update historical trf and navbar

.env

@@ -37,4 +37,9 @@ PUSHER_APP_SECRET=
 PUSHER_APP_CLUSTER=mt1
 
 MIX_PUSHER_APP_KEY="${PUSHER_APP_KEY}"
-MIX_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"
+MIX_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"
+
+# Credenziali API VisualLims
+API_BASE_URL=https://93.43.5.102/limsapi
+API_USERNAME=WebApiUser
+API_PASSWORD=webapiuser01

.gitignore

@@ -21,3 +21,18 @@ yarn-error.log
 .env.backup
 .env.production
 auth.json
+# File di debug e temporanei JSON e log
+/public/userarea/*.json
+/public/userarea/*.log
+/public/userarea/*.txt
+
+# File di log nella sottocartella class
+/public/userarea/class/*.log
+
+# File XLSX temporanei importati
+/public/userarea/imported_trf/*.xlsx
+/public/userarea/xlstemplates/*.xlsx
+
+# Ignora cartelle di foto generate
+/public/photostrf/
+/public/photostrf/qrcodes/

app/Http/Controllers/Web/Auth/LoginController.php

@@ -110,7 +110,7 @@ class LoginController extends Controller
         if ($user->hasRole('Admin')) {
             return redirect()->to('userarea/import_dashboard.php');
         } elseif ($user->hasRole('User')) {
-            return redirect()->to('userarea/index.php');
+            return redirect()->to('userarea/import_dashboard.php');
         }
 
         // Se il ruolo non è specificato, reindirizza alla home predefinita

public/userarea/auth_proxy.php

@@ -0,0 +1,58 @@
+<?php
+header('Content-Type: application/json');
+
+// URL dell'API e credenziali
+$api_url = 'https://93.43.5.102/limsapi/api/authentication/authenticate';
+$credentials = [
+    'Username' => 'WebApiUser',
+    'Password' => 'webapiuser01'
+];
+
+// Inizializza cURL
+$ch = curl_init($api_url);
+
+// Configura le opzioni di cURL
+curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+curl_setopt($ch, CURLOPT_POST, true);
+curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($credentials));
+curl_setopt($ch, CURLOPT_HTTPHEADER, [
+    'Content-Type: application/json',
+    'Accept: application/json'
+]);
+curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); // Solo per test
+curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); // Solo per test
+curl_setopt($ch, CURLOPT_VERBOSE, true);
+$log = fopen('curl_auth_debug.log', 'w');
+curl_setopt($ch, CURLOPT_STDERR, $log);
+
+// Esegui la richiesta
+$response = curl_exec($ch);
+$http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+$curl_error = curl_error($ch);
+fclose($log);
+
+// Verifica errori
+if ($response === false || $http_code != 200) {
+    http_response_code($http_code ? $http_code : 500);
+    echo json_encode([
+        'error' => 'Errore nella richiesta API',
+        'http_code' => $http_code,
+        'curl_error' => $curl_error,
+        'response' => substr($response, 0, 1000)
+    ]);
+} else {
+    $decoded = json_decode($response);
+    if (json_last_error() === JSON_ERROR_NONE) {
+        http_response_code($http_code);
+        echo $response;
+    } else {
+        http_response_code(500);
+        echo json_encode([
+            'error' => 'Risposta non JSON valida',
+            'http_code' => $http_code,
+            'response' => substr($response, 0, 1000)
+        ]);
+    }
+}
+
+curl_close($ch);

public/userarea/class/VisualLimsApiClient.class.php

@@ -0,0 +1,123 @@
+<?php
+require_once dirname(__DIR__, 3) . '/vendor/autoload.php'; // Torna al livello di public
+
+use Dotenv\Dotenv;
+
+class VisualLimsApiClient
+{
+    private static $instance = null;
+    private $baseUrl;
+    private $username;
+    private $password;
+    private $token = null;
+
+    private function __construct()
+    {
+        $dotenv = Dotenv::createImmutable(dirname(__DIR__, 3)); // Torna al livello di public
+        $dotenv->load();
+
+        $this->baseUrl = $_ENV['API_BASE_URL'];
+        $this->username = $_ENV['API_USERNAME'];
+        $this->password = $_ENV['API_PASSWORD'];
+    }
+
+    public static function getInstance()
+    {
+        if (self::$instance === null) {
+            self::$instance = new VisualLimsApiClient();
+        }
+        return self::$instance;
+    }
+
+    private function authenticate()
+    {
+        $ch = curl_init("{$this->baseUrl}/api/authentication/authenticate");
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_POST, true);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
+            'Username' => $this->username,
+            'Password' => $this->password
+        ]));
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            'Content-Type: application/json',
+            'Accept: application/json'
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_auth_debug.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false || $http_code != 200) {
+            throw new Exception("Autenticazione fallita: HTTP {$http_code}, Errore cURL: {$curl_error}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        $token_data = json_decode($response, true);
+        $this->token = null;
+
+        if (is_array($token_data) && isset($token_data['token'])) {
+            $this->token = $token_data['token'];
+        } elseif (is_string($token_data) && !empty($token_data)) {
+            $this->token = trim($token_data, '"');
+        } elseif (is_string($response) && !empty($response)) {
+            $this->token = trim($response, '"');
+        }
+
+        if (empty($this->token)) {
+            throw new Exception("Token non ricevuto: " . substr($response, 0, 1000));
+        }
+    }
+
+    private function getToken()
+    {
+        if ($this->token === null) {
+            $this->authenticate();
+        }
+        return $this->token;
+    }
+
+    public function get($endpoint)
+    {
+        $token = $this->getToken();
+        $url = "{$this->baseUrl}/api/odata/{$endpoint}";
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Accept: application/json"
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_request_debug.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore nella richiesta: {$curl_error}");
+        }
+
+        if ($http_code !== 200) {
+            throw new Exception("Errore nel recupero dati: HTTP {$http_code}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        $data = json_decode($response, true);
+        if (json_last_error() !== JSON_ERROR_NONE) {
+            throw new Exception("Risposta non JSON valida: " . substr($response, 0, 1000));
+        }
+
+        return $data;
+    }
+}

public/userarea/class/VisualLimsApiClient.php

@@ -0,0 +1,123 @@
+<?php
+require_once dirname(__DIR__, 3) . '/vendor/autoload.php'; // Torna al livello di public
+
+use Dotenv\Dotenv;
+
+class VisualLimsApiClient
+{
+    private static $instance = null;
+    private $baseUrl;
+    private $username;
+    private $password;
+    private $token = null;
+
+    private function __construct()
+    {
+        $dotenv = Dotenv::createImmutable(dirname(__DIR__, 3)); // Torna al livello di public
+        $dotenv->load();
+
+        $this->baseUrl = $_ENV['API_BASE_URL'];
+        $this->username = $_ENV['API_USERNAME'];
+        $this->password = $_ENV['API_PASSWORD'];
+    }
+
+    public static function getInstance()
+    {
+        if (self::$instance === null) {
+            self::$instance = new VisualLimsApiClient();
+        }
+        return self::$instance;
+    }
+
+    private function authenticate()
+    {
+        $ch = curl_init("{$this->baseUrl}/api/authentication/authenticate");
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_POST, true);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
+            'Username' => $this->username,
+            'Password' => $this->password
+        ]));
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            'Content-Type: application/json',
+            'Accept: application/json'
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_auth_debug.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false || $http_code != 200) {
+            throw new Exception("Autenticazione fallita: HTTP {$http_code}, Errore cURL: {$curl_error}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        $token_data = json_decode($response, true);
+        $this->token = null;
+
+        if (is_array($token_data) && isset($token_data['token'])) {
+            $this->token = $token_data['token'];
+        } elseif (is_string($token_data) && !empty($token_data)) {
+            $this->token = trim($token_data, '"');
+        } elseif (is_string($response) && !empty($response)) {
+            $this->token = trim($response, '"');
+        }
+
+        if (empty($this->token)) {
+            throw new Exception("Token non ricevuto: " . substr($response, 0, 1000));
+        }
+    }
+
+    private function getToken()
+    {
+        if ($this->token === null) {
+            $this->authenticate();
+        }
+        return $this->token;
+    }
+
+    public function get($endpoint)
+    {
+        $token = $this->getToken();
+        $url = "{$this->baseUrl}/api/odata/{$endpoint}";
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Accept: application/json"
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_request_debug.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore nella richiesta: {$curl_error}");
+        }
+
+        if ($http_code !== 200) {
+            throw new Exception("Errore nel recupero dati: HTTP {$http_code}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        $data = json_decode($response, true);
+        if (json_last_error() !== JSON_ERROR_NONE) {
+            throw new Exception("Risposta non JSON valida: " . substr($response, 0, 1000));
+        }
+
+        return $data;
+    }
+}

