fix notices running on php-8.2

- Fix grid-top alignment and datepicker positioning
- Extend column resizer to grid-top cells
- Add sticky columns for Actions and Sample Description
- Implement input-to-textarea conversion on focus
- Increase Select2 dropdown height
- Improve grid-container CSS for sticky support

.env.example

@@ -7,9 +7,9 @@ LOG_CHANNEL=stack
 
 DB_CONNECTION=mysql
 DB_HOST="localhost"
-DB_DATABASE="trfcertest"
+DB_DATABASE="xxxx"
-DB_USERNAME="solocla"
+DB_USERNAME="xxxx"
-DB_PASSWORD="xxxxxxx"
+DB_PASSWORD="xxxxx"
 DB_PREFIX="auth_"
 
 BROADCAST_DRIVER=log
@@ -41,19 +41,8 @@ MIX_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"
 
 # Credenziali API VisualLims
 SIMULATE_EXPORT_LIMS=true
-API_BASE_URL=https://93.43.5.102/limsapi
+API_BASE_URL=https://bvcpsitaly-elims.com/limsapi
-API_USERNAME=xxxx
+API_USERNAME=WebApiUser
-API_PASSWORD=XXXX
+API_PASSWORD=webapiuser01
 
 BASE_URL=http://localhost:8000/userarea/
-
-# Credenziali ENTRAID
-
-AZURE_CLIENT_ID=your-client-id
-AZURE_CLIENT_SECRET=your-client-secret
-AZURE_REDIRECT_URI=https://your-app.com/auth/azure/callback
-AZURE_TENANT_ID=
-
-MICROSOFT_CLIENT_ID=your_client_id_here
-MICROSOFT_CLIENT_SECRET=your_client_secret_here  
-MICROSOFT_REDIRECT_URI="${APP_URL}/auth/microsoft/callback"

.gitignore

@@ -1,66 +1,55 @@
 .DS_Store
+
 /node_modules
-/public/hot
-/public/storage
-/storage/*.key
 /vendor
+
 /.idea
 /.fleet
 /.vscode
 /.vagrant
-Homestead.json
+
-Homestead.yaml
+/public/hot
-npm-debug.log
+/public/storage
-yarn-error.log
-.env
-.phpunit.result.cache
-.php_cs.cache
-/documentation
-/.phpunit.cache
 /public/build
+
+/storage/*.key
+
+.env
 .env.backup
 .env.production
 auth.json
-# File di debug e temporanei JSON e log
+
+.phpunit.result.cache
+.php_cs.cache
+/.phpunit.cache
+
+npm-debug.log
+yarn-error.log
+
+/documentation
+
+# --- Runtime / Debug (userarea) ---
 /public/userarea/*.json
 /public/userarea/*.log
 /public/userarea/*.txt
-
+/public/userarea/*_response.json
-# File di log nella sottocartella class
+/public/userarea/error_log.txt
+/public/userarea/import_debug.log
+/public/userarea/last_url.txt
+/public/userarea/logaspi/
+/public/userarea/logsapi/
+/public/userarea/photostrf/
 /public/userarea/class/*.log
+/public/userarea/class/curl_auth_debug.log
+/public/userarea/class/curl_request_debug.log
 
 # File XLSX temporanei importati
 /public/userarea/imported_trf/*.xlsx
 /public/userarea/xlstemplates/*.xlsx
 
-# Ignora cartelle di foto generate
+# Cartelle foto generate
 /public/photostrf/
 /public/photostrf/qrcodes/
-public/userarea/import_debug.log
-public/userarea/last_url.txt
-public/userarea/class/curl_auth_debug.log
-public/userarea/class/curl_request_debug.log
-public/userarea/last_url.txt
-public/userarea/class/curl_auth_debug.log
-public/userarea/class/curl_request_debug.log
 
-# Ignora tutti i log
+# Ignora tutti i log ovunque
 *.log
-
-
-# Ignora cartella photostrf in public/userarea
-/public/userarea/photostrf/
-public/userarea/customfield_values_response.json
-/public/userarea/logaspi/
-
-public/userarea/logsapi/campione_762_1.json
-public/userarea/logsapi/campione_763_1.json
-public/userarea/logsapi/campione_762_2.json
-public/userarea/logsapi/campione_763_2.json
-public/userarea/logsapi/commessaweb_create_762.json
-public/userarea/logsapi/commessaweb_create_763.json
-public/userarea/logsapi/commessaweb_customfields_762.json
-public/userarea/logsapi/commessaweb_customfields_763.json
-public/userarea/logsapi/commessaweb_invia_762.json
-public/userarea/logsapi/commessaweb_invia_763.json
-public/userarea/logsapi/last_auth_url.txt

