fixed columns bind

This reverts commit a3eb0f0a57.

.gitignore

@@ -47,6 +47,7 @@ yarn-error.log
 /public/userarea/class/curl_auth_debug.log
 /public/userarea/class/curl_request_debug.log
 /public/userarea/schema_dettagli_response.json
+public/userarea/schemi_base_response.json
 
 # File XLSX temporanei importati
 /public/userarea/imported_trf/*.xlsx

public/userarea/analysisModal.js

@@ -431,7 +431,7 @@
         const emptyEl = modal.querySelector("#analysisEmptyBox");
         const errorEl = modal.querySelector("#analysisErrorBox");
 
-        const webOnly = webOnlyEl ? webOnlyEl.checked : false;
+        const webOnly = true;
         const searchValue = searchEl ? searchEl.value.trim().toLowerCase() : "";
 
         let visibleCount = 0;
@@ -496,8 +496,10 @@
             emptyEl.classList.add("d-none");
         }
 
-        if (analysisLoadedCache[String(matrixId)]) {
-            renderAnalysesList(analysisLoadedCache[String(matrixId)]);
+        const cacheKey = String(matrixId) + "_WEB_ONLY";
+
+        if (analysisLoadedCache[cacheKey]) {
+            renderAnalysesList(analysisLoadedCache[cacheKey]);
             return;
         }
 
@@ -509,13 +511,21 @@
             dataType: "json",
             data: {
                 id_matrice: matrixId,
+                web_only: 1,
             },
         })
             .done(function (response) {
                 const analyses = Array.isArray(response.value)
-                    ? response.value
+                    ? response.value.filter(function (item) {
+                          return (
+                              item.SelezionabileSuWeb === true ||
+                              item.SelezionabileSuWeb === 1 ||
+                              item.SelezionabileSuWeb === "1"
+                          );
+                      })
                     : [];
-                analysisLoadedCache[String(matrixId)] = analyses;
+
+                analysisLoadedCache[cacheKey] = analyses;
                 renderAnalysesList(analyses);
             })
             .fail(function (xhr) {
@@ -674,12 +684,7 @@
             });
         }
 
-        const webOnlyEl = modal.querySelector("#analysisWebOnly");
-        if (webOnlyEl) {
-            webOnlyEl.addEventListener("change", function () {
-                filterAnalysisList();
-            });
-        }
+        // WEB only is now fixed by default
 
         const searchEl = modal.querySelector("#analysisSearchInput");
         if (searchEl) {

public/userarea/bindings_manage.php

@@ -0,0 +1,449 @@
+<?php
+include('include/headscript.php');
+require_once(__DIR__ . '/class/binding-functions.php');
+
+$db = DBHandlerSelect::getInstance();
+$pdo = $db->getConnection();
+
+// Filtri comuni.
+$templateFilter = isset($_GET['template_id']) ? intval($_GET['template_id']) : 0;
+$search         = trim($_GET['q'] ?? '');
+$perPage        = 50;
+$page           = max(1, intval($_GET['page'] ?? 1));
+$dir            = (strtolower($_GET['dir'] ?? 'asc') === 'desc') ? 'DESC' : 'ASC';
+
+// Modalita': overview (gruppi per campo) oppure detail (valori di un campo).
+$focusTarget = trim($_GET['target'] ?? '');
+$mode = $focusTarget !== '' ? 'detail' : 'overview';
+
+$templates = $pdo->query("SELECT id, name FROM excel_templates ORDER BY name")->fetchAll(PDO::FETCH_ASSOC);
+
+// Helper: URL che preserva i filtri correnti.
+$bmUrl = function (array $ov) use ($templateFilter, $search, $dir, $page, $focusTarget) {
+    $base = [
+        'template_id' => $templateFilter ?: null,
+        'q'           => $search !== '' ? $search : null,
+        'order'       => $_GET['order'] ?? null,
+        'dir'         => strtolower($dir),
+        'page'        => $page,
+        'target'      => $focusTarget !== '' ? $focusTarget : null,
+    ];
+    $p = array_filter(array_merge($base, $ov), fn($v) => $v !== null && $v !== '');
+    return 'bindings_manage.php?' . http_build_query($p);
+};
+
+// Filtri WHERE comuni (template/kind/search).
+$conds = [];
+$params = [];
+if ($templateFilter > 0) {
+    $conds[] = 'b.template_id = ?';
+    $params[] = $templateFilter;
+}
+
+if ($mode === 'detail') {
+    // ---- DETAIL: valori (json_value -> lims) di un singolo campo (target_key) ----
+    $conds[] = 'b.target_key = ?';
+    $params[] = $focusTarget;
+    if ($search !== '') {
+        $conds[] = '(b.json_value LIKE ? OR b.lims_value LIKE ?)';
+        $like = '%' . $search . '%';
+        array_push($params, $like, $like);
+    }
+    $where = 'WHERE ' . implode(' AND ', $conds);
+
+    $orderCols = ['json' => 'b.json_value', 'lims' => 'b.lims_value'];
+    $order = array_key_exists($_GET['order'] ?? '', $orderCols) ? $_GET['order'] : 'json';
+    $orderSql = $orderCols[$order] . ' ' . $dir;
+
+    $countStmt = $pdo->prepare("SELECT COUNT(*) FROM json_lims_binding b $where");
+    $countStmt->execute($params);
+    $total = (int) $countStmt->fetchColumn();
+    $totalPages = max(1, (int) ceil($total / $perPage));
+    if ($page > $totalPages) $page = $totalPages;
+    $offset = ($page - 1) * $perPage;
+
+    $sql = "SELECT b.id, b.template_id, b.binding_kind, b.mapping_id, b.fixed_field_key, b.field_id,
+                   b.json_value, b.lims_value_id, b.lims_value,
+                   t.name AS template_name, m.field_label
+            FROM json_lims_binding b
+            LEFT JOIN excel_templates t ON t.id = b.template_id
+            LEFT JOIN template_mapping m ON m.id = b.mapping_id
+            $where
+            ORDER BY $orderSql, b.json_value ASC
+            LIMIT $perPage OFFSET $offset";
+    $stmt = $pdo->prepare($sql);
+    $stmt->execute($params);
+    $rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
+
+    // Intestazione del gruppo (tutte le righe condividono campo/template/kind).
+    $head = $rows[0] ?? null;
+    if (!$head) {
+        // Target vuoto (es. dopo aver svuotato il campo): ricavo i meta dal target_key.
+        $head = ['binding_kind' => str_starts_with($focusTarget, 'fx:') ? 'fixed' : 'custom'];
+    }
+    $headKind = $head['binding_kind'] ?? 'custom';
+    if ($headKind === 'fixed') {
+        $headFixedKey = $head['fixed_field_key'] ?? (explode(':', $focusTarget)[2] ?? '');
+        $headLabel = binding_fixed_label((string) $headFixedKey);
+        $headTpl = (int) ($head['template_id'] ?? (explode(':', $focusTarget)[1] ?? 0));
+    } else {
+        $headLabel = $head['field_label'] ?? ('mapping ' . ($head['mapping_id'] ?? ''));
+        $headTpl = (int) ($head['template_id'] ?? 0);
+    }
+    $headTplName = $headTpl ? ($pdo->query("SELECT name FROM excel_templates WHERE id=" . $headTpl)->fetchColumn() ?: ('#' . $headTpl)) : '';
+} else {
+    // ---- OVERVIEW: un gruppo per campo (target_key) con il conteggio ----
+    if ($search !== '') {
+        $conds[] = '(t.name LIKE ? OR m.field_label LIKE ? OR b.fixed_field_key LIKE ?)';
+        $like = '%' . $search . '%';
+        array_push($params, $like, $like, $like);
+    }
+    $where = $conds ? ('WHERE ' . implode(' AND ', $conds)) : '';
+
+    $orderCols = ['template' => 'template_name', 'field' => 'field_label', 'count' => 'cnt'];
+    $order = array_key_exists($_GET['order'] ?? '', $orderCols) ? $_GET['order'] : 'template';
+    $orderSql = $orderCols[$order] . ' ' . $dir;
+
+    $countStmt = $pdo->prepare("SELECT COUNT(DISTINCT b.target_key)
+        FROM json_lims_binding b
+        LEFT JOIN excel_templates t ON t.id = b.template_id
+        LEFT JOIN template_mapping m ON m.id = b.mapping_id $where");
+    $countStmt->execute($params);
+    $total = (int) $countStmt->fetchColumn();
+    $totalPages = max(1, (int) ceil($total / $perPage));
+    if ($page > $totalPages) $page = $totalPages;
+    $offset = ($page - 1) * $perPage;
+
+    $sql = "SELECT b.target_key, b.template_id, b.binding_kind, b.mapping_id, b.fixed_field_key,
+                   MAX(t.name) AS template_name, MAX(m.field_label) AS field_label,
+                   COUNT(*) AS cnt, MAX(b.updated_at) AS last_updated
+            FROM json_lims_binding b
+            LEFT JOIN excel_templates t ON t.id = b.template_id
+            LEFT JOIN template_mapping m ON m.id = b.mapping_id
+            $where
+            GROUP BY b.target_key, b.template_id, b.binding_kind, b.mapping_id, b.fixed_field_key
+            ORDER BY $orderSql, template_name ASC
+            LIMIT $perPage OFFSET $offset";
+    $stmt = $pdo->prepare($sql);
+    $stmt->execute($params);
+    $groups = $stmt->fetchAll(PDO::FETCH_ASSOC);
+}
+
+$sortLink = function (string $col, string $label) use ($bmUrl, $order, $dir) {
+    $nextDir = ($order === $col && $dir === 'ASC') ? 'desc' : 'asc';
+    $caret = $order === $col ? ($dir === 'ASC' ? ' &#9650;' : ' &#9660;') : '';
+    return '<a href="' . htmlspecialchars($bmUrl(['order' => $col, 'dir' => $nextDir, 'page' => 1]))
+        . '" class="text-decoration-none text-reset">' . $label . $caret . '</a>';
+};
+?>
+<!doctype html>
+<html lang="en">
+
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
+    <?php include('cssinclude.php'); ?>
+    <link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet">
+    <style>
+        .json-value {
+            font-family: Consolas, Monaco, monospace;
+            font-weight: 600;
+        }
+
+        td .select2-container {
+            min-width: 220px;
+        }
+
+        .row-status {
+            font-size: 12px;
+        }
+
+        .group-row {
+            cursor: pointer;
+        }
+
+        .group-row:hover {
+            background-color: #f1f5ff;
+        }
+    </style>
+    <title>Gestione Binding JSON &rarr; LIMS - <?= htmlspecialchars($titlewebsite ?? '', ENT_QUOTES, 'UTF-8'); ?></title>
+</head>
+
+<body>
+    <div class="wrapper">
+        <?php include('include/navbar.php'); ?>
+        <?php include('include/topbar.php'); ?>
+        <div class="page-wrapper">
+            <div class="page-content">
+
+                <div class="card radius-10">
+                    <div class="card-header">
+                        <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
+                            <h6 class="mb-0">Gestione Binding JSON &rarr; LIMS</h6>
+                            <form method="GET" class="d-flex align-items-center gap-2 flex-wrap mb-0">
+                                <?php if ($mode === 'detail'): ?>
+                                    <input type="hidden" name="target" value="<?= htmlspecialchars($focusTarget) ?>">
+                                <?php endif; ?>
+                                <input type="hidden" name="dir" value="<?= htmlspecialchars(strtolower($dir)) ?>">
+                                <input type="text" name="q" class="form-control form-control-sm" style="width:220px;"
+                                    placeholder="<?= $mode === 'detail' ? 'Cerca valore...' : 'Cerca campo/template...' ?>"
+                                    value="<?= htmlspecialchars($search) ?>">
+                                <?php if ($mode === 'overview'): ?>
+                                    <select name="template_id" class="form-select form-select-sm" style="width:auto;" onchange="this.form.submit()">
+                                        <option value="0">Tutti i template</option>
+                                        <?php foreach ($templates as $t): ?>
+                                            <option value="<?= (int) $t['id'] ?>" <?= $templateFilter === (int) $t['id'] ? 'selected' : '' ?>>
+                                                <?= htmlspecialchars($t['name']) ?>
+                                            </option>
+                                        <?php endforeach; ?>
+                                    </select>
+                                <?php endif; ?>
+                                <button type="submit" class="btn btn-sm btn-primary">Cerca</button>
+                            </form>
+                        </div>
+                    </div>
+
+                    <div class="card-body">
+                        <div id="globalError" class="alert alert-danger" style="display:none;"></div>
+
+                        <?php if ($mode === 'detail'): ?>
+                            <div class="d-flex justify-content-between align-items-center mb-2 flex-wrap gap-2">
+                                <div>
+                                    <a href="<?= htmlspecialchars($bmUrl(['target' => null, 'page' => 1, 'order' => null])) ?>" class="btn btn-sm btn-outline-secondary">
+                                        <i class="fas fa-arrow-left"></i> Tutti i campi
+                                    </a>
+                                    <span class="ms-2">
+                                        <strong><?= htmlspecialchars($headLabel) ?></strong>
+                                        <?php if ($headKind === 'fixed'): ?><span class="badge bg-light text-dark border">fixed</span><?php endif; ?>
+                                        <span class="text-muted">&middot; <?= htmlspecialchars((string) $headTplName) ?></span>
+                                    </span>
+                                </div>
+                                <span class="small text-muted"><?= $total ?> valore/i &middot; pagina <?= $page ?>/<?= $totalPages ?></span>
+                            </div>
+
+                            <div class="table-responsive">
+                                <table class="table table-striped table-bordered align-middle" id="bindingsTable">
+                                    <thead>
+                                        <tr>
+                                            <th><?= $sortLink('json', 'Valore JSON') ?></th>
+                                            <th><?= $sortLink('lims', 'Valore LIMS') ?></th>
+                                            <th style="width:170px;">Azioni</th>
+                                        </tr>
+                                    </thead>
+                                    <tbody>
+                                        <?php if (empty($rows)): ?>
+                                            <tr class="no-data-row">
+                                                <td colspan="3" class="text-center text-muted">Nessun valore per questo campo.</td>
+                                            </tr>
+                                        <?php else: ?>
+                                            <?php foreach ($rows as $b): ?>
+                                                <?php $bDangling = ($b['binding_kind'] === 'custom' && $b['field_label'] === null); ?>
+                                                <tr data-id="<?= (int) $b['id'] ?>"
+                                                    data-kind="<?= $b['binding_kind'] ?>"
+                                                    data-mapping-id="<?= (int) $b['mapping_id'] ?>"
+                                                    data-field-id="<?= (int) $b['field_id'] ?>"
+                                                    data-fixed-key="<?= htmlspecialchars((string) $b['fixed_field_key'], ENT_QUOTES) ?>"
+                                                    data-template-id="<?= (int) $b['template_id'] ?>"
+                                                    data-json-value="<?= htmlspecialchars($b['json_value'], ENT_QUOTES) ?>">
+                                                    <td class="json-value"><?= htmlspecialchars($b['json_value']) ?></td>
+                                                    <td>
+                                                        <select class="form-select binding-select" <?= $bDangling ? 'disabled' : '' ?>>
+                                                            <?php if ($b['lims_value_id']): ?>
+                                                                <option value="<?= (int) $b['lims_value_id'] ?>" selected><?= htmlspecialchars($b['lims_value']) ?></option>
+                                                            <?php endif; ?>
+                                                        </select>
+                                                        <span class="row-status text-muted"></span>
+                                                    </td>
+                                                    <td>
+                                                        <button type="button" class="btn btn-sm btn-success save-binding-btn" disabled>
+                                                            <i class="fas fa-save"></i> Salva
+                                                        </button>
+                                                        <button type="button" class="btn btn-sm btn-outline-danger delete-binding-btn">
+                                                            <i class="fas fa-trash"></i>
+                                                        </button>
+                                                    </td>
+                                                </tr>
+                                            <?php endforeach; ?>
+                                        <?php endif; ?>
+                                    </tbody>
+                                </table>
+                            </div>
+
+                        <?php else: ?>
+                            <div class="alert alert-secondary small">
+                                Scegli un campo per gestirne i valori. Le modifiche valgono per le <strong>importazioni future</strong>.
+                            </div>
+                            <div class="small text-muted mb-2"><?= $total ?> camp<?= $total === 1 ? 'o' : 'i' ?> con binding &middot; pagina <?= $page ?>/<?= $totalPages ?></div>
+
+                            <div class="table-responsive">
+                                <table class="table table-striped table-bordered align-middle">
+                                    <thead>
+                                        <tr>
+                                            <th><?= $sortLink('template', 'Template') ?></th>
+                                            <th><?= $sortLink('field', 'Campo') ?></th>
+                                            <th style="width:120px;"><?= $sortLink('count', '# Binding') ?></th>
+                                            <th style="width:90px;"></th>
+                                        </tr>
+                                    </thead>
+                                    <tbody>
+                                        <?php if (empty($groups)): ?>
+                                            <tr>
+                                                <td colspan="4" class="text-center text-muted">Nessun binding presente.</td>
+                                            </tr>
+                                        <?php else: ?>
+                                            <?php foreach ($groups as $g): ?>
+                                                <?php
+                                                $gKind = $g['binding_kind'];
+                                                $gDangling = ($gKind === 'custom' && $g['field_label'] === null);
+                                                $gLabel = $gKind === 'fixed'
+                                                    ? binding_fixed_label((string) $g['fixed_field_key'])
+                                                    : ($g['field_label'] ?? ('mapping ' . $g['mapping_id']));
+                                                $gUrl = $bmUrl(['target' => $g['target_key'], 'page' => 1, 'order' => null, 'q' => null]);
+                                                ?>
+                                                <tr class="group-row" onclick="window.location.href='<?= htmlspecialchars($gUrl) ?>'">
+                                                    <td><?= htmlspecialchars($g['template_name'] ?? ('#' . $g['template_id'])) ?></td>
+                                                    <td>
+                                                        <?= htmlspecialchars($gLabel) ?>
+                                                        <?php if ($gKind === 'fixed'): ?><span class="badge bg-light text-dark border">fixed</span><?php endif; ?>
+                                                        <?php if ($gDangling): ?><span class="badge bg-warning text-dark" title="Il campo mappato non esiste piu'">campo rimosso</span><?php endif; ?>
+                                                    </td>
+                                                    <td><span class="badge bg-primary"><?= (int) $g['cnt'] ?></span></td>
+                                                    <td><a href="<?= htmlspecialchars($gUrl) ?>" class="btn btn-sm btn-outline-primary">Apri</a></td>
+                                                </tr>
+                                            <?php endforeach; ?>
+                                        <?php endif; ?>
+                                    </tbody>
+                                </table>
+                            </div>
+                        <?php endif; ?>
+
+                        <?php if ($totalPages > 1): ?>
+                            <nav class="d-flex justify-content-center mt-2">
+                                <ul class="pagination pagination-sm mb-0">
+                                    <li class="page-item <?= $page <= 1 ? 'disabled' : '' ?>">
+                                        <a class="page-link" href="<?= htmlspecialchars($bmUrl(['page' => max(1, $page - 1)])) ?>">&laquo;</a>
+                                    </li>
+                                    <li class="page-item disabled"><span class="page-link"><?= $page ?> / <?= $totalPages ?></span></li>
+                                    <li class="page-item <?= $page >= $totalPages ? 'disabled' : '' ?>">
+                                        <a class="page-link" href="<?= htmlspecialchars($bmUrl(['page' => min($totalPages, $page + 1)])) ?>">&raquo;</a>
+                                    </li>
+                                </ul>
+                            </nav>
+                        <?php endif; ?>
+                    </div>
+                </div>
+
+            </div>
+        </div>
+        <div class="overlay toggle-icon"></div>
+        <a href="javaScript:;" class="back-to-top"><i class='bx bxs-up-arrow-alt'></i></a>
+        <?php include('include/footer.php'); ?>
+    </div>
+
+    <?php include('jsinclude.php'); ?>
+    <script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
+
+    <script>
+        $(function() {
+            const $globalError = $('#globalError');
+
+            // Select2 solo nelle righe valore della pagina corrente (max 50), saltando le disabilitate.
+            $('.binding-select').not(':disabled').each(function() {
+                const $row = $(this).closest('tr');
+                const isFixed = $row.data('kind') === 'fixed';
+                const initialVal = $(this).val();
+
+                $(this).select2({
+                    width: '220px',
+                    ajax: {
+                        url: isFixed ? 'search_fixed_field_values.php' : 'search_customfield_values.php',
+                        dataType: 'json',
+                        delay: 200,
+                        data: params => isFixed ? {
+                            field_key: $row.data('fixed-key'),
+                            template_id: $row.data('template-id'),
+                            q: params.term || '',
+                            limit: 50
+                        } : {
+                            field_id: $row.data('field-id'),
+                            q: params.term || '',
+                            limit: 50
+                        },
+                        processResults: data => ({
+                            results: data.results || []
+                        })
+                    },
+                    minimumInputLength: 0
+                });
+
+                $(this).data('original-val', initialVal);
+            });
+
+            $('.binding-select').on('change', function() {
+                const $row = $(this).closest('tr');
+                const changed = String($(this).val()) !== String($(this).data('original-val'));
+                $row.find('.save-binding-btn').prop('disabled', !changed);
+            });
+
+            $('.save-binding-btn').on('click', function() {
+                const $row = $(this).closest('tr');
+                const $select = $row.find('.binding-select');
+                const selectedData = $select.select2('data')[0] || {};
+                const $status = $row.find('.row-status');
+                const $btn = $(this);
+
+                $globalError.hide();
+                $btn.prop('disabled', true);
+                $status.text('Salvataggio...').removeClass('text-success text-danger').addClass('text-muted');
+
+                const isFixed = $row.data('kind') === 'fixed';
+                const targetFields = isFixed
+                    ? { kind: 'fixed', fixed_field_key: $row.data('fixed-key') }
+                    : { kind: 'custom', mapping_id: $row.data('mapping-id'), field_id: $row.data('field-id') };
+
+                $.post('save_binding.php', {
+                    ...targetFields,
+                    template_id: $row.data('template-id'),
+                    json_value: String($row.data('json-value')),
+                    lims_value_id: $select.val(),
+                    lims_value: selectedData.text || ''
+                }).then(resp => {
+                    if (resp && resp.success) {
+                        $status.text('Salvato').removeClass('text-muted').addClass('text-success');
+                        $select.data('original-val', $select.val());
+                    } else {
+                        throw new Error((resp && resp.error) || 'Errore salvataggio');
+                    }
+                }).catch(err => {
+                    $status.text('Errore').removeClass('text-muted').addClass('text-danger');
+                    $globalError.text(err.message || 'Errore durante il salvataggio.').show();
+                    $btn.prop('disabled', false);
+                });
+            });
+
+            $('.delete-binding-btn').on('click', function() {
+                if (!confirm('Eliminare questo binding?')) return;
+                const $row = $(this).closest('tr');
+                const $btn = $(this);
+                $globalError.hide();
+                $btn.prop('disabled', true);
+
+                $.post('delete_binding.php', {
+                    id: $row.data('id')
+                }).then(resp => {
+                    if (resp && resp.success) {
+                        $row.fadeOut(200, () => $row.remove());
+                    } else {
+                        throw new Error((resp && resp.error) || 'Errore eliminazione');
+                    }
+                }).catch(err => {
+                    $globalError.text(err.message || 'Errore durante l\'eliminazione.').show();
+                    $btn.prop('disabled', false);
+                });
+            });
+        });
+    </script>
+</body>
+
+</html>

public/userarea/class/VisualLimsApiClient.class.php

@@ -257,35 +257,56 @@ class VisualLimsApiClient
     }
 
     /**
-     * Recupera contenuto binario - Adattato per https://bvcpsitaly-elims.com/limsapi
+     * Get raw/binary content from VisualLims API.
+     * Used for PDF downloads from MediaFile/DownloadStream.
      */
     public function getRaw($endpoint)
     {
         $token = $this->getToken();
 
-        // IMPORTANTE: usa /odata/ e NON /api/odata/
-        $url = "{$this->baseUrl}/odata/{$endpoint}";
+        /*
+     * Normal JSON OData calls use:
+     *   {$this->baseUrl}/api/odata/...
+     *
+     * Media file downloads use:
+     *   {$this->baseUrl}/api/MediaFile/DownloadStream...
+     */
+        $url = rtrim($this->baseUrl, '/') . '/api/' . ltrim($endpoint, '/');
 
         $ch = curl_init($url);
-        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-        curl_setopt($ch, CURLOPT_HTTPHEADER, [
-            "Authorization: Bearer {$token}",
-            "Accept: */*"
+
+        curl_setopt_array($ch, [
+            CURLOPT_RETURNTRANSFER => true,
+            CURLOPT_HTTPHEADER => [
+                "Authorization: Bearer {$token}",
+                "Accept: application/pdf,*/*"
+            ],
+            CURLOPT_SSL_VERIFYPEER => false,
+            CURLOPT_SSL_VERIFYHOST => false,
+            CURLOPT_FOLLOWLOCATION => true,
+            CURLOPT_TIMEOUT => 60
         ]);
-        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
 
         $response = curl_exec($ch);
-        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-        $curl_error = curl_error($ch);
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $contentType = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
+        $curlError = curl_error($ch);
+
         curl_close($ch);
 
         if ($response === false) {
-            throw new Exception("Errore cURL: " . $curl_error);
+            throw new Exception("Errore cURL download raw: " . $curlError);
         }
 
-        if ($http_code !== 200) {
-            throw new Exception("HTTP {$http_code} su endpoint: " . $url);
+        if ($httpCode < 200 || $httpCode >= 300) {
+            throw new Exception(
+                "Errore HTTP {$httpCode} durante download raw. Content-Type: {$contentType}. Response: " .
+                    substr($response, 0, 500)
+            );
+        }
+
+        if (empty($response)) {
+            throw new Exception("Risposta vuota dal download raw.");
         }
 
         return $response;

public/userarea/class/binding-functions.php

@@ -0,0 +1,448 @@
+<?php
+
+// Helpers for JSON -> LIMS value bindings (table json_lims_binding).
+// Supports two kinds: 'custom' (template_mapping list fields, value -> import_data_details)
+// and 'fixed' (template_fixed_mapping list fields, id -> datadb column).
+
+// ---------------------------------------------------------------------------
+// Fixed-field metadata
+// ---------------------------------------------------------------------------
+
+function binding_fixed_alias_map(): array
+{
+    return [
+        'ClienteResponsabile'      => 'cliente_responsabile_id',
+        'ClienteFornitore'         => 'cliente_fornitore_id',
+        'ClienteAnalisi'           => 'clienteAnalisi',
+        'MoltiplicatorePrezzo'     => 'moltiplicatore_prezzo_id',
+        'AnagraficaCertestObject'  => 'anagrafica_certest_object_id',
+        'AnagraficaCertestService' => 'anagrafica_certest_service_id',
+        'ConsegnaRichiesta'        => 'consegna_richiesta',
+    ];
+}
+
+// Fixed-field keys that are LIMS list dropdowns (bindable). ConsegnaRichiesta is a date.
+function binding_fixed_is_list(string $key): bool
+{
+    return in_array($key, [
+        'ClienteResponsabile',
+        'ClienteFornitore',
+        'ClienteAnalisi',
+        'MoltiplicatorePrezzo',
+        'AnagraficaCertestObject',
+        'AnagraficaCertestService',
+    ], true);
+}
+
+function binding_fixed_column(string $key): ?string
+{
+    return binding_fixed_alias_map()[$key] ?? null;
+}
+
+// Auto-match only the small global lists; the client-based ones are huge / client-specific.
+function binding_fixed_auto_matchable(string $key): bool
+{
+    return in_array($key, [
+        'MoltiplicatorePrezzo',
+        'AnagraficaCertestObject',
+        'AnagraficaCertestService',
+    ], true);
+}
+
+function binding_fixed_label(string $key): string
+{
+    $labels = [
+        'AnagraficaCertestObject'  => 'Anagrafica Certest Object',
+        'AnagraficaCertestService' => 'Anagrafica Certest Service',
+        'MoltiplicatorePrezzo'     => 'Moltiplicatore Prezzo',
+        'ClienteResponsabile'      => 'Cliente Responsabile',
+        'ClienteFornitore'         => 'Cliente Fornitore',
+        'ClienteAnalisi'           => 'Cliente Analisi',
+    ];
+    return $labels[$key] ?? $key;
+}
+
+// ---------------------------------------------------------------------------
+// Bindable check (custom mapping row)
+// ---------------------------------------------------------------------------
+
+function binding_is_list_field(array $mapping): bool
+{
+    $hasList = (int) ($mapping['has_list'] ?? 0) === 1;
+    $isMultiChoice = strcasecmp(trim((string) ($mapping['data_type'] ?? '')), 'SceltaMultipla') === 0;
+    return $hasList || $isMultiChoice;
+}
+
+// ---------------------------------------------------------------------------
+// Target keys + lookup / upsert
+// ---------------------------------------------------------------------------
+
+function binding_target_custom(int $mappingId): string
+{
+    return 'cf:' . $mappingId;
+}
+
+function binding_target_fixed(int $templateId, string $fixedKey): string
+{
+    return 'fx:' . $templateId . ':' . $fixedKey;
+}
+
+function binding_lookup_target(PDO $pdo, string $targetKey, string $jsonValue): ?array
+{
+    $stmt = $pdo->prepare(
+        "SELECT id, lims_value_id, lims_value
+         FROM json_lims_binding
+         WHERE target_key = ? AND json_value = ?
+         LIMIT 1"
+    );
+    $stmt->execute([$targetKey, $jsonValue]);
+    $row = $stmt->fetch(PDO::FETCH_ASSOC);
+    return $row ?: null;
+}
+
+function binding_lookup(PDO $pdo, int $mappingId, string $jsonValue): ?array
+{
+    return binding_lookup_target($pdo, binding_target_custom($mappingId), $jsonValue);
+}
+
+function binding_lookup_fixed(PDO $pdo, int $templateId, string $fixedKey, string $jsonValue): ?array
+{
+    return binding_lookup_target($pdo, binding_target_fixed($templateId, $fixedKey), $jsonValue);
+}
+
+function binding_upsert_row(
+    PDO $pdo,
+    string $kind,
+    int $templateId,
+    ?int $mappingId,
+    ?string $fixedFieldKey,
+    string $targetKey,
+    int $fieldId,
+    string $jsonValue,
+    int $limsValueId,
+    string $limsValue,
+    ?int $createdBy
+): void {
+    $stmt = $pdo->prepare(
+        "INSERT INTO json_lims_binding
+            (template_id, binding_kind, mapping_id, fixed_field_key, target_key, field_id, json_value, lims_value_id, lims_value, created_by)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+         ON DUPLICATE KEY UPDATE
+            lims_value_id   = VALUES(lims_value_id),
+            lims_value      = VALUES(lims_value),
+            field_id        = VALUES(field_id),
+            template_id     = VALUES(template_id),
+            binding_kind    = VALUES(binding_kind),
+            mapping_id      = VALUES(mapping_id),
+            fixed_field_key = VALUES(fixed_field_key)"
+    );
+    $stmt->execute([
+        $templateId, $kind, $mappingId, $fixedFieldKey, $targetKey,
+        $fieldId, $jsonValue, $limsValueId, $limsValue, $createdBy,
+    ]);
+}
+
+function binding_upsert(
+    PDO $pdo,
+    int $templateId,
+    int $mappingId,
+    int $fieldId,
+    string $jsonValue,
+    int $limsValueId,
+    string $limsValue,
+    ?int $createdBy
+): void {
+    binding_upsert_row(
+        $pdo, 'custom', $templateId, $mappingId, null,
+        binding_target_custom($mappingId), $fieldId, $jsonValue, $limsValueId, $limsValue, $createdBy
+    );
+}
+
+function binding_upsert_fixed(
+    PDO $pdo,
+    int $templateId,
+    string $fixedKey,
+    string $jsonValue,
+    int $limsValueId,
+    string $limsValue,
+    ?int $createdBy
+): void {
+    binding_upsert_row(
+        $pdo, 'fixed', $templateId, null, $fixedKey,
+        binding_target_fixed($templateId, $fixedKey), 0, $jsonValue, $limsValueId, $limsValue, $createdBy
+    );
+}
+
+function binding_delete_target(PDO $pdo, string $targetKey, string $jsonValue): int
+{
+    $stmt = $pdo->prepare("DELETE FROM json_lims_binding WHERE target_key = ? AND json_value = ?");
+    $stmt->execute([$targetKey, $jsonValue]);
+    return $stmt->rowCount();
+}
+
+// ---------------------------------------------------------------------------
+// Custom-field LIMS values (cache/customfield_{id}.json) + auto-match
+// ---------------------------------------------------------------------------
+
+function binding_get_lims_values(int $fieldId): array
+{
+    static $memo = [];
+    if ($fieldId <= 0) {
+        return [];
+    }
+    if (array_key_exists($fieldId, $memo)) {
+        return $memo[$fieldId];
+    }
+
+    $cacheDir = dirname(__DIR__) . '/cache';
+    $cacheFile = $cacheDir . '/customfield_' . $fieldId . '.json';
+
+    try {
+        if (file_exists($cacheFile) && (time() - filemtime($cacheFile) < 3600)) {
+            $values = json_decode(file_get_contents($cacheFile), true);
+        } else {
+            require_once __DIR__ . '/VisualLimsApiClient.class.php';
+            $api = VisualLimsApiClient::getInstance();
+            $data = $api->get("CustomField($fieldId)?\$expand=CustomFieldsValues");
+            $values = $data['CustomFieldsValues'] ?? [];
+            if (!is_dir($cacheDir)) {
+                mkdir($cacheDir, 0777, true);
+            }
+            file_put_contents($cacheFile, json_encode($values));
+        }
+    } catch (Throwable $e) {
+        error_log("binding_get_lims_values failed for field $fieldId: " . $e->getMessage());
+        $values = [];
+    }
+
+    if (!is_array($values)) {
+        $values = [];
+    }
+
+    return $memo[$fieldId] = $values;
+}
+
+// Exactly one case-insensitive match by Valore -> that value, otherwise null.
+function binding_auto_match(array $limsValues, string $jsonValue): ?array
+{
+    $needle = mb_strtolower(trim($jsonValue));
+    if ($needle === '') {
+        return null;
+    }
+
+    $matches = [];
+    foreach ($limsValues as $v) {
+        $valore = (string) ($v['Valore'] ?? '');
+        if (mb_strtolower(trim($valore)) === $needle) {
+            $matches[] = $v;
+        }
+    }
+
+    return count($matches) === 1 ? $matches[0] : null;
+}
+
+// ---------------------------------------------------------------------------
+// Fixed-field LIMS values (per-field source) + auto-match
+// ---------------------------------------------------------------------------
+
+function binding_template_idclient(PDO $pdo, int $templateId): int
+{
+    $stmt = $pdo->prepare("SELECT idclient FROM excel_templates WHERE id = ?");
+    $stmt->execute([$templateId]);
+    return (int) ($stmt->fetchColumn() ?: 0);
+}
+
+function binding_client_label(array $client): string
+{
+    $name = trim($client['Nominativo'] ?? '');
+    $id = trim((string) ($client['IdCliente'] ?? ''));
+    $code = trim((string) ($client['CodiceCliente'] ?? ''));
+
+    $parts = explode('_', $code);
+    $suffix = trim($parts[1] ?? '');
+    if ($suffix === '' && $code !== '') {
+        $suffix = substr($code, 0, 1);
+    }
+    if ($suffix === '') {
+        $suffix = '--';
+    }
+
+    return $name . ' - ' . $suffix . ' (ID: ' . $id . ')';
+}
+
+// Fetch an OData payload with a 1-hour file cache.
+function binding_cached_get($api, string $cacheFile, string $endpoint): array
+{
+    if (file_exists($cacheFile) && (time() - filemtime($cacheFile) < 3600)) {
+        $data = json_decode(file_get_contents($cacheFile), true);
+    } else {
+        $data = $api->get($endpoint);
+        $dir = dirname($cacheFile);
+        if (!is_dir($dir)) {
+            mkdir($dir, 0777, true);
+        }
+        file_put_contents($cacheFile, json_encode($data));
+    }
+    return is_array($data) ? $data : [];
+}
+
+// Normalized LIMS value list for a fixed field: [['id' => int, 'text' => string], ...].
+function binding_get_fixed_values(PDO $pdo, string $fieldKey, int $templateId): array
+{
+    static $memo = [];
+    $memoKey = $fieldKey . '|' . $templateId;
+    if (isset($memo[$memoKey])) {
+        return $memo[$memoKey];
+    }
+
+    $cacheDir = dirname(__DIR__) . '/cache';
+    $out = [];
+
+    try {
+        require_once __DIR__ . '/VisualLimsApiClient.class.php';
+        $api = VisualLimsApiClient::getInstance();
+
+        switch ($fieldKey) {
+            case 'MoltiplicatorePrezzo':
+                $data = binding_cached_get($api, "$cacheDir/moltiplicatori_prezzo.json", 'MoltiplicatorePrezzi');
+                foreach (($data['value'] ?? []) as $r) {
+                    $out[] = ['id' => (int) ($r['IdMoltiplicatorePrezzo'] ?? 0), 'text' => (string) ($r['Descrizione'] ?? '')];
+                }
+                break;
+
+            case 'AnagraficaCertestObject':
+            case 'AnagraficaCertestService':
+                $file = $fieldKey === 'AnagraficaCertestObject' ? 'anagrafica_certest_object.json' : 'anagrafica_certest_service.json';
+                $data = binding_cached_get($api, "$cacheDir/$file", $fieldKey);
+                foreach (($data['value'] ?? []) as $r) {
+                    $code = trim((string) ($r['Codice'] ?? ''));
+                    $text = ($code !== '' ? $code . ' - ' : '') . (string) ($r['NomeAnagrafica'] ?? '');
+                    $out[] = ['id' => (int) ($r['IdAnagrafica'] ?? 0), 'text' => $text];
+                }
+                break;
+
+            case 'ClienteResponsabile':
+                $idCliente = binding_template_idclient($pdo, $templateId);
+                if ($idCliente > 0) {
+                    $data = binding_cached_get($api, "$cacheDir/cliente_responsabili_$idCliente.json", "Cliente($idCliente)?\$expand=Responsabili");
+                    foreach (($data['Responsabili'] ?? []) as $r) {
+                        $out[] = ['id' => (int) ($r['IdClienteResponsabile'] ?? 0), 'text' => (string) ($r['Nominativo'] ?? '')];
+                    }
+                }
+                break;
+
+            case 'ClienteFornitore':
+            case 'ClienteAnalisi':
+                $endpoint = 'Cliente?' . http_build_query(['$select' => 'IdCliente,Nominativo,CodiceCliente', '$orderby' => 'Nominativo asc']);
+                $data = binding_cached_get($api, "$cacheDir/clienti.json", $endpoint);
+                foreach (($data['value'] ?? []) as $r) {
+                    $out[] = ['id' => (int) ($r['IdCliente'] ?? 0), 'text' => binding_client_label($r)];
+                }
+                break;
+        }
+    } catch (Throwable $e) {
+        error_log("binding_get_fixed_values($fieldKey) failed: " . $e->getMessage());
+        $out = [];
+    }
+
+    return $memo[$memoKey] = $out;
+}
+
+// Exactly one case-insensitive match by text on a [{id,text}] list, otherwise null.
+function binding_auto_match_fixed(array $values, string $jsonValue): ?array
+{
+    $needle = mb_strtolower(trim($jsonValue));
+    if ($needle === '') {
+        return null;
+    }
+    $matches = [];
+    foreach ($values as $v) {
+        if (mb_strtolower(trim((string) ($v['text'] ?? ''))) === $needle) {
+            $matches[] = $v;
+        }
+    }
+    return count($matches) === 1 ? $matches[0] : null;
+}
+
+// ---------------------------------------------------------------------------
+// JSON node -> column matching (shared with import_insert custom logic)
+// ---------------------------------------------------------------------------
+
+function binding_find_column_index(string $sourceColumn, array $columns): int
+{
+    $sourceColumn = trim($sourceColumn);
+    if ($sourceColumn === '') {
+        return -1;
+    }
+
+    $columnsTrimmed = array_map('trim', $columns);
+    $candidates = [
+        $sourceColumn,
+        preg_replace('/^data\[\]\./', '', $sourceColumn),
+        preg_replace('/^data\.0\./', '', $sourceColumn),
+        str_replace('data[].', 'data.0.', $sourceColumn),
+        str_replace('data.0.', 'data[].', $sourceColumn),
+    ];
+    $candidates = array_values(array_unique(array_filter(array_map('trim', $candidates), function ($v) {
+        return $v !== '';
+    })));
+
+    foreach ($candidates as $c) {
+        $i = array_search($c, $columnsTrimmed, true);
+        if ($i !== false) {
+            return (int) $i;
+        }
+    }
+    return -1;
+}
+
+// ---------------------------------------------------------------------------
+// Apply resolved values
+// ---------------------------------------------------------------------------
+
+// Custom: write the resolved LIMS text into import_data_details for the given datadb ids.
+function binding_apply_to_details(
+    PDO $pdo,
+    int $mappingId,
+    string $limsValue,
+    array $datadbIds
+): int {
+    $datadbIds = array_values(array_filter(array_map('intval', $datadbIds)));
+    if (empty($datadbIds)) {
+        return 0;
+    }
+
+    $placeholders = implode(',', array_fill(0, count($datadbIds), '?'));
+    $sql = "UPDATE import_data_details
+            SET field_value = ?
+            WHERE mapping_id = ?
+              AND id IN ($placeholders)";
+
+    $params = array_merge([$limsValue, $mappingId], $datadbIds);
+    $stmt = $pdo->prepare($sql);
+    $stmt->execute($params);
+    return $stmt->rowCount();
+}
+
+// Fixed: write the resolved LIMS id into a whitelisted datadb column for the given ids.
+// $limsValueId null clears the column.
+function binding_apply_to_datadb(
+    PDO $pdo,
+    string $column,
+    ?int $limsValueId,
+    array $datadbIds
+): int {
+    if (!in_array($column, array_values(binding_fixed_alias_map()), true)) {
+        throw new InvalidArgumentException("Invalid fixed-field column: $column");
+    }
+    $datadbIds = array_values(array_filter(array_map('intval', $datadbIds)));
+    if (empty($datadbIds)) {
+        return 0;
+    }
+
+    $placeholders = implode(',', array_fill(0, count($datadbIds), '?'));
+    $sql = "UPDATE datadb SET `$column` = ? WHERE iddatadb IN ($placeholders)";
+    $stmt = $pdo->prepare($sql);
+    $stmt->execute(array_merge([$limsValueId], $datadbIds));
+    return $stmt->rowCount();
+}