public/userarea/class/connectapi.php

@@ -0,0 +1,76 @@
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>VisualLims Authentication</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            max-width: 600px;
+            margin: 20px auto;
+            padding: 20px;
+        }
+
+        #authButton {
+            padding: 10px 20px;
+            background-color: #007bff;
+            color: white;
+            border: none;
+            cursor: pointer;
+        }
+
+        #authButton:hover {
+            background-color: #0056b3;
+        }
+
+        #result {
+            margin-top: 20px;
+            padding: 10px;
+            border: 1px solid #ccc;
+            word-wrap: break-word;
+        }
+    </style>
+</head>
+
+<body>
+    <h1>VisualLims Authentication</h1>
+    <button id="authButton">Authenticate</button>
+    <div id="result"></div>
+
+    <script>
+        document.getElementById('authButton').addEventListener('click', async () => {
+            const resultDiv = document.getElementById('result');
+            resultDiv.textContent = 'Authenticating...';
+
+            try {
+                const response = await fetch('https://93.43.5.102/limsapi/api/authentication/authenticate', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                    },
+                    body: JSON.stringify({
+                        Username: 'WebApiUserTest',
+                        Password: 'WebApiUserClienteTest'
+                    })
+                });
+
+                if (!response.ok) {
+                    throw new Error(`HTTP error! status: ${response.status}`);
+                }
+
+                const data = await response.json();
+                if (data && data.token) {
+                    resultDiv.textContent = `Token: ${data.token}`;
+                } else {
+                    resultDiv.textContent = 'Authentication failed: No token received';
+                }
+            } catch (error) {
+                resultDiv.textContent = `Error: ${error.message}`;
+            }
+        });
+    </script>
+</body>
+
+</html>

public/userarea/class/curl_auth_debug.log

@@ -0,0 +1,36 @@
+*   Trying 93.43.5.102:443...
+* Connected to 93.43.5.102 (93.43.5.102) port 443
+* ALPN: curl offers h2,http/1.1
+* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
+* ALPN: server accepted h2
+* Server certificate:
+*  subject: C=FR; ST=Île-de-France; O=Bureau Veritas; CN=bvcpsitaly-elims.it
+*  start date: Feb 17 00:00:00 2025 GMT
+*  expire date: Feb 17 23:59:59 2026 GMT
+*  issuer: C=US; O=Corporation Service Company; CN=Corporation Service Company RSA OV SSL CA
+*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
+* using HTTP/2
+* [HTTP/2] [1] OPENED stream for https://93.43.5.102/limsapi/api/authentication/authenticate
+* [HTTP/2] [1] [:method: POST]
+* [HTTP/2] [1] [:scheme: https]
+* [HTTP/2] [1] [:authority: 93.43.5.102]
+* [HTTP/2] [1] [:path: /limsapi/api/authentication/authenticate]
+* [HTTP/2] [1] [content-type: application/json]
+* [HTTP/2] [1] [accept: application/json]
+* [HTTP/2] [1] [content-length: 51]
+> POST /limsapi/api/authentication/authenticate HTTP/2
+Host: 93.43.5.102
+Content-Type: application/json
+Accept: application/json
+Content-Length: 51
+
+< HTTP/2 200 
+< cache-control: max-age=0
+< content-type: application/json; charset=utf-8
+< server: Microsoft-IIS/10.0
+< strict-transport-security: max-age=2592000
+< x-powered-by: ASP.NET
+< x-content-type-options: nosniff
+< date: Thu, 21 Aug 2025 10:23:44 GMT
+< 
+* Connection #0 to host 93.43.5.102 left intact

public/userarea/class/curl_request_debug.log

@@ -0,0 +1,35 @@
+*   Trying 93.43.5.102:443...
+* Connected to 93.43.5.102 (93.43.5.102) port 443
+* ALPN: curl offers h2,http/1.1
+* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
+* ALPN: server accepted h2
+* Server certificate:
+*  subject: C=FR; ST=Île-de-France; O=Bureau Veritas; CN=bvcpsitaly-elims.it
+*  start date: Feb 17 00:00:00 2025 GMT
+*  expire date: Feb 17 23:59:59 2026 GMT
+*  issuer: C=US; O=Corporation Service Company; CN=Corporation Service Company RSA OV SSL CA
+*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
+* using HTTP/2
+* [HTTP/2] [1] OPENED stream for https://93.43.5.102/limsapi/api/odata/CustomField(1083)?$expand=CustomFieldsValues
+* [HTTP/2] [1] [:method: GET]
+* [HTTP/2] [1] [:scheme: https]
+* [HTTP/2] [1] [:authority: 93.43.5.102]
+* [HTTP/2] [1] [:path: /limsapi/api/odata/CustomField(1083)?$expand=CustomFieldsValues]
+* [HTTP/2] [1] [authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc1NTc3OTAyNSwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.bBV1z1uaxZeUuw-2YS2gLGaxTCQJAHTieM82KVJb5nw]
+* [HTTP/2] [1] [accept: application/json]
+> GET /limsapi/api/odata/CustomField(1083)?$expand=CustomFieldsValues HTTP/2
+Host: 93.43.5.102
+Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc1NTc3OTAyNSwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.bBV1z1uaxZeUuw-2YS2gLGaxTCQJAHTieM82KVJb5nw
+Accept: application/json
+
+< HTTP/2 200 
+< cache-control: max-age=0
+< content-type: application/json; odata.metadata=minimal; odata.streaming=true; charset=utf-8
+< server: Microsoft-IIS/10.0
+< strict-transport-security: max-age=2592000
+< odata-version: 4.0
+< x-powered-by: ASP.NET
+< x-content-type-options: nosniff
+< date: Thu, 21 Aug 2025 10:23:44 GMT
+< 
+* Connection #0 to host 93.43.5.102 left intact

public/userarea/connectapi.php

@@ -0,0 +1,211 @@
+<?php
+// Questo file può essere vuoto o contenere logica PHP aggiuntiva se necessario
+?>
+<!DOCTYPE html>
+<html lang="it">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Autenticazione VisualLims</title>
+    <!-- Includi Select2 CSS -->
+    <link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            max-width: 600px;
+            margin: 20px auto;
+            padding: 20px;
+        }
+
+        #authButton {
+            padding: 10px 20px;
+            background-color: #007bff;
+            color: white;
+            border: none;
+            cursor: pointer;
+        }
+
+        #authButton:hover {
+            background-color: #0056b3;
+        }
+
+        #result {
+            margin-top: 20px;
+            padding: 10px;
+            border: 1px solid #ccc;
+            word-wrap: break-word;
+        }
+
+        #schemiResult {
+            margin-top: 20px;
+            padding: 10px;
+            border: 1px solid #ccc;
+            word-wrap: break-word;
+        }
+
+        .select2-container {
+            width: 100% !important;
+        }
+    </style>
+</head>
+
+<body>
+    <h1>Autenticazione VisualLims</h1>
+    <button id="authButton">Autentica</button>
+    <div id="result"></div>
+
+    <!-- Tendina per i clienti -->
+    <h3>Seleziona un cliente:</h3>
+    <select id="clientiSelect" style="width: 100%;">
+        <option value="">Seleziona un cliente...</option>
+    </select>
+
+    <!-- Area per mostrare gli schemi -->
+    <div id="schemiResult"></div>
+
+    <!-- Includi jQuery (necessario per Select2) -->
+    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
+    <!-- Includi Select2 JS -->
+    <script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
+
+    <script>
+        // Inizializza Select2 sulla tendina
+        $(document).ready(function() {
+            $('#clientiSelect').select2({
+                placeholder: "Cerca un cliente...",
+                allowClear: true
+            });
+
+            // Carica i clienti al caricamento della pagina
+            loadClienti();
+        });
+
+        // Autenticazione
+        document.getElementById('authButton').addEventListener('click', async () => {
+            const resultDiv = document.getElementById('result');
+            resultDiv.textContent = 'Autenticazione in corso...';
+
+            try {
+                const response = await fetch('auth_proxy.php', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                    }
+                });
+
+                const data = await response.json();
+                if (!response.ok) {
+                    throw new Error(`Errore HTTP! Stato: ${response.status}, Dettagli: ${data.error || 'Nessun dettaglio disponibile'}`);
+                }
+
+                if (typeof data === 'string' && data.length > 0) {
+                    resultDiv.textContent = `Token: ${data}`;
+                } else if (data && data.token) {
+                    resultDiv.textContent = `Token: ${data.token}`;
+                } else {
+                    resultDiv.textContent = `Autenticazione fallita: Nessun token ricevuto. Dettagli: ${JSON.stringify(data)}`;
+                }
+            } catch (error) {
+                resultDiv.textContent = `Errore: ${error.message}`;
+            }
+        });
+
+        // Funzione per caricare i clienti nella tendina
+        async function loadClienti() {
+            const resultDiv = document.getElementById('result');
+            resultDiv.textContent = 'Caricamento clienti...';
+
+            try {
+                const response = await fetch('get_clienti.php', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json'
+                    },
+                    body: JSON.stringify({})
+                });
+
+                const data = await response.json();
+
+                if (!response.ok) {
+                    throw new Error(data.error || `Errore HTTP: ${response.status}, Dettagli: ${JSON.stringify(data)}`);
+                }
+
+                if (data.value && Array.isArray(data.value)) {
+                    const select = document.getElementById('clientiSelect');
+                    data.value.forEach(c => {
+                        const nome = c.Nominativo || 'Nome non disponibile';
+                        const id = c.IdCliente || 'ID non disponibile';
+                        const option = new Option(`${nome.trim()} (ID: ${id})`, id);
+                        select.add(option);
+                    });
+                    resultDiv.textContent = 'Clienti caricati con successo.';
+                } else {
+                    resultDiv.textContent = 'Nessun cliente trovato o formato dati non valido.';
+                    console.log('Risposta API:', data);
+                }
+            } catch (err) {
+                resultDiv.textContent = 'Errore: ' + err.message;
+                console.error('Dettagli errore:', err);
+            }
+        }
+
+        // Evento per gestire la selezione di un cliente e recuperare gli schemi
+        $('#clientiSelect').on('select2:select', async function(e) {
+            const clienteId = e.target.value; // Oppure: $(this).val()
+            const schemiDiv = document.getElementById('schemiResult'); // Correzione del nome variabile
+
+            // Log per debug
+            console.log('Cliente selezionato:', clienteId);
+
+            if (!clienteId) {
+                schemiDiv.textContent = '';
+                return;
+            }
+
+            schemiDiv.textContent = 'Caricamento schemi...';
+
+            try {
+                const response = await fetch('get_schemi.php', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json'
+                    },
+                    body: JSON.stringify({
+                        clienteId
+                    })
+                });
+
+                const data = await response.json();
+
+                if (!response.ok) {
+                    throw new Error(data.error || `Errore HTTP: ${response.status}, Dettagli: ${JSON.stringify(data)}`);
+                }
+
+                if (data.SchemiAbilitati && Array.isArray(data.SchemiAbilitati)) {
+                    let html = '<h3>Schemi Abilitati:</h3><ul>';
+                    data.SchemiAbilitati.forEach(s => {
+                        const nomeSchema = s.NomeSchema || s.Descrizione || 'Schema non specificato';
+                        html += `<li>${nomeSchema}</li>`;
+                    });
+                    html += '</ul>';
+                    schemiDiv.innerHTML = html;
+                } else {
+                    schemiDiv.textContent = 'Nessuno schema trovato per questo cliente.';
+                    console.log('Risposta Schemi:', data);
+                }
+            } catch (err) {
+                schemiDiv.textContent = 'Errore: ' + err.message;
+                console.error('Dettagli errore:', err);
+            }
+        });
+
+        // Gestisci la deselezione (opzionale)
+        $('#clientiSelect').on('select2:unselect', function(e) {
+            const schemiDiv = document.getElementById('schemiResult'); // Correzione del nome variabile
+            schemiDiv.textContent = '';
+        });
+    </script>
+</body>
+
+</html>