public/userarea/add_part_quick.php

@@ -0,0 +1,91 @@
+<?php
+header('Content-Type: application/json');
+
+ini_set('display_errors', 1);
+error_reporting(E_ALL);
+
+require_once(__DIR__ . '/include/headscript.php'); // Auth + $iduserlogin + DBHandlerSelect
+
+try {
+    if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+        throw new Exception('Invalid request method');
+    }
+
+    $iddatadb = isset($_POST['iddatadb']) ? (int)$_POST['iddatadb'] : 0;
+
+    if ($iddatadb <= 0) {
+        throw new Exception('Missing iddatadb');
+    }
+
+    // ✅ Supporta sia singola stringa (con |) che array part_descriptions[]
+    $parts = [];
+
+    if (isset($_POST['part_descriptions']) && is_array($_POST['part_descriptions'])) {
+        $parts = $_POST['part_descriptions'];
+    } else {
+        $raw = isset($_POST['part_description']) ? (string)$_POST['part_description'] : '';
+        // split su "|" per multi-part
+        $parts = preg_split('/\s*\|\s*/', $raw);
+    }
+
+    // normalizza: trim + rimuovi vuoti + dedup
+    $cleanParts = [];
+    foreach ($parts as $p) {
+        $p = trim((string)$p);
+        if ($p === '') continue;
+
+        // limita lunghezza come da DB varchar(255)
+        if (mb_strlen($p) > 255) {
+            $p = mb_substr($p, 0, 255);
+        }
+        $cleanParts[] = $p;
+    }
+    $cleanParts = array_values(array_unique($cleanParts));
+
+    if (count($cleanParts) === 0) {
+        throw new Exception('Part description is empty');
+    }
+
+    $db = DBHandlerSelect::getInstance();
+    $pdo = $db->getConnection();
+
+    $pdo->beginTransaction();
+
+    try {
+        // prende il prossimo part_number per iddatadb
+        $stmtMax = $pdo->prepare("SELECT COALESCE(MAX(part_number), 0) AS maxnum FROM identification_parts WHERE iddatadb = ?");
+        $stmtMax->execute([$iddatadb]);
+        $nextNumber = (int)$stmtMax->fetchColumn() + 1;
+
+        $stmtIns = $pdo->prepare("
+            INSERT INTO identification_parts (iddatadb, part_number, part_description)
+            VALUES (?, ?, ?)
+        ");
+
+        $insertedIds = [];
+
+        foreach ($cleanParts as $p) {
+            $ok = $stmtIns->execute([$iddatadb, $nextNumber, $p]);
+            if (!$ok) {
+                throw new Exception('Insert failed');
+            }
+            $insertedIds[] = $pdo->lastInsertId();
+            $nextNumber++;
+        }
+
+        $pdo->commit();
+
+        echo json_encode([
+            'success' => true,
+            'message' => 'Parts added',
+            'count'   => count($insertedIds),
+            'ids'     => $insertedIds
+        ]);
+    } catch (Exception $e) {
+        if ($pdo->inTransaction()) $pdo->rollBack();
+        throw $e;
+    }
+} catch (Exception $e) {
+    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
+}
+exit;

public/userarea/error_log.txt

@@ -27,3 +27,288 @@
 2026-01-30 10:50:43 [AnagraficaCertestService] Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}
 2026-01-30 10:50:43 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}
 2026-01-30 11:09:22 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}
+2026-02-19 10:00:13 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}
+2026-02-19 10:00:42 [AnagraficaCertestObject] Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}
+2026-02-19 10:00:44 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}
+2026-02-23 10:44:04 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:42 [AnagraficaCertestService] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:42 [AnagraficaCertestObject] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:42 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:42 [AnagraficaCertestService] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:42 [AnagraficaCertestObject] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:42 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:42 [AnagraficaCertestService] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:42 [AnagraficaCertestObject] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:42 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:43 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:43 [AnagraficaCertestObject] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:43 [AnagraficaCertestService] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [AnagraficaCertestObject] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [AnagraficaCertestService] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [AnagraficaCertestObject] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [AnagraficaCertestService] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [AnagraficaCertestObject] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [AnagraficaCertestService] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:52 [AnagraficaCertestObject] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:44:53 [AnagraficaCertestService] Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:48:26 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:48:26 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:48:27 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:48:27 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:48:27 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:49:04 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:49:04 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:49:04 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:49:05 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 10:49:05 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 14:26:52 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 14:26:59 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 15:54:16 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 16:22:45 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-23 16:32:17 - Autenticazione fallita: HTTP 404, Errore cURL: , Risposta: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
+<HTML><HEAD><TITLE>Not Found</TITLE>
+<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
+<BODY><h2>Not Found</h2>
+<hr><p>HTTP Error 404. The requested resource is not found.</p>
+</BODY></HTML>
+
+2026-02-25 15:23:12 [AnagraficaCertestObject] Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}
+2026-02-26 15:01:32 [AnagraficaCertestObject] Autenticazione fallita: HTTP 400, Errore cURL: , Risposta: {"title":"Bad Request","status":400,"detail":"Cannot persist the object. It was modified or deleted (purged) by another application.","instance":"POST /api/authentication/authenticate","errorCode":"96bfc1252b"}

public/userarea/get_clienti.php

@@ -13,7 +13,7 @@ try {
 
     // Parametri OData
     $params = [
-        '$select' => 'IdCliente,Nominativo,CodiceNazioneFatturazione',
+        '$select' => 'IdCliente,Nominativo,CodiceCliente',
         '$orderby' => 'Nominativo asc'
     ];
 

public/userarea/get_moltiplicatoreprezzo.php

@@ -15,17 +15,31 @@ try {
     $endpoint = 'MoltiplicatorePrezzi';
 
     // Opzionale: parametri OData ($top, $filter, $orderby, ecc.)
-    $options = []; // es: ['$top' => 100]
+    $options = [
+        '$orderby' => 'Descrizione asc'
+    ];
 
     // Debug: salva URL usata
     $base_url = 'https://93.43.5.102/limsapi/api/odata/';
-    $query = http_build_query($options);
+    $queryParts = [];
+    foreach ($options as $k => $v) {
+        // mantieni il $ nella chiave, encoda solo il valore
+        $queryParts[] = $k . '=' . rawurlencode($v);
+    }
+    $query = implode('&', $queryParts);
     $full_url = $base_url . $endpoint . ($query ? '?' . $query : '');
     file_put_contents(__DIR__ . '/last_url.txt', $full_url . PHP_EOL, FILE_APPEND);
 
