw;
+        max-width: 400px;
+        height: auto;
+        margin: 24px auto;
+        padding: 16px 8px;
+        box-sizing: border-box;
+    }
+    .form-container h1 {
+        font-size: 1.5em;
+        text-align: center;
+    }
+    .content-container h1 {
+        font-size: 1.5em;
+        text-align: center;
+    }
+    .form-container form,
+    .form-container label,
+    .form-container input {
+        width: 100%;
+        max-width: 100%;
+        box-sizing: border-box;
+    }
+    .form-container button,
+    .form-container a {
+        width: 100%;
+        max-width: 100%;
+        margin-top: 8px;
+        text-align: center;
+        box-sizing: border-box;
+    }
+    #nav-toggle-btn {
+        display: block;
+        background: none;
+        border: none;
+        font-size: 2em;
+        cursor: pointer;
+        margin: 0 auto 8px auto;
+        transition: transform 0.2s;
+    }
+    .nav-links {
+        display: none;
+        flex-direction: column;
+        align-items: center;
+        width: 100%;
+        transition: max-height 0.3s ease;
+        overflow: hidden;
+    }
+    .nav-links.open {
+        display: flex;
+    }
+    #nav-toggle-btn.open {
+        transform: rotate(180deg);
+    }
+}
+
+@media (min-width: 601px) {
+    .mobile-only {
+        display: none !important;
+    }
+    .desktop-only {
+        display: block !important;
+    }
+    #nav-toggle-btn {
+        display: none;
+    }
+    .nav-links {
+        display: flex !important;
+        flex-direction: row;
+        align-items: center;
+        width: auto;
+        gap: 32px;
+    }
+    .nav-links .links {
+        margin: 0 12px;
+    }
+    .content-container {
+        width: 90vw;
+        max-width: 1200px;
+        margin: 24px auto;
+        padding: 16px 8px;
+        box-sizing: border-box;
+        display: flex;
+        flex-direction: column;
+        align-items: center;
+    }
+    .news-header {
+        text-align: center;
+        margin-bottom: 24px;
+    }
+    .news-header h2 {
+        margin-bottom: 16px;
+    }
+    .news-header .admin-btn {
+        margin: 0 auto;
+        display: inline-block;
+    }
+    .event-header {
+        text-align: center;
+        margin-bottom: 24px;
+    }
+    .event-header h2 {
+        margin-bottom: 16px;
+    }
+    .event-header .admin-btn {
+        margin: 0 auto;
+        display: inline-block;
+    }
+    .card--wide {
+        max-width: 700px;
+        width: auto;
+        margin: 0 auto;
+        display: block;
+        overflow-wrap: break-word;
+    }
+}
+table {
+    width: 100%;
+    border-collapse: separate;
+    border-spacing: 0;
+    background: #fff;
+    border-radius: 10px;
+    box-shadow: 0 2px 12px rgba(0,0,0,0.07);
+    margin: 24px 0;
+    overflow: hidden;
+}
+thead th {
+    background: #BAC8D4;
+    color: #222;
+    font-weight: 600;
+    padding: 12px 8px;
+    text-align: left;
+    border-bottom: 2px solid #e0e0e0;
+}
+tbody td {
+    padding: 10px 8px;
+    border-bottom: 1px solid #f0f0f0;
+    vertical-align: top;
+}
+tbody tr:last-child td {
+    border-bottom: none;
+}
+tbody tr:hover {
+    background: #f5faff;
+}
+.admin-btn, .admin-btn:visited {
+    display: inline-block;
+    background: #4d4d4d;
+    color: #fff;
+    border-radius: 5px;
+    padding: 7px 16px;
+    margin: 8px 0 12px 0;
+    text-decoration: none;
+    font-size: 1em;
+    font-weight: 500;
+    transition: background 0.2s;
+}
+.admin-btn:hover {
+    background: #222;
+    color: #fff;
+}
+td a {
+    color: #09add0;
+    text-decoration: underline;
+    margin: 0 4px;
+    font-size: 0.98em;
+}
+td a:hover {
+    color: #007b9e;
+}
+
+.news-cards {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 24px;
+    justify-content: flex-start;
+    margin: 24px 0;
+}
+.card {
+    background: #fff;
+    border-radius: 12px;
+    box-shadow: 0 2px 12px rgba(0,0,0,0.08);
+    padding: 20px 18px 16px 18px;
+    max-width: 340px;
+    min-width: 220px;
+    flex: 1 1 300px;
+    display: flex;
+    flex-direction: column;
+    justify-content: space-between;
+    margin: 0;
+    overflow-wrap: break-word;
+    overflow: hidden;
+}
+.card h3 {
+    margin: 0 0 10px 0;
+    font-size: 1.25em;
+    color: #222;
+    font-weight: bold;
+    border-bottom: 2px solid #e0e0e0;
+    padding-bottom: 6px;
+}
+.card .news-date {
+    font-size: 0.95em;
+    color: #888;
+    margin-bottom: 16px;
+    margin-top: 2px;
+    display: block;
+    letter-spacing: 0.5px;
+}
+.card .news-desc {
+    font-size: 1em;
+    color: #333;
+    margin-bottom: 14px;
+    white-space: pre-line;
+}
+.card .admin-btn {
+    align-self: flex-end;
+    margin: 0 0 0 8px;
+    padding: 6px 12px;
+    font-size: 0.97em;
+}
+.card--wide {
+    max-width: 700px;
+    width: 100%;
+    margin: 0 auto;
+    display: block;
+    overflow: visible;
+    overflow-wrap: break-word;
+}
+.news-desc a {
+    color: #007b9e;
+    font-weight: 600;
+    text-decoration: underline;
+    margin-left: 4px;
+    transition: color 0.2s;
+}
+.news-desc a:hover {
+    color: #09add0;
+    text-decoration: underline;
+}
+.news-card-actions {
+    margin-top: auto;
+    display: flex;
+    gap: 12px;
+}
+.news-desc {
+    min-height: 80px;
+    margin-bottom: 14px;
+}
+@media (max-width: 700px) {
+    .news-cards {
+        flex-direction: column;
+        gap: 16px;
+    }
+    .card {
+        max-width: 98vw;
+        min-width: unset;
+        width: 100%;
+    }
+}
+.status-box {
+    background: #e6f9e6;
+    color: #217a21;
+    border: 1px solid #b3e6b3;
    border-radius: 6px;
    padding: 10px 16px;
    margin-bottom: 18px;
    width: 100%;
    text-align: center;
 }
-
-.login-link {
-    display: inline-block;
-    margin-top: 10px;
-    color: #09add0;
-    font-weight: 500;
-    text-decoration: underline;
+.error-box {
+    background: #ffe0e0;
+    color: #b30000;
+    border: 1px solid #ffb3b3;
+    border-radius: 6px;
+    padding: 10px 16px;
+    margin-bottom: 18px;
+    width: 100%;
+    text-align: center;
+}
+.gutschein-header-block {
+    width: 100%;
+    max-width: 1100px;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    margin-bottom: 18px;
+}
+.gutschein-table {
+    max-width: 1100px;
+    width: 100%;
+    margin: 0 auto;
 }

-@media (max-width: 600px) {
-    .login-container {
-        padding: 24px 8px;
-        max-width: 95vw;
-    }
+.event-details {
+    background: white;
+    padding: 20px;
+    border-radius: 8px;
+    margin-bottom: 20px;
+    box-shadow: 0 2px 8px rgba(0,0,0,0.1);
+}
+
+.event-details h2 {
+    margin-top: 0;
+    color: #333;
+    font-size: 1.5em;
+}
+
+.event-details p {
+    margin: 8px 0;
+    line-height: 1.4;
+}
+
+.event-details strong {
+    color: #4d4d4d;
 }
--- a/Controller/AuthController.php
+++ b/Controller/AuthController.php
@@ -47,30 +47,31 @@ class AuthController
        $password = $_POST['password'];

        $result = $this->model->login($email, $password);
-
-        if ($result === true) {
-            $_SESSION['user'] = $email; 
-            header('Location: /bibarts/?controller=News&do=showNews');
-            exit();
+        
+        if ($result['success']) {
+            $_SESSION['user'] = $result['user']['email'];
+            $_SESSION['is_admin'] = $result['user']['is_admin'];
+            $this->view->setDoMethodName('showLoginSuccess');
        } else {
            $this->view->setVars([
-                'errors' => ['login' => is_string($result) ? $result : "Login fehlgeschlagen."],
+                'errors' => ['login' => $result['error']],
                'validData' => ['email' => $email],
                'loginSuccess' => false
            ]);
+            $this->view->setDoMethodName('showLoginForm');
        }
    }

    public function register() {
        $data = [
-            'first_name' => $_POST['vorname'] ?? '',
-            'last_name' => $_POST['nachname'] ?? '',
-            'street' => $_POST['strasse'] ?? '',
-            'house_number' => $_POST['hausnr'] ?? '',
-            'postal_code' => $_POST['plz'] ?? '',
-            'city' => $_POST['ort'] ?? '',
-            'country' => $_POST['land'] ?? '',
-            'phone' => $_POST['tel'] ?? '',
+            'first_name' => $_POST['first_name'] ?? '',
+            'last_name' => $_POST['last_name'] ?? '',
+            'street' => $_POST['street'] ?? '',
+            'house_number' => $_POST['house_number'] ?? '',
+            'postal_code' => $_POST['postal_code'] ?? '',
+            'city' => $_POST['city'] ?? '',
+            'country' => $_POST['country'] ?? '',
+            'phone' => $_POST['phone'] ?? '',
            'email' => $_POST['email'] ?? '',
            'password' => $_POST['password'] ?? '',
            'password_repeat' => $_POST['password_repeat'] ?? '',
@@ -80,14 +81,15 @@ class AuthController
        $result = $this->model->register($data);

        if ($result === true) {
-            $this->view->setVars(['success' => 'Registrierung erfolgreich!']);
-            $this->view->render('Auth/showLoginForm');
-            exit;
+            $this->view->setDoMethodName('showRegistrationSuccess');
        } else {
-            $errors['register'] = is_string($result) ? $result : "Registrierung fehlgeschlagen.";
+            if (is_array($result)) {
+                $errors['register'] = implode('<br>', $result);
+            } else {
+                $errors['register'] = is_string($result) ? $result : "Registrierung fehlgeschlagen.";
+            }
            $this->view->setVars(['errors' => $errors, 'validData' => $data]);
-            $this->view->render('Auth/showRegistrationForm');
-            exit;
+            $this->view->setDoMethodName('showRegistrationForm');
        }
    }

@@ -103,8 +105,7 @@ class AuthController
        exit;
    }

-    public function changePassword()
-    {
+    public function changePassword() {
        $email = $_POST['email'] ?? '';
        $oldpw = $_POST['old_password'] ?? '';
        $newpw = $_POST['password'] ?? '';
@@ -128,8 +129,7 @@ class AuthController
        }
    }

-    public function showConfirmation()
-    {
+    public function showConfirmation() {
        $messages = [
            'login' => "Login erfolgreich.",
            'register' => "Registrierung erfolgreich.",
@@ -145,7 +145,6 @@ class AuthController
    public function logout() {
        unset($_SESSION['user']);
        session_destroy();
-        header('Location: /bibarts/?controller=Auth&do=showLoginForm');
-        exit();
+        $this->view->setDoMethodName('showLogoutSuccess');
    }
 }
--- a/Controller/EventController.php
+++ b/Controller/EventController.php
@@ -3,6 +3,7 @@
 namespace Blog\Controller;

 use Blog\Model\EventModel;
+use Blog\Model\StandortModel;

 class EventController {

@@ -22,43 +23,139 @@ class EventController {
    }

    public function createEvent() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
        $data = [
-            'location_id' => $_POST['location_id'] ?? null,
-            'start_date' => $_POST['start_date'] ?? null,
-            'end_date' => $_POST['end_date'] ?? null,
-            'name' => $_POST['name'] ?? null,
-            'description' => $_POST['description'] ?? null,
-            'max_tickets' => $_POST['max_tickets'] ?? null,
-            'ticket_price' => $_POST['ticket_price'] ?? null
+            'name' => $_POST['name'] ?? '',
+            'start_date' => $_POST['start_date'] ?? '',
+            'end_date' => $_POST['end_date'] ?? '',
+            'location_id' => $_POST['location_id'] ?? '',
+            'description' => $_POST['description'] ?? '',
+            'max_tickets' => $_POST['max_tickets'] ?? '',
+            'ticket_price' => $_POST['ticket_price'] ?? ''
        ];
-
+        $errors = [];
+        if (empty($data['name']) || empty($data['start_date']) || empty($data['end_date']) || empty($data['location_id']) || empty($data['description']) || empty($data['max_tickets']) || empty($data['ticket_price'])) {
+            $errors['event'] = 'Bitte alle Felder ausfüllen.';
+        }
+        if (!empty($errors)) {
+            $standortModel = new StandortModel();
+            $locations = $standortModel->getStandorte();
+            $this->view->setVars(['errors' => $errors, 'validData' => $data, 'locations' => $locations]);
+            $this->view->setDoMethodName('showCreateEvent');
+            return;
+        }
        $this->model->createEvent($data);
-        $this->view->setVars(['event' => $data]);
-        exit;
+        $this->view->setDoMethodName('showCreateForwarding');
    }

    public function editEventForm() {
-        $id = $_GET['event_id'];
+        $id = $_GET['ausstellungid'];
        $event = $this->model->getEvent($id);
        $this->view->setVars(['event' => $event]);
    }

-    public function updateEvent($id, $data) {
-        $id = $_POST['event_id'];
+    public function updateEvent() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
+        $id = $_POST['id'] ?? null;
        $data = [
-            'location_id' => $_POST['location_id'] ?? null,
-            'start_date' => $_POST['start_date'] ?? null,
-            'end_date' => $_POST['end_date'] ?? null,
-            'name' => $_POST['name'] ?? null,
-            'description' => $_POST['description'] ?? null,
-            'max_tickets' => $_POST['max_tickets'] ?? null,
-            'ticket_price' => $_POST['ticket_price'] ?? null
+            'name' => $_POST['name'] ?? '',
+            'start_date' => $_POST['start_date'] ?? '',
+            'end_date' => $_POST['end_date'] ?? '',
+            'location_id' => $_POST['location_id'] ?? '',
+            'description' => $_POST['description'] ?? '',
+            'max_tickets' => $_POST['max_tickets'] ?? '',
+            'ticket_price' => $_POST['ticket_price'] ?? ''
        ];
+        $errors = [];
+        if (empty($data['name']) || empty($data['start_date']) || empty($data['end_date']) || empty($data['location_id']) || empty($data['description']) || empty($data['max_tickets']) || empty($data['ticket_price'])) {
+            $errors['event'] = 'Bitte alle Felder ausfüllen.';
+        }
+        if (!empty($errors)) {
+            $standortModel = new StandortModel();
+            $location = $standortModel->getStandort($data['location_id']);
+            $eventView = [
+                'id' => $id,
+                'name' => $data['name'],
+                'start_date' => $data['start_date'],
+                'end_date' => $data['end_date'],
+                'location_id' => $data['location_id'],
+                'location_name' => $location['city'] ?? '',
+                'description' => $data['description'],
+                'max_tickets' => $data['max_tickets'],
+                'ticket_price' => $data['ticket_price'],
+            ];
+            $this->view->setVars(['event' => $eventView, 'errors' => $errors]);
+            $this->view->setDoMethodName('showUpdateEvent');
+            return;
+        }
        $this->model->updateEvent($id, $data);
+        $this->view->setDoMethodName('showUpdateForwarding');
    }