public/userarea/curl_auth_debug.log

@@ -0,0 +1,36 @@
+*   Trying 93.43.5.102:443...
+* Connected to 93.43.5.102 (93.43.5.102) port 443
+* ALPN: curl offers h2,http/1.1
+* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
+* ALPN: server accepted h2
+* Server certificate:
+*  subject: C=FR; ST=Île-de-France; O=Bureau Veritas; CN=bvcpsitaly-elims.it
+*  start date: Feb 17 00:00:00 2025 GMT
+*  expire date: Feb 17 23:59:59 2026 GMT
+*  issuer: C=US; O=Corporation Service Company; CN=Corporation Service Company RSA OV SSL CA
+*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
+* using HTTP/2
+* [HTTP/2] [1] OPENED stream for https://93.43.5.102/limsapi/api/authentication/authenticate
+* [HTTP/2] [1] [:method: POST]
+* [HTTP/2] [1] [:scheme: https]
+* [HTTP/2] [1] [:authority: 93.43.5.102]
+* [HTTP/2] [1] [:path: /limsapi/api/authentication/authenticate]
+* [HTTP/2] [1] [content-type: application/json]
+* [HTTP/2] [1] [accept: application/json]
+* [HTTP/2] [1] [content-length: 51]
+> POST /limsapi/api/authentication/authenticate HTTP/2
+Host: 93.43.5.102
+Content-Type: application/json
+Accept: application/json
+Content-Length: 51
+
+< HTTP/2 200 
+< cache-control: max-age=0
+< content-type: application/json; charset=utf-8
+< server: Microsoft-IIS/10.0
+< strict-transport-security: max-age=2592000
+< x-powered-by: ASP.NET
+< x-content-type-options: nosniff
+< date: Tue, 03 Jun 2025 15:07:55 GMT
+< 
+* Connection #0 to host 93.43.5.102 left intact

public/userarea/curl_clienti_debug.log

@@ -0,0 +1,35 @@
+*   Trying 93.43.5.102:443...
+* Connected to 93.43.5.102 (93.43.5.102) port 443
+* ALPN: curl offers h2,http/1.1
+* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
+* ALPN: server accepted h2
+* Server certificate:
+*  subject: C=FR; ST=Île-de-France; O=Bureau Veritas; CN=bvcpsitaly-elims.it
+*  start date: Feb 17 00:00:00 2025 GMT
+*  expire date: Feb 17 23:59:59 2026 GMT
+*  issuer: C=US; O=Corporation Service Company; CN=Corporation Service Company RSA OV SSL CA
+*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
+* using HTTP/2
+* [HTTP/2] [1] OPENED stream for https://93.43.5.102/limsapi/api/odata/Cliente
+* [HTTP/2] [1] [:method: GET]
+* [HTTP/2] [1] [:scheme: https]
+* [HTTP/2] [1] [:authority: 93.43.5.102]
+* [HTTP/2] [1] [:path: /limsapi/api/odata/Cliente]
+* [HTTP/2] [1] [authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk1OTY5MiwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.O60U9XXapZOj0U3GuOIU0eiwgcUkzXTW6Eqy5f6q9D8]
+* [HTTP/2] [1] [accept: application/json]
+> GET /limsapi/api/odata/Cliente HTTP/2
+Host: 93.43.5.102
+Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk1OTY5MiwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.O60U9XXapZOj0U3GuOIU0eiwgcUkzXTW6Eqy5f6q9D8
+Accept: application/json
+
+< HTTP/2 200 
+< cache-control: max-age=0
+< content-type: application/json; odata.metadata=minimal; odata.streaming=true; charset=utf-8
+< server: Microsoft-IIS/10.0
+< strict-transport-security: max-age=2592000
+< odata-version: 4.0
+< x-powered-by: ASP.NET
+< x-content-type-options: nosniff
+< date: Tue, 03 Jun 2025 12:08:45 GMT
+< 
+* Connection #0 to host 93.43.5.102 left intact

public/userarea/curl_debug.log

@@ -0,0 +1,38 @@
+*   Trying 93.43.5.102:443...
+* Connected to 93.43.5.102 (93.43.5.102) port 443
+* ALPN: curl offers h2,http/1.1
+* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
+* ALPN: server accepted h2
+* Server certificate:
+*  subject: C=FR; ST=Île-de-France; O=Bureau Veritas; CN=bvcpsitaly-elims.it
+*  start date: Feb 17 00:00:00 2025 GMT
+*  expire date: Feb 17 23:59:59 2026 GMT
+*  issuer: C=US; O=Corporation Service Company; CN=Corporation Service Company RSA OV SSL CA
+*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
+* using HTTP/2
+* [HTTP/2] [1] OPENED stream for https://93.43.5.102/limsapi/api/authentication/authenticate
+* [HTTP/2] [1] [:method: POST]
+* [HTTP/2] [1] [:scheme: https]
+* [HTTP/2] [1] [:authority: iftm.it]
+* [HTTP/2] [1] [:path: /limsapi/api/authentication/authenticate]
+* [HTTP/2] [1] [content-type: application/json]
+* [HTTP/2] [1] [accept: application/json]
+* [HTTP/2] [1] [user-agent: Mozilla/5.0 (compatible; PHP cURL)]
+* [HTTP/2] [1] [content-length: 51]
+> POST /limsapi/api/authentication/authenticate HTTP/2
+Host: iftm.it
+Content-Type: application/json
+Accept: application/json
+User-Agent: Mozilla/5.0 (compatible; PHP cURL)
+Content-Length: 51
+
+< HTTP/2 200 
+< cache-control: max-age=0
+< content-type: application/json; charset=utf-8
+< server: Microsoft-IIS/10.0
+< strict-transport-security: max-age=2592000
+< x-powered-by: ASP.NET
+< x-content-type-options: nosniff
+< date: Tue, 03 Jun 2025 10:19:09 GMT
+< 
+* Connection #0 to host 93.43.5.102 left intact