     // Chiamata API
     $data = $api->get($endpoint, $options);
-
+    // ✅ Force sort locally by "Descrizione" (A→Z)
+    if (isset($data['value']) && is_array($data['value'])) {
+        usort($data['value'], function ($a, $b) {
+            $da = isset($a['Descrizione']) ? trim((string)$a['Descrizione']) : '';
+            $db = isset($b['Descrizione']) ? trim((string)$b['Descrizione']) : '';
+            return strcasecmp($da, $db); // case-insensitive alphabetical
+        });
+    }
     // Salva il JSON in locale
     file_put_contents(__DIR__ . '/moltiplicatori_prezzo_response.json', json_encode($data, JSON_PRETTY_PRINT));
 

public/userarea/historical_trf.php

@@ -59,7 +59,8 @@ foreach ($allMappings as $mapping) {
     }
 }
 if (!$mainFieldMapping) {
-    $mainFieldMapping = reset(array_filter($allMappings, fn($m) => !$m['is_manual']));
+    $filtered = array_filter($allMappings, fn($m) => !$m['is_manual']);
+    $mainFieldMapping = reset($filtered);
 }
 
 // Retrieve data from datadb

public/userarea/import_insert.php

@@ -20,9 +20,10 @@ if ($_SERVER['REQUEST_METHOD'] !== 'POST' || !isset($_POST['template_id']) || !i
 
 $template_id = intval($_POST['template_id']);
 $selected_rows = array_map('intval', $_POST['selected_rows']);
-$columns = json_decode($_POST['columns'], true);
+$columns  = json_decode(urldecode($_POST['columns'] ?? '[]'), true);
-$rows = json_decode($_POST['rows'], true);
+$rows     = json_decode(urldecode($_POST['rows'] ?? '[]'), true);
-$excelrows = json_decode($_POST['excelrows'], true);
+$excelrows = json_decode(urldecode($_POST['excelrows'] ?? '[]'), true);
+
 $newFilename = htmlspecialchars($_POST['filename']);
 
 $_SESSION['template_id'] = $template_id;

public/userarea/import_xls2.php

@@ -121,6 +121,16 @@ error_log("Loaded template: " . print_r($template, true));
                 transform: rotate(360deg);
             }
         }
+
+        .column-filters th {
+            background: #ffffff;
+            cursor: default;
+        }
+
+        .column-filters input {
+            width: 100%;
+            min-width: 80px;
+        }
     </style>
     <title><?= htmlspecialchars($template['name']) ?> - <?= htmlspecialchars($titlewebsite, ENT_QUOTES, 'UTF-8'); ?></title>
 </head>
@@ -305,13 +315,12 @@ error_log("Loaded template: " . print_r($template, true));
                 let html = `
                 <form id="selectRowsForm" action="import_insert.php" method="POST">
                     <input type="hidden" name="template_id" value="${data.template_id}">
-                    <input type="hidden" name="columns" value='${JSON.stringify(data.columns)}'>
+                  <input type="hidden" name="columns" value="${encodeURIComponent(JSON.stringify(data.columns))}">
-                    <input type="hidden" name="rows" value='${JSON.stringify(data.rows)}'>
+                    <input type="hidden" name="rows" value="${encodeURIComponent(JSON.stringify(data.rows))}">
-                    <input type="hidden" name="excelrows" value='${JSON.stringify(data.excel_data.map(row => row.excelrow))}'>
+                    <input type="hidden" name="excelrows" value="${encodeURIComponent(JSON.stringify(data.excel_data.map(r => r.excelrow)))}">
+
                     <input type="hidden" name="filename" value="${data.filename}">
-                    <div class="search-container">
+
-                        <input type="text" id="searchInput" class="form-control" placeholder="Cerca nelle righe...">
-                    </div>
                     <div class="table-container">
                         <table class="table table-striped table-bordered">
                             <thead>
@@ -319,6 +328,17 @@ error_log("Loaded template: " . print_r($template, true));
                                     <th><input type="checkbox" id="selectAll"> Seleziona</th>
                                     ${data.columns.map(col => `<th>${col || 'Colonna senza nome'}<div class="resize-handle"></div></th>`).join('')}
                                 </tr>
+                                <tr class="column-filters">
+                                    <th></th>
+                                    ${data.columns.map((col, i) => `
+                                        <th>
+                                            <input type="text"
+                                                class="form-control form-control-sm column-filter"
+                                                data-col-index="${i}"
+                                                placeholder="Filter...">
+                                        </th>
+                                    `).join('')}
+                                </tr>
                             </thead>
                             <tbody>
                                 ${data.excel_data.map((row, index) => `
@@ -393,14 +413,39 @@ error_log("Loaded template: " . print_r($template, true));
                     }
                 });
 
-                const searchInput = document.getElementById('searchInput');
                 const rows = document.querySelectorAll('.table tbody tr');
+                const filterInputs = document.querySelectorAll('.column-filter');
 
-                searchInput.addEventListener('input', function() {
+                // Stato filtri: key = colIndex, value = testo
-                    const searchTerm = this.value.toLowerCase();
+                const activeFilters = {};
+
+                function applyColumnFilters() {
                     rows.forEach(row => {
-                        const text = Array.from(row.cells).slice(1).map(cell => cell.textContent.toLowerCase()).join(' ');
+                        // Le celle di data partono da index 1 (perché index 0 è checkbox)
-                        row.style.display = text.includes(searchTerm) ? '' : 'none';
+                        let visible = true;
+
+                        for (const [colIndexStr, filterValue] of Object.entries(activeFilters)) {
+                            const colIndex = parseInt(colIndexStr, 10); // 0..N-1 sulle colonne dati
+                            const cell = row.cells[colIndex + 1]; // +1 per saltare la colonna checkbox
+
+                            const cellText = (cell?.textContent || '').toLowerCase();
+                            const searchText = (filterValue || '').toLowerCase().trim();
+
+                            if (searchText && !cellText.includes(searchText)) {
+                                visible = false;
+                                break;
+                            }
+                        }
+
+                        row.style.display = visible ? '' : 'none';
+                    });
+                }
+
+                filterInputs.forEach(input => {
+                    input.addEventListener('input', function() {
+                        const colIndex = this.dataset.colIndex; // string
+                        activeFilters[colIndex] = this.value;
+                        applyColumnFilters();
                     });
                 });
 