-    public function deleteEvent($id) {
-        $this->model->deleteEvent($id);
-        $this->view->setVars(['id' => $id]);
+    public function deleteEvent() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
+        $id = $_GET['event_id'] ?? null;
+        if ($id) {
+            $this->model->deleteEvent($id);
+            $this->view->setVars(['id' => $id]);
+            $this->view->setDoMethodName('deleteEvent');
+        } else {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
+    }
+
+    public function showUpdateEvent() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
+        $id = $_GET['event_id'] ?? null;
+        if (!$id) {
+            $this->view->setVars(['error' => 'Keine Event-ID angegeben.']);
+            return;
+        }
+        $event = $this->model->getEvent($id);
+        if (!$event) {
+            $this->view->setVars(['error' => 'Event nicht gefunden.']);
+            return;
+        }
+        $standortModel = new StandortModel();
+        $location = $standortModel->getStandort($event['location_id']);
+        $eventView = [
+            'id' => $event['event_id'],
+            'name' => $event['name'],
+            'start_date' => $event['start_date'],
+            'end_date' => $event['end_date'],
+            'location_id' => $event['location_id'],
+            'location_name' => $location['city'] ?? '',
+            'description' => $event['description'],
+            'max_tickets' => $event['max_tickets'],
+            'ticket_price' => $event['ticket_price'],
+        ];
+        $this->view->setVars(['event' => $eventView, 'errors' => []]);
+    }
+
+    public function showCreateEvent() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=Event&do=showEvents');
+            exit;
+        }
+        $standortModel = new StandortModel();
+        $locations = $standortModel->getStandorte();
+        $this->view->setVars([
+            'locations' => $locations,
+            'errors' => [],
+            'validData' => []
+        ]);
    }
 }
--- a/Controller/GutscheinController.php
+++ b/Controller/GutscheinController.php
@@ -0,0 +1,82 @@
+<?php
+
+namespace Blog\Controller;
+
+use Blog\Model\GutscheinModel;
+
+class GutscheinController {
+
+    private $model;
+    private $view;
+
+    public function __construct($view) {
+        $this->model = new GutscheinModel();
+        $this->view = $view;
+    }
+
+    public function showGutscheine() {
+        $gutscheine = $this->model->getGutscheine();
+        $this->view->setVars(['gutscheine' => $gutscheine]);
+    }
+
+    public function createGutscheinForm() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php');
+            exit;
+        }
+        $this->view->setDoMethodName('createGutscheinForm');
+    }
+
+    public function createGutschein() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php');
+            exit;
+        }
+        $data = [
+            'code' => $_POST['code'] ?? null,
+            'discount' => $_POST['discount'] ?? null,
+            'event_id' => $_POST['event_id'] ?? null,
+            'valid_until' => $_POST['valid_until'] ?? null
+        ];
+        $this->model->createGutschein($data);
+        $this->view->setDoMethodName('showCreateSuccess');
+    }
+
+    public function editGutscheinForm() {
+        $id = $_GET['gutscheinid'];
+        if ($id) {
+            $gutschein = $this->model->getGutschein($id);
+            $this->view->setVars(['gutschein' => $gutschein]);
+        }
+    }
+
+    public function updateGutschein() {
+        $id = $_POST['gutscheinid'];
+        $data = [
+            'code' => $_POST['code'] ?? null,
+            'discount' => $_POST['discount'] ?? null,
+            'event_id' => $_POST['event_id'] ?? null,
+            'valid_until' => $_POST['valid_until'] ?? null
+        ];
+        $this->model->updateGutschein($id, $data);
+        header('Location: index.php?controller=Gutschein&do=adminVerwaltung');
+        exit;
+    }
+
+    public function deleteGutschein() {
+        $id = $_GET['gutscheinid'] ?? null;
+        $this->model->deleteGutschein($id);
+        header('Location: index.php?controller=Gutschein&do=adminVerwaltung');
+        exit;
+    }
+
+    public function adminVerwaltung() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php');
+            exit;
+        }
+        $gutscheine = $this->model->getGutscheine();
+        $this->view->setVars(['gutscheine' => $gutscheine]);
+        $this->view->setDoMethodName('showGutscheine');
+    }
+}
--- a/Controller/LocationController.php
+++ b/Controller/LocationController.php
@@ -1,61 +0,0 @@
-<?php
-
-namespace Blog\Controller;
-
-use Blog\Model\LocationModel;
-
-class LocationController {
-
-    private $model;
-    private $view;
-
-    public function __construct($view) {
-        $this->model = new LocationModel();
-        $this->view = $view;
-    }
-
-    public function showLocations() {
-        $locations = $this->model->getLocations();
-        $this->view->setVars(['locations' => $locations]);
-    }
-
-    public function createLocation() {
-        $data = [
-            'street' => $_POST['street'],
-            'house_number' => $_POST['house_number'],
-            'postal_code' => $_POST['postal_code'],
-            'city' => $_POST['city'],
-            'country' => $_POST['country'],
-            'phone' => $_POST['phone'],
-            'email' => $_POST['email']
-        ];
-        $result = $this->model->createLocation($data);
-        $this->view->setVars(['location' => $result]);
-    }
-
-    public function editLocationForm() {
-        $id = $_GET['location_id'];
-        $location = $this->model->getLocation($id);
-        $this->view->setVars(['location' => $location]);
-    }
-
-    public function updateLocation() {
-        $data = [
-            'street' => $_POST['street'],
-            'house_number' => $_POST['house_number'],
-            'postal_code' => $_POST['postal_code'],
-            'city' => $_POST['city'],
-            'country' => $_POST['country'],
-            'phone' => $_POST['phone'],
-            'email' => $_POST['email']
-        ];
-        $location_id = $_POST['location_id'];
-        $result = $this->model->updateLocation($location_id, $data);
-        $this->view->setVars(['location' => $result]);
-    }
-
-    public function deleteLocation() {
-        $id = $_GET['location_id'] ?? null;
-        $this->model->deleteLocation($id);
-    }
-}
--- a/Controller/NewsController.php
+++ b/Controller/NewsController.php
@@ -20,34 +20,102 @@ class NewsController {
    }

    public function createNews() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=News&do=showNews');
+            exit;
+        }
        $data = [
-            'name' => $_POST['name'],
-            'beschreibung' => $_POST['beschreibung'],
-            'datum' => $_POST['datum'],
+            'name' => $_POST['name'] ?? '',
+            'description' => $_POST['description'] ?? '',
+            'date' => $_POST['date'] ?? date('Y-m-d'),
        ];
-        $erg = $this->model->createNews($data);
-        $this->view->setVars(['news' => $erg]);
-        exit;
+        $errors = [];
+        if (empty($data['name']) || empty($data['description']) || empty($data['date'])) {
+            $errors['news'] = 'Bitte alle Felder ausfüllen.';
+        }
+        if (!empty($errors)) {
+            $this->view->setVars(['errors' => $errors, 'validData' => $data]);
+            $this->view->setDoMethodName('createNewsForm');
+            return;
+        }
+        $this->model->createNews($data);
+        $this->view->setDoMethodName('showCreateSuccess');
+    }
+
+    public function createNewsForm() {
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=News&do=showNews');
+            exit;
+        }
+        $this->view->setVars([
+            'errors' => [],
+            'validData' => []
+        ]);
    }

    public function editNewsForm() {
-        $id = $_GET['newsid'];
-        $news = $this->model->getNewsById($id);
-        $this->view->setVars(['news' => $news]);
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=News&do=showNews');
+            exit;
+        }
+        $id = $_GET['id'] ?? null;
+        if ($id) {
+            $news = $this->model->getNewsById($id);
+            $validData = [
+                'name' => $news['name'] ?? '',
+                'description' => $news['description'] ?? '',
+                'date' => $news['date'] ?? date('Y-m-d'),
+            ];
+            $this->view->setVars(['validData' => $validData, 'id' => $id, 'errors' => []]);
+        }
    }

    public function updateNews() {
-        $id = $_POST['newsid'] ?? null;
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=News&do=showNews');
+            exit;
+        }
+        $id = $_POST['id'] ?? null;
        $data = [
-            'name' => $_POST['name'],
-            'beschreibung' => $_POST['beschreibung'],
-            'datum' => $_POST['datum'],
+            'name' => $_POST['name'] ?? '',
+            'description' => $_POST['description'] ?? '',
+            'date' => $_POST['date'] ?? date('Y-m-d'),
        ];
+        $errors = [];
+        if (empty($data['name']) || empty($data['description']) || empty($data['date'])) {
+            $errors['news'] = 'Bitte alle Felder ausfüllen.';
+        }
+        if (!empty($errors)) {
+            $this->view->setVars(['errors' => $errors, 'validData' => $data, 'id' => $id]);
+            $this->view->setDoMethodName('editNewsForm');
+            return;
+        }
        $this->model->updateNews($id, $data);
+        $this->view->setDoMethodName('showEditSuccess');
    }

    public function deleteNews() {
-        $id = $_GET['newsid'] ?? null;
-        $this->model->deleteNews($id);
+        if (!isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
+            header('Location: index.php?controller=News&do=showNews');
+            exit;
+        }
+        $id = $_GET['id'] ?? null;
+        if ($id) {
+            $this->model->deleteNews($id);
+        }
+        $this->view->setDoMethodName('showDeleteSuccess');
+    }
+
+    public function showNewsDetail() {
+        $id = $_GET['id'] ?? null;
+        if ($id) {
+            $news = $this->model->getNewsById($id);
+            if ($news) {
+                $this->view->setVars(['news' => $news]);
+                return;
+            }
+        }
+        header('Location: index.php?controller=News&do=showNews');
+        exit;
    }
 }
--- a/Controller/ProfileController.php
+++ b/Controller/ProfileController.php
@@ -0,0 +1,10 @@
+<?php
+namespace Blog\Controller;
+
+class ProfileController {
+    function showProfile()
+    {
+
+    }
+}
+
--- a/Controller/StandortController.php
+++ b/Controller/StandortController.php
@@ -0,0 +1,61 @@
+<?php
+
+namespace Blog\Controller;
+
+use Blog\Model\StandortModel;
+
+class StandortController {
+
+    private $model;
+    private $view;
+
+    public function __construct($view) {
+        $this->model = new StandortModel();
+        $this->view = $view;
+    }
+
+    public function showStandorte() {
+        $standorte = $this->model->getStandorte();
+        $this->view->setVars(['standorte' => $standorte]);
+    }
+
+    public function createStandort() {
+        $data = [
+            'straße' => $_POST['straße'],
+            'hausnr' => $_POST['hausnr'],
+            'postleitzahl' => $_POST['postleitzahl'],
+            'ort' => $_POST['ort'],
+            'land' => $_POST['land'],
+            'tel' => $_POST['tel'],
+            'email' => $_POST['email']
+        ];
+        $erg = $this->model->createStandort($data);
+        $this->view->setVars(['standort' => $erg]);
+    }
+
+    public function editStandortForm() {
+        $id = $_GET['standortid'];
+        $standort = $this->model->getStandort($id);
+        $this->view->setVars(['standort' => $standort]);
+    }
+
+    public function updateStandort() {
+        $id = $_POST['standortid'];
+        $data = [
+            'straße' => $_POST['straße'],
+            'hausnr' => $_POST['hausnr'],
+            'postleitzahl' => $_POST['postleitzahl'],
+            'ort' => $_POST['ort'],
+            'land' => $_POST['land'],
+            'tel' => $_POST['tel'],
+            'email' => $_POST['email']
+            ];
+        $erg = $this->model->updateStandort($id, $data);
+        $this->view->setVars(['standort' => $erg]);
+    }
+
+    public function deleteStandort() {
+        $id = $_GET['standortid'] ?? null;
+        $this->model->deleteStandort($id);
+    }
+}
--- a/Controller/TicketController.php
+++ b/Controller/TicketController.php
@@ -3,37 +3,120 @@
 namespace Blog\Controller;

 use Blog\Model\TicketModel;
+use Blog\Model\EventModel;
+use Blog\Model\StandortModel;

 class TicketController {

    private $ticketModel;
+    private $eventModel;
    private $view;

    public function __construct($view) {
        $this->ticketModel = new TicketModel();
+        $this->eventModel = new EventModel();
        $this->view = $view;
    }

    public function showTickets() {
-        $tickets = $this->ticketModel->getTickets();
+        if (!isset($_SESSION['user_id'])) {
+            $this->view->setVars(['redirect' => 'index.php?controller=Auth&do=showLoginForm']);
+            return;
+        }
+        
+        $tickets = $this->ticketModel->getUserTickets($_SESSION['user_id']);
        $this->view->setVars(['tickets' => $tickets]);
    }

-    public function buyTicket() {
-        $data = [
-            'user_id' => $_POST['user_id'] ?? null,
-            'event_id' => $_POST['event_id'] ?? null,
-            'price' => $_POST['price'] ?? null
-        ];
+    public function showBuyTicketForm() {
+        if (!isset($_SESSION['user_id'])) {
+            $this->view->setVars(['redirect' => 'index.php?controller=Auth&do=showLoginForm']);
+            return;
+        }
+
+        $event_id = $_GET['event_id'] ?? null;
+        if (!$event_id) {
+            $this->view->setVars(['redirect' => 'index.php?controller=Event&do=showEvents']);
+            return;
+        }
+
+        $event = $this->eventModel->getEvent($event_id);
+        if (!$event) {
+            $this->view->setVars(['redirect' => 'index.php?controller=Event&do=showEvents']);
+            return;
+        }
+
+        // Check if user already has a ticket for this event
+        $hasTicket = $this->ticketModel->hasTicket($_SESSION['user_id'], $event_id);
        