public/userarea/curl_response.log

@@ -0,0 +1,18 @@
+HTTP Code: 200
+Response: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk1MTAyMSwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.KntKk8Up-9owFjy7onziK2BfncEnSNhizyNX9S-QHaw"
+
+HTTP Code: 200
+Response: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk1MTEyNSwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.IWjzzBg0kQ3lq4aK2ByMlY7Bwzb7Qq-6ziXV8kkZ2J0"
+
+HTTP Code: 200
+Response: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk1MTI2NSwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.UgVz6PTF9dmbFYdgyRZS0TcI0pvLEIQ3yMjPiicF1vs"
+
+HTTP Code: 200
+Response: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk1MTMwNywiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.PolfU_FWuVMd-YfonBYTo0i0qIl6kn6nUkCWCEBvZuA"
+
+HTTP Code: 200
+Response: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk1MTQ0OSwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.CGZ-9KbMmW19JYTVGfjIcbNscSsGB4dwoHCJkHHs_4M"
+
+HTTP Code: 200
+Response: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk1MTc1MCwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.FCAm5sWed1Q-QiIsctMgSBfEd4sfN3kfVR3Mqd3XQz0"
+

public/userarea/curl_schemi_debug.log

@@ -0,0 +1,35 @@
+*   Trying 93.43.5.102:443...
+* Connected to 93.43.5.102 (93.43.5.102) port 443
+* ALPN: curl offers h2,http/1.1
+* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
+* ALPN: server accepted h2
+* Server certificate:
+*  subject: C=FR; ST=Île-de-France; O=Bureau Veritas; CN=bvcpsitaly-elims.it
+*  start date: Feb 17 00:00:00 2025 GMT
+*  expire date: Feb 17 23:59:59 2026 GMT
+*  issuer: C=US; O=Corporation Service Company; CN=Corporation Service Company RSA OV SSL CA
+*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
+* using HTTP/2
+* [HTTP/2] [1] OPENED stream for https://93.43.5.102/limsapi/api/odata/Cliente(5860)?$expand=SchemiAbilitati
+* [HTTP/2] [1] [:method: GET]
+* [HTTP/2] [1] [:scheme: https]
+* [HTTP/2] [1] [:authority: 93.43.5.102]
+* [HTTP/2] [1] [:path: /limsapi/api/odata/Cliente(5860)?$expand=SchemiAbilitati]
+* [HTTP/2] [1] [authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk3MDQ3NSwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.vABzuZkQE9luU_uc4e18AYiM5c2Jnf-z1Q3sofbz6O0]
+* [HTTP/2] [1] [accept: application/json]
+> GET /limsapi/api/odata/Cliente(5860)?$expand=SchemiAbilitati HTTP/2
+Host: 93.43.5.102
+Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk3MDQ3NSwiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.vABzuZkQE9luU_uc4e18AYiM5c2Jnf-z1Q3sofbz6O0
+Accept: application/json
+
+< HTTP/2 200 
+< cache-control: max-age=0
+< content-type: application/json; odata.metadata=minimal; odata.streaming=true; charset=utf-8
+< server: Microsoft-IIS/10.0
+< strict-transport-security: max-age=2592000
+< odata-version: 4.0
+< x-powered-by: ASP.NET
+< x-content-type-options: nosniff
+< date: Tue, 03 Jun 2025 15:07:56 GMT
+< 
+* Connection #0 to host 93.43.5.102 left intact

public/userarea/curl_schemi_liberi_debug.log

@@ -0,0 +1,35 @@
+*   Trying 93.43.5.102:443...
+* Connected to 93.43.5.102 (93.43.5.102) port 443
+* ALPN: curl offers h2,http/1.1
+* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
+* ALPN: server accepted h2
+* Server certificate:
+*  subject: C=FR; ST=Île-de-France; O=Bureau Veritas; CN=bvcpsitaly-elims.it
+*  start date: Feb 17 00:00:00 2025 GMT
+*  expire date: Feb 17 23:59:59 2026 GMT
+*  issuer: C=US; O=Corporation Service Company; CN=Corporation Service Company RSA OV SSL CA
+*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
+* using HTTP/2
+* [HTTP/2] [1] OPENED stream for https://93.43.5.102/limsapi/api/odata/Cliente(0)?$expand=SchemiAbilitati
+* [HTTP/2] [1] [:method: GET]
+* [HTTP/2] [1] [:scheme: https]
+* [HTTP/2] [1] [:authority: 93.43.5.102]
+* [HTTP/2] [1] [:path: /limsapi/api/odata/Cliente(0)?$expand=SchemiAbilitati]
+* [HTTP/2] [1] [authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk2NTQ4MywiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.oSwFJRuj0lDD7D6dOLIZWhn_Lzma0b38dLPEDIOMD7o]
+* [HTTP/2] [1] [accept: application/json]
+> GET /limsapi/api/odata/Cliente(0)?$expand=SchemiAbilitati HTTP/2
+Host: 93.43.5.102
+Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6IjQ5MiIsIlhhZlNlY3VyaXR5QXV0aFBhc3NlZCI6IlhhZlNlY3VyaXR5QXV0aFBhc3NlZCIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJXZWJBcGlVc2VyIiwiWGFmU2VjdXJpdHkiOiJYYWZTZWN1cml0eSIsIlhhZkxvZ29uUGFyYW1zIjoicTFZS0xVNHQ4a3ZNVFZXeVVncFBUWElzeUFRSktPa29CU1FXRjVmbkY2VUF4Y3RUa3hJTE1rdUI0Z2FHU3JVQSIsImV4cCI6MTc0ODk2NTQ4MywiaXNzIjoiTXkiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjQyMDAifQ.oSwFJRuj0lDD7D6dOLIZWhn_Lzma0b38dLPEDIOMD7o
+Accept: application/json
+
+< HTTP/2 404 
+< cache-control: no-cache,no-store,max-age=0
+< pragma: no-cache
+< content-type: application/problem+json
+< expires: -1
+< server: Microsoft-IIS/10.0
+< x-powered-by: ASP.NET
+< x-content-type-options: nosniff
+< date: Tue, 03 Jun 2025 13:44:44 GMT
+< 
+* Connection #0 to host 93.43.5.102 left intact

public/userarea/customfield_values_response.json

@@ -0,0 +1 @@
+{"@odata.context":"https:\/\/93.43.5.102\/limsapi\/api\/odata\/$metadata#CustomField(CustomFieldsValues())\/$entity","IdCustomField":1083,"TitoloTraduzione":"MONCLER_Analisi Commissionate da: ","Titolo":"MONCLER_Analisi Commissionate da: ","Descrizione":null,"Tipo":"SceltaMultipla","Decimali":0,"Lunghezza":0,"Minimo":null,"Massimo":null,"ValoreDefault":null,"Elenco":false,"DefaultCurrDate":false,"ObbligatorioWeb":false,"CustomFieldsValues":[{"IdCustomFieldsValue":13482,"Valore":"Moncler Compliance_GT"},{"IdCustomFieldsValue":13488,"Valore":"Moncler Ufficio tecnico_MC"},{"IdCustomFieldsValue":13495,"Valore":"Moncler Compliance_EM"},{"IdCustomFieldsValue":13496,"Valore":"Moncler Compliance_MB"},{"IdCustomFieldsValue":13497,"Valore":"Moncler Compliance_CB"},{"IdCustomFieldsValue":13526,"Valore":"Moncler Compliance_CS"},{"IdCustomFieldsValue":13530,"Valore":"Moncler Compliance_FZ"},{"IdCustomFieldsValue":13554,"Valore":"Moncler Ufficio tecnico_AZ"},{"IdCustomFieldsValue":13662,"Valore":"Moncler Ufficio tecnico_LL"},{"IdCustomFieldsValue":13727,"Valore":"Moncler Ufficio tecnico_AU"},{"IdCustomFieldsValue":13786,"Valore":"Moncler Compliance_AC"},{"IdCustomFieldsValue":13945,"Valore":"Moncler Compliance_BZ"},{"IdCustomFieldsValue":14006,"Valore":"Moncler Compliance_GR"},{"IdCustomFieldsValue":14818,"Valore":"Moncler Ufficio tecnico_LC"},{"IdCustomFieldsValue":14910,"Valore":"Moncler Ufficio tecnico_FV"}]}