public/userarea/clone_parts_to_visible.php

@@ -28,11 +28,13 @@ try {
 
     // 1. Load source parts
     $stmtParts = $pdo->prepare("
-        SELECT id, part_number, part_description, mix, idmatrice, note, dateexpiry
-        FROM identification_parts
-        WHERE iddatadb = ?
-        ORDER BY part_number ASC, id ASC
-    ");
+            SELECT id, part_number, part_description, mix, idmatrice, note, dateexpiry
+            FROM identification_parts
+            WHERE iddatadb = ?
+            AND part_description IS NOT NULL
+            AND TRIM(part_description) <> ''
+            ORDER BY part_number ASC, id ASC
+        ");
     $stmtParts->execute([$sourceIddatadb]);
     $sourceParts = $stmtParts->fetchAll(PDO::FETCH_ASSOC);
 

public/userarea/delete_binding.php

@@ -0,0 +1,40 @@
+<?php
+
+// Elimina un binding JSON -> LIMS. Ritorna JSON.
+
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once __DIR__ . '/class/db-functions.php';
+include dirname(__DIR__) . '/../extra/auth.php';
+
+header('Content-Type: application/json');
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+if (!Auth::check()) {
+    http_response_code(401);
+    echo json_encode(['success' => false, 'error' => 'Unauthorized']);
+    exit;
+}
+
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+    http_response_code(405);
+    echo json_encode(['success' => false, 'error' => 'Method not allowed']);
+    exit;
+}
+
+$id = intval($_POST['id'] ?? 0);
+if ($id <= 0) {
+    http_response_code(422);
+    echo json_encode(['success' => false, 'error' => 'Missing id']);
+    exit;
+}
+
+try {
+    $pdo = DBHandlerSelect::getInstance()->getConnection();
+    $stmt = $pdo->prepare("DELETE FROM json_lims_binding WHERE id = ?");
+    $stmt->execute([$id]);
+    echo json_encode(['success' => true, 'deleted' => $stmt->rowCount()]);
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode(['success' => false, 'error' => $e->getMessage()]);
+}

public/userarea/download_rapporto_pdf.php

@@ -0,0 +1,46 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $idRapportoFile = isset($_GET['id_rapporto_file']) ? (int)$_GET['id_rapporto_file'] : 0;
+
+    if ($idRapportoFile <= 0) {
+        throw new Exception("Parametro id_rapporto_file mancante o non valido.");
+    }
+
+    /*
+     * This endpoint returns the PDF binary stream.
+     * Do not call this with the normal get() method because get() expects JSON.
+     */
+    $endpoint = "MediaFile/DownloadStream?objectType=RapportoFile&propertyName=FileContent&objectKey={$idRapportoFile}";
+
+    $api = VisualLimsApiClient::getInstance();
+    $pdfContent = $api->getRaw($endpoint);
+
+    if (empty($pdfContent)) {
+        throw new Exception("PDF vuoto o non ricevuto dal server.");
+    }
+
+    $fileName = "rapporto_{$idRapportoFile}.pdf";
+
+    header('Content-Type: application/pdf');
+    header('Content-Disposition: inline; filename="' . $fileName . '"');
+    header('Content-Length: ' . strlen($pdfContent));
+    header('Cache-Control: private, max-age=0, must-revalidate');
+    header('Pragma: public');
+
+    echo $pdfContent;
+    exit;
+} catch (Exception $e) {
+    http_response_code(500);
+    header('Content-Type: application/json; charset=utf-8');
+
+    echo json_encode([
+        'success' => false,
+        'error' => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+}

public/userarea/edit_template_xls.php

@@ -26,6 +26,16 @@ $stmt = $pdo->prepare("SELECT * FROM routine");
 $stmt->execute();
 $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
+// Retrieve active API/JSON configurations
+$stmt = $pdo->prepare("
+    SELECT id, name, provider_code, api_type, php_class_name
+    FROM api_configurations
+    WHERE is_active = 1
+    ORDER BY name ASC
+");
+$stmt->execute();
+$apiConfigurations = $stmt->fetchAll(PDO::FETCH_ASSOC);
+
 $buttonBgPalette = [
     '#0d6efd' => 'Blue',
     '#6610f2' => 'Indigo',
@@ -181,6 +191,8 @@ if (!array_key_exists($currentButtonTextColor, array_change_key_case($buttonText
                                     <select name="source_type" id="sourceType" class="form-control" required>
                                         <option value="XLS" <?php echo (($template['source_type'] ?? 'XLS') === 'XLS') ? 'selected' : ''; ?>>XLS</option>
                                         <option value="API" <?php echo (($template['source_type'] ?? 'XLS') === 'API') ? 'selected' : ''; ?>>API</option>
+                                        <option value="JSON" <?php echo (($template['source_type'] ?? 'XLS') === 'JSON') ? 'selected' : ''; ?>>JSON</option>
+                                        <option value="PDF" <?php echo (($template['source_type'] ?? 'XLS') === 'PDF') ? 'selected' : ''; ?>>PDF</option>
                                     </select>
                                     <small class="text-muted">Choose the source used by this template</small>
                                 </div>
@@ -195,6 +207,60 @@ if (!array_key_exists($currentButtonTextColor, array_change_key_case($buttonText
                                     <input type="text" name="start_column" id="startColumn" class="form-control" value="<?php echo htmlspecialchars($template['start_column'] ?? ''); ?>">
                                 </div>
 
+                                <div class="mb-3" id="xlsSheetNumberWrapper">
+                                    <label class="form-label">XLS Sheet Number</label>
+                                    <input
+                                        type="number"
+                                        name="xls_sheet_index"
+                                        id="xlsSheetIndex"
+                                        class="form-control"
+                                        min="0"
+                                        value="<?php echo htmlspecialchars($template['xls_sheet_index'] ?? 0); ?>">
+                                    <small class="text-muted">
+                                        Use 0 for the first sheet, 1 for the second sheet, 2 for the third sheet, and so on.
+                                    </small>
+                                </div>
+
+                                <div class="mb-3" id="apiConfigWrapper" style="display: none;">
+                                    <label class="form-label">API / JSON Configuration *</label>
+                                    <select name="api_config_id" id="apiConfigSelect" class="form-control">
+                                        <option value="">Select an API configuration...</option>
+
+                                        <?php foreach ($apiConfigurations as $apiConfig): ?>
+                                            <?php
+                                            $apiLabelParts = [];
+
+                                            if (!empty($apiConfig['name'])) {
+                                                $apiLabelParts[] = $apiConfig['name'];
+                                            }
+
+                                            if (!empty($apiConfig['provider_code'])) {
+                                                $apiLabelParts[] = '[' . $apiConfig['provider_code'] . ']';
+                                            }
+
+                                            if (!empty($apiConfig['api_type'])) {
+                                                $apiLabelParts[] = '(' . $apiConfig['api_type'] . ')';
+                                            }
+
+                                            if (!empty($apiConfig['php_class_name'])) {
+                                                $apiLabelParts[] = '- ' . $apiConfig['php_class_name'];
+                                            }
+
+                                            $apiLabel = implode(' ', $apiLabelParts);
+                                            ?>
+
+                                            <option
+                                                value="<?php echo (int)$apiConfig['id']; ?>"
+                                                <?php echo ((int)($template['api_config_id'] ?? 0) === (int)$apiConfig['id']) ? 'selected' : ''; ?>>
+                                                <?php echo htmlspecialchars($apiLabel, ENT_QUOTES, 'UTF-8'); ?>
+                                            </option>
+                                        <?php endforeach; ?>
+                                    </select>
+                                    <small class="text-muted">
+                                        Select the API/JSON configuration linked to this template.
+                                    </small>
+                                </div>
+
                                 <div class="mb-3">
                                     <label class="form-label"><?= htmlspecialchars($desctemplate, ENT_QUOTES, 'UTF-8'); ?></label>
                                     <textarea name="description" class="form-control"><?php echo htmlspecialchars($template['description'] ?? ''); ?></textarea>
@@ -335,10 +401,16 @@ if (!array_key_exists($currentButtonTextColor, array_change_key_case($buttonText
             const routineAction3 = document.getElementById("routineAction3");
 
             const sourceType = document.getElementById("sourceType");
+
             const headerRowWrapper = document.getElementById("headerRowWrapper");
             const startColumnWrapper = document.getElementById("startColumnWrapper");
+            const xlsSheetNumberWrapper = document.getElementById("xlsSheetNumberWrapper");
+            const apiConfigWrapper = document.getElementById("apiConfigWrapper");
+
             const headerRow = document.getElementById("headerRow");
             const startColumn = document.getElementById("startColumn");
+            const xlsSheetIndex = document.getElementById("xlsSheetIndex");
+            const apiConfigSelect = document.getElementById("apiConfigSelect");
 
             const selectedClientId = <?php echo json_encode((int)($template['idclient'] ?? 0)); ?>;
             const selectedSchemaId = <?php echo json_encode((int)($template['idschema'] ?? 0)); ?>;
@@ -358,27 +430,55 @@ if (!array_key_exists($currentButtonTextColor, array_change_key_case($buttonText
                 allowClear: true
             });
 
+            $('#apiConfigSelect').select2({
+                placeholder: "Select an API configuration...",
+                allowClear: true
+            });
+
             function updateSourceFields() {
                 const selectedSource = sourceType.value;
 
-                if (selectedSource === 'API') {
-                    headerRowWrapper.style.opacity = '0.6';
-                    startColumnWrapper.style.opacity = '0.6';
+                const isXls = selectedSource === 'XLS';
+                const isApiOrJson = selectedSource === 'API' || selectedSource === 'JSON';
 
-                    headerRow.required = false;
-                    startColumn.required = false;
-
-                    headerRow.disabled = true;
-                    startColumn.disabled = true;
-                } else {
-                    headerRowWrapper.style.opacity = '1';
-                    startColumnWrapper.style.opacity = '1';
+                if (isXls) {
+                    headerRowWrapper.style.display = 'block';
+                    startColumnWrapper.style.display = 'block';
+                    xlsSheetNumberWrapper.style.display = 'block';
 
                     headerRow.required = true;
                     startColumn.required = true;
 
                     headerRow.disabled = false;
                     startColumn.disabled = false;
+                    xlsSheetIndex.disabled = false;
+
+                    apiConfigWrapper.style.display = 'none';
+                    apiConfigSelect.required = false;
+                    apiConfigSelect.disabled = true;
+                    $('#apiConfigSelect').val(null).trigger('change');
+                } else {
+                    headerRowWrapper.style.display = 'none';
+                    startColumnWrapper.style.display = 'none';
+                    xlsSheetNumberWrapper.style.display = 'none';
+
+                    headerRow.required = false;
+                    startColumn.required = false;
+
+                    headerRow.disabled = true;
+                    startColumn.disabled = true;
+                    xlsSheetIndex.disabled = true;
+
+                    if (isApiOrJson) {
+                        apiConfigWrapper.style.display = 'block';
+                        apiConfigSelect.required = true;
+                        apiConfigSelect.disabled = false;
+                    } else {
+                        apiConfigWrapper.style.display = 'none';
+                        apiConfigSelect.required = false;
+                        apiConfigSelect.disabled = true;
+                        $('#apiConfigSelect').val(null).trigger('change');
+                    }
                 }
             }
 
@@ -604,6 +704,28 @@ if (!array_key_exists($currentButtonTextColor, array_change_key_case($buttonText
                 const routineId = routineSelect.value;
                 formData.append("idroutine", routineId);
 
+                const selectedSource = sourceType.value;
+
+                if ((selectedSource === 'API' || selectedSource === 'JSON') && !apiConfigSelect.value) {
+                    Swal.fire({
+                        title: "Error!",
+                        text: "Please select an API/JSON configuration.",
+                        icon: "error",
+                        confirmButtonText: "OK"
+                    });
+                    return;
+                }
+
+                if (selectedSource === 'XLS' && xlsSheetIndex.value === '') {
+                    Swal.fire({
+                        title: "Error!",
+                        text: "Please enter the XLS sheet number.",
+                        icon: "error",
+                        confirmButtonText: "OK"
+                    });
+                    return;
+                }
+
                 fetch("process_edit_template_xls.php", {
                         method: "POST",
                         body: formData

public/userarea/export_to_lims.php

@@ -59,6 +59,49 @@ function formatDateToExport($value)
     return null; // Imposta null se non è una data valida
 }
 
+// ImportaCommessa con retry: la chiamata è asincrona lato LIMS e a volte
+// risponde 200 senza importare (StatoCommessaWeb resta "Inviata"/"Nuova").
+// Riprova con backoff esponenziale finché non passa a "Elaborata".
+function importaCommessaWithRetry($api, $commessaId, array $payload, $maxRetries = 3, $initialBackoff = 1)
+{
+    $result    = null;
+    $stato     = null;
+    $succeeded = false;
+    $log       = "";
+    $backoff   = $initialBackoff;
+
+    set_time_limit(120); // i backoff non devono far scadere il timeout della richiesta
+
+    for ($attempt = 1; $attempt <= $maxRetries + 1; $attempt++) {
+        try {
+            $result = $api->post("CommessaWeb({$commessaId})/ImportaCommessa", $payload);
+            $stato  = $result['StatoCommessaWeb'] ?? null;
+            $log   .= "Attempt {$attempt}: HTTP 200, StatoCommessaWeb=" . ($stato ?? 'null') . "\n";
+        } catch (Exception $e) {
+            $stato = null;
+            $log  .= "Attempt {$attempt}: EXCEPTION " . $e->getMessage() . "\n";
+        }
+
+        if ($stato === 'Elaborata') {
+            $succeeded = true;
+            break;
+        }
+
+        if ($attempt <= $maxRetries) {
+            $log .= "  -> not Elaborata, waiting {$backoff}s before retry\n";
+            sleep($backoff);
+            $backoff *= 2;
+        }
+    }
+
+    return [
+        'succeeded' => $succeeded,
+        'stato'     => $stato,
+        'result'    => $result,
+        'log'       => $log,
+    ];
+}
+
 try {
     $iddatadb = $_POST['iddatadb'] ?? null;
     if (!$iddatadb) {
@@ -107,11 +150,13 @@ try {
 
     // 🔹 STEP 3: Fetch Parts (including idmatrice and part id for custom fields)
     $stmt = $pdo->prepare("
-    SELECT id AS part_id, part_number, part_description, material, color, mix, idmatrice, dateexpiry
-    FROM identification_parts
-    WHERE iddatadb = :iddatadb
-    ORDER BY CAST(part_number AS UNSIGNED) ASC, part_number ASC
-    ");
+        SELECT id AS part_id, part_number, part_description, material, color, mix, idmatrice, dateexpiry
+        FROM identification_parts
+        WHERE iddatadb = :iddatadb
+        AND part_description IS NOT NULL
+        AND TRIM(part_description) <> ''
+        ORDER BY CAST(part_number AS UNSIGNED) ASC, part_number ASC
+        ");
     $stmt->execute(['iddatadb' => $iddatadb]);
     $parts = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
@@ -432,6 +477,71 @@ try {
     $logFilePhotos = $logDir . "commessa_{$commessaId}_photos_step5_2_" . time() . ".txt";
     $writeLog($logFilePhotos, $logContentPhotos, "STEP 6.2 - Photos (commessa={$commessaId})");
 
+    // 🔹 STEP 6.3: Add Analyses (AnalisiCampione) via Campione({id})/AddAnalisi bound action
+    $stmt = $pdo->prepare("
+        SELECT part_id, analysis_recordkey, analysis_name, analysis_method
+        FROM identification_parts_analyses
+        WHERE iddatadb = :iddatadb
+        ORDER BY part_id, id
+    ");
+    $stmt->execute(['iddatadb' => $iddatadb]);
+    $analysesRows = $stmt->fetchAll(PDO::FETCH_ASSOC);
+
+    $partIdToIndex = [];
+    foreach ($parts as $idx => $part) {
+        $partIdToIndex[(int)$part['part_id']] = $idx;
+    }
+
+    $totalAnalyses = count($analysesRows);
+    $addedAnalyses = 0;
+    $failedAnalyses = [];
+    $logContentStep63Analisi = "Analyses for iddatadb={$iddatadb}: total={$totalAnalyses}\n\n";
+
+    foreach ($analysesRows as $a) {
+        $partId = (int)$a['part_id'];
+        $recordKey = trim((string)($a['analysis_recordkey'] ?? ''));
+        $idx = $partIdToIndex[$partId] ?? null;
+
+        if ($idx === null || !isset($campioni[$idx]) || $recordKey === '') {
+            $logContentStep63Analisi .= "SKIP (no campione for part_id={$partId} / empty recordkey): '{$recordKey}'\n";
+            continue;
+        }
+
+        $campioneId = (int)($campioni[$idx]['IdCampione'] ?? 0);
+        if ($campioneId <= 0) {
+            $logContentStep63Analisi .= "SKIP (invalid IdCampione for part_id={$partId}): '{$recordKey}'\n";
+            continue;
+        }
+
+        $payload = ['RecordKey' => $recordKey];
+        $jsonPayload = json_encode($payload, JSON_UNESCAPED_SLASHES);
+
+        $logContentStep63Analisi .= "curl --location --request POST '{$apiBaseUrl}Campione({$campioneId})/AddAnalisi' \\\n" .
+            "--header 'Content-Type: application/json' \\\n" .
+            "--header 'Authorization: Bearer ••••••' \\\n" .
+            "--data '{$jsonPayload}'\n";
+
+        try {
+            $result = $api->post("Campione({$campioneId})/AddAnalisi", $payload);
+            $logContentStep63Analisi .= "OK (part_id={$partId}, campione={$campioneId}): " .
+                ($a['analysis_name'] ?? '') . "\n---\n";
+            $addedAnalyses++;
+        } catch (Exception $e) {
+            $errMsg = $e->getMessage();
+            $logContentStep63Analisi .= "FAIL: {$errMsg}\n---\n";
+            $failedAnalyses[] = [
+                'part_id' => $partId,
+                'campione_id' => $campioneId,
+                'analysis_recordkey' => $recordKey,
+                'analysis_name' => $a['analysis_name'] ?? '',
+                'error' => $errMsg,
+            ];
+        }
+    }
+
+    $logFileStep63Analisi = $logDir . "commessa_{$commessaId}_analyses_step63_" . time() . ".txt";
+    $writeLog($logFileStep63Analisi, $logContentStep63Analisi, "STEP 6.3 - AddAnalisi (commessa={$commessaId})");
+
     // 🔹 STEP 7: Update Custom Fields for CommessaWeb
     if (!empty($fieldValues)) {
         // GET con espansione per CustomField
@@ -510,9 +620,8 @@ try {
     $writeLog($logFileStep9, $logContentStep9, "STEP 9 - InviaCommessa (commessa={$commessaId})");
 
 
-    // 🔹 STEP 9.5: Importazione da CommessaWeb a Commessa (commentato come richiesto)
+    // 🔹 STEP 9.5: Importazione da CommessaWeb a Commessa (con retry)
     // Supplier call: POST api/odata/CommessaWeb(XXX)/ImportaCommessa
-
     $importUserId = (!empty($lims_global_user_id) && is_numeric($lims_global_user_id))
         ? (int) $lims_global_user_id
         : 285;
@@ -520,17 +629,23 @@ try {
     $importPayload = [
         "IdUtente" => $importUserId
     ];
-    $importResult = $api->post("CommessaWeb({$commessaId})/ImportaCommessa", $importPayload);
-
     $importPayloadLog = json_encode($importPayload, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES);
-    // Logga il POST
+
+    $importOutcome   = importaCommessaWithRetry($api, $commessaId, $importPayload);
+    $importResult    = $importOutcome['result'];
+    $importStato     = $importOutcome['stato'];
+    $importSucceeded = $importOutcome['succeeded'];
+
+    // Logga il POST (tutti i tentativi)
     $logContentStep91 = "curl --location --request POST '{$apiBaseUrl}CommessaWeb({$commessaId})/ImportaCommessa' \\\n" .
         "--header 'Content-Type: application/json' \\\n" .
         "--header 'Authorization: Bearer ••••••' \\\n" .
         "--data '{$importPayloadLog}'\n\n" .
-        "RESPONSE:\n" . json_encode($importResult, JSON_PRETTY_PRINT);
+        "ATTEMPTS:\n" . $importOutcome['log'] . "\n" .
+        "SUCCEEDED: " . ($importSucceeded ? 'yes' : 'NO') . "\n\n" .
+        "LAST RESPONSE:\n" . json_encode($importResult, JSON_PRETTY_PRINT);
     $logFileStep91 = $logDir . "commessa_{$commessaId}_importa_step91_" . time() . ".txt";
-    $writeLog($logFileStep91, $logContentStep91, "STEP 9.5 - ImportaCommessa (commessa={$commessaId})");
+    $writeLog($logFileStep91, $logContentStep91, "STEP 9.5 - ImportaCommessa (commessa={$commessaId}, succeeded=" . ($importSucceeded ? '1' : '0') . ")");
 
     // 🔹 STEP 10: GET di controllo post-PATCH
     $expand = "CommesseCustomFields(\$expand=CustomField)";
@@ -579,11 +694,15 @@ try {
         "totalCampioni"        => count($campioni),
         "totalCustomFields"    => count($commessaAfterPatch["CommesseCustomFields"] ?? []),
         "totalPhotos"          => count($photos),
+        "totalAnalyses"        => $totalAnalyses,
+        "addedAnalyses"        => $addedAnalyses,
+        "failedAnalyses"       => $failedAnalyses,
         "message"              => "Export successful",
         "logFiles"             => [
             "step5_create"     => $logFileStep5,
             "step5_2_photos"   => $logFilePhotos,
             "step6_campioni"   => $logFileStep6,
+            "step63_analyses"  => $logFileStep63Analisi,
             "step7_patch"      => $logFileStep7 ?? null,
             "step9_1_importa"  => $logFileStep91,
             "step10_get"       => $logFileStep10
@@ -599,6 +718,7 @@ try {
             "step5_create"    => $logFileStep5   ?? null,
             "step5_2_photos"  => $logFilePhotos  ?? null,
             "step6_campioni"  => $logFileStep6   ?? null,
+            "step63_analyses" => $logFileStep63Analisi ?? null,
             "step7_patch"     => $logFileStep7   ?? null,
             "step9_1_importa" => $logFileStep91  ?? null,
             "step10_get"      => $logFileStep10  ?? null

public/userarea/get_analisi_matrice_filter.php

@@ -18,7 +18,15 @@ try {
 
     $api = VisualLimsApiClient::getInstance();
 
-    $filter = rawurlencode("Matrice/IdMatrice eq $idMatrice");
+    $webOnly = isset($_GET['web_only']) ? (int)$_GET['web_only'] : 1;
+
+    $filterString = "Matrice/IdMatrice eq $idMatrice";
+
+    if ($webOnly === 1) {
+        $filterString .= " and SelezionabileSuWeb eq true";
+    }
+
+    $filter = rawurlencode($filterString);
     $endpoint = "Analisi?\$filter={$filter}";
 
     $base_url = 'https://93.43.5.102/limsapi/api/odata/';

public/userarea/get_json_by_code_example.php

@@ -0,0 +1,63 @@
+<?php
+require_once 'include/headscript.php';
+
+header('Content-Type: application/json');
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+        http_response_code(405);
+        echo json_encode(['error' => 'Invalid request method']);
+        exit;
+    }
+
+    $input = json_decode(file_get_contents('php://input'), true);
+    $template_id = isset($input['template_id']) ? (int)$input['template_id'] : 0;
+    $code = isset($input['code']) ? trim($input['code']) : '';
+
+    if ($template_id <= 0) {
+        http_response_code(400);
+        echo json_encode(['error' => 'Missing or invalid template_id']);
+        exit;
+    }
+
+    if ($code === '') {
+        http_response_code(400);
+        echo json_encode(['error' => 'Missing code']);
+        exit;
+    }
+
+    /*
+     * TODO: Replace this block with your real API call.
+     * Expected response for import_json.php:
+     * {
+     *   "success": true,
+     *   "reference": "CODE123",
+     *   "json": { ... real JSON payload ... }
+     * }
+     */
+
+    $sampleJson = [
+        'data' => [[
+            'type' => 'trf_data_request',
+            'id' => $code,
+            'attributes' => [
+                'trf_type' => 'apparel',
+                'service_required' => 'regular',
+                'submitter_information' => [
+                    'submitter_type' => 'supplier'
+                ]
+            ]
+        ]]
+    ];
+
+    echo json_encode([
+        'success' => true,
+        'reference' => $code,
+        'json' => $sampleJson
+    ]);
+} catch (Throwable $e) {
+    http_response_code(500);
+    echo json_encode(['error' => $e->getMessage()]);
+}

public/userarea/get_rapporti_cliente.php

@@ -0,0 +1,143 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once __DIR__ . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json; charset=utf-8');
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    $idCliente = isset($_GET['id_cliente']) ? (int)$_GET['id_cliente'] : 0;
+    $limit = isset($_GET['limit']) ? (int)$_GET['limit'] : 3;
+    $signedStatus = trim($_GET['signed_status'] ?? 'all');
+
+    if ($idCliente <= 0) {
+        throw new Exception("Parametro id_cliente mancante o non valido.");
+    }
+
+    /*
+     * Allowed limits only.
+     * This prevents risky wide queries on the live LIMS.
+     */
+    $allowedLimits = [1, 3, 5, 10];
+
+    if (!in_array($limit, $allowedLimits, true)) {
+        $limit = 3;
+    }
+
+    /*
+     * Allowed signature filters.
+     */
+    $allowedSignedStatuses = ['all', 'signed', 'not_signed'];
+
+    if (!in_array($signedStatus, $allowedSignedStatuses, true)) {
+        $signedStatus = 'all';
+    }
+
+    /*
+     * Base filter by customer.
+     * We already verified that Rapporto can expand Cliente and returns Cliente.IdCliente.
+     */
+    $filters = [
+        "Cliente/IdCliente eq {$idCliente}"
+    ];
+
+    if ($signedStatus === 'signed') {
+        $filters[] = "Firmato eq true";
+    }
+
+    if ($signedStatus === 'not_signed') {
+        $filters[] = "Firmato eq false";
+    }
+
+    $filter = implode(' and ', $filters);
+
+    /*
+     * Important:
+     * - $top limits the number of reports.
+     * - $orderby=Data desc gets the latest reports first.
+     * - $expand=RapportiFiles retrieves only the PDF file metadata, not the binary PDF.
+     */
+    $params = [
+        '$filter' => $filter,
+        '$select' => 'IdRapporto,CodiceRapporto,Data,Versione,Firmato,DataStampa',
+        '$expand' => 'RapportiFiles',
+        '$orderby' => 'Data desc',
+        '$top' => $limit
+    ];
+
+    $endpoint = "Rapporto?" . http_build_query($params);
+
+    file_put_contents(
+        __DIR__ . '/last_rapporti_cliente_endpoint.txt',
+        '[' . date('Y-m-d H:i:s') . '] ' . $endpoint . PHP_EOL,
+        FILE_APPEND
+    );
+
+    $data = $api->get($endpoint);
+
+    $items = $data['value'] ?? [];
+
+    if (!is_array($items)) {
+        $items = [];
+    }
+
+    $reports = [];
+
+    foreach ($items as $item) {
+        $rapportiFiles = $item['RapportiFiles'] ?? [];
+        $pdfFiles = [];
+
+        if (is_array($rapportiFiles)) {
+            foreach ($rapportiFiles as $file) {
+                $idRapportoFile = intval($file['IdRapportoFile'] ?? 0);
+
+                if ($idRapportoFile > 0) {
+                    $pdfFiles[] = [
+                        'id_rapporto_file' => $idRapportoFile,
+                        'file_name' => $file['FileName'] ?? null,
+                        'categoria' => $file['Categoria'] ?? null,
+                        'tipo_rapporto' => $file['TipoRapporto'] ?? null,
+                        'download_url' => "download_rapporto_pdf.php?id_rapporto_file={$idRapportoFile}"
+                    ];
+                }
+            }
+        }
+
+        $reports[] = [
+            'id_rapporto' => $item['IdRapporto'] ?? null,
+            'codice_rapporto' => $item['CodiceRapporto'] ?? null,
+            'data' => $item['Data'] ?? null,
+            'data_stampa' => $item['DataStampa'] ?? null,
+            'versione' => $item['Versione'] ?? null,
+            'firmato' => $item['Firmato'] ?? null,
+            'pdf_files' => $pdfFiles
+        ];
+    }
+
+    echo json_encode([
+        'success' => true,
+        'id_cliente' => $idCliente,
+        'limit' => $limit,
+        'signed_status' => $signedStatus,
+        'endpoint' => $endpoint,
+        'count' => count($reports),
+        'reports' => $reports
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+} catch (Exception $e) {
+    file_put_contents(
+        __DIR__ . '/error_log.txt',
+        date('Y-m-d H:i:s') . ' - get_rapporti_cliente.php - ' . $e->getMessage() . PHP_EOL,
+        FILE_APPEND
+    );
+
+    http_response_code(500);
+
+    echo json_encode([
+        'success' => false,
+        'error' => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+}

public/userarea/get_rapporto_prova.php

@@ -17,6 +17,7 @@ try {
     // rapporto_by_codice_expand_step.php?codice=2541111&step=files_campioni
 
     $codiceRapporto = trim($_GET['codice'] ?? '');
+    // Safe step mode: default is base, but allows controlled read-only steps
     $step = trim($_GET['step'] ?? 'base');
 
     if ($codiceRapporto === '') {
@@ -25,10 +26,9 @@ try {
 
     $allowedSteps = [
         'base' => '',
-        'files' => 'RapportiFiles',
-        'allegati' => 'RapportiAllegati',
         'campioni' => 'CampioniDatiRapporto',
-        'files_campioni' => 'RapportiFiles,CampioniDatiRapporto'
+        'files' => 'RapportiFiles,Cliente',
+        'cliente' => 'Cliente'
     ];
 
     if (!array_key_exists($step, $allowedSteps)) {
@@ -37,7 +37,8 @@ try {
 
     // Escape OData per eventuali apostrofi
     $codiceRapportoSafe = str_replace("'", "''", $codiceRapporto);
-
+    // Safe version of codice rapporto for filenames
+    $codiceRapportoFileSafe = preg_replace('/[^a-zA-Z0-9_-]/', '_', $codiceRapporto);
     /*
      * STEP 1 - Trova IdRapporto partendo da CodiceRapporto.
      * Query leggera, con $select e $top=1.
@@ -107,15 +108,43 @@ try {
 
     $detailData = $api->get($detailEndpoint);
 
+    $pdfFiles = [];
+
+    if ($step === 'files') {
+        $rapportiFiles = $detailData['RapportiFiles'] ?? [];
+
+        if (is_array($rapportiFiles)) {
+            foreach ($rapportiFiles as $file) {
+                $idRapportoFile = intval($file['IdRapportoFile'] ?? 0);
+
+                if ($idRapportoFile > 0) {
+                    $pdfFiles[] = [
+                        'id_rapporto_file' => $idRapportoFile,
+                        'file_name' => $file['FileName'] ?? null,
+                        'categoria' => $file['Categoria'] ?? null,
+                        'tipo_rapporto' => $file['TipoRapporto'] ?? null,
+                        'download_endpoint' => "MediaFile/DownloadStream?objectType=RapportoFile&propertyName=FileContent&objectKey={$idRapportoFile}"
+                    ];
+                }
+            }
+        }
+    }
+
+    $clienteData = null;
+
+    if ($step === 'cliente' || $step === 'files') {
+        $clienteData = $detailData['Cliente'] ?? null;
+    }
+
     file_put_contents(
-        __DIR__ . "/rapporto_codice_{$codiceRapportoSafe}_{$step}.json",
+        __DIR__ . "/rapporto_codice_{$codiceRapportoFileSafe}_{$step}.json",
         json_encode([
             'search' => $searchData,
             'detail' => $detailData
         ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE)
     );
 
-    echo json_encode([
+    $response = [
         'success' => true,
         'codice_rapporto' => $codiceRapporto,
         'id_rapporto' => $rapportoId,
@@ -124,7 +153,17 @@ try {
         'detail_endpoint' => $detailEndpoint,
         'rapporto_base' => $rapportoBase,
         'data' => $detailData
-    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+    ];
+
+    if ($step === 'files') {
+        $response['pdf_files'] = $pdfFiles;
+    }
+
+    if ($step === 'cliente' || $step === 'files') {
+        $response['cliente'] = $clienteData;
+    }
+
+    echo json_encode($response, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
 } catch (Exception $e) {
     file_put_contents(
         __DIR__ . '/error_log.txt',

public/userarea/gridRenderer.js

@@ -36,6 +36,15 @@
         return d.innerHTML;
     }
 
+    function escAttr(str) {
+        if (str === null || str === undefined) return "";
+        return String(str)
+            .replace(/&/g, "&")
+            .replace(/"/g, """)
+            .replace(/'/g, "'")
+            .replace(/</g, "&lt;")
+            .replace(/>/g, "&gt;");
+    }
     function getDetailValue(rowIndex, mappingId) {
         return data[rowIndex].details[String(mappingId)] ?? "";
     }
@@ -125,12 +134,35 @@
         );
     }
 
+    function sortSelect2ResultsByStart(data) {
+        const term = $(".select2-container--open .select2-search__field").val();
+
+        if (!term) {
+            return data;
+        }
+
+        const search = term.toLowerCase().trim();
+
+        return data.sort(function (a, b) {
+            const textA = (a.text || "").toLowerCase().trim();
+            const textB = (b.text || "").toLowerCase().trim();
+
+            const aStarts = textA.startsWith(search);
+            const bStarts = textB.startsWith(search);
+
+            if (aStarts && !bStarts) return -1;
+            if (!aStarts && bStarts) return 1;
+
+            return textA.localeCompare(textB, "it", { sensitivity: "base" });
+        });
+    }
     // Select2 AJAX config for client selects
     const clientSelect2Config = {
         placeholder: "Search client...",
         allowClear: true,
         width: "100%",
         minimumInputLength: 0,
+        sorter: sortSelect2ResultsByStart,
         dropdownCssClass: "select2-dropdown-smaller",
         ajax: {
             url: "search_clienti.php",
@@ -242,7 +274,88 @@
         return _pendingFixed[cacheKey];
     }
 
+    async function refreshDependentFixedFieldsForRow(rowIndex) {
+        const row = data[rowIndex];
+        if (!row) return;
+
+        const clientId = row.idclient || "";
+
+        // Find fixed fields that depend on idclient
+        const dependentFields = Object.keys(fixedFieldApiConfig).filter(
+            (key) => {
+                return fixedFieldApiConfig[key].dependsOn === "idclient";
+            },
+        );
+
+        if (dependentFields.length === 0) return;
+
+        for (const fieldKey of dependentFields) {
+            // When client changes, the old responsible is no longer reliable
+            if (
+                row.fixedFields &&
+                Object.prototype.hasOwnProperty.call(row.fixedFields, fieldKey)
+            ) {
+                row.fixedFields[fieldKey] = "";
+                row._dirty = true;
+            }
+
+            // Reload options for the new client
+            if (clientId) {
+                await loadFixedFieldOptions(fieldKey, clientId);
+            }
+        }
+
+        // Re-render only this row so ClienteResponsabile select is rebuilt with the new options
+        renderSingleRow(rowIndex);
+
+        // If the first row client changes, update the top propagation select too
+        if (rowIndex === 0) {
+            await refreshTopDependentFixedSelect(
+                "ClienteResponsabile",
+                clientId,
+            );
+        }
+
+        updateDirtyIndicator();
+    }
     // ── Custom field dropdown data loading ─────────────────────────────────
+    async function refreshTopDependentFixedSelect(fieldKey, clientId) {
+        if (!topContainer || !fieldKey) return;
+
+        const sel = topContainer.querySelector(
+            `.api-fixed-select[data-fixed-key="${fieldKey}"]`,
+        );
+
+        if (!sel) return;
+
+        // Destroy Select2 if already initialized
+        if ($(sel).hasClass("select2-hidden-accessible")) {
+            $(sel).select2("destroy");
+        }
+
+        sel.innerHTML = '<option value="">Seleziona...</option>';
+
+        if (!clientId) {
+            $(sel).select2({
+                placeholder: "Seleziona...",
+                allowClear: true,
+                width: "100%",
+            });
+            return;
+        }
+
+        const items = await loadFixedFieldOptions(fieldKey, clientId);
+
+        items.forEach((item) => {
+            sel.add(new Option(item.text, item.id));
+        });
+
+        $(sel).select2({
+            placeholder: "Seleziona...",
+            allowClear: true,
+            width: "100%",
+        });
+    }
 