-        $result = $this->ticketModel->createTicket($data);
-        $this->view->setVars(['ticket' => $result]);
+        $this->view->setVars([
+            'event' => $event,
+            'hasTicket' => $hasTicket['count'] > 0
+        ]);
+    }
+
+    public function buyTicket() {
+        if (!isset($_SESSION['user_id'])) {
+            header('Location: index.php?controller=Auth&do=showLoginForm');
+            exit;
+        }
+
+        $event_id = $_POST['event_id'] ?? null;
+        if (!$event_id) {
+            $this->view->setVars(['error' => 'Keine Event-ID angegeben.']);
+            return;
+        }
+
+        $event = $this->eventModel->getEvent($event_id);
+        if (!$event) {
+            $this->view->setVars(['error' => 'Event nicht gefunden.']);
+            return;
+        }
+
+        // Check if user already has a ticket for this event
+        $hasTicket = $this->ticketModel->hasTicket($_SESSION['user_id'], $event_id);
+        if ($hasTicket['count'] > 0) {
+            $this->view->setVars(['error' => 'Sie haben bereits ein Ticket für dieses Event.']);
+            return;
+        }
+
+        // Calculate valid until date (event end date + 30 days)
+        $valid_until = date('Y-m-d', strtotime($event['end_date'] . ' +30 days'));
+        
+        $data = [
+            'user_id' => $_SESSION['user_id'],
+            'event_id' => $event_id,
+            'purchase_date' => date('Y-m-d'),
+            'valid_until' => $valid_until
+        ];
+
+        try {
+            $ticket_id = $this->ticketModel->buyTicket($data);
+            $this->view->setVars([
+                'event' => $event,
+                'ticket_id' => $ticket_id,
+                'purchase_date' => $data['purchase_date'],
+                'valid_until' => $valid_until
+            ]);
+            $this->view->setDoMethodName('buyTicket');
+        } catch (Exception $e) {
+            $this->view->setVars(['error' => 'Fehler beim Kauf des Tickets: ' . $e->getMessage()]);
+            $this->view->setDoMethodName('showBuyTicketForm');
+        }
    }

    public function deleteTicket() {
-        $ticketid = $_GET['ticketid'] ?? null;
-        if ($ticketid) {
-            $this->ticketModel->deleteTicket($ticketid);
+        if (!isset($_SESSION['user_id'])) {
+            $this->view->setVars(['redirect' => 'index.php?controller=Auth&do=showLoginForm']);
+            return;
        }
+
+        $ticket_id = $_GET['ticket_id'] ?? null;
+        if ($ticket_id) {
+            $this->ticketModel->deleteTicket($ticket_id);
+        }
+        
+        // Redirect to tickets page using JavaScript
+        $this->view->setVars(['redirect' => 'index.php?controller=Ticket&do=showTickets']);
    }
 }
--- a/Controller/TicketsController.php
+++ b/Controller/TicketsController.php
@@ -0,0 +1,10 @@
+<?php
+namespace Blog\Controller;
+
+class TicketsController {
+    function showTickets()
+    {
+        
+    }
+}
+
--- a/Controller/VoucherController.php
+++ b/Controller/VoucherController.php
@@ -1,57 +0,0 @@
-<?php
-
-namespace Blog\Controller;
-
-use Blog\Model\VoucherModel;
-
-class VoucherController {
-
-    private $model;
-    private $view;
-
-    public function __construct($view) {
-        $this->model = new VoucherModel();
-        $this->view = $view;
-    }
-
-    public function showVouchers() {
-        $vouchers = $this->model->getVouchers();
-        $this->view->setVars(['vouchers' => $vouchers]);
-    }
-
-    public function createVoucher() {
-        $data = [
-            'code' => $_POST['code'] ?? null,
-            'discount' => $_POST['discount'] ?? null,
-            'event_id' => $_POST['event_id'] ?? null,
-            'valid_until' => $_POST['valid_until'] ?? null
-        ];
-        $result = $this->model->createVoucher($data);
-        $this->view->setVars(['voucher' => $result]);
-        exit;
-    }
-
-    public function editVoucherForm() {
-        $id = $_GET['voucher_id'];
-        if ($id) {
-            $voucher = $this->model->getVoucher($id);
-            $this->view->setVars(['voucher' => $voucher]);
-        }
-    }
-
-    public function updateVoucher() {
-        $id = $_POST['voucher_id'];
-        $data = [
-            'code' => $_POST['code'] ?? null,
-            'discount' => $_POST['discount'] ?? null,
-            'event_id' => $_POST['event_id'] ?? null,
-            'valid_until' => $_POST['valid_until'] ?? null
-        ];
-        $this->model->updateVoucher($id, $data);
-    }
-
-    public function deleteVoucher() {
-        $id = $_GET['voucher_id'] ?? null;
-        $this->model->deleteVoucher($id);
-    }
-}
--- a/Model/AuthModel.php
+++ b/Model/AuthModel.php
@@ -11,7 +11,7 @@ class AuthModel extends Database
    public function login(string $email, string $password)
    {
        $pdo = $this->linkDB();
-        $sql = "SELECT email, password, valid_until FROM user WHERE email = :email";
+        $sql = "SELECT email, password, valid_until, is_admin FROM user WHERE email = :email";
        $params = [":email" => $email];

        try {
@@ -20,15 +20,15 @@ class AuthModel extends Database
            $user = $sth->fetch(PDO::FETCH_ASSOC);
        } catch (PDOException $e) {
            new \Blog\Library\ErrorMsg("Fehler beim Abrufen der Benutzerdaten.", $e);
-            return "Interner Datenbankfehler."; // Nur für Debug sichtbar machen, sonst besser allgemein halten
+            return ['success' => false, 'error' => "Interner Datenbankfehler."];
        }

        if (!$user) {
-            return "Benutzer mit dieser E-Mail wurde nicht gefunden.";
+            return ['success' => false, 'error' => "Benutzer mit dieser E-Mail wurde nicht gefunden."];
        }

        if (!password_verify($password, $user['password'])) {
-            return "Das eingegebene Passwort ist falsch.";
+            return ['success' => false, 'error' => "Das eingegebene Passwort ist falsch."];
        }

        try {
@@ -36,14 +36,14 @@ class AuthModel extends Database
            $validUntil = new DateTime($user['valid_until']);

            if ($now > $validUntil) {
-                return "Ihr Passwort ist abgelaufen. Bitte setzen Sie ein neues über \"Passwort vergessen\".";
+                return ['success' => false, 'error' => "Ihr Passwort ist abgelaufen. Bitte setzen Sie ein neues über \"Passwort vergessen\"."];
            }
        } catch (\Exception $e) {
            new \Blog\Library\ErrorMsg("Fehler beim Verarbeiten des Gültigkeitsdatums.", $e);
-            return "Fehler bei der Passwortprüfung.";
+            return ['success' => false, 'error' => "Fehler bei der Passwortprüfung."];
        }

-        return true;
+        return ['success' => true, 'user' => $user];
    }

    public function register($data) {
@@ -52,7 +52,7 @@ class AuthModel extends Database
        }

        $requiredFields = [
-            'email', 'password', 'street', 'house_number', 'city', 'postal_code',
+            'email', 'password', 'password_repeat', 'street', 'house_number', 'city', 'postal_code',
            'country', 'first_name', 'last_name', 'phone'
        ];

@@ -71,8 +71,9 @@ class AuthModel extends Database
            return "Passwörter stimmen nicht überein.";
        }

-        if ($this->pwRequirementCheck($data['password']) !== true) {
-            return "Passwort muss mindestens 8 Zeichen lang sein und mindestens ein Großbuchstabe, ein Kleinbuchstabe, eine Zahl und ein Sonderzeichen enthalten.";
+        $pwCheck = $this->pwRequirementCheck($data['password']);
+        if ($pwCheck !== true) {
+            return $pwCheck; // Array mit spezifischen Fehlern zurückgeben
        }

        $hashedPassword = password_hash($data['password'], PASSWORD_DEFAULT);
@@ -220,16 +221,16 @@ class AuthModel extends Database
    public function pwRequirementCheck($password){
        $error = [];

-        if(strlen($password) <= 8)
-            $error[] = "min 8 Charackter";
+        if(strlen($password) < 8)
+            $error[] = "Passwort: mindestens 8 Zeichen";
        if(!preg_match("/[A-Z]/", $password))
-            $error[] = "min one large Character";
+            $error[] = "Passwort: mindestens ein Großbuchstabe";
        if(!preg_match("/[a-z]/", $password))
-            $error[] = "min one small charakter";
+            $error[] = "Passwort: mindestens ein Kleinbuchstabe";
        if(!preg_match("/[0-9]/", $password))
-            $error[] = "min one number";
-        if(!preg_match("[^a-zA-Z0-9\s]", $password));
-        $error[] = "min one special character";
+            $error[] = "Passwort: mindestens eine Zahl";
+        if(!preg_match("/[^a-zA-Z0-9\s]/", $password))
+            $error[] = "Passwort: mindestens ein Sonderzeichen";

        if(empty($error))
            return true;
--- a/Model/ContactModel.php
+++ b/Model/ContactModel.php
@@ -1,31 +0,0 @@
-<?php
-
-namespace Blog\Model;
-
-use PDOException;
-
-class ContactModel extends Database
-{
-    public function writeContactData($values)
-    {
-        $guid = $this->createUUID();
-
-        $sql = "INSERT INTO contact (`id`, `name`, `email`, `content`) VALUES (
-            :guid, :name, :email, :content);";
-
-        $pdo = $this->linkDB();
-
-        try {
-            $sth = $pdo->prepare($sql);
-            $sth->execute(array(":guid" => $guid,
-                ":name" => $values["name"],
-                ":email" => $values["email"],
-                ":content" => $values["content"]));
-        } catch (PDOException $e) {
-            new \Blog\Library\ErrorMsg("Fehler beim Schreiben der Daten.", $e); 
-            die;
-        }
-                
-        return true;
-    }
-}
--- a/Model/EventModel.php
+++ b/Model/EventModel.php
@@ -8,11 +8,11 @@ class EventModel extends Database {

    public function getEvents() {
        $pdo = $this->linkDB();
-        $sql = "SELECT * FROM event ORDER BY start_date ASC;";
+        $sql = "SELECT * FROM event ORDER BY start_date DESC;";
        try {
-            $stmt = $pdo->prepare($sql);
-            $stmt->execute();
-            return $stmt->fetchAll(\PDO::FETCH_ASSOC);
+            $sth = $pdo->prepare($sql);
+            $sth->execute();
+            return $sth->fetchAll(\PDO::FETCH_ASSOC);
        } catch (PDOException $e) {
            new \Blog\Library\ErrorMsg("Fehler beim Lesen der Events.", $e);
            die;
@@ -21,12 +21,11 @@ class EventModel extends Database {

    public function getEvent($id) {
        $pdo = $this->linkDB();
-        $sql = "SELECT * FROM event WHERE event_id = :event_id;";
-        $params = [":event_id" => $id];
+        $sql = "SELECT * FROM event WHERE event_id = :id;";
        try {
-            $stmt = $pdo->prepare($sql);
-            $stmt->execute($params);
-            return $stmt->fetch(\PDO::FETCH_ASSOC);
+            $sth = $pdo->prepare($sql);
+            $sth->execute([":id" => $id]);
+            return $sth->fetch(\PDO::FETCH_ASSOC);
        } catch (PDOException $e) {
            new \Blog\Library\ErrorMsg("Fehler beim Lesen des Events.", $e);
            die;
@@ -35,29 +34,20 @@ class EventModel extends Database {

    public function updateEvent($id, $data) {
        $pdo = $this->linkDB();
-        $sql = "UPDATE event SET
-                    name = :name,
-                    description = :description,
-                    location_id = :location_id,
-                    start_date = :start_date,
-                    end_date = :end_date,
-                    max_tickets = :max_tickets,
-                    ticket_price = :ticket_price
-                WHERE event_id = :event_id;";
+        $sql = "UPDATE event SET location_id = :location_id, start_date = :start_date, end_date = :end_date, name = :name, description = :description, max_tickets = :max_tickets, ticket_price = :ticket_price WHERE event_id = :id;";
        $params = [
-            ":name" => $data['name'],
-            ":description" => $data['description'],
            ":location_id" => $data['location_id'],
            ":start_date" => $data['start_date'],
            ":end_date" => $data['end_date'],
+            ":name" => $data['name'],
+            ":description" => $data['description'],
            ":max_tickets" => $data['max_tickets'],
            ":ticket_price" => $data['ticket_price'],
-            ":event_id" => $id
+            ":id" => $id
        ];
        try {
            $sth = $pdo->prepare($sql);
            $sth->execute($params);
-            return $sth;
        } catch (PDOException $e) {
            new \Blog\Library\ErrorMsg("Fehler beim Aktualisieren des Events.", $e);
            die;
@@ -66,14 +56,13 @@ class EventModel extends Database {

    public function createEvent($data) {
        $pdo = $this->linkDB();
-        $sql = "INSERT INTO event (name, description, location_id, start_date, end_date, max_tickets, ticket_price)
-                VALUES (:name, :description, :location_id, :start_date, :end_date, :max_tickets, :ticket_price);";
+        $sql = "INSERT INTO event (location_id, start_date, end_date, name, description, max_tickets, ticket_price) VALUES (:location_id, :start_date, :end_date, :name, :description, :max_tickets, :ticket_price);";
        $params = [
-            ":name" => $data['name'],
-            ":description" => $data['description'],
            ":location_id" => $data['location_id'],
            ":start_date" => $data['start_date'],
            ":end_date" => $data['end_date'],
+            ":name" => $data['name'],
+            ":description" => $data['description'],
            ":max_tickets" => $data['max_tickets'],
            ":ticket_price" => $data['ticket_price']
        ];
@@ -82,19 +71,17 @@ class EventModel extends Database {
            $sth->execute($params);
            return $sth;
        } catch (PDOException $e) {
-            new \Blog\Library\ErrorMsg("Fehler beim Schreiben des Events.", $e);
+            new \Blog\Library\ErrorMsg("Fehler beim Erstellen des Events.", $e);
            die;
        }
    }

    public function deleteEvent($id) {
        $pdo = $this->linkDB();
-        $sql = "DELETE FROM event WHERE event_id = :event_id;";
-        $params = [":event_id" => $id];
+        $sql = "DELETE FROM event WHERE event_id = :id;";
        try {
-            $stmt = $pdo->prepare($sql);
-            $stmt->execute($params);
-            return $stmt->rowCount();
+            $sth = $pdo->prepare($sql);
+            $sth->execute([":id" => $id]);
        } catch (PDOException $e) {
            new \Blog\Library\ErrorMsg("Fehler beim Löschen des Events.", $e);
            die;
--- a/Model/GutscheinModel.php
+++ b/Model/GutscheinModel.php
@@ -0,0 +1,86 @@
+<?php
+
+namespace Blog\Model;
+
+use PDOException;
+
+class GutscheinModel extends Database {
+
+    public function getGutscheine() {
+        $pdo = $this->linkDB();
+        $sql = "SELECT * FROM voucher ORDER BY valid_until DESC;";
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute();
+            return $sth->fetchAll(\PDO::FETCH_ASSOC);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Lesen der Gutscheine.", $e);
+            die;
+        }
+    }
+
+    public function getGutschein($id) {
+        $pdo = $this->linkDB();
+        $sql = "SELECT * FROM voucher WHERE voucher_id = :id;";
+        $params = [":id" => $id];
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+            return $sth->fetch(\PDO::FETCH_ASSOC);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Lesen des Gutscheins.", $e);
+            die;
+        }
+    }
+
+    public function createGutschein($data) {
+        $pdo = $this->linkDB();
+        $sql = "INSERT INTO voucher (code, discount, event_id, valid_until) VALUES (:code, :discount, :event_id, :valid_until);";
+        $params = [
+            ":code" => $data['code'],
+            ":discount" => $data['discount'],
+            ":event_id" => $data['event_id'],
+            ":valid_until" => $data['valid_until']
+        ];
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+            return $sth;
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Erstellen des Gutscheins.", $e);
+            die;
+        }
+    }
+
+    public function updateGutschein($id, $data) {
+        $pdo = $this->linkDB();
+        $sql = "UPDATE voucher SET code = :code, discount = :discount, event_id = :event_id, valid_until = :valid_until WHERE voucher_id = :id;";
+        $params = [
+            ":code" => $data['code'],
+            ":discount" => $data['discount'],
+            ":event_id" => $data['event_id'],
+            ":valid_until" => $data['valid_until'],
+            ":id" => $id
+        ];
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Aktualisieren des Gutscheins.", $e);
+            die;
+        }
+    }
+
+    public function deleteGutschein($id) {
+        $pdo = $this->linkDB();
+        $sql = "DELETE FROM voucher WHERE voucher_id = :id;";
+        $params = [":id" => $id];
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Löschen des Gutscheins.", $e);
+            die;
+        }
+    }
+}
--- a/Model/NewsModel.php
+++ b/Model/NewsModel.php
@@ -3,58 +3,83 @@
 namespace Blog\Model;

 use PDOException;
-use PDO;

 class NewsModel extends Database {

-    public function getNewsById($id) {
+    public function getNewsById($newsId) {
        $pdo = $this->linkDB();
        $sql = "SELECT * FROM news WHERE news_id = :news_id;";
-        $stmt = $pdo->prepare($sql);
-        $params = [':news_id' => $id];
-        $stmt->execute($params);
-        return $stmt->fetch(PDO::FETCH_ASSOC);
+        $params = [":news_id" => $newsId];
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+            return $sth->fetch(\PDO::FETCH_ASSOC);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Lesen der News.", $e);
+            die;
+        }
    }