public/userarea/delete_record.php

@@ -0,0 +1,64 @@
+<?php
+// Enable errors for debugging
+ini_set('display_errors', 1);
+ini_set('display_startup_errors', 1);
+error_reporting(E_ALL);
+ini_set('log_errors', 1);
+ini_set('error_log', __DIR__ . '/delete_record_debug.log');
+
+// Log iniziale
+error_log("Inizio cancellazione record alle " . date('Y-m-d H:i:s'));
+
+// Includi il file di configurazione del database
+include('include/headscript.php');
+
+// Ricevi l'ID dalla richiesta POST
+$input = json_decode(file_get_contents('php://input'), true);
+$iddatadb = isset($input['id']) ? intval($input['id']) : 0;
+
+if ($iddatadb <= 0) {
+    http_response_code(400);
+    echo json_encode(['success' => false, 'message' => 'ID non valido']);
+    exit;
+}
+
+// Connessione al database
+try {
+    $db = DBHandlerSelect::getInstance();
+    $pdo = $db->getConnection();
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode(['success' => false, 'message' => 'Errore di connessione al database: ' . $e->getMessage()]);
+    error_log("Errore di connessione al database: " . $e->getMessage());
+    exit;
+}
+
+// Inizia una transazione
+$pdo->beginTransaction();
+
+try {
+    // Elimina i dettagli associati dal tavolo import_data_details
+    $stmt = $pdo->prepare("DELETE FROM import_data_details WHERE id = ?");
+    $stmt->execute([$iddatadb]);
+
+    // Elimina il record principale dal tavolo datadb
+    $stmt = $pdo->prepare("DELETE FROM datadb WHERE iddatadb = ?");
+    $stmt->execute([$iddatadb]);
+
+    // Verifica se il record è stato eliminato
+    if ($stmt->rowCount() > 0) {
+        $pdo->commit();
+        echo json_encode(['success' => true, 'message' => 'Record eliminato con successo']);
+        error_log("Record con iddatadb=$iddatadb eliminato con successo");
+    } else {
+        $pdo->rollBack();
+        http_response_code(404);
+        echo json_encode(['success' => false, 'message' => 'Record non trovato']);
+        error_log("Record con iddatadb=$iddatadb non trovato");
+    }
+} catch (Exception $e) {
+    $pdo->rollBack();
+    http_response_code(500);
+    echo json_encode(['success' => false, 'message' => 'Errore durante la cancellazione: ' . $e->getMessage()]);
+    error_log("Errore durante la cancellazione del record con iddatadb=$iddatadb: " . $e->getMessage());
+}

public/userarea/edit_template_xls.php

@@ -39,6 +39,7 @@ if (json_last_error() !== JSON_ERROR_NONE) {
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
+    <link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />
     <?php include('cssinclude.php'); ?>
     <style>
         .client-field-row .row {
@@ -81,7 +82,7 @@ if (json_last_error() !== JSON_ERROR_NONE) {
                         <ul class="mb-0">
                             <li>Template Name</li>
                             <li>Row Header and Column Header: where the title of the excel starts</li>
-                            <li>Destination Table: already prefilled</li>
+                            <li>Cheme</li>
                         </ul>
                     </div>
                 </div>
@@ -123,7 +124,24 @@ if (json_last_error() !== JSON_ERROR_NONE) {
                                     <label class="form-label"><?= htmlspecialchars($desttable, ENT_QUOTES, 'UTF-8'); ?>*</label>
                                     <input type="text" name="target_table" class="form-control" value="<?php echo htmlspecialchars($template['target_table']); ?>" readonly required>
                                 </div>
-
+                                <!-- Aggiungi il campo per selezionare il cliente -->
+                                <div class="mb-3">
+                                    <label class="form-label">Select Client *</label>
+                                    <select name="client_id" id="clientSelect" class="form-control" required>
+                                        <option value="">Select a client...</option>
+                                        <!-- Le opzioni verranno popolate tramite JavaScript -->
+                                    </select>
+                                    <span id="clientLoadingStatus" class="text-muted" style="margin-left: 10px; display: none;">Recupero clienti in corso...</span>
+                                </div>
+                                <!-- Aggiungi il campo per selezionare lo schema -->
+                                <div class="mb-3">
+                                    <label class="form-label">Select Schema *</label>
+                                    <select name="schema_id" id="schemaSelect" class="form-control" required>
+                                        <option value="">Select a schema...</option>
+                                        <!-- Le opzioni verranno popolate tramite JavaScript -->
+                                    </select>
+                                    <span id="schemaLoadingStatus" class="text-muted" style="margin-left: 10px; display: none;">Caricamento schemi in corso...</span>
+                                </div>
                                 <!-- Sezione per i campi specifici del cliente -->
                                 <div class="mb-3">
                                     <label class="form-label">Client-Specific Fields</label>
@@ -227,23 +245,188 @@ if (json_last_error() !== JSON_ERROR_NONE) {
     <!--end switcher-->
     <!-- Temporaneamente disabilitato jsinclude.php per test -->
     <!-- <?php include('jsinclude.php'); ?> -->
+    <!-- Includi jQuery e Select2 -->
+    <script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
+
+    <script>
+        // Dati del cliente e dello schema associati al template
+        const templateClientId = <?php echo json_encode($template['idclient'] ?? 0); ?>;
+        const templateSchemaId = <?php echo json_encode($template['idschema'] ?? 0); ?>;
+        const templateSchemaName = "<?php echo htmlspecialchars($template['schemaname'] ?? ''); ?>";
+    </script>
     <script>
         document.addEventListener("DOMContentLoaded", function() {
             const form = document.getElementById("editTemplateForm");
             const addFieldButton = document.getElementById("addField");
             const container = document.getElementById("clientSpecificFields");
+            const clientLoadingStatus = document.getElementById("clientLoadingStatus");
+            const schemaLoadingStatus = document.getElementById("schemaLoadingStatus");
 
-            if (!form || !addFieldButton || !container) {
+            if (!form || !addFieldButton || !container || !clientLoadingStatus || !schemaLoadingStatus) {
                 console.error("One or more DOM elements not found:", {
                     form,
                     addFieldButton,
-                    container
+                    container,
+                    clientLoadingStatus,
+                    schemaLoadingStatus
                 });
                 return;
             }
 
             console.log("All DOM elements found");
 