     // Select2 AJAX config factory for SceltaMultipla
     function sceltaSelect2Config(fieldId) {
@@ -251,6 +364,7 @@
             allowClear: true,
             width: "100%",
             minimumInputLength: 0,
+            sorter: sortSelect2ResultsByStart,
             ajax: {
                 url: "search_customfield_values.php",
                 dataType: "json",
@@ -259,7 +373,7 @@
                     return {
                         field_id: fieldId,
                         q: params.term || "",
-                        limit: 10,
+                        limit: 0, // 0 = no limit for custom field values
                     };
                 },
                 processResults: function (data) {
@@ -382,13 +496,13 @@
         const row = data[rowIndex];
 
         switch (col.type) {
-            case "main_field":
-                div.innerHTML = createInputHTML(
-                    col,
-                    row.mainFieldValue || "",
-                    rowIndex,
-                );
+            case "main_field": {
+                const val = getDetailValue(rowIndex, col.key);
+
+                div.innerHTML = createInputHTML(col, val || "", rowIndex);
+
                 break;
+            }
 
             case "status": {
                 const st = row.status || "i";
@@ -438,7 +552,7 @@
             case "tested_component":
                 div.style.overflow = "visible";
                 div.innerHTML = `<div style="display:flex; align-items:center; gap:4px; width:100%; height:100%;">
-                                    <input type="text" class="cell-input manual-input tested-component-input" value="${esc(row.tested_component || "")}" style="flex:1; min-width:0; height:28px;">
+                                   <input type="text" class="cell-input manual-input tested-component-input" value="${escAttr(row.tested_component || "")}" style="flex:1; min-width:0; height:28px;">
                                     <button type="button" class="add-part-btn btn btn-sm btn-primary" data-row="${rowIndex}" data-iddatadb="${row.iddatadb}" style="display:inline-flex; align-items:center; justify-content:center; min-width:28px; width:28px; height:28px; padding:0; font-size:12px; flex-shrink:0; text-align:center;">
                                         <i class="fas fa-plus" style="margin:0; padding:0;"></i>
                                     </button>
@@ -484,7 +598,7 @@
         const cls = col.isManual ? "manual-input" : "auto-input";
         const reqCls = col.isRequired ? " required-input" : "";
         const req = col.isRequired ? " required" : "";
-        const v = esc(value);
+        const v = escAttr(value);
 
         if (col.dataType === "SceltaMultipla") {
             const options = buildDropdownOptionsHTML(col.fieldId, value);
@@ -509,7 +623,7 @@
         if (col.dataType === "DATE") {
             const reqCls = col.isRequired ? " required-input" : "";
             const req = col.isRequired ? " required" : "";
-            return `<input type="text" class="cell-input date-picker manual-input${reqCls} fixed-input" data-fixed-key="${col.key}" value="${esc(value)}"${req}>`;
+            return `<input type="text" class="cell-input date-picker manual-input${reqCls} fixed-input" data-fixed-key="${escAttr(col.key)}" value="${escAttr(value)}"${req}>`;
         }
 
         // Client-sourced fields → AJAX Select2 (like idclient)
@@ -522,7 +636,7 @@
                 const label = clientNameCache[value] || value;
                 opts += `<option value="${esc(String(value))}" selected>${esc(String(label))}</option>`;
             }
-            return `<select class="cell-input manual-input fixed-input searchable-client api-fixed-select${reqCls}" data-fixed-key="${col.key}" data-current-value="${esc(value)}"${req}>${opts}</select>`;
+            return `<select class="cell-input manual-input fixed-input searchable-client api-fixed-select${reqCls}" data-fixed-key="${escAttr(col.key)}" data-current-value="${escAttr(value)}"${req}>${opts}</select>`;
         }
 
         // Select — build from cache
@@ -540,7 +654,7 @@
 
         const reqCls = col.isRequired ? " required-input" : "";
         const req = col.isRequired ? " required" : "";
-        return `<select class="cell-input manual-input fixed-input ${selectClass}${reqCls}" data-fixed-key="${col.key}" data-current-value="${esc(value)}"${req}>${options}</select>`;
+        return `<select class="cell-input manual-input fixed-input ${selectClass}${reqCls}" data-fixed-key="${escAttr(col.key)}" data-current-value="${escAttr(value)}"${req}>${options}</select>`;
     }
 
     function buildDropdownOptionsHTML(fieldId, selectedValue) {
@@ -745,6 +859,143 @@
                 flatpickr(this, { dateFormat: "Y-m-d", allowInput: true });
             });
     }
+    function getInputTextWidth(input) {
+        const span = document.createElement("span");
+        const style = window.getComputedStyle(input);
+
+        span.style.position = "absolute";
+        span.style.visibility = "hidden";
+        span.style.whiteSpace = "pre";
+        span.style.font = style.font;
+        span.style.fontSize = style.fontSize;
+        span.style.fontFamily = style.fontFamily;
+        span.style.fontWeight = style.fontWeight;
+        span.textContent = input.value || input.placeholder || "";
+
+        document.body.appendChild(span);
+
+        const width = span.offsetWidth + 60;
+
+        document.body.removeChild(span);
+
+        return width;
+    }
+
+    function autoExpandColumnFromInput(input) {
+        if (!input) return;
+
+        const cell = input.closest(".grid-cell");
+        if (!cell || !cell.dataset.index) return;
+
+        const columnIndex = parseInt(cell.dataset.index, 10);
+        if (!columnIndex) return;
+
+        const wantedWidth = Math.max(120, getInputTextWidth(input));
+        const currentWidth = cell.offsetWidth || 0;
+
+        // Only expand, do not shrink automatically
+        if (wantedWidth <= currentWidth) return;
+
+        const newWidth = Math.min(wantedWidth, 900);
+
+        const header = document.querySelector(
+            `.grid-header[data-index="${columnIndex}"]`,
+        );
+
+        if (header) {
+            header.style.flex = `0 0 ${newWidth}px`;
+        }
+
+        const topCell = document.querySelector(
+            `.grid-top .grid-cell:nth-child(${columnIndex + 1})`,
+        );
+
+        if (topCell) {
+            topCell.style.flex = `0 0 ${newWidth}px`;
+        }
+
+        const cells = document.querySelectorAll(
+            `.grid-row .grid-cell[data-index="${columnIndex}"]`,
+        );
+
+        cells.forEach((c) => {
+            c.style.flex = `0 0 ${newWidth}px`;
+        });
+
+        const colPos = columnIndex - 1;
+
+        if (columns[colPos]) {
+            columns[colPos].width = newWidth;
+        }
+    }
+
+    function syncVisibleRowsToGridData() {
+        if (!rowContainer) return;
+
+        rowContainer
+            .querySelectorAll(".grid-cell[data-row]")
+            .forEach((cell) => {
+                const rowIndex = parseInt(cell.dataset.row, 10);
+                const row = data[rowIndex];
+
+                if (!row) return;
+
+                const colType = cell.dataset.colType;
+                const colKey = cell.dataset.col;
+                const input = cell.querySelector(".cell-input");
+
+                if (!input) return;
+
+                const value = $(input).hasClass("select2-hidden-accessible")
+                    ? $(input).val() || ""
+                    : input.value || "";
+
+                if (colType === "detail" || colType === "main_field") {
+                    if (!row.details) row.details = {};
+
+                    if (
+                        String(row.details[String(colKey)] ?? "") !==
+                        String(value)
+                    ) {
+                        row.details[String(colKey)] = value;
+
+                        if (colType === "main_field") {
+                            row.mainFieldValue = value;
+                        }
+
+                        row._dirty = true;
+                    }
+                } else if (colType === "fixed") {
+                    if (!row.fixedFields) row.fixedFields = {};
+
+                    if (
+                        String(row.fixedFields[colKey] ?? "") !== String(value)
+                    ) {
+                        row.fixedFields[colKey] = value;
+                        row._dirty = true;
+                    }
+                } else if (colType === "idclient") {
+                    if (String(row.idclient ?? "") !== String(value)) {
+                        row.idclient = value;
+                        row._dirty = true;
+                    }
+                } else if (colType === "cliente_fornitore_id") {
+                    if (
+                        String(row.cliente_fornitore_id ?? "") !== String(value)
+                    ) {
+                        row.cliente_fornitore_id = value;
+                        row._dirty = true;
+                    }
+                } else if (colType === "tested_component") {
+                    if (String(row.tested_component ?? "") !== String(value)) {
+                        row.tested_component = value;
+                        row._dirty = true;
+                    }
+                }
+            });
+
+        updateDirtyIndicator();
+    }
 
     // ── Headers & Propagate row ────────────────────────────────────────────
 
@@ -886,23 +1137,28 @@
             }
 
             if (config && config.dependsOn) {
-                // For dependent fields: merge all cached values across all clientIds
-                const allItems = new Map();
-                for (const [key, items] of Object.entries(fixedFieldCache)) {
-                    if (key.startsWith(fieldKey + "_")) {
-                        items.forEach((item) =>
-                            allItems.set(String(item.id), item),
-                        );
-                    }
-                }
+                // Dependent fixed fields, for example ClienteResponsabile:
+                // use the first row client, not all cached clients.
+                const firstClientId =
+                    data[0]?.idclient || meta.defaultIdclient || "";
+
                 sel.innerHTML = '<option value="">Seleziona...</option>';
-                [...allItems.values()]
-                    .sort((a, b) =>
-                        String(a.text).localeCompare(String(b.text), "it", {
-                            sensitivity: "base",
-                        }),
-                    )
-                    .forEach((item) => sel.add(new Option(item.text, item.id)));
+
+                if (firstClientId) {
+                    const items =
+                        fixedFieldCache[fieldKey + "_" + firstClientId] || [];
+
+                    items.forEach((item) => {
+                        sel.add(new Option(item.text, item.id));
+                    });
+                }
+
+                $(sel).select2({
+                    placeholder: "Seleziona...",
+                    allowClear: true,
+                    width: "100%",
+                    sorter: sortSelect2ResultsByStart,
+                });
             } else {
                 const items = fixedFieldCache[fieldKey] || [];
                 sel.innerHTML = '<option value="">Seleziona...</option>';
@@ -950,6 +1206,8 @@
             } else if (colType === "idclient") {
                 data[rowIndex].idclient = value;
                 data[rowIndex]._dirty = true;
+
+                refreshDependentFixedFieldsForRow(rowIndex);
             } else if (colType === "cliente_fornitore_id") {
                 data[rowIndex].cliente_fornitore_id = value;
                 data[rowIndex]._dirty = true;
@@ -972,6 +1230,10 @@
             const cell = e.target.closest(".grid-cell");
             if (!cell || !cell.dataset.row) return;
 
+            if (e.target.classList.contains("cell-input")) {
+                autoExpandColumnFromInput(e.target);
+            }
+
             const rowIndex = parseInt(cell.dataset.row, 10);
             const colType = cell.dataset.colType;
 
@@ -983,6 +1245,16 @@
             }
         });
 
+        rowContainer.addEventListener("focusin", function (e) {
+            if (!e.target.classList.contains("cell-input")) return;
+
+            autoExpandColumnFromInput(e.target);
+
+            setTimeout(() => {
+                autoExpandColumnFromInput(e.target);
+            }, 50);
+        });
+
         // Persist tested_component before clicking +
         document.addEventListener("mousedown", function (e) {
             const btn = e.target.closest(".add-part-btn");
@@ -1011,62 +1283,149 @@
             const btn = e.target.closest(".propagate-btn");
             if (!btn) return;
 
-            const colIndex = parseInt(btn.dataset.colIndex);
-            const column = btn.dataset.column;
-            if (isNaN(colIndex) && !column) return;
+            // Before propagating and re-rendering, persist current visible row values into gridData.
+            syncVisibleRowsToGridData();
 
-            // Get value from the input/select in the same cell
-            const cell =
-                btn.closest(".grid-cell") || btn.closest(".grid-top-cell");
+            e.preventDefault();
+            e.stopPropagation();
+            e.stopImmediatePropagation();
+
+            const column = btn.dataset.column || "";
+            const colIndex = Number.isNaN(parseInt(btn.dataset.colIndex, 10))
+                ? null
+                : parseInt(btn.dataset.colIndex, 10);
+
+            if (!column && colIndex === null) return;
+
+            // IMPORTANT:
+            // Read ONLY the input/select inside the same top propagation cell.
+            // Do not scan other top fields.
+            const cell = btn.closest(".grid-top-cell");
             if (!cell) return;
-            const input = cell.querySelector("select, input");
-            if (!input) return;
-            const value = $(input).hasClass("select2-hidden-accessible")
-                ? $(input).val()
-                : input.value;
 
-            // Cache Select2 label so re-render shows name not ID
+            const input = cell.querySelector(".custom-field");
+            if (!input) return;
+
+            const value = $(input).hasClass("select2-hidden-accessible")
+                ? $(input).val() || ""
+                : input.value || "";
+
+            // Do not propagate empty dropdown values.
+            // This prevents wiping rows when a top Select2 is empty/not fully initialized.
+            if (input.tagName === "SELECT" && value === "") {
+                console.warn(
+                    "[gridRenderer] Empty select propagation blocked:",
+                    column,
+                );
+                return;
+            }
+
+            // Cache selected label so re-render can show text instead of only ID.
             if (value && $(input).hasClass("select2-hidden-accessible")) {
                 const label = $(input).find("option:selected").text();
+
                 if (label && label !== value) {
-                    clientNameCache[value] = label;
-                    // Also cache for SceltaMultipla
+                    if (
+                        column === "idclient" ||
+                        column === "cliente_fornitore_id" ||
+                        input.classList.contains("searchable-client")
+                    ) {
+                        clientNameCache[value] = label;
+                    }
+
                     const fieldId = input.dataset?.fieldId;
-                    if (fieldId)
+                    if (fieldId) {
                         dropdownNameCache[fieldId + "_" + value] = label;
+                    }
                 }
             }
 
-            const col = columns[colIndex] || null;
+            const col = colIndex !== null ? columns[colIndex] : null;
+
+            console.log("[gridRenderer] Propagating ONLY:", {
+                column: column,
+                colIndex: colIndex,
+                value: value,
+                label:
+                    input.tagName === "SELECT"
+                        ? $(input).find("option:selected").text()
+                        : value,
+            });
 
             if (column === "idclient") {
                 data.forEach((row) => {
+                    const oldClientId = row.idclient || "";
+
                     row.idclient = value;
+
+                    // Clear ClienteResponsabile only if client really changed.
+                    if (
+                        String(oldClientId) !== String(value) &&
+                        row.fixedFields &&
+                        Object.prototype.hasOwnProperty.call(
+                            row.fixedFields,
+                            "ClienteResponsabile",
+                        )
+                    ) {
+                        row.fixedFields["ClienteResponsabile"] = "";
+                    }
+
                     row._dirty = true;
                 });
-            } else if (column === "cliente_fornitore_id") {
+
+                loadFixedFieldOptions("ClienteResponsabile", value).then(() => {
+                    refreshTopDependentFixedSelect(
+                        "ClienteResponsabile",
+                        value,
+                    );
+                    renderVisibleRows();
+                    updateDirtyIndicator();
+                });
+
+                return;
+            }
+
+            if (column === "cliente_fornitore_id") {
                 data.forEach((row) => {
                     row.cliente_fornitore_id = value;
                     row._dirty = true;
                 });
-            } else if (column && column.startsWith("fixed_")) {
+
+                renderVisibleRows();
+                updateDirtyIndicator();
+                return;
+            }
+
+            if (column && column.startsWith("fixed_")) {
                 const fixedKey = column.replace("fixed_", "");
+
                 data.forEach((row) => {
+                    if (!row.fixedFields) row.fixedFields = {};
                     row.fixedFields[fixedKey] = value;
                     row._dirty = true;
                 });
-            } else if (col) {
-                if (col.type === "detail" || col.type === "main_field") {
-                    data.forEach((row) => {
-                        row.details[col.key] = value;
-                        if (col.type === "main_field")
-                            row.mainFieldValue = value;
-                        row._dirty = true;
-                    });
-                }
+
+                renderVisibleRows();
+                updateDirtyIndicator();
+                return;
             }
 
-            renderVisibleRows();
+            if (col && (col.type === "detail" || col.type === "main_field")) {
+                data.forEach((row) => {
+                    if (!row.details) row.details = {};
+                    row.details[col.key] = value;
+
+                    if (col.type === "main_field") {
+                        row.mainFieldValue = value;
+                    }
+
+                    row._dirty = true;
+                });
+
+                renderVisibleRows();
+                updateDirtyIndicator();
+                return;
+            }
         });
 
         // Select2 change events (don't bubble via native addEventListener)
@@ -1086,6 +1445,8 @@
             if (colType === "idclient") {
                 data[rowIndex].idclient = value;
                 data[rowIndex]._dirty = true;
+
+                refreshDependentFixedFieldsForRow(rowIndex);
             } else if (colType === "cliente_fornitore_id") {
                 data[rowIndex].cliente_fornitore_id = value;
                 data[rowIndex]._dirty = true;
@@ -1094,14 +1455,39 @@
             updateDirtyIndicator();
         });
 
-        // Cache labels on SceltaMultipla change
+        // Handle SceltaMultipla changes and persist them into gridData.
+        // Without this, a later renderVisibleRows() can rebuild the row with the old empty value.
         $(rowContainer).on("change", ".searchable-dropdown", function () {
-            const val = $(this).val();
+            const cell = this.closest(".grid-cell");
+            if (!cell || !cell.dataset.row) return;
+
+            const rowIndex = parseInt(cell.dataset.row, 10);
+            const colType = cell.dataset.colType;
+            const colKey = cell.dataset.col;
+            const val = $(this).val() || "";
             const fieldId = this.dataset.fieldId;
+
+            // Cache label so re-render shows the text instead of only the ID.
             if (val && fieldId) {
                 const label = $(this).find("option:selected").text();
-                if (label && label !== val)
+                if (label && label !== val) {
                     dropdownNameCache[fieldId + "_" + val] = label;
+                }
+            }
+
+            // Persist value into gridData.
+            if (colType === "detail" || colType === "main_field") {
+                if (!data[rowIndex].details) data[rowIndex].details = {};
+
+                data[rowIndex].details[String(colKey)] = val;
+
+                if (colType === "main_field") {
+                    data[rowIndex].mainFieldValue = val;
+                }
+
+                data[rowIndex]._dirty = true;
+                cell.classList.add("cell-changed");
+                updateDirtyIndicator();
             }
         });
 

public/userarea/import_dashboard.php

@@ -237,7 +237,18 @@
                 const iconClass = getTemplateIcon(sourceType);
 
                 const btn = document.createElement("a");
-                btn.href = `import_xls2.php?id=${template.id}`;
+
+                // Redirect based on template source type
+                if (sourceType === 'XLS') {
+                    btn.href = `import_xls2.php?id=${template.id}`;
+                } else if (sourceType === 'API' || sourceType === 'JSON') {
+                    btn.href = `import_json.php?id=${template.id}`;
+                } else if (sourceType === 'PDF') {
+                    btn.href = `import_pdf.php?id=${template.id}`;
+                } else {
+                    btn.href = `import_xls2.php?id=${template.id}`;
+                }
+
                 btn.className = `btn ${sizeClass}`;
                 btn.style.backgroundColor = template.button_bg_color || '#0d6efd';
                 btn.style.color = template.button_text_color || '#ffffff';
@@ -245,9 +256,9 @@
                 btn.setAttribute("data-source-type", sourceType);
 
                 btn.innerHTML = `
-                    <i class="${iconClass} template-icon"></i>
-                    <span>${escapeHtml(template.button_label || 'Unnamed')}</span>
-                `;
+        <i class="${iconClass} template-icon"></i>
+        <span>${escapeHtml(template.button_label || 'Unnamed')}</span>
+    `;
 
                 return btn;
             }

public/userarea/import_insert.php

@@ -12,6 +12,7 @@ if (!file_exists(__DIR__ . '/import_debug.log')) {
 error_log("Inizio importazione alle " . date('Y-m-d H:i:s'));
 
 include('include/headscript.php');
+require_once(__DIR__ . '/class/binding-functions.php');
 
 if ($_SERVER['REQUEST_METHOD'] !== 'POST' || !isset($_POST['template_id']) || !isset($_POST['selected_rows']) || !isset($_POST['filename'])) {
     header("Location: xlstemplates_grid.php?status=error&message=" . urlencode("Richiesta non valida"));
@@ -25,6 +26,7 @@ $rows     = json_decode(urldecode($_POST['rows'] ?? '[]'), true);
 $excelrows = json_decode(urldecode($_POST['excelrows'] ?? '[]'), true);
 
 $newFilename = $_POST['filename'];
+$source_type = strtolower(trim($_POST['source_type'] ?? 'xls'));
 
 $_SESSION['template_id'] = $template_id;
 $_SESSION['selected_rows'] = $selected_rows;
@@ -37,6 +39,7 @@ error_log("Received Data - Template ID: $template_id, Selected Rows: " . json_en
 error_log("Columns: " . json_encode($columns));
 error_log("Rows: " . json_encode($rows));
 error_log("Excelrows: " . json_encode($excelrows));
+error_log("Source type: " . $source_type);
 
 $user_id = $iduserlogin ?? 1;
 
@@ -47,7 +50,23 @@ $pdo = $db->getConnection();
 $importReferenceCode = date('YmdHis') . '-' . uniqid();
 
 // Recupera tutti i mapping dal template
-$stmt = $pdo->prepare("SELECT id, excel_column, data_type, is_required, manual_default, is_manual, field_label, field_id, main_field, auto_value FROM template_mapping WHERE template_id = ?");
+$stmt = $pdo->prepare("
+    SELECT 
+        id,
+        excel_column,
+        json_node,
+        data_type,
+        is_required,
+        manual_default,
+        is_manual,
+        field_label,
+        field_id,
+        main_field,
+        auto_value,
+        has_list
+    FROM template_mapping
+    WHERE template_id = ?
+");
 $stmt->execute([$template_id]);
 $allMappings = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
@@ -65,14 +84,41 @@ foreach ($allMappings as $mapping) {
     }
 }
 
+// Campi fixed mappati da JSON (default_source='json') per questo template.
+$fixedJsonFields = [];
+if ($source_type === 'json') {
+    $fxStmt = $pdo->prepare("
+        SELECT fixed_field_key, json_node, data_type
+        FROM template_fixed_mapping
+        WHERE template_id = ? AND default_source = 'json' AND json_node IS NOT NULL AND json_node <> ''
+    ");
+    $fxStmt->execute([$template_id]);
+    $fixedJsonFields = $fxStmt->fetchAll(PDO::FETCH_ASSOC);
+}
+
 // Inserisci le righe selezionate in datadb
 $insertedIds = [];
-foreach ($selected_rows as $rowIndex) {
-    $row = $rows[$rowIndex] ?? null;
-    $excelrow = $excelrows[$rowIndex] ?? null;
+
+// Binding JSON -> LIMS senza corrispondenza salvata, per "kind:key|json_value".
+$pendingBindings = [];
+// Binding risolti in automatico durante questo import (solo per visualizzazione).
+$autoBindings = [];
+// Binding gia' salvati in precedenza, usati su questo import (visualizzazione + modifica).
+$savedBindings = [];
+foreach ($selected_rows as $loopIndex => $rowIndex) {
+
+    if ($source_type === 'json') {
+        // JSON import sends only selected rows in rows/excelrows
+        $row = $rows[$loopIndex] ?? null;
+        $excelrow = $excelrows[$loopIndex] ?? ('JSON-' . ($loopIndex + 1));
+    } else {
+        // XLS import keeps original row indexes
+        $row = $rows[$rowIndex] ?? null;
+        $excelrow = $excelrows[$rowIndex] ?? null;
+    }
 
     if ($row === null || $excelrow === null) {
-        error_log("Errore: riga o excelrow mancante per rowIndex $rowIndex");
+        error_log("Errore: riga o excelrow mancante. Source type: $source_type, loopIndex: $loopIndex, rowIndex: $rowIndex");
         continue;
     }
 
@@ -82,6 +128,14 @@ foreach ($selected_rows as $rowIndex) {
     $template = $template_stmt->fetch(PDO::FETCH_ASSOC);
     $default_idclient = $template['idclient'] ?? null;
 
+    // excelrow e' INT: dal JSON arriva tipo 'JSON-1', tengo solo la parte numerica.
+    if (is_numeric($excelrow)) {
+        $excelrowDb = (int) $excelrow;
+    } else {
+        $digits = preg_replace('/\D+/', '', (string) $excelrow);
+        $excelrowDb = $digits !== '' ? (int) $digits : ($loopIndex + 1);
+    }
+
     $values = [
         $template_id,
         $importReferenceCode,
@@ -90,7 +144,7 @@ foreach ($selected_rows as $rowIndex) {
         $user_id,
         null,
         date('Y-m-d'),
-        $excelrow,
+        $excelrowDb,
         $default_idclient // Aggiungi idclient
     ];
     $sql = "INSERT INTO datadb (templateid, importreferencecode, filename_import, status, user_id, limscode, importdate, excelrow, idclient) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)";
@@ -104,14 +158,72 @@ foreach ($selected_rows as $rowIndex) {
     foreach ($allMappings as $mapping) {
         $fieldValue = null;
         if (!$mapping['is_manual']) {
-            $excelColumn = trim($mapping['excel_column']);
-            $excelColumnIndex = array_search($excelColumn, array_map('trim', $columns));
-            if ($excelColumnIndex !== false && isset($row[$excelColumnIndex]) && $row[$excelColumnIndex] !== '') {
-                $fieldValue = $row[$excelColumnIndex];
-                error_log("Found Excel column '$excelColumn' at index $excelColumnIndex, value: " . var_export($fieldValue, true));
+            $sourceColumn = '';
+
+            if ($source_type === 'json') {
+                $sourceColumn = trim($mapping['json_node'] ?? '');
+            } else {
+                $sourceColumn = trim($mapping['excel_column'] ?? '');
+            }
+
+            // Fallback: if JSON node is empty, try excel_column
+            if ($sourceColumn === '') {
+                $sourceColumn = trim($mapping['excel_column'] ?? '');
+            }
+
+            $columnsTrimmed = array_map('trim', $columns);
+
+            $candidateColumns = [];
+
+            if ($sourceColumn !== '') {
+                $candidateColumns[] = $sourceColumn;
+
+                if ($source_type === 'json') {
+                    // Common JSON path variants
+                    $candidateColumns[] = preg_replace('/^data\[\]\./', '', $sourceColumn);
+                    $candidateColumns[] = preg_replace('/^data\.0\./', '', $sourceColumn);
+                    $candidateColumns[] = str_replace('data[].', 'data.0.', $sourceColumn);
+                    $candidateColumns[] = str_replace('data.0.', 'data[].', $sourceColumn);
+                }
+            }
+
+            // Remove empty and duplicate candidates
+            $candidateColumns = array_values(array_unique(array_filter($candidateColumns, function ($value) {
+                return trim((string)$value) !== '';
+            })));
+
+            $sourceColumnIndex = false;
+            $matchedColumn = '';
+
+            foreach ($candidateColumns as $candidateColumn) {
+                $candidateColumn = trim($candidateColumn);
+                $index = array_search($candidateColumn, $columnsTrimmed);
+
+                if ($index !== false) {
+                    $sourceColumnIndex = $index;
+                    $matchedColumn = $candidateColumn;
+                    break;
+                }
+            }
+
+            if ($sourceColumnIndex !== false && isset($row[$sourceColumnIndex]) && $row[$sourceColumnIndex] !== '') {
+                $fieldValue = $row[$sourceColumnIndex];
+
+                error_log(
+                    "Found source column. Original: '$sourceColumn', Matched: '$matchedColumn', Index: $sourceColumnIndex, Value: " .
+                        var_export($fieldValue, true)
+                );
             } else {
                 $fieldValue = $mapping['manual_default'] ?? '';
-                error_log("Excel column '$excelColumn' not found or empty, using default: " . var_export($fieldValue, true));
+
+                error_log(
+                    "Source column not found or empty. Original: '$sourceColumn'. Candidates: " .
+                        json_encode($candidateColumns) .
+                        ". Available columns: " .
+                        json_encode($columnsTrimmed) .
+                        ". Using default: " .
+                        var_export($fieldValue, true)
+                );
             }
             switch ($mapping['data_type']) {
                 case 'INT':
@@ -144,18 +256,215 @@ foreach ($selected_rows as $rowIndex) {
             }
         }
 
+        // Binding JSON -> LIMS solo per i campi a lista importati da JSON.
+        if (
+            $source_type === 'json'
+            && !$mapping['is_manual']
+            && binding_is_list_field($mapping)
+            && $fieldValue !== null
+            && $fieldValue !== ''
+        ) {
+            $jsonValue = (string) $fieldValue;
+            $existing = binding_lookup($pdo, (int) $mapping['id'], $jsonValue);
+
+            if ($existing) {
+                $fieldValue = $existing['lims_value'];
+
+                $key = 'cf:' . $mapping['id'] . '|' . $jsonValue;
+                if (!isset($savedBindings[$key])) {
+                    $savedBindings[$key] = [
+                        'kind'          => 'custom',
+                        'mapping_id'    => (int) $mapping['id'],
+                        'field_id'      => (int) $mapping['field_id'],
+                        'field_label'   => $mapping['field_label'],
+                        'json_value'    => $jsonValue,
+                        'lims_value'    => (string) $existing['lims_value'],
+                        'lims_value_id' => (int) $existing['lims_value_id'],
+                        'datadb_ids'    => [],
+                    ];
+                }
+                $savedBindings[$key]['datadb_ids'][] = (int) $iddatadb;
+            } else {
+                // Nessun binding salvato: provo l'auto-match 1-a-1 sui valori LIMS.
+                $limsValues = binding_get_lims_values((int) $mapping['field_id']);
+                $autoMatch = binding_auto_match($limsValues, $jsonValue);
+
+                if ($autoMatch) {
+                    binding_upsert(
+                        $pdo,
+                        (int) $template_id,
+                        (int) $mapping['id'],
+                        (int) $mapping['field_id'],
+                        $jsonValue,
+                        (int) $autoMatch['IdCustomFieldsValue'],
+                        (string) $autoMatch['Valore'],
+                        $user_id
+                    );
+                    $fieldValue = (string) $autoMatch['Valore'];
+
+                    $key = 'cf:' . $mapping['id'] . '|' . $jsonValue;
+                    if (!isset($autoBindings[$key])) {
+                        $autoBindings[$key] = [
+                            'kind'          => 'custom',
+                            'mapping_id'    => (int) $mapping['id'],
+                            'field_id'      => (int) $mapping['field_id'],
+                            'field_label'   => $mapping['field_label'],
+                            'json_value'    => $jsonValue,
+                            'lims_value'    => (string) $autoMatch['Valore'],
+                            'lims_value_id' => (int) $autoMatch['IdCustomFieldsValue'],
+                            'datadb_ids'    => [],
+                        ];
+                    }
+                    $autoBindings[$key]['datadb_ids'][] = (int) $iddatadb;
+                } else {
+                    $key = 'cf:' . $mapping['id'] . '|' . $jsonValue;
+                    if (!isset($pendingBindings[$key])) {
+                        $pendingBindings[$key] = [
+                            'kind'        => 'custom',
+                            'mapping_id'  => (int) $mapping['id'],
+                            'field_id'    => (int) $mapping['field_id'],
+                            'field_label' => $mapping['field_label'],
+                            'json_value'  => $jsonValue,
+                            'datadb_ids'  => [],
+                        ];
+                    }
+                    $pendingBindings[$key]['datadb_ids'][] = (int) $iddatadb;
+                }
+            }
+        }
+
         if ($mapping['is_required'] && (is_null($fieldValue) || $fieldValue === '')) {
             error_log("Required field missing for mapping ID: " . $mapping['id'] . ", field: " . $mapping['field_label']);
         }
-        error_log("Inserting into import_data_details - Mapping ID: " . $mapping['id'] . ", Field Value: " . var_export($fieldValue, true) . ", Is Manual: " . $mapping['is_manual'] . ", Excel Column: " . ($mapping['excel_column'] ?? 'N/A') . ", Manual Default: " . ($mapping['manual_default'] ?? 'N/A'));
+        error_log("Inserting into import_data_details - Mapping ID: " . $mapping['id'] . ", Field Value: " . var_export($fieldValue, true) . ", Is Manual: " . $mapping['is_manual'] . ", Source Column: " . ($sourceColumn ?? 'N/A') . ", Source Type: " . $source_type . ", Manual Default: " . ($mapping['manual_default'] ?? 'N/A'));
         $stmt = $pdo->prepare("INSERT INTO import_data_details (id, mapping_id, field_value) VALUES (?, ?, ?)");
         $stmt->execute([$iddatadb, $mapping['id'], $fieldValue]);
         error_log("Inserted into import_data_details for ID $iddatadb, Mapping ID: " . $mapping['id'] . ", Field Value: " . var_export($fieldValue, true));
     }
+
+    // ---- Fixed fields mappati da JSON (scrivono colonne datadb) ----
+    if ($source_type === 'json' && !empty($fixedJsonFields)) {
+        $fixedUpdates = []; // colonna datadb => valore (id LIMS o data)
+
+        foreach ($fixedJsonFields as $fx) {
+            $fixedKey = $fx['fixed_field_key'];
+            $column = binding_fixed_column($fixedKey);
+            if (!$column) {
+                continue;
+            }
+
+            $idx = binding_find_column_index((string) $fx['json_node'], $columns);
+            $raw = ($idx >= 0 && isset($row[$idx])) ? trim((string) $row[$idx]) : '';
+            if ($raw === '') {
+                continue;
+            }
+
+            // Campo non a lista (es. ConsegnaRichiesta DATE): scrivo il valore direttamente.
+            if (!binding_fixed_is_list($fixedKey)) {
+                if (($fx['data_type'] ?? '') === 'DATE') {
+                    $fixedUpdates[$column] = date('Y-m-d', strtotime($raw));
+                }
+                continue;
+            }
+
+            // Binding gia' salvato.
+            $existing = binding_lookup_fixed($pdo, (int) $template_id, $fixedKey, $raw);
+            if ($existing) {
+                $fixedUpdates[$column] = (int) $existing['lims_value_id'];
+                $key = 'fx:' . $fixedKey . '|' . $raw;
+                if (!isset($savedBindings[$key])) {
+                    $savedBindings[$key] = [
+                        'kind'            => 'fixed',
+                        'fixed_field_key' => $fixedKey,
+                        'field_label'     => binding_fixed_label($fixedKey),
+                        'json_value'      => $raw,
+                        'lims_value'      => (string) $existing['lims_value'],
+                        'lims_value_id'   => (int) $existing['lims_value_id'],
+                        'datadb_ids'      => [],
+                    ];
+                }
+                $savedBindings[$key]['datadb_ids'][] = (int) $iddatadb;
+                continue;
+            }
+
+            // Auto-match 1-a-1 (solo per le liste globali piccole).
+            $autoMatch = null;
+            if (binding_fixed_auto_matchable($fixedKey)) {
+                $fixedValues = binding_get_fixed_values($pdo, $fixedKey, (int) $template_id);
+                $autoMatch = binding_auto_match_fixed($fixedValues, $raw);
+            }
+
+            if ($autoMatch) {
+                binding_upsert_fixed($pdo, (int) $template_id, $fixedKey, $raw, (int) $autoMatch['id'], (string) $autoMatch['text'], $user_id);
+                $fixedUpdates[$column] = (int) $autoMatch['id'];
+                $key = 'fx:' . $fixedKey . '|' . $raw;
+                if (!isset($autoBindings[$key])) {
+                    $autoBindings[$key] = [
+                        'kind'            => 'fixed',
+                        'fixed_field_key' => $fixedKey,
+                        'field_label'     => binding_fixed_label($fixedKey),
+                        'json_value'      => $raw,
+                        'lims_value'      => (string) $autoMatch['text'],
+                        'lims_value_id'   => (int) $autoMatch['id'],
+                        'datadb_ids'      => [],
+                    ];
+                }
+                $autoBindings[$key]['datadb_ids'][] = (int) $iddatadb;
+                continue;
+            }
+
+            // Nessuna corrispondenza: colonna lasciata vuota, segnalo come pending.
+            $key = 'fx:' . $fixedKey . '|' . $raw;
+            if (!isset($pendingBindings[$key])) {
+                $pendingBindings[$key] = [
+                    'kind'            => 'fixed',
+                    'fixed_field_key' => $fixedKey,
+                    'field_label'     => binding_fixed_label($fixedKey),
+                    'json_value'      => $raw,
+                    'datadb_ids'      => [],
+                ];
+            }
+            $pendingBindings[$key]['datadb_ids'][] = (int) $iddatadb;
+        }
+
+        if (!empty($fixedUpdates)) {
+            $setParts = [];
+            $params = [];
+            foreach ($fixedUpdates as $col => $val) {
+                $setParts[] = "`$col` = ?";
+                $params[] = $val;
+            }
+            $params[] = (int) $iddatadb;
+            $upd = $pdo->prepare("UPDATE datadb SET " . implode(', ', $setParts) . " WHERE iddatadb = ?");
+            $upd->execute($params);
+        }
+    }
 }
 
 $_SESSION['inserted_ids'] = $insertedIds;
 