-    public function updateNews($id, $data) {
+    public function updateNews($newsId, $news) {
        $pdo = $this->linkDB();
        $sql = "UPDATE news SET name = :name, description = :description, date = :date WHERE news_id = :news_id;";
-        $stmt = $pdo->prepare($sql);
        $params = [
-            ':name' => $data['name'],
-            ':description' => $data['description'],
-            ':date' => $data['date'],
-            ':news_id' => $id
+            ":name" => $news['name'],
+            ":description" => $news['description'],
+            ":date" => $news['date'],
+            ":news_id" => $newsId
        ];
-        return $stmt->execute($params);
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+            return $sth;
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Aktualisieren der News.", $e);
+            die;
+        }
    }

    public function getNews() {
        $pdo = $this->linkDB();
        $sql = "SELECT * FROM news ORDER BY date DESC;";
-        $stmt = $pdo->prepare($sql);
-        $stmt->execute();
-        return $stmt->fetchAll(PDO::FETCH_ASSOC);
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute();
+            return $sth->fetchAll(\PDO::FETCH_ASSOC);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Lesen der News.", $e);
+            die;
+        }
    }

-    public function createNews($data) {
+    public function createNews($news) {
        $pdo = $this->linkDB();
        $sql = "INSERT INTO news (name, description, date) VALUES (:name, :description, :date);";
-        $stmt = $pdo->prepare($sql);
        $params = [
-            ':name' => $data['name'],
-            ':description' => $data['description'],
-            ':date' => $data['date']
+            ":name" => $news['name'],
+            ":description" => $news['description'],
+            ":date" => $news['date']
        ];
-        $stmt->execute($params);
-        return $pdo->lastInsertId();
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+            return $sth;
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Schreiben der News.", $e);
+            die;
+        }
    }

-    public function deleteNews($id) {
+    public function deleteNews($newsId) {
        $pdo = $this->linkDB();
        $sql = "DELETE FROM news WHERE news_id = :news_id;";
-        $stmt = $pdo->prepare($sql);
-        $params = [':news_id' => $id];
-        return $stmt->execute($params);
+        $params = [":news_id" => $newsId];
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Löschen der News.", $e);
+            die;
+        }
    }
 }
--- a/Model/StandortModel.php
+++ b/Model/StandortModel.php
@@ -2,12 +2,11 @@

 namespace Blog\Model;

-use PDO;
 use PDOException;

-class LocationModel extends Database {
+class StandortModel extends Database {

-    public function getLocations() {
+    public function getStandorte() {
        $pdo = $this->linkDB();
        $sql = "SELECT * FROM location ORDER BY location_id ASC;";
        try {
@@ -20,10 +19,10 @@ class LocationModel extends Database {
        }
    }

-    public function getLocation($id) {
+    public function getStandort($location_id) {
        $pdo = $this->linkDB();
        $sql = "SELECT * FROM location WHERE location_id = :location_id;";
-        $params = [":location_id" => $id];
+        $params = [":location_id" => $location_id];
        try {
            $sth = $pdo->prepare($sql);
            $sth->execute($params);
@@ -34,7 +33,7 @@ class LocationModel extends Database {
        }
    }

-    public function createLocation($data) {
+    public function createStandort($data) {
        $pdo = $this->linkDB();
        $sql = "INSERT INTO location (street, house_number, postal_code, city, country, phone, email)
                VALUES (:street, :house_number, :postal_code, :city, :country, :phone, :email);";
@@ -57,7 +56,7 @@ class LocationModel extends Database {
        }
    }

-    public function updateLocation($id, $data) {
+    public function updateStandort($location_id, $data) {
        $pdo = $this->linkDB();
        $sql = "UPDATE location SET
                    street = :street,
@@ -76,7 +75,7 @@ class LocationModel extends Database {
            ":country" => $data['country'],
            ":phone" => $data['phone'],
            ":email" => $data['email'],
-            ":location_id" => $id
+            ":location_id" => $location_id
        ];
        try {
            $sth = $pdo->prepare($sql);
@@ -88,10 +87,10 @@ class LocationModel extends Database {
        }
    }

-    public function deleteLocation($id) {
+    public function deleteStandort($location_id) {
        $pdo = $this->linkDB();
        $sql = "DELETE FROM location WHERE location_id = :location_id;";
-        $params = [":location_id" => $id];
+        $params = [":location_id" => $location_id];
        try {
            $sth = $pdo->prepare($sql);
            $sth->execute($params);
--- a/Model/TicketModel.php
+++ b/Model/TicketModel.php
@@ -3,72 +3,118 @@
 namespace Blog\Model;

 use PDOException;
-use PDO;

 class TicketModel extends Database {

    public function getTickets() {
        $pdo = $this->linkDB();
-        $sql = "SELECT * FROM ticket ORDER BY ticket_id ASC;";
-        $stmt = $pdo->prepare($sql);
-        $stmt->execute();
-        return $stmt->fetchAll(PDO::FETCH_ASSOC);
+        $sql = "SELECT t.*, e.name as event_name, e.start_date, e.end_date, e.ticket_price, 
+                       l.city as location_city, l.street as location_street, l.house_number as location_house_number
+                FROM ticket t 
+                JOIN event e ON t.event_id = e.event_id 
+                JOIN location l ON e.location_id = l.location_id 
+                ORDER BY t.purchase_date DESC;";
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute();
+            return $sth->fetchAll(\PDO::FETCH_ASSOC);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Lesen der Tickets.", $e);
+            die;
+        }
+    }
+
+    public function getUserTickets($user_id) {
+        $pdo = $this->linkDB();
+        $sql = "SELECT t.*, e.name as event_name, e.start_date, e.end_date, e.ticket_price, 
+                       l.city as location_city, l.street as location_street, l.house_number as location_house_number
+                FROM ticket t 
+                JOIN event e ON t.event_id = e.event_id 
+                JOIN location l ON e.location_id = l.location_id 
+                WHERE t.user_id = :user_id 
+                ORDER BY t.purchase_date DESC;";
+        $params = [":user_id" => $user_id];
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+            return $sth->fetchAll(\PDO::FETCH_ASSOC);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Lesen der Benutzer-Tickets.", $e);
+            die;
+        }
    }

    public function buyTicket($data) {
        $pdo = $this->linkDB();
+        
+        // First check if the event still has available tickets
+        $checkSql = "SELECT e.max_tickets, COUNT(t.ticket_id) as sold_tickets 
+                     FROM event e 
+                     LEFT JOIN ticket t ON e.event_id = t.event_id 
+                     WHERE e.event_id = :event_id 
+                     GROUP BY e.event_id, e.max_tickets";
+        
+        try {
+            $checkStmt = $pdo->prepare($checkSql);
+            $checkStmt->execute([':event_id' => $data['event_id']]);
+            $eventInfo = $checkStmt->fetch(\PDO::FETCH_ASSOC);
+            
+            if (!$eventInfo) {
+                throw new \Exception("Event nicht gefunden.");
+            }
+            
+            if ($eventInfo['sold_tickets'] >= $eventInfo['max_tickets']) {
+                throw new \Exception("Alle Tickets für dieses Event sind bereits verkauft.");
+            }
+        } catch (PDOException $e) {
+            throw new \Exception("Fehler bei der Ticketverfügbarkeitsprüfung.");
+        }
+        
        $sql = "INSERT INTO ticket (user_id, event_id, purchase_date, valid_until)
-                VALUES (:user_id, :event_id, :purchase_date, :valid_until)";
-        $stmt = $pdo->prepare($sql);
+                VALUES (:user_id, :event_id, :purchase_date, :valid_until);";
        $params = [
-            ':user_id' => $data['user_id'],
-            ':event_id' => $data['event_id'],
-            ':purchase_date' => $data['purchase_date'],
-            ':valid_until' => $data['valid_until']
+            ":user_id" => $data['user_id'],
+            ":event_id" => $data['event_id'],
+            ":purchase_date" => $data['purchase_date'],
+            ":valid_until" => $data['valid_until']
        ];
-        $stmt->execute($params);
-        return $pdo->lastInsertId();
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+            return $pdo->lastInsertId();
+        } catch (PDOException $e) {
+            throw new \Exception("Fehler beim Kauf des Tickets.");
+        }
    }

-    public function checkTicketExists($userid, $ausstellungid) {
+    public function hasTicket($user_id, $event_id) {
        $pdo = $this->linkDB();
        $sql = "SELECT COUNT(*) as count FROM ticket WHERE user_id = :user_id AND event_id = :event_id;";
-        $stmt = $pdo->prepare($sql);
-        $params = [':user_id' => $userid, ':event_id' => $ausstellungid];
-        $stmt->execute($params);
-        $result = $stmt->fetch(PDO::FETCH_ASSOC);
-        return $result['count'] > 0;
+        $params = [
+            ":user_id" => $user_id,
+            ":event_id" => $event_id
+        ];
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+            return $sth->fetch(\PDO::FETCH_ASSOC);
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler bei der Ticketprüfung.", $e);
+            die;
+        }
    }

-    public function deleteTicket($id) {
+    public function deleteTicket($ticket_id) {
        $pdo = $this->linkDB();
        $sql = "DELETE FROM ticket WHERE ticket_id = :ticket_id;";
-        $stmt = $pdo->prepare($sql);
-        $params = [':ticket_id' => $id];
-        return $stmt->execute($params);
-    }
-
-    public function createTicket($data) {
-        $pdo = $this->linkDB();
-        $sql = "INSERT INTO ticket (event_id, user_id, price) VALUES (:event_id, :user_id, :price);";
-        $stmt = $pdo->prepare($sql);
-        $params = [
-            ':event_id' => $data['event_id'],
-            ':user_id' => $data['user_id'],
-            ':price' => $data['price']
-        ];
-        return $stmt->execute($params);
-    }
-
-    public function getTicketsByUser($userId) {
-        $pdo = $this->linkDB();
-        $sql = "SELECT t.*, e.name as event_name, e.start_date, e.end_date 
-                FROM ticket t 
-                JOIN event e ON t.event_id = e.event_id 
-                WHERE t.user_id = :user_id;";
-        $stmt = $pdo->prepare($sql);
-        $params = [':user_id' => $userId];
-        $stmt->execute($params);
-        return $stmt->fetchAll(PDO::FETCH_ASSOC);
+        $params = [":ticket_id" => $ticket_id];
+        try {
+            $sth = $pdo->prepare($sql);
+            $sth->execute($params);
+            return $sth->rowCount();
+        } catch (PDOException $e) {
+            new \Blog\Library\ErrorMsg("Fehler beim Löschen des Tickets.", $e);
+            die;
+        }
    }
 }
--- a/Model/VoucherModel.php
+++ b/Model/VoucherModel.php
@@ -1,62 +0,0 @@
-<?php
-
-namespace Blog\Model;
-
-use PDO;
-use PDOException;
-
-class VoucherModel extends Database {
-
-    public function getVouchers() {
-        $pdo = $this->linkDB();
-        $sql = "SELECT * FROM voucher ORDER BY valid_until DESC;";
-        $stmt = $pdo->prepare($sql);
-        $stmt->execute();
-        return $stmt->fetchAll(PDO::FETCH_ASSOC);
-    }
-
-    public function getVoucher($id) {
-        $pdo = $this->linkDB();
-        $sql = "SELECT * FROM voucher WHERE voucher_id = :id;";
-        $stmt = $pdo->prepare($sql);
-        $params = [':id' => $id];
-        $stmt->execute($params);
-        return $stmt->fetch(PDO::FETCH_ASSOC);
-    }
-
-    public function createVoucher($data) {
-        $pdo = $this->linkDB();
-        $sql = "INSERT INTO voucher (code, discount, event_id, valid_until) VALUES (:code, :discount, :event_id, :valid_until);";
-        $stmt = $pdo->prepare($sql);
-        $params = [
-            ':code' => $data['code'],
-            ':discount' => $data['discount'],
-            ':event_id' => $data['event_id'],
-            ':valid_until' => $data['valid_until']
-        ];
-        $stmt->execute($params);
-        return $pdo->lastInsertId();
-    }
-
-    public function updateVoucher($id, $data) {
-        $pdo = $this->linkDB();
-        $sql = "UPDATE voucher SET code = :code, discount = :discount, event_id = :event_id, valid_until = :valid_until WHERE voucher_id = :id;";
-        $stmt = $pdo->prepare($sql);
-        $params = [
-            ':code' => $data['code'],
-            ':discount' => $data['discount'],
-            ':event_id' => $data['event_id'],
-            ':valid_until' => $data['valid_until'],
-            ':id' => $id
-        ];
-        return $stmt->execute($params);
-    }
-
-    public function deleteVoucher($id) {
-        $pdo = $this->linkDB();
-        $sql = "DELETE FROM voucher WHERE voucher_id = :id;";
-        $stmt = $pdo->prepare($sql);
-        $params = [':id' => $id];
-        return $stmt->execute($params);
-    }
-}
--- a/Views/Auth/forgotPassword.phtml
+++ b/Views/Auth/forgotPassword.phtml
@@ -0,0 +1,23 @@
+<div class="inhalt">
+    <div class="form-container">
+        <h1>Anmelden</h1>
+        <?php if (!empty($errors['login'])): ?>
+            <div class="login-error"><?=htmlspecialchars($errors['login'])?></div>
+        <?php endif; ?>
+        <form class="form-horizontal" action="index.php" method="post">
+            <input type="hidden" name="controller" value="Auth">
+            <input type="hidden" name="do" value="login">
+            <label for="email">E-Mail</label>
+            <input class="input-email" type="email" name="email" id="email" placeholder="E-Mail" required>
+            <label for="password">Passwort</label>
+            <input class="input-passwort" type="password" name="password" id="password" placeholder="Passwort" required>
+            <button class="button-loggin" type="submit">Login</button>
+        </form>
+        <div style="text-align:center; margin-top: 1.5em;">
+            <a class="link-passwort-vergessen" href="?controller=Auth&do=showForgotPasswordForm">Passwort vergessen?</a>
+            <br>
+            <a class="link-konto-erstellen" href="?controller=Auth&do=showRegistrationForm">Konto erstellen</a>
+        </div>
+    </div>
+</div>
+
--- a/Views/Auth/showLoginForm.phtml
+++ b/Views/Auth/showLoginForm.phtml
@@ -1,10 +1,9 @@
-<?php
-include dirname(__DIR__) . '/header.phtml';
-?>
-
 <div class="inhalt">
-    <div class="login-container">
+    <div class="form-container">
        <h1>Anmelden</h1>
+        <?php if (!empty($errors['login'])): ?>
+            <div class="error-box"><?=htmlspecialchars($errors['login'])?></div>
+        <?php endif; ?>
        <form class="form-horizontal" action="index.php" method="post">
            <input type="hidden" name="controller" value="Auth">
            <input type="hidden" name="do" value="login">
@@ -12,17 +11,13 @@ include dirname(__DIR__) . '/header.phtml';
            <input class="input-email" type="email" name="email" id="email" placeholder="E-Mail" required>
            <label for="password">Passwort</label>
            <input class="input-passwort" type="password" name="password" id="password" placeholder="Passwort" required>
-            <button class="button-loggin" type="submit">Login</button>
+            <button class="button-login" type="submit">Login</button>
        </form>
        <div style="text-align:center; margin-top: 1.5em;">
-            <a class="link-passwort-vergessen">Passwort vergessen?</a>
+            <a class="link-passwort-vergessen" href="?controller=Auth&do=showForgotPasswordForm">Passwort vergessen?</a>
            <br>
            <a class="link-konto-erstellen" href="?controller=Auth&do=showRegistrationForm">Konto erstellen</a>
        </div>
    </div>
 </div>