+            // Controllo che jQuery sia caricato
+            if (typeof jQuery === 'undefined') {
+                console.error("jQuery non è caricato!");
+                return;
+            }
+
+            // Inizializza Select2 sulla tendina dei clienti
+            $('#clientSelect').select2({
+                placeholder: "Search for a client...",
+                allowClear: true
+            }).on('select2:open', function() {
+                console.log("Select2 initialized successfully for clientSelect");
+            }).on('select2:select', function(e) {
+                console.log("Client selected:", e.params.data.id, e.params.data.text);
+            });
+
+            // Inizializza Select2 sulla tendina degli schemi
+            $('#schemaSelect').select2({
+                placeholder: "Search for a schema...",
+                allowClear: true
+            }).on('select2:open', function() {
+                console.log("Select2 initialized successfully for schemaSelect");
+            }).on('select2:select', function(e) {
+                console.log("Schema selected:", e.params.data.id, e.params.data.text);
+            });
+
+            // Carica i clienti al caricamento della pagina
+            async function loadClients() {
+                try {
+                    clientLoadingStatus.style.display = 'inline';
+                    clientLoadingStatus.textContent = 'Recupero clienti in corso...';
+
+                    const response = await fetch("get_clienti.php", {
+                        method: "GET",
+                        headers: {
+                            "Content-Type": "application/json"
+                        }
+                    });
+
+                    const text = await response.text();
+                    console.log("Risposta raw (clienti):", text);
+                    const data = JSON.parse(text);
+
+                    if (!response.ok) {
+                        throw new Error(data.error || `Errore HTTP: ${response.status}`);
+                    }
+
+                    if (data.value && Array.isArray(data.value)) {
+                        const select = document.getElementById("clientSelect");
+                        select.innerHTML = '<option value="">Select a client...</option>';
+                        data.value.forEach(client => {
+                            const nome = client.Nominativo || "Nome non disponibile";
+                            const id = client.IdCliente || "ID non disponibile";
+                            const option = new Option(`${nome.trim()} (ID: ${id})`, id);
+                            if (parseInt(id) === parseInt(templateClientId)) {
+                                option.selected = true;
+                            }
+                            select.add(option);
+                        });
+                        $(select).trigger('change');
+                        console.log("Clienti caricati con successo.");
+                        clientLoadingStatus.textContent = "Clienti caricati.";
+                    } else {
+                        console.error("Nessun cliente trovato o formato dati non valido.", data);
+                        clientLoadingStatus.textContent = "Nessun cliente trovato.";
+                        Swal.fire({
+                            title: "Errore!",
+                            text: "Nessun cliente trovato o formato dati non valido.",
+                            icon: "error",
+                            confirmButtonText: "OK"
+                        });
+                    }
+                } catch (error) {
+                    console.error("Errore nel caricamento dei clienti:", error);
+                    clientLoadingStatus.textContent = "Errore nel caricamento.";
+                    Swal.fire({
+                        title: "Errore!",
+                        text: "Impossibile caricare i clienti: " + error.message,
+                        icon: "error",
+                        confirmButtonText: "OK"
+                    });
+                } finally {
+                    setTimeout(() => {
+                        clientLoadingStatus.style.display = 'none';
+                    }, 2000);
+                }
+            }
+
+            // Carica gli schemi al caricamento della pagina
+            async function loadSchemas() {
+                try {
+                    schemaLoadingStatus.style.display = 'inline';
+                    schemaLoadingStatus.textContent = 'Caricamento schemi in corso...';
+
+                    const response = await fetch("get_schemi.php", {
+                        method: "GET",
+                        headers: {
+                            "Content-Type": "application/json"
+                        }
+                    });
+
+                    const text = await response.text();
+                    console.log("Risposta raw (schemi):", text);
+                    const data = JSON.parse(text);
+
+                    if (!response.ok) {
+                        throw new Error(data.error || `Errore HTTP: ${response.status}`);
+                    }
+
+                    const select = document.getElementById("schemaSelect");
+                    select.innerHTML = '<option value="">Select a schema...</option>';
+                    data.value.forEach(schema => {
+                        const nome = schema.Nome || "Nome non disponibile";
+                        const id = schema.IdSchemaCustomFields || "ID non disponibile";
+                        const optionText = `${nome.trim()} (ID: ${id})`;
+                        const option = new Option(optionText, id);
+                        if (parseInt(id) === parseInt(templateSchemaId)) {
+                            option.selected = true;
+                        }
+                        select.add(option);
+                    });
+                    $(select).trigger('change');
+                    console.log("Schemi caricati con successo.");
+                    schemaLoadingStatus.textContent = "Schemi caricati.";
+                } catch (error) {
+                    console.error("Errore nel caricamento degli schemi:", error);
+                    schemaLoadingStatus.textContent = "Errore nel caricamento.";
+                    Swal.fire({
+                        title: "Errore!",
+                        text: "Impossibile caricare gli schemi: " + error.message,
+                        icon: "error",
+                        confirmButtonText: "OK"
+                    });
+                } finally {
+                    setTimeout(() => {
+                        schemaLoadingStatus.style.display = 'none';
+                    }, 2000);
+                }
+            }
+
+            // Carica i dati in sequenza
+            async function loadData() {
+                try {
+                    await loadClients();
+                    await loadSchemas();
+                } catch (error) {
+                    console.error("Errore nel caricamento dei dati:", error);
+                }
+            }
+
+            loadData();
+
             // Debug iniziale del DOM
             const debugDom = () => {
                 const initialRows = container.getElementsByClassName("client-field-row");
@@ -300,38 +483,38 @@ if (json_last_error() !== JSON_ERROR_NONE) {
                 const newField = document.createElement("div");
                 newField.className = "client-field-row mb-2";
                 newField.innerHTML = `
-                    <div class="row align-items-center">
-                        <div class="col-md-3">
-                            <input type="text" name="specific_fields[${fieldCount}][name]" class="form-control" placeholder="Field Name (e.g., SKU)">
-                        </div>
-                        <div class="col-md-2">
-                            <select name="specific_fields[${fieldCount}][type]" class="form-control" onchange="toggleDropdownValues(this)">
-                                <option value="text">Text</option>
-                                <option value="dropdown">Dropdown</option>
-                                <option value="date">Date</option>
-                                <option value="boolean">Yes/No</option>
-                            </select>
-                        </div>
-                        <div class="col-md-2 dropdown-values" style="visibility: hidden;">
-                            <input type="text" name="specific_fields[${fieldCount}][possible_values]" class="form-control" placeholder="Values (e.g., Red, Blue, Green)">
-                        </div>
-                        <div class="col-md-1">
-                            <select name="specific_fields[${fieldCount}][required]" class="form-control">
-                                <option value="1">Yes</option>
-                                <option value="0">No</option>
-                            </select>
-                        </div>
-                        <div class="col-md-2">
-                            <input type="text" name="specific_fields[${fieldCount}][export_column_name]" class="form-control" placeholder="Export Column Name (e.g., MONCLER_SKU)">
-                        </div>
-                        <div class="col-md-1">
-                            <input type="text" name="specific_fields[${fieldCount}][default_value]" class="form-control" placeholder="Default Value (optional)">
-                        </div>
-                        <div class="col-md-1">
-                            <button type="button" class="btn btn-danger remove-field">-</button>
-                        </div>
+                <div class="row align-items-center">
+                    <div class="col-md-3">
+                        <input type="text" name="specific_fields[${fieldCount}][name]" class="form-control" placeholder="Field Name (e.g., SKU)">
                     </div>
-                `;
+                    <div class="col-md-2">
+                        <select name="specific_fields[${fieldCount}][type]" class="form-control" onchange="toggleDropdownValues(this)">
+                            <option value="text">Text</option>
+                            <option value="dropdown">Dropdown</option>
+                            <option value="date">Date</option>
+                            <option value="boolean">Yes/No</option>
+                        </select>
+                    </div>
+                    <div class="col-md-2 dropdown-values" style="visibility: hidden;">
+                        <input type="text" name="specific_fields[${fieldCount}][possible_values]" class="form-control" placeholder="Values (e.g., Red, Blue, Green)">
+                    </div>
+                    <div class="col-md-1">
+                        <select name="specific_fields[${fieldCount}][required]" class="form-control">
+                            <option value="1">Yes</option>
+                            <option value="0">No</option>
+                        </select>
+                    </div>
+                    <div class="col-md-2">
+                        <input type="text" name="specific_fields[${fieldCount}][export_column_name]" class="form-control" placeholder="Export Column Name (e.g., MONCLER_SKU)">
+                    </div>
+                    <div class="col-md-1">
+                        <input type="text" name="specific_fields[${fieldCount}][default_value]" class="form-control" placeholder="Default Value (optional)">
+                    </div>
+                    <div class="col-md-1">
+                        <button type="button" class="btn btn-danger remove-field">-</button>
+                    </div>
+                </div>
+            `;
                 container.appendChild(newField);
 
                 newField.querySelector(".remove-field").addEventListener("click", function() {
@@ -383,6 +566,65 @@ if (json_last_error() !== JSON_ERROR_NONE) {
 
                 let formData = new FormData(this);
 
+                // Aggiungi il nome del cliente selezionato a FormData
+                const clientSelect = document.getElementById("clientSelect");
+                const clientId = clientSelect.value;
+                const selectedClientOption = clientSelect.options[clientSelect.selectedIndex];
+
+                // Validazione: assicurati che un cliente sia selezionato
+                if (!clientId) {
+                    Swal.fire({
+                        title: "Errore!",
+                        text: "Per favore seleziona un cliente.",
+                        icon: "error",
+                        confirmButtonText: "OK"
+                    });
+                    return;
+                }
+
+                // Estrai il nome del cliente in modo più robusto
+                let clientName = "";
+                if (selectedClientOption) {
+                    const optionText = selectedClientOption.text.trim();
+                    const nameMatch = optionText.match(/^(.+?)(?:\s*\(ID:\s*\d+\))?$/);
+                    clientName = nameMatch ? nameMatch[1].trim() : optionText;
+                }
+
+                formData.append("client_name", clientName);
+
+                // Aggiungi l'ID e il nome dello schema selezionato a FormData
+                const schemaSelect = document.getElementById("schemaSelect");
+                const schemaId = schemaSelect.value;
+                const selectedSchemaOption = schemaSelect.options[schemaSelect.selectedIndex];
+
+                // Validazione: assicurati che uno schema sia selezionato
+                if (!schemaId) {
+                    Swal.fire({
+                        title: "Errore!",
+                        text: "Per favore seleziona uno schema.",
+                        icon: "error",
+                        confirmButtonText: "OK"
+                    });
+                    return;
+                }
+
+                // Estrai il nome dello schema in modo più robusto
+                let schemaName = "";
+                if (selectedSchemaOption) {
+                    const optionText = selectedSchemaOption.text.trim();
+                    const nameMatch = optionText.match(/^(.+?)(?:\s*\(ID:\s*\d+\))?$/);
+                    schemaName = nameMatch ? nameMatch[1].trim() : optionText;
+                }
+
+                formData.append("idschema", schemaId);
+                formData.append("schemamaname", schemaName);
+
+                // Log per debug
+                console.log("Client ID:", clientId);
+                console.log("Client Name:", clientName);
+                console.log("Schema ID:", schemaId);
+                console.log("Schema Name:", schemaName);
+
                 // Genera il JSON per client_specific_fields
                 let finalSpecificFields = {};
 
@@ -433,8 +675,8 @@ if (json_last_error() !== JSON_ERROR_NONE) {
                         console.log("Fetch response:", data);
                         if (data.success) {
                             Swal.fire({
-                                title: "Success!",
-                                text: "Template updated successfully!",
+                                title: "Successo!",
+                                text: "Template aggiornato con successo!",
                                 icon: "success",
                                 confirmButtonText: "OK"
                             }).then(() => {
@@ -442,7 +684,7 @@ if (json_last_error() !== JSON_ERROR_NONE) {
                             });
                         } else {
                             Swal.fire({
-                                title: "Error!",
+                                title: "Errore!",
                                 text: data.message,
                                 icon: "error",
                                 confirmButtonText: "OK"
@@ -450,10 +692,10 @@ if (json_last_error() !== JSON_ERROR_NONE) {
                         }
                     })
                     .catch(error => {
-                        console.error("Fetch error:", error);
+                        console.error("Errore Fetch:", error);
                         Swal.fire({
-                            title: "Error!",
-                            text: "An unexpected error occurred.",
+                            title: "Errore!",
+                            text: "Si è verificato un errore imprevisto.",
                             icon: "error",
                             confirmButtonText: "OK"
                         });