-header("Location: imported.php?id=" . urlencode($template_id) . "&importref=" . urlencode($importReferenceCode));
+$importedUrl = "imported.php?id=" . urlencode($template_id) . "&importref=" . urlencode($importReferenceCode);
+
+// Solo se restano binding da risolvere mostro la pagina (con anche gli auto, modificabili).
+if (!empty($pendingBindings)) {
+    $_SESSION['pending_bindings'] = [
+        'template_id' => $template_id,
+        'importref'   => $importReferenceCode,
+        'items'       => array_values($pendingBindings),
+        'auto'        => array_values($autoBindings),
+        'saved'       => array_values($savedBindings),
+    ];
+
+    header("Location: resolve_bindings.php");
+    exit;
+}
+
+unset($_SESSION['pending_bindings']);
+
+// Solo auto-collegati: vado diretto alla griglia, segnalando quanti.
+if (!empty($autoBindings)) {
+    $importedUrl .= "&autobound=" . count($autoBindings);
+}
+
+header("Location: " . $importedUrl);
 exit;
-?>

public/userarea/import_json.php

@@ -0,0 +1,829 @@
+<?php
+include('include/headscript.php');
+
+// Check if a valid template ID has been provided
+if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
+    header("Location: xlstemplates_grid.php?status=error&message=" . urlencode("Invalid ID"));
+    exit;
+}
+
+$id = intval($_GET['id']);
+
+// Load template
+$db = DBHandlerSelect::getInstance();
+$pdo = $db->getConnection();
+$stmt = $pdo->prepare("SELECT * FROM excel_templates WHERE id = ?");
+$stmt->execute([$id]);
+$template = $stmt->fetch(PDO::FETCH_ASSOC);
+
+if (!$template) {
+    header("Location: template_dashboard.php?status=error&message=" . urlencode("Template not found"));
+    exit;
+}
+
+// Check mappings
+$stmt = $pdo->prepare("SELECT id FROM template_mapping WHERE template_id = ?");
+$stmt->execute([$id]);
+$hasMappings = $stmt->fetch(PDO::FETCH_ASSOC);
+
+error_log("Loaded JSON import template: " . print_r($template, true));
+?>
+
+<!doctype html>
+<html lang="en">
+
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
+    <?php include('cssinclude.php'); ?>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
+    <style>
+        .top-scrollbar {
+            overflow-x: auto;
+            overflow-y: hidden;
+            width: 100%;
+            height: 18px;
+            margin-bottom: 8px;
+            border: 1px solid #dee2e6;
+            border-radius: 0.25rem;
+            background: #f8f9fa;
+            display: none;
+        }
+
+        .top-scrollbar-inner {
+            height: 1px;
+        }
+
+        .table-container {
+            overflow-x: auto;
+            max-width: 100%;
+            margin-bottom: 20px;
+        }
+
+        .table {
+            width: 100%;
+            border-collapse: collapse;
+        }
+
+        .table th,
+        .table td {
+            padding: 10px;
+            text-align: left;
+            border: 1px solid #dee2e6;
+            min-width: 120px;
+            max-width: 260px;
+            overflow: hidden;
+            text-overflow: ellipsis;
+            white-space: nowrap;
+            vertical-align: middle;
+        }
+
+        .table th:first-child,
+        .table td:first-child {
+            min-width: 50px;
+            max-width: 50px;
+        }
+
+        .table th {
+            background-color: #f8f9fa;
+            position: relative;
+            cursor: col-resize;
+            user-select: none;
+        }
+
+        .table th .resize-handle {
+            position: absolute;
+            top: 0;
+            right: 0;
+            width: 5px;
+            height: 100%;
+            cursor: col-resize;
+            background: transparent;
+        }
+
+        .table th .resize-handle:hover {
+            background: #007bff;
+        }
+
+        .loader {
+            display: none;
+            border: 4px solid #f3f3f3;
+            border-top: 4px solid #3498db;
+            border-radius: 50%;
+            width: 30px;
+            height: 30px;
+            animation: spin 1s linear infinite;
+            margin: 10px auto;
+        }
+
+        @keyframes spin {
+            0% {
+                transform: rotate(0deg);
+            }
+
+            100% {
+                transform: rotate(360deg);
+            }
+        }
+
+        .column-filters th {
+            background: #ffffff;
+            cursor: default;
+        }
+
+        .column-filters input {
+            width: 100%;
+            min-width: 80px;
+        }
+
+        .json-code-input {
+            font-size: 1.15rem;
+            min-height: 48px;
+        }
+
+        .json-paste-area {
+            min-height: 260px;
+            font-family: Consolas, Monaco, monospace;
+            font-size: 13px;
+        }
+
+        .json-help-box {
+            background: #f8f9fa;
+            border: 1px solid #dee2e6;
+            border-radius: 8px;
+            padding: 12px 14px;
+            font-size: 13px;
+        }
+
+        .source-badge {
+            font-size: 12px;
+        }
+    </style>
+    <title><?= htmlspecialchars($template['name']) ?> - JSON Import - <?= htmlspecialchars($titlewebsite, ENT_QUOTES, 'UTF-8'); ?></title>
+</head>
+
+<body>
+    <div class="wrapper">
+        <?php include('include/navbar.php'); ?>
+        <?php include('include/topbar.php'); ?>
+        <div class="page-wrapper">
+            <div class="page-content">
+                <?php include('top_stat_widget.php'); ?>
+
+                <div class="mb-3 text">
+                    <a href="imported.php?id=<?= $id ?>" class="btn btn-warning me-2">Imported (i)</a>
+                    <a href="tolims.php?id=<?= $id ?>" class="btn btn-success me-2">To LIMS (l)</a>
+                    <a href="bindings_manage.php?template_id=<?= $id ?>" class="btn btn-outline-secondary">Binding JSON &rarr; LIMS</a>
+                </div>
+
+                <div class="card radius-10">
+                    <div class="card-header">
+                        <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
+                            <div>
+                                <h6 class="mb-0"><?= htmlspecialchars($template['name']) ?> - JSON Import</h6>
+                                <small>
+                                    Template ID: <?= $id ?>
+                                </small>
+                            </div>
+                            <span class="badge bg-info text-dark">JSON mode</span>
+                        </div>
+                    </div>
+
+                    <div class="card-body">
+                        <?php if (!$hasMappings): ?>
+                            <div class="alert alert-warning" role="alert">
+                                Nessun mapping trovato per questo template. Configura i mapping prima di procedere.
+                            </div>
+                        <?php endif; ?>
+
+                        <div class="json-help-box mb-3">
+                            <strong>Flusso:</strong> inserisci/scansiona un codice per recuperare il JSON da API, oppure incolla manualmente un JSON nel secondo tab.
+                            Ogni JSON aggiunto diventa una riga della tabella di preview. Quando hai finito, seleziona le righe e clicca <strong>Prosegui</strong>.
+                        </div>
+
+                        <ul class="nav nav-tabs" id="jsonImportTabs" role="tablist">
+                            <li class="nav-item" role="presentation">
+                                <button class="nav-link active" id="api-code-tab" data-bs-toggle="tab" data-bs-target="#api-code-pane" type="button" role="tab" aria-controls="api-code-pane" aria-selected="true">
+                                    Code / Barcode
+                                </button>
+                            </li>
+                            <li class="nav-item" role="presentation">
+                                <button class="nav-link" id="paste-json-tab" data-bs-toggle="tab" data-bs-target="#paste-json-pane" type="button" role="tab" aria-controls="paste-json-pane" aria-selected="false">
+                                    Paste JSON
+                                </button>
+                            </li>
+                        </ul>
+
+                        <div class="tab-content border border-top-0 p-3 mb-3" id="jsonImportTabsContent">
+                            <div class="tab-pane fade show active" id="api-code-pane" role="tabpanel" aria-labelledby="api-code-tab" tabindex="0">
+                                <form id="jsonCodeForm" class="row g-3 align-items-end">
+                                    <div class="col-lg-8">
+                                        <label for="json_code" class="form-label">Code / Barcode</label>
+                                        <input type="text" class="form-control json-code-input" id="json_code" name="json_code" placeholder="Write or scan code" autocomplete="off" <?= !$hasMappings ? 'disabled' : '' ?>>
+                                        <small class="text-muted">Lo scanner barcode normalmente scrive qui il codice e invia Enter.</small>
+                                    </div>
+                                    <div class="col-lg-4 d-flex gap-2">
+                                        <button type="submit" class="btn btn-primary flex-fill" <?= !$hasMappings ? 'disabled' : '' ?>>Load JSON</button>
+                                        <button type="button" class="btn btn-outline-secondary" id="clearCodeBtn">Clear</button>
+                                    </div>
+                                </form>
+                            </div>
+
+                            <div class="tab-pane fade" id="paste-json-pane" role="tabpanel" aria-labelledby="paste-json-tab" tabindex="0">
+                                <form id="pasteJsonForm">
+                                    <div class="mb-3">
+                                        <label for="manual_json_reference" class="form-label">Reference / filename</label>
+                                        <input type="text" class="form-control" id="manual_json_reference" placeholder="Optional reference, e.g. manual-json-001">
+                                    </div>
+                                    <div class="mb-3">
+                                        <label for="manual_json" class="form-label">Paste JSON</label>
+                                        <textarea class="form-control json-paste-area" id="manual_json" placeholder='{"data":[{"id":"MM000620","attributes":{"trf_type":"apparel"}}]}' <?= !$hasMappings ? 'disabled' : '' ?>></textarea>
+                                    </div>
+                                    <button type="submit" class="btn btn-primary" <?= !$hasMappings ? 'disabled' : '' ?>>Add pasted JSON</button>
+                                    <button type="button" class="btn btn-outline-secondary" id="clearManualJsonBtn">Clear</button>
+                                </form>
+                            </div>
+                        </div>
+
+                        <div class="loader" id="loader"></div>
+                        <div id="errorContainer" class="alert alert-danger mt-3" style="display:none;"></div>
+                        <div id="successContainer" class="alert alert-success mt-3" style="display:none;"></div>
+
+                        <div id="tableContainer"></div>
+                    </div>
+                </div>
+            </div>
+        </div>
+
+        <div class="overlay toggle-icon"></div>
+        <a href="javaScript:;" class="back-to-top"><i class='bx bxs-up-arrow-alt'></i></a>
+        <?php include('include/footer.php'); ?>
+    </div>
+
+    <script src="https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.6/dist/umd/popper.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.min.js"></script>
+    <?php include('jsinclude.php'); ?>
+
+    <script>
+        document.addEventListener("DOMContentLoaded", function() {
+            const TEMPLATE_ID = <?= (int)$id ?>;
+            const API_ENDPOINT = 'get_json_by_code.php';
+            const INCLUDE_SOURCE_CODE_COLUMN = true;
+            const UNWRAP_SINGLE_DATA_ITEM = true;
+
+            const jsonCodeForm = document.getElementById('jsonCodeForm');
+            const pasteJsonForm = document.getElementById('pasteJsonForm');
+            const jsonCodeInput = document.getElementById('json_code');
+            const manualJsonInput = document.getElementById('manual_json');
+            const manualJsonReferenceInput = document.getElementById('manual_json_reference');
+            const clearCodeBtn = document.getElementById('clearCodeBtn');
+            const clearManualJsonBtn = document.getElementById('clearManualJsonBtn');
+            const loader = document.getElementById('loader');
+            const errorContainer = document.getElementById('errorContainer');
+            const successContainer = document.getElementById('successContainer');
+            const tableContainer = document.getElementById('tableContainer');
+
+            let jsonRows = [];
+            let columns = [];
+
+            if (jsonCodeInput && !jsonCodeInput.disabled) {
+                jsonCodeInput.focus();
+            }
+
+            jsonCodeForm.addEventListener('submit', function(e) {
+                e.preventDefault();
+                const code = jsonCodeInput.value.trim();
+
+                if (!code) {
+                    showError('Inserisci o scansiona un codice.');
+                    return;
+                }
+
+                loadJsonFromApi(code);
+            });
+
+            pasteJsonForm.addEventListener('submit', function(e) {
+                e.preventDefault();
+
+                const rawJson = manualJsonInput.value.trim();
+                const reference = manualJsonReferenceInput.value.trim() || 'manual-json-' + (jsonRows.length + 1);
+
+                if (!rawJson) {
+                    showError('Incolla un JSON prima di aggiungerlo.');
+                    return;
+                }
+
+                try {
+                    const parsedJson = JSON.parse(rawJson);
+                    addJsonRow(parsedJson, reference, 'paste');
+                    manualJsonInput.value = '';
+                    manualJsonReferenceInput.value = '';
+                    showSuccess('JSON incollato aggiunto correttamente.');
+                } catch (err) {
+                    showError('JSON non valido: ' + err.message);
+                }
+            });
+
+            clearCodeBtn.addEventListener('click', function() {
+                jsonCodeInput.value = '';
+                jsonCodeInput.focus();
+            });
+
+            clearManualJsonBtn.addEventListener('click', function() {
+                manualJsonInput.value = '';
+                manualJsonReferenceInput.value = '';
+            });
+
+            function loadJsonFromApi(code) {
+                hideMessages();
+                loader.style.display = 'block';
+
+                fetch(API_ENDPOINT, {
+                        method: 'POST',
+                        headers: {
+                            'Content-Type': 'application/json'
+                        },
+                        body: JSON.stringify({
+                            template_id: TEMPLATE_ID,
+                            code: code
+                        })
+                    })
+                    .then(response => {
+                        if (!response.ok) {
+                            throw new Error('HTTP status ' + response.status);
+                        }
+                        return response.json();
+                    })
+                    .then(responseData => {
+                        loader.style.display = 'none';
+
+                        if (responseData.error) {
+                            showError(responseData.error);
+                            return;
+                        }
+
+                        let jsonPayload = responseData;
+                        let reference = code;
+
+                        // Supported endpoint response format:
+                        // { success: true, json: {...}, reference: "..." }
+                        if (responseData.json !== undefined) {
+                            jsonPayload = responseData.json;
+                            reference = responseData.reference || responseData.filename || responseData.code || code;
+                        }
+
+                        addJsonRow(jsonPayload, reference, 'api');
+                        jsonCodeInput.value = '';
+                        jsonCodeInput.focus();
+                        showSuccess('JSON recuperato e aggiunto correttamente.');
+                    })
+                    .catch(error => {
+                        loader.style.display = 'none';
+                        showError('Errore durante il recupero del JSON: ' + error.message);
+                    });
+            }
+
+            function addJsonRow(jsonPayload, reference, sourceType) {
+                // Ogni elemento di data[] diventa una riga (non colonne data.0.*, data.1.*).
+                const records = extractRecords(jsonPayload);
+
+                records.forEach((record, recordIndex) => {
+                    const flattened = flattenJson(record);
+
+                    const rowReference = records.length > 1 ?
+                        reference + '#' + (recordIndex + 1) :
+                        reference;
+
+                    if (INCLUDE_SOURCE_CODE_COLUMN) {
+                        flattened.source_code = rowReference;
+                        flattened.source_type = sourceType;
+                    }
+
+                    const newColumns = Object.keys(flattened).filter(col => !columns.includes(col));
+                    columns = columns.concat(newColumns);
+
+                    jsonRows.push({
+                        excelrow: 'JSON-' + (jsonRows.length + 1),
+                        reference: rowReference,
+                        sourceType: sourceType,
+                        flat: flattened
+                    });
+                });
+
+                renderTable();
+            }
+
+            // Record da trasformare in righe: gli oggetti in data[], altrimenti il payload stesso.
+            function extractRecords(payload) {
+                if (
+                    payload &&
+                    typeof payload === 'object' &&
+                    !Array.isArray(payload) &&
+                    Array.isArray(payload.data) &&
+                    payload.data.length > 0
+                ) {
+                    const items = payload.data.filter(item => item && typeof item === 'object');
+                    if (items.length > 0) {
+                        return items;
+                    }
+                }
+
+                return [payload];
+            }
+
+            function flattenJson(value, prefix = '', result = {}) {
+                if (value === null || value === undefined) {
+                    result[prefix || 'value'] = '';
+                    return result;
+                }
+
+                if (Array.isArray(value)) {
+                    if (value.length === 0) {
+                        result[prefix || 'value'] = '';
+                        return result;
+                    }
+
+                    value.forEach((item, index) => {
+                        const newPrefix = prefix ? prefix + '.' + index : String(index);
+                        flattenJson(item, newPrefix, result);
+                    });
+                    return result;
+                }
+
+                if (typeof value === 'object') {
+                    const keys = Object.keys(value);
+                    if (keys.length === 0) {
+                        result[prefix || 'value'] = '';
+                        return result;
+                    }
+
+                    keys.forEach(key => {
+                        const newPrefix = prefix ? prefix + '.' + key : key;
+                        flattenJson(value[key], newPrefix, result);
+                    });
+                    return result;
+                }
+
+                result[prefix || 'value'] = String(value);
+                return result;
+            }
+
+            function buildImportData() {
+                const rows = jsonRows.map(row => columns.map(col => row.flat[col] ?? ''));
+                const excelData = rows.map((rowData, index) => ({
+                    excelrow: jsonRows[index].excelrow,
+                    data: rowData
+                }));
+
+                return {
+                    template_id: TEMPLATE_ID,
+                    columns: columns,
+                    rows: rows,
+                    excel_data: excelData,
+                    filename: 'json_import_' + new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19)
+                };
+            }
+
+            function renderTable() {
+                if (jsonRows.length === 0) {
+                    tableContainer.innerHTML = '';
+                    return;
+                }
+
+                const data = buildImportData();
+
+                let html = `
+<form id="selectRowsForm" action="import_insert.php" method="POST">
+    <input type="hidden" name="template_id" value="${escapeHtml(data.template_id)}">
+    <input type="hidden" name="columns" value="${encodeURIComponent(JSON.stringify(data.columns))}">
+    <input type="hidden" name="rows" id="selectedRowsData" value="">
+    <input type="hidden" name="excelrows" id="selectedExcelRowsData" value="">
+    <input type="hidden" name="filename" value="${escapeHtml(data.filename)}">
+    <input type="hidden" name="source_type" value="json">
+
+    <div class="d-flex justify-content-between align-items-center flex-wrap gap-2 mb-3">
+        <div>
+            <strong>JSON rows loaded:</strong> ${jsonRows.length}
+            <span class="badge bg-secondary source-badge ms-2">Columns: ${data.columns.length}</span>
+        </div>
+        <div class="d-flex gap-2">
+            <button type="button" class="btn btn-outline-danger btn-sm" id="clearAllRowsBtn">Clear all rows</button>
+            <button type="submit" class="btn btn-primary" id="proceedButtonTop" disabled>Prosegui</button>
+        </div>
+    </div>
+
+    <div class="top-scrollbar" id="topTableScrollbar">
+        <div class="top-scrollbar-inner" id="topTableScrollbarInner"></div>
+    </div>
+
+    <div class="table-container" id="mainTableContainer">
+        <table class="table table-striped table-bordered" id="importPreviewTable">
+            <thead>
+                <tr>
+                    <th><input type="checkbox" id="selectAll"> Select</th>
+                    ${data.columns.map(col => `<th title="${escapeHtml(col)}">${escapeHtml(readableColumnLabel(col))}<div class="resize-handle"></div></th>`).join('')}
+                    <th>Action</th>
+                </tr>
+                <tr class="column-filters">
+                    <th></th>
+                    ${data.columns.map((col, i) => `
+                        <th>
+                            <input type="text"
+                                class="form-control form-control-sm column-filter"
+                                data-col-index="${i}"
+                                placeholder="Filter...">
+                        </th>
+                    `).join('')}
+                    <th></th>
+                </tr>
+            </thead>
+            <tbody>
+                ${data.excel_data.map((row, index) => `
+                    <tr data-row-index="${index}">
+                        <td><input type="checkbox" class="row-checkbox" name="selected_rows[]" value="${index}" data-excelrow="${escapeHtml(row.excelrow)}"></td>
+                        ${row.data.map(cell => `<td title="${escapeHtml(cell)}">${escapeHtml(cell)}</td>`).join('')}
+                        <td><button type="button" class="btn btn-sm btn-outline-danger remove-row-btn" data-row-index="${index}">Remove</button></td>
+                    </tr>
+                `).join('')}
+            </tbody>
+        </table>
+    </div>
+
+    <button type="submit" class="btn btn-primary mt-3" id="proceedButtonBottom" disabled>Prosegui</button>
+</form>
+`;
+
+                tableContainer.innerHTML = html;
+                bindTableEvents(data);
+            }
+
+            function bindTableEvents(data) {
+                const selectRowsForm = document.getElementById('selectRowsForm');
+                const clearAllRowsBtn = document.getElementById('clearAllRowsBtn');
+                const removeRowButtons = document.querySelectorAll('.remove-row-btn');
+
+                selectRowsForm.addEventListener('submit', function(e) {
+                    const checkedBoxes = Array.from(document.querySelectorAll('.row-checkbox:checked'));
+
+                    if (checkedBoxes.length === 0) {
+                        e.preventDefault();
+                        alert('Seleziona almeno una riga.');
+                        return;
+                    }
+
+                    const selectedRows = [];
+                    const selectedExcelRows = [];
+
+                    checkedBoxes.forEach((cb, newIndex) => {
+                        const originalIndex = parseInt(cb.value, 10);
+
+                        if (data.rows && data.rows[originalIndex]) {
+                            selectedRows.push(data.rows[originalIndex]);
+                        }
+
+                        if (data.excel_data && data.excel_data[originalIndex]) {
+                            selectedExcelRows.push(data.excel_data[originalIndex].excelrow);
+                        }
+
+                        // Reindex selected_rows so import_insert.php receives only the reduced rows array
+                        cb.value = newIndex;
+                    });
+
+                    document.getElementById('selectedRowsData').value =
+                        encodeURIComponent(JSON.stringify(selectedRows));
+
+                    document.getElementById('selectedExcelRowsData').value =
+                        encodeURIComponent(JSON.stringify(selectedExcelRows));
+                });
+
+                clearAllRowsBtn.addEventListener('click', function() {
+                    if (!confirm('Vuoi rimuovere tutte le righe JSON caricate?')) return;
+                    jsonRows = [];
+                    columns = [];
+                    renderTable();
+                    showSuccess('Righe JSON rimosse.');
+                    jsonCodeInput.focus();
+                });
+
+                removeRowButtons.forEach(button => {
+                    button.addEventListener('click', function() {
+                        const rowIndex = parseInt(this.dataset.rowIndex, 10);
+                        jsonRows.splice(rowIndex, 1);
+                        rebuildColumnsFromRows();
+                        renderTable();
+                    });
+                });
+
+                const topTableScrollbar = document.getElementById('topTableScrollbar');
+                const topTableScrollbarInner = document.getElementById('topTableScrollbarInner');
+                const mainTableContainer = document.getElementById('mainTableContainer');
+                const importPreviewTable = document.getElementById('importPreviewTable');
+
+                function updateTopTableScrollbar() {
+                    if (!topTableScrollbar || !topTableScrollbarInner || !mainTableContainer || !importPreviewTable) return;
+
+                    topTableScrollbarInner.style.width = importPreviewTable.scrollWidth + 'px';
+
+                    if (mainTableContainer.scrollWidth > mainTableContainer.clientWidth) {
+                        topTableScrollbar.style.display = 'block';
+                    } else {
+                        topTableScrollbar.style.display = 'none';
+                    }
+                }
+
+                let syncingTop = false;
+                let syncingBottom = false;
+
+                if (topTableScrollbar && mainTableContainer) {
+                    topTableScrollbar.addEventListener('scroll', function() {
+                        if (syncingBottom) return;
+                        syncingTop = true;
+                        mainTableContainer.scrollLeft = topTableScrollbar.scrollLeft;
+                        syncingTop = false;
+                    });
+
+                    mainTableContainer.addEventListener('scroll', function() {
+                        if (syncingTop) return;
+                        syncingBottom = true;
+                        topTableScrollbar.scrollLeft = mainTableContainer.scrollLeft;
+                        syncingBottom = false;
+                    });
+                }
+
+                updateTopTableScrollbar();
+                setTimeout(updateTopTableScrollbar, 100);
+                setTimeout(updateTopTableScrollbar, 300);
+                window.addEventListener('resize', updateTopTableScrollbar);
+
+                const proceedButtonTop = document.getElementById('proceedButtonTop');
+                const proceedButtonBottom = document.getElementById('proceedButtonBottom');
+                const selectAllCheckbox = document.getElementById('selectAll');
+                const checkboxes = document.querySelectorAll('.row-checkbox');
+
+                function updateProceedButton() {
+                    const enabled = Array.from(document.querySelectorAll('.row-checkbox')).some(cb => cb.checked);
+
+                    if (proceedButtonTop) proceedButtonTop.disabled = !enabled;
+                    if (proceedButtonBottom) proceedButtonBottom.disabled = !enabled;
+                }
+
+                selectAllCheckbox.addEventListener('change', function() {
+                    const visibleRows = Array.from(document.querySelectorAll('#importPreviewTable tbody tr'))
+                        .filter(row => row.style.display !== 'none');
+
+                    visibleRows.forEach(row => {
+                        const checkbox = row.querySelector('.row-checkbox');
+                        if (checkbox) {
+                            checkbox.checked = this.checked;
+                        }
+                    });
+
+                    updateProceedButton();
+                });
+
+                checkboxes.forEach(checkbox => {
+                    checkbox.addEventListener('change', function() {
+                        const visibleCheckboxes = Array.from(document.querySelectorAll('#importPreviewTable tbody tr'))
+                            .filter(row => row.style.display !== 'none')
+                            .map(row => row.querySelector('.row-checkbox'))
+                            .filter(cb => cb !== null);
+
+                        selectAllCheckbox.checked =
+                            visibleCheckboxes.length > 0 &&
+                            visibleCheckboxes.every(cb => cb.checked);
+
+                        updateProceedButton();
+                    });
+                });
+
+                const thElements = document.querySelectorAll('#importPreviewTable th');
+                thElements.forEach((th, index) => {
+                    if (index === 0) return;
+                    const resizeHandle = th.querySelector('.resize-handle');
+                    if (resizeHandle) {
+                        resizeHandle.addEventListener('mousedown', (e) => {
+                            e.preventDefault();
+                            const startX = e.clientX;
+                            const startWidth = th.offsetWidth;
+
+                            const onMouseMove = (e) => {
+                                const newWidth = Math.max(60, startWidth + (e.clientX - startX));
+                                th.style.width = `${newWidth}px`;
+                                th.style.minWidth = `${newWidth}px`;
+                                th.style.maxWidth = `${newWidth}px`;
+
+                                const cells = document.querySelectorAll(`#importPreviewTable td:nth-child(${index + 1})`);
+                                cells.forEach(cell => {
+                                    cell.style.width = `${newWidth}px`;
+                                    cell.style.minWidth = `${newWidth}px`;
+                                    cell.style.maxWidth = `${newWidth}px`;
+                                });
+                            };
+
+                            const onMouseUp = () => {
+                                document.removeEventListener('mousemove', onMouseMove);
+                                document.removeEventListener('mouseup', onMouseUp);
+                            };
+
+                            document.addEventListener('mousemove', onMouseMove);
+                            document.addEventListener('mouseup', onMouseUp);
+                        });
+                    }
+                });
+
+                const rows = document.querySelectorAll('#importPreviewTable tbody tr');
+                const filterInputs = document.querySelectorAll('.column-filter');
+                const activeFilters = {};
+
+                function applyColumnFilters() {
+                    rows.forEach(row => {
+                        let visible = true;
+
+                        for (const [colIndexStr, filterValue] of Object.entries(activeFilters)) {
+                            const colIndex = parseInt(colIndexStr, 10);
+                            const cell = row.cells[colIndex + 1];
+                            const cellText = (cell?.textContent || '').toLowerCase();
+                            const searchText = (filterValue || '').toLowerCase().trim();
+
+                            if (searchText && !cellText.includes(searchText)) {
+                                visible = false;
+                                break;
+                            }
+                        }
+
+                        row.style.display = visible ? '' : 'none';
+                    });
+
+                    const visibleCheckboxes = Array.from(document.querySelectorAll('#importPreviewTable tbody tr'))
+                        .filter(row => row.style.display !== 'none')
+                        .map(row => row.querySelector('.row-checkbox'))
+                        .filter(cb => cb !== null);
+
+                    selectAllCheckbox.checked =
+                        visibleCheckboxes.length > 0 &&
+                        visibleCheckboxes.every(cb => cb.checked);
+
+                    updateProceedButton();
+                }
+
+                filterInputs.forEach(input => {
+                    input.addEventListener('input', function() {
+                        const colIndex = this.dataset.colIndex;
+                        activeFilters[colIndex] = this.value;
+                        applyColumnFilters();
+                    });
+                });
+
+                updateProceedButton();
+            }
+
+            function rebuildColumnsFromRows() {
+                columns = [];
+                jsonRows.forEach(row => {
+                    Object.keys(row.flat).forEach(col => {
+                        if (!columns.includes(col)) {
+                            columns.push(col);
+                        }
+                    });
+                });
+            }
+
+            function readableColumnLabel(columnName) {
+                if (!columnName) return 'Column without name';
+                return columnName;
+            }
+
+            function showError(message) {
+                successContainer.style.display = 'none';
+                errorContainer.textContent = message;
+                errorContainer.style.display = 'block';
+            }
+
+            function showSuccess(message) {
+                errorContainer.style.display = 'none';
+                successContainer.textContent = message;
+                successContainer.style.display = 'block';
+                setTimeout(() => {
+                    successContainer.style.display = 'none';
+                }, 3500);
+            }
+
+            function hideMessages() {
+                errorContainer.style.display = 'none';
+                successContainer.style.display = 'none';
+            }
+
+            function escapeHtml(value) {
+                return String(value ?? '')
+                    .replace(/&/g, '&amp;')
+                    .replace(/</g, '&lt;')
+                    .replace(/>/g, '&gt;')
+                    .replace(/"/g, '&quot;')
+                    .replace(/'/g, '&#039;');
+            }
+        });
+    </script>
+</body>
+
+</html>

public/userarea/import_xls2.php

@@ -167,7 +167,12 @@ error_log("Loaded template: " . print_r($template, true));
                         <div class="d-flex align-items-center">
                             <div>
                                 <h6 class="mb-0"><?= htmlspecialchars($template['name']) ?></h6>
-                                <small>Template ID: <?= $id ?>, Start Row: <?= $template['header_row'] ?>, Start Column: <?= $template['start_column'] ?></small>
+                                <small>
+                                    Template ID: <?= $id ?>,
+                                    Sheet Number: <?= (int)($template['xls_sheet_index'] ?? 0) ?>,
+                                    Start Row: <?= $template['header_row'] ?>,
+                                    Start Column: <?= $template['start_column'] ?>
+                                </small>
                             </div>
                         </div>
                     </div>
@@ -244,8 +249,9 @@ error_log("Loaded template: " . print_r($template, true));
                 const templateId = <?= $id ?>;
                 console.log('Template ID passed to formData:', templateId);
                 formData.append('template_id', templateId);
-                formData.append('header_row', <?= $template['header_row'] ?>);
-                formData.append('start_column', <?= $template['start_column'] ?>);
+                formData.append('header_row', <?= (int)$template['header_row'] ?>);
+                formData.append('start_column', <?= json_encode($template['start_column']) ?>);
+                formData.append('xls_sheet_index', <?= (int)($template['xls_sheet_index'] ?? 0) ?>);
 
                 fetch('process_import_xls2.php', {
                         method: 'POST',
@@ -331,8 +337,8 @@ error_log("Loaded template: " . print_r($template, true));
 <form id="selectRowsForm" action="import_insert.php" method="POST">
     <input type="hidden" name="template_id" value="${data.template_id}">
     <input type="hidden" name="columns" value="${encodeURIComponent(JSON.stringify(data.columns))}">
-    <input type="hidden" name="rows" value="${encodeURIComponent(JSON.stringify(data.rows))}">
-    <input type="hidden" name="excelrows" value="${encodeURIComponent(JSON.stringify(data.excel_data.map(r => r.excelrow)))}">
+    <input type="hidden" name="rows" id="selectedRowsData" value="">
+    <input type="hidden" name="excelrows" id="selectedExcelRowsData" value="">
     <input type="hidden" name="filename" value="${data.filename}">
 
     <!-- TOP BUTTON -->
@@ -383,6 +389,42 @@ error_log("Loaded template: " . print_r($template, true));
 `;
                 tableContainer.innerHTML = html;
 
+                const selectRowsForm = document.getElementById('selectRowsForm');
+
+                selectRowsForm.addEventListener('submit', function(e) {
+                    const checkedBoxes = Array.from(document.querySelectorAll('.row-checkbox:checked'));
+
+                    if (checkedBoxes.length === 0) {
+                        e.preventDefault();
+                        alert('Seleziona almeno una riga.');
+                        return;
+                    }
+
+                    const selectedRows = [];
+                    const selectedExcelRows = [];
+
+                    checkedBoxes.forEach((cb, newIndex) => {
+                        const originalIndex = parseInt(cb.value, 10);
+
+                        if (data.rows && data.rows[originalIndex]) {
+                            selectedRows.push(data.rows[originalIndex]);
+                        }
+
+                        if (data.excel_data && data.excel_data[originalIndex]) {
+                            selectedExcelRows.push(data.excel_data[originalIndex].excelrow);
+                        }
+
+                        // Reindex selected_rows so import_insert.php receives only the reduced rows array
+                        cb.value = newIndex;
+                    });
+
+                    document.getElementById('selectedRowsData').value =
+                        encodeURIComponent(JSON.stringify(selectedRows));
+
+                    document.getElementById('selectedExcelRowsData').value =
+                        encodeURIComponent(JSON.stringify(selectedExcelRows));
+                });
+
                 const topTableScrollbar = document.getElementById('topTableScrollbar');
                 const topTableScrollbarInner = document.getElementById('topTableScrollbarInner');
                 const mainTableContainer = document.getElementById('mainTableContainer');

public/userarea/imported.php

@@ -20,9 +20,10 @@ $db = DBHandlerSelect::getInstance();
 $pdo = $db->getConnection();
 
 // Recupera tutti i mapping dal template, includendo is_visible_import
-$stmt = $pdo->prepare("SELECT id, excel_column, data_type, is_required, manual_default, is_manual, field_label, field_id, main_field, is_visible_import, auto_value
+$stmt = $pdo->prepare("SELECT id, excel_column, data_type, is_required, manual_default, is_manual, field_label, field_id, field_order, main_field, is_visible_import, auto_value
 FROM template_mapping
-WHERE template_id = ?");
+WHERE template_id = ?
+ORDER BY field_order ASC, id ASC");
 $stmt->execute([$template_id]);
 $allMappings = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
@@ -55,15 +56,22 @@ if (empty($allMappings)) {
     exit;
 }
 
-// Trova il campo main_field
-$mainFieldMapping = null;
+// Find up to 2 main fields
+$mainFieldMappings = [];
+
 foreach ($allMappings as $mapping) {
-    if ($mapping['main_field'] == 1 && $mapping['is_visible_import'] == 1) {
-        $mainFieldMapping = $mapping;
+    if ((string)$mapping['main_field'] === '1' && (int)$mapping['is_visible_import'] === 1) {
+        $mainFieldMappings[] = $mapping;
+    }
+
+    if (count($mainFieldMappings) >= 2) {
         break;
     }
 }
 
+// Backward compatibility: first main field
+$mainFieldMapping = $mainFieldMappings[0] ?? null;
+
 // Recupera l'idclient di default dal template (se presente)
 $template_stmt = $pdo->prepare("SELECT idclient FROM excel_templates WHERE id = ?");
 $template_stmt->execute([$template_id]);
@@ -91,7 +99,7 @@ $stmt = $pdo->prepare("
     FROM datadb d
     LEFT JOIN auth_users u ON d.user_id = u.id
     {$baseWhere}
-    ORDER BY d.iddatadb DESC
+    ORDER BY d.excelrow ASC, d.iddatadb ASC
     {$limitClause}
 ");
 $stmt->execute($baseParams);
@@ -224,11 +232,18 @@ foreach ($importedData as $index => $row) {
         $rowObj['details'][(string)$d['mapping_id']] = $d['field_value'] ?? '';
     }
 
-    // Main field value
+    // Main field values
+    foreach ($mainFieldMappings as $mainMapping) {
+        $mainDetail = array_filter($rowDetails, fn($d) => $d['mapping_id'] == $mainMapping['id']);
+        $mainDetail = reset($mainDetail) ?: ['field_value' => $mainMapping['manual_default'] ?? ''];
+
+        $rowObj['details'][(string)$mainMapping['id']] =
+            $mainDetail['field_value'] ?? $mainMapping['manual_default'] ?? '';
+    }
+
+    // Backward compatibility: first main value
     if ($mainFieldMapping) {
-        $mainDetail = array_filter($rowDetails, fn($d) => $d['mapping_id'] == $mainFieldMapping['id']);
-        $mainDetail = reset($mainDetail) ?: ['field_value' => $mainFieldMapping['manual_default'] ?? ''];
-        $rowObj['mainFieldValue'] = $mainDetail['field_value'] ?? $mainFieldMapping['manual_default'] ?? '';
+        $rowObj['mainFieldValue'] = $rowObj['details'][(string)$mainFieldMapping['id']] ?? '';
     }
 
     $rowObj['_dirty'] = false;
@@ -238,18 +253,27 @@ foreach ($importedData as $index => $row) {
 // Build columns in display order
 $gridColumns = [];
 
-// 1. Main field
-if ($mainFieldMapping) {
-    $gridColumns[] = [
-        'type' => 'main_field',
-        'key' => (string)$mainFieldMapping['id'],
-        'label' => $mainFieldMapping['field_label'],
-        'dataType' => $mainFieldMapping['data_type'],
-        'isManual' => (bool)$mainFieldMapping['is_manual'],
-        'isRequired' => (bool)$mainFieldMapping['is_required'],
-        'fieldId' => $mainFieldMapping['field_id'] ?? null,
-        'width' => 150,
-    ];
+// 1. Main fields first, immediately after buttons
+foreach ($allMappings as $mapping) {
+    if (
+        (int)$mapping['is_visible_import'] === 1
+        && (string)$mapping['main_field'] === '1'
+        && trim((string)$mapping['field_label']) !== 'Tested Component:'
+    ) {
+        $gridColumns[] = [
+            'type' => 'main_field',
+            'key' => (string)$mapping['id'],
+            'label' => $mapping['field_label'],
+            'dataType' => $mapping['data_type'],
+            'isManual' => (bool)$mapping['is_manual'],
+            'isRequired' => (bool)$mapping['is_required'],
+            'fieldId' => $mapping['field_id'] ?? null,
+            'fieldOrder' => (int)($mapping['field_order'] ?? 9999),
+            'manualDefault' => $mapping['manual_default'] ?? '',
+            'autoValue' => $mapping['auto_value'] ?? 'none',
+            'width' => 150,
+        ];
+    }
 }
 
 // 2. Status
@@ -261,50 +285,30 @@ $gridColumns[] = ['type' => 'idclient', 'key' => 'idclient', 'label' => 'Client'
 // 4. Cliente Fornitore
 $gridColumns[] = ['type' => 'cliente_fornitore_id', 'key' => 'cliente_fornitore_id', 'label' => $slugMapping['ClienteFornitore'] ?? 'ClienteFornitore', 'width' => 300];
 
-// 5. Auto fields
+// 5. Other custom fields in schema order
 foreach ($allMappings as $mapping) {
     if (
-        !$mapping['is_manual']
-        && $mapping['main_field'] != 1
-        && $mapping['is_visible_import'] == 1
+        (int)$mapping['is_visible_import'] === 1
+        && (string)$mapping['main_field'] !== '1'
         && trim((string)$mapping['field_label']) !== 'Tested Component:'
     ) {
+        $isMainField = ((string)$mapping['main_field'] === '1');
+
         $gridColumns[] = [
-            'type' => 'detail',
+            'type' => $isMainField ? 'main_field' : 'detail',
             'key' => (string)$mapping['id'],
             'label' => $mapping['field_label'],
             'dataType' => $mapping['data_type'],
-            'isManual' => false,
+            'isManual' => (bool)$mapping['is_manual'],
             'isRequired' => (bool)$mapping['is_required'],
             'fieldId' => $mapping['field_id'] ?? null,
+            'fieldOrder' => (int)($mapping['field_order'] ?? 9999),
+            'manualDefault' => $mapping['manual_default'] ?? '',
             'autoValue' => $mapping['auto_value'] ?? 'none',
             'width' => 150,
         ];
     }
 }
-
-// 6. Manual fields
-foreach ($allMappings as $mapping) {
-    if (
-        $mapping['is_manual']
-        && $mapping['main_field'] != 1
-        && $mapping['is_visible_import'] == 1
-        && trim((string)$mapping['field_label']) !== 'Tested Component:'
-    ) {
-        $gridColumns[] = [
-            'type' => 'detail',
-            'key' => (string)$mapping['id'],
-            'label' => $mapping['field_label'],
-            'dataType' => $mapping['data_type'],
-            'isManual' => true,
-            'isRequired' => (bool)$mapping['is_required'],
-            'fieldId' => $mapping['field_id'] ?? null,
-            'manualDefault' => $mapping['manual_default'] ?? '',
-            'width' => 150,
-        ];
-    }
-}
-
 // 7. Tested Component
 $gridColumns[] = ['type' => 'tested_component', 'key' => 'tested_component', 'label' => 'Tested Component', 'width' => 150];
 
@@ -342,7 +346,8 @@ $gridMeta = [
     'slugMapping'      => $slugMapping,
     'timeLabels'       => $timeLabels,
     'columns'          => $gridColumns,
-    'mainFieldMapping' => $mainFieldMapping,
+    'mainFieldMapping'  => $mainFieldMapping,
+    'mainFieldMappings' => $mainFieldMappings,
     'totalRows'        => count($gridDataArray),
 ];
 
@@ -350,6 +355,9 @@ $gridMeta = [
 <script>
     window.gridData = <?= json_encode($gridDataArray, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) ?>;
     window.gridMeta = <?= json_encode($gridMeta, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) ?>;
+
+    // Visible records in the current imported.php page
+    window.visibleIddatadbList = window.gridData.map(row => parseInt(row.iddatadb, 10)).filter(Boolean);
 </script>
 
 <!doctype html>
@@ -666,7 +674,33 @@ $gridMeta = [
             flex-shrink: 0;
         }
 
-        .grid-row .grid-header:nth-child(2) {
+        <?php if (isset($mainFieldMappings) && count($mainFieldMappings) >= 2): ?>
+
+        /* Sticky second Main column - only when the template has 2 Main fields */
+        .grid-top .grid-cell:nth-child(3),
+        #gridHeaderContainer .grid-header:nth-child(3),
+        .grid-row .grid-cell:nth-child(3) {
+            position: sticky !important;
+            left: 360px;
+            z-index: 7;
+            background: white;
+            overflow: visible;
+            flex-shrink: 0;
+        }
+
+        #gridHeaderContainer .grid-header:nth-child(3) {
+            background-color: #e9ecef;
+        }
+
+        .grid-row:nth-child(even) .grid-cell:nth-child(3) {
+            background-color: #f8f9fa;
+        }
+
+        .grid-row:hover .grid-cell:nth-child(3) {
+            background-color: #e9ecef;
+        }
+
+        <?php endif; ?>.grid-row .grid-header:nth-child(2) {
             background-color: #e9ecef;
         }
 
@@ -1267,9 +1301,17 @@ $gridMeta = [
         <?php include('include/topbar.php'); ?>
         <div class="page-wrapper">
             <div class="page-content">
+                <?php $autoBoundCount = isset($_GET['autobound']) ? (int) $_GET['autobound'] : 0; ?>
+                <?php if ($autoBoundCount > 0): ?>
+                    <div class="alert alert-success alert-dismissible fade show" role="alert">
+                        <?= $autoBoundCount ?> valore/i collegato/i automaticamente al LIMS durante l'import.
+                        <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
+                    </div>
+                <?php endif; ?>
                 <div class="mb-3 text d-flex align-items-center gap-2">
                     <a href="imported.php?id=<?= $template_id ?>" class="btn btn-warning me-2">Imported (i)</a>
                     <a href="tolims.php?id=<?= $template_id ?>" class="btn btn-success">To LIMS (l)</a>
+                    <a href="bindings_manage.php?template_id=<?= $template_id ?>" class="btn btn-outline-secondary">Binding JSON &rarr; LIMS</a>
                     <?php if ($importref === ''): ?>
                         <span class="ms-3">
                             <label class="form-check-label" style="font-size: 13px; cursor: pointer;">
@@ -1407,6 +1449,9 @@ $gridMeta = [
             const topScrollbar = document.getElementById('topScrollbar');
             const topScrollbarInner = document.getElementById('topScrollbarInner');
             const gridContainer = document.getElementById('gridContainer');
+            const gridRowContainer = document.getElementById('gridRowContainer');
+            const gridHeaderContainer = document.getElementById('gridHeaderContainer');
+            const gridTopContainer = document.getElementById('gridTopContainer');
 
             if (!topScrollbar || !topScrollbarInner || !gridContainer) return;
 