public/userarea/include/headscript.php

@@ -35,8 +35,6 @@ $kindofrole = $user->present()->role_id;
 //$iduserlogin="1";
 //$nameuser="Claudio";
 //$emailuser="info@claudiosironi.com";
-?>
-<?php
 if (session_status() == PHP_SESSION_NONE) {
 	session_start();
 }
@@ -49,13 +47,8 @@ $_SESSION["emailuser"] = $emailuser;
 $_SESSION["photouser"] = $avatar;
 $photouser = $_SESSION["photouser"];
 $photousername = basename($avatar);
-?>
-
-
-<?php //include files
 
+//include files
 require_once(__DIR__ . '/../../languages/en/general.php');
 
 //include("generalsettings.php");
-
-?>

public/userarea/mapping_template_xls_scheme2.php

@@ -21,7 +21,7 @@ $schemajson = $template['schemajson'] ? json_decode($template['schemajson'], tru
 $isSchemajsonEmpty = empty(trim($template['schemajson']));
 
 // Recupera i campi dalla tabella template_mapping
-$stmt = $pdo->prepare("SELECT id, field_id, excel_column, is_manual, manual_default, data_type, is_required, default_value, has_list, length, decimals, min_value, max_value, default_curr_date, tablename, field_label, main_field, is_visible_import FROM template_mapping WHERE template_id = ?");
+$stmt = $pdo->prepare("SELECT id, field_id, excel_column, is_manual, manual_default, auto_value, data_type, is_required, default_value, has_list, length, decimals, min_value, max_value, default_curr_date, tablename, field_label, main_field, is_visible_import, is_visible_parts FROM template_mapping WHERE template_id = ?");
 $stmt->execute([$id]);
 $mappings = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
@@ -108,6 +108,14 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
         .select2-container {
             width: 100% !important;
         }
+
+        /* Make Title column narrower + ellipsis */
+        #schemaFieldsTable td.title-col {
+            max-width: 320px;
+            white-space: nowrap;
+            overflow: hidden;
+            text-overflow: ellipsis;
+        }
     </style>
 </head>
 
@@ -157,9 +165,10 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
                                 <table id="schemaFieldsTable" class="table table-striped">
                                     <thead>
                                         <tr>
-                                            <th style="width:100px; text-align:center;">Main</th>
+                                            <th style="width:90px; text-align:center;">Main</th>
-                                            <th style="width:120px; text-align:center;">Visible on Import</th>
+                                            <th style="width:110px; text-align:center;">Import</th>
-                                            <th>Title</th>
+                                            <th style="width:110px; text-align:center;">Parts</th>
+                                            <th style="width:320px;">Title</th>
                                             <th style="width:140px;">Type</th>
                                             <th>Mapping</th>
                                             <th>Default Value</th>
@@ -169,6 +178,7 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
 
 
 
+
                                     <tbody id="schemaFieldsBody">
                                         <?php foreach ($mappings as $mapping): ?>
                                             <tr>
@@ -185,22 +195,34 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
                                                         data-mapping-id="<?php echo (int)$mapping['id']; ?>"
                                                         <?php echo ((int)($mapping['is_visible_import'] ?? 1) === 1) ? 'checked' : ''; ?>>
                                                 </td>
+                                                <td class="text-center">
+                                                    <input type="checkbox"
+                                                        class="visible-parts-checkbox"
+                                                        data-mapping-id="<?php echo (int)$mapping['id']; ?>"
+                                                        <?php echo ((int)($mapping['is_visible_parts'] ?? 0) === 1) ? 'checked' : ''; ?>>
+                                                </td>
 
-                                                <td>
+
+                                                <td class="title-col">
                                                     <?php echo htmlspecialchars($mapping['field_label'] ?? 'N/A'); ?>
                                                     <?php if ((int)$mapping['is_required'] === 1): ?>
                                                         <span class="badge bg-danger ms-2">Required</span>
                                                     <?php endif; ?>
                                                 </td>
 
+
                                                 <td><?php echo htmlspecialchars($mapping['data_type'] ?? 'N/A'); ?></td>
 
                                                 <td>
                                                     <?php
                                                     $isSceltaMultipla = ($mapping['data_type'] === 'SceltaMultipla');
+
+                                                    $autoValue = $mapping['auto_value'] ?? 'none';
+                                                    $hasAuto = ($autoValue && $autoValue !== 'none');
+
                                                     $mappingValue = $isSceltaMultipla
                                                         ? 'manual'
-                                                        : ($mapping['excel_column'] ? 'xls' : ((int)$mapping['is_manual'] === 1 ? 'manual' : ''));
+                                                        : ($hasAuto ? 'auto' : ($mapping['excel_column'] ? 'xls' : ((int)$mapping['is_manual'] === 1 ? 'manual' : '')));
                                                     ?>
 
                                                     <select class="form-select mapping-select"
@@ -211,6 +233,7 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
                                                         <?php if (!$isSceltaMultipla): ?>
                                                             <option value="">Select Option</option>
                                                             <option value="xls" <?php echo ($mappingValue === 'xls') ? 'selected' : ''; ?>>Map to XLS Column</option>
+                                                            <option value="auto" <?php echo ($mappingValue === 'auto') ? 'selected' : ''; ?>>Auto value</option>
                                                         <?php endif; ?>
 