-<?php
-include dirname(__DIR__) . '/footer.phtml';
-?>
-
--- a/Views/Auth/showLoginSuccess.phtml
+++ b/Views/Auth/showLoginSuccess.phtml
@@ -0,0 +1,15 @@
+<div class="inhalt">
+    <div class="status-box">
+        <h2>Login erfolgreich!</h2>
+        <p>Sie werden in wenigen Sekunden zu den News weitergeleitet...</p>
+    </div>
+</div>
+<script>
+    setTimeout(function() {
+        window.location.href = "?controller=News&do=showNews";
+    }, 2000); // 2 Sekunden warten
+</script>
+<noscript>
+    <meta http-equiv="refresh" content="2;url=?controller=News&do=showNews">
+</noscript>
+
--- a/Views/Auth/showLogoutSuccess.phtml
+++ b/Views/Auth/showLogoutSuccess.phtml
@@ -0,0 +1,14 @@
+<div class="inhalt">
+    <div class="status-box">
+        <h2>Logout erfolgreich!</h2>
+        <p>Sie werden in wenigen Sekunden zum Login weitergeleitet...</p>
+    </div>
+</div>
+<script>
+    setTimeout(function() {
+        window.location.href = "?controller=Auth&do=showLoginForm";
+    }, 2000); // 2 Sekunden warten
+</script>
+<noscript>
+    <meta http-equiv="refresh" content="2;url=?controller=Auth&do=showLoginForm">
+</noscript> 
--- a/Views/Auth/showRegistrationForm.phtml
+++ b/Views/Auth/showRegistrationForm.phtml
@@ -1,55 +1,37 @@
-<?php
-include dirname(__DIR__) . '/header.phtml';
-?>
-
 <div class="inhalt">
-    <div class="login-container">
+    <div class="form-container">
        <h1>Registrieren</h1>
+        <?php if (!empty($errors['register'])): ?>
+            <div class="error-box"><?=htmlspecialchars($errors['register'])?></div>
+        <?php endif; ?>
        <form class="form-horizontal" action="index.php" method="post">
            <input type="hidden" name="controller" value="Auth">
            <input type="hidden" name="do" value="register">
-            <label>
-                <input class="input-vorname" type="text" name="vorname" placeholder="Vorname">
-            </label>
-            <label>
-                <input class="input-nachname" type="text" name="nachname" placeholder="Nachname">
-            </label>
-            <label>
-                <input class="input-email" type="text" name="email" placeholder="E-Mail">
-            </label>
-            <label>
-                <input class="input-passwort" type="password" name="password" placeholder="Passwort">
-            </label>
-            <label>
-                <input class="input-passwort-repeat" type="password" name="password_repeat" placeholder="Passwort wiederholen">
-            </label>
-            <label>
-                <input class="input-strasse" type="text" name="strasse" placeholder="Straße">
-            </label>
-            <label>
-                <input class="input-hausnr" type="text" name="hausnr" placeholder="Hausnr.">
-            </label>
-            <label>
-                <input class="input-postleitzahl" type="text" name="plz" placeholder="Postleitzahl">
-            </label>
-            <label>
-                <input class="input-ort" type="text" name="ort" placeholder="Ort">
-            </label>
-            <label>
-                <input class="input-land" type="text" name="land" placeholder="Land">
-            </label>
-            <label>
-                <input class="input-tel" type="text" name="tel" placeholder="Telefonnr.">
-            </label>
+            <label for="first_name">Vorname</label>
+            <input class="input-vorname" type="text" name="first_name" id="first_name" placeholder="Vorname" required value="<?=htmlspecialchars($validData['first_name'] ?? '')?>">
+            <label for="last_name">Nachname</label>
+            <input class="input-nachname" type="text" name="last_name" id="last_name" placeholder="Nachname" required value="<?=htmlspecialchars($validData['last_name'] ?? '')?>">
+            <label for="email">E-Mail</label>
+            <input class="input-email" type="email" name="email" id="email" placeholder="E-Mail" required value="<?=htmlspecialchars($validData['email'] ?? '')?>">
+            <label for="password">Passwort</label>
+            <input class="input-passwort" type="password" name="password" id="password" placeholder="Passwort" required>
+            <label for="password_repeat">Passwort wiederholen</label>
+            <input class="input-passwort-repeat" type="password" name="password_repeat" id="password_repeat" placeholder="Passwort wiederholen" required>
+            <label for="street">Straße</label>
+            <input class="input-strasse" type="text" name="street" id="street" placeholder="Straße" required value="<?=htmlspecialchars($validData['street'] ?? '')?>">
+            <label for="house_number">Hausnr.</label>
+            <input class="input-hausnr" type="text" name="house_number" id="house_number" placeholder="Hausnr." required value="<?=htmlspecialchars($validData['house_number'] ?? '')?>">
+            <label for="postal_code">Postleitzahl</label>
+            <input class="input-postleitzahl" type="text" name="postal_code" id="postal_code" placeholder="Postleitzahl" required value="<?=htmlspecialchars($validData['postal_code'] ?? '')?>">
+            <label for="city">Ort</label>
+            <input class="input-ort" type="text" name="city" id="city" placeholder="Ort" required value="<?=htmlspecialchars($validData['city'] ?? '')?>">
+            <label for="country">Land</label>
+            <input class="input-land" type="text" name="country" id="country" placeholder="Land" required value="<?=htmlspecialchars($validData['country'] ?? '')?>">
+            <label for="phone">Telefonnr.</label>
+            <input class="input-tel" type="text" name="phone" id="phone" placeholder="Telefonnr." required value="<?=htmlspecialchars($validData['phone'] ?? '')?>">
            <button class="button-register" type="submit">Registrieren</button>
        </form>
-        <div style="text-align:center; margin-top: 1.5em;">
-            <a href="?controller=Auth&do=showLoginForm" class="login-link">Bereits registriert? Hier einloggen</a>
-        </div>
+        <a class="link-konto-erstellen" href="?controller=Auth&do=showLoginForm">Login</a>
    </div>
 </div>

-<?php
-include dirname(__DIR__) . '/footer.phtml';
-?>
-
--- a/Views/Auth/showRegistrationSuccess.phtml
+++ b/Views/Auth/showRegistrationSuccess.phtml
@@ -0,0 +1,14 @@
+<div class="inhalt">
+    <div class="status-box">
+        <h2>Registrierung erfolgreich!</h2>
+        <p>Sie werden in wenigen Sekunden zum Login weitergeleitet...</p>
+    </div>
+</div>
+<script>
+    setTimeout(function() {
+        window.location.href = "?controller=Auth&do=showLoginForm";
+    }, 2000);
+</script>
+<noscript>
+    <meta http-equiv="refresh" content="2;url=?controller=Auth&do=showLoginForm">
+</noscript> 
--- a/Views/Event/createEvent.phtml
+++ b/Views/Event/createEvent.phtml
@@ -1,12 +0,0 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
-
-    <div class="msg">
-        <p>Das Event "<?php echo $event['name']?>" wurde erfolgreich erstellt!</p>
-        <a href="?controller=Event&do=showEvents">Weiter</a>
-    </div>
-
-<?php
-include dirname(__DIR__).'/footer.phtml';
-?>
--- a/Views/Event/deleteEvent.phtml
+++ b/Views/Event/deleteEvent.phtml
@@ -2,11 +2,14 @@
 include dirname(__DIR__).'/header.phtml';
 ?>

+<div class="inhalt">
    <div class="msg">
-        <p>Das Event mit der id"<?php echo $id?>" wurde erfolgreich gelöscht!</p>
-        <a href="?controller=Event&do=showEvents">Weiter</a>
+        <p>Das Event mit der ID "<?php echo htmlspecialchars($id); ?>" wurde erfolgreich gelöscht!</p>
+        <p>Sie werden in 3 Sekunden zur Event-Übersicht weitergeleitet...</p>
+        <a href="?controller=Event&do=showEvents">Jetzt zur Event-Übersicht</a>
    </div>
+</div>