public/userarea/error_log.txt

@@ -0,0 +1,7 @@
+2025-06-10 12:21:44 - Errore nel recupero dati: HTTP 404, Risposta: 
+2025-06-16 11:15:30 - Errore nel recupero dati: HTTP 404, Risposta: {"title":"Not Found","status":404,"detail":"Not Found","instance":"GET /api/odata/Rapporto(2523026)","errorCode":"d25cbd678"}
+2025-06-16 11:34:59 - Autenticazione fallita: HTTP 0, Errore cURL: Failed to connect to 93.43.5.102 port 443 after 21033 ms: Couldn't connect to server, Risposta: 
+2025-06-16 11:42:03 - Errore nella richiesta: Recv failure: Connection was reset
+2025-07-04 10:42:49 - Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}
+2025-07-04 10:44:13 - Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}
+2025-07-04 10:48:07 - Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}

public/userarea/errortest.php

@@ -0,0 +1,6 @@
+<?php
+ini_set('log_errors', 1);
+ini_set('error_log', __DIR__ . '/import_debug.log');
+
+
+error_log("TEST: errore manuale");

public/userarea/get_clienti.php

@@ -0,0 +1,24 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php'; // Torna al livello di public per trovare vendor/
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json');
+
+// Disabilita la visualizzazione degli errori PHP per evitare output HTML
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+    $data = $api->get("Cliente"); // Recupera i clienti
+
+    // Salva la risposta in un file per debug
+    file_put_contents(__DIR__ . '/clienti_response.json', json_encode($data));
+
+    echo json_encode($data);
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode([
+        'error' => $e->getMessage()
+    ]);
+}

public/userarea/get_customfield_values.php

@@ -0,0 +1,31 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php'; // Torna al livello di public
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json');
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    // ID del campo custom passato da GET oppure default
+    $customFieldId = isset($_GET['field_id']) && is_numeric($_GET['field_id']) ? intval($_GET['field_id']) : 156;
+
+    // Endpoint con $expand per ottenere i valori
+    $endpoint = "CustomField($customFieldId)?\$expand=CustomFieldsValues";
+
+    // Recupera i dati dal server
+    $data = $api->get($endpoint);
+
+    // Salva la risposta in un file per debug
+    file_put_contents(__DIR__ . '/customfield_values_response.json', json_encode($data));
+
+    // Output JSON al client
+    echo json_encode($data);
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode([
+        'error' => $e->getMessage()
+    ]);
+}

public/userarea/get_rapporto_prova.php

@@ -0,0 +1,26 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json');
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+    $rapporto_id = 515081;
+
+    // Costruzione manuale dell'endpoint con espansione annidata
+    $endpoint = "Rapporto($rapporto_id)?\$expand=CampioniDatiRapporto(\$expand=AnalisiDatiRapporto,CustomFieldsDatiRapporto)";
+
+    // Non passiamo options, già incluso nell'endpoint
+    $data = $api->get($endpoint);
+
+    file_put_contents(__DIR__ . '/rapporto_expanded.json', json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES));
+    echo json_encode($data);
+} catch (Exception $e) {
+    file_put_contents(__DIR__ . '/error_log.txt', date('Y-m-d H:i:s') . ' - ' . $e->getMessage() . PHP_EOL, FILE_APPEND);
+    http_response_code(500);
+    echo json_encode(['error' => $e->getMessage()]);
+}

public/userarea/get_schema_details.php

@@ -0,0 +1,30 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json');
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    // ID dello schema passato via GET o default 45
+    $schemaId = isset($_GET['id']) && is_numeric($_GET['id']) ? intval($_GET['id']) : 42;
+
+    // IMPORTANTE: $expand va dentro la stringa endpoint per entità singola
+    $endpoint = "SchemaCustomField($schemaId)?\$expand=SchemiCustomFieldsDettagli(\$expand=CustomField)";
+
+    // Nessun parametro aggiuntivo
+    $data = $api->get($endpoint);
+
+    // Salva la risposta per debug
+    file_put_contents(__DIR__ . '/schema_dettagli_response.json', json_encode($data));
+
+    echo json_encode($data);
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode([
+        'error' => $e->getMessage()
+    ]);
+}

public/userarea/get_schemi.php

@@ -0,0 +1,36 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json');
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    // Nessun filtro o espansione: solo la lista degli schemi
+    $endpoint = 'SchemaCustomField';
+
+    // (Opzionale) aggiungi $top se vuoi limitare i risultati
+    $options = []; // oppure ad esempio: ['$top' => 100]
+
+    // Debug: salva URL usato
+    $base_url = 'https://93.43.5.102/limsapi/api/odata/';
+    $query = http_build_query($options);
+    $full_url = $base_url . $endpoint . ($query ? '?' . $query : '');
+    file_put_contents(__DIR__ . '/last_url.txt', $full_url . PHP_EOL, FILE_APPEND);
+
+    // Chiamata API
+    $data = $api->get($endpoint, $options);
+
+    // Salva il JSON in locale
+    file_put_contents(__DIR__ . '/schemi_base_response.json', json_encode($data, JSON_PRETTY_PRINT));
+
+    echo json_encode($data);
+} catch (Exception $e) {
+    file_put_contents(__DIR__ . '/error_log.txt', date('Y-m-d H:i:s') . ' - ' . $e->getMessage() . PHP_EOL, FILE_APPEND);
+    http_response_code(500);
+    echo json_encode(['error' => $e->getMessage()]);
+}

public/userarea/get_schemi_custom_fields.php

@@ -0,0 +1,26 @@
+```php
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php'; // Torna al livello di public per trovare vendor/
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json');
+
+// Disabilita la visualizzazione degli errori PHP per evitare output HTML
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+    $data = $api->get("SchemaCustomField"); // Recupera la lista degli schemi custom fields
+
+    // Salva la risposta in un file per debug
+    file_put_contents(__DIR__ . '/schemi_custom_fields_response.json', json_encode($data));
+
+    echo json_encode($data);
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode([
+        'error' => $e->getMessage()
+    ]);
+}
+?>

public/userarea/import_dashboard.php

@@ -121,7 +121,7 @@
                         if (template.button_size === "large") sizeClass = "btn-large";
 
                         let btn = document.createElement("a");
-                        btn.href = `import_xls.php?id=${template.id}`;
+                        btn.href = `import_xls2.php?id=${template.id}`;
                         btn.className = `btn ${sizeClass}`;
                         btn.style.backgroundColor = template.button_bg_color;
                         btn.style.color = template.button_text_color;