                                                         <option value="manual" <?php echo ($mappingValue === 'manual') ? 'selected' : ''; ?>>Manual Entry</option>
@@ -222,6 +245,16 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
                                                         <?php echo $mapping['excel_column'] ? 'data-current-xls="' . htmlspecialchars($mapping['excel_column']) . '"' : ''; ?>>
                                                     </select>
 
+                                                    <select class="form-select auto-value-select"
+                                                        style="display:<?php echo ($mappingValue === 'auto') ? 'block' : 'none'; ?>; margin-top:6px;"
+                                                        data-id="<?php echo (int)$mapping['id']; ?>">
+                                                        <option value="none">Select auto value</option>
+                                                        <option value="import_date" <?php echo ($autoValue === 'import_date') ? 'selected' : ''; ?>>Current date (import)</option>
+                                                        <option value="import_time" <?php echo ($autoValue === 'import_time') ? 'selected' : ''; ?>>Current time (import)</option>
+                                                        <option value="export_date" <?php echo ($autoValue === 'export_date') ? 'selected' : ''; ?>>Current date (export)</option>
+                                                        <option value="export_time" <?php echo ($autoValue === 'export_time') ? 'selected' : ''; ?>>Current time (export)</option>
+                                                    </select>
+
                                                     <?php if (!empty($mapping['excel_column'])): ?>
                                                         <span class="mapped-column" style="margin-left:5px;">
                                                             (<?php echo htmlspecialchars($mapping['excel_column']); ?>)
@@ -248,7 +281,7 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
                                                             class="form-control manual-default"
                                                             placeholder="Default value"
                                                             value="<?php echo htmlspecialchars($mapping['manual_default'] ?? ''); ?>"
-                                                            style="display:<?php echo ((int)$mapping['is_manual'] === 1) ? 'block' : 'none'; ?>"
+                                                            style="display:<?php echo ($mappingValue === 'manual') ? 'block' : 'none'; ?>"
                                                             data-field-id="<?php echo (int)$mapping['field_id']; ?>">
                                                     <?php endif; ?>
                                                 </td>
@@ -665,6 +698,61 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
 
             loadDropdownsWithOverlay();
 
+            // =======================
+            // SAVE: SceltaMultipla dropdown (Select2-safe)
+            // =======================
+
+            // 1) listener nativo a livello document (più robusto del delegation su tbody)
+            document.addEventListener('change', function(event) {
+                const el = event.target;
+                if (!(el && el.matches && el.matches('select.manual-default.dropdown-select'))) return;
+
+                const tr = el.closest('tr');
+                const mappingId =
+                    el.getAttribute('data-id') ||
+                    tr?.querySelector('.mapping-select')?.getAttribute('data-id');
+
+                const xlsSelect = tr?.querySelector('.xls-columns');
+
+                console.log('[SceltaMultipla change] saving', {
+                    mappingId,
+                    value: el.value
+                });
+
+                if (!mappingId) {
+                    console.error('❌ Missing mappingId for SceltaMultipla dropdown');
+                    return;
+                }
+
+                saveMapping(mappingId, 'manual', el.value, xlsSelect ? xlsSelect.value : null);
+            });
+
+            // 2) eventi Select2 (quando Select2 “mangia” il change)
+            if (window.jQuery) {
+                $(document).on('select2:select select2:clear', 'select.manual-default.dropdown-select', function() {
+                    const el = this;
+                    const tr = el.closest('tr');
+                    const mappingId =
+                        el.getAttribute('data-id') ||
+                        tr?.querySelector('.mapping-select')?.getAttribute('data-id');
+
+                    const xlsSelect = tr?.querySelector('.xls-columns');
+
+                    console.log('[SceltaMultipla select2] saving', {
+                        mappingId,
+                        value: el.value
+                    });
+
+                    if (!mappingId) {
+                        console.error('❌ Missing mappingId for SceltaMultipla dropdown (select2)');
+                        return;
+                    }
+
+                    saveMapping(mappingId, 'manual', el.value, xlsSelect ? xlsSelect.value : null);
+                });
+            }
+
+
             async function loadClientAndSchemaNames() {
                 if (<?php echo json_encode($template['idclient'] ?? 0); ?> > 0) {
                     let response = await fetch(`get_clienti.php?id=<?php echo $template['idclient']; ?>`);
@@ -729,27 +817,57 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
                     let mappingId = event.target.getAttribute('data-id');
                     let xlsSelect = tr.querySelector('.xls-columns');
                     let manualInput = tr.querySelector('.manual-default');
+                    let autoSelect = tr.querySelector('.auto-value-select');
                     let mappedColumn = tr.querySelector('.mapped-column');
                     let removeBtn = tr.querySelector('.remove-xls');
                     if (event.target.value === 'xls') {
                         xlsSelect.style.display = 'block';
+                        if (autoSelect) autoSelect.style.display = 'none';
+
                         manualInput.style.display = 'none';
                         manualInput.value = '';
+
                         if (mappedColumn) mappedColumn.style.display = 'none';
                         if (removeBtn) removeBtn.style.display = xlsSelect.value ? 'inline-block' : 'none';
+
                     } else if (event.target.value === 'manual') {
                         xlsSelect.style.display = 'none';
+                        if (autoSelect) autoSelect.style.display = 'none';
+
                         manualInput.style.display = 'block';
+
                         if (mappedColumn) mappedColumn.style.display = 'none';
                         if (removeBtn) removeBtn.style.display = 'none';
-                    } else {
+
+                    } else if (event.target.value === 'auto') {
                         xlsSelect.style.display = 'none';
+                        xlsSelect.value = ''; // libera UI
+
                         manualInput.style.display = 'none';
                         manualInput.value = '';
+
+                        if (mappedColumn) mappedColumn.style.display = 'none';
+                        if (removeBtn) removeBtn.style.display = 'none';
+
+                        if (autoSelect) autoSelect.style.display = 'block';
+
+                    } else {
+                        xlsSelect.style.display = 'none';
+                        if (autoSelect) autoSelect.style.display = 'none';
+
+                        manualInput.style.display = 'none';
+                        manualInput.value = '';
+
                         if (mappedColumn) mappedColumn.style.display = 'none';
                         if (removeBtn) removeBtn.style.display = 'none';
                     }
-                    saveMapping(mappingId, event.target.value, manualInput.value, xlsSelect.value);
+                    saveMapping(
+                        mappingId,
+                        event.target.value,
+                        manualInput.value,
+                        xlsSelect.value,
+                        autoSelect ? autoSelect.value : null
+                    );
                     updateXlsDropdowns();
                 } else if (event.target.classList.contains('main-field-checkbox')) {
                     const checkbox = event.target;
@@ -822,19 +940,65 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
                             console.error("❌ Fetch error:", error);
                             checkbox.checked = !checkbox.checked;
                         });
+                } else if (event.target.classList.contains('visible-parts-checkbox')) {
+                    const checkbox = event.target;
+                    const mappingId = checkbox.dataset.mappingId;
+                    const value = checkbox.checked ? 1 : 0;
+
+                    fetch('update_visible_parts.php', {
+                            method: 'POST',
+                            headers: {
+                                'Content-Type': 'application/json'
+                            },
+                            body: JSON.stringify({
+                                template_id: <?php echo $id; ?>,
+                                mapping_id: mappingId,
+                                value: value
+                            })
+                        })
+                        .then(response => response.json())
+                        .then(data => {
+                            if (!data.success) {
+                                console.error("❌ Error updating is_visible_parts:", data.message);
+                                checkbox.checked = !checkbox.checked;
                             }
+                        })
+                        .catch(error => {
+                            console.error("❌ Fetch error:", error);
+                            checkbox.checked = !checkbox.checked;
+                        });
+                }
+
             });
 