-<?php
-include dirname(__DIR__).'/footer.phtml';
-?>
+<meta http-equiv="refresh" content="3;url=index.php?controller=Event&do=showEvents">
+
+<?php include dirname(__DIR__).'/footer.phtml'; ?>
--- a/Views/Event/showCreateEvent.phtml
+++ b/Views/Event/showCreateEvent.phtml
@@ -0,0 +1,38 @@
+<div class="inhalt">
+    <div class="form-container">
+        <h1>Event erstellen</h1>
+        <?php if (!empty(
+            $errors['event'])): ?>
+            <div class="error-box"><?=htmlspecialchars($errors['event'])?></div>
+        <?php endif; ?>
+        <form class="form-horizontal" action="index.php" method="post">
+            <input type="hidden" name="controller" value="Event">
+            <input type="hidden" name="do" value="createEvent">
+            <label for="name">Name</label>
+            <input type="text" name="name" id="name" required value="<?=htmlspecialchars($validData['name'] ?? '')?>">
+            <label for="start_date">Startdatum</label>
+            <input type="date" name="start_date" id="start_date" required value="<?=htmlspecialchars($validData['start_date'] ?? '')?>">
+            <label for="end_date">Enddatum</label>
+            <input type="date" name="end_date" id="end_date" required value="<?=htmlspecialchars($validData['end_date'] ?? '')?>">
+            <label for="location_id">Standort</label>
+            <select name="location_id" id="location_id" required>
+                <option value="">Standort wählen</option>
+                <?php if (!empty($locations)): ?>
+                    <?php foreach ($locations as $loc): ?>
+                        <option value="<?= htmlspecialchars($loc['location_id']) ?>" <?= (isset($validData['location_id']) && $validData['location_id'] == $loc['location_id']) ? 'selected' : '' ?>>
+                            <?= htmlspecialchars($loc['city']) ?>, <?= htmlspecialchars($loc['street']) ?> <?= htmlspecialchars($loc['house_number']) ?>
+                        </option>
+                    <?php endforeach; ?>
+                <?php endif; ?>
+            </select>
+            <label for="description">Beschreibung</label>
+            <textarea name="description" id="description" rows="7" required><?=htmlspecialchars($validData['description'] ?? '')?></textarea>
+            <label for="max_tickets">Max. Tickets</label>
+            <input type="number" name="max_tickets" id="max_tickets" required value="<?=htmlspecialchars($validData['max_tickets'] ?? '')?>">
+            <label for="ticket_price">Ticketpreis</label>
+            <input type="number" step="0.01" name="ticket_price" id="ticket_price" required value="<?=htmlspecialchars($validData['ticket_price'] ?? '')?>">
+            <button class="button-register" type="submit">Event erstellen</button>
+        </form>
+        <a href="?controller=Event&do=showEvents">Zurück zur Übersicht</a>
+    </div>
+</div>
--- a/Views/Event/showCreateForwarding.phtml
+++ b/Views/Event/showCreateForwarding.phtml
@@ -0,0 +1,15 @@
+<div class="inhalt">
+    <div class="create-forwarding">
+        <h2>Erstellen...</h2>
+        <p>Sie werden in wenigen Sekunden zu der Erstell Seite weitergeleitet...</p>
+    </div>
+</div>
+<script>
+    setTimeout(function() {
+        window.location.href = "?controller=Event&do=showCreateEvent";
+    }, 2000); // 2 Sekunden warten
+</script>
+<noscript>
+    <meta http-equiv="refresh" content="2;url=?controller=Event&do=showCreateEvent">
+</noscript>
+
--- a/Views/Event/showEvents.phtml
+++ b/Views/Event/showEvents.phtml
@@ -1,8 +1,14 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
-<h2>Alle Events</h2>
 <?php if (!empty($events)): ?>
+    <div class="inhalt">
+    <div class="content-container">
+        <div class="event-header">
+            <h2>Alle Ausstellungen</h2>
+            <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                <a href="?controller=Event&do=showCreateEvent" class="admin-btn">Event erstellen</a>
+            <?php endif; ?>
+        </div>
+        
+    <div class="event-container-inhalt">
    <table>
        <thead>
        <tr>
@@ -10,24 +16,59 @@ include dirname(__DIR__).'/header.phtml';
            <th>Beschreibung</th>
            <th>Von</th>
            <th>Bis</th>
-            <th>Max. Tickets</th>
+            <th>Preis</th>
+            <th>Tickets</th>
+            <th>Aktionen</th>
+            <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                <th>Admin</th>
+            <?php endif; ?>
        </tr>
        </thead>
        <tbody>
        <?php foreach ($events as $event): ?>
-            <tr>
+            <tr class="event-row" data-event-id="<?php echo $event['event_id']; ?>" style="cursor: pointer;">
                <td><?php echo htmlspecialchars($event['name']); ?></td>
                <td><?php echo nl2br(htmlspecialchars($event['description'])); ?></td>
                <td><?php echo date('d.m.Y', strtotime($event['start_date'])); ?></td>
                <td><?php echo date('d.m.Y', strtotime($event['end_date'])); ?></td>
+                <td><?php echo number_format($event['ticket_price'], 2, ',', '.'); ?> €</td>
                <td><?php echo (int) $event['max_tickets']; ?></td>
+                <td>
+                    <a href="?controller=Ticket&do=showBuyTicketForm&event_id=<?php echo $event['event_id']; ?>" class="admin-btn">Ticket kaufen</a>
+                </td>
+                <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                    <td>
+                        <a href="?controller=Event&do=showUpdateEvent&event_id=<?php echo $event['event_id']; ?>" class="admin-btn">Bearbeiten</a>
+                        <a href="?controller=Event&do=deleteEvent&event_id=<?php echo $event['event_id']; ?>" class="admin-btn" onclick="return confirm('Wirklich löschen?');">Löschen</a>
+                    </td>
+                <?php endif; ?>
            </tr>
        <?php endforeach; ?>
        </tbody>
    </table>
+    </div>
+    </div>
+    </div>
+
+    <script>
+        document.addEventListener('DOMContentLoaded', function() {
+            const eventRows = document.querySelectorAll('.event-row');
+            
+            eventRows.forEach(function(row) {
+                row.addEventListener('dblclick', function(e) {
+                    // Don't trigger if clicking on a link or button
+                    if (e.target.tagName === 'A' || e.target.tagName === 'BUTTON') {
+                        return;
+                    }
+                    
+                    const eventId = this.getAttribute('data-event-id');
+                    if (eventId) {
+                        window.location.href = 'index.php?controller=Ticket&do=showBuyTicketForm&event_id=' + eventId;
+                    }
+                });
+            });
+        });
+    </script>
 <?php else: ?>
-    <p>Derzeit sind keine Events verfügbar.</p>
-<?php endif; ?>
-<?php
-include dirname(__DIR__).'/footer.phtml';
-?>
+    <p>Derzeit sind keine Ausstellungen verfügbar.</p>
+<?php endif; ?>  
--- a/Views/Event/showUpdateEvent.phtml
+++ b/Views/Event/showUpdateEvent.phtml
@@ -0,0 +1,31 @@
+<div class="inhalt">
+    <div class="form-container">
+        <h1>Event bearbeiten</h1>
+        <?php if (!empty(
+            $errors['event'])): ?>
+            <div class="error-box"><?=htmlspecialchars($errors['event'])?></div>
+        <?php endif; ?>
+        <form class="form-horizontal" action="index.php" method="post">
+            <input type="hidden" name="controller" value="Event">
+            <input type="hidden" name="do" value="updateEvent">
+            <input type="hidden" name="id" value="<?=htmlspecialchars($event['id'] ?? '')?>">
+            <label for="name">Name</label>
+            <input type="text" name="name" id="name" required value="<?=htmlspecialchars($event['name'] ?? '')?>">
+            <label for="start_date">Startdatum</label>
+            <input type="date" name="start_date" id="start_date" required value="<?=htmlspecialchars($event['start_date'] ?? '')?>">
+            <label for="end_date">Enddatum</label>
+            <input type="date" name="end_date" id="end_date" required value="<?=htmlspecialchars($event['end_date'] ?? '')?>">
+            <label for="location_id">Standort</label>
+            <input type="text" name="location_name" value="<?=htmlspecialchars($event['location_name'] ?? '')?>" readonly>
+            <input type="hidden" name="location_id" value="<?=htmlspecialchars($event['location_id'] ?? '')?>">
+            <label for="description">Beschreibung</label>
+            <textarea name="description" id="description" rows="7" required><?=htmlspecialchars($event['description'] ?? '')?></textarea>
+            <label for="max_tickets">Max. Tickets</label>
+            <input type="number" name="max_tickets" id="max_tickets" required value="<?=htmlspecialchars($event['max_tickets'] ?? '')?>">
+            <label for="ticket_price">Ticketpreis</label>
+            <input type="number" step="0.01" name="ticket_price" id="ticket_price" required value="<?=htmlspecialchars($event['ticket_price'] ?? '')?>">
+            <button class="button-register" type="submit">Änderungen speichern</button>
+        </form>
+        <a href="?controller=Event&do=showEvents">Zurück zur Übersicht</a>
+    </div>
+</div>
--- a/Views/Event/showUpdateForwarding.phtml
+++ b/Views/Event/showUpdateForwarding.phtml
@@ -0,0 +1,15 @@
+<div class="inhalt">
+    <div class="update-forwarding">
+        <h2>Editieren...</h2>
+        <p>Sie werden in wenigen Sekunden zur Edit Seite weitergeleitet...</p>
+    </div>
+</div>
+<script>
+    setTimeout(function() {
+        window.location.href = "?controller=Event&do=showUpdateEvent";
+    }, 2000); // 2 Sekunden warten
+</script>
+<noscript>
+    <meta http-equiv="refresh" content="2;url=?controller=Event&do=showUpdateEvent">
+</noscript>
+
--- a/Views/Event/updateEvent.phtml
+++ b/Views/Event/updateEvent.phtml
@@ -1,12 +0,0 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
-
-    <div class="msg">
-        <p>Das Event mit der ID "<?php echo $event_id?>" wurde erfolgreich bearbeitet!</p>
-        <a href="?controller=Event&do=showEvents">Weiter</a>
-    </div>
-
-<?php
-include dirname(__DIR__).'/footer.phtml';
-?>
--- a/Views/Gutschein/createGutschein.phtml
+++ b/Views/Gutschein/createGutschein.phtml
@@ -0,0 +1 @@
+echo "create gutschein"
--- a/Views/Gutschein/createGutscheinForm.phtml
+++ b/Views/Gutschein/createGutscheinForm.phtml
@@ -0,0 +1,19 @@
+<div class="inhalt">
+  <div class="form-container">
+    <h1>Neuen Gutschein anlegen</h1>
+    <form class="form-horizontal" action="index.php" method="post">
+      <input type="hidden" name="controller" value="Gutschein">
+      <input type="hidden" name="do" value="createGutschein">
+      <label for="code">Code</label>
+      <input type="text" id="code" name="code" required>
+      <label for="discount">Rabatt (%)</label>
+      <input type="number" id="discount" name="discount" min="0" max="100" required>
+      <label for="event_id">Event-ID</label>
+      <input type="number" id="event_id" name="event_id" required>
+      <label for="valid_until">Gültig bis</label>
+      <input type="date" id="valid_until" name="valid_until" required>
+      <button class="admin-btn" type="submit">Erstellen</button>
+    </form>
+    <a href="?controller=Gutschein&do=adminVerwaltung" class="admin-btn" style="background:#888;">Abbrechen</a>
+  </div>
+</div> 
--- a/Views/Gutschein/editGutscheinForm.phtml
+++ b/Views/Gutschein/editGutscheinForm.phtml
@@ -0,0 +1,20 @@
+<div class="inhalt">
+  <div class="form-container">
+    <h1>Gutschein bearbeiten</h1>
+    <form class="form-horizontal" action="index.php" method="post">
+      <input type="hidden" name="controller" value="Gutschein">
+      <input type="hidden" name="do" value="updateGutschein">
+      <input type="hidden" name="gutscheinid" value="<?=htmlspecialchars($gutschein['voucher_id'])?>">
+      <label for="code">Code</label>
+      <input type="text" id="code" name="code" required value="<?=htmlspecialchars($gutschein['code'])?>">
+      <label for="discount">Rabatt (%)</label>
+      <input type="number" id="discount" name="discount" min="0" max="100" required value="<?=htmlspecialchars($gutschein['discount'])?>">
+      <label for="event_id">Event-ID</label>
+      <input type="number" id="event_id" name="event_id" required value="<?=htmlspecialchars($gutschein['event_id'])?>">
+      <label for="valid_until">Gültig bis</label>
+      <input type="date" id="valid_until" name="valid_until" required value="<?=htmlspecialchars($gutschein['valid_until'])?>">
+      <button class="admin-btn" type="submit">Speichern</button>
+    </form>
+    <a href="?controller=Gutschein&do=adminVerwaltung" class="admin-btn" style="background:#888;">Abbrechen</a>
+  </div>
+</div> 
--- a/Views/Gutschein/showCreateSuccess.phtml
+++ b/Views/Gutschein/showCreateSuccess.phtml
@@ -0,0 +1,14 @@
+<div class="inhalt">
+  <div class="status-box">
+    <h2>Gutschein erfolgreich erstellt!</h2>
+    <p>Du wirst in wenigen Sekunden zur Übersicht weitergeleitet...</p>
+  </div>
+</div>
+<script>
+  setTimeout(function() {
+    window.location.href = "?controller=Gutschein&do=adminVerwaltung";
+  }, 2000);
+</script>
+<noscript>
+  <meta http-equiv="refresh" content="2;url=?controller=Gutschein&do=adminVerwaltung">
+</noscript> 
--- a/Views/Gutschein/showGutscheine.phtml
+++ b/Views/Gutschein/showGutscheine.phtml
@@ -0,0 +1,35 @@
+<div class="inhalt" style="flex-direction:column;align-items:center;">
+    <div class="gutschein-header-block">
+        <h2>Alle Gutscheine</h2>
+        <a href="?controller=Gutschein&do=createGutscheinForm" class="admin-btn">Neuen Gutschein anlegen</a>
+    </div>
+<?php if (!empty($gutscheine)): ?>
+    <table class="gutschein-table">
+        <thead>
+        <tr>
+            <th>Code</th>
+            <th>Rabatt (%)</th>
+            <th>Event-ID</th>
+            <th>Gültig bis</th>
+            <th>Aktionen</th>
+        </tr>
+        </thead>
+        <tbody>
+        <?php foreach ($gutscheine as $g): ?>
+            <tr>
+                <td><?php echo htmlspecialchars($g['code']); ?></td>
+                <td><?php echo (int)$g['discount']; ?></td>
+                <td><?php echo (int)$g['event_id']; ?></td>
+                <td><?php echo htmlspecialchars($g['valid_until']); ?></td>
+                <td>
+                    <a href="?controller=Gutschein&do=editGutscheinForm&gutscheinid=<?php echo $g['voucher_id']; ?>" class="admin-btn">Bearbeiten</a>
+                    <a href="?controller=Gutschein&do=deleteGutschein&gutscheinid=<?php echo $g['voucher_id']; ?>" class="admin-btn" onclick="return confirm('Wirklich löschen?');">Löschen</a>
+                </td>
+            </tr>
+        <?php endforeach; ?>
+        </tbody>
+    </table>
+<?php else: ?>
+    <p>Keine Gutscheine vorhanden.</p>
+<?php endif; ?>
+</div>
--- a/Views/News/createNewsForm.phtml
+++ b/Views/News/createNewsForm.phtml
@@ -0,0 +1,20 @@
+<div class="inhalt">
+  <div class="form-container">
+    <h1>News erstellen</h1>
+    <?php if (!empty($errors['news'])): ?>
+      <div class="error-box"><?=htmlspecialchars($errors['news'])?></div>
+    <?php endif; ?>
+    <form class="form-horizontal" action="index.php" method="post">
+      <input type="hidden" name="controller" value="News">
+      <input type="hidden" name="do" value="createNews">
+      <label for="name">Titel</label>
+      <input type="text" name="name" id="name" required value="<?=htmlspecialchars($validData['name'] ?? '')?>">
+      <label for="date">Datum</label>
+      <input type="date" name="date" id="date" required value="<?=htmlspecialchars($validData['date'] ?? date('Y-m-d'))?>">
+      <label for="description">Beschreibung</label>
+      <textarea name="description" id="description" rows="7" required><?=htmlspecialchars($validData['description'] ?? '')?></textarea>
+      <button class="button-register" type="submit">News speichern</button>
+    </form>
+    <a href="?controller=News&do=showNews">Zurück zur Übersicht</a>
+  </div>
+</div>
--- a/Views/News/editNewsForm.phtml
+++ b/Views/News/editNewsForm.phtml
@@ -0,0 +1,21 @@
+<div class="inhalt">
+  <div class="form-container">
+    <h1>News bearbeiten</h1>
+    <?php if (!empty($errors['news'])): ?>
+      <div class="error-box"><?=htmlspecialchars($errors['news'])?></div>
+    <?php endif; ?>
+    <form class="form-horizontal" action="index.php" method="post">
+      <input type="hidden" name="controller" value="News">
+      <input type="hidden" name="do" value="updateNews">
+      <input type="hidden" name="id" value="<?=htmlspecialchars($id ?? '')?>">
+      <label for="name">Titel</label>
+      <input type="text" name="name" id="name" required value="<?=htmlspecialchars($validData['name'] ?? '')?>">
+      <label for="date">Datum</label>
+      <input type="date" name="date" id="date" required value="<?=htmlspecialchars($validData['date'] ?? date('Y-m-d'))?>">
+      <label for="description">Beschreibung</label>
+      <textarea name="description" id="description" rows="7" required><?=htmlspecialchars($validData['description'] ?? '')?></textarea>
+      <button class="button-register" type="submit">Änderungen speichern</button>
+    </form>
+    <a href="?controller=News&do=showNews">Zurück zur Übersicht</a>
+  </div>
+</div>
--- a/Views/News/showCreateSuccess.phtml
+++ b/Views/News/showCreateSuccess.phtml
@@ -0,0 +1,14 @@
+<div class="inhalt">
+  <div class="status-box">
+    <h2>News erfolgreich erstellt!</h2>
+    <p>Du wirst in wenigen Sekunden zur Übersicht weitergeleitet...</p>
+  </div>
+</div>
+<script>
+  setTimeout(function() {
+    window.location.href = "?controller=News&do=showNews";
+  }, 2000);
+</script>
+<noscript>
+  <meta http-equiv="refresh" content="2;url=?controller=News&do=showNews">
+</noscript>
--- a/Views/News/showDeleteSuccess.phtml
+++ b/Views/News/showDeleteSuccess.phtml
@@ -0,0 +1,14 @@
+<div class="inhalt">
+  <div class="status-box">
+    <h2>News erfolgreich gelöscht!</h2>
+    <p>Du wirst in wenigen Sekunden zur Übersicht weitergeleitet...</p>
+  </div>
+</div>
+<script>
+  setTimeout(function() {
+    window.location.href = "?controller=News&do=showNews";
+  }, 2000);
+</script>
+<noscript>
+  <meta http-equiv="refresh" content="2;url=?controller=News&do=showNews">
+</noscript>
--- a/Views/News/showEditSuccess.phtml
+++ b/Views/News/showEditSuccess.phtml
@@ -0,0 +1,14 @@
+<div class="inhalt">
+  <div class="status-box">
+    <h2>News erfolgreich bearbeitet!</h2>
+    <p>Du wirst in wenigen Sekunden zur Übersicht weitergeleitet...</p>
+  </div>
+</div>
+<script>
+  setTimeout(function() {
+    window.location.href = "?controller=News&do=showNews";
+  }, 2000);
+</script>
+<noscript>
+  <meta http-equiv="refresh" content="2;url=?controller=News&do=showNews">
+</noscript>
--- a/Views/News/showNews.phtml
+++ b/Views/News/showNews.phtml
@@ -1,29 +1,40 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
-<h2>Alle News</h2>
 <?php if (!empty($news)): ?>
-    <table>
-        <thead>
-        <tr>
-            <th>Titel</th>
-            <th>Beschreibung</th>
-            <th>Datum</th>
-        </tr>
-        </thead>
-        <tbody>
+    <div class="inhalt">
+    <div class="content-container">
+        <div class="news-header">
+            <h2>Alle Infos</h2>
+            <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                <a href="?controller=News&do=createNewsForm" class="admin-btn">News erstellen</a>
+            <?php endif; ?>
+        </div>
+    <div class="news-cards">
        <?php foreach ($news as $item): ?>
-            <tr>
-                <td><?php echo htmlspecialchars($item['name']); ?></td>
-                <td><?php echo nl2br(htmlspecialchars($item['description'])); ?></td>
-                <td><?php echo date('d.m.Y', strtotime($item['date'])); ?></td>
-            </tr>
+            <div class="card">
+                <h3><?=htmlspecialchars($item['name'])?></h3>
