Admin
Unlock the lists
This lock is light, not real security. The site is static files on GitHub Pages. There is no private server behind this form. Anyone can read the JavaScript.
While Google Sheets is not connected, the passcode is fallbackAdminPasscode in config.js. When the Apps Script web app is connected, admin saves are also checked against the ADMIN_SECRET script property. That secret is still typed into this page and can be copied from the browser. Don’t store anything sensitive in the sheet.
Admin
Teams, players, matches
Still not real security. Client-side protection on a static site only hides the buttons. Admin writes send a shared secret to Apps Script, and anyone who can use this page can see that request. Score sheets from the public page do not need the secret.
Standings
These numbers recalculate after every save, edit, or delete on this page.
Each team shows wins, losses, ties, games won, and points.
Teams
Players
Matches and results
Backup
Export is a JSON file of teams, players, and matches. Import replaces the whole list, then standings recalculate. Restoring the SAMPLE starter does the same with the names that shipped in this mock.