             // Salva lo stato originale dei checkbox al caricamento
             document.querySelectorAll('.main-field-checkbox').forEach(cb => {
                 cb.dataset.originalChecked = cb.checked;
             });
+            // AUTO VALUE select change -> save auto_value
+            document.getElementById('schemaFieldsBody').addEventListener('change', function(event) {
+                if (!event.target.classList.contains('auto-value-select')) return;
 
+                const tr = event.target.closest('tr');
+                const mappingId = event.target.getAttribute('data-id');
+
+                const xlsSelect = tr.querySelector('.xls-columns');
+                const manualInput = tr.querySelector('.manual-default');
+
+                saveMapping(
+                    mappingId,
+                    'auto',
+                    manualInput ? manualInput.value : '',
+                    xlsSelect ? xlsSelect.value : null,
+                    event.target.value
+                );
+            });
             document.getElementById('schemaFieldsBody').addEventListener('change', function(event) {
                 if (event.target.classList.contains('xls-columns')) {
                     let tr = event.target.closest('tr');
                     let mappingId = event.target.getAttribute('data-id');
                     let manualInput = tr.querySelector('.manual-default');
+                    let autoSelect = tr.querySelector('.auto-value-select');
                     let mappedColumn = tr.querySelector('.mapped-column');
                     let removeBtn = tr.querySelector('.remove-xls');
 
@@ -875,6 +1039,10 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
                         mappedColumn.style.display = event.target.value ? 'inline' : 'none';
                     }
                     if (removeBtn) removeBtn.style.display = event.target.value ? 'inline-block' : 'none';
+                    const mappingSelect = tr.querySelector('.mapping-select');
+                    if (mappingSelect && mappingSelect.value !== 'xls') {
+                        return; // non salvare XLS se non siamo in modalità XLS
+                    }
                     saveMapping(mappingId, 'xls', manualInput.value, event.target.value);
                     updateXlsDropdowns();
                 }
@@ -926,7 +1094,7 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
                 }
             });
 
-            function saveMapping(mappingId, mappingType, defaultValue, excelColumn) {
+            function saveMapping(mappingId, mappingType, defaultValue, excelColumn, autoValue) {
                 console.log("Saving mapping:", {
                     id: mappingId,
                     mapping_type: mappingType,
@@ -943,6 +1111,7 @@ $xlsHeaders = $template['xls_headers'] ? json_decode($template['xls_headers'], t
                             mapping_type: mappingType,
                             excel_column: mappingType === 'xls' ? excelColumn : null,
                             manual_default: mappingType === 'manual' ? defaultValue : null,
+                            auto_value: mappingType === 'auto' ? (autoValue || 'none') : 'none',
                             tablename: "<?php echo $template['target_table']; ?>"
                         })
                     }).then(response => response.json())

public/userarea/save_edited_row.php

@@ -12,11 +12,23 @@ try {
 
     $iddatadb = intval($_POST['iddatadb']);
     $idclient = isset($_POST['idclient']) ? (is_numeric($_POST['idclient']) ? intval($_POST['idclient']) : null) : null;
+
     $db  = DBHandlerSelect::getInstance();
     $pdo = $db->getConnection();
 