@@ -1414,14 +1459,22 @@ $gridMeta = [
             let syncingFromGrid = false;
 
             function updateTopScrollbarWidth() {
-                topScrollbarInner.style.width = gridContainer.scrollWidth + 'px';
+                const realWidth = Math.max(
+                    gridContainer.scrollWidth,
+                    gridHeaderContainer ? gridHeaderContainer.scrollWidth : 0,
+                    gridTopContainer ? gridTopContainer.scrollWidth : 0,
+                    gridRowContainer ? gridRowContainer.scrollWidth : 0
+                );
 
-                // Mostra la barra solo se serve davvero
-                if (gridContainer.scrollWidth > gridContainer.clientWidth) {
+                topScrollbarInner.style.width = realWidth + 'px';
+
+                if (realWidth > gridContainer.clientWidth) {
                     topScrollbar.style.display = 'block';
                 } else {
                     topScrollbar.style.display = 'none';
                 }
+
+                topScrollbar.scrollLeft = gridContainer.scrollLeft;
             }
 
             topScrollbar.addEventListener('scroll', function() {
@@ -1438,14 +1491,24 @@ $gridMeta = [
                 syncingFromGrid = false;
             });
 
-            updateTopScrollbarWidth();
-
             window.addEventListener('resize', updateTopScrollbarWidth);
 
-            // Ritarda un attimo per sicurezza, visto che la griglia viene renderizzata via JS
-            setTimeout(updateTopScrollbarWidth, 200);
-            setTimeout(updateTopScrollbarWidth, 600);
-            setTimeout(updateTopScrollbarWidth, 1200);
+            // Recalculate after JS grid rendering
+            setTimeout(updateTopScrollbarWidth, 100);
+            setTimeout(updateTopScrollbarWidth, 300);
+            setTimeout(updateTopScrollbarWidth, 700);
+            setTimeout(updateTopScrollbarWidth, 1500);
+
+            // Recalculate automatically when rows/header/top controls are rendered or changed
+            const observer = new MutationObserver(updateTopScrollbarWidth);
+
+            if (gridContainer) {
+                observer.observe(gridContainer, {
+                    childList: true,
+                    subtree: true,
+                    attributes: true
+                });
+            }
         });
     </script>
 

public/userarea/include/navbar.php

@@ -22,7 +22,7 @@
                 <ul>
                     <!-- <li> <a href="index.php"><i class='bx bx-radio-circle'></i>Default</a>
                     </li> -->
-                    <li> <a href="import_dashboard.php"><i class='bx bx-radio-circle'></i>XLS Import</a>
+                    <li> <a href="import_dashboard.php"><i class='bx bx-radio-circle'></i>Import AREA</a>
                     </li>
 
 
@@ -51,14 +51,22 @@
                 <ul>
                     <li> <a href="quotations.php"><i class='bx bx-radio-circle'></i><?php echo $quotationstitle; ?></a>
                     </li>
+                    <li> <a href="bindings_manage.php"><i class='bx bx-radio-circle'></i>Binding JSON &rarr; LIMS</a>
+                    </li>
 
 
                 </ul>
             </li>
 
 
-
-
+            <li class="menu-label">Reports</li>
+            <li>
+                <a href="rapporti_cliente_lookup.php" target="">
+                    <div class="parent-icon"><i class="bx bx-file-find"></i>
+                    </div>
+                    <div class="menu-title">Ricerca Reports</div>
+                </a>
+            </li>
 
             <li class="menu-label">Others</li>
 

public/userarea/insert_template_xls.php

@@ -3,9 +3,20 @@
 // Retrieve all routines from database
 $db = DBHandlerSelect::getInstance();
 $pdo = $db->getConnection();
+
 $stmt = $pdo->prepare("SELECT * FROM routine");
 $stmt->execute();
 $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
+
+// Retrieve active API/JSON configurations
+$stmt = $pdo->prepare("
+    SELECT id, name, provider_code, api_type, php_class_name
+    FROM api_configurations
+    WHERE is_active = 1
+    ORDER BY name ASC
+");
+$stmt->execute();
+$apiConfigurations = $stmt->fetchAll(PDO::FETCH_ASSOC);
 ?>
 <!doctype html>
 <html lang="en">
@@ -40,7 +51,8 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
                             <li>Template Name</li>
                             <li>Source Type</li>
                             <li>Schema and Client</li>
-                            <li>Row Header and Column Header only for XLS templates</li>
+                            <li>Row Header, Column Header and Sheet Number only for XLS templates</li>
+                            <li>API / JSON Configuration only for API / JSON templates</li>
                         </ul>
                     </div>
                 </div>
@@ -67,7 +79,8 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
                                     <label class="form-label">Source Type *</label>
                                     <select name="source_type" id="sourceType" class="form-control" required>
                                         <option value="XLS" selected>XLS</option>
-                                        <option value="API">API</option>
+                                        <option value="API">API / JSON</option>
+                                        <option value="PDF">PDF</option>
                                     </select>
                                     <small class="text-muted">Choose the source used by this template</small>
                                 </div>
@@ -82,6 +95,58 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
                                     <input type="text" name="start_column" id="startColumn" class="form-control" value="A" required>
                                 </div>
 
+                                <div class="mb-3" id="xlsSheetNumberWrapper">
+                                    <label class="form-label">XLS Sheet Number</label>
+                                    <input
+                                        type="number"
+                                        name="xls_sheet_index"
+                                        id="xlsSheetIndex"
+                                        class="form-control"
+                                        min="0"
+                                        value="0">
+                                    <small class="text-muted">
+                                        Use 0 for the first sheet, 1 for the second sheet, 2 for the third sheet, and so on.
+                                    </small>
+                                </div>
+
+                                <div class="mb-3" id="apiConfigWrapper" style="display: none;">
+                                    <label class="form-label">API / JSON Configuration *</label>
+                                    <select name="api_config_id" id="apiConfigSelect" class="form-control">
+                                        <option value="">Select an API configuration...</option>
+
+                                        <?php foreach ($apiConfigurations as $apiConfig): ?>
+                                            <?php
+                                            $apiLabelParts = [];
+
+                                            if (!empty($apiConfig['name'])) {
+                                                $apiLabelParts[] = $apiConfig['name'];
+                                            }
+
+                                            if (!empty($apiConfig['provider_code'])) {
+                                                $apiLabelParts[] = '[' . $apiConfig['provider_code'] . ']';
+                                            }
+
+                                            if (!empty($apiConfig['api_type'])) {
+                                                $apiLabelParts[] = '(' . $apiConfig['api_type'] . ')';
+                                            }
+
+                                            if (!empty($apiConfig['php_class_name'])) {
+                                                $apiLabelParts[] = '- ' . $apiConfig['php_class_name'];
+                                            }
+
+                                            $apiLabel = implode(' ', $apiLabelParts);
+                                            ?>
+
+                                            <option value="<?php echo (int)$apiConfig['id']; ?>">
+                                                <?php echo htmlspecialchars($apiLabel, ENT_QUOTES, 'UTF-8'); ?>
+                                            </option>
+                                        <?php endforeach; ?>
+                                    </select>
+                                    <small class="text-muted">
+                                        Select the API/JSON configuration linked to this template.
+                                    </small>
+                                </div>
+
                                 <div class="mb-3">
                                     <label class="form-label"><?= htmlspecialchars($desctemplate, ENT_QUOTES, 'UTF-8'); ?></label>
                                     <textarea name="description" class="form-control"></textarea>
@@ -185,10 +250,16 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
             const routineAction3 = document.getElementById("routineAction3");
 
             const sourceType = document.getElementById("sourceType");
+
             const headerRowWrapper = document.getElementById("headerRowWrapper");
             const startColumnWrapper = document.getElementById("startColumnWrapper");
+            const xlsSheetNumberWrapper = document.getElementById("xlsSheetNumberWrapper");
+            const apiConfigWrapper = document.getElementById("apiConfigWrapper");
+
             const headerRow = document.getElementById("headerRow");
             const startColumn = document.getElementById("startColumn");
+            const xlsSheetIndex = document.getElementById("xlsSheetIndex");
+            const apiConfigSelect = document.getElementById("apiConfigSelect");
 
             if (!form || !clientLoadingStatus || !schemaLoadingStatus || !routineSelect || !routineDetails) {
                 alert("Errore: Uno o più elementi della pagina non sono stati trovati. Contatta l'amministratore.");
@@ -210,27 +281,57 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
                 allowClear: true
             });
 
+            $('#apiConfigSelect').select2({
+                placeholder: "Select an API configuration...",
+                allowClear: true
+            });
+
             function updateSourceFields() {
                 const selectedSource = sourceType.value;
 
-                if (selectedSource === 'API') {
-                    headerRowWrapper.style.opacity = '0.6';
-                    startColumnWrapper.style.opacity = '0.6';
+                const isXls = selectedSource === 'XLS';
+                const isApiJson = selectedSource === 'API';
 
-                    headerRow.required = false;
-                    startColumn.required = false;
-
-                    headerRow.disabled = true;
-                    startColumn.disabled = true;
-                } else {
-                    headerRowWrapper.style.opacity = '1';
-                    startColumnWrapper.style.opacity = '1';
+                if (isXls) {
+                    headerRowWrapper.style.display = 'block';
+                    startColumnWrapper.style.display = 'block';
+                    xlsSheetNumberWrapper.style.display = 'block';
 
                     headerRow.required = true;
                     startColumn.required = true;
+                    xlsSheetIndex.required = true;
 
                     headerRow.disabled = false;
                     startColumn.disabled = false;
+                    xlsSheetIndex.disabled = false;
+
+                    apiConfigWrapper.style.display = 'none';
+                    apiConfigSelect.required = false;
+                    apiConfigSelect.disabled = true;
+                    $('#apiConfigSelect').val(null).trigger('change');
+                } else {
+                    headerRowWrapper.style.display = 'none';
+                    startColumnWrapper.style.display = 'none';
+                    xlsSheetNumberWrapper.style.display = 'none';
+
+                    headerRow.required = false;
+                    startColumn.required = false;
+                    xlsSheetIndex.required = false;
+
+                    headerRow.disabled = true;
+                    startColumn.disabled = true;
+                    xlsSheetIndex.disabled = true;
+
+                    if (isApiJson) {
+                        apiConfigWrapper.style.display = 'block';
+                        apiConfigSelect.required = true;
+                        apiConfigSelect.disabled = false;
+                    } else {
+                        apiConfigWrapper.style.display = 'none';
+                        apiConfigSelect.required = false;
+                        apiConfigSelect.disabled = true;
+                        $('#apiConfigSelect').val(null).trigger('change');
+                    }
                 }
             }
 
@@ -261,7 +362,12 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
                     data.value.forEach(client => {
                         const nome = client.Nominativo || "Nome non disponibile";
                         const id = client.IdCliente || "ID non disponibile";
-                        const option = new Option(`${nome.trim()} (ID: ${id})`, id);
+
+                        const codiceCliente = (client.CodiceCliente ?? client.codiceCliente ?? "").toString().trim();
+                        const suffix = (codiceCliente.split("_")[1] || "").trim();
+                        const shortCode = suffix || (codiceCliente ? codiceCliente.charAt(0) : "--");
+
+                        const option = new Option(`${nome.trim()} - ${shortCode} (ID: ${id})`, id);
                         select.add(option);
                     });
 
@@ -388,6 +494,28 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
                 let formData = new FormData(this);
 
+                const selectedSource = sourceType.value;
+
+                if (selectedSource === 'XLS' && xlsSheetIndex.value === '') {
+                    Swal.fire({
+                        title: "Errore!",
+                        text: "Inserisci il numero del foglio XLS.",
+                        icon: "error",
+                        confirmButtonText: "OK"
+                    });
+                    return;
+                }
+
+                if (selectedSource === 'API' && !apiConfigSelect.value) {
+                    Swal.fire({
+                        title: "Errore!",
+                        text: "Seleziona una configurazione API / JSON.",
+                        icon: "error",
+                        confirmButtonText: "OK"
+                    });
+                    return;
+                }
+
                 const clientSelect = document.getElementById("clientSelect");
                 const clientId = clientSelect.value;
                 const selectedClientOption = clientSelect.options[clientSelect.selectedIndex];

public/userarea/modal_analysis.php

@@ -259,11 +259,9 @@ $matrixGroups = array_values($matrixGroups);
                                 </div>
 
                                 <div class="d-flex flex-wrap align-items-center gap-2 mb-3">
-                                    <div class="form-check m-0">
-                                        <input class="form-check-input" type="checkbox" id="analysisWebOnly">
-                                        <label class="form-check-label small" for="analysisWebOnly">
-                                            Web only
-                                        </label>
+                                    <input type="hidden" id="analysisWebOnly" value="1">
+                                    <div class="small text-success fw-semibold">
+                                        Showing WEB analyses only
                                     </div>
 
                                     <div class="flex-grow-1" style="min-width: 220px;">

public/userarea/modal_partsTable.php

@@ -2,7 +2,24 @@
     <div class="modal-dialog modal-xl" style="max-width: 95vw !important;">
         <div class="modal-content">
             <div class="modal-header">
-                <h5 class="modal-title" id="partsModalLabel">Parti per TRF: <span id="trfHeader"></span></h5>
+                <h5 class="modal-title" id="partsModalLabel">
+                    Parti per TRF:
+                    <span id="trfHeader"></span>
+                </h5>
+
+                <div class="ms-auto me-3 d-flex align-items-center gap-2">
+                    <button type="button" class="btn btn-outline-secondary btn-sm" id="prevPartsRecordBtn" title="Record precedente">
+                        <i class="fas fa-chevron-left"></i>
+                    </button>
+
+                    <span id="partsRecordCounter" class="text-muted" style="font-size: 12px; min-width: 70px; text-align: center;">
+                        -
+                    </span>
+
+                    <button type="button" class="btn btn-outline-secondary btn-sm" id="nextPartsRecordBtn" title="Record successivo">
+                        <i class="fas fa-chevron-right"></i>
+                    </button>
+                </div>
                 <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
             </div>
             <div class="modal-body">
@@ -346,7 +363,11 @@
         border: 1px solid #aaa !important;
         border-radius: 4px !important;
         background: #fff !important;
-        max-height: 200px !important;
+        overflow: visible !important;
+    }
+
+    .select2-container--open .select2-results__options {
+        max-height: 220px !important;
         overflow-y: auto !important;
     }
 

public/userarea/partsTable.js

@@ -9,6 +9,7 @@ $(document).ready(function () {
     let quotations = [];
     let partsExtraField = null; // {field_id, field_label} oppure null
     let extraFieldOptions = []; // [{id,label}]
+    let isLoadingPartsRecord = false;
 
     // --- ROW ID helpers: niente più cache impazzita di jQuery .data() ---
     function getPartId($row) {
@@ -509,21 +510,175 @@ $(document).ready(function () {
     // MODAL HANDLING
     // ===================
     function loadParts(iddatadb, idquotations, callback = null) {
+        isLoadingPartsRecord = true;
+        unsavedChanges = false;
+
+        // Store current modal context
+        $("#partsModal").data("iddatadb", iddatadb || null);
+        $("#partsModal").data("idquotations", idquotations || null);
+
+        // Store the visible record list from the main grid
+        if (Array.isArray(window.visibleIddatadbList)) {
+            $("#partsModal").data(
+                "visible-iddatadb-list",
+                window.visibleIddatadbList,
+            );
+        }
+
+        updatePartsRecordHeader(iddatadb);
+
+        const finishLoading = function () {
+            unsavedChanges = false;
+            isLoadingPartsRecord = false;
+
+            if (callback) callback();
+        };
+
         if (iddatadb) {
             loadMacroMatrici();
             initializeGlobalSelect2();
             loadPartsExtraField(iddatadb, function () {
                 loadPhoto(iddatadb, idquotations);
-                loadExistingParts(iddatadb, idquotations, callback);
+                loadExistingParts(iddatadb, idquotations, finishLoading);
             });
         } else {
             loadPartsExtraField(iddatadb, function () {
                 loadPhoto(iddatadb, idquotations);
-                loadExistingParts(iddatadb, idquotations, callback);
+                loadExistingParts(iddatadb, idquotations, finishLoading);
             });
         }
     }
 
+    // ===================
+    // PARTS MODAL RECORD NAVIGATION
+    // ===================
+
+    function getVisiblePartsRecordList() {
+        const listFromModal = $("#partsModal").data("visible-iddatadb-list");
+
+        if (Array.isArray(listFromModal) && listFromModal.length > 0) {
+            return listFromModal.map((v) => parseInt(v, 10)).filter(Boolean);
+        }
+
+        if (
+            Array.isArray(window.visibleIddatadbList) &&
+            window.visibleIddatadbList.length > 0
+        ) {
+            return window.visibleIddatadbList
+                .map((v) => parseInt(v, 10))
+                .filter(Boolean);
+        }
+
+        if (Array.isArray(window.gridData) && window.gridData.length > 0) {
+            return window.gridData
+                .map((row) => parseInt(row.iddatadb, 10))
+                .filter(Boolean);
+        }
+
+        return [];
+    }
+
+    function getGridRecordById(iddatadb) {
+        if (!Array.isArray(window.gridData)) return null;
+
+        return (
+            window.gridData.find((row) => {
+                return parseInt(row.iddatadb, 10) === parseInt(iddatadb, 10);
+            }) || null
+        );
+    }
+
+    function getRecordHeaderLabel(iddatadb) {
+        const record = getGridRecordById(iddatadb);
+
+        if (!record) {
+            return iddatadb ? "#" + iddatadb : "";
+        }
+
+        // Prefer main field value if available
+        if (record.mainFieldValue) {
+            return record.mainFieldValue;
+        }
+
+        // Fallbacks
+        if (record.importreferencecode) {
+            return record.importreferencecode;
+        }
+
+        if (record.filename_import) {
+            return record.filename_import;
+        }
+
+        return "#" + iddatadb;
+    }
+
+    function updatePartsRecordHeader(iddatadb) {
+        const list = getVisiblePartsRecordList();
+        const currentId = parseInt(iddatadb, 10);
+        const currentIndex = list.indexOf(currentId);
+
+        $("#trfHeader").text(getRecordHeaderLabel(currentId));
+
+        if (list.length <= 1 || currentIndex === -1) {
+            $("#partsRecordCounter").text("-");
+            $("#prevPartsRecordBtn").prop("disabled", true);
+            $("#nextPartsRecordBtn").prop("disabled", true);
+            return;
+        }
+
+        $("#partsRecordCounter").text(currentIndex + 1 + " / " + list.length);
+
+        $("#prevPartsRecordBtn").prop("disabled", currentIndex <= 0);
+        $("#nextPartsRecordBtn").prop(
+            "disabled",
+            currentIndex >= list.length - 1,
+        );
+    }
+
+    function goToAdjacentPartsRecord(direction) {
+        const list = getVisiblePartsRecordList();
+        const currentId = parseInt($("#partsModal").data("iddatadb"), 10);
+        const currentIndex = list.indexOf(currentId);
+
+        if (currentIndex === -1) return;
+
+        const nextIndex = currentIndex + direction;
+
+        if (nextIndex < 0 || nextIndex >= list.length) return;
+
+        if (
+            !isLoadingPartsRecord &&
+            unsavedChanges &&
+            !confirm(
+                "Hai modifiche non salvate. Vuoi cambiare record senza salvare?",
+            )
+        ) {
+            return;
+        }
+
+        const nextIddatadb = list[nextIndex];
+
+        // Reset local modal state before loading the next record
+        partMatrice = {};
+        unsavedChanges = false;
+        $("#partsTableBody").empty();
+        $("#photoSelectorContainer").empty().hide();
+        $("#samplePhoto").attr("src", "");
+        $(".temp-alert").remove();
+
+        loadParts(nextIddatadb, null);
+    }
+
+    $(document).on("click", "#prevPartsRecordBtn", function (e) {
+        e.preventDefault();
+        goToAdjacentPartsRecord(-1);
+    });
+
+    $(document).on("click", "#nextPartsRecordBtn", function (e) {
+        e.preventDefault();
+        goToAdjacentPartsRecord(1);
+    });
+
     // EVENTO PER APRIRE IL SECONDO MODALE
     $(document).on("click", "#openAnnotationsBtn", function () {
         console.log("Clic su Apri Annotazioni...");
@@ -1090,7 +1245,10 @@ $(document).ready(function () {
         initializeExtraFieldSelect2($newRow);
 
         updateRowButtons();
-        markUnsaved();
+
+        if (!isLoadingPartsRecord) {
+            markUnsaved();
+        }
     }
 
     // ===================
@@ -2142,6 +2300,8 @@ $(document).ready(function () {
     });
 
     function markUnsaved() {
+        if (isLoadingPartsRecord) return;
+
         if (!unsavedChanges) {
             unsavedChanges = true;
         }

public/userarea/process_edit_template_xls.php

@@ -13,8 +13,21 @@ try {
     $id = intval($_POST['id'] ?? 0);
     $name = trim($_POST['name'] ?? '');
     $source_type = strtoupper(trim($_POST['source_type'] ?? 'XLS'));
-    $header_row = isset($_POST['header_row']) && $_POST['header_row'] !== '' ? intval($_POST['header_row']) : null;
+
+    $header_row = isset($_POST['header_row']) && $_POST['header_row'] !== ''
+        ? intval($_POST['header_row'])
+        : null;
+
     $start_column = trim($_POST['start_column'] ?? '');
+
+    $xls_sheet_index = isset($_POST['xls_sheet_index']) && $_POST['xls_sheet_index'] !== ''
+        ? intval($_POST['xls_sheet_index'])
+        : 0;
+
+    $api_config_id = isset($_POST['api_config_id']) && $_POST['api_config_id'] !== ''
+        ? intval($_POST['api_config_id'])
+        : null;
+
     $description = trim($_POST['description'] ?? '');
     $target_table = trim($_POST['target_table'] ?? 'datadb');
     $idclient = intval($_POST['client_id'] ?? 0);
@@ -27,7 +40,8 @@ try {
     $button_text_color = trim($_POST['button_text_color'] ?? '#ffffff');
     $button_label = trim($_POST['button_label'] ?? 'Click Me');
 
-    if (!in_array($source_type, ['XLS', 'API'], true)) {
+    // Allowed source types
+    if (!in_array($source_type, ['XLS', 'API', 'JSON', 'PDF'], true)) {
         $source_type = 'XLS';
     }
 
@@ -41,18 +55,52 @@ try {
         if ($header_row === null || $header_row <= 0 || $start_column === '') {
             throw new Exception("Header Row and Start Column are required for XLS templates.");
         }
+
+        if ($xls_sheet_index < 0) {
+            throw new Exception("XLS Sheet Number cannot be negative.");
+        }
+
+        $api_config_id = null;
     }
 
-    // API templates do not require XLS coordinates
-    if ($source_type === 'API') {
+    // API/JSON validation
+    if ($source_type === 'API' || $source_type === 'JSON') {
+        if (empty($api_config_id)) {
+            throw new Exception("API/JSON configuration is required for API or JSON templates.");
+        }
+
         $header_row = null;
         $start_column = null;
+        $xls_sheet_index = null;
+    }
+
+    // PDF currently does not require XLS coordinates or API configuration
+    if ($source_type === 'PDF') {
+        $header_row = null;
+        $start_column = null;
+        $xls_sheet_index = null;
+        $api_config_id = null;
     }
 
     // Database connection
     $db = DBHandlerSelect::getInstance();
     $pdo = $db->getConnection();
 
+    // Optional check: verify API configuration exists and is active
+    if ($api_config_id !== null) {
+        $stmt = $pdo->prepare("
+            SELECT COUNT(*) 
+            FROM api_configurations 
+            WHERE id = ? 
+              AND is_active = 1
+        ");
+        $stmt->execute([$api_config_id]);
+
+        if ((int)$stmt->fetchColumn() === 0) {
+            throw new Exception("Selected API/JSON configuration does not exist or is not active.");
+        }
+    }
+
     // Update template
     $stmt = $pdo->prepare("
         UPDATE excel_templates
@@ -61,6 +109,8 @@ try {
             source_type = ?,
             header_row = ?,
             start_column = ?,
+            xls_sheet_index = ?,
+            api_config_id = ?,
             description = ?,
             target_table = ?,
             idclient = ?,
@@ -81,6 +131,8 @@ try {
         $source_type,
         $header_row,
         $start_column,
+        $xls_sheet_index,
+        $api_config_id,
         $description,
         $target_table,
         $idclient,

public/userarea/process_import_xls2.php

@@ -11,17 +11,105 @@ session_start();
 require_once '../../vendor/autoload.php';
 require_once __DIR__ . '/class/db-functions.php';
 
-$response = ['error' => '', 'rows' => [], 'columns' => [], 'template_id' => 0, 'filename' => '', 'apply_routine' => false];
+use PhpOffice\PhpSpreadsheet\IOFactory;
+use PhpOffice\PhpSpreadsheet\Cell\Coordinate;
+
+$response = [
+    'error' => '',
+    'rows' => [],
+    'columns' => [],
+    'template_id' => 0,
+    'filename' => '',
+    'apply_routine' => false
+];
+
+/**
+ * Converts a column value to a PhpSpreadsheet 1-based column index.
+ * Accepted values:
+ * - "A"  => 1
+ * - "B"  => 2
+ * - "AA" => 27
+ * - "1"  => 1
+ * - 1    => 1
+ */
+function normalizeColumnIndex($value): int
+{
+    $value = trim((string)$value);
+
+    if ($value === '') {
+        return 1;
+    }
+
+    if (ctype_digit($value)) {
+        return max(1, (int)$value);
+    }
+
+    $value = strtoupper($value);
+
+    if (preg_match('/^[A-Z]+$/', $value)) {
+        return Coordinate::columnIndexFromString($value);
+    }
+
+    return 1;
+}
 
 try {
     if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_FILES['excel_file'])) {
         $template_id = isset($_POST['template_id']) ? intval($_POST['template_id']) : 0;
-        $header_row = isset($_POST['header_row']) ? intval($_POST['header_row']) : 1;
-        $start_column = isset($_POST['start_column']) ? intval($_POST['start_column']) : 1;
+
+        if ($template_id <= 0) {
+            throw new Exception("Template ID non valido.");
+        }
+
+        // Connessione al database
+        $db = DBHandlerSelect::getInstance();
+        $pdo = $db->getConnection();
+
+        /*
+         * Recuperiamo i parametri direttamente dal template.
+         * Così non dipendiamo solo dal form e siamo sicuri di usare i dati salvati.
+         */
+        $stmt = $pdo->prepare("
+            SELECT 
+                id,
+                header_row,
+                start_column,
+                xls_sheet_index,
+                idroutine,
+                idclient
+            FROM excel_templates
+            WHERE id = ?
+        ");
+        $stmt->execute([$template_id]);
+        $template = $stmt->fetch(PDO::FETCH_ASSOC);
+
+        if (!$template) {
+            throw new Exception("Template non trovato.");
+        }
+
+        $header_row = isset($template['header_row']) && $template['header_row'] !== null
+            ? (int)$template['header_row']
+            : 1;
+
+        $start_column_raw = $template['start_column'] ?? 'A';
+        $start_column = normalizeColumnIndex($start_column_raw);
+
+        $xlsSheetIndex = isset($template['xls_sheet_index']) && $template['xls_sheet_index'] !== null
+            ? (int)$template['xls_sheet_index']
+            : 0;
+
+        if ($header_row <= 0) {
+            $header_row = 1;
+        }
+
+        if ($xlsSheetIndex < 0) {
+            $xlsSheetIndex = 0;
+        }
 
         // Debug del template_id ricevuto
         error_log("Received template_id from POST: " . print_r($_POST['template_id'], true));
         error_log("Converted template_id: $template_id");
+        error_log("Template XLS settings - header_row: $header_row, start_column_raw: $start_column_raw, start_column_index: $start_column, xls_sheet_index: $xlsSheetIndex");
 
         $file = $_FILES['excel_file'];
         $fileError = $file['error'];
@@ -38,23 +126,32 @@ try {
             $originalFilename = basename($file['name']);
             $newFilename = "{$iduserlogin}-{$timestamp}-{$originalFilename}";
             $importFolder = __DIR__ . '/imported_trf/';
+
             if (!file_exists($importFolder)) {
                 mkdir($importFolder, 0777, true);
             }
+
             $destination = $importFolder . $newFilename;
 
             // Sposta il file
             if (!move_uploaded_file($file['tmp_name'], $destination)) {
                 throw new Exception("Errore durante lo spostamento del file in $destination");
             }
+
             error_log("File spostato con successo in: $destination");
 
-            // Connessione al database
-            $db = DBHandlerSelect::getInstance();
-            $pdo = $db->getConnection();
-
             // Recupera il mapping da template_mapping
-            $stmt = $pdo->prepare("SELECT field_id AS excel_column, field_id AS mysql_column, data_type, is_required, default_value, is_manual FROM template_mapping WHERE template_id = ?");
+            $stmt = $pdo->prepare("
+                SELECT 
+                    field_id AS excel_column, 
+                    field_id AS mysql_column, 
+                    data_type, 
+                    is_required, 
+                    default_value, 
+                    is_manual 
+                FROM template_mapping 
+                WHERE template_id = ?
+            ");
             $stmt->execute([$template_id]);
             $mappings = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
@@ -65,19 +162,45 @@ try {
                 $response['error'] = "Nessun mapping trovato per il template con ID $template_id";
             } else {
                 // Carica il file rinominato con PHPSpreadsheet
-                $spreadsheet = \PhpOffice\PhpSpreadsheet\IOFactory::load($destination);
-                $worksheet = $spreadsheet->getActiveSheet();
+                $spreadsheet = IOFactory::load($destination);
+
+                $sheetCount = $spreadsheet->getSheetCount();
+                $sheetNames = $spreadsheet->getSheetNames();
+
+                if ($sheetCount <= 0) {
+                    throw new Exception("Il file XLS non contiene fogli.");
+                }
+
+                if ($xlsSheetIndex >= $sheetCount) {
+                    throw new Exception(
+                        "Il foglio XLS selezionato non esiste. " .
+                            "Sheet Number selezionato: {$xlsSheetIndex}. " .
+                            "Fogli disponibili: " . implode(", ", array_map(
+                                fn($name, $index) => "{$index}={$name}",
+                                $sheetNames,
+                                array_keys($sheetNames)
+                            ))
+                    );
+                }
+
+                // Usa il foglio configurato nel template
+                $worksheet = $spreadsheet->getSheet($xlsSheetIndex);
+                $selectedSheetName = $worksheet->getTitle();
+
+                error_log("Selected XLS sheet - index: {$xlsSheetIndex}, name: {$selectedSheetName}");
+
                 $highestRow = $worksheet->getHighestRow();
                 $highestColumn = $worksheet->getHighestColumn();
-                $highestColumnIndex = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::columnIndexFromString($highestColumn);
+                $highestColumnIndex = Coordinate::columnIndexFromString($highestColumn);
 
                 $startRow = max(1, $header_row);
                 $startColumn = max(1, $start_column);
 
-                // Advance startColumn to first non-empty cell in header row (match JS behavior)
+                // Advance startColumn to first non-empty cell in header row, matching JS behavior
                 for ($sc = $startColumn; $sc <= $highestColumnIndex; $sc++) {
-                    $cl = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($sc);
+                    $cl = Coordinate::stringFromColumnIndex($sc);
                     $cv = trim((string)($worksheet->getCell($cl . $header_row)->getCalculatedValue() ?? ''));
+
                     if ($cv !== '') {
                         $startColumn = $sc;
                         break;
@@ -85,24 +208,32 @@ try {
                 }
 
                 // Debug dei parametri
-                error_log("Processing - template_id: $template_id, startRow: $startRow, startColumn: $startColumn, highestRow: $highestRow, highestColumn: $highestColumn, highestColumnIndex: $highestColumnIndex");
+                error_log(
+                    "Processing - template_id: $template_id, " .
+                        "sheetIndex: $xlsSheetIndex, sheetName: $selectedSheetName, " .
+                        "startRow: $startRow, startColumn: $startColumn, " .
+                        "highestRow: $highestRow, highestColumn: $highestColumn, highestColumnIndex: $highestColumnIndex"
+                );
 
                 // Validazione degli indici
                 if ($startRow > $highestRow) {
-                    $response['error'] = "La riga di partenza ($startRow) supera il numero totale di righe ($highestRow).";
+                    $response['error'] = "La riga di partenza ($startRow) supera il numero totale di righe ($highestRow) del foglio '$selectedSheetName'.";
                 } elseif ($startColumn > $highestColumnIndex) {
-                    $response['error'] = "La colonna di partenza ($startColumn) supera il numero totale di colonne ($highestColumnIndex).";
+                    $response['error'] = "La colonna di partenza ($startColumn) supera il numero totale di colonne ($highestColumnIndex) del foglio '$selectedSheetName'.";
                 } else {
                     $excelData = [];
 
                     // Build merge map for header row: physCol -> mergeStartCol
                     $mergeStartMap = [];
+
                     foreach ($worksheet->getMergeCells() as $range) {
                         [$startCell, $endCell] = explode(':', $range);
-                        $mStartCol = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::columnIndexFromString(preg_replace('/\d+/', '', $startCell));
-                        $mEndCol = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::columnIndexFromString(preg_replace('/\d+/', '', $endCell));
+
+                        $mStartCol = Coordinate::columnIndexFromString(preg_replace('/\d+/', '', $startCell));
+                        $mEndCol = Coordinate::columnIndexFromString(preg_replace('/\d+/', '', $endCell));
                         $mStartRow = (int)preg_replace('/[A-Z]+/i', '', $startCell);
                         $mEndRow = (int)preg_replace('/[A-Z]+/i', '', $endCell);
+
                         if ($header_row >= $mStartRow && $header_row <= $mEndRow) {
                             for ($c = $mStartCol; $c <= $mEndCol; $c++) {
                                 $mergeStartMap[$c] = $mStartCol;
@@ -111,12 +242,17 @@ try {
                     }
 
                     // Build logical columns: each merge = one column
-                    $logicalCols = []; // array of physical column indices (one per logical column)
+                    $logicalCols = []; // array of physical column indices, one per logical column
                     $seen = [];
+
                     for ($col = $startColumn; $col <= $highestColumnIndex; $col++) {
                         if (isset($mergeStartMap[$col])) {
                             $ms = $mergeStartMap[$col];
-                            if (in_array($ms, $seen, true)) continue;
+
+                            if (in_array($ms, $seen, true)) {
+                                continue;
+                            }
+
                             $seen[] = $ms;
                             $logicalCols[] = $ms;
                         } else {
@@ -127,38 +263,48 @@ try {
                     // Build header row using logical columns
                     $headerRowData = [];
                     $logicalNum = 0;
+
                     foreach ($logicalCols as $physCol) {
                         $logicalNum++;
-                        $columnLetter = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($physCol);
+
+                        $columnLetter = Coordinate::stringFromColumnIndex($physCol);
                         $cell = $worksheet->getCell($columnLetter . $header_row);
                         $cellValue = trim((string)($cell ? $cell->getCalculatedValue() : ''));
                         $cellValue = preg_replace('/[\r\n\t]+/', ' ', $cellValue);
+
                         // Empty headers get __empty_N__ to match mapping page
                         $headerRowData[] = ($cellValue !== '') ? $cellValue : '__empty_' . $logicalNum . '__';
                     }
 
                     error_log("Logical headers: " . json_encode($headerRowData));
-                    error_log("Logical cols (physical indices): " . json_encode($logicalCols));
+                    error_log("Logical cols physical indices: " . json_encode($logicalCols));
 
                     // Find which logical columns have real headers
                     $headerFilledIndices = [];
+
                     foreach ($headerRowData as $idx => $hVal) {
-                        if (!str_starts_with($hVal, '__empty_')) $headerFilledIndices[] = $idx;
+                        if (!str_starts_with($hVal, '__empty_')) {
+                            $headerFilledIndices[] = $idx;
+                        }
                     }
+
                     $minFilled = max(1, min(2, count($headerFilledIndices)));
 
                     // Extract data rows using logical columns
                     for ($row = $startRow + 1; $row <= $highestRow; $row++) {
                         $rowData = [];
+
                         foreach ($logicalCols as $physCol) {
-                            $columnLetter = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($physCol);
+                            $columnLetter = Coordinate::stringFromColumnIndex($physCol);
                             $cell = $worksheet->getCell($columnLetter . $row);
                             $cellValue = $cell ? $cell->getCalculatedValue() : '';
+
                             $rowData[] = $cellValue ?: '';
                         }
 
                         // Count how many header columns have data in this row
                         $filledCount = 0;
+
                         foreach ($headerFilledIndices as $idx) {
                             if (isset($rowData[$idx]) && trim((string)$rowData[$idx]) !== '') {
                                 $filledCount++;
@@ -166,17 +312,25 @@ try {
                         }
 
                         if ($filledCount >= $minFilled) {
-                            $excelData[] = ['data' => $rowData, 'excelrow' => $row];
+                            $excelData[] = [
+                                'data' => $rowData,
+                                'excelrow' => $row
+                            ];
                         }
                     }
 
                     // Recupera routine dal template
-                    $stmt = $pdo->prepare("SELECT idroutine, idclient FROM excel_templates WHERE id = ?");
-                    $stmt->execute([$template_id]);
-                    $template = $stmt->fetch(PDO::FETCH_ASSOC);
-
-                    if ($template && $template['idroutine']) {
-                        $stmtRoutine = $pdo->prepare("SELECT idroutine, name, filename, headerrow, instruction FROM routine WHERE idroutine = ?");
+                    if ($template && !empty($template['idroutine'])) {
+                        $stmtRoutine = $pdo->prepare("
+                            SELECT 
+                                idroutine, 
+                                name, 
+                                filename, 
+                                headerrow, 
+                                instruction 
+                            FROM routine 
+                            WHERE idroutine = ?
+                        ");
                         $stmtRoutine->execute([$template['idroutine']]);
                         $routineData = $stmtRoutine->fetch(PDO::FETCH_ASSOC);
 
@@ -188,6 +342,7 @@ try {
                                 'filename' => $routineData['filename'] ?? '',
                                 'headerrow' => $routineData['headerrow'] ?? $header_row
                             ];
+
                             error_log("Routine rilevata per template {$template_id}: " . print_r($routineData, true));
                         } else {
                             error_log("Errore: Nessuna routine trovata per idroutine {$template['idroutine']}");
@@ -204,6 +359,8 @@ try {
                     $_SESSION['template_id'] = $template_id;
                     $_SESSION['headers'] = $headerRowData;
                     $_SESSION['mappings'] = $mappings;
+                    $_SESSION['xls_sheet_index'] = $xlsSheetIndex;
+                    $_SESSION['xls_sheet_name'] = $selectedSheetName;
 