+                <div class="news-date"><?=date('d.m.Y', strtotime($item['date']))?></div>
+                <div class="news-desc">
+                    <?php
+                        $desc = htmlspecialchars($item['description']);
+                        if (mb_strlen($desc) > 255) {
+                            $short = mb_substr($desc, 0, 255) . '...';
+                            echo nl2br($short) . ' <a href="?controller=News&do=showNewsDetail&id=' . $item['news_id'] . '">mehr lesen</a>';
+                        } else {
+                            echo nl2br($desc);
+                        }
+                    ?>
+                </div>
+                <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                    <div class="news-card-actions">
+                        <a href="?controller=News&do=editNewsForm&id=<?=$item['news_id']?>" class="admin-btn">Bearbeiten</a>
+                        <a href="?controller=News&do=deleteNews&id=<?=$item['news_id']?>" class="admin-btn" onclick="return confirm('Wirklich löschen?');">Löschen</a>
+                    </div>
+                <?php endif; ?>
+            </div>
        <?php endforeach; ?>
-        </tbody>
-    </table>
+    </div>
 <?php else: ?>
    <p>Derzeit sind keine News verfügbar.</p>
 <?php endif; ?>
-<?php
-include dirname(__DIR__).'/footer.phtml';
-?>
+</div>
+    </div>
+    </div>  
--- a/Views/News/showNewsDetail.phtml
+++ b/Views/News/showNewsDetail.phtml
@@ -0,0 +1,10 @@
+<div class="inhalt">
+    <div class="content-container">
+        <div class="card card--wide">
+            <h2><?=htmlspecialchars($news['name'])?></h2>
+            <div class="news-date"><?=date('d.m.Y', strtotime($news['date']))?></div>
+            <div class="news-desc"><?=nl2br(htmlspecialchars($news['description']))?></div>
+            <a href="?controller=News&do=showNews" class="admin-btn">Zurück zur Übersicht</a>
+        </div>
+    </div>
+</div> 
--- a/Views/Profile/showProfile.phtml
+++ b/Views/Profile/showProfile.phtml
--- a/Views/Standort/showStandorte.phtml
+++ b/Views/Standort/showStandorte.phtml
@@ -1,7 +1,8 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
-<h2>Unsere Standorte</h2>
+<?php include dirname(__DIR__) . '/header.phtml'; ?>
+
+<div class="inhalt">
+    <h2>Unsere Standorte</h2>
+
 <?php if (!empty($standorte)): ?>
    <table border="1" cellpadding="8" cellspacing="0">
        <thead>
@@ -18,12 +19,12 @@ include dirname(__DIR__).'/header.phtml';
        <tbody>
        <?php foreach ($standorte as $standort): ?>
            <tr>
-                <td><?php echo htmlspecialchars($standort['strasse']); ?></td>
-                <td><?php echo htmlspecialchars($standort['hausnr']); ?></td>
-                <td><?php echo htmlspecialchars($standort['plz']); ?></td>
-                <td><?php echo htmlspecialchars($standort['ort']); ?></td>
-                <td><?php echo htmlspecialchars($standort['land']); ?></td>
-                <td><?php echo htmlspecialchars($standort['tel']); ?></td>
+                <td><?php echo htmlspecialchars($standort['street']); ?></td>
+                <td><?php echo htmlspecialchars($standort['house_number']); ?></td>
+                <td><?php echo htmlspecialchars($standort['postal_code']); ?></td>
+                <td><?php echo htmlspecialchars($standort['city']); ?></td>
+                <td><?php echo htmlspecialchars($standort['country']); ?></td>
+                <td><?php echo htmlspecialchars($standort['phone']); ?></td>
                <td><?php echo htmlspecialchars($standort['email']); ?></td>
            </tr>
        <?php endforeach; ?>
@@ -32,6 +33,5 @@ include dirname(__DIR__).'/header.phtml';
 <?php else: ?>
    <p>Keine Standorte gefunden.</p>
 <?php endif; ?>
-<?php
-include dirname(__DIR__).'/footer.phtml';
-?>
+</div>
+<?php include dirname(__DIR__) . '/footer.phtml'; ?>
--- a/Views/Ticket/buyTicket.phtml
+++ b/Views/Ticket/buyTicket.phtml
@@ -1,12 +1,27 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
-
-    <div class="msg">
-        <p>Ihr Ticket für das Event "<?php echo $event['name']?>" wurde erfolgreich gekauft!</p>
-        <a href="?controller=Welcome&do=showWelcome">Weiter</a>
+<div class="inhalt">
+    <div class="form-container">
+        <h1>Ticket erfolgreich gekauft!</h1>
+        
+        <?php if (isset($event) && isset($ticket_id)): ?>
+            <div class="status-box">
+                <h2><?= htmlspecialchars($event['name']) ?></h2>
+                <p><strong>Ticket-ID:</strong> #<?= $ticket_id ?></p>
+                <p><strong>Kaufdatum:</strong> <?= date('d.m.Y', strtotime($purchase_date)) ?></p>
+                <p><strong>Gültig bis:</strong> <?= date('d.m.Y', strtotime($valid_until)) ?></p>
+                <p><strong>Preis:</strong> <?= number_format($event['ticket_price'], 2, ',', '.') ?> €</p>
+                <p><strong>Datum:</strong> <?= date('d.m.Y', strtotime($event['start_date'])) ?> - <?= date('d.m.Y', strtotime($event['end_date'])) ?></p>
+            </div>
+            
+            <div style="text-align:center; margin-top: 1.5em;">
+                <a href="?controller=Ticket&do=showTickets" class="admin-btn">Meine Tickets anzeigen</a>
+                <br><br>
+                <a href="?controller=Event&do=showEvents">Zurück zu den Events</a>
+            </div>
+        <?php else: ?>
+            <div class="error-box">Fehler beim Anzeigen der Ticket-Details.</div>
+            <div style="text-align:center; margin-top: 1.5em;">
+                <a href="?controller=Event&do=showEvents">Zurück zu den Events</a>
+            </div>
+        <?php endif; ?>
    </div>
-
-<?php
-include dirname(__DIR__).'/footer.phtml';
-?>
+</div>
--- a/Views/Ticket/showBuyTicketForm.phtml
+++ b/Views/Ticket/showBuyTicketForm.phtml
@@ -0,0 +1,48 @@
+<div class="inhalt">
+    <div class="form-container">
+        <h1>Ticket kaufen</h1>
+        
+        <?php if (isset($event)): ?>
+            <div class="event-details">
+                <h2><?= htmlspecialchars($event['name']) ?></h2>
+                <p><strong>Beschreibung:</strong> <?= nl2br(htmlspecialchars($event['description'])) ?></p>
+                <p><strong>Datum:</strong> <?= date('d.m.Y', strtotime($event['start_date'])) ?> - <?= date('d.m.Y', strtotime($event['end_date'])) ?></p>
+                <p><strong>Preis:</strong> <?= number_format($event['ticket_price'], 2, ',', '.') ?> €</p>
+                <p><strong>Max. Tickets:</strong> <?= (int) $event['max_tickets'] ?></p>
+            </div>
+            
+            <?php if ($hasTicket): ?>
+                <div class="status-box">
+                    <p>Sie haben bereits ein Ticket für dieses Event gekauft.</p>
+                    <a href="?controller=Ticket&do=showTickets" class="admin-btn">Meine Tickets anzeigen</a>
+                </div>
+            <?php else: ?>
+                <form class="form-horizontal" action="index.php" method="post">
+                    <input type="hidden" name="controller" value="Ticket">
+                    <input type="hidden" name="do" value="buyTicket">
+                    <input type="hidden" name="event_id" value="<?= $event['event_id'] ?>">
+                    
+                    <p>Möchten Sie ein Ticket für dieses Event kaufen?</p>
+                    <p><strong>Preis:</strong> <?= number_format($event['ticket_price'], 2, ',', '.') ?> €</p>
+                    
+                    <button class="button-login" type="submit">Jetzt kaufen</button>
+                </form>
+                
+                <div style="text-align:center; margin-top: 1.5em;">
+                    <a href="?controller=Event&do=showEvents">Zurück zu den Events</a>
+                </div>
+            <?php endif; ?>
+        <?php else: ?>
+            <div class="error-box">Event nicht gefunden.</div>
+            <div style="text-align:center; margin-top: 1.5em;">
+                <a href="?controller=Event&do=showEvents">Zurück zu den Events</a>
+            </div>
+        <?php endif; ?>
+    </div>
+</div>
+
+<?php if (isset($redirect)): ?>
+<script>
+    window.location.href = '<?= $redirect ?>';
+</script>
+<?php endif; ?>
--- a/Views/Tickets/showTickets.phtml
+++ b/Views/Tickets/showTickets.phtml
@@ -0,0 +1,53 @@
+<div class="inhalt">
+    <div class="content-container">
+        <div class="event-header">
+            <h2>Meine Tickets</h2>
+        </div>
+        
+        <?php if (!empty($tickets)): ?>
+            <div class="event-container-inhalt">
+                <table>
+                    <thead>
+                        <tr>
+                            <th>Event</th>
+                            <th>Datum</th>
+                            <th>Standort</th>
+                            <th>Preis</th>
+                            <th>Kaufdatum</th>
+                            <th>Gültig bis</th>
+                            <th>Aktionen</th>
+                        </tr>
+                    </thead>
+                    <tbody>
+                    <?php foreach ($tickets as $ticket): ?>
+                        <tr>
+                            <td><?= htmlspecialchars($ticket['event_name']) ?></td>
+                            <td><?= date('d.m.Y', strtotime($ticket['start_date'])) ?> - <?= date('d.m.Y', strtotime($ticket['end_date'])) ?></td>
+                            <td><?= htmlspecialchars($ticket['location_street'] . ' ' . $ticket['location_house_number'] . ', ' . $ticket['location_city']) ?></td>
+                            <td><?= number_format($ticket['ticket_price'], 2, ',', '.') ?> €</td>
+                            <td><?= date('d.m.Y', strtotime($ticket['purchase_date'])) ?></td>
+                            <td><?= date('d.m.Y', strtotime($ticket['valid_until'])) ?></td>
+                            <td>
+                                <a href="?controller=Ticket&do=deleteTicket&ticket_id=<?= $ticket['ticket_id'] ?>" 
+                                   class="admin-btn" 
+                                   onclick="return confirm('Ticket wirklich löschen?')">Löschen</a>
+                            </td>
+                        </tr>
+                    <?php endforeach; ?>
+                    </tbody>
+                </table>
+            </div>
+        <?php else: ?>
+            <div class="status-box">
+                <p>Sie haben noch keine Tickets gekauft.</p>
+                <a href="?controller=Event&do=showEvents" class="admin-btn">Events anzeigen</a>
+            </div>
+        <?php endif; ?>
+    </div>
+</div>
+
+<?php if (isset($redirect)): ?>
+<script>
+    window.location.href = '<?= $redirect ?>';
+</script>
+<?php endif; ?>
--- a/Views/Voucher/createVoucher.phtml
+++ b/Views/Voucher/createVoucher.phtml
@@ -1,7 +0,0 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
-<!-- Gutschein-Erstellungsformular oder Inhalt hier einfügen -->
-<?php
-include dirname(__DIR__).'/footer.phtml';
-?>
--- a/Views/Voucher/showVouchers.phtml
+++ b/Views/Voucher/showVouchers.phtml
@@ -1,37 +0,0 @@
-<?php
-include dirname(__DIR__).'/header.phtml';
-?>
-<h2>Alle Gutscheine</h2>
-<a href="?controller=Voucher&do=createVoucherForm">Neuen Gutschein anlegen</a>
-<?php if (!empty($vouchers)): ?>
-    <table border="1" cellpadding="8" cellspacing="0">
-        <thead>
-        <tr>
-            <th>Code</th>
-            <th>Rabatt (%)</th>
-            <th>Event-ID</th>
-            <th>Gültig bis</th>
-            <th>Aktionen</th>
-        </tr>
-        </thead>
-        <tbody>
-        <?php foreach ($vouchers as $v): ?>
-            <tr>
-                <td><?php echo htmlspecialchars($v['code']); ?></td>
-                <td><?php echo (int)$v['discount']; ?></td>
-                <td><?php echo (int)$v['event_id']; ?></td>
-                <td><?php echo htmlspecialchars($v['valid_until']); ?></td>
-                <td>
-                    <a href="?controller=Voucher&do=editVoucherForm&id=<?php echo $v['voucher_id']; ?>">Bearbeiten</a> |
-                    <a href="?controller=Voucher&do=deleteVoucher&id=<?php echo $v['voucher_id']; ?>" onclick="return confirm('Wirklich löschen?');">Löschen</a>
-                </td>
-            </tr>
-        <?php endforeach; ?>
-        </tbody>
-    </table>
-<?php else: ?>
-    <p>Keine Gutscheine vorhanden.</p>
-<?php endif; ?>
-<?php
-include dirname(__DIR__).'/footer.phtml';
-?>
--- a/Views/header.phtml
+++ b/Views/header.phtml
@@ -1,30 +1,43 @@
 <!DOCTYPE html>
-<html lang="de">
+<html lang="HTML-5">
    <head>
-        <title>Bib Arts</title>
+        <title>VR Contact</title>
        <meta charset="UTF-8" />
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
-        <link href="/bibarts/CSS/style.css" rel="stylesheet" type="text/css" />
+        <link href="CSS/style.css" rel="stylesheet" type="text/css" />
    </head>
    <body>
-    <div id="wrapper">
-        <nav id="navigation">
-            <div class="link-container">
-                <div id="logo" ><a class="link-logo" href="#"></a></div>
-                <a id="link-ausstellungen" class="links" href="?controller=Event&do=showEvents">Ausstellungen</a>
-                <a id="link-tickets" class="links" href="#">Tickets</a>
-                <a id="link-news" class="links" href="/bibarts/?controller=News&do=showNews">News</a>
-                <a id="link-profil" class="links" href="?controller=Contact&do=showContactForm">Profil</a>
-                <div id="profile-picture"></div>
+    <nav id="navigation">
+        <div class="link-container">
+            <div id="logo" ><a class="link-logo" href="#"></a></div>
+            <button id="nav-toggle-btn" aria-label="Menü ein-/ausklappen">&#9660;</button>
+            <div class="nav-links">
                <?php if (isset($_SESSION['user'])): ?>
-                    <form method="post" action="/bibarts/index.php" style="display:inline;">
-                        <input type="hidden" name="controller" value="Auth">
-                        <input type="hidden" name="do" value="logout">
-                        <button type="submit" class="links" style="background:none;border:none;cursor:pointer;">Logout</button>
-                    </form>
+                    <a id="link-tickets" class="links" href="?controller=Event&do=showEvents">Event</a>
+                    <a id="link-infos" class="links" href="?controller=News&do=showNews">Infos</a>
+                    <a id="link-tickets" class="links" href="?controller=Tickets&do=showTickets">Tickets</a>
+                    <?php if (isset($_SESSION['is_admin']) && $_SESSION['is_admin']): ?>
+                        <a id="link-gutscheinverwaltung" class="links" href="?controller=Gutschein&do=adminVerwaltung">Gutscheine</a>
+                    <?php endif; ?>
+                    <a id="link-logout" class="links" href="?controller=Auth&do=logout">Logout</a>
                <?php else: ?>
-                    <a class="links" href="?controller=Auth&do=showLoginForm">Login</a>
+                    <a id="link-login" class="links" href="?controller=Auth&do=showLoginForm">Login</a>
+                    <a id="link-register" class="links" href="?controller=Auth&do=showRegistrationForm">Register</a>
                <?php endif; ?>
+                <div id="profile-picture"></div>
            </div>
-        </nav>
-    </div>
+        </div>
+    </nav>
+    <script>
+    document.addEventListener('DOMContentLoaded', function() {
+        var btn = document.getElementById('nav-toggle-btn');
+        var links = document.querySelector('.nav-links');
+        if (btn && links) {
+            btn.addEventListener('click', function() {
+                links.classList.toggle('open');
+                btn.classList.toggle('open');
+                btn.innerHTML = links.classList.contains('open') ? '&#9650;' : '&#9660;';
+            });
+        }
+    });
+    </script>
--- a/bibarts.sql
+++ b/bibarts.sql
@@ -108,5 +108,24 @@ VALUES
 -- News-Daten
 INSERT INTO news (name, description, date)
 VALUES
-    ('Neuer Standort eröffnet', 'Unsere Galerie in Köln ist jetzt geöffnet!', '2025-06-01'),
-    ('Frühbucher-Rabatt', 'Sichern Sie sich jetzt 15% Rabatt auf unsere Sommerausstellung.', '2025-05-20');
+    ('Branchen-News: bibarts schließt strategische Partnerschaft mit regionalen Veranstaltern', 'Die aufstrebende Ticketplattform bibarts hat heute eine Partnerschaft mit mehreren regionalen Veranstaltungsagenturen in Süddeutschland bekannt gegeben. Ziel der Zusammenarbeit ist die gemeinsame Digitalisierung lokaler Events und die Vereinfachung des Ticketverkaufsprozesses für kleinere Veranstalter.
+
+„Viele unserer Kunden sind Künstlerkollektive, Kulturvereine oder Betreiber kleiner Bühnen – für sie war der Einstieg in den digitalen Ticketverkauf bisher kompliziert oder zu teuer,“ erklärt der Vertriebsleiter von bibarts.
+
+Durch die Partnerschaft erhalten Veranstalter Zugang zu einem vereinfachten Onboarding-System, einer automatisierten Veranstaltungsverwaltung und einem integrierten Zahlungssystem. bibarts stellt zudem eigene Event-Widgets bereit, die direkt in bestehende Websites eingebettet werden können.
+
+Die ersten Live-Tests starten im Juli auf Veranstaltungen in Augsburg, Regensburg und Rosenheim. Bei Erfolg soll das Modell bundesweit ausgerollt werden. Marktanalysten sehen in bibarts einen ernstzunehmenden Konkurrenten für etablierte Anbieter wie Eventim oder Reservix – vor allem im Bereich Nischen- und Indie-Veranstaltungen.', '2025-06-01'),
+    ('bibarts bringts: Neue Ticketplattform sorgt für Chaos auf der Poetry-Slam-Bühne – aber im besten Sinne', '„Niemand hat damit gerechnet, dass Poetry & Pizza Vol. 7 restlos ausverkauft sein würde – außer vielleicht bibarts.“ So beschreibt der Veranstalter des beliebten Slam-Formats in Hamburg-Altona die Überraschung des Abends.
+
+Dank der neuen Ticketplattform bibarts, die laut Insidern „selbst mit einem Toaster kompatibel“ sei, wurden innerhalb von 48 Stunden über 300 Tickets verkauft – komplett online, ohne Papierkram, ohne Warteschlangen.
+
+Doch die größte Überraschung: Die Slammer wurden beim Einlass mit QR-Codes auf Bananen begrüßt – ein kreatives Gimmick von bibarts’ Entwicklerteam, das einen Testlauf für „alternative Ticketträger“ durchführt. Laut Veranstalter kamen fast 30 Gäste mit beschrifteten Bananen zum Einlass – der Scanner erkannte alle korrekt. 🍌✅
+
+„Wenn Technik und Kultur auf diese Weise verschmelzen, haben wir etwas richtig gemacht,“ scherzte ein Sprecher von bibarts nach der Show. Auch wenn die Banane wohl kein langfristiges Ticketmedium wird, sei der Abend ein voller Erfolg gewesen – sowohl auf als auch vor der Bühne.', '2025-05-20'),
+('bibarts launcht Wartelistenfunktion – und füllt plötzlich leergebliebene Reihen', 'Mit einem neuen Feature sorgt bibarts erneut für Schlagzeilen: Die Plattform hat kürzlich eine intelligente Wartelistenfunktion eingeführt, die automatisch frei gewordene Plätze an Interessierte nachbesetzt – ein Gamechanger für spontane Events und kurzfristige Absagen.
+
+Beim ersten Einsatz bei einem Impro-Theater in Köln meldeten sich über 40 Personen für die Warteliste. Als drei Gruppen krankheitsbedingt absagen mussten, sprang das System ein – und verschickte automatisch neue Tickets an Wartende. Innerhalb von 15 Minuten waren die Plätze wieder gefüllt.
+
+„Wir konnten dadurch die Show vor vollem Haus spielen – ohne Einnahmeverluste“, sagt die Theaterleitung. Das Feature basiert auf einem Prioritätssystem, das Fairness und Schnelligkeit kombiniert und sogar per SMS benachrichtigt.
+
+bibarts plant, die Funktion in Zukunft noch zu erweitern – etwa mit Echtzeit-Übersicht für Veranstalter oder integrierter Last-Minute-Werbung.', '2025-06-20');
--- a/index.php
+++ b/index.php
@@ -1,45 +1,48 @@
-<?php 
+<?php
+session_start();
+include 'Views/header.phtml';
+?>
+    <?php
+    spl_autoload_register(function ($className) {
+        if (substr($className, 0, 5) !== 'Blog\\') {
+                // not our business
+                return;
+        }