     // ---------------- FIXED FIELDS (template_fixed_mapping) ----------------
 
+    // ALIAS: fixed_field_key "logico" -> colonna reale su datadb
+    // (NON tocchiamo MySQL, gestiamo solo qui la traduzione)
+    $fixedAliasMap = [
+        'ClienteResponsabile'      => 'cliente_responsabile_id',
+        'MoltiplicatorePrezzo'     => 'moltiplicatore_prezzo_id',
+        'AnagraficaCertestObject'  => 'anagrafica_certest_object_id',
+        'AnagraficaCertestService' => 'anagrafica_certest_service_id',
+        'ClienteFornitore'         => 'cliente_fornitore_id',
+        'ConsegnaRichiesta'        => 'consegna_richiesta',
+    ];
+
     // 1) Recupera templateid dalla riga datadb (serve per sapere quali fixed_field_key sono permessi)
     $stmtTpl = $pdo->prepare("SELECT templateid FROM datadb WHERE iddatadb = ?");
     $stmtTpl->execute([$iddatadb]);
@@ -36,15 +48,16 @@ try {
     $fxStmt->execute([$templateId]);
     $fixedList = $fxStmt->fetchAll(PDO::FETCH_ASSOC);
 
-    // 3) Crea whitelist: key => metadata
+    // 3) Crea whitelist LOGICA: fixed_field_key => metadata
     $fixedWhitelist = [];
     foreach ($fixedList as $fx) {
         $k = (string)$fx['fixed_field_key'];
 
-        // sicurezza: nome colonna ammesso solo se "safe" (no spazi, no caratteri strani)
+        // sicurezza: key ammessa solo se "safe"
         if (!preg_match('/^[a-zA-Z0-9_]+$/', $k)) {
             continue;
         }
+
         $fixedWhitelist[$k] = [
             'data_type'     => (string)$fx['data_type'], // INT | DATE
             'is_required'   => (int)$fx['is_required'],
@@ -52,7 +65,20 @@ try {
         ];
     }
 
+    // 3b) Crea whitelist REALE: colonna datadb reale => metadata
+    $realWhitelist = [];
+    foreach ($fixedWhitelist as $logicalKey => $meta) {
+        $realCol = $fixedAliasMap[$logicalKey] ?? $logicalKey;
 
+        // sicurezza: anche la colonna reale deve essere "safe"
+        if (!preg_match('/^[a-zA-Z0-9_]+$/', $realCol)) {
+            continue;
+        }
+
+        $realWhitelist[$realCol] = $meta;
+    }
+
+    // ---------------- DETAILS (import_data_details) ----------------
     $data = $_POST;
     $details = [];
 
@@ -101,7 +127,7 @@ try {
         }
     }
 
-    // 5. Aggiorna datadb: idclient + FIXED FIELDS (whitelisted)
+    // ---------------- UPDATE datadb: idclient + FIXED FIELDS ----------------
     $setParts = [];
     $params   = [];
 
@@ -111,13 +137,33 @@ try {
         $params[]   = $idclient;
     }
 
-    // 5b) fixed fields dal POST (solo quelli presenti nella whitelist del template)
+    // 5b) fixed fields dal POST
-    foreach ($fixedWhitelist as $col => $meta) {
+    // QUI è il punto chiave: accettiamo SOLO colonne reali (realWhitelist),
-        if (!array_key_exists($col, $_POST)) {
+    // ma se dal JS arrivassero ancora key logiche, funzionerebbe uguale
-            continue; // non inviato dal form
+    // perché sotto controlliamo anche l'alias.
+    foreach ($realWhitelist as $realCol => $meta) {
+
+        $postKeyToRead = null;
+
+        // Caso 1: POST contiene già la colonna reale
+        if (array_key_exists($realCol, $_POST)) {
+            $postKeyToRead = $realCol;
+        } else {
+            // Caso 2: POST contiene la key logica -> troviamo quale logica mappa su questa colonna reale
+            // (fallback, utile se non hai ancora aggiornato il JS)
+            foreach ($fixedAliasMap as $logical => $mappedReal) {
+                if ($mappedReal === $realCol && array_key_exists($logical, $_POST)) {
+                    $postKeyToRead = $logical;
+                    break;
+                }
+            }
         }
 
-        $val = $_POST[$col];
+        if ($postKeyToRead === null) {
+            continue; // non inviato
+        }
+
+        $val = $_POST[$postKeyToRead];
 
         // Normalizzazione per tipo
         if ($meta['data_type'] === 'DATE') {
@@ -128,13 +174,14 @@ try {
             $val = ($val === '') ? null : (int)$val;
         }
 
-        $setParts[] = "`$col` = ?";
+        $setParts[] = "`$realCol` = ?";
         $params[]   = $val;
     }
 
     // esegui update solo se c'è qualcosa da aggiornare
     if (!empty($setParts)) {
         $params[] = $iddatadb;
+
         $sqlUpd = "UPDATE datadb SET " . implode(", ", $setParts) . " WHERE iddatadb = ?";
         $updStmt = $pdo->prepare($sqlUpd);
         $updStmt->execute($params);
@@ -151,7 +198,6 @@ try {
         $response['message'] = "No changes found";
     }
 
