report search

public/userarea/get_rapporto_prova.php

@@ -17,6 +17,7 @@ try {
     // rapporto_by_codice_expand_step.php?codice=2541111&step=files_campioni
 
     $codiceRapporto = trim($_GET['codice'] ?? '');
+    // Safe step mode: default is base, but allows controlled read-only steps
     $step = trim($_GET['step'] ?? 'base');
 
     if ($codiceRapporto === '') {
@@ -25,10 +26,9 @@ try {
 
     $allowedSteps = [
         'base' => '',
-        'files' => 'RapportiFiles',
-        'allegati' => 'RapportiAllegati',
         'campioni' => 'CampioniDatiRapporto',
-        'files_campioni' => 'RapportiFiles,CampioniDatiRapporto'
+        'files' => 'RapportiFiles,Cliente',
+        'cliente' => 'Cliente'
     ];
 
     if (!array_key_exists($step, $allowedSteps)) {
@@ -37,7 +37,8 @@ try {
 
     // Escape OData per eventuali apostrofi
     $codiceRapportoSafe = str_replace("'", "''", $codiceRapporto);
-
+    // Safe version of codice rapporto for filenames
+    $codiceRapportoFileSafe = preg_replace('/[^a-zA-Z0-9_-]/', '_', $codiceRapporto);
     /*
      * STEP 1 - Trova IdRapporto partendo da CodiceRapporto.
      * Query leggera, con $select e $top=1.
@@ -107,15 +108,43 @@ try {
 
     $detailData = $api->get($detailEndpoint);
 
+    $pdfFiles = [];
+
+    if ($step === 'files') {
+        $rapportiFiles = $detailData['RapportiFiles'] ?? [];
+
+        if (is_array($rapportiFiles)) {
+            foreach ($rapportiFiles as $file) {
+                $idRapportoFile = intval($file['IdRapportoFile'] ?? 0);
+
+                if ($idRapportoFile > 0) {
+                    $pdfFiles[] = [
+                        'id_rapporto_file' => $idRapportoFile,
+                        'file_name' => $file['FileName'] ?? null,
+                        'categoria' => $file['Categoria'] ?? null,
+                        'tipo_rapporto' => $file['TipoRapporto'] ?? null,
+                        'download_endpoint' => "MediaFile/DownloadStream?objectType=RapportoFile&propertyName=FileContent&objectKey={$idRapportoFile}"
+                    ];
+                }
+            }
+        }
+    }
+
+    $clienteData = null;
+
+    if ($step === 'cliente' || $step === 'files') {
+        $clienteData = $detailData['Cliente'] ?? null;
+    }
+
     file_put_contents(
-        __DIR__ . "/rapporto_codice_{$codiceRapportoSafe}_{$step}.json",
+        __DIR__ . "/rapporto_codice_{$codiceRapportoFileSafe}_{$step}.json",
         json_encode([
             'search' => $searchData,
             'detail' => $detailData
         ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE)
     );
 
-    echo json_encode([
+    $response = [
         'success' => true,
         'codice_rapporto' => $codiceRapporto,
         'id_rapporto' => $rapportoId,
@@ -124,7 +153,17 @@ try {
         'detail_endpoint' => $detailEndpoint,
         'rapporto_base' => $rapportoBase,
         'data' => $detailData
-    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+    ];
+
+    if ($step === 'files') {
+        $response['pdf_files'] = $pdfFiles;
+    }
+
+    if ($step === 'cliente' || $step === 'files') {
+        $response['cliente'] = $clienteData;
+    }
+
+    echo json_encode($response, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
 } catch (Exception $e) {
     file_put_contents(
         __DIR__ . '/error_log.txt',