Files
paul a3546b4c01 Security hardening: env-based config, CSRF protection, secure code generation, plus presenter management and email communications system
- Move all credentials from hardcoded to .env with python-dotenv (add .env.example template and .gitignore)
- Add CSRF token generation and validation on all state-changing requests
- Replace random.choices with secrets.choice for all secure code generation
- Add session cookie security headers (HttpOnly, Secure, SameSite)
- Add presenter management: assign/remove presenters to breakout sessions, presenter QR scanning
- Add email communications system: templates per event, custom email sending, sent email tracking
- Add staff/organizer profile pages with staff code display
- New DB tables: event_email_templates, sent_emails, user_communications
- New DB columns: staff.reminder_count/reminder_dates, breakout_session_organizers.presenter_code
- Expand English translation strings across all new features

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-26 20:34:48 +00:00

41 lines
1.5 KiB
HTML

{% extends "base.html" %}
{% block title %}{{ 'staff_dashboard'|t }} - NetEvents{% endblock %}
{% block content %}
<div class="staff-events-dashboard">
<div class="staff-header">
<h1>{{ 'staff_dashboard'|t }}</h1>
<p>{{ 'welcome'|t }}, {{ staff_name }}</p>
</div>
<section class="section-box card">
<h2>{{ 'select_event'|t }}</h2>
{% if events %}
<div class="events-list">
{% for event in events %}
<div class="event-card card-static">
<div class="event-info">
<h3>{{ event.name }}</h3>
<p><strong>{{ 'location'|t }}:</strong> {{ event.location }}</p>
<p><strong>{{ 'start'|t }}:</strong> {{ event.start_time|localized_date if event.start_time else 'TBD' }}</p>
</div>
<div class="event-actions">
<a href="{{ url_for('staff_event_dashboard', event_id=event.id) }}" class="btn btn-primary btn-lg"><i data-lucide="scan-line"></i> {{ 'start_qr_scanner'|t }}</a>
</div>
</div>
{% endfor %}
</div>
{% else %}
<p class="no-events"><i data-lucide="calendar"></i> {{ 'no_events_assigned'|t }}</p>
{% endif %}
</section>
</div>
<script>
document.addEventListener('DOMContentLoaded', function() {
lucide.createIcons();
});
</script>
{% endblock %}