-
     $response['success'] = true;
     $response['changed'] = $changed; // Debug / optional
 

public/userarea/save_mapping_json.php

@@ -20,19 +20,82 @@ $mappingId = $data['id'];
 $mappingType = $data['mapping_type'] ?? '';
 $excelColumn = $data['excel_column'] ?? null;
 $manualDefault = $data['manual_default'] ?? null;
+
+$autoValue = $data['auto_value'] ?? 'none';
 $tablename = $data['tablename'] ?? '';
 
 try {
-    $stmt = $pdo->prepare("UPDATE template_mapping SET is_manual = ?, excel_column = ?, manual_default = ? WHERE id = ?");
+    // Normalize mapping type
-    $isManual = ($mappingType === 'manual') ? 1 : 0;
+    $allowedTypes = ['', 'xls', 'manual', 'auto'];
-    $result = $stmt->execute([$isManual, $excelColumn, $manualDefault, $mappingId]);
+    if (!in_array($mappingType, $allowedTypes, true)) {
+        echo json_encode(["success" => false, "message" => "Invalid mapping_type"]);
+        exit;
+    }
+
+    // Normalize auto_value
+    $allowedAuto = ['none', 'import_date', 'import_time', 'export_date', 'export_time'];
+    if (!in_array($autoValue, $allowedAuto, true)) {
+        $autoValue = 'none';
+    }
+
+    // Decide what to persist based on mapping_type
+    $isManual = 0;
+    $excelToSave = null;
+    $manualToSave = null;
+    $autoToSave = 'none';
+
+    if ($mappingType === 'xls') {
+        $isManual = 0;
+        $excelToSave = $excelColumn ?: null;
+        $manualToSave = null;
+        $autoToSave = 'none';
+    } elseif ($mappingType === 'manual') {
+        $isManual = 1;
+        $excelToSave = null;
+        $manualToSave = $manualDefault;
+        $autoToSave = 'none';
+    } elseif ($mappingType === 'auto') {
+        $isManual = 0;
+        $excelToSave = null;
+        $manualToSave = null;
+        $autoToSave = $autoValue ?: 'none';
+    } else {
+        // reset
+        $isManual = 0;
+        $excelToSave = null;
+        $manualToSave = null;
+        $autoToSave = 'none';
+    }
+
+    $stmt = $pdo->prepare("
+    UPDATE template_mapping
+    SET
+        is_manual = ?,
+        excel_column = ?,
+        manual_default = ?,
+        auto_value = ?
+    WHERE id = ?
+");
+
+    $result = $stmt->execute([$isManual, $excelToSave, $manualToSave, $autoToSave, $mappingId]);
 
     if (!$result) {
         echo json_encode(["success" => false, "message" => "Database update failed"]);
         exit;
     }
 
-    echo json_encode(["success" => true, "message" => "Mapping updated successfully", "data" => $data]); // Aggiunto debug
+    echo json_encode([
+        "success" => true,
+        "message" => "Mapping updated successfully",
+        "saved" => [
+            "id" => (int)$mappingId,
+            "mapping_type" => $mappingType,
+            "is_manual" => $isManual,
+            "excel_column" => $excelToSave,
+            "manual_default" => $manualToSave,
+            "auto_value" => $autoToSave
+        ]
+    ]);
 } catch (Exception $e) {
     echo json_encode(["success" => false, "message" => "Error: " . $e->getMessage()]);
 }

public/userarea/schemi_base_response.json

@@ -1,5 +1,5 @@
 {
-    "@odata.context": "https:\/\/93.43.5.102\/limsapi\/api\/odata\/$metadata#SchemaCustomField",
+    "@odata.context": "https:\/\/bvcpsitaly-elims.com\/limsapi\/api\/odata\/$metadata#SchemaCustomField",
     "value": [
         {
             "IdSchemaCustomFields": 41,
@@ -460,7 +460,7 @@
         {
             "IdSchemaCustomFields": 129,
             "ConteggioClienti": 0,
-            "Nome": "Carhartt",
+            "Nome": "Z_Carhartt",
             "Descrizione": "SCHEMA DA UTILIZZARE SOLO PER RICHIESTE UFFICIALI CARHARTT\r\n\r\n\r\n"
         },
         {
@@ -864,6 +864,18 @@
             "ConteggioClienti": 0,
             "Nome": "HERMES PAP FEMME",
             "Descrizione": "Schema per tutti i campioni di HERMES PAP FEMME \r\n15\/01\/2025\r\n\r\n\r\n"
+        },
+        {
+            "IdSchemaCustomFields": 200,
+            "ConteggioClienti": 0,
+            "Nome": "CARHARTT ( provvisiorio in revisione)",
+            "Descrizione": "Schema per tutti i campioni CARHARTT provvissorio\r\n\r\n"
+        },
+        {
+            "IdSchemaCustomFields": 201,
+            "ConteggioClienti": 0,
+            "Nome": "ROSSIMODA",
+            "Descrizione": "Per tutti i campioni di ROSSIMODA\r\n\r\n"
         }
     ]
 }

public/userarea/update_visible_parts.php

@@ -0,0 +1,31 @@
+<?php
+require_once 'include/headscript.php';
+
+header('Content-Type: application/json');
+
+$data = json_decode(file_get_contents('php://input'), true);
+
+$template_id = isset($data['template_id']) ? (int)$data['template_id'] : 0;
+$mapping_id  = isset($data['mapping_id']) ? (int)$data['mapping_id'] : 0;
+$value       = isset($data['value']) ? (int)$data['value'] : null;
+
+// Validate input
+if ($template_id <= 0 || $mapping_id <= 0 || $value === null) {
+    echo json_encode(['success' => false, 'message' => 'Invalid input']);
+    exit;
+}
+
+// Normalize to 0/1
+$value = ($value === 1) ? 1 : 0;
+
+$db = DBHandlerSelect::getInstance();
+$pdo = $db->getConnection();
+
+$stmt = $pdo->prepare("UPDATE template_mapping SET is_visible_parts = ? WHERE id = ? AND template_id = ?");
+$result = $stmt->execute([$value, $mapping_id, $template_id]);
+
+if ($result) {
+    echo json_encode(['success' => true]);
+} else {
+    echo json_encode(['success' => false, 'message' => 'Failed to update is_visible_parts']);
+}