                     // Includi excel_data nella risposta JSON in ogni caso
                     $response['excel_data'] = $excelData;
@@ -211,6 +368,8 @@ try {
                     $response['columns'] = $headerRowData;
                     $response['template_id'] = $template_id;
                     $response['filename'] = $newFilename;
+                    $response['xls_sheet_index'] = $xlsSheetIndex;
+                    $response['xls_sheet_name'] = $selectedSheetName;
                 }
             }
         } else {

public/userarea/process_insert_template_xls.php

@@ -12,22 +12,39 @@ try {
     // Retrieve and sanitize form data
     $name = trim($_POST['name'] ?? '');
     $source_type = strtoupper(trim($_POST['source_type'] ?? 'XLS'));
-    $header_row = isset($_POST['header_row']) && $_POST['header_row'] !== '' ? intval($_POST['header_row']) : null;
+
+    $header_row = isset($_POST['header_row']) && $_POST['header_row'] !== ''
+        ? intval($_POST['header_row'])
+        : null;
+
     $start_column = trim($_POST['start_column'] ?? '');
+
+    $xls_sheet_index = isset($_POST['xls_sheet_index']) && $_POST['xls_sheet_index'] !== ''
+        ? intval($_POST['xls_sheet_index'])
+        : 0;
+
+    $api_config_id = isset($_POST['api_config_id']) && $_POST['api_config_id'] !== ''
+        ? intval($_POST['api_config_id'])
+        : null;
+
     $description = trim($_POST['description'] ?? '');
     $target_table = trim($_POST['target_table'] ?? 'datadb');
     $idclient = intval($_POST['client_id'] ?? 0);
     $clientname = trim($_POST['client_name'] ?? '');
     $idschema = intval($_POST['idschema'] ?? 0);
     $schemaname = trim($_POST['schemaname'] ?? '');
-    $idroutine = isset($_POST['idroutine']) && $_POST['idroutine'] !== '' ? intval($_POST['idroutine']) : null;
+    $idroutine = isset($_POST['idroutine']) && $_POST['idroutine'] !== ''
+        ? intval($_POST['idroutine'])
+        : null;
+
     $button_size = trim($_POST['button_size'] ?? 'medium');
     $button_bg_color = trim($_POST['button_bg_color'] ?? '#007bff');
     $button_text_color = trim($_POST['button_text_color'] ?? '#ffffff');
     $button_label = trim($_POST['button_label'] ?? 'Click Me');
 
     // Normalize source type
-    if (!in_array($source_type, ['XLS', 'API'], true)) {
+    // API / JSON is saved as API
+    if (!in_array($source_type, ['XLS', 'API', 'PDF'], true)) {
         $source_type = 'XLS';
     }
 
@@ -41,26 +58,62 @@ try {
         if ($header_row === null || $header_row <= 0 || $start_column === '') {
             throw new Exception("Header Row and Start Column are required for XLS templates.");
         }
+
+        if ($xls_sheet_index < 0) {
+            throw new Exception("XLS Sheet Number cannot be negative.");
+        }
+
+        $api_config_id = null;
     }
 
-    // API templates do not require XLS coordinates
+    // API / JSON validation
     if ($source_type === 'API') {
+        if (empty($api_config_id)) {
+            throw new Exception("API / JSON configuration is required for API / JSON templates.");
+        }
+
         $header_row = null;
         $start_column = null;
+        $xls_sheet_index = null;
+    }
+
+    // PDF currently does not require XLS coordinates or API configuration
+    if ($source_type === 'PDF') {
+        $header_row = null;
+        $start_column = null;
+        $xls_sheet_index = null;
+        $api_config_id = null;
     }
 
     // Database connection
     $db = DBHandlerSelect::getInstance();
     $pdo = $db->getConnection();
 
+    // Optional check: verify API configuration exists and is active
+    if ($api_config_id !== null) {
+        $stmt = $pdo->prepare("
+            SELECT COUNT(*)
+            FROM api_configurations
+            WHERE id = ?
+              AND is_active = 1
+        ");
+        $stmt->execute([$api_config_id]);
+
+        if ((int)$stmt->fetchColumn() === 0) {
+            throw new Exception("Selected API / JSON configuration does not exist or is not active.");
+        }
+    }
+
     // Insert the new template
     $stmt = $pdo->prepare("
-        INSERT INTO excel_templates 
+        INSERT INTO excel_templates
         (
             name,
             source_type,
             header_row,
             start_column,
+            xls_sheet_index,
+            api_config_id,
             description,
             target_table,
             idclient,
@@ -75,7 +128,13 @@ try {
             created_at,
             updated_at
         )
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NOW(), NOW())
+        VALUES
+        (
+            ?, ?, ?, ?, ?, ?,
+            ?, ?, ?, ?, ?, ?,
+            ?, ?, ?, ?, ?,
+            NOW(), NOW()
+        )
     ");
 
     $stmt->execute([
@@ -83,6 +142,8 @@ try {
         $source_type,
         $header_row,
         $start_column,
+        $xls_sheet_index,
+        $api_config_id,
         $description,
         $target_table,
         $idclient,

public/userarea/rapporti_cliente_lookup.php

@@ -0,0 +1,700 @@
+<?php include('include/headscript.php'); ?>
+<!doctype html>
+<html lang="en">
+
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+
+    <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
+
+    <?php include('cssinclude.php'); ?>
+
+    <link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />
+    <link href="assets/plugins/datatable/css/dataTables.bootstrap5.min.css" rel="stylesheet" />
+
+    <title>TRF-Project - Customer Reports</title>
+
+    <style>
+        .lookup-wrapper {
+            width: 100%;
+            max-width: none;
+            margin: 0;
+        }
+
+        .lookup-title {
+            font-size: 18px;
+            font-weight: 700;
+        }
+
+        .lookup-subtitle {
+            font-size: 13px;
+            color: #6c757d;
+        }
+
+        .compact-card .card-body {
+            padding: 1rem;
+        }
+
+        .table-report th {
+            font-size: 12px;
+            text-transform: uppercase;
+            color: #6c757d;
+            white-space: nowrap;
+        }
+
+        .table-report td {
+            font-size: 13px;
+            vertical-align: middle;
+        }
+
+        .status-pill {
+            display: inline-flex;
+            align-items: center;
+            gap: 6px;
+            padding: 5px 10px;
+            border-radius: 999px;
+            font-size: 12px;
+            font-weight: 700;
+            white-space: nowrap;
+        }
+
+        .status-pill-success {
+            background: #e8fff1;
+            color: #198754;
+        }
+
+        .status-pill-warning {
+            background: #fff3cd;
+            color: #b58100;
+        }
+
+        .pdf-icon-link {
+            width: 36px;
+            height: 36px;
+            border-radius: 10px;
+            background: #dc3545;
+            color: #fff;
+            display: inline-flex;
+            align-items: center;
+            justify-content: center;
+            font-size: 20px;
+            text-decoration: none;
+            transition: all 0.15s ease-in-out;
+        }
+
+        .pdf-icon-link:hover {
+            color: #fff;
+            opacity: 0.85;
+            transform: translateY(-1px);
+        }
+
+        .no-pdf {
+            font-size: 12px;
+            color: #adb5bd;
+            font-weight: 600;
+        }
+
+        .empty-state {
+            border: 1px dashed #ced4da;
+            border-radius: 10px;
+            padding: 24px;
+            text-align: center;
+            color: #6c757d;
+            background: #fafafa;
+        }
+
+        .spinner-inline {
+            display: none;
+            margin-left: 8px;
+        }
+
+        .customer-box {
+            display: none;
+            border: 1px solid #e9ecef;
+            background: #fff;
+            border-radius: 10px;
+            padding: 12px 14px;
+            margin-bottom: 15px;
+        }
+
+        .customer-label {
+            font-size: 11px;
+            text-transform: uppercase;
+            color: #6c757d;
+            font-weight: 700;
+        }
+
+        .customer-value {
+            font-size: 14px;
+            color: #212529;
+            font-weight: 700;
+        }
+
+        .json-preview {
+            display: none;
+            background: #111827;
+            color: #e5e7eb;
+            border-radius: 10px;
+            padding: 14px;
+            font-size: 12px;
+            max-height: 420px;
+            overflow: auto;
+            white-space: pre-wrap;
+        }
+
+        @media (max-width: 768px) {
+            .table-responsive {
+                border-radius: 10px;
+            }
+        }
+
+        .select2-container {
+            width: 100% !important;
+        }
+
+        .select2-container--default .select2-selection--single {
+            height: 38px;
+            border: 1px solid #ced4da;
+            border-radius: 6px;
+        }
+
+        .select2-container--default .select2-selection--single .select2-selection__rendered {
+            line-height: 36px;
+            font-size: 14px;
+            color: #212529;
+        }
+
+        .select2-container--default .select2-selection--single .select2-selection__arrow {
+            height: 36px;
+        }
+
+        .select2-dropdown {
+            z-index: 9999;
+        }
+    </style>
+</head>
+
+<body>
+    <div class="wrapper">
+
+        <?php include('include/navbar.php'); ?>
+
+        <?php include('include/topbar.php'); ?>
+
+        <div class="page-wrapper">
+            <div class="page-content">
+
+                <?php include('top_stat_widget.php'); ?>
+
+                <div class="lookup-wrapper">
+
+                    <div class="card radius-10 compact-card">
+                        <div class="card-header">
+                            <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
+                                <div>
+                                    <div class="lookup-title">Customer Test Reports</div>
+                                    <div class="lookup-subtitle">
+                                        Select a VisualLims customer and retrieve the latest reports with PDF links.
+                                    </div>
+                                </div>
+                            </div>
+                        </div>
+
+                        <div class="card-body">
+                            <form id="customerReportsForm" class="row g-3 align-items-end">
+
+                                <div class="col-md-5">
+                                    <label for="idCliente" class="form-label fw-semibold">Customer</label>
+                                    <select id="idCliente" name="idCliente" class="form-select">
+                                        <option value="">Loading customers...</option>
+                                    </select>
+                                </div>
+
+                                <div class="col-md-2">
+                                    <label for="limitReports" class="form-label fw-semibold">Limit</label>
+                                    <select id="limitReports" name="limitReports" class="form-select">
+                                        <option value="1">Last 1</option>
+                                        <option value="3" selected>Last 3</option>
+                                        <option value="5">Last 5</option>
+                                        <option value="10">Last 10</option>
+                                    </select>
+                                </div>
+
+                                <div class="col-md-2">
+                                    <label for="signedStatus" class="form-label fw-semibold">Status</label>
+                                    <select id="signedStatus" name="signedStatus" class="form-select">
+                                        <option value="all" selected>All</option>
+                                        <option value="signed">Signed</option>
+                                        <option value="not_signed">Not signed</option>
+                                    </select>
+                                </div>
+
+                                <div class="col-md-3">
+                                    <button type="submit" id="btnSearchReports" class="btn btn-primary w-100">
+                                        <i class="bx bx-search"></i> Search Reports
+                                        <span class="spinner-border spinner-border-sm spinner-inline" id="searchSpinner" role="status" aria-hidden="true"></span>
+                                    </button>
+                                </div>
+
+                            </form>
+                        </div>
+                    </div>
+
+                    <div id="customerBox" class="customer-box">
+                        <div class="row g-3">
+                            <div class="col-md-4">
+                                <div class="customer-label">Customer Code</div>
+                                <div class="customer-value" id="selectedCustomerCode">-</div>
+                            </div>
+
+                            <div class="col-md-8">
+                                <div class="customer-label">Customer Name</div>
+                                <div class="customer-value" id="selectedCustomerName">-</div>
+                            </div>
+                        </div>
+                    </div>
+
+                    <div id="resultContainer" style="display:none;">
+
+                        <div class="card radius-10 compact-card">
+                            <div class="card-header">
+                                <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
+                                    <h6 class="mb-0">
+                                        Reports
+                                        <span class="badge bg-light text-dark ms-1" id="reportCountBadge">0</span>
+                                    </h6>
+
+                                    <button type="button" id="toggleJsonBtn" class="btn btn-sm btn-outline-secondary">
+                                        <i class="bx bx-code-alt"></i> Show JSON
+                                    </button>
+                                </div>
+                            </div>
+
+                            <div class="card-body">
+
+                                <div class="table-responsive">
+                                    <table class="table table-striped table-hover table-report align-middle mb-0" id="reportsTable">
+                                        <thead>
+                                            <tr>
+                                                <th>Report Number</th>
+                                                <th>Report ID</th>
+                                                <th>Report Date</th>
+                                                <th>Print Date</th>
+                                                <th>Version</th>
+                                                <th>Status</th>
+                                                <th class="text-center">PDF</th>
+                                            </tr>
+                                        </thead>
+                                        <tbody id="reportsTableBody"></tbody>
+                                    </table>
+                                </div>
+
+                                <pre id="jsonPreview" class="json-preview mt-3"></pre>
+
+                            </div>
+                        </div>
+
+                    </div>
+
+                    <div id="emptyState" class="empty-state">
+                        <i class="bx bx-file-find" style="font-size:34px;"></i>
+                        <div class="mt-2 fw-semibold">No reports loaded</div>
+                        <div class="small">Select a customer, choose the limit and click Search Reports.</div>
+                    </div>
+
+                </div>
+
+            </div>
+        </div>
+
+        <div class="overlay toggle-icon"></div>
+
+        <a href="javaScript:;" class="back-to-top">
+            <i class='bx bxs-up-arrow-alt'></i>
+        </a>
+
+        <?php include('include/footer.php'); ?>
+
+    </div>
+
+    <?php include('jsinclude.php'); ?>
+
+    <script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
+
+    <script src="assets/plugins/datatable/js/jquery.dataTables.min.js"></script>
+    <script src="assets/plugins/datatable/js/dataTables.bootstrap5.min.js"></script>
+
+    <script>
+        $(document).ready(function() {
+
+            let lastJsonResponse = null;
+            let loadedCustomers = [];
+            let reportsDataTable = null;
+
+            function escapeHtml(value) {
+                if (value === null || value === undefined) {
+                    return '';
+                }
+
+                return String(value)
+                    .replace(/&/g, '&amp;')
+                    .replace(/</g, '&lt;')
+                    .replace(/>/g, '&gt;')
+                    .replace(/"/g, '&quot;')
+                    .replace(/'/g, '&#039;');
+            }
+
+            function formatDate(value) {
+                if (!value) {
+                    return '-';
+                }
+
+                const date = new Date(value);
+
+                if (isNaN(date.getTime())) {
+                    return value;
+                }
+
+                return date.toLocaleString('it-IT', {
+                    year: 'numeric',
+                    month: '2-digit',
+                    day: '2-digit',
+                    hour: '2-digit',
+                    minute: '2-digit'
+                });
+            }
+
+            function setLoading(isLoading) {
+                $('#btnSearchReports').prop('disabled', isLoading);
+                $('#searchSpinner').toggle(isLoading);
+            }
+
+            function resetResults() {
+                lastJsonResponse = null;
+
+                if (reportsDataTable !== null) {
+                    reportsDataTable.destroy();
+                    reportsDataTable = null;
+                }
+
+                $('#resultContainer').hide();
+                $('#emptyState').show();
+                $('#reportsTableBody').html('');
+                $('#reportCountBadge').text('0');
+                $('#jsonPreview').hide().text('');
+                $('#toggleJsonBtn').html('<i class="bx bx-code-alt"></i> Show JSON');
+            }
+
+            function loadCustomers() {
+                $.ajax({
+                    url: 'get_clienti.php',
+                    method: 'GET',
+                    dataType: 'json',
+                    success: function(response) {
+                        const select = $('#idCliente');
+                        select.empty();
+
+                        const customers = response.value || response || [];
+                        loadedCustomers = Array.isArray(customers) ? customers : [];
+
+                        select.append('<option value="">Select customer...</option>');
+
+                        loadedCustomers.forEach(function(customer) {
+                            const idCliente = customer.IdCliente || '';
+                            const codiceCliente = customer.CodiceCliente || '';
+                            const nominativo = customer.Nominativo || '';
+
+                            const label = codiceCliente ?
+                                codiceCliente + ' - ' + nominativo :
+                                nominativo;
+
+                            select.append(
+                                '<option value="' + escapeHtml(idCliente) + '" ' +
+                                'data-code="' + escapeHtml(codiceCliente) + '" ' +
+                                'data-name="' + escapeHtml(nominativo) + '">' +
+                                escapeHtml(label) +
+                                '</option>'
+                            );
+                        });
+
+                        if ($.fn.select2) {
+                            select.select2({
+                                width: '100%',
+                                placeholder: 'Search customer...',
+                                allowClear: true,
+                                minimumInputLength: 0,
+                                matcher: function(params, data) {
+                                    if ($.trim(params.term) === '') {
+                                        return data;
+                                    }
+
+                                    if (typeof data.text === 'undefined') {
+                                        return null;
+                                    }
+
+                                    const term = params.term.toLowerCase();
+                                    const text = data.text.toLowerCase();
+
+                                    if (text.indexOf(term) > -1) {
+                                        return data;
+                                    }
+
+                                    return null;
+                                },
+                                sorter: function(data) {
+                                    const term = $('.select2-search__field').val();
+
+                                    if (!term) {
+                                        return data;
+                                    }
+
+                                    const search = term.toLowerCase();
+
+                                    return data.sort(function(a, b) {
+                                        const aText = (a.text || '').toLowerCase();
+                                        const bText = (b.text || '').toLowerCase();
+
+                                        const aStarts = aText.startsWith(search);
+                                        const bStarts = bText.startsWith(search);
+
+                                        if (aStarts && !bStarts) return -1;
+                                        if (!aStarts && bStarts) return 1;
+
+                                        return aText.localeCompare(bText);
+                                    });
+                                }
+                            });
+                        }
+                    },
+                    error: function(xhr) {
+                        $('#idCliente').html('<option value="">Error loading customers</option>');
+
+                        let message = 'Unable to load customers.';
+
+                        if (xhr.responseJSON && xhr.responseJSON.error) {
+                            message = xhr.responseJSON.error;
+                        }
+
+                        Swal.fire({
+                            title: 'Customer loading error',
+                            text: message,
+                            icon: 'error',
+                            confirmButtonText: 'OK'
+                        });
+                    }
+                });
+            }
+
+            function updateSelectedCustomerBox() {
+                const selectedOption = $('#idCliente option:selected');
+
+                const customerCode = selectedOption.data('code') || '-';
+                const customerName = selectedOption.data('name') || '-';
+
+                if (!$('#idCliente').val()) {
+                    $('#customerBox').hide();
+                    $('#selectedCustomerCode').text('-');
+                    $('#selectedCustomerName').text('-');
+                    return;
+                }
+
+                $('#selectedCustomerCode').text(customerCode);
+                $('#selectedCustomerName').text(customerName);
+                $('#customerBox').show();
+            }
+
+            function renderStatus(isSigned) {
+                if (isSigned === true) {
+                    return '<span class="status-pill status-pill-success"><i class="bx bx-check-circle"></i> Signed</span>';
+                }
+
+                if (isSigned === false) {
+                    return '<span class="status-pill status-pill-warning"><i class="bx bx-time"></i> Not signed</span>';
+                }
+
+                return '-';
+            }
+
+            function renderPdfCell(pdfFiles) {
+                if (!Array.isArray(pdfFiles) || pdfFiles.length === 0) {
+                    return '<span class="no-pdf">No PDF</span>';
+                }
+
+                const firstPdf = pdfFiles[0];
+
+                if (!firstPdf.download_url) {
+                    return '<span class="no-pdf">No PDF</span>';
+                }
+
+                return `
+                    <a href="${escapeHtml(firstPdf.download_url)}"
+                       target="_blank"
+                       class="pdf-icon-link"
+                       title="${escapeHtml(firstPdf.file_name || 'Download PDF')}">
+                        <i class="bx bxs-file-pdf"></i>
+                    </a>
+                `;
+            }
+
+            function initReportsDataTable() {
+                if (reportsDataTable !== null) {
+                    reportsDataTable.destroy();
+                    reportsDataTable = null;
+                }
+
+                reportsDataTable = $('#reportsTable').DataTable({
+                    paging: false,
+                    searching: false,
+                    info: false,
+                    ordering: true,
+                    order: [
+                        [2, 'desc']
+                    ],
+                    autoWidth: false,
+                    responsive: true,
+                    columnDefs: [{
+                        targets: 6,
+                        orderable: false
+                    }],
+                    language: {
+                        emptyTable: 'No reports found',
+                        zeroRecords: 'No matching reports found'
+                    }
+                });
+            }
+
+            function renderReports(response) {
+                lastJsonResponse = response;
+
+                const reports = response.reports || [];
+                const tbody = $('#reportsTableBody');
+
+                tbody.empty();
+
+                $('#reportCountBadge').text(reports.length);
+
+                if (reports.length > 0) {
+                    reports.forEach(function(report) {
+                        const reportDateOrder = report.data || '';
+                        const printDateOrder = report.data_stampa || '';
+                        const statusOrder = report.firmato === true ? 1 : 0;
+
+                        const row = `
+                            <tr>
+                                <td>
+                                    <strong>${escapeHtml(report.codice_rapporto || '-')}</strong>
+                                </td>
+                                <td>${escapeHtml(report.id_rapporto || '-')}</td>
+                                <td data-order="${escapeHtml(reportDateOrder)}">${escapeHtml(formatDate(report.data))}</td>
+                                <td data-order="${escapeHtml(printDateOrder)}">${escapeHtml(formatDate(report.data_stampa))}</td>
+                                <td>${escapeHtml(report.versione !== null && report.versione !== undefined ? report.versione : '-')}</td>
+                                <td data-order="${statusOrder}">${renderStatus(report.firmato)}</td>
+                                <td class="text-center">${renderPdfCell(report.pdf_files)}</td>
+                            </tr>
+                        `;
+
+                        tbody.append(row);
+                    });
+                }
+
+                $('#jsonPreview').text(JSON.stringify(response, null, 4));
+
+                $('#emptyState').hide();
+                $('#resultContainer').show();
+
+                setTimeout(function() {
+                    initReportsDataTable();
+                }, 50);
+            }
+
+            $('#idCliente').on('change', function() {
+                updateSelectedCustomerBox();
+                resetResults();
+            });
+
+            $('#customerReportsForm').on('submit', function(event) {
+                event.preventDefault();
+
+                const idCliente = $('#idCliente').val();
+                const limit = $('#limitReports').val();
+                const signedStatus = $('#signedStatus').val();
+
+                if (!idCliente) {
+                    Swal.fire({
+                        title: 'Missing customer',
+                        text: 'Please select a customer.',
+                        icon: 'warning',
+                        confirmButtonText: 'OK'
+                    });
+                    return;
+                }
+
+                resetResults();
+                updateSelectedCustomerBox();
+                setLoading(true);
+
+                $.ajax({
+                    url: 'get_rapporti_cliente.php',
+                    method: 'GET',
+                    dataType: 'json',
+                    data: {
+                        id_cliente: idCliente,
+                        limit: limit,
+                        signed_status: signedStatus
+                    },
+                    success: function(response) {
+                        if (!response || response.success !== true) {
+                            Swal.fire({
+                                title: 'No data',
+                                text: response && response.error ? response.error : 'No reports were returned.',
+                                icon: 'warning',
+                                confirmButtonText: 'OK'
+                            });
+                            return;
+                        }
+
+                        renderReports(response);
+                    },
+                    error: function(xhr) {
+                        let message = 'Unexpected error while loading reports.';
+
+                        if (xhr.responseJSON && xhr.responseJSON.error) {
+                            message = xhr.responseJSON.error;
+                        } else if (xhr.responseText) {
+                            message = xhr.responseText.substring(0, 500);
+                        }
+
+                        Swal.fire({
+                            title: 'Error',
+                            text: message,
+                            icon: 'error',
+                            confirmButtonText: 'OK'
+                        });
+                    },
+                    complete: function() {
+                        setLoading(false);
+                    }
+                });
+            });
+
+            $('#toggleJsonBtn').on('click', function() {
+                const jsonPreview = $('#jsonPreview');
+                const isVisible = jsonPreview.is(':visible');
+
+                jsonPreview.toggle(!isVisible);
+
+                if (isVisible) {
+                    $(this).html('<i class="bx bx-code-alt"></i> Show JSON');
+                } else {
+                    $(this).html('<i class="bx bx-hide"></i> Hide JSON');
+                }
+            });
+
+            loadCustomers();
+        });
+    </script>
+
+</body>
+
+</html>

public/userarea/rapporto_prova_lookup.php

@@ -0,0 +1,580 @@
+<?php include('include/headscript.php'); ?>
+<!doctype html>
+<html lang="en">
+
+<head>
+    <!-- Required meta tags -->
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+
+    <!--favicon-->
+    <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
+
+    <?php include('cssinclude.php'); ?>
+
+    <title>TRF-Project - Test Report Lookup</title>
+
+    <style>
+        .compact-card .card-body {
+            padding: 1rem;
+        }
+
+        .lookup-wrapper {
+            max-width: 1100px;
+            margin: 0 auto;
+        }
+
+        .lookup-title {
+            font-size: 18px;
+            font-weight: 700;
+        }
+
+        .lookup-subtitle {
+            font-size: 13px;
+            color: #6c757d;
+        }
+
+        .result-section-title {
+            font-size: 14px;
+            font-weight: 700;
+            margin-bottom: 10px;
+            color: #344767;
+        }
+
+        .info-box {
+            border: 1px solid #e9ecef;
+            border-radius: 10px;
+            padding: 14px;
+            background: #fff;
+            height: 100%;
+        }
+
+        .info-label {
+            font-size: 11px;
+            text-transform: uppercase;
+            color: #6c757d;
+            font-weight: 700;
+            margin-bottom: 3px;
+        }
+
+        .info-value {
+            font-size: 14px;
+            color: #212529;
+            font-weight: 600;
+            word-break: break-word;
+        }
+
+        .status-pill {
+            display: inline-flex;
+            align-items: center;
+            gap: 6px;
+            padding: 5px 10px;
+            border-radius: 999px;
+            font-size: 12px;
+            font-weight: 700;
+        }
+
+        .status-pill-success {
+            background: #e8fff1;
+            color: #198754;
+        }
+
+        .status-pill-warning {
+            background: #fff3cd;
+            color: #b58100;
+        }
+
+        .pdf-card {
+            border: 1px solid #f1d1d1;
+            background: #fffafa;
+            border-radius: 10px;
+            padding: 14px;
+            display: flex;
+            align-items: center;
+            justify-content: space-between;
+            gap: 12px;
+        }
+
+        .pdf-icon {
+            width: 46px;
+            height: 46px;
+            border-radius: 12px;
+            background: #dc3545;
+            color: #fff;
+            display: inline-flex;
+            align-items: center;
+            justify-content: center;
+            font-size: 24px;
+            flex-shrink: 0;
+        }
+
+        .pdf-file-name {
+            font-weight: 700;
+            font-size: 14px;
+            margin-bottom: 2px;
+        }
+
+        .pdf-meta {
+            font-size: 12px;
+            color: #6c757d;
+        }
+
+        .json-preview {
+            display: none;
+            background: #111827;
+            color: #e5e7eb;
+            border-radius: 10px;
+            padding: 14px;
+            font-size: 12px;
+            max-height: 420px;
+            overflow: auto;
+            white-space: pre-wrap;
+        }
+
+        .empty-state {
+            border: 1px dashed #ced4da;
+            border-radius: 10px;
+            padding: 24px;
+            text-align: center;
+            color: #6c757d;
+            background: #fafafa;
+        }
+
+        .spinner-inline {
+            display: none;
+            margin-left: 8px;
+        }
+
+        .btn-download-pdf {
+            white-space: nowrap;
+        }
+
+        @media (max-width: 768px) {
+            .pdf-card {
+                flex-direction: column;
+                align-items: flex-start;
+            }
+
+            .btn-download-pdf {
+                width: 100%;
+            }
+        }
+    </style>
+</head>
+
+<body>
+    <!--wrapper-->
+    <div class="wrapper">
+
+        <!--sidebar wrapper -->
+        <?php include('include/navbar.php'); ?>
+        <!--end sidebar wrapper -->
+
+        <!--start header -->
+        <?php include('include/topbar.php'); ?>
+        <!--end header -->
+
+        <!--start page wrapper -->
+        <div class="page-wrapper">
+            <div class="page-content">
+
+                <?php include('top_stat_widget.php'); ?>
+
+                <div class="lookup-wrapper">
+
+                    <div class="card radius-10 compact-card">
+                        <div class="card-header">
+                            <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
+                                <div>
+                                    <div class="lookup-title">Test Report Lookup</div>
+                                    <div class="lookup-subtitle">
+                                        Search a test report from VisualLims by report number and download the PDF if available.
+                                    </div>
+                                </div>
+                            </div>
+                        </div>
+
+                        <div class="card-body">
+
+                            <form id="reportSearchForm" class="row g-3 align-items-end">
+                                <div class="col-md-8">
+                                    <label for="codiceRapporto" class="form-label fw-semibold">
+                                        Report Number
+                                    </label>
+                                    <input type="text"
+                                        class="form-control"
+                                        id="codiceRapporto"
+                                        name="codiceRapporto"
+                                        placeholder="Example: 2621521"
+                                        autocomplete="off">
+                                </div>
+
+                                <div class="col-md-4">
+                                    <button type="submit" id="btnSearchReport" class="btn btn-primary w-100">
+                                        <i class="bx bx-search"></i> Proceed
+                                        <span class="spinner-border spinner-border-sm spinner-inline" id="searchSpinner" role="status" aria-hidden="true"></span>
+                                    </button>
+                                </div>
+                            </form>
+
+                        </div>
+                    </div>
+
+                    <div id="resultContainer" style="display:none;">
+
+                        <div class="card radius-10 compact-card">
+                            <div class="card-header">
+                                <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
+                                    <h6 class="mb-0">Report Data</h6>
+
+                                    <button type="button" id="toggleJsonBtn" class="btn btn-sm btn-outline-secondary">
+                                        <i class="bx bx-code-alt"></i> Show JSON
+                                    </button>
+                                </div>
+                            </div>
+
+                            <div class="card-body">
+
+                                <div class="result-section-title">General Information</div>
+
+                                <div class="row g-3 mb-4">
+                                    <div class="col-md-3">
+                                        <div class="info-box">
+                                            <div class="info-label">Report Number</div>
+                                            <div class="info-value" id="resCodiceRapporto">-</div>
+                                        </div>
+                                    </div>
+
+                                    <div class="col-md-3">
+                                        <div class="info-box">
+                                            <div class="info-label">Report ID</div>
+                                            <div class="info-value" id="resIdRapporto">-</div>
+                                        </div>
+                                    </div>
+
+                                    <div class="col-md-3">
+                                        <div class="info-box">
+                                            <div class="info-label">Customer Code</div>
+                                            <div class="info-value" id="resCodiceCliente">-</div>
+                                        </div>
+                                    </div>
+
+                                    <div class="col-md-3">
+                                        <div class="info-box">
+                                            <div class="info-label">Customer Name</div>
+                                            <div class="info-value" id="resNominativoCliente">-</div>
+                                        </div>
+                                    </div>
+
+                                    <div class="col-md-3">
+                                        <div class="info-box">
+                                            <div class="info-label">Report Date</div>
+                                            <div class="info-value" id="resDataRapporto">-</div>
+                                        </div>
+                                    </div>
+
+                                    <div class="col-md-3">
+                                        <div class="info-box">
+                                            <div class="info-label">Print Date</div>
+                                            <div class="info-value" id="resDataStampa">-</div>
+                                        </div>
+                                    </div>
+
+                                    <div class="col-md-3">
+                                        <div class="info-box">
+                                            <div class="info-label">Version</div>
+                                            <div class="info-value" id="resVersione">-</div>
+                                        </div>
+                                    </div>
+
+                                    <div class="col-md-3">
+                                        <div class="info-box">
+                                            <div class="info-label">Signed</div>
+                                            <div class="info-value" id="resFirmato">-</div>
+                                        </div>
+                                    </div>
+
+                                    <div class="col-md-6">
+                                        <div class="info-box">
+                                            <div class="info-label">Detail Endpoint</div>
+                                            <div class="info-value small" id="resDetailEndpoint">-</div>
+                                        </div>
+                                    </div>
+                                </div>
+
+                                <div class="result-section-title">Available PDF Files</div>
+
+                                <div id="pdfFilesContainer" class="mb-4"></div>
+
+                                <pre id="jsonPreview" class="json-preview"></pre>
+
+                            </div>
+                        </div>
+
+                    </div>
+
+                    <div id="emptyState" class="empty-state">
+                        <i class="bx bx-file-find" style="font-size:34px;"></i>
+                        <div class="mt-2 fw-semibold">No report loaded</div>
+                        <div class="small">Enter a report number and click Proceed.</div>
+                    </div>
+
+                </div>
+
+            </div>
+        </div>
+        <!--end page wrapper -->
+
+        <!--start overlay-->
+        <div class="overlay toggle-icon"></div>
+        <!--end overlay-->
+
+        <!--Start Back To Top Button-->
+        <a href="javaScript:;" class="back-to-top">
+            <i class='bx bxs-up-arrow-alt'></i>
+        </a>
+        <!--End Back To Top Button-->
+
+        <?php include('include/footer.php'); ?>
+
+    </div>
+    <!--end wrapper-->
+
+    <?php include('jsinclude.php'); ?>
+
+    <script>
+        $(document).ready(function() {
+
+            let lastJsonResponse = null;
+
+            function escapeHtml(value) {
+                if (value === null || value === undefined) {
+                    return '';
+                }
+
+                return String(value)
+                    .replace(/&/g, '&amp;')
+                    .replace(/</g, '&lt;')
+                    .replace(/>/g, '&gt;')
+                    .replace(/"/g, '&quot;')
+                    .replace(/'/g, '&#039;');
+            }
+
+            function formatDate(value) {
+                if (!value) {
+                    return '-';
+                }
+
+                const date = new Date(value);
+
+                if (isNaN(date.getTime())) {
+                    return value;
+                }
+
+                return date.toLocaleString('it-IT', {
+                    year: 'numeric',
+                    month: '2-digit',
+                    day: '2-digit',
+                    hour: '2-digit',
+                    minute: '2-digit'
+                });
+            }
+
+            function setLoading(isLoading) {
+                $('#btnSearchReport').prop('disabled', isLoading);
+                $('#searchSpinner').toggle(isLoading);
+            }
+
+            function resetResult() {
+                lastJsonResponse = null;
+
+                $('#resultContainer').hide();
+                $('#emptyState').show();
+                $('#jsonPreview').hide().text('');
+                $('#toggleJsonBtn').html('<i class="bx bx-code-alt"></i> Show JSON');
+
+                $('#resCodiceRapporto').text('-');
+                $('#resIdRapporto').text('-');
+                $('#resCodiceCliente').text('-');
+                $('#resNominativoCliente').text('-');
+                $('#resDataRapporto').text('-');
+                $('#resDataStampa').text('-');
+                $('#resVersione').text('-');
+                $('#resFirmato').text('-');
+                $('#resDetailEndpoint').text('-');
+                $('#pdfFilesContainer').html('');
+            }
+
+            function renderPdfFiles(pdfFiles) {
+                const container = $('#pdfFilesContainer');
+                container.empty();
+
+                if (!Array.isArray(pdfFiles) || pdfFiles.length === 0) {
+                    container.html(`
+                        <div class="empty-state">
+                            <i class="bx bx-file-blank" style="font-size:28px;"></i>
+                            <div class="mt-2 fw-semibold">No PDF available</div>
+                            <div class="small">No report PDF file was returned by VisualLims.</div>
+                        </div>
+                    `);
+                    return;
+                }
+
+                pdfFiles.forEach(function(file) {
+                    const idRapportoFile = file.id_rapporto_file || '';
+                    const fileName = file.file_name || 'report.pdf';
+                    const categoria = file.categoria || '-';
+                    const tipoRapporto = file.tipo_rapporto || '-';
+
+                    const downloadUrl = 'download_rapporto_pdf.php?id_rapporto_file=' + encodeURIComponent(idRapportoFile);
+
+                    const html = `
+                        <div class="pdf-card mb-2">
+                            <div class="d-flex align-items-center gap-3">
+                                <div class="pdf-icon">
+                                    <i class="bx bxs-file-pdf"></i>
+                                </div>
+
+                                <div>
+                                    <div class="pdf-file-name">${escapeHtml(fileName)}</div>
+                                    <div class="pdf-meta">
+                                        ID File: ${escapeHtml(idRapportoFile)}
+                                        &nbsp;|&nbsp;
+                                        Category: ${escapeHtml(categoria)}
+                                        &nbsp;|&nbsp;
+                                        Type: ${escapeHtml(tipoRapporto)}
+                                    </div>
+                                </div>
+                            </div>
+
+                            <a href="${downloadUrl}" target="_blank" class="btn btn-danger btn-sm btn-download-pdf">
+                                <i class="bx bx-download"></i> Download PDF
+                            </a>
+                        </div>
+                    `;
+
+                    container.append(html);
+                });
+            }
+
+            function renderResult(response) {
+                lastJsonResponse = response;
+
+                const base = response.rapporto_base || {};
+                const data = response.data || {};
+                const cliente = response.cliente || data.Cliente || {};
+
+                $('#resCodiceRapporto').text(response.codice_rapporto || base.CodiceRapporto || '-');
+                $('#resIdRapporto').text(response.id_rapporto || base.IdRapporto || '-');
+                $('#resCodiceCliente').text(cliente.CodiceCliente || '-');
+                $('#resNominativoCliente').text(cliente.Nominativo || '-');
+                $('#resDataRapporto').text(formatDate(base.Data || data.Data));
+                $('#resDataStampa').text(formatDate(base.DataStampa || data.DataStampa));
+                $('#resVersione').text(base.Versione !== undefined ? base.Versione : (data.Versione !== undefined ? data.Versione : '-'));
+                $('#resDetailEndpoint').text(response.detail_endpoint || '-');
+
+                const isSigned = base.Firmato === true || data.Firmato === true;
+
+                if (isSigned) {
+                    $('#resFirmato').html('<span class="status-pill status-pill-success"><i class="bx bx-check-circle"></i> Signed</span>');
+                } else {
+                    $('#resFirmato').html('<span class="status-pill status-pill-warning"><i class="bx bx-time"></i> Not signed</span>');
+                }
+
+                renderPdfFiles(response.pdf_files || []);
+
+                $('#jsonPreview').text(JSON.stringify(response, null, 4));
+
+                $('#emptyState').hide();
+                $('#resultContainer').show();
+            }
+
+            $('#reportSearchForm').on('submit', function(event) {
+                event.preventDefault();
+
+                const codiceRapporto = $('#codiceRapporto').val().trim();
+
+                if (!codiceRapporto) {
+                    Swal.fire({
+                        title: 'Missing report number',
+                        text: 'Please enter a report number.',
+                        icon: 'warning',
+                        confirmButtonText: 'OK'
+                    });
+                    return;
+                }
+
+                resetResult();
+                setLoading(true);
+
+                $.ajax({
+                    url: 'get_rapporto_prova.php',
+                    method: 'GET',
+                    dataType: 'json',
+                    data: {
+                        codice: codiceRapporto,
+                        step: 'files'
+                    },
+                    success: function(response) {
+                        if (!response || response.success !== true) {
+                            Swal.fire({
+                                title: 'Report not found',
+                                text: response && response.message ? response.message : 'No report was found for this number.',
+                                icon: 'warning',
+                                confirmButtonText: 'OK'
+                            });
+                            return;
+                        }
+
+                        renderResult(response);
+                    },
+                    error: function(xhr) {
+                        let message = 'Unexpected error while loading the report.';
+
+                        if (xhr.responseJSON && xhr.responseJSON.error) {
+                            message = xhr.responseJSON.error;
+                        } else if (xhr.responseJSON && xhr.responseJSON.message) {
+                            message = xhr.responseJSON.message;
+                        } else if (xhr.responseText) {
+                            message = xhr.responseText.substring(0, 500);
+                        }
+
+                        Swal.fire({
+                            title: 'Error',
+                            text: message,
+                            icon: 'error',
+                            confirmButtonText: 'OK'
+                        });
+                    },
+                    complete: function() {
+                        setLoading(false);
+                    }
+                });
+            });
+
+            $('#toggleJsonBtn').on('click', function() {
+                const jsonPreview = $('#jsonPreview');
+                const isVisible = jsonPreview.is(':visible');
+
+                jsonPreview.toggle(!isVisible);
+
+                if (isVisible) {
+                    $(this).html('<i class="bx bx-code-alt"></i> Show JSON');
+                } else {
+                    $(this).html('<i class="bx bx-hide"></i> Hide JSON');
+                }
+            });
+
+            const urlParams = new URLSearchParams(window.location.search);
+            const prefillCodice = urlParams.get('codice');
+
+            if (prefillCodice) {
+                $('#codiceRapporto').val(prefillCodice);
+                $('#reportSearchForm').trigger('submit');
+            }
+        });
+    </script>
+
+</body>
+
+</html>