-session_start();;;
+        $fileName = __DIR__.'/'.str_replace('\\', DIRECTORY_SEPARATOR, substr($className, 5)).'.php';

-spl_autoload_register(function ($className) {
-    if (substr($className, 0, 5) !== 'Blog\\') {
-            // not our business
-            return;
+        if (file_exists($fileName)) {
+                include $fileName;
+        }
+    });    
+    
+    
+    $controllerName = "";
+    $doMethodName = "";
+    if ($_SERVER["REQUEST_METHOD"] == "POST") {
+        $controllerName = isset($_POST['controller']) && $_POST['controller'] ? $_POST['controller'] : "Welcome";
+        $doMethodName = isset($_POST['do']) && $_POST['do'] ? $_POST['do'] : "showWelcome";
+    } else {
+        $controllerName = isset($_GET['controller']) && $_GET['controller'] ? $_GET['controller'] : "Welcome";
+        $doMethodName = isset($_GET['do']) && $_GET['do'] ? $_GET['do'] : "showWelcome";
    }

-    $fileName = __DIR__.'/'.str_replace('\\', DIRECTORY_SEPARATOR, substr($className, 5)).'.php';
+    $controllerClassName = 'Blog\\Controller\\'.ucfirst($controllerName).'Controller';

-    if (file_exists($fileName)) {
-            include $fileName;
+    if (method_exists($controllerClassName, $doMethodName)) {
+        $view = new \Blog\Library\View(__DIR__.DIRECTORY_SEPARATOR.'Views'
+                    , ucfirst($controllerName), $doMethodName);
+        
+        $controller = new $controllerClassName($view);
+        $controller->$doMethodName();
+
+        $view->render();
+
+    } else {
+        new \Blog\Library\ErrorMsg('Page not found: '.$controllerClassName.'::'.$doMethodName); 
    }
-});    
-    
-    
-$controllerName = "";
-$doMethodName = "";
-if ($_SERVER["REQUEST_METHOD"] == "POST") {
-    $controllerName = isset($_POST['controller']) && $_POST['controller'] ? $_POST['controller'] : "Auth";
-    $doMethodName = isset($_POST['do']) && $_POST['do'] ? $_POST['do'] : "showAuthForm";
-} else {
-    $controllerName = isset($_GET['controller']) && $_GET['controller'] ? $_GET['controller'] : "Auth";
-    $doMethodName = isset($_GET['do']) && $_GET['do'] ? $_GET['do'] : "showAuthForm";
-}
-
-$controllerClassName = 'Blog\\Controller\\'.ucfirst($controllerName).'Controller';
-
-if (method_exists($controllerClassName, $doMethodName)) {
-    $view = new \Blog\Library\View(__DIR__.DIRECTORY_SEPARATOR.'Views'
-                , ucfirst($controllerName), $doMethodName);
-    
-    $controller = new $controllerClassName($view);
-    $controller->$doMethodName();
-
-    $view->render();
-
-} else {
-    new \Blog\Library\ErrorMsg('Page not found: '.$controllerClassName.'::'.$doMethodName); 
-}
-  
+    ?>
+<?php
+include 'Views/footer.phtml';
 ?>
Author	SHA1	Message	Date
pbbfa23cse	d70c21c77f	removed link profil	2025-07-11 23:45:26 +02:00
pbbfa23cse	35fff7cc59	Merge remote-tracking branch 'origin/frontendBackendFinal' into frontendBackendFinal	2025-07-11 23:35:46 +02:00
pbbfa23cse	ab1afa29a3	good changes	2025-07-11 23:33:11 +02:00
pbbfa23cse	baf57fec49	Ki irgendwas gefixxed	2025-07-11 23:21:08 +02:00
pbbfa23cse	906ca76332	fixed redirect error and added button to events.	2025-07-11 23:09:17 +02:00
pbbfa23cse	f780888107	fixed the redirect to handle everything properly	2025-07-11 22:55:51 +02:00
pbbfa23cse	a881b3933d	Fixed error and Implemented BuyTickets views Model and Controller. Added Button to Events and Added Styles	2025-07-11 22:43:29 +02:00
pbbfa23cse	c306a59fec	Fixed delete and update error.	2025-07-11 21:22:22 +02:00
pbbfa23cse	7787cb2956	Added Create, Update and Delete to Events and added styles.	2025-07-11 21:16:42 +02:00
Karsten Tlotzek	d4534f9a11	CSS-Styles für Karten und Nachrichten aktualisiert: Flexbox-Layout hinzugefügt, Schriftgrößen und Abstände angepasst, sowie Farbänderungen für Statusboxen vorgenommen.	2025-07-11 18:24:40 +02:00
Karsten Tlotzek	07eba7762c	News Überschrift und Erstellen Button zentriert	2025-07-11 18:10:06 +02:00
Karsten Tlotzek	b89714a6e7	Gutscheinverwaltung für Admins fertig gemacht: Übersicht, Erstellen & Bearbeiten im einheitlichen Card-Design Routing-Fehler nach Aktionen gefixt (Redirects & Erfolgsseiten) Gutscheine-Link in Navigation nur für Admins	2025-07-11 18:06:27 +02:00
Karsten Tlotzek	6cb75b0c1d	News-Ansicht aufgeräumt & vereinheitlicht - CSS-Klassen und Benennungen überall einheitlich gemacht (news-card, login-success usw.) - Unnötige CSS-Regeln rausgeschmissen, Code jetzt viel schlanker - Cards sehen jetzt überall gleich aus, egal wie viel Text drinsteht - „Mehr lesen“-Link besser sichtbar gemacht - Bugfix: Langer News-Text läuft nicht mehr aus der Card raus - Generell: Viel code aufgeräumt, damit alles schicker und übersichtlicher ist!	2025-07-11 17:26:23 +02:00
Karsten Tlotzek	7280cb0246	News-Bearbeitung gefixt: Feldnamen im Model an Controller & Formular angepasst, keine Notices mehr beim Editieren.	2025-07-08 10:38:27 +02:00
Karsten Tlotzek	5f3ac9f78d	Merge branch 'frontendBackendFinal' of https://git.bib.de/PBBFA23CSE/Bib-Arts into frontendBackendFinal	2025-07-08 10:29:03 +02:00
Karsten Tlotzek	775b752d59	News-Admin-Workflow aufgebohrt: - News können jetzt als Admin erstellt und gelöscht werden, mit Zwischenseite zur Bestätigung. - Fehler bei den Feldnamen im Model gefixt. - Nach dem Anlegen/Löschen gibt’s jetzt wie beim Login/Registrieren eine kurze Erfolgsmeldung und automatischen Redirect. - Includes und Redirects aufgeräumt, damit keine Warnungen mehr kommen.	2025-07-08 10:12:07 +02:00
pbbfa23cse	3faec473ef	Added Styles to Create and Update Event	2025-07-07 20:32:35 +02:00
pbbfa23cse	a9944259b6	vorlage für create und update für event gemacht.	2025-07-07 14:50:05 +02:00
Karsten Tlotzek	4f0f1e5f6d	Navigationsleiste angepasst, je nach login zustand	2025-07-07 14:40:55 +02:00
Karsten Tlotzek	e68c86c93e	Merge branch 'frontendBackendFinal' of https://git.bib.de/PBBFA23CSE/Bib-Arts into frontendBackendFinal	2025-07-07 14:38:36 +02:00
Karsten Tlotzek	a9997b3c63	Registrierung und Login aufgeräumt: Felder und Fehler angepasst, Formulardaten bleiben bei Fehlern erhalten, Navigation zeigt jetzt nur noch passende Links je nach Login-Status, Passwort-Fehler verständlich auf Deutsch. Alles einheitlich und benutzerfreundlich gemacht!	2025-07-07 14:31:32 +02:00
Max Schneider	9ce7a6cfd3	fixed infos	2025-07-07 14:26:26 +02:00
Max Schneider	ca757d1723	Merge branch 'frontendBackendFinal' of https://git.bib.de/PBBFA23CSE/Bib-Arts into frontendBackendFinal	2025-07-07 14:22:53 +02:00
Max Schneider	717d361dbb	showNews angebindet und zum laufen gebracht.	2025-07-07 14:19:52 +02:00
Karsten Tlotzek	404e846418	logout von form zu button mit get request geändert	2025-07-07 12:46:49 +02:00
Karsten Tlotzek	3ce61ace17	"Zwischen-Views" erstellt für Weiterleitung nach Login/Logout. Views einheitlich im div container class="inhalt". Error message nach fehlerhaftem login.	2025-07-07 12:43:25 +02:00
Max Schneider	3dc68dd0bc	forgot pw try to fix	2025-07-07 11:24:11 +02:00
Max Schneider	b9fc6bcdd5	fixed Registration	2025-07-07 11:20:57 +02:00
Max Schneider	a50b48592b	fixed event	2025-07-07 11:15:49 +02:00
pbbfa23cse	1691370db6	Merge branch 'frontendBackendFinal' of https://git.bib.de/PBBFA23CSE/Bib-Arts into frontendBackendFinal	2025-07-07 11:04:31 +02:00
pbbfa23cse	a6b672ee7e	Refactor Controller and models anhand der bibarts.sql und unbrauchbare Controllers und Models entfernt.	2025-07-07 11:03:59 +02:00
Karsten Tlotzek	97c03d817e	Initiales .sql script angepasst	2025-07-07 11:03:51 +02:00
Karsten Tlotzek	877be4e567	Login Form updated	2025-07-07 11:01:54 +02:00
pbbfa23cse	ef3349c6e4	fixed login and register with right linktos	2025-07-07 10:42:58 +02:00
Karsten Tlotzek	415d8120e5	AuthController hinzugefügt	2025-07-07 10:35:49 +02:00
Karsten Tlotzek	a4eef4e4e3	AuthController und methoden hinzugefügt.	2025-07-07 10:34:37 +02:00
pbbfa23cse	37ee931954	Merge branch 'backend' into frontendBackendFinal	2025-07-07 10:06:42 +02:00
pbbfa23cse	c6358b5ea6	fixed the warning	2025-07-07 09:13:05 +02:00
pbbfa23cse	cc4bc791c9	added showTickets.phtml and added the TicketsController.	2025-07-07 09:08:39 +02:00
pbbfa23cse	586322a189	fixed the <html> and <body> tags in all views	2025-07-07 08:42:26 +02:00
pbbfa23cse	1416fd7fa0	Refactor all	2025-07-03 15:51:04 +02:00
PBBFA23CSE	16a91cc028	dingdagabum	2025-06-30 14:57:32 +02:00