public/userarea/import_xls2.php

@@ -0,0 +1,334 @@
+<?php
+include('include/headscript.php');
+
+// Controlla se è stato passato un ID valido
+if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
+    header("Location: xlstemplates_grid.php?status=error&message=" . urlencode("Invalid ID"));
+    exit;
+}
+
+$id = intval($_GET['id']); // Sanifica l'ID
+
+// Recupera il template dal database
+$db = DBHandlerSelect::getInstance();
+$pdo = $db->getConnection();
+$stmt = $pdo->prepare("SELECT * FROM excel_templates WHERE id = ?");
+$stmt->execute([$id]);
+$template = $stmt->fetch(PDO::FETCH_ASSOC);
+
+if (!$template) {
+    header("Location: template_dashboard.php?status=error&message=" . urlencode("Template not found"));
+    exit;
+}
+
+// Debug del template
+error_log("Loaded template: " . print_r($template, true));
+?>
+
+<!doctype html>
+<html lang="en">
+
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
+    <?php include('cssinclude.php'); ?>
+    <style>
+        .table-container {
+            overflow-x: auto;
+            max-width: 100%;
+            margin-bottom: 20px;
+        }
+
+        .table {
+            width: 100%;
+            border-collapse: collapse;
+        }
+
+        .table th,
+        .table td {
+            padding: 10px;
+            text-align: left;
+            border: 1px solid #dee2e6;
+            min-width: 100px;
+            max-width: 200px;
+            overflow: hidden;
+            text-overflow: ellipsis;
+            white-space: nowrap;
+        }
+
+        .table th:first-child,
+        .table td:first-child {
+            min-width: 50px;
+            max-width: 50px;
+        }
+
+        .table th {
+            background-color: #f8f9fa;
+            position: relative;
+            cursor: col-resize;
+            user-select: none;
+        }
+
+        .table th .resize-handle {
+            position: absolute;
+            top: 0;
+            right: 0;
+            width: 5px;
+            height: 100%;
+            cursor: col-resize;
+            background: transparent;
+        }
+
+        .table th .resize-handle:hover {
+            background: #007bff;
+        }
+
+        .search-container {
+            margin-bottom: 20px;
+        }
+
+        .search-container input {
+            width: 300px;
+            padding: 8px;
+            border: 1px solid #ced4da;
+            border-radius: 5px;
+        }
+
+        .loader {
+            display: none;
+            border: 4px solid #f3f3f3;
+            border-top: 4px solid #3498db;
+            border-radius: 50%;
+            width: 30px;
+            height: 30px;
+            animation: spin 1s linear infinite;
+            margin: 10px auto;
+        }
+
+        @keyframes spin {
+            0% {
+                transform: rotate(0deg);
+            }
+
+            100% {
+                transform: rotate(360deg);
+            }
+        }
+    </style>
+    <title><?= htmlspecialchars($template['name']) ?> - <?= htmlspecialchars($titlewebsite, ENT_QUOTES, 'UTF-8'); ?></title>
+</head>
+
+<body>
+    <div class="wrapper">
+        <?php include('include/navbar.php'); ?>
+        <?php include('include/topbar.php'); ?>
+        <div class="page-wrapper">
+            <div class="page-content">
+                <?php include('top_stat_widget.php'); ?>
+                <div class="mb-3 text">
+                    <a href="historical_trf.php?id=<?= $id ?>&status=i" class="btn btn-warning me-2">Imported (i)</a>
+                    <a href="historical_trf.php?id=<?= $id ?>&status=P" class="btn btn-primary me-2">In Progress (P)</a>
+                    <a href="historical_trf.php?id=<?= $id ?>&status=l" class="btn btn-success">To LIMS (l)</a>
+                </div>
+                <div class="card radius-10">
+                    <div class="card-header">
+                        <div class="d-flex align-items-center">
+                            <div>
+                                <h6 class="mb-0"><?= htmlspecialchars($template['name']) ?></h6>
+                                <small>Template ID: <?= $id ?>, Start Row: <?= $template['header_row'] ?>, Start Column: <?= $template['start_column'] ?></small>
+                            </div>
+                        </div>
+                    </div>
+
+                    <div class="card-body">
+                        <!-- Form per caricare il file -->
+                        <form id="uploadForm" enctype="multipart/form-data" class="mb-4">
+                            <div class="mb-3">
+                                <label for="excel_file" class="form-label">Upload XLS File</label>
+                                <input type="file" class="form-control" id="excel_file" name="excel_file" accept=".xls,.xlsx" required>
+                            </div>
+                            <button type="submit" class="btn btn-primary">Upload</button>
+                            <div class="loader" id="loader"></div>
+                        </form>
+
+                        <!-- Contenitore per messaggi di errore -->
+                        <div id="errorContainer" class="alert alert-danger mt-3" style="display: none;"></div>
+
+                        <!-- Contenitore per la tabella -->
+                        <div id="tableContainer"></div>
+                    </div>
+                </div>
+            </div>
+        </div>
+        <!--end page wrapper -->
+        <div class="overlay toggle-icon"></div>
+        <a href="javaScript:;" class="back-to-top"><i class='bx bxs-up-arrow-alt'></i></a>
+        <?php include('include/footer.php'); ?>
+    </div>
+    <!--end wrapper-->
+
+    <!-- search modal -->
+    <?php //include('include/searchmodal.php'); 
+    ?>
+    <!-- end search modal -->
+
+    <!--start switcher-->
+    <?php //include('include/themeswitcher.php'); 
+    ?>
+    <!--end switcher-->
+    <?php include('jsinclude.php'); ?>
+    <script>
+        document.addEventListener("DOMContentLoaded", function() {
+            const form = document.getElementById('uploadForm');
+            const loader = document.getElementById('loader');
+            const errorContainer = document.getElementById('errorContainer');
+            const tableContainer = document.getElementById('tableContainer');
+
+            form.addEventListener('submit', function(e) {
+                e.preventDefault();
+                loader.style.display = 'block';
+                errorContainer.style.display = 'none';
+                tableContainer.innerHTML = '';
+
+                const formData = new FormData(this);
+                const templateId = <?= $id ?>;
+                console.log('Template ID passed to formData:', templateId);
+                formData.append('template_id', templateId);
+                formData.append('header_row', <?= $template['header_row'] ?>);
+                formData.append('start_column', <?= $template['start_column'] ?>);
+
+                fetch('process_import_xls2.php', {
+                        method: 'POST',
+                        body: formData
+                    })
+                    .then(response => response.json())
+                    .then(data => {
+                        loader.style.display = 'none';
+                        if (data.error) {
+                            errorContainer.textContent = data.error;
+                            errorContainer.style.display = 'block';
+                        } else {
+                            let html = `
+                    <form id="selectRowsForm" action="import_edit2.php" method="POST">
+                        <input type="hidden" name="template_id" value="${data.template_id}">
+                        <input type="hidden" name="columns" value='${JSON.stringify(data.columns)}'>
+                        <input type="hidden" name="rows" value='${JSON.stringify(data.rows)}'>
+                        <input type="hidden" name="filename" value="${data.filename}">
+                        <div class="search-container">
+                            <input type="text" id="searchInput" class="form-control" placeholder="Cerca nelle righe...">
+                        </div>
+                        <div class="table-container">
+                            <table class="table table-striped table-bordered">
+                                <thead>
+                                    <tr>
+                                        <th><input type="checkbox" id="selectAll"> Seleziona</th>
+                                        ${data.columns.map(col => `<th>${col || 'Colonna senza nome'}<div class="resize-handle"></div></th>`).join('')}
+                                    </tr>
+                                </thead>
+                                <tbody>
+                                    ${data.rows.map((row, index) => `
+                                        <tr>
+                                            <td><input type="checkbox" class="row-checkbox" name="selected_rows[]" value="${index}"></td>
+                                            ${row.map(cell => `<td>${cell}</td>`).join('')}
+                                        </tr>
+                                    `).join('')}
+                                </tbody>
+                            </table>
+                        </div>
+                        <button type="submit" class="btn btn-primary mt-3" id="proceedButton" disabled>Prosegui</button>
+                    </form>
+                `;
+                            tableContainer.innerHTML = html;
+
+                            // Inizializza le variabili dopo aver inserito la tabella
+                            const proceedButton = document.getElementById('proceedButton');
+                            const selectAllCheckbox = document.getElementById('selectAll');
+                            const checkboxes = document.querySelectorAll('.row-checkbox');
+
+                            // Funzione per aggiornare lo stato del pulsante Prosegui
+                            function updateProceedButton() {
+                                proceedButton.disabled = !Array.from(checkboxes).some(cb => cb.checked);
+                            }
+
+                            // Event listener per il checkbox "Seleziona tutto"
+                            selectAllCheckbox.addEventListener('change', function() {
+                                checkboxes.forEach(checkbox => {
+                                    checkbox.checked = this.checked;
+                                });
+                                updateProceedButton();
+                            });
+
+                            // Event listener per i checkbox delle righe
+                            checkboxes.forEach(checkbox => {
+                                checkbox.addEventListener('change', function() {
+                                    console.log('Checkbox changed, checked: ', this.checked); // Debug
+                                    // Aggiorna lo stato del checkbox "Seleziona tutto"
+                                    selectAllCheckbox.checked = Array.from(checkboxes).every(cb => cb.checked);
+                                    updateProceedButton();
+                                });
+                            });
+
+                            // Aggiungi logica per il ridimensionamento delle colonne
+                            const thElements = document.querySelectorAll('.table th');
+                            thElements.forEach((th, index) => {
+                                if (index === 0) return;
+                                const resizeHandle = th.querySelector('.resize-handle');
+                                if (resizeHandle) {
+                                    resizeHandle.addEventListener('mousedown', (e) => {
+                                        e.preventDefault();
+                                        const startX = e.clientX;
+                                        const startWidth = th.offsetWidth;
+
+                                        const onMouseMove = (e) => {
+                                            const newWidth = Math.max(50, startWidth + (e.clientX - startX));
+                                            th.style.width = `${newWidth}px`;
+                                            th.style.minWidth = `${newWidth}px`;
+                                            th.style.maxWidth = `${newWidth}px`;
+
+                                            const cells = document.querySelectorAll(`.table td:nth-child(${index + 1})`);
+                                            cells.forEach(cell => {
+                                                cell.style.width = `${newWidth}px`;
+                                                cell.style.minWidth = `${newWidth}px`;
+                                                cell.style.maxWidth = `${newWidth}px`;
+                                            });
+                                        };
+
+                                        const onMouseUp = () => {
+                                            document.removeEventListener('mousemove', onMouseMove);
+                                            document.removeEventListener('mouseup', onMouseUp);
+                                        };
+
+                                        document.addEventListener('mousemove', onMouseMove);
+                                        document.addEventListener('mouseup', onMouseUp);
+                                    });
+                                }
+                            });
+
+                            // Aggiungi event listener per la ricerca
+                            const searchInput = document.getElementById('searchInput');
+                            const rows = document.querySelectorAll('.table tbody tr');
+
+                            searchInput.addEventListener('input', function() {
+                                const searchTerm = this.value.toLowerCase();
+                                rows.forEach(row => {
+                                    const text = Array.from(row.cells).slice(1).map(cell => cell.textContent.toLowerCase()).join(' ');
+                                    row.style.display = text.includes(searchTerm) ? '' : 'none';
+                                });
+                            });
+
+                            // Abilita il pulsante se ci sono checkbox selezionate all'inizio
+                            updateProceedButton();
+                        }
+                    })
+                    .catch(error => {
+                        loader.style.display = 'none';
+                        errorContainer.textContent = 'Errore durante il caricamento del file: ' + error.message;
+                        errorContainer.style.display = 'block';
+                    });
+            });
+        });
+    </script>
+</body>
+
+</html>