public/userarea/resolve_bindings.php

@@ -0,0 +1,385 @@
+<?php
+include('include/headscript.php');
+
+// Binding preparati da import_insert.php (da risolvere + collegati in automatico).
+$pending = $_SESSION['pending_bindings'] ?? null;
+
+if (empty($pending) || (empty($pending['items']) && empty($pending['auto']) && empty($pending['saved']))) {
+    // Niente da mostrare: vado alla griglia.
+    $tid = $pending['template_id'] ?? ($_SESSION['template_id'] ?? null);
+    $ref = $pending['importref'] ?? '';
+    unset($_SESSION['pending_bindings']);
+
+    if ($tid) {
+        header("Location: imported.php?id=" . urlencode($tid) . "&importref=" . urlencode($ref));
+    } else {
+        header("Location: xlstemplates_grid.php");
+    }
+    exit;
+}
+
+$templateId = (int) $pending['template_id'];
+$importRef  = (string) $pending['importref'];
+$items      = $pending['items'] ?? [];
+$autoItems  = $pending['auto'] ?? [];
+$savedItems = $pending['saved'] ?? [];
+
+// Righe gia' risolte (modificabili): auto-collegate + binding gia' salvati.
+$resolvedItems = [];
+foreach ($autoItems as $a) {
+    $a['badge'] = 'auto';
+    $a['badge_class'] = 'bg-success';
+    $resolvedItems[] = $a;
+}
+foreach ($savedItems as $s) {
+    $s['badge'] = 'salvato';
+    $s['badge_class'] = 'bg-secondary';
+    $resolvedItems[] = $s;
+}
+
+// Raggruppa le righe per campo (custom: mapping_id, fixed: fixed_field_key),
+// mantenendo l'ordine di prima apparizione. Ogni gruppo elenca prima i pending.
+$groups = [];
+$groupOrder = [];
+$pushToGroup = function (array $row, string $type, $idx = null) use (&$groups, &$groupOrder) {
+    $kind = $row['kind'] ?? 'custom';
+    $gkey = $kind === 'fixed'
+        ? 'fx:' . ($row['fixed_field_key'] ?? '')
+        : 'cf:' . (int) ($row['mapping_id'] ?? 0);
+    if (!isset($groups[$gkey])) {
+        $groups[$gkey] = [
+            'label'    => $row['field_label'] ?? $gkey,
+            'kind'     => $kind,
+            'pending'  => [],
+            'resolved' => [],
+        ];
+        $groupOrder[] = $gkey;
+    }
+    if ($type === 'pending') {
+        $groups[$gkey]['pending'][] = ['idx' => $idx, 'data' => $row];
+    } else {
+        $groups[$gkey]['resolved'][] = ['data' => $row];
+    }
+};
+foreach ($items as $idx => $item) {
+    $pushToGroup($item, 'pending', $idx);
+}
+foreach ($resolvedItems as $res) {
+    $pushToGroup($res, 'resolved');
+}
+
+$db = DBHandlerSelect::getInstance();
+$pdo = $db->getConnection();
+$stmt = $pdo->prepare("SELECT name FROM excel_templates WHERE id = ?");
+$stmt->execute([$templateId]);
+$templateName = $stmt->fetchColumn() ?: ('Template ' . $templateId);
+?>
+<!doctype html>
+<html lang="en">
+
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
+    <?php include('cssinclude.php'); ?>
+    <link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet">
+    <style>
+        .json-value {
+            font-family: Consolas, Monaco, monospace;
+            font-weight: 600;
+        }
+
+        .binding-status {
+            font-size: 12px;
+        }
+
+        td .select2-container {
+            min-width: 240px;
+        }
+
+        /* Allinea l'altezza di select2 a form-select/btn di Bootstrap */
+        .select2-container--default .select2-selection--single {
+            height: 38px;
+            border-color: #ced4da;
+        }
+
+        .select2-container--default .select2-selection--single .select2-selection__rendered {
+            line-height: 36px;
+        }
+
+        .select2-container--default .select2-selection--single .select2-selection__arrow {
+            height: 36px;
+        }
+    </style>
+    <title>Binding JSON &rarr; LIMS - <?= htmlspecialchars($titlewebsite ?? '', ENT_QUOTES, 'UTF-8'); ?></title>
+</head>
+
+<body>
+    <div class="wrapper">
+        <?php include('include/navbar.php'); ?>
+        <?php include('include/topbar.php'); ?>
+        <div class="page-wrapper">
+            <div class="page-content">
+
+                <div class="card radius-10">
+                    <div class="card-header">
+                        <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
+                            <div>
+                                <h6 class="mb-0">Binding JSON &rarr; LIMS</h6>
+                                <small><?= htmlspecialchars($templateName) ?> &middot; Template ID: <?= $templateId ?></small>
+                            </div>
+                            <a href="bindings_manage.php?template_id=<?= $templateId ?>" class="btn btn-sm btn-outline-secondary">
+                                <i class="fas fa-cog"></i> Gestione binding
+                            </a>
+                        </div>
+                    </div>
+
+                    <div class="card-body">
+                        <?php if (!empty($items)): ?>
+                            <div class="alert alert-info">
+                                Alcuni valori importati dal JSON non hanno ancora una corrispondenza con i valori del LIMS.
+                                Seleziona il valore LIMS corretto per ciascuno e conferma. I binding verranno salvati e
+                                riutilizzati nelle importazioni successive.
+                            </div>
+                        <?php endif; ?>
+                        <?php if (!empty($autoItems)): ?>
+                            <div class="alert alert-success">
+                                <?= count($autoItems) ?> valore/i collegato/i automaticamente (corrispondenza esatta con il LIMS).
+                            </div>
+                        <?php endif; ?>
+
+                        <div id="bindingError" class="alert alert-danger" style="display:none;"></div>
+
+                        <form id="bindingForm">
+                            <div class="table-responsive">
+                                <table class="table table-bordered align-middle">
+                                    <thead>
+                                        <tr>
+                                            <th style="width:32px;"></th>
+                                            <th>Valore JSON</th>
+                                            <th>Valore LIMS</th>
+                                            <th style="width:210px;">Azioni</th>
+                                        </tr>
+                                    </thead>
+                                    <tbody>
+                                        <?php foreach ($groupOrder as $gkey): $g = $groups[$gkey];
+                                            $pendCount  = count($g['pending']);
+                                            $totalCount = $pendCount + count($g['resolved']); ?>
+                                            <tr class="binding-group-header table-light">
+                                                <td colspan="4">
+                                                    <strong><?= htmlspecialchars($g['label']) ?></strong>
+                                                    <?php if ($g['kind'] === 'fixed'): ?><span class="badge bg-light text-dark border">fixed</span><?php endif; ?>
+                                                    <span class="text-muted">&middot; <?= $totalCount ?> valore/i<?php if ($pendCount): ?>, <?= $pendCount ?> da risolvere<?php endif; ?></span>
+                                                </td>
+                                            </tr>
+
+                                            <?php foreach ($g['pending'] as $p): $idx = $p['idx']; $item = $p['data']; $kind = $item['kind'] ?? 'custom'; ?>
+                                                <tr class="binding-row"
+                                                    data-index="<?= $idx ?>"
+                                                    data-kind="<?= $kind ?>"
+                                                    <?php if ($kind === 'fixed'): ?>
+                                                    data-fixed-key="<?= htmlspecialchars($item['fixed_field_key'], ENT_QUOTES) ?>"
+                                                    <?php else: ?>
+                                                    data-mapping-id="<?= (int) ($item['mapping_id'] ?? 0) ?>"
+                                                    data-field-id="<?= (int) ($item['field_id'] ?? 0) ?>"
+                                                    <?php endif; ?>
+                                                    data-json-value="<?= htmlspecialchars($item['json_value'], ENT_QUOTES) ?>"
+                                                    data-datadb-ids="<?= htmlspecialchars(json_encode($item['datadb_ids']), ENT_QUOTES) ?>">
+                                                    <td class="text-muted ps-4">&rsaquo;</td>
+                                                    <td class="json-value"><?= htmlspecialchars($item['json_value']) ?></td>
+                                                    <td>
+                                                        <select class="form-select binding-select">
+                                                            <option value="">Seleziona valore LIMS...</option>
+                                                        </select>
+                                                    </td>
+                                                    <td>
+                                                        <button type="button" class="btn btn-sm btn-outline-secondary skip-binding-btn">Nessuna corrispondenza</button>
+                                                        <div class="binding-status text-muted mt-1">In attesa</div>
+                                                    </td>
+                                                </tr>
+                                            <?php endforeach; ?>
+
+                                            <?php foreach ($g['resolved'] as $r): $res = $r['data']; $kind = $res['kind'] ?? 'custom'; ?>
+                                                <tr class="binding-row"
+                                                    data-kind="<?= $kind ?>"
+                                                    <?php if ($kind === 'fixed'): ?>
+                                                    data-fixed-key="<?= htmlspecialchars($res['fixed_field_key'], ENT_QUOTES) ?>"
+                                                    <?php else: ?>
+                                                    data-mapping-id="<?= (int) ($res['mapping_id'] ?? 0) ?>"
+                                                    data-field-id="<?= (int) ($res['field_id'] ?? 0) ?>"
+                                                    <?php endif; ?>
+                                                    data-json-value="<?= htmlspecialchars($res['json_value'], ENT_QUOTES) ?>"
+                                                    data-datadb-ids="<?= htmlspecialchars(json_encode($res['datadb_ids']), ENT_QUOTES) ?>">
+                                                    <td class="text-muted ps-4">&rsaquo;</td>
+                                                    <td class="json-value"><?= htmlspecialchars($res['json_value']) ?></td>
+                                                    <td>
+                                                        <select class="form-select binding-select">
+                                                            <option value="<?= (int) $res['lims_value_id'] ?>" selected><?= htmlspecialchars($res['lims_value']) ?></option>
+                                                        </select>
+                                                    </td>
+                                                    <td>
+                                                        <button type="button" class="btn btn-sm btn-outline-secondary skip-binding-btn">Nessuna corrispondenza</button>
+                                                        <div class="binding-status mt-1"><span class="badge <?= $res['badge_class'] ?>"><?= $res['badge'] ?></span></div>
+                                                    </td>
+                                                </tr>
+                                            <?php endforeach; ?>
+                                        <?php endforeach; ?>
+                                    </tbody>
+                                </table>
+                            </div>
+
+                            <div class="d-flex justify-content-end gap-2 mt-3">
+                                <a href="imported.php?id=<?= $templateId ?>&importref=<?= urlencode($importRef) ?>"
+                                    class="btn btn-outline-secondary">Salta per ora</a>
+                                <button type="submit" class="btn btn-primary" id="confirmBindingsBtn" disabled>
+                                    Conferma e prosegui
+                                </button>
+                            </div>
+                        </form>
+                    </div>
+                </div>
+
+            </div>
+        </div>
+        <div class="overlay toggle-icon"></div>
+        <a href="javaScript:;" class="back-to-top"><i class='bx bxs-up-arrow-alt'></i></a>
+        <?php include('include/footer.php'); ?>
+    </div>
+
+    <?php include('jsinclude.php'); ?>
+    <script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
+
+    <script>
+        $(function() {
+            const TEMPLATE_ID = <?= $templateId ?>;
+            const IMPORT_REF = <?= json_encode($importRef) ?>;
+            const CONTINUE_URL = 'imported.php?id=' + TEMPLATE_ID + '&importref=' + encodeURIComponent(IMPORT_REF);
+
+            const $form = $('#bindingForm');
+            const $btn = $('#confirmBindingsBtn');
+            const $error = $('#bindingError');
+
+            // Dropdown valori LIMS per riga: sorgente custom vs fixed.
+            $('.binding-select').each(function() {
+                const $row = $(this).closest('.binding-row');
+                const kind = $row.data('kind');
+                const isFixed = kind === 'fixed';
+
+                $(this).select2({
+                    placeholder: 'Seleziona valore LIMS...',
+                    width: '100%',
+                    ajax: {
+                        url: isFixed ? 'search_fixed_field_values.php' : 'search_customfield_values.php',
+                        dataType: 'json',
+                        delay: 200,
+                        data: params => isFixed ? {
+                            field_key: $row.data('fixed-key'),
+                            template_id: TEMPLATE_ID,
+                            q: params.term || '',
+                            limit: 50
+                        } : {
+                            field_id: $row.data('field-id'),
+                            q: params.term || '',
+                            limit: 50
+                        },
+                        processResults: data => ({
+                            results: data.results || []
+                        })
+                    },
+                    minimumInputLength: 0
+                });
+            });
+
+            // Una riga e' pronta se ha un valore scelto oppure e' marcata "nessuna corrispondenza".
+            function refreshButton() {
+                const allReady = $('.binding-row').toArray().every(row => {
+                    const $row = $(row);
+                    return $row.hasClass('is-skipped') || $row.find('.binding-select').val();
+                });
+                $btn.prop('disabled', !allReady);
+            }
+
+            $('.binding-select').on('change', refreshButton);
+            refreshButton();
+
+            // "Nessuna corrispondenza": azzera il valore importato, nessun binding salvato.
+            $('.skip-binding-btn').on('click', function() {
+                const $row = $(this).closest('.binding-row');
+                const $select = $row.find('.binding-select');
+                const $status = $row.find('.binding-status');
+                const skipped = $row.toggleClass('is-skipped').hasClass('is-skipped');
+
+                $(this).toggleClass('btn-outline-secondary', !skipped).toggleClass('btn-secondary', skipped);
+                $select.val(null).trigger('change').prop('disabled', skipped);
+                $status.text(skipped ? 'Nessuna corrispondenza' : 'In attesa');
+                refreshButton();
+            });
+
+            $form.on('submit', function(e) {
+                e.preventDefault();
+                $error.hide();
+                $btn.prop('disabled', true).text('Salvataggio...');
+
+                const tasks = $('.binding-row').toArray().map(row => {
+                    const $row = $(row);
+                    const $status = $row.find('.binding-status');
+                    const kind = $row.data('kind');
+                    const isFixed = kind === 'fixed';
+                    const datadbIds = JSON.stringify($row.data('datadb-ids') || []);
+                    const jsonValue = String($row.data('json-value'));
+
+                    const targetFields = isFixed
+                        ? { kind: 'fixed', fixed_field_key: $row.data('fixed-key') }
+                        : { kind: 'custom', mapping_id: $row.data('mapping-id'), field_id: $row.data('field-id') };
+
+                    // Riga senza corrispondenza: azzera il valore, niente binding.
+                    if ($row.hasClass('is-skipped')) {
+                        return $.post('skip_binding.php', {
+                            ...targetFields,
+                            template_id: TEMPLATE_ID,
+                            json_value: jsonValue,
+                            datadb_ids: datadbIds
+                        }).then(resp => {
+                            if (resp && resp.success) {
+                                $status.text('Azzerato').removeClass('text-muted').addClass('text-success');
+                                return true;
+                            }
+                            $status.text('Errore').addClass('text-danger');
+                            throw new Error((resp && resp.error) || 'Errore azzeramento valore');
+                        });
+                    }
+
+                    const $select = $row.find('.binding-select');
+                    const selectedData = $select.select2('data')[0] || {};
+
+                    return $.post('save_binding.php', {
+                        ...targetFields,
+                        template_id: TEMPLATE_ID,
+                        json_value: jsonValue,
+                        lims_value_id: $select.val(),
+                        lims_value: selectedData.text || '',
+                        datadb_ids: datadbIds
+                    }).then(resp => {
+                        if (resp && resp.success) {
+                            $status.text('Salvato').removeClass('text-muted').addClass('text-success');
+                            return true;
+                        }
+                        $status.text('Errore').addClass('text-danger');
+                        throw new Error((resp && resp.error) || 'Errore salvataggio binding');
+                    });
+                });
+
+                Promise.all(tasks)
+                    .then(() => {
+                        window.location.href = CONTINUE_URL;
+                    })
+                    .catch(err => {
+                        $error.text(err.message || 'Errore durante il salvataggio dei binding.').show();
+                        $btn.prop('disabled', false).text('Conferma e prosegui');
+                    });
+            });
+        });
+    </script>
+</body>
+
+</html>

public/userarea/routines/burberry.php

@@ -0,0 +1,71 @@
+<?php
+
+/**
+ * Routine: burberry
+ *
+ * Purpose:
+ * For each imported XLS row:
+ * - read the value from column S
+ * - read the value from column T
+ * - merge the values
+ * - save the final value into column S
+ *
+ * Target:
+ * Column S must be mapped to the destination field in the template mapping.
+ */
+
+function applyRoutine(&$excelData, $routineData = [])
+{
+    /*
+     * This routine does not require external routine data.
+     * Columns are fixed.
+     *
+     * Excel column indexes are zero-based:
+     *
+     * S = 18
+     * T = 19
+     */
+    $targetColumnIndex = 18; // S
+
+    $columnSIndex = 18; // S
+    $columnTIndex = 19; // T
+
+    foreach ($excelData as $rowIndex => &$row) {
+        if (!isset($row['data']) || !is_array($row['data'])) {
+            error_log("Routine burberry: invalid row structure at index {$rowIndex}.");
+            continue;
+        }
+
+        $valueS = trim((string)($row['data'][$columnSIndex] ?? ''));
+        $valueT = trim((string)($row['data'][$columnTIndex] ?? ''));
+
+        /*
+         * Merge values, ignoring empty values.
+         */
+        $mergedValues = [];
+
+        if ($valueS !== '') {
+            $mergedValues[] = $valueS;
+        }
+
+        if ($valueT !== '') {
+            $mergedValues[] = $valueT;
+        }
+
+        /*
+         * Save final value into column S.
+         */
+        $row['data'][$targetColumnIndex] = implode(' ', $mergedValues);
+
+        error_log(
+            "Routine burberry: row " .
+                ($row['excelrow'] ?? $rowIndex) .
+                " generated value in column S: " .
+                $row['data'][$targetColumnIndex]
+        );
+    }
+
+    unset($row);
+
+    error_log("Routine burberry completed.");
+}

public/userarea/routines/fendi.php

@@ -0,0 +1,67 @@
+<?php
+
+/**
+ * Routine: merge_column_T_and_U_into_T
+ *
+ * Purpose:
+ * For each imported XLS row:
+ * - read the value from column T
+ * - read the value from column U
+ * - merge both values
+ * - save the final value into column T
+ *
+ * Target:
+ * Column T must be mapped to the destination field in the template mapping.
+ */
+
+function applyRoutine(&$excelData, $routineData = [])
+{
+    /*
+     * Excel column indexes are zero-based:
+     *
+     * T = 19
+     * U = 20
+     */
+    $targetColumnIndex = 19; // T
+    $firstColumnIndex  = 19; // T
+    $secondColumnIndex = 20; // U
+
+    foreach ($excelData as $rowIndex => &$row) {
+        if (!isset($row['data']) || !is_array($row['data'])) {
+            error_log("Routine merge T+U: invalid row structure at index {$rowIndex}.");
+            continue;
+        }
+
+        $valueT = trim((string)($row['data'][$firstColumnIndex] ?? ''));
+        $valueU = trim((string)($row['data'][$secondColumnIndex] ?? ''));
+
+        /*
+         * Merge values, ignoring empty values.
+         */
+        $mergedValues = [];
+
+        if ($valueT !== '') {
+            $mergedValues[] = $valueT;
+        }
+
+        if ($valueU !== '') {
+            $mergedValues[] = $valueU;
+        }
+
+        /*
+         * Save final value into column T.
+         */
+        $row['data'][$targetColumnIndex] = implode(' ', $mergedValues);
+
+        error_log(
+            "Routine merge T+U: row " .
+                ($row['excelrow'] ?? $rowIndex) .
+                " generated value in column T: " .
+                $row['data'][$targetColumnIndex]
+        );
+    }
+
+    unset($row);
+
+    error_log("Routine merge T+U completed.");
+}

public/userarea/routines/paulshark.php

@@ -0,0 +1,76 @@
+<?php
+
+/**
+ * Routine: paulshark
+ *
+ * Purpose:
+ * For each imported XLS row:
+ * - read the value from column D
+ * - read the value from column E
+ * - read the value from column J
+ * - merge the values
+ * - save the final value into column D
+ *
+ * Target:
+ * Column D must be mapped to the destination field in the template mapping.
+ */
+
+function applyRoutine(&$excelData, $routineData = [])
+{
+    /*
+     * Excel column indexes are zero-based:
+     *
+     * D = 3
+     * E = 4
+     * J = 9
+     */
+    $targetColumnIndex = 3; // D
+
+    $columnDIndex = 3; // D
+    $columnEIndex = 4; // E
+    $columnJIndex = 9; // J
+
+    foreach ($excelData as $rowIndex => &$row) {
+        if (!isset($row['data']) || !is_array($row['data'])) {
+            error_log("Routine paulshark: invalid row structure at index {$rowIndex}.");
+            continue;
+        }
+
+        $valueD = trim((string)($row['data'][$columnDIndex] ?? ''));
+        $valueE = trim((string)($row['data'][$columnEIndex] ?? ''));
+        $valueJ = trim((string)($row['data'][$columnJIndex] ?? ''));
+
+        /*
+         * Merge values, ignoring empty values.
+         */
+        $mergedValues = [];
+
+        if ($valueD !== '') {
+            $mergedValues[] = $valueD;
+        }
+
+        if ($valueE !== '') {
+            $mergedValues[] = $valueE;
+        }
+
+        if ($valueJ !== '') {
+            $mergedValues[] = $valueJ;
+        }
+
+        /*
+         * Save final value into column D.
+         */
+        $row['data'][$targetColumnIndex] = implode(' ', $mergedValues);
+
+        error_log(
+            "Routine paulshark: row " .
+                ($row['excelrow'] ?? $rowIndex) .
+                " generated value in column D: " .
+                $row['data'][$targetColumnIndex]
+        );
+    }
+
+    unset($row);
+
+    error_log("Routine paulshark completed.");
+}

public/userarea/routines/richemont_pelletteria.php

@@ -0,0 +1,71 @@
+<?php
+
+/**
+ * Routine: Richemont Pelletteria
+ *
+ * Purpose:
+ * For each imported XLS row:
+ * - read the value from column D
+ * - read the value from column E
+ * - merge the values
+ * - save the final value into column D
+ *
+ * Target:
+ * Column D must be mapped to the destination field in the template mapping.
+ */
+
+function applyRoutine(&$excelData, $routineData = [])
+{
+    /*
+     * This routine does not require external routine data.
+     * Columns are fixed.
+     *
+     * Excel column indexes are zero-based:
+     *
+     * D = 3
+     * E = 4
+     */
+    $targetColumnIndex = 3; // D
+
+    $columnDIndex = 3; // D
+    $columnEIndex = 4; // E
+
+    foreach ($excelData as $rowIndex => &$row) {
+        if (!isset($row['data']) || !is_array($row['data'])) {
+            error_log("Routine Richemont Pelletteria: invalid row structure at index {$rowIndex}.");
+            continue;
+        }
+
+        $valueD = trim((string)($row['data'][$columnDIndex] ?? ''));
+        $valueE = trim((string)($row['data'][$columnEIndex] ?? ''));
+
+        /*
+         * Merge values, ignoring empty values.
+         */
+        $mergedValues = [];
+
+        if ($valueD !== '') {
+            $mergedValues[] = $valueD;
+        }
+
+        if ($valueE !== '') {
+            $mergedValues[] = $valueE;
+        }
+
+        /*
+         * Save final value into column D.
+         */
+        $row['data'][$targetColumnIndex] = implode(' ', $mergedValues);
+
+        error_log(
+            "Routine Richemont Pelletteria: row " .
+                ($row['excelrow'] ?? $rowIndex) .
+                " generated value in column D: " .
+                $row['data'][$targetColumnIndex]
+        );
+    }
+
+    unset($row);
+
+    error_log("Routine Richemont Pelletteria completed.");
+}

public/userarea/routines/valentino_compliance.php

@@ -0,0 +1,114 @@
+<?php
+
+/**
+ * Routine: build_field_347_from_x_columns
+ *
+ * Purpose:
+ * For each imported XLS row:
+ * - check columns P to AT
+ * - when a cell contains "x", take the related column title from row 6
+ * - append the free text value from column AU
+ * - save the final comma-separated text into column P
+ *
+ * Target:
+ * Column P must be mapped to field_id 347.
+ */
+
+function applyRoutine(&$excelData, $routineData = [])
+{
+    /*
+     * Excel column indexes are zero-based:
+     *
+     * P  = 15
+     * AT = 45
+     * AU = 46
+     */
+    $targetColumnIndex = 15; // P
+    $startColumnIndex  = 15; // P
+    $endColumnIndex    = 45; // AT
+    $extraColumnIndex  = 46; // AU
+
+    /*
+     * Headers must come from XLS row 6.
+     * Usually they are passed inside $routineData['xls_headers'].
+     */
+    $headers = $routineData['xls_headers'] ?? [];
+
+    if (empty($headers) || !is_array($headers)) {
+        error_log("Routine field_id 347: missing XLS headers from row 6.");
+        return;
+    }
+
+    foreach ($excelData as $rowIndex => &$row) {
+        if (!isset($row['data']) || !is_array($row['data'])) {
+            error_log("Routine field_id 347: invalid row structure at index {$rowIndex}.");
+            continue;
+        }
+
+        $selectedValues = [];
+
+        /*
+         * Check columns from P to AT.
+         * If the cell contains x, take the related column header.
+         */
+        for ($columnIndex = $startColumnIndex; $columnIndex <= $endColumnIndex; $columnIndex++) {
+            $cellValue = strtolower(trim((string)($row['data'][$columnIndex] ?? '')));
+
+            if ($cellValue === 'x') {
+                $headerTitle = trim((string)($headers[$columnIndex] ?? ''));
+
+                if ($headerTitle !== '') {
+                    $selectedValues[] = $headerTitle;
+                }
+            }
+        }
+
+        /*
+         * Add free text from column AU.
+         */
+        $extraText = '';
+
+        if (isset($row['data'][$extraColumnIndex])) {
+            $extraText = trim((string)$row['data'][$extraColumnIndex]);
+        } elseif (isset($row['data']['AU'])) {
+            $extraText = trim((string)$row['data']['AU']);
+        }
+
+        error_log(
+            "Routine field_id 347: row " .
+                ($row['excelrow'] ?? $rowIndex) .
+                " AU index {$extraColumnIndex} value: " .
+                print_r($row['data'][$extraColumnIndex] ?? null, true) .
+                " | AU key value: " .
+                print_r($row['data']['AU'] ?? null, true)
+        );
+
+        if ($extraText !== '') {
+            $selectedValues[] = $extraText;
+        }
+
+        /*
+         * Remove empty and duplicate values.
+         */
+        $selectedValues = array_values(array_unique(array_filter($selectedValues, function ($value) {
+            return trim((string)$value) !== '';
+        })));
+
+        /*
+         * Save final value into column P.
+         * Column P must be mapped to field_id 347 in the template mapping.
+         */
+        $row['data'][$targetColumnIndex] = implode(', ', $selectedValues);
+
+        error_log(
+            "Routine field_id 347: row " .
+                ($row['excelrow'] ?? $rowIndex) .
+                " generated value: " .
+                $row['data'][$targetColumnIndex]
+        );
+    }
+
+    unset($row);
+
+    error_log("Routine field_id 347 completed.");
+}

public/userarea/save_binding.php

@@ -0,0 +1,91 @@
+<?php
+
+// Salva un binding JSON -> LIMS (custom o fixed) e lo applica ai record appena importati. Ritorna JSON.
+
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once __DIR__ . '/class/db-functions.php';
+require_once __DIR__ . '/class/binding-functions.php';
+include dirname(__DIR__) . '/../extra/auth.php';
+
+header('Content-Type: application/json');
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+if (!Auth::check()) {
+    http_response_code(401);
+    echo json_encode(['success' => false, 'error' => 'Unauthorized']);
+    exit;
+}
+
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+    http_response_code(405);
+    echo json_encode(['success' => false, 'error' => 'Method not allowed']);
+    exit;
+}
+
+$kind        = ($_POST['kind'] ?? 'custom') === 'fixed' ? 'fixed' : 'custom';
+$templateId  = intval($_POST['template_id'] ?? 0);
+$jsonValue   = (string) ($_POST['json_value'] ?? '');
+$limsValueId = intval($_POST['lims_value_id'] ?? 0);
+$limsValue   = (string) ($_POST['lims_value'] ?? '');
+
+$datadbIds = [];
+if (isset($_POST['datadb_ids'])) {
+    $decoded = json_decode($_POST['datadb_ids'], true);
+    if (is_array($decoded)) {
+        $datadbIds = $decoded;
+    }
+}
+
+if ($templateId <= 0 || $jsonValue === '' || $limsValueId <= 0) {
+    http_response_code(422);
+    echo json_encode(['success' => false, 'error' => 'Missing required parameters']);
+    exit;
+}
+
+try {
+    $pdo = DBHandlerSelect::getInstance()->getConnection();
+
+    $createdBy = Auth::user() ? (int) Auth::user()->present()->id : null;
+
+    if ($kind === 'fixed') {
+        $fixedKey = trim($_POST['fixed_field_key'] ?? '');
+        $column = binding_fixed_column($fixedKey);
+        if ($fixedKey === '' || !binding_fixed_is_list($fixedKey) || !$column) {
+            http_response_code(422);
+            echo json_encode(['success' => false, 'error' => 'Invalid fixed field']);
+            exit;
+        }
+
+        binding_upsert_fixed($pdo, $templateId, $fixedKey, $jsonValue, $limsValueId, $limsValue, $createdBy);
+        $applied = !empty($datadbIds) ? binding_apply_to_datadb($pdo, $column, $limsValueId, $datadbIds) : 0;
+    } else {
+        $mappingId = intval($_POST['mapping_id'] ?? 0);
+        $fieldId   = intval($_POST['field_id'] ?? 0);
+        if ($mappingId <= 0) {
+            http_response_code(422);
+            echo json_encode(['success' => false, 'error' => 'Missing mapping_id']);
+            exit;
+        }
+        if ($fieldId <= 0) {
+            $stmt = $pdo->prepare("SELECT field_id FROM template_mapping WHERE id = ?");
+            $stmt->execute([$mappingId]);
+            $fieldId = (int) ($stmt->fetchColumn() ?: 0);
+        }
+
+        binding_upsert($pdo, $templateId, $mappingId, $fieldId, $jsonValue, $limsValueId, $limsValue, $createdBy);
+        $applied = !empty($datadbIds) ? binding_apply_to_details($pdo, $mappingId, $limsValue, $datadbIds) : 0;
+    }
+
+    echo json_encode([
+        'success'       => true,
+        'applied_rows'  => $applied,
+        'kind'          => $kind,
+        'json_value'    => $jsonValue,
+        'lims_value'    => $limsValue,
+        'lims_value_id' => $limsValueId,
+    ]);
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode(['success' => false, 'error' => $e->getMessage()]);
+}

public/userarea/schemi_base_response.json

@@ -46,8 +46,8 @@
         {
             "IdSchemaCustomFields": 48,
             "ConteggioClienti": 0,
-            "Nome": "Standard Generico \/ Generic Standard",
-            "Descrizione": "Schema per tutti i campioni di qualsiasi matrice escluso cuoio\/pelle\r\n\r\n"
+            "Nome": "Standard \/ Generico",
+            "Descrizione": "\r\n"
         },
         {
             "IdSchemaCustomFields": 49,
@@ -730,8 +730,8 @@
         {
             "IdSchemaCustomFields": 177,
             "ConteggioClienti": 0,
-            "Nome": "Phoebe philo ACC",
-            "Descrizione": "(scarpe, borse, cinture, occhiali, gioielleria)\r\n"
+            "Nome": "Phoebe Philo ",
+            "Descrizione": "\r\n\r\n"
         },
         {
             "IdSchemaCustomFields": 178,
@@ -882,6 +882,24 @@
             "ConteggioClienti": 0,
             "Nome": "LIMS-CIM - MAX MARA",
             "Descrizione": "Schema per MAX MARA scambio dati Database"
+        },
+        {
+            "IdSchemaCustomFields": 203,
+            "ConteggioClienti": 0,
+            "Nome": "Vince",
+            "Descrizione": "Schema per tutti i campioni di VINCE\r\n\r\n"
+        },
+        {
+            "IdSchemaCustomFields": 204,
+            "ConteggioClienti": 0,
+            "Nome": "Max Mara",
+            "Descrizione": "Schema da usare per Max Mara\r\n"
+        },
+        {
+            "IdSchemaCustomFields": 205,
+            "ConteggioClienti": 0,
+            "Nome": "Chanel Flammability",
+            "Descrizione": "Schema per Chanel Flammability\r\n"
         }
     ]
 }

public/userarea/search_customfield_values.php

@@ -2,7 +2,11 @@
 require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
 require_once __DIR__ . '/class/db-functions.php';
 include dirname(__DIR__) . '/../extra/auth.php';
-if (!Auth::check()) { http_response_code(401); echo json_encode(['error' => 'Unauthorized']); exit; }
+if (!Auth::check()) {
+    http_response_code(401);
+    echo json_encode(['error' => 'Unauthorized']);
+    exit;
+}
 
 require_once __DIR__ . '/class/VisualLimsApiClient.class.php';
 
@@ -13,7 +17,8 @@ error_reporting(E_ALL);
 $fieldId = intval($_GET['field_id'] ?? 0);
 $q = mb_strtolower(trim($_GET['q'] ?? ''));
 $id = isset($_GET['id']) ? intval($_GET['id']) : null;
-$limit = max(1, min(50, intval($_GET['limit'] ?? 20)));
+$rawLimit = intval($_GET['limit'] ?? 20);
+$limit = $rawLimit <= 0 ? 0 : max(1, min(500, $rawLimit));
 
 if (!$fieldId) {
     echo json_encode(['results' => []]);
@@ -52,7 +57,7 @@ try {
         $text = $v['Valore'] ?? '';
         if ($q === '' || mb_strpos(mb_strtolower($text), $q) !== false) {
             $results[] = ['id' => $v['IdCustomFieldsValue'], 'text' => $text];
-            if (count($results) >= $limit) break;
+            if ($limit > 0 && count($results) >= $limit) break;
         }
     }
 

public/userarea/search_fixed_field_values.php

@@ -0,0 +1,65 @@
+<?php
+
+// Select2 source of LIMS values for a fixed field. Returns {results:[{id,text}]}.
+// Params: field_key (required), template_id (required, drives client-dependent lists),
+//         q (search), id (resolve a single value for preselect), limit.
+
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once __DIR__ . '/class/db-functions.php';
+require_once __DIR__ . '/class/binding-functions.php';
+include dirname(__DIR__) . '/../extra/auth.php';
+
+header('Content-Type: application/json');
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+if (!Auth::check()) {
+    http_response_code(401);
+    echo json_encode(['error' => 'Unauthorized']);
+    exit;
+}
+
+$fieldKey   = trim($_GET['field_key'] ?? '');
+$templateId = intval($_GET['template_id'] ?? 0);
+$q          = mb_strtolower(trim($_GET['q'] ?? ''));
+$id         = isset($_GET['id']) ? intval($_GET['id']) : null;
+$rawLimit   = intval($_GET['limit'] ?? 30);
+$limit      = $rawLimit <= 0 ? 0 : max(1, min(500, $rawLimit));
+
+if ($fieldKey === '' || !binding_fixed_is_list($fieldKey)) {
+    echo json_encode(['results' => []]);
+    exit;
+}
+
+try {
+    $pdo = DBHandlerSelect::getInstance()->getConnection();
+    $values = binding_get_fixed_values($pdo, $fieldKey, $templateId);
+
+    if ($id !== null) {
+        foreach ($values as $v) {
+            if ((int) $v['id'] === $id) {
+                echo json_encode(['results' => [['id' => $v['id'], 'text' => $v['text']]]]);
+                exit;
+            }
+        }
+        echo json_encode(['results' => []]);
+        exit;
+    }
+
+    $results = [];
+    foreach ($values as $v) {
+        $text = (string) $v['text'];
+        if ($q === '' || mb_strpos(mb_strtolower($text), $q) !== false) {
+            $results[] = ['id' => $v['id'], 'text' => $text];
+            if ($limit > 0 && count($results) >= $limit) {
+                break;
+            }
+        }
+    }
+
+    usort($results, fn($a, $b) => strcasecmp($a['text'], $b['text']));
+    echo json_encode(['results' => $results]);
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode(['error' => $e->getMessage()]);
+}

public/userarea/skip_binding.php

@@ -0,0 +1,72 @@
+<?php
+
+// "Nessuna corrispondenza": azzera il valore importato (custom o fixed) e rimuove il binding. Ritorna JSON.
+
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once __DIR__ . '/class/db-functions.php';
+require_once __DIR__ . '/class/binding-functions.php';
+include dirname(__DIR__) . '/../extra/auth.php';
+
+header('Content-Type: application/json');
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+if (!Auth::check()) {
+    http_response_code(401);
+    echo json_encode(['success' => false, 'error' => 'Unauthorized']);
+    exit;
+}
+
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+    http_response_code(405);
+    echo json_encode(['success' => false, 'error' => 'Method not allowed']);
+    exit;
+}
+
+$kind       = ($_POST['kind'] ?? 'custom') === 'fixed' ? 'fixed' : 'custom';
+$templateId = intval($_POST['template_id'] ?? 0);
+$jsonValue  = (string) ($_POST['json_value'] ?? '');
+
+$datadbIds = [];
+if (isset($_POST['datadb_ids'])) {
+    $decoded = json_decode($_POST['datadb_ids'], true);
+    if (is_array($decoded)) {
+        $datadbIds = $decoded;
+    }
+}
+
+if ($jsonValue === '') {
+    http_response_code(422);
+    echo json_encode(['success' => false, 'error' => 'Missing json_value']);
+    exit;
+}
+
+try {
+    $pdo = DBHandlerSelect::getInstance()->getConnection();
+
+    if ($kind === 'fixed') {
+        $fixedKey = trim($_POST['fixed_field_key'] ?? '');
+        $column = binding_fixed_column($fixedKey);
+        if ($fixedKey === '' || !binding_fixed_is_list($fixedKey) || !$column || $templateId <= 0) {
+            http_response_code(422);
+            echo json_encode(['success' => false, 'error' => 'Invalid fixed field']);
+            exit;
+        }
+        $cleared = !empty($datadbIds) ? binding_apply_to_datadb($pdo, $column, null, $datadbIds) : 0;
+        binding_delete_target($pdo, binding_target_fixed($templateId, $fixedKey), $jsonValue);
+    } else {
+        $mappingId = intval($_POST['mapping_id'] ?? 0);
+        if ($mappingId <= 0) {
+            http_response_code(422);
+            echo json_encode(['success' => false, 'error' => 'Missing mapping_id']);
+            exit;
+        }
+        $cleared = !empty($datadbIds) ? binding_apply_to_details($pdo, $mappingId, '', $datadbIds) : 0;
+        binding_delete_target($pdo, binding_target_custom($mappingId), $jsonValue);
+    }
+
+    echo json_encode(['success' => true, 'cleared_rows' => $cleared]);
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode(['success' => false, 'error' => $e->getMessage()]);
+}

public/userarea/templates_dashboard.php

@@ -78,6 +78,51 @@
             color: #198754;
         }
 
+        .badge-source-pdf {
+            background-color: #fff3cd;
+            color: #b58100;
+        }
+
+        .type-filter-bar {
+            display: flex;
+            gap: 8px;
+            flex-wrap: wrap;
+            align-items: center;
+            margin-bottom: 12px;
+        }
+
+        .type-filter-btn {
+            border: 0;
+            border-radius: 999px;
+            padding: 7px 14px;
+            font-size: 13px;
+            font-weight: 700;
+            color: #fff;
+            opacity: 0.35;
+            transition: all 0.15s ease-in-out;
+        }
+
+        .type-filter-btn.active {
+            opacity: 1;
+            box-shadow: 0 2px 8px rgba(0, 0, 0, 0.18);
+        }
+
+        .type-filter-btn[data-type="XLS"] {
+            background-color: #0d6efd;
+        }
+
+        .type-filter-btn[data-type="API"] {
+            background-color: #198754;
+        }
+
+        .type-filter-btn[data-type="PDF"] {
+            background-color: #b58100;
+        }
+
+        .type-filter-btn:hover {
+            transform: translateY(-1px);
+        }
+
         #xlsTemplatesTable {
             font-size: 13px;
         }
@@ -136,79 +181,92 @@
                     </div>
 
                     <div class="card-body">
+
+                        <div class="type-filter-bar">
+                            <span class="text-muted fw-semibold me-1">Filter by type:</span>
+
+                            <button type="button" class="type-filter-btn active" data-type="XLS">
+                                XLS
+                            </button>
+
+                            <button type="button" class="type-filter-btn active" data-type="API">
+                                JSON/API
+                            </button>
+
+                            <button type="button" class="type-filter-btn active" data-type="PDF">
+                                PDF
+                            </button>
+                        </div>
+
                         <div class="table-responsive">
-                            <table id="xlsTemplatesTable" class="table table-striped table-bordered table-sm w-100">
+                            <table id="xlsTemplatesTable" class="table table-striped table-bordered align-middle w-100">
                                 <thead>
                                     <tr>
-                                        <th><?= htmlspecialchars($action, ENT_QUOTES, 'UTF-8'); ?></th>
-                                        <th><?= htmlspecialchars($nametemplate, ENT_QUOTES, 'UTF-8'); ?></th>
+                                        <th>Actions</th>
+                                        <th>Template Name</th>
                                         <th>Type</th>
                                         <th>Row</th>
                                         <th>Col</th>
-                                        <th><?= htmlspecialchars($desctemplate, ENT_QUOTES, 'UTF-8'); ?></th>
+                                        <th>Description</th>
                                         <th>Client</th>
                                         <th>Button</th>
                                         <th>Status</th>
                                     </tr>
                                 </thead>
-                                <tbody>
-                                    <!-- DataTables will populate this section automatically -->
-                                </tbody>
+                                <tbody></tbody>
                             </table>
                         </div>
+
                     </div>
                 </div>
+                <!--end page wrapper -->
 
+                <!--start overlay-->
+                <div class="overlay toggle-icon"></div>
+                <!--end overlay-->
+
+                <!--Start Back To Top Button-->
+                <a href="javaScript:;" class="back-to-top"><i class='bx bxs-up-arrow-alt'></i></a>
+                <!--End Back To Top Button-->
+
+                <?php include('include/footer.php'); ?>
             </div>
-        </div>
-        <!--end page wrapper -->
+            <!--end wrapper-->
 
-        <!--start overlay-->
-        <div class="overlay toggle-icon"></div>
-        <!--end overlay-->
+            <?php include('jsinclude.php'); ?>
+            <script src="https://cdn.datatables.net/1.13.6/js/jquery.dataTables.min.js"></script>
+            <script src="https://cdn.datatables.net/1.13.6/js/dataTables.bootstrap5.min.js"></script>
 
-        <!--Start Back To Top Button-->
-        <a href="javaScript:;" class="back-to-top"><i class='bx bxs-up-arrow-alt'></i></a>
-        <!--End Back To Top Button-->
+            <script>
+                $(document).ready(function() {
 
-        <?php include('include/footer.php'); ?>
-    </div>
-    <!--end wrapper-->
+                    const urlParams = new URLSearchParams(window.location.search);
 
-    <?php include('jsinclude.php'); ?>
-    <script src="https://cdn.datatables.net/1.13.6/js/jquery.dataTables.min.js"></script>
-    <script src="https://cdn.datatables.net/1.13.6/js/dataTables.bootstrap5.min.js"></script>
+                    if (urlParams.get('cloned') === '1') {
+                        Swal.fire({
+                            title: "Template cloned",
+                            text: "The template was cloned successfully.",
+                            icon: "success",
+                            confirmButtonText: "OK"
+                        });
 
-    <script>
-        $(document).ready(function() {
-
-            const urlParams = new URLSearchParams(window.location.search);
-
-            if (urlParams.get('cloned') === '1') {
-                Swal.fire({
-                    title: "Template cloned",
-                    text: "The template was cloned successfully.",
-                    icon: "success",
-                    confirmButtonText: "OK"
-                });
-
-                const cleanUrl = window.location.pathname;
-                window.history.replaceState({}, document.title, cleanUrl);
-            }
-            $('#xlsTemplatesTable').DataTable({
-                processing: true,
-                serverSide: false,
-                ajax: 'load_templates.php',
-                pageLength: 50,
-                autoWidth: false,
-                columns: [{
-                        data: 'id',
-                        orderable: false,
-                        searchable: false,
-                        title: "Actions",
-                        className: "table-actions text-center",
-                        render: function(data, type, row) {
-                            return `
+                        const cleanUrl = window.location.pathname;
+                        window.history.replaceState({}, document.title, cleanUrl);
+                    }
+                    const templatesTable = $('#xlsTemplatesTable').DataTable({
+                        processing: true,
+                        serverSide: false,
+                        ajax: 'load_templates.php',
+                        pageLength: 50,
+                        autoWidth: false,
+                        columns: [{
+                                data: 'id',
+                                orderable: false,
+                                searchable: false,
+                                title: "Actions",
+                                className: "table-actions text-center",
+                                render: function(data, type, row) {
+                                    return `
                                     <div class="d-flex justify-content-center gap-1">
                                         <a href="edit_template_xls.php?id=${data}" class="btn btn-sm btn-primary" title="Edit">
                                             <i class="bx bx-edit-alt"></i>
@@ -227,121 +285,169 @@
                                         </button>
                                     </div>
                                 `;
-                        }
-                    },
-                    {
-                        data: 'name',
-                        title: "Template Name",
-                        className: "name-cell"
-                    },
-                    {
-                        data: 'source_type',
-                        title: "Type",
-                        className: "text-center",
-                        render: function(data, type, row) {
-                            const sourceType = (data || 'XLS').toUpperCase();
-
-                            if (type === 'display') {
-                                if (sourceType === 'API') {
-                                    return '<span class="badge-source badge-source-api">API</span>';
                                 }
-                                return '<span class="badge-source badge-source-xls">XLS</span>';
-                            }
+                            },
+                            {
+                                data: 'name',
+                                title: "Template Name",
+                                className: "name-cell"
+                            },
+                            {
+                                data: 'source_type',
+                                title: "Type",
+                                className: "text-center",
+                                render: function(data, type, row) {
+                                    let sourceType = (data || 'XLS').toUpperCase();
 
-                            return sourceType;
-                        }
-                    },
-                    {
-                        data: 'header_row',
-                        title: "Row",
-                        className: "text-center",
-                        defaultContent: ''
-                    },
-                    {
-                        data: 'start_column',
-                        title: "Col",
-                        className: "text-center",
-                        defaultContent: ''
-                    },
-                    {
-                        data: 'description',
-                        title: "Description",
-                        className: "description-cell",
-                        defaultContent: 'No description'
-                    },
-                    {
-                        data: null,
-                        title: "Client",
-                        className: "client-cell",
-                        render: function(data, type, row) {
-                            const clientName = row.clientname || "No client";
-                            const clientId = row.idclient || "N/A";
-                            return `${clientName} <small class="text-muted">(ID: ${clientId})</small>`;
-                        }
-                    },
-                    {
-                        data: 'button_label',
-                        title: "Button",
-                        className: "button-cell",
-                        defaultContent: 'Click Me'
-                    },
-                    {
-                        data: 'status',
-                        title: "Status",
-                        orderable: false,
-                        searchable: false,
-                        className: "text-center",
-                        render: function(status, type, row) {
-                            let checked = (status === "active") ? "checked" : "";
-                            return `
+                                    // Treat JSON as API group for dashboard filter
+                                    if (sourceType === 'JSON') {
+                                        sourceType = 'API';
+                                    }
+
+                                    if (type === 'display') {
+                                        if (sourceType === 'API') {
+                                            return '<span class="badge-source badge-source-api">JSON/API</span>';
+                                        }
+
+                                        if (sourceType === 'PDF') {
+                                            return '<span class="badge-source badge-source-pdf">PDF</span>';
+                                        }
+
+                                        return '<span class="badge-source badge-source-xls">XLS</span>';
+                                    }
+
+                                    return sourceType;
+                                }
+                            },
+                            {
+                                data: 'header_row',
+                                title: "Row",
+                                className: "text-center",
+                                defaultContent: ''
+                            },
+                            {
+                                data: 'start_column',
+                                title: "Col",
+                                className: "text-center",
+                                defaultContent: ''
+                            },
+                            {
+                                data: 'description',
+                                title: "Description",
+                                className: "description-cell",
+                                defaultContent: 'No description'
+                            },
+                            {
+                                data: null,
+                                title: "Client",
+                                className: "client-cell",
+                                render: function(data, type, row) {
+                                    const clientName = row.clientname || "No client";
+                                    const clientId = row.idclient || "N/A";
+                                    return `${clientName} <small class="text-muted">(ID: ${clientId})</small>`;
+                                }
+                            },
+                            {
+                                data: 'button_label',
+                                title: "Button",
+                                className: "button-cell",
+                                defaultContent: 'Click Me'
+                            },
+                            {
+                                data: 'status',
+                                title: "Status",
+                                orderable: false,
+                                searchable: false,
+                                className: "text-center",
+                                render: function(status, type, row) {
+                                    let checked = (status === "active") ? "checked" : "";
+                                    return `
                                 <label class="switch">
                                     <input type="checkbox" class="toggle-status" data-id="${row.id}" ${checked}>
                                     <span class="slider round"></span>
                                 </label>
                             `;
+                                }
+                            }
+                        ],
+                        dom: '<"card-header border-bottom p-3"<"d-flex align-items-center"<"card-title mb-0 flex-grow-1"f>>>rt<"card-footer border-top p-3"<"d-flex align-items-center"<"me-auto"l><"d-flex gap-2"ip>>>',
+                        lengthMenu: [10, 25, 50, 100],
+                        order: [
+                            [1, 'asc']
+                        ],
+                        language: {
+                            search: "Cerca:",
+                            lengthMenu: "Mostra _MENU_ elementi",
+                            info: "Visualizzando da _START_ a _END_ di _TOTAL_ elementi",
+                            paginate: {
+                                first: "<?= isset($langdatatables['paginate_first']) ? $langdatatables['paginate_first'] : 'Primo' ?>",
+                                last: "<?= isset($langdatatables['paginate_last']) ? $langdatatables['paginate_last'] : 'Ultimo' ?>",
+                                next: "<?= isset($langdatatables['paginate_next']) ? $langdatatables['paginate_next'] : 'Successivo' ?>",
+                                previous: "<?= isset($langdatatables['paginate_previous']) ? $langdatatables['paginate_previous'] : 'Precedente' ?>"
+                            }
                         }
-                    }
-                ],
-                dom: '<"card-header border-bottom p-3"<"d-flex align-items-center"<"card-title mb-0 flex-grow-1"f>>>rt<"card-footer border-top p-3"<"d-flex align-items-center"<"me-auto"l><"d-flex gap-2"ip>>>',
-                lengthMenu: [10, 25, 50, 100],
-                order: [
-                    [1, 'asc']
-                ],
-                language: {
-                    search: "Cerca:",
-                    lengthMenu: "Mostra _MENU_ elementi",
-                    info: "Visualizzando da _START_ a _END_ di _TOTAL_ elementi",
-                    paginate: {
-                        first: "<?= isset($langdatatables['paginate_first']) ? $langdatatables['paginate_first'] : 'Primo' ?>",
-                        last: "<?= isset($langdatatables['paginate_last']) ? $langdatatables['paginate_last'] : 'Ultimo' ?>",
-                        next: "<?= isset($langdatatables['paginate_next']) ? $langdatatables['paginate_next'] : 'Successivo' ?>",
-                        previous: "<?= isset($langdatatables['paginate_previous']) ? $langdatatables['paginate_previous'] : 'Precedente' ?>"
-                    }
-                }
-            });
-        });
+                    });
+                    const activeSourceTypes = {
+                        XLS: true,
+                        API: true,
+                        PDF: true
+                    };
 
-        function confirmDelete(id) {
-            Swal.fire({
-                title: "Are you sure?",
-                text: "This action cannot be undone!",
-                icon: "warning",
-                showCancelButton: true,
-                confirmButtonColor: "#d33",
-                cancelButtonColor: "#3085d6",
-                confirmButtonText: "Yes, delete it!",
-                cancelButtonText: "Cancel"
-            }).then((result) => {
-                if (result.isConfirmed) {
-                    window.location.href = `delete_template_xls.php?id=${id}`;
-                }
-            });
-        }
+                    $.fn.dataTable.ext.search.push(function(settings, data, dataIndex) {
+                        if (settings.nTable.id !== 'xlsTemplatesTable') {
+                            return true;
+                        }
 
-        function confirmClone(id, templateName) {
-            Swal.fire({
-                title: "Clone template?",
-                html: `
+                        const api = new $.fn.dataTable.Api(settings);
+                        const rowData = api.row(dataIndex).data();
+
+                        let sourceType = ((rowData && rowData.source_type) ? rowData.source_type : 'XLS').toUpperCase();
+
+                        if (sourceType === 'JSON') {
+                            sourceType = 'API';
+                        }
+
+                        return activeSourceTypes[sourceType] === true;
+                    });
+
+                    $('.type-filter-btn').on('click', function() {
+                        const type = $(this).data('type');
+
+                        activeSourceTypes[type] = !activeSourceTypes[type];
+                        $(this).toggleClass('active', activeSourceTypes[type]);
+
+                        const hasAtLeastOneActive = Object.values(activeSourceTypes).some(Boolean);
+
+                        if (!hasAtLeastOneActive) {
+                            activeSourceTypes[type] = true;
+                            $(this).addClass('active');
+                        }
+
+                        $('#xlsTemplatesTable').DataTable().draw();
+                    });
+                });
+
+                function confirmDelete(id) {
+                    Swal.fire({
+                        title: "Are you sure?",
+                        text: "This action cannot be undone!",
+                        icon: "warning",
+                        showCancelButton: true,
+                        confirmButtonColor: "#d33",
+                        cancelButtonColor: "#3085d6",
+                        confirmButtonText: "Yes, delete it!",
+                        cancelButtonText: "Cancel"
+                    }).then((result) => {
+                        if (result.isConfirmed) {
+                            window.location.href = `delete_template_xls.php?id=${id}`;
+                        }
+                    });
+                }
+
+                function confirmClone(id, templateName) {
+                    Swal.fire({
+                        title: "Clone template?",
+                        html: `
             <div class="text-start">
                 <p class="mb-2">You are about to clone this template:</p>
                 <strong>${templateName}</strong>
@@ -350,45 +456,45 @@
                 </p>
             </div>
         `,
-                icon: "question",
-                showCancelButton: true,
-                confirmButtonColor: "#ffc107",
-                cancelButtonColor: "#6c757d",
-                confirmButtonText: "Yes, clone it",
-                cancelButtonText: "Cancel"
-            }).then((result) => {
-                if (result.isConfirmed) {
-                    window.location.href = `clone_template.php?id=${id}`;
+                        icon: "question",
+                        showCancelButton: true,
+                        confirmButtonColor: "#ffc107",
+                        cancelButtonColor: "#6c757d",
+                        confirmButtonText: "Yes, clone it",
+                        cancelButtonText: "Cancel"
+                    }).then((result) => {
+                        if (result.isConfirmed) {
+                            window.location.href = `clone_template.php?id=${id}`;
+                        }
+                    });
                 }
-            });
-        }
 
-        $(document).on("change", ".toggle-status", function() {
-            let templateId = $(this).data("id");
-            let newStatus = $(this).is(":checked") ? "active" : "inactive";
+                $(document).on("change", ".toggle-status", function() {
+                    let templateId = $(this).data("id");
+                    let newStatus = $(this).is(":checked") ? "active" : "inactive";
 
-            $.ajax({
-                url: "update_template_status.php",
-                type: "POST",
-                dataType: "json",
-                data: {
-                    id: templateId,
-                    status: newStatus
-                },
-                success: function(response) {
-                    if (response.success) {
-                        console.log("Status updated successfully.");
-                    } else {
-                        console.error("Error updating status:", response.message);
-                        alert("Error updating status: " + response.message);
-                    }
-                },
-                error: function(xhr) {
-                    console.error("AJAX error:", xhr.responseText);
-                }
-            });
-        });
-    </script>
+                    $.ajax({
+                        url: "update_template_status.php",
+                        type: "POST",
+                        dataType: "json",
+                        data: {
+                            id: templateId,
+                            status: newStatus
+                        },
+                        success: function(response) {
+                            if (response.success) {
+                                console.log("Status updated successfully.");
+                            } else {
+                                console.error("Error updating status:", response.message);
+                                alert("Error updating status: " + response.message);
+                            }
+                        },
+                        error: function(xhr) {
+                            console.error("AJAX error:", xhr.responseText);
+                        }
+                    });
+                });
+            </script>
 
 </body>
 

public/userarea/trial.php

@@ -0,0 +1,23 @@
+<?php
+require_once "class/VisualLimsApiClient.class.php";
+include('include/headscript.php');
+
+header("Content-Type: application/json; charset=utf-8");
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    $commessaId = 577818;
+
+    $endpoint = "CommessaWeb({$commessaId})?\$expand=CommesseCustomFields(\$expand=CustomField)";
+
+    $result = $api->get($endpoint);
+
+    echo json_encode($result, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode([
+        "success" => false,
+        "error" => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+}

public/userarea/update_all_template_mapping_orders.php

@@ -0,0 +1,107 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+require_once dirname(__FILE__) . '/include/headscript.php';
+
+header('Content-Type: application/json');
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $db = DBHandlerSelect::getInstance();
+    $pdo = $db->getConnection();
+
+    $api = VisualLimsApiClient::getInstance();
+
+    // Get all schemas currently used in template_mapping
+    $stmtSchemas = $pdo->query("
+        SELECT DISTINCT schema_id
+        FROM template_mapping
+        WHERE schema_id IS NOT NULL
+          AND schema_id > 0
+        ORDER BY schema_id ASC
+    ");
+
+    $schemaIds = $stmtSchemas->fetchAll(PDO::FETCH_COLUMN);
+
+    if (empty($schemaIds)) {
+        throw new Exception('No schema_id found in template_mapping');
+    }
+
+    $stmtUpdate = $pdo->prepare("
+        UPDATE template_mapping
+        SET field_order = ?
+        WHERE schema_id = ?
+          AND field_id = ?
+    ");
+
+    $summary = [];
+    $totalUpdated = 0;
+
+    foreach ($schemaIds as $schemaId) {
+        $schemaId = (int)$schemaId;
+
+        $endpoint = "SchemaCustomField($schemaId)?\$expand=SchemiCustomFieldsDettagli(\$expand=CustomField)";
+        $data = $api->get($endpoint);
+
+        if (empty($data['SchemiCustomFieldsDettagli']) || !is_array($data['SchemiCustomFieldsDettagli'])) {
+            $summary[] = [
+                'schema_id' => $schemaId,
+                'success' => false,
+                'message' => 'No SchemiCustomFieldsDettagli found'
+            ];
+            continue;
+        }
+
+        $schemaUpdated = 0;
+        $notFound = [];
+
+        foreach ($data['SchemiCustomFieldsDettagli'] as $detail) {
+            $order = intval($detail['Ordine'] ?? 9999);
+            $fieldId = intval($detail['CustomField']['IdCustomField'] ?? 0);
+
+            if ($fieldId <= 0) {
+                continue;
+            }
+
+            $stmtUpdate->execute([
+                $order,
+                $schemaId,
+                $fieldId
+            ]);
+
+            if ($stmtUpdate->rowCount() > 0) {
+                $schemaUpdated++;
+                $totalUpdated++;
+            } else {
+                $notFound[] = [
+                    'field_id' => $fieldId,
+                    'order' => $order,
+                    'label' => $detail['CustomField']['Titolo'] ?? ''
+                ];
+            }
+        }
+
+        $summary[] = [
+            'schema_id' => $schemaId,
+            'success' => true,
+            'updated' => $schemaUpdated,
+            'not_found_count' => count($notFound),
+            'not_found' => $notFound
+        ];
+    }
+
+    echo json_encode([
+        'success' => true,
+        'schemas_processed' => count($schemaIds),
+        'total_updated' => $totalUpdated,
+        'summary' => $summary
+    ], JSON_PRETTY_PRINT);
+} catch (Exception $e) {
+    http_response_code(500);
+
+    echo json_encode([
+        'success' => false,
+        'message' => $e->getMessage()
+    ], JSON_PRETTY_PRINT);
+}

public/userarea/update_fixed_field.php

@@ -3,33 +3,84 @@ header('Content-Type: application/json');
 
 require_once(__DIR__ . '/include/headscript.php');
 
-$db = DBHandlerSelect::getInstance();
-$pdo = $db->getConnection();
+try {
+    $db = DBHandlerSelect::getInstance();
+    $pdo = $db->getConnection();
 
-$input = json_decode(file_get_contents('php://input'), true);
+    $input = json_decode(file_get_contents('php://input'), true);
 
-$id    = (int)($input['id'] ?? 0);
-$field = (string)($input['field'] ?? '');
-$value = $input['value'] ?? null;
+    $id    = (int)($input['id'] ?? 0);
+    $field = (string)($input['field'] ?? '');
+    $value = $input['value'] ?? null;
 
-if ($id <= 0) {
-    echo json_encode(['success' => false, 'message' => 'Invalid id']);
-    exit;
+    if ($id <= 0) {
+        echo json_encode(['success' => false, 'message' => 'Invalid id']);
+        exit;
+    }
+
+    $allowed = [
+        'default_value',
+        'default_source',
+        'json_node',
+        'is_visible_import',
+        'is_required'
+    ];
+
+    if (!in_array($field, $allowed, true)) {
+        echo json_encode(['success' => false, 'message' => 'Invalid field: ' . $field]);
+        exit;
+    }
+
+    if ($field === 'is_visible_import' || $field === 'is_required') {
+        $value = ((int)$value === 1) ? 1 : 0;
+    }
+
+    if ($field === 'default_source') {
+        $value = (string)$value;
+
+        if (!in_array($value, ['manual', 'json'], true)) {
+            echo json_encode(['success' => false, 'message' => 'Invalid default_source']);
+            exit;
+        }
+
+        // If the user goes back to manual, clear the JSON node
+        if ($value === 'manual') {
+            $sql = "
+                UPDATE template_fixed_mapping 
+                SET default_source = :val, json_node = NULL 
+                WHERE id = :id
+            ";
+            $stmt = $pdo->prepare($sql);
+            $ok = $stmt->execute([
+                ':val' => $value,
+                ':id'  => $id
+            ]);
+
+            echo json_encode(['success' => (bool)$ok]);
+            exit;
+        }
+    }
+
+    if ($field === 'json_node') {
+        $value = trim((string)$value);
+
+        if ($value === '') {
+            $value = null;
+        }
+    }
+
+    $sql = "UPDATE template_fixed_mapping SET {$field} = :val WHERE id = :id";
+    $stmt = $pdo->prepare($sql);
+
+    $ok = $stmt->execute([
+        ':val' => $value,
+        ':id'  => $id
+    ]);
+
+    echo json_encode(['success' => (bool)$ok]);
+} catch (Throwable $e) {
+    echo json_encode([
+        'success' => false,
+        'message' => $e->getMessage()
+    ]);
 }
-
-$allowed = ['default_value', 'is_visible_import', 'is_required'];
-if (!in_array($field, $allowed, true)) {
-    echo json_encode(['success' => false, 'message' => 'Invalid field']);
-    exit;
-}
-
-if ($field === 'is_visible_import' || $field === 'is_required') {
-    $value = ((int)$value === 1) ? 1 : 0;
-}
-
-
-$sql = "UPDATE template_fixed_mapping SET {$field} = :val WHERE id = :id";
-$stmt = $pdo->prepare($sql);
-$ok = $stmt->execute([':val' => $value, ':id' => $id]);
-
-echo json_encode(['success' => (bool)$ok]);

public/userarea/update_main_field.php

@@ -3,14 +3,18 @@ ini_set('display_errors', 1);
 ini_set('display_startup_errors', 1);
 error_reporting(E_ALL);
 
-include('include/headscript.php'); // Assumi che questo includa la connessione DB
+include('include/headscript.php');
+
+header('Content-Type: application/json');
 
-// Recupera il payload JSON
 $data = json_decode(file_get_contents('php://input'), true);
 
-$template_id = intval($data['template_id']);
-$mapping_id = intval($data['mapping_id']);
-$value = intval($data['value']);
+$template_id = intval($data['template_id'] ?? 0);
+$mapping_id  = intval($data['mapping_id'] ?? 0);
+$value       = intval($data['value'] ?? 0);
+
+// IMPORTANT: main_field may be ENUM('0','1'), so use string values
+$mainValue = ($value === 1) ? '1' : '0';
 
 if ($template_id <= 0 || $mapping_id <= 0) {
     echo json_encode(['success' => false, 'message' => 'Invalid IDs']);
@@ -23,19 +27,47 @@ $pdo = $db->getConnection();
 try {
     $pdo->beginTransaction();
 
-    if ($value === 1) {
-        // Setta tutti main_field a 0 per questo template
-        $stmt = $pdo->prepare("UPDATE template_mapping SET main_field = 0 WHERE template_id = ?");
-        $stmt->execute([$template_id]);
+    if ($mainValue === '1') {
+        $stmt = $pdo->prepare("
+            SELECT COUNT(*)
+            FROM template_mapping
+            WHERE template_id = ?
+              AND main_field = '1'
+              AND id <> ?
+        ");
+        $stmt->execute([$template_id, $mapping_id]);
+        $currentMainCount = (int)$stmt->fetchColumn();
+
+        if ($currentMainCount >= 2) {
+            $pdo->rollBack();
+
+            echo json_encode([
+                'success' => false,
+                'message' => 'Maximum 2 Main fields allowed',
+                'currentMainCount' => $currentMainCount
+            ]);
+            exit;
+        }
     }
 
-    // Setta il valore per questo mapping
-    $stmt = $pdo->prepare("UPDATE template_mapping SET main_field = ? WHERE id = ? AND template_id = ?");
-    $stmt->execute([$value, $mapping_id, $template_id]);
+    $stmt = $pdo->prepare("
+        UPDATE template_mapping
+        SET main_field = ?
+        WHERE id = ?
+          AND template_id = ?
+    ");
+    $stmt->execute([$mainValue, $mapping_id, $template_id]);
 
     $pdo->commit();
+
     echo json_encode(['success' => true]);
 } catch (Exception $e) {
-    $pdo->rollBack();
-    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
+    if ($pdo->inTransaction()) {
+        $pdo->rollBack();
+    }
+
+    echo json_encode([
+        'success' => false,
+        'message' => $e->getMessage()
+    ]);
 }

public/userarea/update_schemajson.php

@@ -82,6 +82,7 @@ try {
             template_id,
             schema_id,
             field_id,
+            field_order,
             data_type,
             is_required,
             default_value,
@@ -97,6 +98,7 @@ try {
             :template_id,
             :schema_id,
             :field_id,
+            :field_order,
             :data_type,
             :is_required,
             :default_value,
@@ -116,6 +118,7 @@ try {
         UPDATE template_mapping
         SET
             schema_id = :schema_id,
+            field_order = :field_order,
             data_type = :data_type,
             is_required = :is_required,
             default_value = :default_value,
@@ -172,6 +175,7 @@ try {
 
         $data = [
             ':schema_id'         => $schema_id,
+            ':field_order'       => (int)($field['Ordine'] ?? 9999),
             ':data_type'         => $newDataType,
             ':is_required'       => !empty($custom_field['ObbligatorioWeb']) ? 1 : 0,
             ':default_value'     => $custom_field['ValoreDefault'] ?? null,
@@ -234,7 +238,6 @@ try {
 
     $response["success"] = true;
     $response["message"] = "Schema JSON updated, mappings synchronized, removed fields deleted, and changed fields updated successfully.";
-
 } catch (Exception $e) {
     if (isset($pdo) && $pdo->inTransaction()) {
         $pdo->rollback();
@@ -243,4 +246,4 @@ try {
     $response["message"] = $e->getMessage();
 }
 
-echo json_encode($response);
+echo json_encode($response);

public/userarea/update_template_mapping_order.php

@@ -0,0 +1,79 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+require_once dirname(__FILE__) . '/include/headscript.php';
+
+header('Content-Type: application/json');
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $schemaId = isset($_GET['schema_id']) && is_numeric($_GET['schema_id'])
+        ? intval($_GET['schema_id'])
+        : 0;
+
+    if ($schemaId <= 0) {
+        throw new Exception('Missing or invalid schema_id');
+    }
+
+    $api = VisualLimsApiClient::getInstance();
+
+    $endpoint = "SchemaCustomField($schemaId)?\$expand=SchemiCustomFieldsDettagli(\$expand=CustomField)";
+    $data = $api->get($endpoint);
+
+    if (empty($data['SchemiCustomFieldsDettagli']) || !is_array($data['SchemiCustomFieldsDettagli'])) {
+        throw new Exception('No SchemiCustomFieldsDettagli found');
+    }
+
+    $db = DBHandlerSelect::getInstance();
+    $pdo = $db->getConnection();
+
+    $updated = 0;
+    $notFound = [];
+
+    $stmt = $pdo->prepare("
+        UPDATE template_mapping
+        SET field_order = ?
+        WHERE schema_id = ?
+          AND field_id = ?
+    ");
+
+    foreach ($data['SchemiCustomFieldsDettagli'] as $detail) {
+        $order = intval($detail['Ordine'] ?? 9999);
+        $fieldId = intval($detail['CustomField']['IdCustomField'] ?? 0);
+
+        if ($fieldId <= 0) {
+            continue;
+        }
+
+        $stmt->execute([
+            $order,
+            $schemaId,
+            $fieldId
+        ]);
+
+        if ($stmt->rowCount() > 0) {
+            $updated++;
+        } else {
+            $notFound[] = [
+                'field_id' => $fieldId,
+                'order' => $order,
+                'label' => $detail['CustomField']['Titolo'] ?? ''
+            ];
+        }
+    }
+
+    echo json_encode([
+        'success' => true,
+        'schema_id' => $schemaId,
+        'updated' => $updated,
+        'not_found' => $notFound
+    ]);
+} catch (Exception $e) {
+    http_response_code(500);
+
+    echo json_encode([
+        'success' => false,
+        'message' => $e->getMessage()
+    ]);
+}

public/userarea/update_xls_headers.php

@@ -6,22 +6,57 @@ error_reporting(E_ALL);
 
 require_once(__DIR__ . '/class/db-functions.php');
 
-$db = DBHandlerSelect::getInstance();
-$pdo = $db->getConnection();
-
-$data = json_decode(file_get_contents("php://input"), true);
-
-if (!$data || !isset($data['template_id'], $data['xls_headers'])) {
-    echo json_encode(["success" => false, "message" => "Invalid or missing data"]);
-    exit;
-}
-
-$templateId = $data['template_id'];
-$xlsHeaders = $data['xls_headers'];
-$headerRow = isset($data['header_row']) ? (int)$data['header_row'] : null;
-$startColumn = isset($data['start_column']) ? (int)$data['start_column'] : null;
-
 try {
+    $db = DBHandlerSelect::getInstance();
+    $pdo = $db->getConnection();
+
+    $data = json_decode(file_get_contents("php://input"), true);
+
+    if (!$data || !isset($data['template_id'], $data['xls_headers'])) {
+        echo json_encode(["success" => false, "message" => "Invalid or missing data"]);
+        exit;
+    }
+
+    $templateId = (int)$data['template_id'];
+    $xlsHeaders = $data['xls_headers'];
+
+    $headerRow = isset($data['header_row']) && $data['header_row'] !== ''
+        ? (int)$data['header_row']
+        : null;
+
+    $startColumn = isset($data['start_column']) && $data['start_column'] !== ''
+        ? (int)$data['start_column']
+        : null;
+
+    $xlsSheetIndex = isset($data['xls_sheet_index']) && $data['xls_sheet_index'] !== ''
+        ? (int)$data['xls_sheet_index']
+        : null;
+
+    if ($templateId <= 0) {
+        echo json_encode(["success" => false, "message" => "Invalid template ID"]);
+        exit;
+    }
+
+    if ($xlsHeaders === '') {
+        echo json_encode(["success" => false, "message" => "XLS headers cannot be empty"]);
+        exit;
+    }
+
+    if ($headerRow !== null && $headerRow <= 0) {
+        echo json_encode(["success" => false, "message" => "Header row must be greater than 0"]);
+        exit;
+    }
+
+    if ($startColumn !== null && $startColumn <= 0) {
+        echo json_encode(["success" => false, "message" => "Start column must be greater than 0"]);
+        exit;
+    }
+
+    if ($xlsSheetIndex !== null && $xlsSheetIndex < 0) {
+        echo json_encode(["success" => false, "message" => "XLS sheet number cannot be negative"]);
+        exit;
+    }
+
     $sql = "UPDATE excel_templates SET xls_headers = ?";
     $params = [$xlsHeaders];
 
@@ -29,11 +64,18 @@ try {
         $sql .= ", header_row = ?";
         $params[] = $headerRow;
     }
+
     if ($startColumn !== null) {
         $sql .= ", start_column = ?";
         $params[] = $startColumn;
     }
 
+    if ($xlsSheetIndex !== null) {
+        $sql .= ", xls_sheet_index = ?";
+        $params[] = $xlsSheetIndex;
+    }
+
+    $sql .= ", updated_at = NOW()";
     $sql .= " WHERE id = ?";
     $params[] = $templateId;
 
@@ -45,8 +87,18 @@ try {
         exit;
     }
 
-    echo json_encode(["success" => true, "message" => "XLS headers saved successfully"]);
+    echo json_encode([
+        "success" => true,
+        "message" => "XLS headers saved successfully",
+        "debug" => [
+            "template_id" => $templateId,
+            "header_row" => $headerRow,
+            "start_column" => $startColumn,
+            "xls_sheet_index" => $xlsSheetIndex
+        ]
+    ]);
 } catch (Exception $e) {
     echo json_encode(["success" => false, "message" => "Error: " . $e->getMessage()]);
 }
+
 exit;

public/userarea/validate_export.php

@@ -88,6 +88,58 @@ $validators[] = function (int $iddatadb, array $ctx): array {
     return [];
 };
 
+// 3. All LIMS-mandatory fields must be filled.
+$validators[] = function (int $iddatadb, array $ctx): array {
+    $record = $ctx['record'] ?? null;
+    if (!$record) {
+        return [];
+    }
+
+    $errors = [];
+
+    // Fixed fields (stored as columns in datadb)
+    foreach (($ctx['requiredFixed'] ?? []) as $key => $label) {
+        $col = $ctx['fixedAliasMap'][$key] ?? null;
+        $val = $col !== null ? ($record[$col] ?? null) : null;
+        if ($val === null || $val === '' || (int) $val === 0) {
+            $errors[] = [
+                'field'   => $key,
+                'message' => $label . ' è obbligatorio.',
+            ];
+        }
+    }
+
+    // Custom fields (values stored in import_data_details, keyed by mapping_id)
+    foreach (($ctx['requiredCustom'] ?? []) as $cf) {
+        $val = $ctx['customValues'][(int) $cf['mapping_id']] ?? null;
+        if ($val === null || trim((string) $val) === '') {
+            $errors[] = [
+                'field'   => 'field_label:' . $cf['field_label'],
+                'message' => rtrim($cf['field_label'], ': ') . ' è obbligatorio.',
+            ];
+        }
+    }
+
+    return $errors;
+};
+
+// Logical fixed_field_key - real datadb column (mirrors imported.php $fixedAliasMap)
+$fixedAliasMap = [
+    'ClienteResponsabile'      => 'cliente_responsabile_id',
+    'ClienteFornitore'         => 'cliente_fornitore_id',
+    'ClienteAnalisi'           => 'clienteAnalisi',
+    'MoltiplicatorePrezzo'     => 'moltiplicatore_prezzo_id',
+    'AnagraficaCertestObject'  => 'anagrafica_certest_object_id',
+    'AnagraficaCertestService' => 'anagrafica_certest_service_id',
+    'ConsegnaRichiesta'        => 'consegna_richiesta',
+];
+
+// Fixed keys NOT enforced by the generic mandatory check above:
+//  - ConsegnaRichiesta: handled by its dedicated validator (also checks the date)
+//  - ClienteFornitore / ClienteAnalisi: nullable placeholders, sent as null on
+//    export and accepted by LIMS.
+$skipRequiredFixed = ['ConsegnaRichiesta', 'ClienteFornitore', 'ClienteAnalisi'];
+
 // ── Main ────────────────────────────────────────────────────────────────────
 
 try {
@@ -104,9 +156,12 @@ try {
     $iddatadbList = array_column($rows, 'iddatadb');
     $placeholders = implode(',', array_fill(0, count($iddatadbList), '?'));
 
-    // Records (datadb) for fixed field validation
+    // Records (datadb) — templateid + fixed-field columns for mandatory validation
     $stmt = $pdo->prepare("
-        SELECT iddatadb, consegna_richiesta
+        SELECT iddatadb, templateid, consegna_richiesta,
+               cliente_responsabile_id, moltiplicatore_prezzo_id,
+               anagrafica_certest_object_id, anagrafica_certest_service_id,
+               cliente_fornitore_id, clienteAnalisi
         FROM datadb
         WHERE iddatadb IN ($placeholders)
     ");
@@ -128,6 +183,62 @@ try {
         $partsInfo[(int)$r['iddatadb']][] = $r;
     }
 
+    // Mandatory-field config per template
+    $templateIds = array_values(array_unique(array_filter(array_map(
+        fn ($r) => (int)($r['templateid'] ?? 0),
+        $recordsInfo
+    ))));
+
+    $requiredFixedByTemplate  = []; // template_id => [ fixed_field_key => label ]
+    $requiredCustomByTemplate = []; // template_id => [ { mapping_id, field_label }, ... ]
+
+    if (!empty($templateIds)) {
+        $tplPlaceholders = implode(',', array_fill(0, count($templateIds), '?'));
+
+        // Required fixed fields (is_required synced from LIMS ObbligatorioWeb)
+        $stmt = $pdo->prepare("
+            SELECT template_id, fixed_field_key
+            FROM template_fixed_mapping
+            WHERE template_id IN ($tplPlaceholders) AND is_required = 1
+        ");
+        $stmt->execute($templateIds);
+        foreach ($stmt->fetchAll(PDO::FETCH_ASSOC) as $r) {
+            $key = $r['fixed_field_key'];
+            if (in_array($key, $skipRequiredFixed, true)) {
+                continue;
+            }
+            $requiredFixedByTemplate[(int)$r['template_id']][$key] = $key;
+        }
+
+        // Required custom fields that are visible in the import grid
+        $stmt = $pdo->prepare("
+            SELECT id AS mapping_id, template_id, field_label
+            FROM template_mapping
+            WHERE template_id IN ($tplPlaceholders)
+              AND is_required = 1
+              AND is_visible_import = 1
+        ");
+        $stmt->execute($templateIds);
+        foreach ($stmt->fetchAll(PDO::FETCH_ASSOC) as $r) {
+            $requiredCustomByTemplate[(int)$r['template_id']][] = [
+                'mapping_id'  => (int)$r['mapping_id'],
+                'field_label' => $r['field_label'],
+            ];
+        }
+    }
+
+    // Custom field values per record (import_data_details.id is the FK to datadb)
+    $stmt = $pdo->prepare("
+        SELECT id AS iddatadb, mapping_id, field_value
+        FROM import_data_details
+        WHERE id IN ($placeholders)
+    ");
+    $stmt->execute($iddatadbList);
+    $customValuesByRecord = []; // iddatadb => [ mapping_id => field_value ]
+    foreach ($stmt->fetchAll(PDO::FETCH_ASSOC) as $r) {
+        $customValuesByRecord[(int)$r['iddatadb']][(int)$r['mapping_id']] = $r['field_value'];
+    }
+
     // ── Run validators per row ──────────────────────────────────────────────
 
     $results = [];
@@ -137,9 +248,15 @@ try {
         $index = $rowInfo['index'];
 
         // Build context for validators
+        $record    = $recordsInfo[$iddatadb] ?? null;
+        $templateId = (int)($record['templateid'] ?? 0);
         $ctx = [
-            'record' => $recordsInfo[$iddatadb] ?? null,
-            'parts'  => $partsInfo[$iddatadb] ?? [],
+            'record'         => $record,
+            'parts'          => $partsInfo[$iddatadb] ?? [],
+            'fixedAliasMap'  => $fixedAliasMap,
+            'requiredFixed'  => $requiredFixedByTemplate[$templateId]  ?? [],
+            'requiredCustom' => $requiredCustomByTemplate[$templateId] ?? [],
+            'customValues'   => $customValuesByRecord[$iddatadb] ?? [],
         ];
 
         $errors = [];